tag
Cwe-200
Critical
RestroPress WordPress Plugin Unauthenticated Information Exposure Leading to JWT Forgery / Account Takeover (CVE-2025-9209)
CVE-2025-9209·
RestroPress – Online Food Ordering System (WordPress plugin)
unpatched
Low
Veno File Manager Absolute Path Disclosure (CVE-2026-37069)
CVE-2026-37069·
Veno File Manager Project
unpatched
Critical
Realtek rtl819x Jungle SDK Unauthenticated Kernel Memory R/W via Debug IOCTLs (CVE-2026-36355)
CVE-2026-36355·
Realtek rtl819x "Jungle SDK" out-of-tree Wi-Fi driver (rtl8192cd)
unpatched
Critical
HAXcms Node.js Private Key Disclosure via Broken HMAC (CVE-2026-46395)
CVE-2026-46395·
HAXcms Node.js backend (elmsln/HAXcms, haxcms-nodejs) — src/lib/HAXCMS.js
patched