Severity: Critical (CVSS 10) Affected Systems: Affected products listed in the NVD and vendor advisory Overview A critical vulnerability identified as CVE-2026-4357 has been disclosed. The Embed HTML5 Game WordPress plugin through 1.3 does not properly restrict who can upload files via the plugin, as well as what can be uploaded, making it ... Read More »
Severity: Critical (CVSS 10) Affected Systems: Affected products listed in the NVD and vendor advisory Overview A critical vulnerability identified as CVE-2026-83548 has been disclosed. A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated ... Read More »
Severity: High (CVSS 7.8) Affected Systems: Affected products listed in the NVD and vendor advisory Overview A high vulnerability identified as CVE-2026-83549 has been disclosed. Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 Appliance ... Read More »
Severity: High (CVSS 8.8) Affected Systems: Linuxfoundation Kubeedge Overview KubeEdge CloudCore through 1.23.1 Missing Authentication on Node Task Endpoints A high vulnerability identified as CVE-2026-82473 has been disclosed. KubeEdge CloudCore through 1.23.1 accepts node task status reports on its HTTPS server without authentication ... Read More »
