Alerts — every source, newest first

15 km E of Denali National Park, Alaska

CVE-2026-18351 — The Drag and Drop File Upload for Elementor Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and …

85 km SSE of La Tirana, Chile

26 km W of Petrolia, CA

24 km W of Petrolia, CA

CVE-2026-87931 — A vulnerability has been found in Behavioral Technology Group Pavlok Behavioral Conditioning Wearable up to 20260707. Impacted is an unkn…

Mid-Indian Ridge

79 km SW of Puerto Madero, Mexico

164 km SSE of Isangel, Vanuatu

24 km E of Rasht, Tajikistan

115 km SE of Bushehr, Iran

86 km ESE of Isangel, Vanuatu

295 km WNW of Houma, Tonga

29 km SSW of Ashkāsham, Afghanistan

81 km ESE of Isangel, Vanuatu

CVE-2026-87929 — MaxSite CMS through 109.6 ships with a hardcoded session encryption key in application/config/config.php that is never changed during ins…

76 km ESE of Isangel, Vanuatu

CVE-2026-79689 — Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutr…

CVE-2026-79941 — Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutr…

139 km NNE of Hihifo, Tonga

CVE-2026-82004 — Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')…

CVE-2026-83941 — Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network.

CVE-2026-69854 — Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-69845 — Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVE-2026-69824 — Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network.