CVE-2026-22236

Improper Authentication Vulnerability in BLUVOYIX

The vulnerability exists in BLUVOYIX due to improper authentication in the BLUVOYIX backend APIs. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable APIs. Successful exploitation of this vulnerability could allow the attacker to gain full access to customers' data and completely compromise the targeted platform.

CVSS 4.0 · 10 Critical EPSS < 1% KEV · Not listed

Vendors

Bluspark Global Blusparkglobal

Products

Bluvoyix Bluvoyix

CVE-2026-22237

Exposed Internal API Documentation Vulnerability in BLUVOYIX

The vulnerability exists in BLUVOYIX due to the exposure of sensitive internal API documentation. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the APIs exposed by the documentation. Successful exploitation of this vulnerability could allow the attacker to cause damage to the targeted platform by abusing internal functionality.

CVSS 4.0 · 10 Critical EPSS < 1% KEV · Not listed

Vendors

Bluspark Global Blusparkglobal

Products

Bluvoyix Bluvoyix

CVE-2026-22238

Administrator Account Creation Vulnerability in BLUVOYIX

The vulnerability exists in BLUVOYIX due to improper authentication in the BLUVOYIX admin APIs. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable admin API to create a new user with admin privileges. Successful exploitation of this vulnerability could allow the attacker to gain full access to customers' data and completely compromise the targeted platform by logging in to the newly-created admin user.

CVSS 4.0 · 10 Critical EPSS < 1% KEV · Not listed

Vendors

Bluspark Global Blusparkglobal

Products

Bluvoyix Bluvoyix

CVE-2026-21623

Extension - stackideas.com - Persistent XSS in EasyDiscuss component 1.0.0-5.0.15 for Joomla

Lack of input filterung leads to a persistent XSS vulnerability in the forum post handling of the Easy Discuss component for Joomla.

CVSS 4.0 · 9.4 Critical EPSS < 1% KEV · Not listed

Vendors

Stackideas

Products

Easydiscuss

CVE-2026-21624

Extension - stackideas.com - Persistent XSS in EasyDiscuss component 1.0.0-5.0.15 for Joomla

Lack of input filterung leads to a persistent XSS vulnerability in the user avatar text handling of the Easy Discuss component for Joomla.

CVSS 4.0 · 9.4 Critical EPSS < 1% KEV · Not listed

Vendors

Joomla Stackideas

Products

Joomla Joomla! Easydiscuss

CVE-2026-1162

UTT HiPER 810 setSysAdm strcpy buffer overflow

A flaw has been found in UTT HiPER 810 1.7.4-141218. The impacted element is the function strcpy of the file /goform/setSysAdm. This manipulation of the argument passwd1 causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Utt

Products

810 810 Firmware Hiper 810

CVE-2026-1221

BROWAN COMMUNICATIONS ｜PrismX MX100 AP controller - Use of Hard-coded Credentials

PrismX MX100 AP controller developed by BROWAN COMMUNICATIONS has a Use of Hard-coded Credentials vulnerability, allowing unauthenticated remote attackers to log in to the database using hardcoded database credentials stored in the firmware.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Browan Communications

Products

Prismx Mx100 Ap Controller

CVE-2026-22822

External Secrets Operator insecurely retrieves secrets through the getSecretKey templating function

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. Starting in version 0.20.2 and prior to version 1.2.0, the `getSecretKey` template function, while introduced for senhasegura Devops Secrets Management (DSM) provider, has the ability to fetch secrets cross-namespaces with the roleBinding of the external-secrets controller, bypassing our security mechanisms. This function was completely removed in version 1.2.0, as everything done with that templating function can be done in a different way while respecting External Secrets Operator's safeguards As a workaround, use a policy engine such as Kubernetes, Kyverno, Kubewarden, or OPA to prevent the usage of `getSecretKey` in any ExternalSecret resource.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

External-secrets

Products

External-secrets External Secrets Operator

CVE-2026-1331

AMASTAR Technology｜MeetingHub - Arbitrary File Upload

MeetingHub developed by HAMASTAR Technology has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Hamastar

Products

Meetinghub Meetinghub Paperless Meetings

CVE-2026-1363

JNC｜IAQS and I6 - Client-Side Enforcement of Server-Side Security

IAQS and I6 developed by JNC has a Client-Side Enforcement of Server-Side Security vulnerability, allowing unauthenticated remote attackers to gain administrator privileges by manipulating the web front-end.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Jnc

Products

I6 Iaqs

CVE-2026-1364

JNC｜IAQS and I6 - Missing Authentication

IAQS and I6 developed by JNC has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly operate system administrative functionalities.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Jnc

Products

I6 Iaqs

CVE-2026-24436

Tenda W30E V2 Lacks Rate Limiting on Authentication

Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) do not enforce rate limiting or account lockout mechanisms on authentication endpoints. This allows attackers to perform unrestricted brute-force attempts against administrative credentials.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed

Vendors

Tenda

Products

W30e W30e Firmware

CVE-2026-22696

dcap-qvl has Missing Verification for QE Identity

dcap-qvl implements the quote verification logic for DCAP (Data Center Attestation Primitives). A vulnerability present in versions prior to 0.3.9 involves a critical gap in the cryptographic verification process within the dcap-qvl. The library fetches QE Identity collateral (including qe_identity, qe_identity_signature, and qe_identity_issuer_chain) from the PCCS. However, it skips to verify the QE Identity signature against its certificate chain and does not enforce policy constraints on the QE Report. An attacker can forge the QE Identity data to whitelist a malicious or non-Intel Quoting Enclave. This allows the attacker to forge the QE and sign untrusted quotes that the verifier will accept as valid. Effectively, this bypasses the entire remote attestation security model, as the verifier can no longer trust the entity responsible for signing the quotes. All deployments utilizing the dcap-qvl library for SGX or TDX quote verification are affected. The vulnerability has been patched in dcap-qvl version 0.3.9. The fix implements the missing cryptographic verification for the QE Identity signature and enforces the required checks for MRSIGNER, ISVPRODID, and ISVSVN against the QE Report. Users of the `@phala/dcap-qvl-node` and `@phala/dcap-qvl-web` packages should switch to the pure JavaScript implementation, `@phala/dcap-qvl`. There are no known workarounds for this vulnerability. Users must upgrade to the patched version to ensure that QE Identity collateral is properly verified.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Phala-network

Products

Dcap-qvl

CVE-2026-24479

HUSTOJ has Arbitrary File Write (Zip Slip) in Problem Import Modules that leads to RCE

HUSTOF is an open source online judge based on PHP/C++/MySQL/Linux for ACM/ICPC and NOIP training. Prior to version 26.01.24, the problem_import_qduoj.php and problem_import_hoj.php modules fail to properly sanitize filenames within uploaded ZIP archives. Attackers can craft a malicious ZIP file containing files with path traversal sequences (e.g., ../../shell.php). When extracted by the server, this allows writing files to arbitrary locations in the web root, leading to Remote Code Execution (RCE). Version 26.01.24 contains a fix for the issue.

CVSS 4.0 · 9.3 Critical EPSS 8.1% KEV · Not listed

Vendors

Hustoj

Products

Hustoj

CVE-2026-24793

A heap-based buffer over-read or buffer overflow vulnerability in azerothcore/azerothcore-wotlk

Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in azerothcore azerothcore-wotlk (deps/zlib modules). This vulnerability is associated with program files inflate.C. This issue affects azerothcore-wotlk: through v4.0.0.

CVSS 4.0 · 10 Critical EPSS < 1% KEV · Not listed

Vendors

Azerothcore

Products

Azerothcore Wotlk

CVE-2026-24800

A heap-based buffer over-read or buffer overflow in tildearrow/furnace

Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in tildearrow furnace (extern/zlib modules). This vulnerability is associated with program files inflate.C.

CVSS 4.0 · 10 Critical EPSS < 1% KEV · Not listed

Vendors

Tildearrow

Products

Furnace

CVE-2026-24804

A infinite loop vulnerability in coolsnowwolf/lede

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in coolsnowwolf lede (package/lean/mt/drivers/mt7603e/src/mt7603_wifi/common modules). This vulnerability is associated with program files bn_lib.C. This issue affects lede: through r25.10.1.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed

Vendors

Coolsnowwolf

Products

Lede

CVE-2026-24811

An improper pointer arithmetic in root-project/root at builtins/zlib/inffast.c

Vulnerability in root-project root (builtins/zlib modules). This vulnerability is associated with program files inffast.C. This issue affects root.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Riot Project Root

Products

Riot Root

CVE-2026-24812

An improper pointer arithmetic in root-project/root at builtins/zlib/inftrees.c

Vulnerability in root-project root (builtins/zlib modules). This vulnerability is associated with program files inftrees.C. This issue affects root: through 6.36.00-rc1.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Riot Project

Products

Riot

CVE-2026-24815

A XStream Security Vulnerability in XML Deserialization in datavane/tis

Unrestricted Upload of File with Dangerous Type, Deserialization of Untrusted Data vulnerability in datavane tis (tis-plugin/src/main/java/com/qlangtech/tis/extension/impl modules). This vulnerability is associated with program files XmlFile.Java. This issue affects tis: before v4.3.0.

CVSS 4.0 · 10 Critical EPSS < 1% KEV · Not listed

Vendors

Datavane

Products

Tis