CVE-2026-116404

Publié : 28 octobre 2026

Modifié : 28 octobre 2026

Score CVSS

6.5

MEDIUM

Description détaillée

Missing Authorization vulnerability in David Anderson Redux Framework redux-framework allows Lifting Sensitive Data Embedded in Cache.This issue affects Redux Framework: from n/a through 4.5.16.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Références et Patchs

https://patchstack.com/database/wordpress/plugin/redux-framework/vulnerability/wordpress-redux-framework-plugin-4-5-16-broken-access-control-vulnerability?_s_id=cve

Dernières Vulnérabilités

CVE-2026-93520

A heap buffer overflow caused by mismatching size calculations between XkbAllocNames and ChangeKeycodeRange in X.org X server before 2.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context.

VOIR DÉTAILS

CVE-2026-93519

A buffer overflow when handling pointer barriers in the XFIXES extension in X.Org X server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context.

VOIR DÉTAILS

CVE-2026-93518

An integer truncation issue in XkbResizeKeyType() that could lead to a heap buffer overflow by authenticated X clients in X.org X server before 21.1.25 and XWayland before 24.1.14 could be exploited for crashes or potential code execution in the X server.

VOIR DÉTAILS