Overview

CVE-2026-100741

CVE-2026-100741: Eval injection in the JScript event-script dispatcher in Progressive Robot Ltd's hMailServer, versions 6.0.0 through 6.3…

CVE-2026-100721

CVE-2026-100721: vm2 before 3.12.2 contains an authorization bypass in the NodeVM external-module resolver. When an embedder configures `…

CVE-2026-100740

CVE-2026-100740: A vulnerability was detected in D-Link DIR-895L A1_102b07. Impacted is the function tunnel_set_params of the file tunnel…

CVE-2026-82901

CVE-2026-82901: The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Arbitrary File Upload due to insufficient file…

CVE-2026-85984

CVE-2026-85984: The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass…