CVE-2026-35576 - High

🟠 CVE-2026-35576 - High (8.7)

ChurchCRM is an open-source church management system. Prior to 7.0.0, a stored cross-site scripti...

www.thehackerwire.com/vulnerability/CVE-2026-3...

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

CVE-2026-35575 - High

🟠 CVE-2026-35575 - High (8)

ChurchCRM is an open-source church management system. Prior to 6.5.3, a Stored Cross-Site Scripti...

www.thehackerwire.com/vulnerability/CVE-2026-3...

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

CVE-2026-25776 - Critical

🔴 CVE-2026-25776 - Critical (9.8)

Movable Type provided by Six Apart Ltd. contains a code injection vulnerability which may allow a...

www.thehackerwire.com/vulnerability/CVE-2026-2...

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

CVE-2026-39327 - High

🟠 CVE-2026-39327 - High (8.8)

ChurchCRM is an open-source church management system. Prior to 7.1.0, an SQL injection vulnerabil...

www.thehackerwire.com/vulnerability/CVE-2026-3...

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

CVE-2026-39326 - High

🟠 CVE-2026-39326 - High (8.8)

ChurchCRM is an open-source church management system. Prior to 7.1.0, an SQL injection vulnerabil...

www.thehackerwire.com/vulnerability/CVE-2026-3...

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

CVE-2026-39323 - High

🟠 CVE-2026-39323 - High (8.8)

ChurchCRM is an open-source church management system. Prior to 7.1.0, a critical SQL injection vu...

www.thehackerwire.com/vulnerability/CVE-2026-3...

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

CVE-2026-39333 - High

🟠 CVE-2026-39333 - High (8.7)

ChurchCRM is an open-source church management system. Prior to 7.1.0, he FindFundRaiser.php endpo...

www.thehackerwire.com/vulnerability/CVE-2026-3...

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

CVE-2026-39332 - High

🟠 CVE-2026-39332 - High (8.7)

ChurchCRM is an open-source church management system. Prior to 7.1.0, a reflected Cross-Site Scri...

www.thehackerwire.com/vulnerability/CVE-2026-3...

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

CVE-2026-39331 - High

🟠 CVE-2026-39331 - High (8.1)

ChurchCRM is an open-source church management system. Prior to 7.1.0, an authenticated API user c...

www.thehackerwire.com/vulnerability/CVE-2026-3...

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

CVE-2026-39330 - High

🟠 CVE-2026-39330 - High (8.8)

ChurchCRM is an open-source church management system. Prior to 7.1.0, an SQL injection vulnerabil...

www.thehackerwire.com/vulnerability/CVE-2026-3...

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

CVE-2026-39329 - High

🟠 CVE-2026-39329 - High (8.8)

ChurchCRM is an open-source church management system. Prior to 7.1.0, an SQL injection vulnerabil...

www.thehackerwire.com/vulnerability/CVE-2026-3...

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

CVE-2026-39328 - High

🟠 CVE-2026-39328 - High (8.9)

ChurchCRM is an open-source church management system. Prior to 7.1.0, a stored cross-site scripti...

www.thehackerwire.com/vulnerability/CVE-2026-3...

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

CVE-2026-39339 - Critical

🔴 CVE-2026-39339 - Critical (9.1)

ChurchCRM is an open-source church management system. Prior to 7.1.0, a critical authentication ...

www.thehackerwire.com/vulnerability/CVE-2026-3...

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

CVE-2026-39337 - Critical

🔴 CVE-2026-39337 - Critical (10)

ChurchCRM is an open-source church management system. Prior to 7.1.0, critical pre-authentication...

www.thehackerwire.com/vulnerability/CVE-2026-3...

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

CVE-2026-39334 - High

🟠 CVE-2026-39334 - High (8.8)

ChurchCRM is an open-source church management system. Prior to 7.1.0, an SQL injection vulnerabil...

www.thehackerwire.com/vulnerability/CVE-2026-3...

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

CVE-2026-39344 - High

🟠 CVE-2026-39344 - High (8.1)

ChurchCRM is an open-source church management system. Prior to 7.1.0, there is a Reflected Cross-...

www.thehackerwire.com/vulnerability/CVE-2026-3...

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

CVE-2026-39341 - High

🟠 CVE-2026-39341 - High (8.1)

ChurchCRM is an open-source church management system. Prior to 7.1.0, The application is vulnerab...

www.thehackerwire.com/vulnerability/CVE-2026-3...

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

CVE-2026-3535 - Critical

🔴 CVE-2026-3535 - Critical (9.8)

The DSGVO Google Web Fonts GDPR plugin for WordPress is vulnerable to arbitrary file upload due t...

www.thehackerwire.com/vulnerability/CVE-2026-3...

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

CVE-2026-39340 - High

🟠 CVE-2026-39340 - High (8.1)

ChurchCRM is an open-source church management system. Prior to 7.1.0, a SQL injection vulnerabili...

www.thehackerwire.com/vulnerability/CVE-2026-3...

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

CVE-2026-39355 - Critical

🔴 CVE-2026-39355 - Critical (9.9)

Genealogy is a family tree PHP application. Prior to 5.9.1, a critical broken access control vuln...

www.thehackerwire.com/vulnerability/CVE-2026-3...

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

CVE-2026-32862 - High

🟠 CVE-2026-32862 - High (7.8)

There is a memory corruption vulnerability due to an out-of-bounds write in ResFileFactory::InitR...

www.thehackerwire.com/vulnerability/CVE-2026-3...

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

CVE-2026-32861 - High

🟠 CVE-2026-32861 - High (7.8)

There is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted...

www.thehackerwire.com/vulnerability/CVE-2026-3...

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

CVE-2026-32860 - High

🟠 CVE-2026-32860 - High (7.8)

There is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted...

www.thehackerwire.com/vulnerability/CVE-2026-3...

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

CVE-2026-32864 - High

🟠 CVE-2026-32864 - High (7.8)

There is a memory corruption vulnerability due to an out-of-bounds read in mgcore_SH_25_3!aligned...

www.thehackerwire.com/vulnerability/CVE-2026-3...

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

CVE-2026-32863 - High

🟠 CVE-2026-32863 - High (7.8)

There is a memory corruption vulnerability due to an out-of-bounds read in sentry_transaction_con...

www.thehackerwire.com/vulnerability/CVE-2026-3...

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

CVE-2026-39361 - High

🟠 CVE-2026-39361 - High (7.7)

OpenObserve is a cloud-native observability platform. In 0.70.3 and earlier, the validate_enrichm...

www.thehackerwire.com/vulnerability/CVE-2026-3...

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

CVE-2026-39356 - High

🟠 CVE-2026-39356 - High (7.5)

Drizzle is a modern TypeScript ORM. Prior to 0.45.2 and 1.0.0-beta.20, Drizzle ORM improperly esc...

www.thehackerwire.com/vulnerability/CVE-2026-3...

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

CVE-2026-39371 - High

🟠 CVE-2026-39371 - High (8.1)

RedwoodSDK is a server-first React framework. From 1.0.0-beta.50 to 1.0.5, erver functions export...

www.thehackerwire.com/vulnerability/CVE-2026-3...

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

CVE-2026-39369 - High

🟠 CVE-2026-39369 - High (7.6)

WWBN AVideo is an open source video platform. In versions 26.0 and prior, objects/aVideoEncoderRe...

www.thehackerwire.com/vulnerability/CVE-2026-3...

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

CVE-2026-24913 - High

🟠 CVE-2026-24913 - High (8.8)

SQL Injection vulnerability exists in MATCHA INVOICE 2.6.6 and earlier. If this vulnerability is ...

www.thehackerwire.com/vulnerability/CVE-2026-2...

#infosec #cybersecurity #CVE #vulnerability #security #patchstack