Balbooa Forms Stored XSS Vulnerability (CVE-2026-101127): CRITICAL Severity
A serious security flaw has been found in Balbooa Forms, a popular extension for Joomla websites. This vulnerability, identified as CVE-2026-101127, could allow an…
Ucartz Updates
Security & Release Updates
Vulnerability advisories and release notes for the hosting, server and automation software we run: what changed, who is affected and how to stay safe.
Balbooa Forms Unauthorized Attachment Deletion Vulnerability (CVE-2026-101112): Medium Severity
The digital landscape relies heavily on web applications, and when a vulnerability emerges, it’s crucial for administrators and developers to act swiftly. Today, we’re…
Balbooa Forms File Metadata Tampering Vulnerability (CVE-2026-101126): Medium Severity
Joomla Extension Users: Be Aware of Balbooa Forms Vulnerability Joomla users, particularly those relying on the Balbooa Forms extension, should be aware of a…
OrdaSoft Joomla CCK Remote Code Execution Vulnerability (CVE-2026-102427): Critical Severity
A severe security flaw has been discovered in the OrdaSoft Joomla CCK extension, impacting versions older than 8.3.16. This vulnerability, identified as CVE-2026-102427, could…
OrdaSoft Book Library Reflected Cross-Site Scripting Vulnerability (CVE-2026-101111): Medium Severity
Understanding the Risk: OrdaSoft Book Library XSS Vulnerability A security vulnerability has been identified in the OrdaSoft Book Library extension for Joomla. This issue,…
Drupal Slick Carousel Cross-Site Scripting Vulnerability (CVE-2026-81160): Medium Severity
Overview A security flaw has been identified in the Slick Carousel module for Drupal, which could allow malicious code to be injected into websites.…
Drupal Entity API Incorrect Authorization Vulnerability (CVE-2026-81158): Medium Severity
Understanding the Drupal Entity API Authorization Flaw A security vulnerability has been identified in the Drupal Entity API module, tracked as CVE-2026-81158. This issue…
Drupal Remote Code Execution Vulnerability (CVE-2018-7602): Critical Severity
In the world of web security, a remote code execution (RCE) vulnerability is among the most severe threats a website can face. Such is…
Memos Access Token Vulnerability (CVE-2024-21635): High Severity
Unsecured Access: Memos Access Token Vulnerability (CVE-2024-21635) Imagine changing the locks on your house, but an intruder who already had a copy of the…
Drupal UEditor Security Vulnerability (CVE-2025-3903): High Severity
Understanding the Drupal UEditor Security Vulnerability A significant security flaw, identified as CVE-2025-3903, has been discovered in the UEditor module for Drupal, also known…
Drupal Content Moderation Notifications Privilege Escalation Vulnerability (CVE-2026-81161): Low Severity
Understanding the Risk: Unsafe Actions in Drupal Content Moderation A security flaw has been identified in the Drupal Content Moderation Notifications module, specifically tagged…
n8n-nodes-sqlite3 File Path Traversal Vulnerability (CVE-2026-54687): Critical Severity
A critical security flaw has been identified in n8n-nodes-sqlite3, a component used within n8n workflows for interacting with local SQLite databases. This vulnerability, tracked…
Start Building Today
Ready to Get Started?
VPS, dedicated servers, streaming and managed hosting with 24/7 support from the Ucartz team.