In Cal.com OSS a critical severity vulnerability CVE-2026-16624 was detected. This vulnerability allows any authenticated user to steal sensitive booking data, including attendee PII and video-call passwords, from any team. To address this issue, users should upgrade Cal to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-16624.
Read more Productivity
In Cal a critical severity vulnerability CVE-2026-16624 was detected. This vulnerability allows any authenticated user to create a webhook on any team and steal booking data. To address this issue, users should upgrade Cal to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-16624.
Read more Productivity
In MongoDB versions prior to 8.0.28 a medium severity vulnerability CVE-2026-13064 was detected. This vulnerability allows attackers to cause resource exhaustion through specially crafted queries. To address this issue, users should upgrade MongoDB to version 8.0.28 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-13064.
Read more Database
In MongoDB versions before 8.2.12 a medium severity vulnerability CVE-2026-13063 was detected. This vulnerability allows an authenticated user to cause a denial of service. To address this issue, users should upgrade MongoDB to version 8.2.12 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-13063.
Read more Database
In the Quix Page Builder component for Joomla versions prior to 6.2.1 a high severity vulnerability CVE-2026-60027 was detected. This vulnerability allows unauthenticated users to read arbitrary files via path traversal. To address this issue, users should upgrade Quix Page Builder to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-60027.
Read more CMS
In Quix Page Builder component for Joomla versions 6.2.1 and earlier a medium severity vulnerability CVE-2026-60029 was detected. This vulnerability allows authenticated users to perform a stored cross-site scripting (XSS) attack. To address this issue, users should upgrade Quix Page Builder to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-60029.
Read more CMS
In Quix Page Builder component for Joomla versions before 6.2.1 a high severity vulnerability CVE-2026-60030 was detected. This vulnerability allows authenticated users to upload media files regardless of their media management permissions. To address this issue, users should upgrade Quix Page Builder to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-60030.
Read more CMS
In Wazuh versions prior to 4.14.5 a high severity vulnerability CVE-2026-28220 was detected. This vulnerability allows an authenticated actor to execute arbitrary code on the master node. To address this issue, users should upgrade Wazuh to version 4.14.5 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-28220.
Read more Security
In HAProxy versions 3.2.x through 3.3.2 a low severity vulnerability CVE-2026-26080 was detected. This vulnerability allows an attacker to cause a denial of service. To address this issue, users should upgrade HAProxy to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-26080.
Read more Application Development