News & Sicurezza

Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account Red Hat and the Keycloak project have released patches to address a critical security flaw in the open-source identity and access management server that could allow an unauthenticated remote attacker ... Read more Published Date: Aug 24, 2026 (3 days, 5 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-15571 CVE-2026-18963 CVE-2026-58231 CVE-2026-17059

CVE ID :CVE-2026-66650 Published : Aug. 24, 2026, 11:54 a.m. | 6 minutes ago Description :Unauthenticated PHP Object Injection in FreightCo Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-66670 Published : Aug. 24, 2026, 11:54 a.m. | 6 minutes ago Description :Unauthenticated Local File Inclusion in Måne Severity: 8.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-66648 Published : Aug. 24, 2026, 11:54 a.m. | 6 minutes ago Description :Unauthenticated Privilege Escalation in Jawn Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-66610 Published : Aug. 24, 2026, 11:54 a.m. | 6 minutes ago Description :Unauthenticated Cross Site Scripting (XSS) in Urna Severity: 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-66587 Published : Aug. 24, 2026, 11:54 a.m. | 6 minutes ago Description :Unauthenticated Local File Inclusion in WP Cafe Pro Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-66585 Published : Aug. 24, 2026, 11:54 a.m. | 6 minutes ago Description :Unauthenticated Sensitive Data Exposure in WP Cafe Pro Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-32558 Published : Aug. 24, 2026, 11:54 a.m. | 6 minutes ago Description :Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-32551 Published : Aug. 24, 2026, 11:54 a.m. | 6 minutes ago Description :Unauthenticated SQL Injection in Woo Essential Severity: 9.3 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-32478 Published : Aug. 24, 2026, 11:54 a.m. | 6 minutes ago Description :Subscriber SQL Injection in WP Project Manager Pro Severity: 8.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-32477 Published : Aug. 24, 2026, 11:54 a.m. | 6 minutes ago Description :Unauthenticated Arbitrary File Deletion in ShopBuilder Pro – Elementor WooCommerce Builder Addons Severity: 8.6 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-32476 Published : Aug. 24, 2026, 11:54 a.m. | 6 minutes ago Description :Unauthenticated Cross Site Scripting (XSS) in Brave Conversion Engine (PRO) Severity: 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...