- EPSS 0.31%
- Published 08.10.2026 06:42:09
- Last modified 08.10.2026 17:24:11
The Bricksforge plugin for WordPress is vulnerable to unauthenticated arbitrary file upload in versions up to, and including, 3.1.8.9. This is due to insufficient validation of the attacker-controlled URL field in the 'temporaryFileUploads' parameter...
- EPSS 0.48%
- Published 07.10.2026 13:07:13
- Last modified 07.10.2026 16:17:32
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could potentially exploit this vulnerability to direct th...
- EPSS 93.91%
- Published 13.05.2026 18:15:10
- Last modified 09.06.2026 12:47:03
Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection. Panorama and Cloud NGFW are not im...