In OpenWebUI versions before 0.10.0 a high severity vulnerability CVE-2026-59214 was detected. This vulnerability allows attackers to execute server-side code through configured tools via authenticated same-origin requests. To address this issue, users should upgrade OpenWebUI to version 0.10.0 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-59214.
Read more SecurityIn guardrails-detectors component for OpenShift in older versions a medium severity vulnerability CVE-2026-15154 was detected. This vulnerability allows a remote attacker to cause a denial of service. To address this issue, users should upgrade OpenShift to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-15154.
Read more Developer ToolsIn AcyMailing component for Joomla versions before 10.11.1 a high severity vulnerability CVE-2026-56292 was detected. This vulnerability allows unauthorized database access and data leakage. To address this issue, users should upgrade AcyMailing to version 10.11.1 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-56292.
Read more CMSIn NATS versions prior to 2.14.3 and 2.12.12 a medium severity vulnerability CVE-2026-58214 was detected. This vulnerability allows authenticated users to bypass subscription permissions and access sensitive metadata. To address this issue, users should upgrade NATS to version 2.12.12 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-58214.
Read more Application DevelopmentIn Zeek versions before 8.0.9 a high severity vulnerability CVE-2026-60109 was detected. This vulnerability allows unauthenticated remote attackers to cause a denial of service. To address this issue, users should upgrade Zeek to version 8.0.9 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-60109.
Read more SecurityIn Website Builder by SeedProd – Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode component for WordPress versions 6.20.2 and earlier a medium severity vulnerability CVE-2025-14785 was detected. This vulnerability allows authenticated attackers to inject arbitrary web scripts. To address this issue, users should upgrade Website Builder by SeedProd – Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-14785.
Read more CMS