CVE ID :CVE-2026-108598 Published : Oct. 10, 2026, 7:16 p.m. | 13 minutes ago Description :Floci 1.1.0 before 2.2.0 contains a code injection vulnerability in VtlTemplateEngine that allows unauthenticated attackers to execute commands via unrestricted Velocity mapping templates. Attackers can...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-108598 - Floci 1.1.0 before 2.2.0 RCE via API Gateway VTL Mapping Templates

VERWANDTEARTIKEL

CVE-2026-96341 - WordPress Forminator plugin <= 1.57.3 - Privilege Escalation vulnerability

CVE-2026-106610 - WordPress miniorange otp verification plugin <= 5.5.7 - Privilege Escalation vulnerability

CVE-2026-105892 - WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.13 - Arbitrary File Deletion vulnerability

CVE-2026-105889 - WordPress Tickera plugin <= 3.6.0.6 - SQL Injection vulnerability

CVE-2026-104398 - WordPress AFFI – Affiliate Marketing for WooCommerce plugin <= 1.0.10 - PHP Object Injection vulnerability

CVE-2026-108550 - SkillHub before 0.2.22 Account Takeover via Account Merge Flow