Skip to content

CyberSecBulletin

CVEs published on February 28, 2026

5 vulnerabilities, ordered with the most urgent first.

9.8 Critical severity
wpForo Forum: Improper Neutralization of Special Elements used in an SQL Command
CVE-2026-28562Feb 28, 2026gVectors Team
8.8 High severity
F453: Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2026-3376Feb 28, 2026Tenda
7.5 High severity
TimePictra: Missing Authentication for Critical Functionality
CVE-2026-2844Feb 28, 2026Microchip
7.5 High severity
Tutor LMS – eLearning and online course solution: Improper Neutralization of Special Elements used in an SQL Command
CVE-2025-13673Feb 28, 2026Themeum
7.5 High severity
WP Mail Logging: Deserialization of Untrusted Data
CVE-2026-2471Feb 28, 2026Smub