Severity: Critical (CVSS 9.8) Affected Systems: Apache Http Server Overview Apache HTTP Server: mod_ldap per-dir use-after-free A critical vulnerability identified as CVE-2026-29167 has been disclosed. Use After Free vulnerability in Apache HTTP Server with mod_ldap in per-directory configuration This issue affects Apache HTTP Server: from 2.4.0 ... Read More »
Severity: High (CVSS 8.7) Affected Systems: Phpmyfaq Phpmyfaq Overview phpMyFAQ - Privilege Escalation via Missing Authorization in editUser() and updateUserR... A high vulnerability identified as CVE-2026-56396 has been disclosed. phpMyFAQ before 4.1.4 contains missing authorization vulnerabilities in editUser() and updateUserRights() endpoints ... Read More »
Severity: Critical (CVSS 10) Affected Systems: Affected products listed by OpenCVE and the vendor advisory Overview Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension f... A critical vulnerability identified as CVE-2026-48908 has been disclosed. A vulnerability in the SP Page Builder for Joomla allows the upload ... Read More »
Severity: Critical (CVSS 10) Affected Systems: Affected products listed by OpenCVE and the vendor advisory Overview Joomla Extension - icagenda.com - Remote Code Execution in iCaganda extension for Jooml... A critical vulnerability identified as CVE-2026-48939 has been disclosed. A vulnerability in the iCagenda extension for Joomla allows the ... Read More »
