Our news and updates

In Nexus Repository a high severity vulnerability CVE-2026-11403 was detected. This vulnerability allows a remote attacker to gain unauthorized access to repository operations. To address this issue, users should upgrade Nexus Repository to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-11403.

In the Git provider component for Apache Airflow versions 0.4.0 and earlier a high severity vulnerability CVE-2026-58065 was detected. This vulnerability allows a man-in-the-middle attacker to intercept credentials and inject malicious content. To address this issue, users should upgrade the Git provider to version 0.4.1 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-58065.

In Avada (Fusion) Builder component for WordPress versions 3.15.5 and earlier a medium severity vulnerability CVE-2026-12536 was detected. This vulnerability allows authenticated attackers to inject arbitrary web scripts. To address this issue, users should upgrade Avada (Fusion) Builder to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-12536.

In OpenShift earlier versions a high severity vulnerability CVE-2026-15584 was detected. This vulnerability allows an attacker to escalate privileges and gain root access on cluster nodes. To address this issue, users should upgrade OpenShift to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-15584.

In Apache Airflow versions prior to 3.7.2 a high severity vulnerability CVE-2026-59245 was detected. This vulnerability allows a low-privileged user to escalate privileges and gain read/edit access to all DAGs. To address this issue, users should upgrade Apache Airflow to version 3.7.2 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-59245.

In Smart Slider 3 component for WordPress versions 3.5.1.37 and earlier a medium severity vulnerability CVE-2026-12385 was detected. This vulnerability allows authenticated attackers to extract titles and full content excerpts of various types of posts. To address this issue, users should upgrade Smart Slider 3 to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-12385.

In Breeze Cache component for WordPress versions before 2.5.6 a medium severity vulnerability CVE-2026-10551 was detected. This vulnerability allows an attacker to inject arbitrary HTML attributes in the final HTML output. To address this issue, users should upgrade Breeze Cache to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-10551.

In User Registration & Membership component for WordPress versions before 5.2.2 a critical severity vulnerability CVE-2026-11964 was detected. This vulnerability allows unauthenticated attackers to forge a payment-approved event and activate a paid membership without completing a real payment. To address this issue, users should upgrade User Registration & Membership to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-11964.

In Database for Contact Form 7, WPforms, Elementor forms WordPress plugin component for WordPress versions before 1.5.2 a medium severity vulnerability CVE-2026-12081 was detected. This vulnerability allows unauthenticated users to inject arbitrary PHP objects. To address this issue, users should upgrade Database for Contact Form 7, WPforms, Elementor forms WordPress plugin to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-12081.