Aggregator

Submit #769867 / VDB-351109

Submit #769866 / VDB-351109

Submit #769865 / VDB-351109

Submit #769864 / VDB-351109

Submit #769858 / VDB-351108

Submit #769857 / VDB-351108

Submit #769856 / VDB-351108

Submit #769855 / VDB-351108

Submit #769854 / VDB-351107

Submit #769853 / VDB-351106

ИИ запускает, IoT усиливает, группы координируются.

A vulnerability described as critical has been identified in D-Link DIR-823G 1.0.2B05. The affected element is the function GetDDNSSettings/GetDeviceDomainName/GetDeviceSettings/GetDMZSettings/GetFirewallSettings/GetGuestNetworkSettings/GetLanWanConflictInfo/GetLocalMacAddress/GetNetworkSettings/GetQoSSettings/GetRouterInformationSettings/GetRouterLanSettings/GetWanSettings/SetAccessCtlList/SetAccessCtlSwitch/SetDeviceSettings/SetGuestWLanSettings/SetIPv4FirewallSettings/SetNetworkSettings/SetNetworkTomographySettings/SetNTPServerSettings/SetRouterLanSettings/SetStaticClientInfo/SetStaticRouteSettings/SetWLanRadioSecurity/SetWPSSettings/UpdateClientInfo of the component goahead. Such manipulation leads to improper access controls. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is traded as CVE-2026-4193. The attack may be launched remotely. Furthermore, there is an exploit available. Restrictive firewalling should be applied.

Submit #769839 / VDB-351105

Submit #769841 / VDB-351105

Submit #769838 / VDB-351105

Submit #769837 / VDB-351105

Submit #769836 / VDB-351105

Submit #769835 / VDB-351105

A vulnerability marked as critical has been reported in wickedplugins Wicked Folders Plugin up to 4.1.0 on WordPress. Impacted is the function delete_folders. This manipulation causes authorization bypass. This vulnerability appears as CVE-2026-1883. The attack may be initiated remotely. There is no available exploit.

A vulnerability labeled as critical has been found in wedevs User Frontend Plugin up to 4.2.8 on WordPress. This issue affects the function draft_post. The manipulation of the argument post_id results in missing authorization. This vulnerability is reported as CVE-2026-2233. The attack can be launched remotely. No exploit exists.