Nextcloud User OIDC Open Redirect Vulnerability (CVE-2026-45278): Low Severity
Nextcloud is a popular open-source platform for file hosting and collaboration, widely used for secure data synchronization and sharing. A security flaw has recently…
Ucartz Updates
Security & Release Updates
Vulnerability advisories and release notes for the hosting, server and automation software we run: what changed, who is affected and how to stay safe.
Nextcloud Approval Information Disclosure Vulnerability (CVE-2026-45277): Low Severity
Nextcloud is a popular open-source platform that helps individuals and organizations manage and share their files securely. It’s like having your own personal cloud…
Nextcloud Approval App Privilege Escalation Vulnerability (CVE-2026-45275): Medium Severity
The digital landscape relies heavily on secure collaboration platforms, making vulnerabilities in such systems a serious concern. Recently, a significant security flaw was discovered…
Nextcloud Server Path Traversal Vulnerability (CVE-2026-45279): Medium Severity
Nextcloud, a popular open-source platform for content collaboration, has identified a security flaw in its server software. This vulnerability, tracked as CVE-2026-45279, could allow…
n8n-MCP Improper Authorization Vulnerability (CVE-2026-45707): High Severity
Understanding the n8n-MCP Security Flaw A significant security concern has emerged for users of n8n-MCP, an MCP server designed to give AI assistants access…
n8n-MCP Information Disclosure Vulnerability (CVE-2026-45582): Medium Severity
Understanding the n8n-MCP Information Leak n8n-MCP is a server designed to help AI assistants access documentation, properties, and operations for n8n nodes. Recently, a…
Drupal TFA Basic Plugins Access Bypass Vulnerability (CVE-2026-6816): Low Severity
Keeping user accounts secure is paramount for any website, especially those utilizing two-factor authentication (2FA). A recent finding has brought to light an access…
Simple Hierarchical Select for Drupal 7 Cross-Site Scripting Vulnerability (CVE-2026-4929): Medium Severity
The digital world relies on components and modules that streamline complex tasks. For Drupal 7 users, the Simple Hierarchical Select (SHS) module has been…
Drupal 7 Term Reference Tree Module Cross-Site Scripting Vulnerability (CVE-2026-4093): Medium Severity
Understanding the Drupal 7 Term Reference Tree Module XSS Vulnerability A security flaw, identified as CVE-2026-4093, has been discovered in the Drupal 7 Term…
Drupal SAML SSO – Service Provider Privilege Escalation Vulnerability (CVE-2026-5343): High Severity
Overview A significant security vulnerability has been identified in the SAML SSO – Service Provider module for Drupal. This flaw, tracked as CVE-2026-5343, involves…
Drupal Date iCal Missing Authorization Vulnerability (CVE-2026-8495): Critical Severity
A significant security flaw has been identified in the Drupal Date iCal module, posing a critical risk to websites using it. This vulnerability, tracked…
Drupal Colorbox Inline Cross-Site Scripting Vulnerability (CVE-2026-8493): Medium Severity
A security flaw has been found in the Drupal Colorbox Inline module, which could allow attackers to inject malicious code into web pages. This…
Start Building Today
Ready to Get Started?
VPS, dedicated servers, streaming and managed hosting with 24/7 support from the Ucartz team.