CVE-2026-48836 - Unauthenticated Remote Code Execution (RCE) in Easy Invoice <= 2.1.19 versions.

CVE-2026-40772 - Unauthenticated Arbitrary File Upload in GeekyBot <= 1.2.2 versions.

CVE-2026-52704 - Improper Control of Generation of Code ('Code Injection') vulnerability in Edgar Rojas WooCommerce P

CVE-2026-48558 - SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass v

CVE-2026-50086 - The Aqara IAM/SSO gateway (gw-builder.aqara.com) exposes bidirectional AES round-trups against the p

CVE-2026-47208 - vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, VM2 suffers from a sandbox br

CVE-2026-47140 - vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, NodeVM blocks several dangero

CVE-2026-47137 - vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, the fix for GHSA-8hg8-63c5-gw

CVE-2026-47131 - vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, by combining Buffer.call.call

CVE-2026-49261 - MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11