Vendor confirmedField brief
A critical CVE affecting D‑Link DSL‑6740C routers has no vendor advisory or patch yet, leaving a CVSS 10.0 flaw that could allow remote attackers to gain hard‑coded credentials.
Vendor confirmedField brief
A critical stack‑based buffer overflow in D‑Link DIR‑600L 2.17b02 has been identified, but no vendor advisory or patch has been released, and it is not yet in the CISA KEV catalog.
Vendor confirmedField brief
A newly discovered CVE‑2026‑129353 exposes a critical buffer overflow in the DIR‑600L router’s authentication.cgi, affecting firmware 2.17/2.17b02 with a CVSS score of 10.0 and no vendor advisory or KEV listing yet.
Vendor confirmedField brief
A newly published CVE exposes a critical flaw in Tenda AC18’s firmware upgrade process, but no vendor patch or KEV entry yet.
Vendor confirmedField brief
A critical command injection vulnerability in Dokploy has been added to the NVD, but no vendor advisory or KEV listing yet.
Vendor confirmedField brief
A newly published CVE exposes a critical authentication bypass in the Shipo plugin, affecting WordPress sites running versions 1.6 through 1.8.0.
Vendor confirmedField brief
Critical buffer overflow in Edimax BR 6478AC V2 firmware 1.23, no patch yet, monitor for exploitation.
Vendor confirmedField brief
A critical CVE-2026-12591 allows authenticated users to elevate privileges and achieve remote code execution in M365 Manager Plus.
Vendor confirmedField brief
OpenEMR before 8.4.0 contains a critical OAuth scope canonicalization flaw that allows unauthenticated attackers to gain system‑level FHIR access.
Vendor confirmedField brief
The XWEB EVO 4.3.0‑5.8.8 line still has an unauthenticated file‑write flaw, but no vendor advisory was issued during the 13‑14 Nov 2026 window.
CISA KEVField brief
A critical authentication bypass in ManageEngine DDI Central has been patched; users should upgrade immediately.
Vendor confirmedField brief
CVE‑2026‑124970 exposes WP BASE Booking plugin to a high‑severity SQL injection; update to 6.5.3 or later to mitigate.