rapid7

CVE-2026-113511: Apache Software Foundation Apache Syncope: Authorization bypass through User-Controlled key vulnerability in Apache Syncope

Authorization bypass through User-Controlled key vulnerability in Apache Syncope. A delegated administrator can relocate a Realm subtree across administrative realm boundaries without permission for ...
rapid7

CVE-2026-101179: Huawei HarmonyOS: Buffer overflow vulnerability in the file preview module

CVE-2026-101179: Huawei HarmonyOS: Buffer overflow vulnerability in the file preview module. View severity, references, and remediation details from Rapid7.
rapid7

CVE-2026-119480: Crocoblock JetFormBuilder: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Crocoblock…

CVE-2026-119480: Crocoblock JetFormBuilder: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Crocoblock…. View severity, references, and remediation ...
rapid7

CVE-2026-62048: Liquid Web / StellarWP BookIt: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web /…

CVE-2026-62048: Liquid Web / StellarWP BookIt: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web /…. View severity, references, and ...
rapid7

CVE-2026-94361: Unknown Payable Payment Gateway for WooCommerce: The Payable Payment Gateway for WooCommerce WordPress plugin before 1.3.1 does not verify the authenticity of an…

CVE-2026-94361: Unknown Payable Payment Gateway for WooCommerce: The Payable Payment Gateway for WooCommerce WordPress plugin before 1.3.1 does not verify the authenticity of an…. View severity, ...
rapid7

CVE-2026-90960: seraphinitesoft Seraphinite Accelerator: The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to,…

CVE-2026-90960: seraphinitesoft Seraphinite Accelerator: The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to,…. View severity, ...
rapid7

CVE-2026-118696: JetBrains: In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and…

CVE-2026-118696: JetBrains: In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and…. View severity ...
rapid7

CVE-2026-62047: Liquid Web / StellarWP Event Tickets: Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly…

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from ...
rapid7

CVE-2026-64860: Rejected reason: Further research determined the issue is not a vulnerability.

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
rapid7

CVE-2026-118562: Drupal Single Content Sync: Deserialization of Untrusted Data vulnerability in Drupal Single Content Sync allows Object Injection

CVE-2026-118562: Drupal Single Content Sync: Deserialization of Untrusted Data vulnerability in Drupal Single Content Sync allows Object Injection. View severity, references, and remediation details ...
rapid7

CVE-2026-62023: Unlimited Elements: Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons,…

Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Exploiting Incorrectly Configured ...
rapid7

CVE-2026-118583: Drupal Field Permissions: Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing

Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing. This issue affects Field Permissions versions: from 0.0.0 to 1.6.0. With curated Threat Intelligence, you ...