Thursday, October 29, 2026
EnglishEnglishРусскийEspañolFrançaisPortuguêsالعربية
The Global WireHorizon Global News

Credited outlet

vuldb.com

17 stories written by The Global Wire newsroom from reporting first published by vuldb.com. Full credit for the original reporting belongs to them.

Visit vuldb.com →

Stories credited to vuldb.com

TechnologySource: vuldb.com

Critical Type Confusion Flaw Identified in Microsoft Edge Web Browser

Security researchers have registered a critical vulnerability in Microsoft Edge that allows remote exploitation through type confusion in versions up to 148.0.3967.70.

TechnologySource: vuldb.com

Security Flaws in Rust SSH Library 'russh' Expose Systems to Resource Exhaustion

Two vulnerabilities affecting versions of the Eugeny russh library up to 0.64.x allow resource consumption attacks via channel transmission and agent server routines.

Flaw in AWS Multi Model Server Exposes Inference Infrastructure to Request Forgery
TechnologySource: vuldb.com

Flaw in AWS Multi Model Server Exposes Inference Infrastructure to Request Forgery

A vulnerability documented in Amazon Web Services Multi Model Server up to version 1.1.11 allows server-side request forgery through its model download mechanism.

Security Disclosures Reveal Multiple Flaws in Open-Source Clinic Software
TechnologySource: vuldb.com

Security Disclosures Reveal Multiple Flaws in Open-Source Clinic Software

Three security flaws identified in a clinical management application highlight risks around unencrypted patient registration and appointment scheduling.

TechnologySource: vuldb.com

Flaws in Real Estate Plugin Expose WordPress Sites to Data Leaks

Two vulnerabilities identified in the Easy Property Listings plugin for WordPress allow remote attackers to extract sensitive data via public interface endpoints.

Multiple SQL Injection Flaws Uncovered in Open-Source Exam Management Platform
TechnologySource: vuldb.com

Multiple SQL Injection Flaws Uncovered in Open-Source Exam Management Platform

Security advisories identify three SQL injection vulnerabilities affecting core database components in the open-source Online-Examination-System codebase.

JeecgBoot Up to Version 3.9.5 Vulnerable to Multiple Authentication Bypass Flaws
TechnologySource: vuldb.com

JeecgBoot Up to Version 3.9.5 Vulnerable to Multiple Authentication Bypass Flaws

Security repository VulDB has disclosed three missing authentication flaws in JeecgBoot up to version 3.9.5, impacting tenant controllers, user role queries, and system announcemen…

Flaws in Canva Affinity up to Version 3.3.0 Prompt Patch Recommendations
TechnologySource: vuldb.com

Flaws in Canva Affinity up to Version 3.3.0 Prompt Patch Recommendations

Cybersecurity database VulDB details three out-of-bounds memory vulnerabilities impacting Canva Affinity document parsing, QuickLook, and thumbnail rendering.

VulDB Identifies Dual Authorization Flaws in Grimmory Software
TechnologySource: vuldb.com

VulDB Identifies Dual Authorization Flaws in Grimmory Software

Security database VulDB has documented two access control vulnerabilities, cataloged as CVE-2026-93954 and CVE-2026-93955, affecting Grimmory releases up to versions 3.3.3 and 3.4.…

TechnologySource: vuldb.com

Cybersecurity Database Logs Four Vulnerability Advisories Across Apple Operating Systems

Database records published by VulDB detail remote memory corruption, improper authorization, and local permission issues affecting Apple platforms.

Security Vulnerability Cataloged in MySQL MCP Server Threatens Internal Databases
TechnologySource: vuldb.com

Security Vulnerability Cataloged in MySQL MCP Server Threatens Internal Databases

A security flaw in MySQL MCP Server up to version 0.4.1 exposes local endpoints to DNS rebinding attacks via Server-Sent Events transport, according to reporting by VulDB.

TP-Link Archer AX55 Router Affected by EasyMesh Buffer Overflow Vulnerability
TechnologySource: vuldb.com

TP-Link Archer AX55 Router Affected by EasyMesh Buffer Overflow Vulnerability

A stack-based overflow in the EasyMesh component of TP-Link's Archer AX55 router, cataloged as CVE-2026-18167, poses potential memory execution risks for network equipment.

Security Vulnerability CVE-2026-75757 Identified in Ash Project Administration Interface
TechnologySource: vuldb.com

Security Vulnerability CVE-2026-75757 Identified in Ash Project Administration Interface

A cookie authorization defect in the ash_admin package affects versions up to 1.3.0, prompting upgrade recommendations for Elixir developers.

TechnologySource: vuldb.com

Three Access Control Flaws Discovered in TOTOLINK T6 Mesh Routers

Security advisory repository VulDB has cataloged two critical and one lower-severity access control vulnerabilities in TOTOLINK T6 router firmware.

TechnologySource: vuldb.com

Critical Memory Corruption Vulnerability Discovered in GNU glibc Tree Function

A newly cataloged vulnerability in the GNU C Library's tdelete function permits remote memory corruption across Linux systems, though no public exploit code is currently available.

Security flaw documented in Narrative Publisher plugin for WordPress
TechnologySource: vuldb.com

Security flaw documented in Narrative Publisher plugin for WordPress

A cross-site scripting vulnerability indexed as CVE-2026-16273 affects Narrative Publisher plugin versions up to 1.0.7 on WordPress.

Security Flaw Identified in WordPress Frontend File Manager Extension
TechnologySource: vuldb.com

Security Flaw Identified in WordPress Frontend File Manager Extension

A cross-site request forgery vulnerability designated CVE-2026-16292 affects versions up to 23.6 of the popular software.