VITEC EZ TV Platform Server faces critical file‑upload flaw
CVE‑2026‑82504 exposes unrestricted upload, but patches exist for all affected releases.
· 1 minRead →
Ncerio Intelligence
Security news with a defensive point of view.
Verified public-source developments and concise actions for teams responsible for real infrastructure.
Latest intelligence
66 published briefings matched.
Browse the briefing archive
Source-linked reporting, clearly labeled by evidence status.
CVE‑2026‑125855: Critical WordPress HelpDesk Plugin Vulnerability Unpatched
A critical deserialization flaw in the ELEX WordPress HelpDesk plugin remains unaddressed by an official vendor advisory, leaving sites vulnerable until patched.
· 1 minRead →
CVE‑2026‑118063: Critical WordPress plugin vulnerability remains unpatched
A critical file‑upload flaw in the Advance Guest Post WordPress plugin has no vendor advisory or patch yet, leaving sites at risk.
· 1 minRead →
CVE‑2026‑124833 remains unpatched, critical WordPress plugin flaw
A critical WordPress plugin vulnerability has no vendor advisory yet, but a CVSS 9.8 score signals urgency.
· 1 minRead →
Descope WordPress plugin critical authentication flaw discovered
A newly published CVE exposes a critical improper‑authentication bug in the Descope WordPress plugin, with no patch yet available.
· 1 minRead →
Fortinet FortiMail SQL Injection CVE‑2026‑126263 Remains Unpatched
A critical SQL injection flaw in Fortinet FortiMail, published on 11 Nov 2026, has no available fix and no known exploitation yet.
· 1 minRead →
BlueprintUE Self‑Hosted Edition Vulnerability CVE‑2026‑126812: Critical MariaDB Default Password
A critical flaw in BlueprintUE’s Docker Compose defaults allows unauthenticated root access to MariaDB; fixed in v4.3.7.
· 1 minRead →
NextScan 1.1.0-1.2.0 Authentication Bypass CVE-2026-126797
A critical authentication bypass in NextScan 1.1.0-1.2.0 allows attackers to forge admin tokens using a hardcoded JWT key, but no vendor advisory has yet been issued.
· 1 minRead →
Fortinet FortiMail Path Traversal Vulnerability CVE-2026-126147 Lacks Vendor Advisory, No Patch Yet
A critical path traversal flaw in Fortinet FortiMail remains unpatched, with no vendor advisory or active exploitation reported.
· 1 minRead →
CVE‑2026‑124814: Critical WordPress Plugin Vulnerability Still Unpatched
A high‑CVSS flaw in the Ultimate Addons for Elementor Forms plugin remains unaddressed by the vendor, leaving WordPress sites exposed to remote code execution.
· 1 minRead →
Linksys EA8100 vulnerable to unauthenticated remote management write access
A critical vulnerability in Linksys EA8100 allows remote manipulation of WiFi warning flag without authentication.
· 1 minRead →
Jet Admin Cloud Platform Prompt Injection Vulnerability CVE-2026-123965
CISA rates CVE-2026-123965 at 9.9 and reports a sandbox mitigation, but the advisory also says no fix is available; verify protection and rotate exposed secrets.
· 1 minRead →
Turn news into an exposure decision.
Ncerio correlates vulnerability intelligence with the systems you actually operate.