CVE-2026-39442
Unauthenticated PHP Object Injection in PressMart <= 1.2.26 versions.
PUBLISHED
- Vendor
- PressLayouts
- Product
- PressMart
- Provider severity
- HIGH
- Conflicts
- 0
Data & Insights
CVE Explorer
Search one exact, source-linked CVE snapshot by CVE ID or explicit vendor and product tokens. Provider severity, KEV, conflicts, and stale state remain separate observations—not a Baitaphish risk rating.
Exact snapshot results
353,537 CVE records
CVE-2026-39441
Unauthenticated SQL Injection in Feed KuantoKusta for WooCommerce – Free <= 5.3 versions.
PUBLISHED
- Vendor
- Naked Cat Plugins (by Webdados)
- Product
- Feed KuantoKusta for WooCommerce – Free
- Provider severity
- CRITICAL
- Conflicts
- 0
CVE-2026-39440
Improper Control of Generation of Code ('Code Injection') vulnerability in Funnelforms LLC FunnelFormsPro allows Remote Code Inclusion.This issue affects FunnelFormsPro: from n/a through 3.8.1.
PUBLISHED
- Vendor
- Funnelforms LLC
- Product
- FunnelFormsPro
- Provider severity
- CRITICAL
- Conflicts
- 0
CVE-2026-3944
A vulnerability was determined in itsourcecode University Management System 1.0. This vulnerability affects unknown code of the file /att_add.php. This manipulation of the argument Name causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.
PUBLISHED
- Vendor
- itsourcecode
- Product
- University Management System
- Provider severity
- HIGH, MEDIUM
- Conflicts
- 2
CVE-2026-39438
Unauthenticated SQL Injection in ListingPro <= 2.9.10 versions.
PUBLISHED
- Vendor
- Emraan Cheema
- Product
- ListingPro
- Provider severity
- CRITICAL
- Conflicts
- 0
CVE-2026-39437
Unauthenticated Cross Site Scripting (XSS) in Min Max Step Quantity Limits Manager for WooCommerce <= 5.2.2 versions.
PUBLISHED
- Vendor
- WPFactory
- Product
- Min Max Step Quantity Limits Manager for WooCommerce
- Provider severity
- HIGH
- Conflicts
- 0
CVE-2026-39436
Cross-Site Request Forgery (CSRF) vulnerability in bgermann CformsII allows Cross Site Request Forgery. This issue affects CformsII: from n/a through 15.1.3.
PUBLISHED
- Vendor
- bgermann
- Product
- CformsII
- Provider severity
- HIGH
- Conflicts
- 0
CVE-2026-39435
Unauthenticated Cross Site Scripting (XSS) in CformsII <= 15.1.3 versions.
PUBLISHED
- Vendor
- bgermann
- Product
- CformsII
- Provider severity
- HIGH
- Conflicts
- 0
CVE-2026-39434
Shop manager PHP Object Injection in CTX Feed <= 6.6.26 versions.
PUBLISHED
- Vendor
- WebAppick
- Product
- CTX Feed
- Provider severity
- HIGH
- Conflicts
- 0
CVE-2026-39433
Subscriber Arbitrary Content Deletion in WPAMS < 49.5.3 versions.
PUBLISHED
- Vendor
- mojoomla
- Product
- WPAMS
- Provider severity
- MEDIUM
- Conflicts
- 0
CVE-2026-39432
Missing Authorization vulnerability in Arraytics Timetics allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Timetics: from n/a through 1.0.53.
PUBLISHED
- Vendor
- Arraytics
- Product
- Timetics
- Provider severity
- HIGH
- Conflicts
- 0
CVE-2026-3943
A vulnerability was found in H3C ACG1000-AK230 up to 20260227. This affects an unknown part of the file /webui/?aaa_portal_auth_local_submit. The manipulation of the argument suffix results in command injection. The attack can be launched remotely. The exploit has been made public and could be used. The vendor is investigating and remediating this issue.
PUBLISHED
- Vendor
- H3C
- Product
- ACG1000-AK230
- Provider severity
- HIGH, MEDIUM
- Conflicts
- 2
CVE-2026-39429
kcp is a Kubernetes-like control plane for form-factors and use-cases beyond Kubernetes and container workloads. Prior to 0.30.3 and 0.29.3, the cache server is directly exposed by the root shard and has no authentication or authorization in place. This allows anyone who can access the root shard to read and write to the cache server. This vulnerability is fixed in 0.30.3 and 0.29.3.
PUBLISHED
- Vendor
- kcp-dev
- Product
- kcp
- Provider severity
- HIGH
- Conflicts
- 1
CVE-2026-39428
CubeCart is an ecommerce software solution. Prior to 6.6.0, a Stored Cross-Site Scripting (XSS) vulnerability exists in CubeCart v6.x. An attacker with administrative privileges can inject malicious JavaScript payloads into multiple fields during the creation or modification of a product. These payloads are stored in the database and executed whenever a user (customer or another administrator) views the affected product pages, which could lead to session hijacking or unauthorized actions. This v
PUBLISHED
- Vendor
- cubecart
- Product
- v6
- Provider severity
- MEDIUM
- Conflicts
- 0
CVE-2026-39426
MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a Stored Cross-Site Scripting (XSS) vulnerability where the frontend's MdRenderer.vue component parses custom <iframe_render> tags from LLM responses or Application Prologue configurations, bypassing standard Markdown sanitization and XSS filtering. The unsanitized HTML content is passed to the IframeRender.vue component, which renders it directly into an <iframe> via the srcdoc attribute configured with sandbo
PUBLISHED
- Vendor
- 1Panel-dev
- Product
- MaxKB
- Provider severity
- MEDIUM
- Conflicts
- 0
CVE-2026-39425
MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a Stored Cross-Site Scripting (XSS) vulnerability that allows authenticated users to inject arbitrary HTML and JavaScript into the Application prologue (Opening Remarks) field by wrapping malicious payloads in <html_rander> tags. The backend fails to sanitize or encode HTML entities in the prologue field when applications are created or updated via the /admin/api/workspace/{workspace_id}/application endpoint, s
PUBLISHED
- Vendor
- 1Panel-dev
- Product
- MaxKB
- Provider severity
- MEDIUM
- Conflicts
- 0
CVE-2026-39424
MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, the chat export feature is vulnerable to Improper Neutralization of Formula Elements in a CSV File. When an administrator exports the application chat history to an Excel file (.xlsx) via the /admin/api/workspace/{workspace_id}/application/{application_id}/chat/export endpoint, strings starting with formula characters are written directly without proper sanitization. Opening this file in spreadsheet applications li
PUBLISHED
- Vendor
- 1Panel-dev
- Product
- MaxKB
- Provider severity
- MEDIUM
- Conflicts
- 0
CVE-2026-39423
MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain an Eval Injection vulnerability in the Markdown rendering engine that allows any user capable of interacting with the AI chat interface to execute arbitrary JavaScript in the browsers of other users, including administrators, resulting in Stored Cross-Site Scripting (XSS). This issue has been fixed in version 2.8.0.
PUBLISHED
- Vendor
- 1Panel-dev
- Product
- MaxKB
- Provider severity
- MEDIUM
- Conflicts
- 1
CVE-2026-39422
MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a Stored Cross-Site Scripting (XSS) vulnerability through the application name or icon fields when creating an application. When a victim visits the public chat interface (/ui/chat/{access_token}), the ChatHeadersMiddleware retrieves the application data and directly inserts the unescaped application name and icon into the HTML response via string replacement. This allows an attacker to execute arbitrary JavaSc
PUBLISHED
- Vendor
- 1Panel-dev
- Product
- MaxKB
- Provider severity
- MEDIUM
- Conflicts
- 0
CVE-2026-39421
MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a sandbox escape vulnerability in the ToolExecutor component. By leveraging Python's ctypes library to execute raw system calls, an authenticated attacker with workspace privileges can bypass the LD_PRELOAD-based sandbox.so module to achieve arbitrary code execution via direct kernel system calls, enabling full network exfiltration and container compromise. The library intercepts critical standard system functi
PUBLISHED
- Vendor
- 1Panel-dev
- Product
- MaxKB
- Provider severity
- MEDIUM
- Conflicts
- 1
CVE-2026-39420
MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, an incomplete sandbox protection mechanism allows an authenticated user with tool execution privileges to escape the LD_PRELOAD-based sandbox. By env command the attacker can clear the environment variables and drop the sandbox.so hook, leading to unrestricted Remote Code Execution (RCE) and network access. MaxKB restricts untrusted Python code execution via the Tool Debug API by injecting sandbox.so through the LD
PUBLISHED
- Vendor
- 1Panel-dev
- Product
- MaxKB
- Provider severity
- MEDIUM
- Conflicts
- 1
CVE-2026-3942
Incorrect security UI in PictureInPicture in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
PUBLISHED
- Vendor
- Product
- Chrome
- Provider severity
- MEDIUM
- Conflicts
- 1
CVE-2026-39419
MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, an authenticated user can bypass sandbox result validation and spoof tool execution results by exploiting Python frame introspection to read the wrapper's UUID from its bytecode constants, then writing a forged result directly to file descriptor 1 (bypassing stdout redirection). By calling sys.exit(0), the attacker terminates the wrapper before it prints the legitimate output, causing the MaxKB service to parse and
PUBLISHED
- Vendor
- 1Panel-dev
- Product
- MaxKB
- Provider severity
- LOW
- Conflicts
- 1
CVE-2026-39418
MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, sandbox network protection can be bypassed by using socket.sendto() with the MSG_FASTOPEN flag. This allows authenticated user with tool-editing permissions to reach internal services that are explicitly blocked by the sandbox's banned hosts configuration. MaxKB's sandbox uses LD_PRELOAD to hook the connect() function and block connections to banned IPs, but Linux's sendto() with the MSG_FASTOPEN flag can establish
PUBLISHED
- Vendor
- 1Panel-dev
- Product
- MaxKB
- Provider severity
- MEDIUM
- Conflicts
- 0
CVE-2026-39417
MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain an incomplete fix for CVE-2025-53928, where a Remote Code Execution vulnerability still exists in the MCP node of the workflow engine. MaxKB only restricts the referencing code path (loading MCP config from the database). The else branch, responsible for loading mcp_servers directly from user-supplied JSON remains completely unpatched. Since mcp_source is an optional field (required=False), an attacker can simp
PUBLISHED
- Vendor
- 1Panel-dev
- Product
- MaxKB
- Provider severity
- MEDIUM
- Conflicts
- 1
CVE-2026-39416
AIL framework is an open-source platform to collect, crawl, process and analyse unstructured data. Prior to 6.8, a stored cross-site scripting (XSS) vulnerability was identified in the modal item preview functionality. When item content longer than 800 characters was processed, attacker-controlled content was returned without an explicit text/plain content type, allowing the browser to interpret the response as active HTML. This could result in execution of arbitrary JavaScript in the context of
PUBLISHED
- Vendor
- ail-project
- Product
- ail-framework
- Provider severity
- HIGH
- Conflicts
- 0
CVE-2026-39415
Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to 2.46.0, a vulnerability has been identified in Frappe Learning where quiz scores can be modified by students before submission. The application currently relies on client-side calculated scores, which can be altered using browser developer tools prior to sending the submission request. While this does not allow modification of other users’ data or privilege escalation, it compromises t
PUBLISHED
- Vendor
- frappe
- Product
- lms
- Provider severity
- MEDIUM
- Conflicts
- 0
CVE-2026-39414
MinIO is a high-performance object storage system. From RELEASE.2018-08-18T03-49-57Z to before RELEASE.2025-12-20T04-58-37Z, MinIO's S3 Select feature is vulnerable to memory exhaustion when processing CSV files containing lines longer than available memory. The CSV reader's nextSplit() function calls bufio.Reader.ReadBytes('\n') with no size limit, buffering the entire input in memory until a newline is found. A CSV file with no newline characters causes the entire contents to be read into a si
PUBLISHED
- Vendor
- minio
- Product
- minio
- Provider severity
- HIGH
- Conflicts
- 0
CVE-2026-39413
LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.4.14, the LightRAG API is vulnerable to a JWT algorithm confusion attack where an attacker can forge tokens by specifying 'alg': 'none' in the JWT header. Since the jwt.decode() call does not explicitly deny the 'none' algorithm, a crafted token without a signature will be accepted as valid, leading to unauthorized access. This vulnerability is fixed in 1.4.14.
PUBLISHED
- Vendor
- HKUDS
- Product
- LightRAG
- Provider severity
- MEDIUM
- Conflicts
- 0
CVE-2026-39412
LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.25.4, the sort_natural filter bypasses the ownPropertyOnly security option, allowing template authors to extract values of prototype-inherited properties through a sorting side-channel attack. Applications relying on ownPropertyOnly: true as a security boundary (e.g., multi-tenant template systems) are exposed to information disclosure of sensitive prototype properties such as API keys and tokens. Thi
PUBLISHED
- Vendor
- harttle
- Product
- liquidjs
- Provider severity
- MEDIUM
- Conflicts
- 0
CVE-2026-39411
LobeHub is a work-and-lifestyle space to find, build, and collaborate with agent teammates that grow with you. Prior to 2.1.48, the webapi authentication layer trusts a client-controlled X-lobe-chat-auth header that is only XOR-obfuscated, not signed or otherwise authenticated. Because the XOR key is hardcoded in the repository, an attacker can forge arbitrary auth payloads and bypass authentication on protected webapi routes. Affected routes include /webapi/chat/[provider], /webapi/models/[prov
PUBLISHED
- Vendor
- lobehub
- Product
- lobehub
- Provider severity
- MEDIUM
- Conflicts
- 1
CVE-2026-39410
Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.12, a discrepancy between browser cookie parsing and parse() handling allows cookie prefix protections to be bypassed. Cookie names that are treated as distinct by the browser may be normalized to the same key by parse(), allowing attacker-controlled cookies to override legitimate ones. This vulnerability is fixed in 4.12.12.
PUBLISHED
- Vendor
- honojs
- Product
- hono
- Provider severity
- MEDIUM
- Conflicts
- 0
CVE-2026-3941
Insufficient policy enforcement in DevTools in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)
PUBLISHED
- Vendor
- Product
- Chrome
- Provider severity
- MEDIUM
- Conflicts
- 1
CVE-2026-39409
Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.12, ipRestriction() does not canonicalize IPv4-mapped IPv6 client addresses (e.g. ::ffff:127.0.0.1) before applying IPv4 allow or deny rules. In environments such as Node.js dual-stack, this can cause IPv4 rules to fail to match, leading to unintended authorization behavior. This vulnerability is fixed in 4.12.12.
PUBLISHED
- Vendor
- honojs
- Product
- hono
- Provider severity
- MEDIUM
- Conflicts
- 0
CVE-2026-39408
Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.12, a path traversal issue in toSSG() allows files to be written outside the configured output directory during static site generation. When using dynamic route parameters via ssgParams, specially crafted values can cause generated file paths to escape the intended output directory. This vulnerability is fixed in 4.12.12.
PUBLISHED
- Vendor
- honojs
- Product
- hono
- Provider severity
- HIGH, MEDIUM
- Conflicts
- 1
CVE-2026-39407
Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.12, a path handling inconsistency in serveStatic allows protected static files to be accessed by using repeated slashes (//) in the request path. When route-based middleware (e.g., /admin/*) is used for authorization, the router may not match paths containing repeated slashes, while serveStatic resolves them as normalized paths. This can lead to a middleware bypass. This vulnerability is fixed in
PUBLISHED
- Vendor
- honojs
- Product
- hono
- Provider severity
- MEDIUM
- Conflicts
- 0
CVE-2026-39406
@hono/node-server allows running the Hono application on Node.js. Prior to 1.19.13, a path handling inconsistency in serveStatic allows protected static files to be accessed by using repeated slashes (//) in the request path. When route-based middleware (e.g., /admin/*) is used for authorization, the router may not match paths containing repeated slashes, while serveStatic resolves them as normalized paths. This can lead to a middleware bypass. This vulnerability is fixed in 1.19.13.
PUBLISHED
- Vendor
- honojs
- Product
- node-server
- Provider severity
- MEDIUM
- Conflicts
- 0
CVE-2026-39405
Frappe Learning Management System (LMS) is a learning system that helps users structure their content. In versions 2.50.0 and below, a user with course editing role could upload a SCORM ZIP package to write files outside the intended directory. This issue has been resolved in version 2.50.1.
PUBLISHED
- Vendor
- frappe
- Product
- lms
- Provider severity
- CRITICAL
- Conflicts
- 0
CVE-2026-39402
lxc is a Linux container runtime. In the setuid helper lxc-user-nic, the delete path contains a logic flaw in the find_line() function that allows an unprivileged user to delete OVS-attached network interfaces belonging to other users. When lxc-user-nic delete scans its NIC database to authorize a deletion request, the interface name comparison can set the authorization flag based on a name match alone, even when the ownership, type, and link fields in that database entry belong to a different u
PUBLISHED
- Vendor
- lxc
- Product
- lxc
- Provider severity
- MEDIUM
- Conflicts
- 0
CVE-2026-39401
Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.111, jb child processes can include an update_event key in their JSON output. The server applies this directly to the parent event's stored configuration without any authorization check. A low-privilege user who can create and run events can modify any event property, including webhook URLs and notification emails. This vulnerability is fixed in 0.9.111.
PUBLISHED
- Vendor
- jhuckaby
- Product
- Cronicle
- Provider severity
- MEDIUM
- Conflicts
- 0
CVE-2026-39400
Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.111, a non-admin user with create_events and run_events privileges can inject arbitrary JavaScript through job output fields (html.content, html.title, table.header, table.rows, table.caption). The server stores this data without sanitization, and the client renders it via innerHTML on the Job Details page. This vulnerability is fixed in 0.9.111.
PUBLISHED
- Vendor
- jhuckaby
- Product
- Cronicle
- Provider severity
- MEDIUM
- Conflicts
- 0
CVE-2026-3940
Insufficient policy enforcement in DevTools in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)
PUBLISHED
- Vendor
- Product
- Chrome
- Provider severity
- MEDIUM
- Conflicts
- 1
CVE-2026-39399
NuGet Gallery is a package repository that powers nuget.org. A security vulnerability exists in the NuGetGallery backend job’s handling of .nuspec files within NuGet packages. An attacker can supply a crafted nuspec file with malicious metadata, leading to cross package metadata injection that may result in remote code execution (RCE) and/or arbitrary blob writes due to insufficient input validation. The issue is exploitable via URI fragment injection using unsanitized package identifiers, allow
PUBLISHED
- Vendor
- NuGet
- Product
- NuGetGallery
- Provider severity
- CRITICAL
- Conflicts
- 1
CVE-2026-39397
@delmaredigital/payload-puck is a PayloadCMS plugin for integrating Puck visual page builder. Prior to 0.6.23, all /api/puck/* CRUD endpoint handlers registered by createPuckPlugin() called Payload's local API with the default overrideAccess: true, bypassing all collection-level access control. The access option passed to createPuckPlugin() and any access rules defined on Puck-registered collections were silently ignored on these endpoints. This vulnerability is fixed in 0.6.23.
PUBLISHED
- Vendor
- delmaredigital
- Product
- payload-puck
- Provider severity
- CRITICAL
- Conflicts
- 0
CVE-2026-39396
OpenBao is an open source identity-based secrets management system. Prior to version 2.5.3, `ExtractPluginFromImage()` in OpenBao's OCI plugin downloader extracts a plugin binary from a container image by streaming decompressed tar data via `io.Copy` with no upper bound on the number of bytes written. An attacker who controls or compromises the OCI registry referenced in the victim's configuration can serve a crafted image containing a decompression bomb that decompresses to an arbitrarily large
PUBLISHED
- Vendor
- openbao
- Product
- openbao
- Provider severity
- LOW
- Conflicts
- 1
CVE-2026-39395
Cosign provides code signing and transparency for containers and binaries. Prior to 3.0.6 and 2.6.3, cosign verify-blob-attestation may erroneously report a "Verified OK" result for attestations with malformed payloads or mismatched predicate types. For old-format bundles and detached signatures, this was due to a logic flaw in the error handling of the predicate type validation. For new-format bundles, the predicate type validation was bypassed completely. This vulnerability is fixed in 3.0.6 a
PUBLISHED
- Vendor
- sigstore
- Product
- cosign
- Provider severity
- MEDIUM
- Conflicts
- 0
CVE-2026-39394
CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to 0.31.4.0, the Install::index() controller reads the host POST parameter without any validation and passes it directly into updateEnvSettings(), which writes it into the .env file via preg_replace(). Because newline characters in the value are not stripped, an attacker can inject arbitrary configuration directives into the .env file. The install ro
PUBLISHED
- Vendor
- ci4-cms-erp
- Product
- ci4ms
- Provider severity
- HIGH
- Conflicts
- 0
CVE-2026-39393
CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to 0.31.4.0, the install route guard in ci4ms relies solely on a volatile cache check (cache('settings')) combined with .env file existence to block post-installation access to the setup wizard. When the database is temporarily unreachable during a cache miss (TTL expiry or admin-triggered cache clear), the guard fails open, allowing an unauthenticat
PUBLISHED
- Vendor
- ci4-cms-erp
- Product
- ci4ms
- Provider severity
- HIGH
- Conflicts
- 0
CVE-2026-39392
CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to 0.31.4.0, the Pages module does not apply the html_purify validation rule to content fields during create and update operations, while the Blog module does. Page content is stored unsanitized in the database and rendered as raw HTML on the public frontend via echo $pageInfo->content. An authenticated admin with page-editing privileges can inject a
PUBLISHED
- Vendor
- ci4-cms-erp
- Product
- ci4ms
- Provider severity
- MEDIUM
- Conflicts
- 0
CVE-2026-39391
CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to 0.31.4.0, the blacklist (ban) note parameter in UserController::ajax_blackList_post() is stored in the database without sanitization and rendered into an HTML data-note attribute without escaping. An admin with blacklist privileges can inject arbitrary JavaScript that executes in the browser of any other admin who views the user management page. T
PUBLISHED
- Vendor
- ci4-cms-erp
- Product
- ci4ms
- Provider severity
- MEDIUM
- Conflicts
- 0