Skip to content
Fencer Intel

Latest vulnerabilities

Newest first, late arrivals on top. Also a feed.

  1. 4.3
    CVE-2026-10844 IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities
  2. 5.5
    CVE-2026-108292 Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026
  3. 6.5
    CVE-2026-108284 IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities
  4. 9.9
    CVE-2026-107331 DataStage on Cloud Pak for Data has several vulnerabilities
  5. 7.7
    CVE-2026-107330 DataStage on Cloud Pak for Data has several vulnerabilities
  6. 4.6
    CVE-2026-105473 IBM QRadar SIEM is vulnerable to Open Redirect and Reflected XSS
  7. 8.1
    CVE-2026-105467 IBM QRadar SIEM is vulnerable to Open Redirect and Reflected XSS
  8. 4.3
    CVE-2026-103320 IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities
  9. 5.9
    GHSA-67xj-gfww-g738 Quadratic complexity in selector parsing allows CPU exhaustion
    npm unreviewed · maintainers only
  10. 3.6
    CVE-2026-102618 IBM i is Affected by a Protection Mechanism Failure
  11. 9.1
    CVE-2026-101117 IBM WebSphere eXtremes Scale Liberty deployment is affected by Cross Site Scripting(XSS) attacks.
  12. 5.3
    CVE-2025-36075 IBM Safer Payments could allow an authenticated user to obtain sensitive information
  13. 6.5
    CVE-2026-61987 WordPress WCFM – Frontend Manager for WooCommerce plugin <= 6.8.1 - Cross Site Scripting (XSS) vulnerability
    WordPress
  14. 6.5
    CVE-2026-114186 WordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerability
    WordPress
  15. 8.5
    CVE-2026-114189 WordPress AnyWhere Elementor plugin <= 1.3.0 - SQL Injection vulnerability
    WordPress
  16. 9.6
    CVE-2026-109900 WordPress Melapress Role Editor plugin <= 1.3.0 - Privilege Escalation vulnerability
    WordPress
  17. 6.5
    CVE-2026-120858 WordPress FluentForm plugin <= 6.2.16 - Broken Access Control vulnerability
    WordPress
  18. 7.1
    CVE-2026-109899 WordPress Melapress Role Editor plugin <= 1.3.0 - Broken Access Control vulnerability
    WordPress
  19. 6.5
    CVE-2026-114188 WordPress AnyWhere Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability
    WordPress
  20. 5.4
    CVE-2025-1837 Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge
  21. 2.7
    CVE-2025-0166 Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge
  22. 5.3
    CVE-2024-41786 IBM Engineering Requirements Management DOORS Next for J2EE File Disclosure Rule
  23. 4.3
    CVE-2026-124503 sooperset mcp-atlassian io.py validate_safe_path path traversal
    maintainer advisory
  24. 5.3
    GHSA-x54x-chhh-hg94 Critic extension: quadratic and cubic processing time on unclosed CriticMarkup
    pypi unreviewed · maintainers only
  25. 4.8
    CVE-2026-124552 Webmin through 2.670 Stored XSS via Shorewall and Shorewall6 list.cgi
  26. 5.3
    CVE-2026-124551 ClassroomIO through 1.0.0 Cross-Organization Course Disclosure via Clone Endpoint
  27. 7.3
    CVE-2026-124331 Jinher OA ProjectAfficheManage.aspx sql injection
  28. 5.0
    CVE-2026-124330 FlowCI flow-core-x LocalFileManager LocalFileManager.java remove path traversal
  29. 5.0
    CVE-2026-124329 FlowCI flow-core-x FileHelper.java FileHelper.unzip path traversal
  30. 7.4
    CVE-2026-82509 V Programming Language net.http TLS Certificate Validation Bypass
    maintainer advisory