Our news and updates

In previous versions of OpenShift a high severity vulnerability CVE-2026-50237 was detected. This vulnerability allows an attacker to bypass tenant egress restrictions. To address this issue, users should upgrade OpenShift to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-50237.

In Portainer versions CE 2.44.0 and earlier a high severity vulnerability CVE-2026-72533 was detected. This vulnerability allows authenticated low-privileged users to bypass Docker proxy authorization checks. To address this issue, users should upgrade Portainer to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-72533.

In Authentik versions 2026.5.6 and earlier a high severity vulnerability CVE-2026-72534 was detected. This vulnerability allows an attacker to gain superuser privileges. To address this issue, users should upgrade Authentik to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-72534.

In OpenShift a high severity vulnerability CVE-2026-50237 was detected. This vulnerability allows a namespace tenant to make the console fetch an arbitrary URL, bypassing tenant egress restrictions. To address this issue, users should upgrade OpenShift to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-50237.

In Dolibarr versions up to 23.0.4 a medium severity vulnerability CVE-2026-77686 was detected. This vulnerability allows a remote attacker to bypass authorization checks, potentially leading to unauthorized access or modification of account details. This occurs due to an improper authorization flaw within the Account Handler component, specifically in the htdocs/user/card.php file. By manipulating the ID argument in the request, an attacker can access or alter resources belonging to other users. Warning: A public exploit for this vulnerability is available and could be used in active attacks. To address this issue, users should upgrade Dolibarr to version 24.0.0 or later, or apply the official patch (commit b2a2c995537cb6282383b5e903cb5ffa29b823e6). For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-77686.

In FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More component for WordPress versions 1.9.2 and earlier a high severity vulnerability CVE-2025-15028 was detected. This vulnerability allows unauthenticated attackers to inject arbitrary web scripts in pages. To address this issue, users should upgrade FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-15028.

In Accelerate theme component for WordPress versions 1.5.3 and earlier a medium severity vulnerability CVE-2025-9266 was detected. This vulnerability allows authenticated attackers, with Subscriber-level access and above, to install and activate the ThemeGrill Demo Importer plugin. To address this issue, users should upgrade Accelerate theme to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-9266.

In Ad Inserter – Ad Manager & AdSense Ads component for WordPress versions 2.8.16 and earlier a medium severity vulnerability CVE-2026-11983 was detected. This vulnerability allows unauthenticated attackers to view restricted ad block content. To address this issue, users should upgrade Ad Inserter – Ad Manager & AdSense Ads to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-11983.

In Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX component for WordPress versions 5.0.13 and earlier a medium severity vulnerability CVE-2026-5158 was detected. This vulnerability allows authenticated attackers with Contributor-level access to inject arbitrary web scripts. To address this issue, users should upgrade Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-5158.