Exploited and new serious CVEs: November 2026

Reset Database <= 1.1.3 - Authenticated (Subscriber+) Privilege Escalation to Missing Capability and Nonce Check in process_reset()

maltesesolutions · reset databaseToday

WordPress Kit (formerly ConvertKit) plugin <= 3.5.0 - Broken Access Control vulnerability

• Pre-auth
• Broken access control (IDOR)

kit · kit (formerly convertkit)Today

WordPress RestroPress plugin <= 3.4.11 - Cross Site Request Forgery (CSRF) vulnerability

• Pre-auth
• CSRF

magnigenie · restropressToday

Apache Roller: XML external entity processing in AtomPub entry parsing

• XXE

apache software foundation · apache rollerToday

Apache Roller: Cross-site request forgery through GET requests to administrative actions

• Pre-auth
• CSRF

apache software foundation · apache rollerToday

WordPress Edwiser Bridge plugin <= 4.3.4 - Cross Site Request Forgery (CSRF) vulnerability

• Pre-auth
• CSRF

wisdmlabs · edwiser bridgeToday

Ninja Forms - File Uploads <= 3.3.36 - Unauthenticated Arbitrary File Deletion via 'files[].data.file_path' Parameter via 'extra.saveProgress'

• Pre-auth
• Path traversal

saturdaydrive · ninja forms - file uploadsToday

BlueprintUE Self-Hosted Edition 1.0.0 before 4.3.5 Storage Exhaustion via Anonymous Blueprints

• Pre-auth
• Denial of service

blueprintue · blueprintue-self-hosted-editionToday

Contao 4.0.0 before 5.3.54, 5.4.0 before 5.7.17, and 6.0.0 before 6.0.6 Filemount Bypass via Edit-Multiple

• Broken access control (IDOR)

contao · contaoToday

An attacker who gains the ability to execute arbitrary code on a system with TrueConf Server (Linux) versions from 4.7.2 up to, but not incl

• RCE
• Local privilege escalation

trueconf · trueconf serverToday

WordPress Quality theme <= 3.3 - Cross Site Request Forgery (CSRF) vulnerability

• Pre-auth
• CSRF

webriti · qualityToday

WordPress ElitePress theme <= 3.2.1 - Cross Site Request Forgery (CSRF) vulnerability

• Pre-auth
• CSRF

webriti · elitepressToday

WordPress Rambo theme <= 3.0 - Cross Site Request Forgery (CSRF) vulnerability

• Pre-auth
• CSRF

webriti · ramboToday

WordPress Heroic theme <= 1.4.2 - Cross Site Request Forgery (CSRF) vulnerability

• Pre-auth
• CSRF

webriti · heroicToday

WordPress Wallstreet Agency theme <= 1.3.4 - Cross Site Request Forgery (CSRF) vulnerability

• Pre-auth
• CSRF

webriti · wallstreet agencyToday

WordPress Spasalon theme <= 3.0 - Cross Site Request Forgery (CSRF) vulnerability

• Pre-auth
• CSRF

webriti · spasalonToday

WordPress vice theme <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability

• Pre-auth
• CSRF

webriti · viceToday

WordPress vdequator theme <= 1.2.7 - Cross Site Request Forgery (CSRF) vulnerability

• Pre-auth
• CSRF

webriti · vdequatorToday

WordPress Mazino theme <= 1.1 - Cross Site Request Forgery (CSRF) vulnerability

• Pre-auth
• CSRF

webriti · mazinoToday

WordPress vdperanto theme <= 2.2 - Cross Site Request Forgery (CSRF) vulnerability

• Pre-auth
• CSRF

webriti · vdperantoToday

WordPress Leo theme <= 1.7.4 - Cross Site Request Forgery (CSRF) vulnerability

• Pre-auth
• CSRF

webriti · leoToday

WordPress Shk Corporate theme <= 2.4.3 - Cross Site Request Forgery (CSRF) vulnerability

• Pre-auth
• CSRF

webriti · shk corporateToday

WordPress Appointment Dark theme <= 1.3.4 - Cross Site Request Forgery (CSRF) vulnerability

• Pre-auth
• CSRF

webriti · appointment darkToday

Cross-instance user impersonation through image renderer JWTs

• Info leak

grafana · grafana ossToday

Privilege escalation through folder move in the folders API

grafana · grafana enterpriseToday

Folder permission bypass in the Git Sync repository files API

• Info leak

grafana · grafana enterpriseToday

Quay: red hat quay: unauthenticated registry signing-key takeover via service key rotation

• Pre-auth

red hat · red hat quay 3Today

Critical Remote Code Execution (RCE) vulnerability reported in Windchill

• pre-auth RCE
• Deserialization

ptc · windchillToday

Unauthenticated Payment Status Manipulation in Sipay Electronic Money's WordPress (WooCommerce)

• Pre-auth
• Auth bypass

sipay electronic money and payment services inc. · woocommerce virtual pos moduleToday

Switch Engine (EXOS) JSON-RPC Authorization Bypass Allows Read-Only Users to Disclose Sensitive Information

• Broken access control (IDOR)

extreme networks · switch engine (exos)Today

soapbar: verify_envelope_bsp accepts an unauthenticated embedded certificate (signature forgery / authentication bypass)

• Pre-auth
• Auth bypass
• Weak crypto

hitoshyamamoto · soapbarToday

Quay: quay: sql like wildcard injection in robot listing leaks cross-tenant robot tokens

• SQL injection

red hat · red hat openshift update serviceToday

Cross-Site Scripting in DropDownButton and SplitButton Items in Kendo UI for jQuery

• Pre-auth
• XSS

progress software · kendo ui for jqueryToday

Cross-Site Scripting via the spriteCssClass Field in Kendo UI for jQuery

• Pre-auth
• XSS

progress software · kendo ui for jqueryToday

Cross-Site Scripting in Kendo UI for jQuery ActionSheet Header Labels

• Pre-auth
• XSS

progress software · kendo ui for jqueryToday

Cross-Site Scripting During Kendo UI for jQuery Custom SVG Icon Sanitization

• Pre-auth
• XSS

progress software · kendo ui for jqueryToday

Cross-Site Scripting in Kendo UI for jQuery Grid and TreeList Column Reordering

• Pre-auth
• XSS

progress software · kendo ui for jqueryToday

Cross-Site Scripting in Kendo UI for jQuery PivotGrid Axis Chips

• Pre-auth
• XSS

progress software · kendo ui for jqueryToday

Cross-Site Scripting in Kendo UI for jQuery PropertyGrid Values and Descriptions

• Pre-auth
• XSS

progress software · kendo ui for jqueryToday

An improper permissions vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute code with

• Local privilege escalation

lenovo · system updateToday

A deserialization of untrusted data vulnerability was discovered in Lenovo System Update that could allow a local authenticated user to exec

• Deserialization
• Local privilege escalation

lenovo · system updateToday

During an internal security assessment, a potential vulnerability was discovered in Lenovo PC Manager, distributed exclusively in the Chines

• Local privilege escalation

lenovo · pc managerToday

ClassFactory Race Condition and Retained Assembly Memory in Telerik UI for ASP.NET MVC

• Pre-auth
• Auth bypass
• Race condition

progress software · telerik ui for asp.net mvcToday

External Control of Configuration Setting in Telerik Report Server

• Pre-auth

progress software · telerik report serverToday

Uncontrolled Resource Consumption in Telerik UI for ASP.NET Core Server-side Aggregation

• Pre-auth
• Auth bypass
• Denial of service

progress software · telerik ui for asp.net coreToday

An authorization bypass in Revive Adserver 6.0.0 through 6.0.8 allows an authenticated manager restricted to one agency to access or modify

• Broken access control (IDOR)

revive · adserverToday

Blind SQL injection in Revive Adserver 6.0.8 and earlier allows an authenticated manager restricted to one agency to extract arbitrary datab

• SQL injection

revive · adserverToday

OWASP CRS: ReDoS in shared unix-shell-evasion regex-assembly include (12 RCE rules) - PCRE2 backtracking-limit exhaustion causes detection bypass and CPU DoS

• pre-auth RCE
• Denial of service

coreruleset · corerulesetToday

OWASP CRS: XML Attribute Value Bypass

• pre-auth RCE
• XSS

coreruleset · corerulesetToday

aeon: Privileged GitHub Actions workflow allowed fork-controlled code execution

• pre-auth RCE

aeon-toolkit · aeonToday

Dell Ansible Storage for PowerFlex, versions prior to 3.2.0, contains an Improper Certificate Validation vulnerability in the API client com

• Pre-auth
• Weak crypto

dell · ansible storage for powerflexToday

Dell Ansible Storage for PowerStore, versions prior to 3.9.0, contains an Improper Certificate Validation vulnerability in the API client co

• Pre-auth
• Weak crypto

dell · ansible storage for powerstoreToday

Dell Terraform for ObjectScale and Powerstore, versions prior to 1.1.1 (ObjectScale) and versions 1.2.1 through 1.3.0 (PowerStore) contains

• Info leak

dell · terraform provider for objectscaleToday

Dell Ansible Storage for Unity , versions prior to 1.2.13 contains an Improper Certificate Validation vulnerability in the UnityRESTConnecto

• Pre-auth
• Weak crypto

dell · ansible storage for unityToday

Xfsprogs: xfsprogs: local privilege escalation via command injection in xfs_admin

• RCE
• Local privilege escalation
• Command injection

red hat · red hat enterprise linux 10Today

Pappl-retrofit: directory traversal in the add-ppdfiles and delete-ppdfiles actions

• RCE
• Path traversal

openprinting · pappl-retrofitToday

Node.js is vulnerable to a remote HTTP/2 denial of service via a reachable assertion in Http2Session teardown

• Pre-auth

nodejs · nodeToday

Node.js is vulnerable to cross-connection memory disclosure via TLS write re-entrancy in the HTTPS request parser

• Pre-auth
• Memory safety

nodejs · nodeToday

Node.js is vulnerable to an HTTP/2 memory and file-descriptor leak via a protocol error during session shutdown

• Pre-auth
• Denial of service

nodejs · nodeToday

Node.js is vulnerable to HTTP/2 response memory disclosure via a use-after-free during stream teardown

• Pre-auth
• Memory safety

nodejs · nodeToday

Node.js is vulnerable to a client certificate authentication bypass via TLS 1.2 renegotiation servername change

• Auth bypass

nodejs · nodeToday

Node.js is vulnerable to an HTTP/2 use-after-free via respondWithFile() stream reset during a pending write

• Pre-auth
• Memory safety
• Denial of service

nodejs · nodeToday

Node.js is vulnerable to a remotely triggerable uncaught exception in TLS servers via deferred handshake callbacks

• Pre-auth
• Memory safety
• Denial of service

nodejs · nodeToday

OpsTree REMS through 1.0.0 Authentication Bypass via is_local_auth Flag

• Pre-auth
• Auth bypass

opstree solutions · remsToday

OpsTree REMS through 1.0.0 Missing Authentication via /api/v1/databases Governance API

• Pre-auth
• Auth bypass

opstree solutions · remsToday

@tinacms/mdx before 2.4.2 Code Injection via MDX Serializer Rich-Text Values

• RCE

tinacms · @tinacms/mdxToday

Traccar 3.15 before 6.17.0 Authentication Bypass via Empty LDAP Password

• Pre-auth
• Auth bypass

traccar · traccarToday

Spatie Browsershot 2.2.0 before 5.5.0 Local File Read via setHtml()

• Pre-auth
• Path traversal

spatie · browsershotToday

Webmin through 2.670 Privilege Escalation via acl/save_group.cgi

webmin · webminToday

Webmin through 2.670 Users File Injection via acl/cert_issue.cgi

webmin · webminToday

geojson-vt: Uncontrolled Recursion in Nested GeoJSON GeometryCollection

• Pre-auth
• Denial of service

maplibre · geojson-vtToday

Probo: Cross-tenant IDOR via unvalidated FK references

• Broken access control (IDOR)

getprobo · proboToday

Fider: Cross-Tenant Authentication Bypass via Missing tenant_id Filter in getVerificationByKey

• Auth bypass
• Broken access control (IDOR)

getfider · fiderToday

sync-rpc: Arbitrary remote code execution vulnerability

• pre-auth RCE
• Auth bypass

forbeslindesay · sync-rpcToday

Fider: Server-Side Request Forgery (SSRF) via Webhook URL

• SSRF

getfider · fiderToday

Probo: Vertical privilege escalation

getprobo · proboToday

Cockpit: cockpit: denial of service via unbounded fragmented websocket messages

• Pre-auth
• Denial of service

red hat · red hat enterprise linux 10Today

Dell OpenManage Ansible Modules, versions 2.1.2 through 10.0.3, contains an Improper Certificate Validation vulnerability in the iDRACRedfis

• Pre-auth
• Weak crypto

dell · openmanage ansible modulesToday

Dell OpenManage Ansible Modules, versions 5.0.0 through 10.0.3, contains an Improper Certificate Validation vulnerability in the iDRACConnec

• Pre-auth
• Weak crypto

dell · openmanage ansible modulesToday

Dell OpenManage Ansible Modules, versions 9.2.0 through 10.0.3, contains an Improper Certificate Validation vulnerability in the SessionAPI

• Pre-auth
• Weak crypto

dell · openmanage ansible modulesToday

Dell OpenManage Ansible Modules, versions 2.0.2 through 10.0.3, contains an Improper Neutralization of Special Elements in Data Query Logic

• SQL injection

dell · openmanage ansible modulesToday

Dell OpenManage Ansible Modules, versions 6.0.0 through 10.0.3, contains an Improper Neutralization of Special Elements in Output Used by a

dell · openmanage ansible modulesToday

Dell Terraform Provider for PowerFlex, versions 1.5.0 through 1.8.0, contains an Improper Certificate Validation vulnerability in the SSH cl

• Pre-auth
• Weak crypto

dell · terraform provider for powerflexToday

Dell Terraform Provider for PowerStore, versions prior to 1.3.1 , contains a  vulnerability that may cause sensitive authentication data to

• Pre-auth
• Info leak

dell · terraform provider for powerstoreToday

AsiaInfo BSS Platform 9.2 before 9.2.38 has a stored cross-site scripting (XSS) vulnerability in the menu icon upload function.

• XSS

asiainfo · bss platformToday

Pre-account hijacking via planted password

• Pre-auth
• Auth bypass

xauendevs · lagarto chivatoToday

Cockpit: cockpit: local privilege escalation via insecure symlink handling in public key addition helper

• Local privilege escalation

red hat · red hat enterprise linux 10Today

Missing authorization on the external management API in mcp-gateway-registry enables privilege escalation to registry administrator

aws · mcp-gateway-registryToday

ideon: SSRF protection bypass via IPv6 transition addresses (NAT64 / 6to4 / IPv4-mapped) in link preview

• SSRF

3xpyth0n · ideonToday

NextScan 1.1.0 through 1.2.0 Hardcoded JWT Key Authentication Bypass in ns-admin

• Pre-auth
• Auth bypass
• Hard-coded credentials

tongcheng-security-team · nextscanToday

Hydro @hydrooj/ui-default before 4.59.1 Stored XSS via Markdown language- Class

• XSS

hydro-dev · @hydrooj/ui-defaultToday

Rote 1.2.0 through 2.6.0 Account Takeover via OAuth Account Merge Endpoint

• Broken access control (IDOR)

rabithua · roteToday

NextScan 1.1.0 through 1.2.0 Hardcoded Credentials in ns-admin Agent and External APIs

• Pre-auth
• Hard-coded credentials

tongcheng-security-team · nextscanToday

Rote through 2.6.0 Privilege Escalation via Admin Settings API JWT Secret Exposure

rabithua · roteToday

WWBN AVideo 12.4 through 29.7.1 Path Traversal File Deletion via deleteImage.json.php

• Path traversal

wwbn · avideoToday

WWBN AVideo through 29.7.1 Privilege Escalation via Encoder video_id_hash

• Broken access control (IDOR)

wwbn · avideoToday

WWBN AVideo 14.3 through 29.7.1 Stored XSS via Video Source Tag

• XSS

wwbn · avideoToday

blueprintUE Self-Hosted Edition before 4.3.7 Empty MariaDB Root Password via Docker Compose

• Pre-auth

blueprintue · blueprintue-self-hosted-editionToday

Roundcube Webmail before 1.6.21 and 1.7.6 IMAP Command Injection via _uid

• pre-auth RCE
• Command injection

roundcube · webmailToday

ideon: Read-only project viewers can wipe and rewrite the canvas and tamper with blocks/files via role-unchecked project endpoints

• Pre-auth
• Broken access control (IDOR)

3xpyth0n · ideonToday