In Gridbox component for Joomla versions prior to 2.20.4.2 a critical severity vulnerability CVE-2026-102788 was detected. This vulnerability allows an unauthenticated attacker to inject SQL commands through the sort-by parameter on store product list pages. To address this issue, users should upgrade Gridbox to version 2.20.4.2 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-102788.
Read more CMSIn Mautic versions 7.0.0 and later prior to 7.2.2 a critical severity vulnerability CVE-2026-115188 was detected. This vulnerability allows an authenticated user to upload arbitrary files, including server-side scripts, and execute code on the server. To address this issue, users should upgrade Mautic to version 7.2.2 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-115188.
Read more Marketing AutomationIn Consul (consul-k8s) versions 0.42.0 and later prior to 2.1.0 and 1.8.18 a critical severity vulnerability CVE-2026-110720 was detected. This vulnerability allows an attacker to obtain elevated Consul privileges. To address this issue, users should upgrade consul-k8s to version 2.1.0 or 1.8.18 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-110720.
Read more NetworkingIn Rancher versions prior to 2.15.3, 2.14.7, 2.13.11, 2.12.15, and 2.11.19 a critical severity vulnerability CVE-2026-88811 was detected. This vulnerability allows Rancher credentials passed through the meta proxy to be leaked to cloud providers. To address this issue, users should upgrade Rancher to version 2.15.3, 2.14.7, 2.13.11, 2.12.15, or 2.11.19 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-88811.
Read more Developer ToolsIn DJ-Classifieds component for Joomla versions prior to 3.11.3 a critical severity vulnerability CVE-2026-105604 was detected. This vulnerability allows an unauthenticated attacker to inject SQL commands through the frontend search. To address this issue, users should upgrade DJ-Classifieds to version 3.11.3 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-105604.
Read more CMSIn Gitea versions prior to 28.2.0 a high severity vulnerability CVE-2026-109553 was detected. This vulnerability allows an attacker to authenticate as another user by registering that user’s public key as their own principal when a user certificate authority is trusted. To address this issue, users should upgrade Gitea to version 28.2.0 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-109553.
Read more Developer Tools