First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2026-84778

HighCVSS 7.5/10Last modified Sep 7, 2026

Description

Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration & Cloning <= 6.65 versions.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
migrateguru	Migrate Guru – Site Migration & Cloning	<= 6.65

References

https://patchstack.com/database/wordpress/plugin/migrate-guru/vulnerability/wordpress-migrate-guru-site-migration-cloning-plugin-6-65-denial-of-service-attack-vulnerability?_s_id=cve

Timeline

Published: Sep 3, 2026
Last modified: Sep 7, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-847798.1Subscriber Broken Access Control in Agentimus – AI SEO, llms.txt & MCP for AI Agents <= 1.51.0 versions.CVE-2026-84788.8IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to inject arbitrary code on the system, due to the improper control of u CVE-2026-847805.3Unauthenticated Denial of Service Attack in WP Go Maps <= 10.1.08 versions.CVE-2026-847816.5Contributor Cross Site Scripting (XSS) in Gallery PhotoBlocks <= 1.3.4 versions.CVE-2026-847828.2Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The ret CVE-2026-847837.5Issue summary: The first concurrent use of the same X.509 certificate by several threads may cause its cached extension data to be freed whi CVE-2026-847847.5Issue summary: A malicious remote peer may flood the local QUIC stack with NEW_CONNECTION_ID frames by avoiding a limit check on how many co CVE-2026-847878.1ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Privilege Escalation vulnerability th CVE-2026-847897.1ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Broken Access Control vulnerability t CVE-2026-84796.9IEC 60870-5-104 used in bidirectional mode in RTU500 is vulnerable for a NULL pointer dereferencing, if a specially crafted sequence of mess CVE-2026-847907.6OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field CVE-2026-847917.1ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Broken Access Control vulnerability t

CVE-2026-84778: High severity, CVSS 7.5 | Vulnix