https://127.0.0.1:10001/cna-root/mitre/recent Most recent vulnerabilities from the mitre CNA root 2026-10-03T16:09:16.453241+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Latest vulnerabilities published by the CNAs operating under the mitre root of the CVE Program. https://127.0.0.1:10001/vuln/cve-2026-96451 CVE-2026-96451 (Patchstack) 2026-10-03T15:08:13.855000+00:00 WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerability WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerability 2026-10-03T15:08:13.855000+00:00 https://127.0.0.1:10001/vuln/cve-2026-103342 CVE-2026-103342 (Patchstack) 2026-10-03T14:00:11.382000+00:00 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerability WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerability 2026-10-03T14:00:11.382000+00:00 https://127.0.0.1:10001/vuln/cve-2026-103065 CVE-2026-103065 (Patchstack) 2026-10-03T14:00:11.348000+00:00 WordPress Kirki plugin <= 6.3.1 - Arbitrary Code Execution vulnerability WordPress Kirki plugin <= 6.3.1 - Arbitrary Code Execution vulnerability 2026-10-03T14:00:11.348000+00:00 https://127.0.0.1:10001/vuln/cve-2026-105122 CVE-2026-105122 (VulnCheck) 2026-10-03T12:14:45.551000+00:00 OpenAM before 16.1.3 SSRF via OpenID Connect Client jwks_uri OpenAM before 16.1.3 SSRF via OpenID Connect Client jwks_uri 2026-10-03T12:14:45.551000+00:00 https://127.0.0.1:10001/vuln/cve-2026-105121 CVE-2026-105121 (VulnCheck) 2026-10-03T12:14:44.905000+00:00 OpenAM before 16.1.3 Improper Authorization in Delegated Session-Destroy Realm Scoping OpenAM before 16.1.3 Improper Authorization in Delegated Session-Destroy Realm Scoping 2026-10-03T12:14:44.905000+00:00 https://127.0.0.1:10001/vuln/cve-2026-105120 CVE-2026-105120 (VulnCheck) 2026-10-03T12:14:44.244000+00:00 OpenAM before 16.1.3 Cross-Realm Session Disclosure via Sessions REST Endpoint OpenAM before 16.1.3 Cross-Realm Session Disclosure via Sessions REST Endpoint 2026-10-03T12:14:44.244000+00:00 https://127.0.0.1:10001/vuln/cve-2026-105119 CVE-2026-105119 (VulnCheck) 2026-10-03T12:14:43.643000+00:00 OpenAM before 16.1.3 PKCE Enforcement Bypass via OAuth 2.0 Hybrid Flows OpenAM before 16.1.3 PKCE Enforcement Bypass via OAuth 2.0 Hybrid Flows 2026-10-03T12:14:43.643000+00:00 https://127.0.0.1:10001/vuln/cve-2026-105118 CVE-2026-105118 (VulnCheck) 2026-10-03T12:14:43.044000+00:00 OpenAM before 16.1.3 Open Redirect via Unverified id_token_hint in endSession OpenAM before 16.1.3 Open Redirect via Unverified id_token_hint in endSession 2026-10-03T12:14:43.044000+00:00 https://127.0.0.1:10001/vuln/cve-2026-105117 CVE-2026-105117 (VulnCheck) 2026-10-03T12:14:42.310000+00:00 OpenAM before 16.1.3 Email Content Injection via Users REST Self-Service Actions OpenAM before 16.1.3 Email Content Injection via Users REST Self-Service Actions 2026-10-03T12:14:42.310000+00:00 https://127.0.0.1:10001/vuln/cve-2026-105116 CVE-2026-105116 (VulnCheck) 2026-10-03T12:14:41.631000+00:00 OpenAM before 16.1.3 Latent XSS in SAML Load-Balancer Cookie Bounce Page OpenAM before 16.1.3 Latent XSS in SAML Load-Balancer Cookie Bounce Page 2026-10-03T12:14:41.631000+00:00