In Zabbix a medium severity vulnerability CVE-2026-23937 was detected. This vulnerability allows authenticated users to extract a host’s PSK key leading to potential loss of data integrity. To address this issue, users should upgrade Zabbix to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-23937.
Read more Monitoring
In Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21 a medium severity vulnerability CVE-2026-16044 was detected. This vulnerability allows a board member to escalate a guest user to Board Admin via importing a crafted .boardarchive file. To address this issue, users should upgrade Mattermost to version 10.11.22 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-16044.
Read more Communication
In openssl_encrypt component for Python versions before 1.4.0 a high severity vulnerability CVE-2026-74874 was detected. This vulnerability allows attackers who know the password to predict pixel locations and extract hidden data. To address this issue, users should upgrade openssl_encrypt to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-74874.
Read more Application Development
In Mattermost versions 11.7.6 and earlier, and 11.8.3 and earlier a medium severity vulnerability CVE-2026-15754 was detected. This vulnerability allows an authenticated team administrator to remove ABAC policy assignments from channels outside their team. To address this issue, users should upgrade Mattermost to version 11.7.7 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-15754.
Read more Communication
In Mattermost versions 11.7.6 and earlier, and 10.11.21 and earlier a medium severity vulnerability CVE-2026-16046 was detected. This vulnerability allows a run participant to modify the details of completed playbook runs. To address this issue, users should upgrade Mattermost to version 10.11.22 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-16046.
Read more Communication
In Mattermost versions 11.7.x <= 11.7.6 and 10.11.x <= 10.11.21 a medium severity vulnerability CVE-2026-16044 was detected. This vulnerability allows a board member to escalate a guest user to Board Admin by importing a crafted archive file. To address this issue, users should upgrade Mattermost to version 10.11.22 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-16044.
Read more Communication
In Contact Form, Survey, Quiz & Popup Form Builder – ARForms component for WordPress versions 1.8.5 and earlier a critical severity vulnerability CVE-2024-13784 was detected. This vulnerability allows unauthenticated attackers to inject a PHP Object. To address this issue, users should upgrade Contact Form, Survey, Quiz & Popup Form Builder – ARForms to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-13784.
Read more CMS
In WooMS component for WordPress versions 9.14 and earlier a medium severity vulnerability CVE-2026-13700 was detected. This vulnerability allows unauthenticated attackers to perform Server-Side Request Forgery and disclose configured integration credentials. To address this issue, users should upgrade WooMS to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-13700.
Read more CMS
In openssl_encrypt component for Python versions before 1.4.0 a critical severity vulnerability CVE-2026-74895 was detected. This vulnerability allows attackers to execute malicious plugins with unrestricted access to the filesystem, network, and subprocesses. To address this issue, users should upgrade openssl_encrypt to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-74895.
Read more Application Development