rapid7

CVE-2026-113511: Apache Software Foundation Apache Syncope: Authorization bypass through User-Controlled key vulnerability in Apache Syncope

Authorization bypass through User-Controlled key vulnerability in Apache Syncope. A delegated administrator can relocate a Realm subtree across administrative realm boundaries without permission for ...
rapid7

CVE-2026-101179: Huawei HarmonyOS: Buffer overflow vulnerability in the file preview module

CVE-2026-101179: Huawei HarmonyOS: Buffer overflow vulnerability in the file preview module. View severity, references, and remediation details from Rapid7.
rapid7

CVE-2026-119480: Crocoblock JetFormBuilder: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Crocoblock…

CVE-2026-119480: Crocoblock JetFormBuilder: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Crocoblock…. View severity, references, and remediation ...
rapid7

CVE-2026-62048: Liquid Web / StellarWP BookIt: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web /…

CVE-2026-62048: Liquid Web / StellarWP BookIt: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web /…. View severity, references, and ...
rapid7

CVE-2026-118696: JetBrains: In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and…

CVE-2026-118696: JetBrains: In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and…. View severity ...
rapid7

CVE-2026-64860: Rejected reason: Further research determined the issue is not a vulnerability.

CVE-2026-64860: Rejected reason: Further research determined the issue is not a vulnerability.. View severity, references, and remediation details from Rapid7.
rapid7

CVE-2026-62047: Liquid Web / StellarWP Event Tickets: Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly…

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from ...
rapid7

CVE-2026-118562: Drupal Single Content Sync: Deserialization of Untrusted Data vulnerability in Drupal Single Content Sync allows Object Injection

CVE-2026-118562: Drupal Single Content Sync: Deserialization of Untrusted Data vulnerability in Drupal Single Content Sync allows Object Injection. View severity, references, and remediation details ...
rapid7

CVE-2026-118583: Drupal Field Permissions: Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing

Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing. This issue affects Field Permissions versions: from 0.0.0 to 1.6.0. With curated Threat Intelligence, you ...
rapid7

CVE-2026-62023: Unlimited Elements: Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons,…

Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Exploiting Incorrectly Configured ...
rapid7

CVE-2026-91913: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an…

CVE-2026-91913: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an…. View severity, references, and ...
rapid7

CVE-2026-112605: Apple Xcode: This issue was addressed with improved handling of symlinks

This issue was addressed with improved handling of symlinks. This issue is fixed in Xcode 27.2. An app may be able to read arbitrary files. With curated Threat Intelligence, you can see which ...