Security Operations
Threat Intelligence
❓
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-120238 CVE-2026-120238 - A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This affects the function sub_4162A8 of the file /bin/ CRITICAL 9.9 Unknown 1 Details
CVE-2026-120237 CVE-2026-120237 - A flaw has been found in ag-ui-protocol ag-ui up to 0.0.58. Affected by this issue is the function isInterruptExpired of MEDIUM 4.3 Unknown 1 Details
CVE-2026-74760 CVE-2026-74760 - Google::Auth versions from 0.11 through 0.12 for Perl accept an authorization code from any local process because the gc INFORMATIONAL - google Unknown 1 Details
CVE-2026-74759 CVE-2026-74759 - Google::Auth versions 0.12 for Perl allow server side request forgery via unvalidated credential_source URLs in AWS exte INFORMATIONAL - googleaws Unknown 1 Details
CVE-2026-120236 CVE-2026-120236 - A vulnerability was detected in ag-ui-protocol ag-ui up to 0.0.58. Affected by this vulnerability is an unknown function MEDIUM 6.3 Unknown 1 Details
CVE-2026-66570 CVE-2026-66570 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nickboss WordPress HIGH 7.1 wordpress Unknown 1 Details
CVE-2026-62048 CVE-2026-62048 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / Stell CRITICAL 9.3 Unknown 1 Details
CVE-2026-120338 CVE-2026-120338 - Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a Deno CRITICAL 10.0 Unknown 1 Details
CVE-2026-120235 CVE-2026-120235 - A security vulnerability has been detected in ag-ui-protocol ag-ui up to 0.0.58. Affected is the function parseSSEStream MEDIUM 4.3 Unknown 1 Details
CVE-2026-120234 CVE-2026-120234 - A weakness has been identified in ag-ui-protocol ag-ui up to 0.0.58. This impacts the function e.text of the component H MEDIUM 4.3 Unknown 1 Details
CVE-2026-120233 CVE-2026-120233 - A security flaw has been discovered in ag-ui-protocol ag-ui up to 0.0.58. This affects an unknown function of the file s MEDIUM 5.3 Unknown 1 Details
CVE-2026-119480 CVE-2026-119480 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Crocoblock JetFormBuilde MEDIUM 6.5 Unknown 1 Details
CVE-2026-120232 CVE-2026-120232 - A vulnerability was identified in Horizon DataSys Reboot Restore Standard up to 13.2. The impacted element is the functi HIGH 8.8 Unknown 1 Details
CVE-2026-120231 CVE-2026-120231 - A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. The affected element is the function sub_416568 of th CRITICAL 9.9 Unknown 1 Details
CVE-2026-120230 CVE-2026-120230 - A vulnerability was found in WAVLINK WN701AE 260105. Impacted is the function del_vlan_group of the component ioos Web B CRITICAL 9.9 Unknown 1 Details
CVE-2026-120229 CVE-2026-120229 - A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This issue affects the function sub_416B50 of the file CRITICAL 9.1 Unknown 1 Details
CVE-2026-120228 CVE-2026-120228 - A flaw has been found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_416D88 of the file CRITICAL 9.9 Unknown 1 Details
CVE-2026-117680 CVE-2026-117680 - Improper Check for Unusual or Exceptional Conditions vulnerability in the pattern and patternProperties keywords in lud INFORMATIONAL - Unknown 1 Details
CVE-2026-120308 CVE-2026-120308 - A Beta9 tenant can attach a volume when deploying a function, endpoint, or task queue. The gateway builds the host path CRITICAL 9.9 Unknown 1 Details
CVE-2026-120307 CVE-2026-120307 - The Beta9 worker serves the sandbox file API from outside the container. getHostPathFromContainerPath turns the tenant's CRITICAL 9.9 Unknown 1 Details