# CVEs published 2026-10-09

317 CVEs were published on October 9, 2026: 38 critical, 149 high. Days are UTC.

- [CVE-2026-108474](https://cve.now/CVE-2026-108474.md): In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions (CVSS 9.8, JetBrains Exposed)
- [CVE-2026-22061](https://cve.now/CVE-2026-22061.md): CVE-2026-22061 Debug Log Information Disclosure Vulnerability in Trident (CVSS 8.2, NetApp Trident)
- [CVE-2026-108269](https://cve.now/CVE-2026-108269.md): ra-tls-clients: RA-TLS challenge verifier accepted quotes not bound to the TLS session (CVSS 9.1, Privasys ra-tls-clients)
- [CVE-2026-108268](https://cve.now/CVE-2026-108268.md): enclave-os-virtual: RA-TLS challenge certificates were not bound to the TLS session (CVSS 9.1, Privasys enclave-os-virtual)
- [CVE-2026-108267](https://cve.now/CVE-2026-108267.md): Privasys Go fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session (CVSS 9.1, Privasys go)
- [CVE-2026-108266](https://cve.now/CVE-2026-108266.md): Privasys rustls fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session (CVSS 9.1, Privasys rustls)
- [CVE-2026-108265](https://cve.now/CVE-2026-108265.md): enclave-os-mini: RA-TLS challenge certificates were not bound to the TLS session (CVSS 9.1, Privasys enclave-os-mini)
- [CVE-2026-108264](https://cve.now/CVE-2026-108264.md): Wizarr: Authenticated Server-Side Template Injection (SSTI) in wizard step rendering leads to Remote Code Execution (RCE) (CVSS 9.1, wizarrrr wizarr)
- [CVE-2026-62376](https://cve.now/CVE-2026-62376.md): Vikunja: Plaintext storage of password-reset/email-confirm tokens in database enables account takeover on DB read access (CVSS 8.1, go-vikunja vikunja · code.vikunja.io/api)
- [CVE-2026-62367](https://cve.now/CVE-2026-62367.md): Vikunja: OIDC email-fallback account linking ignores email\_verified, enabling local-account takeover (CVSS 7.5, go-vikunja vikunja · code.vikunja.io/api)
- [CVE-2026-108263](https://cve.now/CVE-2026-108263.md): Astron Agent: Unsandboxed code-node leads to cross-tenant RCE (CVSS 9.9, iflytek astron-agent)
- [CVE-2026-57458](https://cve.now/CVE-2026-57458.md): Vikunja: Scoped API token can mint unrestricted OAuth session credentials (CVSS 8.1, go-vikunja vikunja · code.vikunja.io/api)
- [CVE-2026-108261](https://cve.now/CVE-2026-108261.md): TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment (CVSS 9.3, tinacms · @tinacms app +1)
- [CVE-2026-108260](https://cve.now/CVE-2026-108260.md): @tinacms/web-components: \`tina-markdown\` writes rich-text link URLs into \`href\` without scheme validation, allowing stored XSS (CVSS 7.6, tinacms · @tinacms web-components +1)
- [CVE-2026-92705](https://cve.now/CVE-2026-92705.md): Aegisub executes arbitrary code through automatically loaded Automation scripts (CVSS 7.8, TypesettingTools Aegisub)
- [CVE-2026-108259](https://cve.now/CVE-2026-108259.md): Tina: Code injection via unescaped Git branch name in generated client source (CVSS 8.2, tinacms · @tinacms cli +1)
- [CVE-2026-108258](https://cve.now/CVE-2026-108258.md): Shiny for Python - Path traversal in bookmark restore (CVSS 6.9, posit-dev py-shiny · shiny)
- [CVE-2026-107857](https://cve.now/CVE-2026-107857.md): Mindwtr: Cloud token and WebDAV password stored in plaintext on mobile (CVSS 4.4, dongdongbh Mindwtr)
- [CVE-2026-107856](https://cve.now/CVE-2026-107856.md): CiviForm: Trusted-Intermediary IDOR discloses any citizen's name and email (CVSS 4.5, civiform)
- [CVE-2026-107854](https://cve.now/CVE-2026-107854.md): Jexactyl: Free-billing order endpoint renews and unsuspends arbitrary servers by ID (missing ownership check) (CVSS 5.4, Jexactyl)
- [CVE-2026-107852](https://cve.now/CVE-2026-107852.md): Jexactyl: Stripe checkout confirmation accepts mismatched-currency/amount payments as full payment (payment forgery) (CVSS 7.1, Jexactyl)
- [CVE-2026-107851](https://cve.now/CVE-2026-107851.md): Contao: Improper access control in the table access voter (CVSS 4.3, contao · contao/core-bundle)
- [CVE-2026-107850](https://cve.now/CVE-2026-107850.md): Contao: Improper access control in the preview links module (CVSS 4.3, contao · contao/core-bundle)
- [CVE-2026-107848](https://cve.now/CVE-2026-107848.md): Contao: Cross-site request forgery in custom backend actions (CVSS 3.5, contao · contao/core-bundle)
- [CVE-2026-107845](https://cve.now/CVE-2026-107845.md): Contao: Cross-site scripting in the comments bundle (CVSS 9.3, contao · contao/comments-bundle)
- [CVE-2026-107844](https://cve.now/CVE-2026-107844.md): Contao: Path traversal in the images controller (CVSS 5.3, contao · contao/core-bundle)
- [CVE-2026-107843](https://cve.now/CVE-2026-107843.md): Contao: The registration module re-sends activation mails on any unauthenticated POST, with no throttle and no captcha check (CVSS 5.3, contao · contao/core-bundle)
- [CVE-2026-107842](https://cve.now/CVE-2026-107842.md): Contao: Protected page content is disclosed to anonymous visitors after contao.search.index\_protected is disabled (CVSS 5.3, contao · contao/core-bundle)
- [CVE-2026-107841](https://cve.now/CVE-2026-107841.md): pacioli: A submit consent marker licensed cancellation of caller-named pre-existing documents (CVSS 5.7, john-broadway pacioli · pacioli-guard)
- [CVE-2026-108096](https://cve.now/CVE-2026-108096.md): Improper authorization in query resolvers for SQL-backed models in AWS Amplify API Category (CVSS 6.5, aws-amplify/graphql-index-transformer · aws-amplify/grap… +1)
- [CVE-2026-107840](https://cve.now/CVE-2026-107840.md): yopass Prometheus metrics middleware allows remote memory exhaustion through unbounded method labels (CVSS 7.5, jhaals yopass · github.com/jhaals/yopass)
- [CVE-2026-107839](https://cve.now/CVE-2026-107839.md): ageLANServer: Unbounded JSON Array Allocation in AoE3 Cloud \`getFileURL\` Endpoint Leads to Remote Denial of Service (CVSS 7.5, luskaner ageLANServer · github.com/luskaner/ageLANServer/se…)
- [CVE-2026-107838](https://cve.now/CVE-2026-107838.md): RIOT: nanocoap\_fileserver ignores response initialization failure, leading to reachable assertion (CVSS 7.5, RIOT-OS RIOT)
- [CVE-2026-107837](https://cve.now/CVE-2026-107837.md): RIOT: Out-of-Bounds Read in RIOT OS 6LoWPAN SFF Fragment Handling (CVSS 8.2, RIOT-OS RIOT)
- [CVE-2026-107836](https://cve.now/CVE-2026-107836.md): RIOT: nanoCoAP Block2 client slice handling underflows on inconsistent server-controlled block size (CVSS 7.1, RIOT-OS RIOT)
- [CVE-2026-107835](https://cve.now/CVE-2026-107835.md): OWASP Coraza WAF: Cookie Parser Confusion (CVSS 4.0, corazawaf coraza · github.com/corazawaf/coraza/v3 +2)
- [CVE-2026-107824](https://cve.now/CVE-2026-107824.md): x64dbg-MCP Server exposes debugger operations to unauthenticated network clients (CVSS 9.3, duty1g x64dbg-mcp-server)
- [CVE-2026-107820](https://cve.now/CVE-2026-107820.md): x64dbg-MCP Server vulnerable to pre-authentication denial of service through Content-Length integer overflow (CVSS 5.3, duty1g x64dbg-mcp-server)
- [CVE-2026-107834](https://cve.now/CVE-2026-107834.md): OWASP Coraza WAF: Resource exhaustion via deferred file handle accumulation in multipart body processor (CVSS 5.3, corazawaf coraza · github.com/corazawaf/coraza/v3 +2)
- [CVE-2026-107833](https://cve.now/CVE-2026-107833.md): OWASP Coraza WAF: Unbounded recursion in JSON response body processor causes CPU exhaustion (CVSS 5.9, corazawaf coraza · github.com/corazawaf/coraza/v3 +2)
- [CVE-2026-107826](https://cve.now/CVE-2026-107826.md): OWASP Coraza WAF: JSON body processor: argument-limit truncation reopens an unbounded-depth gjson.Valid stack overflow (process crash) (CVSS 7.5, corazawaf coraza · github.com/corazawaf/coraza/v3 +2)
- [CVE-2026-107825](https://cve.now/CVE-2026-107825.md): OWASP Coraza WAF: ProcessURI silently drops QUERY\_STRING and ARGS\_GET on URI parse failure — defense-in-depth bypass for non-net/http integrations (CVSS 4.0, corazawaf coraza · github.com/corazawaf/coraza/v3 +2)
- [CVE-2026-107823](https://cve.now/CVE-2026-107823.md): MariaDB: privilege escalation via incorrect view frm parsing (CVSS 7.2, MariaDB server · mariadb +2)
- [CVE-2026-107822](https://cve.now/CVE-2026-107822.md): MariaDB: database privilege escalation via user / role name collision in the acl cache (CVSS 6.4, MariaDB server · mariadb +2)
- [CVE-2026-107821](https://cve.now/CVE-2026-107821.md): MariaDB: insufficient validation of binary frm data when opening a table (CVSS 8.0, MariaDB server · mariadb +2)
- [CVE-2026-107819](https://cve.now/CVE-2026-107819.md): MariaDB Connector/C: libmariadb allowed cleartext password leakage on TLS hostname verification failure (CVSS 5.9, MariaDB server)
- [CVE-2026-107818](https://cve.now/CVE-2026-107818.md): MariaDB: environment injection via wsrep bootstrap in the mariadb.service file (CVSS 8.4, MariaDB server · mariadb +2)
- [CVE-2026-107817](https://cve.now/CVE-2026-107817.md): MariaDB: mysql\_json plugin OOB reads (CVSS 4.4, MariaDB server · mariadb +2)
- [CVE-2026-107816](https://cve.now/CVE-2026-107816.md): MariaDB: \`qc\_info\` plugin can do OOB reads if query contains \\0 (CVSS 6.4, MariaDB server · mariadb +2)
- [GHSA-P3PR-8F3M-4QP8](https://cve.now/GHSA-P3PR-8F3M-4QP8.md): pyLoad WindowsPhoneNotify addon: non-admin SETTINGS user triggers SSRF via unguarded http.client notification host (medium (no CVSS), pyload-ng)
- [CVE-2026-42695](https://cve.now/CVE-2026-42695.md): WordPress FV Flowplayer Video Player plugin \<= 7.5.54.7212 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, FolioVision FV Flowplayer Video Player)
- [CVE-2026-108119](https://cve.now/CVE-2026-108119.md): Busybox: busybox: tar extraction-root escape via deferred symlink/hardlink creation bypasses cve-2026-26158 fix (CVSS 6.3, Red Hat Hardened Images · Red Hat Enterprise Linux)
- [CVE-2026-108093](https://cve.now/CVE-2026-108093.md): Gimp: gimp: denial of service via null pointer dereference in xcf simulation parasite loading (CVSS 5.5, Red Hat Enterprise Linux)
- [CVE-2026-55797](https://cve.now/CVE-2026-55797.md): Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL (CVSS 8.8, argoproj argo-cd · argo-cd +3)
- [CVE-2026-75597](https://cve.now/CVE-2026-75597.md): pyLoad: Unauthenticated access to /web/\<path:filename\> bypasses authentication on sensitive templates and leaks internal error details via exception attribute typo (CVSS 5.3, pyload · pyload-ng)
- [CVE-2026-48484](https://cve.now/CVE-2026-48484.md): pyLoad: Lack of Input Size Validation Leads to Denial of Service (DoS) and Process Termination (CVSS 6.5, pyload · pyload-ng)
- [CVE-2026-107815](https://cve.now/CVE-2026-107815.md): MariaDB: one byte OOB write in DOS tables of the CONNECT engine (CVSS 8.5, MariaDB server · mariadb +2)
- [CVE-2026-108160](https://cve.now/CVE-2026-108160.md): AstronRPA through 1.1.6 Unsigned Update Installation via Plain-HTTP Feed (CVSS 7.7, iflytek astron-rpa)
- [CVE-2026-108159](https://cve.now/CVE-2026-108159.md): AstronRPA through 1.1.6 RCE via Smart-Component Chat XSS and IPC Bridge (CVSS 7.7, iflytek astron-rpa)
- [CVE-2026-108158](https://cve.now/CVE-2026-108158.md): plugNmeet Server through 2.5.2 Path Traversal via /api/whiteboard/convert (CVSS 7.1, mynaparrot plugNmeet-server)
- [CVE-2026-108157](https://cve.now/CVE-2026-108157.md): Pingvin Share X 0.19.0 before 1.22.0 Account Takeover via OAuth Email Linking (CVSS 9.2, smp46 pingvin-share-x)
- [CVE-2026-108156](https://cve.now/CVE-2026-108156.md): LobsterAI 2026.5.27 through 2026.9.23 Arbitrary Directory Deletion via Skill \_meta.json (CVSS 6.9, netease-youdao LobsterAI)
- [CVE-2016-20098](https://cve.now/CVE-2016-20098.md): Moderator Toolbox before 4.0.14 Stored XSS via Removal Reasons Configuration (CVSS 5.1, toolbox-team reddit-moderator-toolbox)
- [CVE-2026-107814](https://cve.now/CVE-2026-107814.md): MariaDB: Insecure $HOME in MariaDB rpm packages (CVSS 8.4, MariaDB server · mariadb +2)
- [CVE-2026-107813](https://cve.now/CVE-2026-107813.md): Nginx UI: Incomplete fix of CVE-2026-84315 - the api/cluster router was not - wrapped in RequireSecureSession, so those sensitive mutations run without OTP step-up (CVSS 8.8, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-107812](https://cve.now/CVE-2026-107812.md): Nginx UI: Self-upgrade runs an unsigned binary verified only by a same-origin digest → RCE via a compromised mirror or MITM (CVSS 7.5, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-107783](https://cve.now/CVE-2026-107783.md): Insertion of sensitive information into log file in AWS Tools for PowerShell (CVSS 5.9, aws-tools-for-powershell)
- [CVE-2026-107811](https://cve.now/CVE-2026-107811.md): 0xJacky/nginx-ui /api/nodes Leaks Cluster Node Tokens and Allows Cross-Node Impersonation as initUser (CVSS 8.8, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-107810](https://cve.now/CVE-2026-107810.md): Nginx UI: Backup restore follows crafted symlinks into the live Nginx configuration path before restore flags are applied (CVSS 8.1, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-90983](https://cve.now/CVE-2026-90983.md): OTP Code Exposure in Hayat Hospital's Hayat Mobile (CVSS 8.2, Hayat Health Facilities Inc. (Hayat Hospital) Hayat Mobile)
- [CVE-2026-107809](https://cve.now/CVE-2026-107809.md): Nginx-UI AuthRequired token cookie fallback enables CSRF against management APIs (CVSS 8.8, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-107808](https://cve.now/CVE-2026-107808.md): Nginx UI: Authentication bypass: password login does not enforce a passkey-only second factor (2FA bypass) (CVSS 8.1, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-104084](https://cve.now/CVE-2026-104084.md): SmarterMail \< Build 9777 Stale JWT Role Claim Privilege Escalation via Refresh Token (CVSS 8.7, Smartertools Smartermail)
- [CVE-2026-102554](https://cve.now/CVE-2026-102554.md): Denial of Service via Eager Array Allocation During Deserialization in Guava (CVSS 8.2, Google Guava · com.google.guava:guava)
- [CVE-2026-104083](https://cve.now/CVE-2026-104083.md): SmarterMail \< Build 9777 Stored Mutation XSS via MathML Foreign Content (CVSS 5.3, Smartertools Smartermail)
- [CVE-2026-104082](https://cve.now/CVE-2026-104082.md): SmarterMail \< Build 9777 SysAdmin Remote Code Execution via Volume Mount (CVSS 8.6, Smartertools Smartermail)
- [CVE-2026-108113](https://cve.now/CVE-2026-108113.md): ILIAS before 9.24, 10.12, and 11.5 Unrestricted File Upload via QTI Import (CVSS 8.7, ILIAS-eLearning e.V. ILIAS)
- [CVE-2026-108112](https://cve.now/CVE-2026-108112.md): ruoyi-ai 3.0.0 through 3.1.0 Missing Authorization via Workflow Delete Endpoint (CVSS 5.3, ageerle ruoyi-ai)
- [CVE-2026-108111](https://cve.now/CVE-2026-108111.md): ruoyi-ai 3.0.0 through 3.1.0 Missing Authorization via /workflow/search (CVSS 5.3, ageerle ruoyi-ai)
- [CVE-2026-108110](https://cve.now/CVE-2026-108110.md): MOVO through 0.2.3 Authorization Bypass via Document Endpoints (CVSS 7.6, himovo MOVO)
- [CVE-2026-107807](https://cve.now/CVE-2026-107807.md): Nginx UI: Node Secret Credential Exposure via URL Query Parameter (CVSS 8.8, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-107806](https://cve.now/CVE-2026-107806.md): Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config Overwrite (CVSS 9.4, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-108125](https://cve.now/CVE-2026-108125.md): WordPress Post Author Authenticated SQLi (CVSS 7.1, wp-post-author)
- [CVE-2026-15340](https://cve.now/CVE-2026-15340.md): Savannah lwIP SMTP client Classic Buffer Overflow (CVSS 9.8, Savannah lwIP SMTP client)
- [CVE-2026-108124](https://cve.now/CVE-2026-108124.md): WordPress Post Author Authenticated SQLi (CVSS 4.9, wp-post-author)
- [CVE-2026-107805](https://cve.now/CVE-2026-107805.md): Nginx UI: Unauthenticated signed-request body staging can exhaust temporary storage (CVSS 7.5, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-107804](https://cve.now/CVE-2026-107804.md): Nginx UI: Bundled reverse proxy can bypass IP allowlists and enable shared login lockout (CVSS 5.3, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-95702](https://cve.now/CVE-2026-95702.md): Code Execution in Host Sentry Process via Double Free in gVisor VFS MemoryFile (CVSS 8.5, Google gVisor)
- [CVE-2026-33272](https://cve.now/CVE-2026-33272.md): Red Lion Controls N-Tron 700 Series Authentication Bypass Using an Alternate Path or Channel (CVSS 4.9, Red Lion Controls 700 Series)
- [CVE-2026-39453](https://cve.now/CVE-2026-39453.md): Red Lion Controls N-Tron 700 Series Reachable Assertion (CVSS 8.3, Red Lion Controls 700 Series)
- [CVE-2026-29797](https://cve.now/CVE-2026-29797.md): Red Lion Controls N-Tron 700 Series Download of Code Without Integrity Check (CVSS 7.1, Red Lion Controls 700 Series)
- [CVE-2026-33367](https://cve.now/CVE-2026-33367.md): Red Lion Controls N-Tron 700 Series Missing Authentication for Critical Function (CVSS 8.1, Red Lion Controls 700 Series)
- [CVE-2026-28745](https://cve.now/CVE-2026-28745.md): Red Lion Controls N-Tron 700 Series Storing Passwords in a Recoverable Format (CVSS 7.5, Red Lion Controls 700 Series)
- [CVE-2026-108109](https://cve.now/CVE-2026-108109.md): PHPNuxBill through 2025.3.20 Account Takeover via Brute-Forceable Password Reset Code (CVSS 9.3, hotspotbilling phpnuxbill)
- [CVE-2026-108108](https://cve.now/CVE-2026-108108.md): PHPNuxBill through 2025.3.20 CHAP Authentication Bypass via Password::chap\_verify() (CVSS 7.1, hotspotbilling phpnuxbill)
- [CVE-2026-108107](https://cve.now/CVE-2026-108107.md): PHPNuxBill through 2025.3.20 Unauthenticated SQL Injection via radius.php (CVSS 9.3, hotspotbilling phpnuxbill)
- [CVE-2026-108106](https://cve.now/CVE-2026-108106.md): Xerial snappy-java before 1.1.10.9 Unbounded Memory Allocation Denial of Service (CVSS 8.7, xerial snappy-java · org.xerial.snappy:snappy-java)
- [CVE-2026-108104](https://cve.now/CVE-2026-108104.md): Xerial snappy-java 1.1.7.4 before 1.1.10.10 Double Release of Pooled Buffers in SnappyFramedInputStream (CVSS 6.3, xerial snappy-java)
- [CVE-2026-39460](https://cve.now/CVE-2026-39460.md): Red Lion Controls N-Tron 700 Series Insufficiently Protected Credentials (CVSS 8.1, Red Lion Controls 700 Series)
- [CVE-2026-104115](https://cve.now/CVE-2026-104115.md): Stack buffer overflow in illumos reparsed nfs-basic plugin allows local users to crash the daemon (CVSS 5.4, illumos-gate · OmniOS)
- [CVE-2026-32645](https://cve.now/CVE-2026-32645.md): Red Lion Controls N-Tron 700 Series Use of Hard-Coded Credentials (CVSS 6.0, Red Lion Controls 700 Series)
- [CVE-2026-104114](https://cve.now/CVE-2026-104114.md): NULL pointer dereference in illumos nwamd door handler allows local users to crash the daemon (CVSS 5.4, illumos-gate · OmniOS)
- [CVE-2026-104112](https://cve.now/CVE-2026-104112.md): Missing release of passed file descriptors in illumos nscd allows local users to exhaust kernel memory (CVSS 6.8, illumos-gate · OmniOS)
- [CVE-2026-104116](https://cve.now/CVE-2026-104116.md): Missing authorization in illumos zonestatd allows local users to disrupt zonestat and enumerate running zones (CVSS 1.9, illumos-gate · OmniOS)
- [CVE-2026-104113](https://cve.now/CVE-2026-104113.md): Double free in OmniOS and SmartOS ipmgmtd allows local users to crash the daemon (CVSS 5.4, OmniOS)
- [CVE-2026-104117](https://cve.now/CVE-2026-104117.md): Missing authorization in illumos ipmgmtd allows local users to change persistent IPMP group membership (CVSS 1.9, illumos-gate · OmniOS)
- [CVE-2026-104081](https://cve.now/CVE-2026-104081.md): KodExplorer \< 4.55 Path Traversal via unzip\_pre\_name() ZIP Extraction (CVSS 7.2, kalcaddle KodExplorer)
- [CVE-2026-102916](https://cve.now/CVE-2026-102916.md): Reachable assertion in illumos bhyve REP string instruction emulation allows guest to panic host (CVSS 6.8, illumos-gate · OmniOS)
- [CVE-2026-108105](https://cve.now/CVE-2026-108105.md): Open5GS through 2.8.0 MME Reachable Assertion via GTPv1 SGSN Context Request (CVSS 8.2, open5gs)
- [CVE-2026-108103](https://cve.now/CVE-2026-108103.md): Open5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Dropped DL Traffic Threshold IE (CVSS 6.9, open5gs)
- [CVE-2026-108102](https://cve.now/CVE-2026-108102.md): Open5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Volume Measurement IE (CVSS 6.9, open5gs)
- [CVE-2026-108101](https://cve.now/CVE-2026-108101.md): HortusFox through 6.3 Unrestricted File Upload via Plant Attachments (CVSS 7.7, danielbrendel hortusfox-web)
- [CVE-2026-108100](https://cve.now/CVE-2026-108100.md): HortusFox before 6.2 SQL Injection via /api/locations/list include\_info Parameter (CVSS 7.1, danielbrendel hortusfox-web)
- [CVE-2026-105278](https://cve.now/CVE-2026-105278.md): Grid Protection Alliance openPDC (Docker image) Use of Hard-coded Credentials (CVSS 9.8, Grid Protection Alliance openPDC)
- [CVE-2026-94067](https://cve.now/CVE-2026-94067.md): WordPress The Voux theme \<= 6.9.5 - Local File Inclusion vulnerability (CVSS 8.1, Fuelthemes The Voux)
- [CVE-2026-94066](https://cve.now/CVE-2026-94066.md): WordPress Pond theme \<= 2.6.1 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, SpabRice Pond)
- [CVE-2026-94063](https://cve.now/CVE-2026-94063.md): WordPress Education Center theme \<= 3.6.12 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, ThemeREX Education Center)
- [CVE-2026-94065](https://cve.now/CVE-2026-94065.md): WordPress ColorFolio theme \<= 1.3 - PHP Object Injection vulnerability (CVSS 8.8, BuddhaThemes ColorFolio)
- [CVE-2026-94064](https://cve.now/CVE-2026-94064.md): WordPress Neo | Barber Shop WordPress Theme theme \<= 3.5 - PHP Object Injection vulnerability (CVSS 8.8, BuddhaThemes Neo | Barber Shop WordPress Theme)
- [CVE-2026-104629](https://cve.now/CVE-2026-104629.md): Grid Protection Alliance openPDC and openHistorian Use of Externally-Controlled Input to Select Classes or Code (CVSS 8.8, Grid Protection Alliance openPDC · Grid Protection Alliance…)
- [CVE-2026-101022](https://cve.now/CVE-2026-101022.md): Grid Protection Alliance openPDC and openHistorian Server-Side Request Forgery (SSRF) (CVSS 4.3, Grid Protection Alliance openPDC · Grid Protection Alliance…)
- [CVE-2026-85479](https://cve.now/CVE-2026-85479.md): Grid Protection Alliance openPDC and openHistorian Missing Authentication for Critical Function (CVSS 5.3, Grid Protection Alliance openPDC · Grid Protection Alliance…)
- [CVE-2026-105281](https://cve.now/CVE-2026-105281.md): Grid Protection Alliance openPDC and openHistorian Missing Authentication for Critical Function (CVSS 7.5, Grid Protection Alliance openPDC · Grid Protection Alliance…)
- [CVE-2026-100730](https://cve.now/CVE-2026-100730.md): Grid Protection Alliance openPDC and openHistorian Deserialization of Untrusted Data (CVSS 9.8, Grid Protection Alliance openPDC · Grid Protection Alliance…)
- [CVE-2026-106581](https://cve.now/CVE-2026-106581.md): Docker Desktop for Windows installer failed to verify external packages (CVSS 8.2, Docker Desktop)
- [CVE-2026-107803](https://cve.now/CVE-2026-107803.md): ProcessMaker has SQL injection in the tasks endpoint through the order\_by parameter (CVSS 6.5, processmaker)
- [CVE-2026-108063](https://cve.now/CVE-2026-108063.md): Libhangul: null pointer dereference in hanja\_new() when looking up a malformed hanja dictionary entry (CVSS 5.5, Red Hat Enterprise Linux)
- [CVE-2026-92085](https://cve.now/CVE-2026-92085.md): Stored XSS in TMT Machine's Talassoft Industrial Management Software (CVSS 5.4, TMT Machinery Industry and Trade Co. Talassoft Industrial M…)
- [CVE-2026-107785](https://cve.now/CVE-2026-107785.md): Crux Agent silently fails SKA preshared key rotation when SHA-512 peering is negotiated (CVSS 6.3, Sirius Computer Crux Agent)
- [CVE-2026-62026](https://cve.now/CVE-2026-62026.md): WordPress Dashboard Notes plugin \<= 1.0.3 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 7.1, MIGHTYminnow Dashboard Notes)
- [CVE-2026-94062](https://cve.now/CVE-2026-94062.md): WordPress Werkstatt theme \<= 4.8.3 - Local File Inclusion vulnerability (CVSS 8.1, Fuelthemes Werkstatt)
- [CVE-2026-94061](https://cve.now/CVE-2026-94061.md): WordPress Whistle - Sports Club theme \<= 4.2 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Designthemes Whistle - Sports Club)
- [CVE-2026-94060](https://cve.now/CVE-2026-94060.md): WordPress Voldor theme \<= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Bracketweb Voldor)
- [CVE-2026-94059](https://cve.now/CVE-2026-94059.md): WordPress Ogency theme \<= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Bracketweb Ogency)
- [CVE-2026-94058](https://cve.now/CVE-2026-94058.md): WordPress Treck theme \<= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Bracketweb Treck)
- [CVE-2026-103413](https://cve.now/CVE-2026-103413.md): Apache Camel Karavan: unvalidated Kubernetes resources applied from a project's kubernetes.yaml (CVSS 8.8, Apache Software Foundation Apache Camel Karavan)
- [CVE-2026-103412](https://cve.now/CVE-2026-103412.md): Apache Camel Karavan: project file name path traversal when committing a project to Git (CVSS 8.8, Apache Software Foundation Apache Camel Karavan)
- [CVE-2026-86405](https://cve.now/CVE-2026-86405.md): Payment Validation Bypass in Sipay Electronic Money's SanalPos PrestaShop (CVSS 9.8, Sipay Electronic Money and Payment Services PrestaShop Virt…)
- [CVE-2026-103220](https://cve.now/CVE-2026-103220.md): The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing raster image dat (CVSS 4.5, canva affinity)
- [CVE-2026-101130](https://cve.now/CVE-2026-101130.md): The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing arrays of string (CVSS 3.6, canva affinity)
- [CVE-2026-101094](https://cve.now/CVE-2026-101094.md): The Affinity by Canva application before 3.3.1 (October 2026 release) did not correctly handle incomplete UTF-8 character sequences when par (CVSS 3.6, canva affinity)
- [CVE-2026-96396](https://cve.now/CVE-2026-96396.md): The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not safely calculate the size of an image buffer when ge (CVSS 4.9, canva affinity)
- [CVE-2026-96395](https://cve.now/CVE-2026-96395.md): The Affinity by Canva app for macOS before 3.3.1 (October 2026 release) did not perform adequate bounds checking when generating QuickLook t (CVSS 3.6, canva affinity)
- [CVE-2026-96394](https://cve.now/CVE-2026-96394.md): The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not validate image dimensions against the size of the pi (CVSS 2.9, canva affinity)
- [CVE-2026-96393](https://cve.now/CVE-2026-96393.md): The Affinity by Canva app before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing Affinity document files, (CVSS 3.6, canva affinity)
- [CVE-2026-85531](https://cve.now/CVE-2026-85531.md): Payment Validation Bypass in Sipay Electronic Money's OpenCart 3.x (CVSS 9.8, Sipay Electronic Money and Payment Services OpenCart Virtua…)
- [CVE-2026-62028](https://cve.now/CVE-2026-62028.md): WordPress Before After Image Comparison – Image comparison for WP plugin \<= 1.1.21 - Broken Access Control vulnerability (CVSS 5.4, bPlugins Before After Image Comparison – Image comparison f…)
- [CVE-2026-8374](https://cve.now/CVE-2026-8374.md): Misuse and Misconfiguration of Cryptographic Algorithm in Bluetooth Communication (CVSS 8.5, SwitchBot Lock · SwitchBot Keypad +1)
- [CVE-2026-105883](https://cve.now/CVE-2026-105883.md): WordPress Th Shop Mania theme \<= 1.9.1 - Broken Access Control vulnerability (CVSS 7.1, ThemeHunk Th Shop Mania)
- [CVE-2026-106601](https://cve.now/CVE-2026-106601.md): WordPress Jetpack plugin \<= 16.2 - Broken Authentication vulnerability (CVSS 5.4, Automattic Jetpack)
- [CVE-2026-106602](https://cve.now/CVE-2026-106602.md): WordPress Jetpack plugin \<= 16.2 - Broken Authentication vulnerability (CVSS 4.8, Automattic Jetpack)
- [CVE-2026-104392](https://cve.now/CVE-2026-104392.md): WordPress Quiz And Survey Master plugin \<= 11.2.7 - PHP Object Injection vulnerability (CVSS 8.8, ExpressTech Quiz And Survey Master)
- [CVE-2026-105870](https://cve.now/CVE-2026-105870.md): WordPress WP Associate Post R2 plugin \<= 5.0.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Delight Star WP Associate Post R2)
- [CVE-2026-105872](https://cve.now/CVE-2026-105872.md): WordPress Product Configurator for WooCommerce plugin \<= 1.7.5 - PHP Object Injection vulnerability (CVSS 7.2, mklacroix Product Configurator for WooCommerce)
- [CVE-2026-105877](https://cve.now/CVE-2026-105877.md): WordPress QA Analytics plugin \<= 5.3.0.0 - Sensitive Data Exposure vulnerability (CVSS 6.9, QuarkA QA Analytics)
- [CVE-2026-105318](https://cve.now/CVE-2026-105318.md): WordPress AcyMailing SMTP Newsletter plugin \<= 11.1.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Datasolution AcyMailing SMTP Newsletter)
- [CVE-2026-104079](https://cve.now/CVE-2026-104079.md): Envira Gallery Lite \< 1.16.2 Missing Authorization via Gallery Conversion REST Endpoint (CVSS 5.3, Syed Balkhi Envira Gallery)
- [CVE-2026-62029](https://cve.now/CVE-2026-62029.md): WordPress WPFunnels plugin \<= 3.13.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, WPFunnels Team WPFunnels)
- [CVE-2026-62036](https://cve.now/CVE-2026-62036.md): WordPress All Bootstrap Blocks plugin \<= 1.3.31 - Sensitive Data Exposure vulnerability (CVSS 4.3, AREOI All Bootstrap Blocks)
- [CVE-2026-39779](https://cve.now/CVE-2026-39779.md): WordPress Asgaros Forum plugin \<= 3.4.0 - Broken Access Control vulnerability (CVSS 4.3, Asgaros Forum)
- [CVE-2026-62039](https://cve.now/CVE-2026-62039.md): WordPress Html5 Audio Player plugin \<= 2.8.8 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, bPlugins Html5 Audio Player)
- [CVE-2026-62040](https://cve.now/CVE-2026-62040.md): WordPress Restrict User Access – Membership Plugin with Force plugin \<= 2.8.1 - Broken Access Control vulnerability (CVSS 5.3, DEV Institute Restrict User Access – Membership Plugin with…)
- [CVE-2026-62041](https://cve.now/CVE-2026-62041.md): WordPress WP Event Manager plugin \<= 3.4.1 - Broken Access Control vulnerability (CVSS 5.4, Ashok Dudhat WP Event Manager)
- [CVE-2026-62042](https://cve.now/CVE-2026-62042.md): WordPress Scripts n Styles plugin \<= 3.5.8 - Broken Access Control vulnerability (CVSS 5.3, unFocus Projects Scripts n Styles)
- [CVE-2026-107419](https://cve.now/CVE-2026-107419.md): WordPress AI Translation for Polylang plugin \<= 1.6.2 - Broken Access Control vulnerability (CVSS 5.4, Cool Plugins AI Translation for Polylang)
- [CVE-2026-103329](https://cve.now/CVE-2026-103329.md): Super Payments \< 1.43.1 - Unauthenticated Payment Confirmation Forgery via Webhook Signature (CVSS 5.3, Super Payments)
- [CVE-2026-86851](https://cve.now/CVE-2026-86851.md): Livees Checkout 6.8 - 7.0.2 - Unauthenticated Order Status Change, Order Note Injection & Order Key Disclosure (CVSS 6.5, Livees Checkout)
- [CVE-2026-87846](https://cve.now/CVE-2026-87846.md): Shipping for Nova Poshta 1.18.7 - 1.19.8 - Unauthenticated Order Shipment Record Deletion (CVSS 5.3, Shipping for Nova Poshta)
- [CVE-2026-85348](https://cve.now/CVE-2026-85348.md): GDPR Data Request Form 1.5 - 1.7.1 - DPO Email Update via CSRF (CVSS 4.3, GDPR Data Request Form)
- [CVE-2026-89235](https://cve.now/CVE-2026-89235.md): Testimonials by BestWebSoft 1.0.5 - 1.0.8 - Unauthenticated SQLi via 'offset' Parameter (CVSS 6.8, Testimonials by BestWebSoft)
- [CVE-2026-108039](https://cve.now/CVE-2026-108039.md): Apache CXF: Prevent unbounded XML document size in StaxUtils by adding default element and character limits (CVSS 7.5, Apache Software Foundation Apache CXF)
- [CVE-2026-107938](https://cve.now/CVE-2026-107938.md): Apache CXF: The Netty HTTP client transport does not perform TLS hostname verification. (CVSS 9.1, Apache Software Foundation Apache CXF)
- [CVE-2026-107937](https://cve.now/CVE-2026-107937.md): Apache CXF: The attachment header size and count limits can be bypassed, which allows denial of service through memory exhaustion. (CVSS 7.5, Apache Software Foundation Apache CXF)
- [CVE-2026-100227](https://cve.now/CVE-2026-100227.md): Apache CXF: XML Signature wrapping in JAX-RS XML Security (CVSS 7.5, Apache Software Foundation Apache CXF)
- [CVE-2026-97791](https://cve.now/CVE-2026-97791.md): Apache CXF: STSTokenValidator can accept untrusted SAML assertions because it shares validation state between requests (CVSS 7.5, Apache Software Foundation Apache CXF)
- [CVE-2026-97468](https://cve.now/CVE-2026-97468.md): Apache CXF: Authentication bypass via weak cache keys for validated STS tokens (CVSS 9.1, Apache Software Foundation Apache CXF)
- [CVE-2026-86463](https://cve.now/CVE-2026-86463.md): Apache CXF: FIQL Query Parser Denial of Service (CVSS 7.5, Apache Software Foundation Apache CXF)
- [CVE-2026-79650](https://cve.now/CVE-2026-79650.md): Apache CXF: OIDC RP Open Redirect (CVSS 6.1, Apache Software Foundation Apache CXF)
- [CVE-2026-78384](https://cve.now/CVE-2026-78384.md): Apache CXF: Unbounded DEFLATE Decompression in CXF JOSE/JWE and SAML Processing (Decompression Bomb) (CVSS 7.5, Apache Software Foundation Apache CXF)
- [CVE-2026-73179](https://cve.now/CVE-2026-73179.md): Apache CXF: JPA authorization-code consume is non-atomic (CVSS 8.1, Apache Software Foundation Apache CXF)
- [CVE-2026-71575](https://cve.now/CVE-2026-71575.md): Apache CXF: Inoperative max\_age authentication-freshness check in OidcClientCodeRequestFilter (CVSS 9.1, Apache Software Foundation Apache CXF)
- [CVE-2026-93947](https://cve.now/CVE-2026-93947.md): WordPress Traveler theme \<= 3.2.9 - SQL Injection vulnerability (CVSS 9.3, Shinetheme Traveler)
- [CVE-2026-94158](https://cve.now/CVE-2026-94158.md): WordPress Gloria Admin Panel plugin \<= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, bkninja Gloria Admin Panel)
- [CVE-2026-94503](https://cve.now/CVE-2026-94503.md): WordPress Zombify plugin \<= 1.7.7 - Arbitrary File Upload vulnerability (CVSS 10.0, PX-lab Zombify)
- [CVE-2026-94161](https://cve.now/CVE-2026-94161.md): WordPress Grand Restaurant theme \< 7.0.11 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, ThemeGoods Grand Restaurant)
- [CVE-2026-94159](https://cve.now/CVE-2026-94159.md): WordPress Total Donations plugin \<= 2.0.5 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, KlbTheme Total Donations)
- [CVE-2026-94167](https://cve.now/CVE-2026-94167.md): WordPress Kubio AI Page Builder plugin \<= 2.9.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Extend Themes Kubio AI Page Builder)
- [CVE-2026-96334](https://cve.now/CVE-2026-96334.md): WordPress User Registration plugin \<= 5.2.7 - Broken Access Control vulnerability (CVSS 5.6, ThemeGrill User Registration)
- [CVE-2026-94170](https://cve.now/CVE-2026-94170.md): WordPress Sassy Social Share plugin \<= 3.3.79 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Heateor Support Sassy Social Share)
- [CVE-2026-94664](https://cve.now/CVE-2026-94664.md): WordPress PDF for Contact Form 7 plugin \<= 7.1.0 - Arbitrary File Download vulnerability (CVSS 7.5, add-ons.org PDF for Contact Form)
- [CVE-2026-96607](https://cve.now/CVE-2026-96607.md): WordPress NEX-Forms plugin \<= 9.3.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Basix NEX-Forms)
- [CVE-2026-94666](https://cve.now/CVE-2026-94666.md): WordPress Generate PDF using Contact Form 7 plugin \<= 4.2.1 - Arbitrary File Download vulnerability (CVSS 7.5, ZealousWeb Generate PDF using Contact Form)
- [CVE-2026-96332](https://cve.now/CVE-2026-96332.md): WordPress Simple Payment plugin \<= 2.5.4 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, yalla ya! Simple Payment)
- [CVE-2026-95589](https://cve.now/CVE-2026-95589.md): WordPress Deposits and Partial Payments for WooCommerce plugin \<= 4.0.1 - Broken Access Control vulnerability (CVSS 6.5, Magepeople Deposits and Partial Payments for WooCommerce)
- [CVE-2026-94668](https://cve.now/CVE-2026-94668.md): WordPress Salon booking system plugin \<= 10.31.5 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Dimitri Grassi Salon booking system)
- [CVE-2026-94667](https://cve.now/CVE-2026-94667.md): WordPress JetReviews plugin \<= 3.1.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Crocoblock JetReviews)
- [CVE-2026-94665](https://cve.now/CVE-2026-94665.md): WordPress Classified Listing plugin \<= 6.1.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Mamunur Rashid Classified Listing)
- [CVE-2026-94663](https://cve.now/CVE-2026-94663.md): WordPress ProfileGrid plugin \<= 6.0.0.2 - SQL Injection vulnerability (CVSS 8.5, Metagauss ProfileGrid)
- [CVE-2026-94661](https://cve.now/CVE-2026-94661.md): WordPress JetBlog plugin \<= 2.4.10 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Crocoblock JetBlog)
- [CVE-2026-94641](https://cve.now/CVE-2026-94641.md): WordPress UsersWP plugin \<= 1.2.73 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Stiofan UsersWP)
- [CVE-2026-94632](https://cve.now/CVE-2026-94632.md): WordPress BlockStrap Page Builder - Bootstrap Blocks plugin \<= 0.1.58 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Stiofan BlockStrap Page Builder - Bootstrap Blocks)
- [CVE-2026-96809](https://cve.now/CVE-2026-96809.md): WordPress EduAdmin Booking plugin \< 6.0.0 - SQL Injection vulnerability (CVSS 9.3, MultiNet Interactive AB EduAdmin Booking)
- [CVE-2026-94415](https://cve.now/CVE-2026-94415.md): WordPress Betheme theme \<= 28.5.8 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Muffingroup Betheme)
- [CVE-2026-94166](https://cve.now/CVE-2026-94166.md): WordPress UpSolution Core plugin \<= 8.44 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, UpSolution Core)
- [CVE-2026-96761](https://cve.now/CVE-2026-96761.md): WordPress Welcart e-Commerce plugin \<= 2.12.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Welcart e-Commerce)
- [CVE-2026-96671](https://cve.now/CVE-2026-96671.md): WordPress Featured Image from URL plugin \<= 6.0.7 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8, fifu.app Featured Image from URL)
- [CVE-2026-96331](https://cve.now/CVE-2026-96331.md): WordPress Ajax Search Pro plugin \<= 4.29.1 - SQL Injection vulnerability (CVSS 9.3, wpdreams Ajax Search Pro)
- [CVE-2026-96330](https://cve.now/CVE-2026-96330.md): WordPress tagDiv Opt-In Builder plugin \<= 1.7.6 - SQL Injection vulnerability (CVSS 9.3, tagDiv Opt-In Builder)
- [CVE-2026-96329](https://cve.now/CVE-2026-96329.md): WordPress tagDiv Opt-In Builder plugin \<= 1.7.6 - SQL Injection vulnerability (CVSS 8.5, tagDiv Opt-In Builder)
- [CVE-2026-96328](https://cve.now/CVE-2026-96328.md): WordPress JNews - Pay Writer plugin \<= 12.0.1 - SQL Injection vulnerability (CVSS 9.3, jegtheme JNews - Pay Writer)
- [CVE-2026-95609](https://cve.now/CVE-2026-95609.md): WordPress Media LIbrary Assistant plugin \<= 3.41 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, David Lingren Media LIbrary Assistant)
- [CVE-2026-95599](https://cve.now/CVE-2026-95599.md): WordPress Taskbuilder plugin \<= 6.0.5 - SQL Injection vulnerability (CVSS 8.5, Taskbuilder)
- [CVE-2026-95598](https://cve.now/CVE-2026-95598.md): WordPress Search in Place plugin \<= 1.5.5 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, codepeople Search in Place)
- [CVE-2026-95597](https://cve.now/CVE-2026-95597.md): WordPress 워드프레스 결제 심플페이 plugin \<= 5.5.17 - Settings Change vulnerability (CVSS 6.5, codemstory 워드프레스 결제 심플페이)
- [CVE-2026-95596](https://cve.now/CVE-2026-95596.md): WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin \<= 3.4.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Mamunur Rashid ShopBuilder – Elementor WooCommerce Builder…)
- [CVE-2026-95591](https://cve.now/CVE-2026-95591.md): WordPress VikBooking Hotel Booking Engine & PMS plugin \<= 1.8.14 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, e4jvikwp VikBooking Hotel Booking Engine & PMS)
- [CVE-2026-94568](https://cve.now/CVE-2026-94568.md): WordPress Pay with Vipps for WooCommerce plugin \<= 6.2.0 - PHP Object Injection vulnerability (CVSS 7.2, WP Hosting AS Pay with Vipps for WooCommerce)
- [CVE-2026-95607](https://cve.now/CVE-2026-95607.md): WordPress WPLMS theme \<= 4.973 - SQL Injection vulnerability (CVSS 8.5, VibeThemes WPLMS)
- [CVE-2026-96327](https://cve.now/CVE-2026-96327.md): WordPress WPLMS plugin \< 1.9.9.8.2 - SQL Injection vulnerability (CVSS 9.3, VibeThemes WPLMS)
- [CVE-2026-95608](https://cve.now/CVE-2026-95608.md): WordPress HUSKY plugin \<= 1.4.3.2 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, PluginUs.Net HUSKY)
- [CVE-2026-95610](https://cve.now/CVE-2026-95610.md): WordPress UpSolution Core plugin \<= 9.3 - SQL Injection vulnerability (CVSS 8.5, UpSolution Core)
- [CVE-2026-96461](https://cve.now/CVE-2026-96461.md): WordPress Amelia plugin \<= 2.4.10 - Broken Access Control vulnerability (CVSS 7.5, TMS Amelia)
- [CVE-2026-96337](https://cve.now/CVE-2026-96337.md): WordPress ProfilePress plugin \<= 4.17.3 - Broken Access Control vulnerability (CVSS 6.5, properfraction ProfilePress)
- [CVE-2026-96518](https://cve.now/CVE-2026-96518.md): WordPress ProfilePress plugin \<= 4.17.3 - Broken Access Control vulnerability (CVSS 5.9, properfraction ProfilePress)
- [CVE-2026-96333](https://cve.now/CVE-2026-96333.md): WordPress GiveWP plugin \<= 4.16.8.1 - Payment Bypass vulnerability (CVSS 7.5, Liquid Web / StellarWP GiveWP)
- [CVE-2026-96553](https://cve.now/CVE-2026-96553.md): WordPress FiboSearch plugin \<= 1.34.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Damian Góra FiboSearch)
- [CVE-2026-96539](https://cve.now/CVE-2026-96539.md): WordPress Ultimate Member plugin \<= 2.13.1 - Privilege Escalation vulnerability (CVSS 5.6, Ultimate Member)
- [CVE-2026-96336](https://cve.now/CVE-2026-96336.md): WordPress Forminator plugin \<= 1.57.2 - Payment Bypass vulnerability (CVSS 7.5, WPMU DEV Forminator)
- [CVE-2026-78341](https://cve.now/CVE-2026-78341.md): Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Authorization vulnerability. (CVSS 6.5, Dell Secure Connect Gateway (SCG) Policy Manager)
- [CVE-2026-78340](https://cve.now/CVE-2026-78340.md): Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Limitation of a Pathname to a Restricte (CVSS 6.3, Dell Secure Connect Gateway (SCG) Policy Manager)
- [CVE-2026-71884](https://cve.now/CVE-2026-71884.md): Packet CTR reports a full success length after the counter is exhausted (CVSS 8.2, Legion of the Bouncy Castle BC-LTS-JAVA)
- [CVE-2026-78339](https://cve.now/CVE-2026-78339.md): Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Res (CVSS 6.3, Dell Secure Connect Gateway (SCG) Policy Manager)
- [CVE-2026-78027](https://cve.now/CVE-2026-78027.md): Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. (CVSS 5.8, Dell Secure Connect Gateway (SCG) Policy Manager)
- [CVE-2026-78026](https://cve.now/CVE-2026-78026.md): Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key (CVSS 4.3, Dell Secure Connect Gateway (SCG) Policy Manager)
- [CVE-2026-62049](https://cve.now/CVE-2026-62049.md): WordPress JetBlocks For Elementor plugin \<= 1.5.2.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Crocoblock JetBlocks For Elementor)
- [CVE-2026-78025](https://cve.now/CVE-2026-78025.md): Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vuln (CVSS 7.5, Dell Secure Connect Gateway (SCG) Policy Manager)
- [CVE-2026-78024](https://cve.now/CVE-2026-78024.md): Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. (CVSS 7.7, Dell Secure Connect Gateway (SCG) Policy Manager)
- [CVE-2026-78023](https://cve.now/CVE-2026-78023.md): Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key (CVSS 7.1, Dell Secure Connect Gateway (SCG) Policy Manager)
- [CVE-2026-107935](https://cve.now/CVE-2026-107935.md): Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose (CVSS 9.3, gvisor-tap-vsock · Red Hat Build of Podman Desktop +7)
- [CVE-2026-78022](https://cve.now/CVE-2026-78022.md): Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Not Failing Securely ('Failing Open') vulnerabili (CVSS 6.8, Dell Secure Connect Gateway (SCG) Policy Manager)
- [CVE-2026-107655](https://cve.now/CVE-2026-107655.md): Cups: null pointer dereference via embedded job ticket comments allows remote denial of service (CVSS 4.0, Red Hat Hardened Images · Red Hat Enterprise Linux)
- [CVE-2026-78021](https://cve.now/CVE-2026-78021.md): Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Generation of Error Message Containing Sensitive (CVSS 3.7, Dell Secure Connect Gateway (SCG) Policy Manager)
- [CVE-2026-78020](https://cve.now/CVE-2026-78020.md): Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. (CVSS 7.5, Dell Secure Connect Gateway (SCG) Policy Manager)
- [CVE-2026-78019](https://cve.now/CVE-2026-78019.md): Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Functionality from Untrusted Contro (CVSS 7.5, Dell Secure Connect Gateway (SCG) Policy Manager)
- [CVE-2026-78018](https://cve.now/CVE-2026-78018.md): Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure De (CVSS 6.3, Dell Secure Connect Gateway (SCG) Policy Manager)
- [CVE-2026-78017](https://cve.now/CVE-2026-78017.md): Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Check for Unusual or Exceptional Condit (CVSS 3.8, Dell Secure Connect Gateway (SCG) Policy Manager)
- [CVE-2026-78016](https://cve.now/CVE-2026-78016.md): Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Validation of Specified Type of Input v (CVSS 3.1, Dell Secure Connect Gateway (SCG) Policy Manager)
- [CVE-2026-78015](https://cve.now/CVE-2026-78015.md): Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use of Less Trusted Source vulnerability. (CVSS 3.7, Dell Secure Connect Gateway (SCG) Policy Manager)
- [CVE-2026-78013](https://cve.now/CVE-2026-78013.md): Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure De (CVSS 5.2, Dell Secure Connect Gateway (SCG) Policy Manager)
- [CVE-2026-76779](https://cve.now/CVE-2026-76779.md): Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Excessive Authentication (CVSS 7.4, Dell Secure Connect Gateway (SCG) Policy Manager)
- [CVE-2026-104635](https://cve.now/CVE-2026-104635.md): Uncontrolled recursion in elixir-protobuf/protobuf JSON decoding of self-referential messages (CVSS 8.2, elixir-protobuf protobuf · protobuf)
- [CVE-2026-76769](https://cve.now/CVE-2026-76769.md): Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authorization vulnerability. (CVSS 4.3, Dell Secure Connect Gateway (SCG) Policy Manager)
- [CVE-2026-84224](https://cve.now/CVE-2026-84224.md): Kirki \< 6.3.2 - Editor+ Blind SSRF via Remote Template URL (CVSS 4.1, Kirki)
- [CVE-2026-84220](https://cve.now/CVE-2026-84220.md): Kirki \< 6.3.2 - Unauthenticated Arbitrary Shortcode Execution via Comments Collection (CVSS 4.8, Kirki)
- [CVE-2026-97075](https://cve.now/CVE-2026-97075.md): WordPress WP Rocket plugin \< 3.23.5 - Broken Access Control vulnerability (CVSS 6.5, WP Media WP Rocket)
- [CVE-2026-4264](https://cve.now/CVE-2026-4264.md): Reflected Cross-Site Scripting in BeeTienda eCommerce platform (CVSS 5.1, BeeTienda eCommerce Platform)
- [CVE-2025-14123](https://cve.now/CVE-2025-14123.md): Redux Framework \<= 4.5.11 – Authenticated (Subscriber+) Privilege Escalation via Users Extension (CVSS 6.8, davidanderson Redux Framework)
- [CVE-2026-98384](https://cve.now/CVE-2026-98384.md): bpf: Fix out-of-bounds read of sk\_protocol in bpf\_sock\_destroy() (no CVSS, Linux)
- [CVE-2026-98383](https://cve.now/CVE-2026-98383.md): bpf: Disallow bpf\_skb\_pull\_data() for LWT\_SEG6LOCAL (CVSS 7.8, Linux)
- [CVE-2026-98382](https://cve.now/CVE-2026-98382.md): bpf: Reject dev-bound-only programs on other devices (CVSS 7.8, Linux)
- [CVE-2026-98381](https://cve.now/CVE-2026-98381.md): veth: manage XDP program pointers during channel resize (CVSS 7.8, Linux)
- [CVE-2026-98380](https://cve.now/CVE-2026-98380.md): net/sched: reject IDR error pointers when deleting actions (no CVSS, Linux)
- [CVE-2026-98379](https://cve.now/CVE-2026-98379.md): netfilter: ip6t\_rpfilter: reject routes without inet6\_dev (no CVSS, Linux)
- [CVE-2026-98378](https://cve.now/CVE-2026-98378.md): bpf: Skip unsettled links in link iterator (CVSS 7.8, Linux)
- [CVE-2026-98377](https://cve.now/CVE-2026-98377.md): vlan: require the MAC header to be present in \_\_vlan\_insert\_inner\_tag() (no CVSS, Linux)
- [CVE-2026-98376](https://cve.now/CVE-2026-98376.md): bpf: Use array\_map\_meta\_equal for percpu array inner map replacement (CVSS 7.8, Linux)
- [CVE-2026-19575](https://cve.now/CVE-2026-19575.md): Type confusion in the device\_deinit system call allows user-mode threads to execute arbitrary kernel code (CVSS 7.8, zephyrproject zephyr)
- [CVE-2026-19569](https://cve.now/CVE-2026-19569.md): Integer overflow in dynamic kernel object allocation allows user-mode threads to corrupt the kernel heap (CVSS 8.8, zephyrproject zephyr)
- [CVE-2026-19574](https://cve.now/CVE-2026-19574.md): ARM64 MMU can assign an in-use ASID to a new memory domain, breaking user-mode memory isolation (CVSS 7.0, zephyrproject zephyr)
- [CVE-2026-19571](https://cve.now/CVE-2026-19571.md): Race condition in ITE IT8xxx2 SHI host-command backend lets a second SPI request write an unvalidated length into the in-flight request buffer (CVSS 6.7, zephyrproject zephyr)
- [CVE-2026-19570](https://cve.now/CVE-2026-19570.md): Out-of-bounds write in LE Audio Broadcast Sink when copying BASE subgroup metadata into the BASS receive state (CVSS 8.8, zephyrproject zephyr)
- [CVE-2026-98375](https://cve.now/CVE-2026-98375.md): xen/netfront: drop RX packets with a short Ethernet header (no CVSS, Linux)
- [CVE-2026-106155](https://cve.now/CVE-2026-106155.md): Stored Cross-site Scripting (XSS) in Telerik Report Server Web Report Viewers (CVSS 8.9, Progress Software Telerik Report Server)
- [CVE-2026-106145](https://cve.now/CVE-2026-106145.md): Privilege Escalation in Telerik Report Server Service-Agent Hub (CVSS 7.1, Progress Software Telerik Report Server)
- [CVE-2026-101028](https://cve.now/CVE-2026-101028.md): Ash.count, Ash.exists and Ash.aggregate skip related resources' read policies in filters and sorts (CVSS 6.0, ash-project ash · ash)
- [CVE-2026-97076](https://cve.now/CVE-2026-97076.md): WordPress WP Rocket plugin \< 3.23.5 - Denial of Service Attack vulnerability (CVSS 7.5, WP Media WP Rocket)
- [CVE-2026-81929](https://cve.now/CVE-2026-81929.md): Ocean Pro Demos \<= 1.5.4 and Ocean eComm Treasure Box \<= 1.8.0 - Unauthenticated Stored Cross-Site Scripting via 'content' Parameter (CVSS 7.2, OceanWP Ocean Pro Demos · OceanWP Ocean eComm Treasure Box)
- [CVE-2026-93548](https://cve.now/CVE-2026-93548.md): FooSales \< 1.43.3 - Subscriber+ Privilege Escalation via User Impersonation (CVSS 8.8, FooSales)
- [CVE-2026-106097](https://cve.now/CVE-2026-106097.md): Code Snippets \< 3.10.0 - Admin+ SQLi in Migration Importers Leading to Network-Wide Credential Disclosure (Multisite) (CVSS 6.8, Code Snippets)
- [CVE-2026-106095](https://cve.now/CVE-2026-106095.md): Code Snippets \< 3.10.0 - Admin+ Network-Scoped Snippet Activation and Deactivation via update\_code\_snippet (CVSS 3.3, Code Snippets)
- [CVE-2025-15700](https://cve.now/CVE-2025-15700.md): AWP Classifieds \< 4.4.9 - Admin+ Arbitrary File Upload via ZIP Import (CVSS 8.8, AWP Classifieds)
- [CVE-2026-87841](https://cve.now/CVE-2026-87841.md): UnitechPay \<= 1.0.6.3 - Unauthenticated Order Payment Bypass via Unsigned Webhook (CVSS 5.3, UnitechPay)
- [CVE-2026-88931](https://cve.now/CVE-2026-88931.md): Social Web Suite \<= 4.1.12 - Unauthenticated Arbitrary Plugin Settings Update (CVSS 5.3, Social Web Suite)
- [CVE-2026-86850](https://cve.now/CVE-2026-86850.md): SKU Error Fixer for WooCommerce \<= 1.0 - Unauthenticated Orphaned Product Variation Deletion (CVSS 6.5, SKU Error Fixer for WooCommerce)
- [CVE-2026-92990](https://cve.now/CVE-2026-92990.md): SendPress \<= 1.26.1.20 - Unauthenticated Newsletter Sending Log Disclosure via Hardcoded Token (CVSS 5.3, SendPress Newsletters)
- [CVE-2026-92989](https://cve.now/CVE-2026-92989.md): SendPress Newsletters \<= 1.26.1.20 - Subscriber+ Mailing List Sync and Newsletter Queueing (CVSS 4.3, SendPress Newsletters)
- [CVE-2026-87109](https://cve.now/CVE-2026-87109.md): Ops Manager Sensitive MFA Enrollment Information Exposure in User Listings (CVSS 6.0, MongoDB Ops Manager)
- [CVE-2026-87108](https://cve.now/CVE-2026-87108.md): Ops Manager Improper Authorization in Daily Host Monitoring Retrieval (CVSS 2.3, MongoDB Ops Manager)
- [CVE-2026-87110](https://cve.now/CVE-2026-87110.md): Ops Manager Uncontrolled Resource Consumption in Monitoring Endpoints (CVSS 6.9, MongoDB Ops Manager)
- [CVE-2026-107914](https://cve.now/CVE-2026-107914.md): Backdrop CMS 1.34 before 1.34.5 and 1.35 before 1.35.1 doesn't sufficiently protect configuration exports when delivering a compressed archi (CVSS 7.8, backdropcms Backdrop)
- [CVE-2026-107911](https://cve.now/CVE-2026-107911.md): Type confusion in FalkorDB GRAPH.QUERY via the --bolt argument (CVSS 7.7, FalkorDB)
- [CVE-2026-107910](https://cve.now/CVE-2026-107910.md): Authentication bypass in FalkorDB Bolt endpoint via fail-open AUTH probe error handling (CVSS 9.2, FalkorDB)
- [CVE-2026-107909](https://cve.now/CVE-2026-107909.md): Pre-authentication heap out-of-bounds write in FalkorDB Bolt WebSocket frame handling via unbounded payload length (CVSS 8.8, FalkorDB)
- [CVE-2026-107908](https://cve.now/CVE-2026-107908.md): Pre-authentication heap out-of-bounds write in FalkorDB Bolt BoltReadHandler via RESET message (CVSS 9.3, FalkorDB)
- [CVE-2026-107889](https://cve.now/CVE-2026-107889.md): Keycloak-services: keycloak-services: stored xss on login page via kcsanitize bypass (CVSS 5.5, Red Hat Build of Keycloak · Red Hat Single Sign-On)
- [CVE-2026-107890](https://cve.now/CVE-2026-107890.md): OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests. (CVSS 3.3, OpenPrinting CUPS)
- [CVE-2026-107888](https://cve.now/CVE-2026-107888.md): OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a job marked job-held-on-create refers to a tem (CVSS 5.1, OpenPrinting CUPS)
- [CVE-2026-7826](https://cve.now/CVE-2026-7826.md): Heap out-of-bounds read in FalkorDB BufferSerializerIOv2\_ReadBuffer via crafted RDB (CVSS 8.8, FalkorDB)
- [CVE-2026-7827](https://cve.now/CVE-2026-7827.md): Stack-based buffer overflow in FalkorDB \_RdbLoadEntity via unbounded property count in crafted RDB (CVSS 9.2, FalkorDB)
- [CVE-2026-5759](https://cve.now/CVE-2026-5759.md): Double free and use-after-free in FalkorDB RdbLoadDeletedNodes allows remote code execution via crafted RDB (CVSS 9.3, FalkorDB)
- [CVE-2026-107886](https://cve.now/CVE-2026-107886.md): OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. (CVSS 2.3, OpenPrinting CUPS)
- [CVE-2026-107885](https://cve.now/CVE-2026-107885.md): OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs(). (CVSS 3.3, OpenPrinting CUPS)
- [CVE-2025-61560](https://cve.now/CVE-2025-61560.md): A race condition vulnerability in the SessionManager of CNCF: Cloud Native Computing Foundation Argo CD v3.0.6 allows attackers to bypass ra (CVSS 8.1)
- [CVE-2026-75345](https://cve.now/CVE-2026-75345.md): OpENer v2.3.0 / commit 76b95cf contains an out-of-bounds read in the unconnected explicit messaging path. (CVSS 7.5)
- [CVE-2026-75346](https://cve.now/CVE-2026-75346.md): An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master through commit 76b95cf in the server-side CIP SetAttribut (CVSS 7.5)
- [CVE-2026-75347](https://cve.now/CVE-2026-75347.md): EIPStackGroup OpENer v2.3 and master up to commit 76b95cf contain an expired pointer dereference vulnerability in the EtherNet/IP Common Pac (CVSS 7.5)
- [CVE-2026-75348](https://cve.now/CVE-2026-75348.md): An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master up to commit 76b95cf in the EtherNet/IP TCP SendRRData Co (CVSS 7.5)
- [CVE-2026-75349](https://cve.now/CVE-2026-75349.md): EIPStackGroup OpENer v2.3.0/master up to commit 76b95cf contains an out-of-bounds read vulnerability in Connection Manager request parsing. (CVSS 7.5)
- [CVE-2026-75350](https://cve.now/CVE-2026-75350.md): EIPStackGroup OpENer v2.3 / master commit 76b95cf contains a buffer overflow in the GetAttributeList() implementation for the EtherNet/IP Ge (CVSS 7.5)
- [CVE-2026-75351](https://cve.now/CVE-2026-75351.md): OpENer v2.3/commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. (CVSS 7.5)
- [CVE-2026-75352](https://cve.now/CVE-2026-75352.md): OpENer v2.3/commit 76b95cf, contains an integer underflow in the server-side EtherNet/IP ForwardOpen connection-path parser. (CVSS 7.5)
- [CVE-2026-75353](https://cve.now/CVE-2026-75353.md): OpENer v2.3/ commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. (CVSS 7.5)
- [CVE-2026-78795](https://cve.now/CVE-2026-78795.md): An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a remote attacker to (CVSS 7.5)
- [CVE-2026-78796](https://cve.now/CVE-2026-78796.md): An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a remote attacker to (CVSS 9.8)
- [CVE-2026-78797](https://cve.now/CVE-2026-78797.md): An issue in iStoreOS istoreos-24.10.7 and before allows a remote attacker to execute arbitrary code via the task\_id in tasks-lib.lua. (CVSS 9.8)
- [CVE-2026-78835](https://cve.now/CVE-2026-78835.md): Rocket Software Rocket Remote Desktop 18.0.8583.1 is vulnerable to Insufficiently Protected Credentials. (CVSS 9.8)
- [CVE-2026-79363](https://cve.now/CVE-2026-79363.md): Cloudron 9.1.7 and 9.2 contain a stored cross-site scripting (XSS) vulnerability in the Branding Footer feature. (CVSS 5.9)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-10-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.