Known Vulnerabilities for Team by Wpwax
Listed below are 2 of the newest known vulnerabilities associated with "Team" by "Wpwax".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-95928 json | A security flaw has been discovered in recommenders-team recommenders up to 1.2.1. This impacts the function pickle.load of t... | Not Provided | 2026-09-23 | 2026-09-23 |
| CVE-2026-94110 json | A security vulnerability has been detected in QCMS up to 6.0.6. This issue affects the function self_Tmp in the library Lib/C... | Not Provided | 2026-09-21 | 2026-09-22 |
| CVE-2026-91980 json | vikunja before 2.6.0 fails to validate team access when attaching teams to projects, allowing authenticated users to enumerat... | Not Provided | 2026-09-15 | 2026-09-15 |
| CVE-2026-91774 json | Yao through v1.0.0-rc22 authenticates but fails to authorize the GET /user/teams/:id endpoint, allowing any logged-in user to... | Not Provided | 2026-09-15 | 2026-09-17 |
| CVE-2026-91181 json | Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 Fail to sanitize Team objects r... | Not Provided | 2026-09-14 | 2026-09-16 |
| CVE-2026-91039 json | Authentication Bypass by Spoofing vulnerability in team-alembic ash_authentication allows an attacker who operates one identi... | Not Provided | 2026-09-17 | 2026-09-17 |
| CVE-2026-90893 json | MISP contains a Cross-Site Request Forgery (CSRF) vulnerability in the UserSettingsController. The actions setTheme, setHomeP... | Not Provided | 2026-09-14 | 2026-09-14 |
| CVE-2026-88952 json | Improper Authentication vulnerability in team-alembic AshAuthentication allows an attacker to be signed in as another user by... | Not Provided | 2026-09-17 | 2026-09-17 |
| CVE-2026-87031 json | n Concrete CMS 9.2.0 through 9.5.3, the REST API user creation endpoint (POST /ccm/api/1.0/users, the add() method of concret... | Not Provided | 2026-09-16 | 2026-09-17 |
| CVE-2026-87028 json | Concrete CMS 9 through 9.5.3 did not confirm that a board InstanceItem submitted to the custom-slot preview endpoint belonged... | Not Provided | 2026-09-16 | 2026-09-17 |