Our news and updates

In AcyMailing component for Joomla versions before 10.11.1 a high severity vulnerability CVE-2026-56292 was detected. This vulnerability allows unauthorized database access and data leakage. To address this issue, users should upgrade AcyMailing to version 10.11.1 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-56292.

In guardrails-detectors component for OpenShift in older versions a medium severity vulnerability CVE-2026-15154 was detected. This vulnerability allows a remote attacker to cause a denial of service. To address this issue, users should upgrade OpenShift to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-15154.

In AMP for WP – Accelerated Mobile Pages component for WordPress versions 1.1.12 and earlier a high severity vulnerability CVE-2026-6101 was detected. This vulnerability allows attackers to write arbitrary files to the server. To address this issue, users should upgrade AMP for WP – Accelerated Mobile Pages to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-6101.

In Django versions 6.0 before 6.0.7 and 5.2 before 5.2.16 a medium severity vulnerability CVE-2026-53877 was detected. This vulnerability allows an attacker to disclose adjacent memory or cause service degradation. To address this issue, users should upgrade Django to version 5.2.16 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-53877.

In Django versions 6.0 before 6.0.7 and 5.2 before 5.2.16 a medium severity vulnerability CVE-2026-53878 was detected. This vulnerability allows for potential header injection attacks. To address this issue, users should upgrade Django to version 5.2.16 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-53878.

In Website Builder by SeedProd – Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode component for WordPress versions 6.20.2 and earlier a medium severity vulnerability CVE-2025-14785 was detected. This vulnerability allows authenticated attackers to inject arbitrary web scripts. To address this issue, users should upgrade Website Builder by SeedProd – Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-14785.

In Django versions 6.0 before 6.0.7 and 5.2 before 5.2.16 a low severity vulnerability CVE-2026-48588 was detected. This vulnerability allows remote attackers to read private data from the shared cache. To address this issue, users should upgrade Django to version 5.2.16 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-48588.

In Terraform a high severity vulnerability CVE-2026-14468 was detected. This vulnerability allows an authenticated user to include files from outside the intended repository content in a module and then download them, potentially exposing sensitive files. To address this issue, users should upgrade Terraform to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-14468.

In vLLM versions before 0.24.0 a high severity vulnerability CVE-2026-54234 was detected. This vulnerability allows a remote attacker to crash the engine worker, causing a denial of service. To address this issue, users should upgrade vLLM to version 0.24.0 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-54234.