tag
Access-Control-Bypass
Critical
Unauthenticated Arbitrary File Upload RCE in iCagenda for Joomla (CVE-2026-48939)
CVE-2026-48939·
iCagenda — events/calendar extension (component) for Joomla
patched
Critical
Mitel MiCollab Path Normalization Bypass to Internal Endpoints (CVE-2025-52913)
CVE-2025-52913·
Mitel MiCollab (unified communications appliance)
unpatched
Medium
Vaultwarden Organization Collection Permissions Bypass & Cipher Enumeration (CVE-2026-26012)
CVE-2026-26012 (GHSA-h265-g7rm-h337)·
Vaultwarden (unofficial Bitwarden-compatible server)
unpatched
High
phpSysInfo IP Allowlist Bypass via X-Forwarded-For Spoofing — CVE-2026-55584
CVE-2026-55584 / GHSA-786w-p5pm-cvgh·
phpSysInfo
patched