Severity: Critical (CVSS 10) Affected Systems: Affected products listed in the NVD and vendor advisory Overview A critical vulnerability identified as CVE-2026-76606 has been disclosed. Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.3 - ???. Risk CVSS and CISA data indicate the following: CVSS attack vector is ... Read More »
Severity: Critical (CVSS 10) Affected Systems: Affected products listed in the NVD and vendor advisory Overview A critical vulnerability identified as CVE-2026-76607 has been disclosed. Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik < 4.7.3 - ???. Risk CVSS and CISA data indicate the following: CVSS attack ... Read More »
Severity: Critical (CVSS 10) Affected Systems: Affected products listed in the NVD and vendor advisory Overview A critical vulnerability identified as CVE-2026-61539 has been disclosed. Xinference is an inference API for running open-source, speech, and multimodal models. In 2.5.0 and earlier, Xinference passes attacker-influenced Llama3 ... Read More »
Severity: High (CVSS 7.1) Affected Systems: Paymob Paymob For Woocommerce; Wordpress Wordpress Overview WordPress Paymob for WooCommerce plugin A high vulnerability identified as CVE-2026-66611 has been disclosed. Unauthenticated Cross Site Scripting (XSS) in Paymob for WooCommerce Read More »
