[vulnfeed] 2 critical CVEs — 2026-10-02 04:00 UTC
vulnfeed
Critical alert — 2026-10-02 06:00 UTC
2 new critical CVEs
in the last 5 hours — 2 CVSS ≥ 9.0
New vulnerabilities
CVE-2026-14378CRITICAL
The DevKit Pro plugin for WordPress is vulnerable to Authentication Bypass Leading to Administrator Account Ta
The DevKit Pro plugin for WordPress is vulnerable to Authentication Bypass Leading to Administrator Account Takeover in all versions up to, and including, 2.3.0 This is due to the `revert_switch` hand
CVSS 9.8
CVE-2026-104480CRITICAL
Discord libdave before 1.2.0 did not reject an MLS Welcome message when the resulting group roster contained a
Discord libdave before 1.2.0 did not reject an MLS Welcome message when the resulting group roster contained an unrecognized participant. An attacker in control of the DAVE signaling path (the voice g
CVSS 9.4
vulnfeed critical alerts — vulnfeed.it.
Unsubscribe
Don't miss what's next. Subscribe to Vulnfeed: