- EPSS -
- Published 13.10.2026 01:05:46
- Last modified 13.10.2026 02:17:00
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitL...
- EPSS 0.31%
- Published 08.10.2026 06:42:09
- Last modified 08.10.2026 17:24:11
The Bricksforge plugin for WordPress is vulnerable to unauthenticated arbitrary file upload in versions up to, and including, 3.1.8.9. This is due to insufficient validation of the attacker-controlled URL field in the 'temporaryFileUploads' parameter...
- EPSS 0.48%
- Published 07.10.2026 13:07:13
- Last modified 07.10.2026 16:17:32
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could potentially exploit this vulnerability to direct th...
- EPSS 93.91%
- Published 13.05.2026 18:15:10
- Last modified 09.06.2026 12:47:03
Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection. Panorama and Cloud NGFW are not im...