Analysis

The record describes an insecure deserialization of untrusted data flaw (CWE-502) in the ThemeREX Buisson theme that allows object injection. The CNA Patchstack reports a CVSS 3.1 base score of 9.8 for versions up to and including 1.1.11. No confirmed exploitation appears in the sources consulted, and the CVE is not listed in CISA KEV.

CVE-2026-27051 is an Incorrect Privilege Assignment weakness (CWE-266) in uxper Golo, which the record says allows privilege escalation. The record gives a CVSS 3.1 base score of 9.8 from the CNA Patchstack and lists versions from n/a through 1.7.0, but it provides no structured list of fixed versions. Defenders should check their installations against the stated range and review the vendor advisory for an update.

CVE-2022-22947 is a critical code injection flaw (CWE-917, Expression Language Injection) in VMware Spring Cloud Gateway when the Gateway Actuator endpoint is enabled, exposed and unsecured. The record reports a CVSS 3.1 base score of 10 and that the issue is listed in the CISA KEV catalog. Administrators should upgrade to the fixed versions listed by the sources and restrict access to the Actuator endpoint.

Memu Play 7.1.3 is reported to have insecure folder permissions that let low-privileged users modify the MemuService.exe service executable. The record links this weakness to privilege escalation to SYSTEM and gives a CNA-provided CVSS 3.1 base score of 9.8. No confirmed exploitation appears in the sources consulted, and the record lists no fixed version.

CVE-2025-62615 is a server-side request forgery (SSRF) in the RSSFeedBlock of AutoGPT Platform, where the URL passed to urllib.request.urlopen is not filtered. NVD rates it 9.8 (critical) under CVSS 3.1, and the project states it was patched in autogpt-platform-beta-v0.6.34. The record shows no KEV listing, and no confirmed exploitation appears in the sources consulted.

CVE-2026-2057 is an SQL injection weakness (CWE-89) in the /login.php page of Medical Center Portal Management System 1.0, a product attributed to SourceCodester in the record. The record states it can be triggered remotely and that a public exploit exists, but CISA KEV does not list it and no confirmed exploitation in the wild appears in the sources consulted. No vendor fix is recorded, so defenders should treat the product as exposed until the vendor or maintainers confirm otherwise.

CVE-2026-103877 is a CWE-502 deserialization weakness in the Apache Directory LDAP API, affecting versions from 2.1.0 before 2.1.9. According to the CNA description, a rogue or compromised LDAP server, or interception before TLS, could return a schema object with a serialized Java class during loadSchema(), which may allow remote code execution. The CNA recommends upgrading to 2.1.9, and the record reports a CVSS 3.1 base score of 9.8 with critical severity.

CVE-2026-31920 is an SQL injection flaw (CWE-89) in the Product Rearrange for WooCommerce plugin by Devteam HaywoodTech, which the record describes as allowing blind SQL injection. The record gives an affected range from n/a through 1.2.2 and a critical CVSS 3.1 base score of 9.3 from the CNA. The sources consulted list no fixed version, no confirmed exploitation and no KEV entry.

CVE-2026-41120 affects Dell Wyse Management Suite in versions prior to WMS 5.5 HF1. The record classifies it as CWE-349 and reports a CNA CVSS 3.1 base score of 9.8 (critical) that describes a network-reachable attack requiring no privileges or user interaction. No confirmed exploitation appears in the sources consulted, and the record lists no fixed version, so administrators should consult the vendor advisory.

CVE-2026-2017 affects IP-COM W30AP firmware up to 1.0.0.11(1340). According to the record, a remote attacker can trigger a stack-based buffer overflow through the data argument handled by /goform/wx3auth. The CNA rates it critical with a CVSS 3.1 score of 9.8 and reports a public exploit, but the CVE is not listed in CISA KEV and the vendor did not respond to the disclosure.

A SQL injection flaw (CWE-89) has been reported in itsourcecode School Management System 1.0, where manipulating the ID argument can affect database queries. The record states the attack can be started remotely and that a published exploit exists, and NVD rates it 9.8 (CVSS 3.1, critical). The sources consulted show no KEV listing and no fixed version, so administrators should verify their installed version and restrict exposure.

CVE-2026-32482 is an unrestricted upload of a file with a dangerous type (CWE-434) in the deothemes Ona product, which according to the record allows an attacker to upload a web shell to a web server. The CNA reports a CVSS 3.1 base score of 9.9 (Critical) and the record places affected versions below 1.24. The CVE is not listed in CISA KEV and no confirmed exploitation appears in the sources consulted.

CVE-2026-25413 is a critical unrestricted file upload flaw (CWE-434) in the WPBookit Pro WordPress plugin by iqonicdesign. The record lists the affected range as n/a through 1.6.18, and the CNA Patchstack scored it 9.9 under CVSS 3.1 with network attack vector and low privileges required. No fixed version, KEV listing or confirmed exploitation appears in the sources consulted.

CVE-2020-37120 is a buffer overflow in the DICOM server name input field of Rubo DICOM Viewer 2.0, as described in the record. The description states that it can overwrite the Structured Exception Handler and may lead to remote code execution. The record gives a CVSS 3.1 score of 9.8 (critical), no KEV listing, and no structured list of affected or fixed versions.

CVE-2026-32573 is a code injection flaw (CWE-94) in the Nelio AB Testing WordPress plugin, affecting versions through 8.2.7 as recorded by Patchstack. Patchstack and CISA-ADP both score it 9.1 (Critical) under CVSS 3.1, and the vector requires high privileges. The sources consulted show no fixed version and no confirmed exploitation.