All tracked CVE vulnerabilities
Exploited or high-severity CVEs tracked by VulnFeed, newest first.
- 9.3CVE-2026-63471fastapi-code-generator: Import-time RCE via route path -> unescaped @app.get('...') decoratorRCEVerify fixkoxudaxi fastapi-code-generator
1 min read - 8.1CVE-2026-57154OPNsense: Configuration line injection via multiple GUI text fieldsVerify fixopnsense core
1 min read - 9.2CVE-2026-112917Docker Desktop WSL2 AF_VSOCK isolation bypass via 32-bit socketcallFix availableDocker Docker Desktop
1 min read - 9.3CVE-2026-63469fastapi-code-generator: Import-time RCE via response status-code key -> unescaped @app.get(..., responses={...}) dictRCEVerify fixkoxudaxi fastapi-code-generator
1 min read - 9.3CVE-2026-63470fastapi-code-generator: Call-time RCE via operation summary -> unescaped route-handler docstringRCEVerify fixkoxudaxi fastapi-code-generator
1 min read - 7.1CVE-2026-39379GeoNetwork: Reflected XSS through client-side template injectionVerify fixgeonetwork core-geonetwork
1 min read - 8.7CVE-2026-121382Netcore NBR100V2 auto_ac msg_aes_dec integer overflowVerify fixNetcore NBR100V2
1 min read - 7.5CVE-2026-46487GeoNetwork: ACL bypass on Elasticsearch search when request body omits query fieldVerify fixgeonetwork core-geonetwork
1 min read - 8.7CVE-2026-120955MongoDB C Driver Modern GridFS mongoc_gridfs_bucket_download_to_stream() Aborts Application on Malformed GridFS MetadataVerify fixMongoDB C Driver
1 min read - 7.1CVE-2026-120956remote abort and memory disclosure from a malformed cursor.nsVerify fixMongoDB C Driver
1 min read - 8.7CVE-2026-120678mongo-c-driver leaks the decompressed reply buffer when an OP_COMPRESSED reply fails to parse (denial of service)Verify fixMongoDB C Driver
1 min read - 7.3CVE-2026-63198traQ: Privilege escalation by OAuth prompt=none requestVerify fixtraPtitech traQ
1 min read - 7.1CVE-2026-82976Image-customization-controller: unauthenticated plaintext image server with directory listing exposes ignition images containing cluster pull secretCloudVerify fixRed Hat Red Hat OpenShift Container Platform 4
2 min read - 7.3CVE-2026-63197traQ: XSS in the User Uploaded File Retrieval APIVerify fixtraPtitech traQ
1 min read - 8.2CVE-2026-63417Logging Redactor: PII data in str/repr of non primitive objects was not being redactedVerify fixarmurox loggingredactor
1 min read - 8.8CVE-2026-119922Babelfish for PostgreSQL Privilege EscalationCloudFix availableAWS babelfish-for-postgresql
1 min read - 7.0CVE-2026-63418Monitoring Plugins check_icmp: -H argument count overflow leads in setuid-root binaryLPEVerify fixmonitoring-plugins monitoring-plugins
1 min read - 9.8CVE-2026-44267Elo JavaScript emitter has sandbox escape to arbitrary Node.js / browser code execution via unfiltered `.constructor` member accessFix available@enspirit/elo
2 min read - 9.8CVE-2026-44266Elo Ruby backend has Remote Code Execution via unescaped `#{...}` interpolation in emitted string literals and subtype-constraint labelsRCEFix available@enspirit/elo
2 min read - 7.4CVE-2026-44265Elo: Code injection in Elo backends via unvalidated emission of programmatic AST fieldsRCEFix availableenspirit elo
1 min read - 8.1CVE-2026-11800Keycloak has authentication bypass via jwt algorithm confusionFix availableorg.keycloak:keycloak-services
1 min read - 8.2CVE-2026-28327SolarWinds Dameware DLL Hijacking VulnerabilityVerify fixSolarWinds Dameware
1 min read - 8.4CVE-2026-28335SolarWinds Dameware Buffer Overflow VulnerabilityRCEVerify fixSolarWinds Dameware
1 min read - 9.9CVE-2026-28336SolarWinds Dameware Command Injection VulnerabilityVerify fixSolarWinds Dameware
1 min read - 8.6CVE-2026-119675mongorestore may bypass collection guards through a system.buckets prefixFix availableMongoDB Database Tools
1 min read - 9.1CVE-2026-109593An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exVerify fixSonicWall Global Management System (GMS)
1 min read - 8.4CVE-2026-103916Docker Sandboxes sbx cp follows workspace symlinks outside the authorized host directoryFix availableDocker Docker Sandboxes
1 min read - 7.6CVE-2026-121624Nanosystems Supremo before 5.0.2.3874 Improper TLS Certificate ValidationFix availableNanosystems Supremo
1 min read - 7.4CVE-2026-115714Improper Certificate Validation in Elastic Docker Images Leading to Interception of TLS ConnectionsVerify fixElastic Elastic Docker images
1 min read - 7.3CVE-2026-115294Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Resource DeletionVerify fixElastic Kibana
1 min read - 7.5CVE-2026-115290Uncontrolled Recursion in Elasticsearch Leading to Denial of ServiceVerify fixElastic Elasticsearch
1 min read - 8.5CVE-2026-121602Solanum before commit 2ce64de Heap Buffer Overflow via JOIN and SJOINRCEFix availablesolanum-ircd solanum
1 min read - 8.5CVE-2026-121603Solanum before commit 2ea1382 Buffer Overflow via Server-to-Server KILL HandlerRCEFix availablesolanum-ircd solanum
1 min read - 7.0CVE-2026-65168NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd socket handling code.Verify fixNVIDIA Slurm
1 min read - 7.7CVE-2026-121561Label Studio before 1.23.2 SSRF and Token Disclosure via Image Export DownloadsFix availableHumanSignal label-studio
1 min read - 7.6CVE-2026-119215AshAuthentication TOTP setup lets a user install their own authenticator secret on another user's accountFix availableteam-alembic ash_authentication
1 min read - 9.4CVE-2026-121260Ziroom ZHOME A0101 Lua zrUsb.lua loadstring code injectionRCEVerify fixZiroom ZHOME A0101
1 min read - 7.5CVE-2026-118487Heap exhaustion via unbounded line accumulation in Vert.x STOMP FrameParserVerify fixEclipse Foundation Eclipse Vert.x
1 min read - 8.7CVE-2026-119741rsync through 3.5.1 Denial of Service via hash_search() Checksum CollisionsFix availableRsyncProject rsync
1 min read - 7.1CVE-2026-106991hustoj >=24.09.10 and <=26.08.19 is vulnerable to Incorrect Access Control.Verify fixUnknown product
1 min read - 8.6CVE-2026-73328Volmarg Personal Management System through 2.1.0 Unrestricted File Upload RCE via /upload/send/Verify fixvolmarg personal-management-system
1 min read - 7.1CVE-2026-121560LogChimp before 0.9.3 Authorization Bypass via PATCH /api/v1/postsFix availablelogchimp logchimp
1 min read - 8.6CVE-2026-121559GLPI 10.0.0 before 10.0.28 and 11.0.0 before 11.0.10 Privilege Escalation via User CloningFix availableglpi-project GLPI
1 min read - 8.2CVE-2026-121557WPPConnect Server through 2.10.74 Missing Authentication via /api/:session/chatwootFix availablewppconnect wppconnect-server
1 min read - 8.7CVE-2026-121556FastBee through 2.1.0 IDOR via /iot/product By-ID EndpointsFix availablebeecue FastBee
1 min read - 8.2CVE-2026-121554cordova-plugin-advanced-http through 3.3.1 Cookie Leak via Cross-Origin RedirectsFix availablesilkimen cordova-plugin-advanced-http
1 min read - 8.7CVE-2026-121555Foxel through 2.4.0 Unauthenticated File Read via /api/fs/stream and /api/fs/thumbFix availableDrizzleTime Foxel
1 min read - 8.4CVE-2026-121548nnn through 5.3 OS Command Injection via togglex PluginFix availablejarun nnn
1 min read - 8.7CVE-2026-121543smart-sso through 2.0.1 Incorrect Authorization in PermissionFilter Enables Admin EscalationFix availablea466350665 smart-sso
1 min read - 8.7CVE-2026-121451AB Download Manager before 1.11.2 Arbitrary File Write via /start-headless-download CSRFFix availableamir1376 ab-download-manager
1 min read - 8.3CVE-2026-121452bbs-go through 4.4.6 Improper TLS Certificate Validation in SMTP Email ServiceFix availablemlogclub bbs-go
1 min read - 7.7CVE-2026-121450CFNext before 3.1.0 Admin Password Recovery via MD5-Derived Subscription UUIDCloudFix availablePAICNI CFNext
1 min read - 7.5CVE-2026-118489CachingWebClient shares user-specific HTTP responses across users via the shared cache tierVerify fixEclipse Foundation Eclipse Vert.x
1 min read - 4.3CVE-2026-118527Ivanti Connect Secure Generation of Predictable Numbers or Identifiers VulnerabilityExploitedFix availableIvanti Connect Secure
1 min read - 7.1CVE-2026-121449Dockhand 1.0.47 before 1.0.54 Secret Disclosure via Git Stack WebhookFix availableFinsys dockhand
1 min read - 8.7CVE-2026-121448Dockhand before 1.0.54 Path Traversal via Stack Environment RoutesFix availableFinsys dockhand
1 min read - 8.2CVE-2026-121445svg-sanitizer 1.0.0 before 1.1.0 ReDoS and Fail-Open via image-set CSS StrippingFix availabledarylldoyle svg-sanitizer
1 min read - 8.7CVE-2026-121444svg-sanitizer 0.11.0 before 1.1.0 Algorithmic Complexity DoS via use Reference GraphFix availabledarylldoyle svg-sanitizer
1 min read - 8.7CVE-2026-121437Mistune 3.3.0 before 3.3.4 Quadratic-Time DoS via _process_emphasis_delimitersFix availablelepture mistune
1 min read - 8.6CVE-2026-121436Froxlor 2.3.8 before 2.3.15 API Key Disclosure via api_keys.phpFix availablefroxlor froxlor
1 min read - 8.7CVE-2026-121429AzuraCast through 0.23.8 Command Injection via StereoTool Liquidsoap pipe()RCEVerify fixAzuraCast AzuraCast
1 min read - 8.7CVE-2026-121427AzuraCast through 0.23.8 Config Injection via frontend_config.custom_configVerify fixAzuraCast AzuraCast
1 min read - 8.7CVE-2026-121428AzuraCast through 0.23.8 RCE via Supervisor Configuration Injection in TimezoneRCEVerify fixAzuraCast AzuraCast
1 min read - 8.3CVE-2026-121426Nodemailer 3.0.0 before 10.1.4 Recipient Domain Confusion via addressparserFix availablenodemailer nodemailer
1 min read - 8.3CVE-2026-121424Nodemailer 3.0.0 before 10.1.4 Address Parsing Bypass via Nested CommentsFix availablenodemailer nodemailer
1 min read - 8.3CVE-2026-121425Nodemailer 3.0.0 before 10.1.4 Recipient Injection via addressparser Group ParsingFix availablenodemailer nodemailer
1 min read - 7.1CVE-2026-121423SurrealDB before 3.3.0 DoS via Unbounded Recursion in val::Value SerializationFix availablesurrealdb surrealdb
1 min read - 8.6CVE-2026-121419SurrealDB 3.1.0 before 3.3.0 MCP Session Hijack via BoundSubject CollisionFix availablesurrealdb surrealdb
1 min read - 8.8CVE-2026-121417SurrealDB before 3.3.0 Use-After-Free via affinitypool spawn_local in KV BackendsFix availablesurrealdb surrealdb
1 min read - 7.1CVE-2026-121416SurrealDB 2.0.0 before 3.3.1 deny-funcs Capability Bypass via Method-Style InvocationsFix availablesurrealdb surrealdb
1 min read - 8.2CVE-2026-121414Parse Server before 8.6.110 and 9.0.0 before 9.10.6-alpha.2 Denial of Service via afterSave Pointer UpdateFix availableparse-community parse-server
1 min read - 7.1CVE-2026-121412FreeRDP 3.0.0 before 3.32.2 Proxy Memory Exhaustion via DVC ReassemblyFix availableFreeRDP FreeRDP
1 min read - 8.2CVE-2026-121409FreeRDP before 3.32.2 Denial of Service via Oversized X.224 Routing TokenFix availableFreeRDP FreeRDP
1 min read - 7.1CVE-2026-121407FreeRDP before 3.32.2 Shadow Server Denial of Service via remdesk ChannelFix availableFreeRDP FreeRDP
1 min read - 7.1CVE-2026-121404FreeRDP before 3.32.2 Shadow Server CPU Exhaustion via Zero-Length DVC DATAFix availableFreeRDP FreeRDP
1 min read - 7.1CVE-2026-121402FreeRDP before 3.32.2 X11 Client Crash via Zero-Width RDPGFX ResetGraphicsFix availableFreeRDP FreeRDP
1 min read - 7.1CVE-2026-121400FreeRDP before 3.32.2 CPU Exhaustion via RDG Control PacketFix availableFreeRDP FreeRDP
1 min read - 8.2CVE-2026-121398FreeRDP before 3.32.2 Use-After-Free via dyn-channel-dump ModuleFix availableFreeRDP FreeRDP
1 min read - 7.1CVE-2026-121394FreeRDP before 3.32.2 Denial of Service via RemoteFX RLGR decoderFix availableFreeRDP FreeRDP
1 min read - 7.1CVE-2026-121395FreeRDP 3.17.0 before 3.32.2 Denial of Service via RemoteFX DecoderFix availableFreeRDP FreeRDP
1 min read - 7.1CVE-2026-121393FreeRDP 3.0.0 before 3.32.2 Denial of Service via RemoteFX Region AssertionFix availableFreeRDP FreeRDP
1 min read - 9.1CVE-2026-121392FreeRDP before 3.32.2 Certificate Identity Validation Bypass via tls_verify_certificateFix availableFreeRDP FreeRDP
1 min read - 7.1CVE-2026-121388FreeRDP 3.0.0 before 3.32.2 Uncapped Memory Allocation via DRDYNVC DATA_FIRSTFix availableFreeRDP FreeRDP
1 min read - 8.7CVE-2026-121386FreeRDP before 3.32.2 Denial of Service via WinPR PNG/JPEG Image ReadersFix availableFreeRDP FreeRDP
1 min read - 7.5CVE-2026-121513Out-of-bounds Write in µD3TNFix availableD3TN GmbH µD3TN
1 min read - 7.5CVE-2026-121512Missing Release of Memory after Effective Lifetime in µD3TNFix availableD3TN GmbH µD3TN
1 min read - 7.1CVE-2026-121511Out-of-bounds Read in µD3TNFix availableD3TN GmbH µD3TN
1 min read - 7.5CVE-2026-121510Out-of-bounds Write in µD3TNFix availableD3TN GmbH µD3TN
1 min read - 8.8CVE-2026-85035Use-after-free via dynamically allocated message queue retained by the CAN RX filterFix availablezephyrproject zephyr
2 min read - 8.8CVE-2026-120572Incorrect boundary conditions in the Layout: Block and Inline componentVerify fixMozilla Firefox
1 min read - 7.0CVE-2026-119179MongoDB Node.js driver: Connection pool desynchronization after operation timeout can expose other user's dataFix availableMongoDB Node.js Driver
1 min read - 7.4CVE-2026-121506Out-of-bounds Write in NTPsecFix availableNTPsec NTPsec
1 min read - 8.6CVE-2026-119742Nagios XI < 2026R2 OS Command Injection via mibs.phpRCEFix availableNagios Enterprises, LLC Nagios XI
1 min read - 8.6CVE-2026-108047Inadequate authorization vulnerability in Alosuite’s user invitation functionalityVerify fixAM System ALO Suite
1 min read - 7.1CVE-2026-121458Instatic before 0.0.21 Authorization Bypass via MCP Content Read ToolsFix availableCoreBunch Instatic
1 min read - 8.1CVE-2026-99270tcp: Fix potential UAF in reqsk_timer_handler().Fix availableLinux Linux
1 min read - 8.8CVE-2026-76124BuddyBoss App <= 3.2.1 - Authenticated (Subscriber+) Arbitrary File Upload via Feedback EndpointRCEVerify fixBuddyBoss BuddyBoss App
1 min read - 7.8CVE-2026-99269sched_ext: Wait for SCX_OPSS_DISPATCHING before moving tasks off DSQsVerify fixLinux Linux
1 min read - 7.8CVE-2026-99264io_uring/net: don't retry recv on uncommitted buffersFix availableLinux Linux
2 min read - 8.1CVE-2026-99246tipc: protect node reset trace dump with node lockVerify fixLinux Linux
2 min read - 9.2CVE-2026-89292Unauthenticated SSRF with MNESTIX_BACKEND_API_KEY disclosure in Eclipse Mnestix Browser server actions for configured InfrastructuresFix availableEclipse Foundation Eclipse Mnestix
1 min read - 7.1CVE-2026-77777Improper access control vulnerabilityFix availableZohocorp ManageEngine Key Manager Plus
1 min read - 8.8CVE-2026-120333Broken Access Control in extension "Frontend User Registration" (sf_register)Fix availableTYPO3 Extension "Frontend User Registration"
1 min read - 8.1CVE-2026-77691Command injection vulnerabilityRCEFix availableZohocorp ManageEngine Key Manager Plus
1 min read - 7.1CVE-2026-120330Broken Access Control in extension "Mail" (mail)Fix availableTYPO3 Extension "Mail"
1 min read - 7.1CVE-2026-77778Improper access control vulnerabilityFix availableZohocorp ManageEngine Key Manager Plus
1 min read - 8.8CVE-2026-89293Missing server-side authorization in Eclipse Mnestix Browser admin server actions allows unauthenticated configuration tamperingFix availableEclipse Foundation Eclipse Mnestix
1 min read - 8.6CVE-2026-105982Command Injection in IPsec VPNFix availableWelotec TK100
1 min read - 8.6CVE-2026-105981Command Injection in Digital I/ORCEFix availableWelotec TK100
1 min read - 8.6CVE-2026-105980Command Injection in WireGuard VPNFix availableWelotec TK100
1 min read - 8.6CVE-2026-105979Command Injection in ZeroTier VPNFix availableWelotec TK100
1 min read - 8.6CVE-2026-105978Command Injection in Management Control FunctionsRCEFix availableWelotec TK100
1 min read - 8.1CVE-2026-121022Default Administrator Password Change Not Enforced in Axxon One Web ClientFix availableAxxonSoft Axxon One
1 min read - 7.3CVE-2026-113421ThreadX Modules invokes trace-full callbacks after module unloadVerify fixEclipse Foundation Eclipse ThreadX
1 min read - 8.5CVE-2026-115231User-mode module can post forged callback requests to another module's callback queue, running its code with that module's privilegeVerify fixEclipse Foundation Eclipse ThreadX
1 min read - 9.8CVE-2026-4052Privilege Escalation via Token Endpoint in WSO2 API Manager (APIM 4.x/IS as Resident Key Manager)Fix availableWSO2 WSO2 API Manager
1 min read - 7.5CVE-2026-16900Authentication BypassFix availableZohocorp Log360
1 min read - 9.1CVE-2026-13594Improper Access Control vulnerabilityFix availableZohocorp Log360
1 min read - 7.7CVE-2026-77800Authentication bypass vulnerabilityFix availableZohocorp ManageEngine Key Manager Plus
1 min read - 8.1CVE-2026-120577FluentCart A New Era of eCommerce <= 1.6.2 - Authenticated (Custom+) Arbitrary File Deletion via 'file_path' ParameterRCEVerify fixwpmanageninja FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler
1 min read - 7.2CVE-2026-120558Advanced Shipment Tracking for WooCommerce <= 3.9 - Authenticated (Shop Manager+) SQL Injection via 'tracking_provider' ParameterVerify fixzorem Advanced Shipment Tracking for WooCommerce
1 min read - 7.5CVE-2026-120559Contact Form Extender for Divi Builder <= 1.0.6 - Unauthenticated Arbitrary File Deletion via Path TraversalRCEVerify fixsatindersingh Contact Form Extender for Divi – Submissions DB & Extra Fields
1 min read - 8.1CVE-2026-120574SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.9.5 - Unauthenticated Account TakeoverVerify fixsurecart SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads…
1 min read - 8.1CVE-2026-120538Easy Digital Downloads <= 3.7.2 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Guest Checkout Email Binding at PayPal CaptureVerify fixsmub Easy Digital Downloads – eCommerce Payments and Subscriptions made easy
1 min read - 9.1CVE-2026-120518BuddyPress XProfile Image Field <= 3.1.0 - Unauthenticated Arbitrary File Deletion via Signup Image Field Activation HandlerRCEVerify fixkalengi BuddyPress XProfile Custom Image Field
1 min read - 9.8CVE-2026-120534Advanced Custom Fields: Extended PRO <= 0.9.2.6 - Unauthenticated Remote Code Execution via Dynamic Render Field TypeVerify fixACF Extended Advanced Custom Fields: Extended PRO
1 min read - 7.4CVE-2026-77799Two-factor authentication bypassFix availableZohocorp ManageEngine Key Manager Plus
1 min read - 8.8CVE-2026-76955A buffer overflow vulnerability in the zdp_wtp binary in Zyxel NWA110AX firmware versions through 7.12(ABTG.0)C0 could allow a LAN-based attacker to eLPEVerify fixZyxel NWA110AX firmware
1 min read - 8.8CVE-2026-107441An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an unauthenticated adVerify fixZyxel GS1900-24E firmware
1 min read - 7.8CVE-2026-120833labbench before 0.46.1 Deserialization of Untrusted Data via read() Pickle Auto-DispatchFix availableNIST labbench
1 min read - 7.4CVE-2026-120830Libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosureVerify fixRed Hat Red Hat Enterprise Linux 10
1 min read - 8.7CVE-2026-71450Authentication bypass using an alternate path or channel vulnerability in Johnson Controls EasyIO Neo EC and CW Edge Controller allows Authentication Verify fixJohnson Controls EasyIO Neo EC and CW Edge Controller
1 min read - 8.2CVE-2026-115403NULL pointer dereference in the BSD raw IPv6 send path when the destination table is fullVerify fixEclipse Foundation Eclipse ThreadX
1 min read - 7.7CVE-2026-120752PyMuPDF 1.25.3 before 2.0 Stack Buffer Overflow via add_freetext_annot() CalloutFix availablePyMuPDF PyMuPDF
1 min read - 8.7CVE-2026-115215NetX Secure DTLS server allocates a session for each new source before the cookie exchange and never reclaims it, so spoofed datagrams exhaust the session poolVerify fixEclipse Foundation Eclipse ThreadX
1 min read - 9.8CVE-2026-86596s2Member <= 260927 - Unauthenticated Remote Code Execution via 'item_name' IPN ParameterRCEVerify fixclavaque s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls…
1 min read - 8.7CVE-2026-120091Temporal Server Kubernetes compute provider builds a client from caller-supplied configuration and runs a caller-chosen command on the Worker Service hostRCECloudFix availableTemporal Technologies, Inc. Temporal Server
2 min read - 8.4CVE-2026-58873In addDragDropListener of WindowManagerService.java, there is a possible permission bypass due to a missing permission check.Verify fixGoogle Android XR
1 min read - 7.8CVE-2026-49906An unprivileged application can bypass the `android.car.permission.CAR_DISPLAY_IN_CLUSTER` permission by registering an activity with the `android.carVerify fixGoogle Android
1 min read - 7.1CVE-2026-116767Improper input handling in Secure Access serversFix availableAbsolute Software Secure Access
1 min read - 8.8CVE-2026-105476Improper link resolution before file access in cPanel allows remote authenticated users to write arbitrary root-owned files and escalate privileges.Fix availableWebPros cPanel
1 min read - 8.7CVE-2026-105475Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account's calendar and contact data.Fix availableWebPros cPanel
1 min read - 7.1CVE-2026-116768Missing length validation in Absolute Secure AccessFix availableAbsolute Software Secure Access
1 min read - 8.7CVE-2026-29508ReadyMedia 1.3.0 - 1.3.3 Stack Buffer Overflow via DFF ParserRCEFix availableReadyMedia ReadyMedia (MiniDLNA)
1 min read - 9.4CVE-2026-97718CSRF in Secure Access Server v14.60Verify fixAbsolute Security Secure Access
1 min read - 8.1CVE-2026-91898Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature vulnerability.RCEFix availableDell Alienware Command Center (AWCC)
1 min read - 7.4CVE-2026-59042In __pkvm_pages_to_ppages of mmu.c, there is a possible out-of-bounds write due to a race condition.Verify fixGoogle Android
1 min read - 7.4CVE-2026-59043In arm_lpae_split_blk_unmap of io-pgtable-arm-common.c, there is a possible memory corruption due to a race condition.Verify fixGoogle Android
1 min read - 7.4CVE-2026-59045In multiple locations, there is a possible memory corruption due to a race condition.Verify fixGoogle Android
1 min read - 8.4CVE-2026-59016In sendAnomalyProfile of ProfilingService.java, there is a possible path traversal issue due to path traversal.Verify fixGoogle Android
1 min read - 8.4CVE-2026-59004In multiple locations, there is a possible permission bypass due to an uncaught exception.Verify fixGoogle Android
1 min read - 8.4CVE-2026-58968In oapvd_vlc_metadata of oapv_vlc.c, there is a possible memory corruption due to a double free.Verify fixGoogle Android
1 min read - 8.4CVE-2026-58974In multiple locations, there is a possible permission bypass due to a missing permission check.Verify fixGoogle Android
1 min read - 8.4CVE-2026-58957In resolveToHeavyWeightSwitcherIfNeeded of ActivityStarter.java, there is a possible background activity launch due to a confused deputy.Verify fixGoogle Android
1 min read - 8.4CVE-2026-58962In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible permission bypass due to a missing permission check.Verify fixGoogle Android
1 min read - 8.4CVE-2026-58964In checkDestination of SmsUsageMonitor.java, there is a possible permission bypass due to improper input validation.Verify fixGoogle Android
1 min read - 8.4CVE-2026-58966In multiple functions of hppsfilter.c, there is a possible out-of-bounds write due to a stack buffer overflow.Verify fixGoogle Android
1 min read - 8.4CVE-2026-58944In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background application launch (bal) issue due to a confused deputy.Verify fixGoogle Android
1 min read - 8.4CVE-2026-58946In navigateUpTo of ActivityClientController.java, there is a possible permission bypass due to a logic error in the code.Verify fixGoogle Android
1 min read - 8.4CVE-2026-58934In prepareWindowToDisplayDuringRelayout of WindowState.java, there is a possible permission bypass due to a logic error in the code.Verify fixGoogle Android
1 min read - 8.4CVE-2026-58866In setAccessibilityWindowAttributes of AccessibilityWindowManager.java, there is a possible untrusted/misleading UI issue due to a missing permission Verify fixGoogle Android
1 min read - 8.4CVE-2026-58867In getMessenger of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing permission check.Verify fixGoogle Android
1 min read - 7.8CVE-2026-58836In handlePackagePostInstall of InstallPackageHelper.java, there is a possible Enhanced Confirmation Mode (ECM) bypass vulnerability that allows a sideVerify fixGoogle Android
1 min read - 8.4CVE-2026-58837In multiple locations, there is a possible background activity launch due to a logic error in the code.Verify fixGoogle Android
1 min read - 7.5CVE-2026-58853In multiple functions of ipphelper.c, there is a possible stack bugger overflow due to a missing bounds check.Verify fixGoogle Android
1 min read - 8.4CVE-2026-55287In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to trick the user into granting account credentials due to misleading Verify fixGoogle Android
1 min read - 8.4CVE-2026-55271In forwardToPreferredActionPickHandler of ContactsPickerActivity.kt, there is a possible intent redirection due to a confused deputy.Verify fixGoogle Android
1 min read - 8.4CVE-2026-55263In multiple functions of AllowBindAppWidgetActivity.java, there is a possible misunderstanding of reject/consent actions due to misleading or insufficVerify fixGoogle Android
1 min read - 8.4CVE-2026-55257In UsbDialogHelper of UsbDialogHelper.java, there is a possible UI confusion due to misleading or insufficient UI.Verify fixGoogle Android
1 min read - 8.4CVE-2026-45514In multiple functions of SaveUi.java, there is a possible bypass of package installation requirements due to a logic error in the code.Verify fixGoogle Android
1 min read - 8.4CVE-2026-49923In onResult of AccountManagerService.java, there is a possible untrusted/misleading UI issue due to a logic error in the code.Verify fixGoogle Android
1 min read - 8.4CVE-2026-28588In shouldBlockDirectoryFromTree of ExternalStorageProvider.java, there is a possible way to access protected data due to a logic error in the code.Verify fixGoogle Android
1 min read - 8.4CVE-2026-28597In writeGrantedUriPermissions of UriGrantsManagerService.java, there is a possible permission bypass due to improper input validation.Verify fixGoogle Android
1 min read - 7.8CVE-2026-119737Amlogic pppoe_wrapper Command Injection via AF_UNIX SocketLPEVerify fixNexbox A95X
1 min read - 9.3CVE-2026-116769Authentication bypass in Secure Access ServersFix availableAbsolute Security Secure Access
1 min read - 8.3CVE-2026-116766Improper input handling in Secure Access serverFix availableAbsolute Software Secure Access
1 min read - 7.1CVE-2026-91895Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Incorrect Default Permissions vulnerability.Fix availableDell Alienware Command Center (AWCC)
1 min read - 8.4CVE-2026-59044In multiple locations, there is a possible use-after-free due to a logic error in the code.Verify fixGoogle Android
1 min read - 8.4CVE-2026-59028In resolveAidConflictLocked of RegisteredAidCache.java, there is a possible permission bypass due to a confused deputy.Verify fixGoogle Android
1 min read - 8.4CVE-2026-59014In multiple locations, there is a possible out-of-bounds write due to an integer overflow.Verify fixGoogle Android
1 min read - 8.4CVE-2026-59005In insertInternal of MmsProvider.java, there is a possible multiuser isolation issue due to a missing permission check.Verify fixGoogle Android
1 min read - 8.4CVE-2026-59000In multiple locations, there is a possible permission bypass due to a confused deputy.Verify fixGoogle Android
1 min read - 8.4CVE-2026-58995In getEntryFileName of ZipFileRO.cpp, there is a possible memory safety issue due to a heap buffer overflow.Verify fixGoogle Android
1 min read - 8.4CVE-2026-58994In multiple functions of NfcService.java, there is a possible permission bypass due to a missing permission check.Verify fixGoogle Android
1 min read - 8.4CVE-2026-58989In setOemUnlockAllowedByUser of OemLockService.java, there is a possible way to bypass FRP due to a missing permission check.Verify fixGoogle Android
1 min read - 8.4CVE-2026-58986In notifyPictureProfileHandleSelection of MediaQualityService.java, there is a possible permission bypass due to a missing permission check.Verify fixGoogle Android
1 min read - 8.4CVE-2026-58984In multiple locations, there is a possible memory corruption due to a use-after-free.Verify fixGoogle Android
1 min read - 8.4CVE-2026-58979In canPresent of PresentationController.java, there is a possible permission bypass due to a logic error in the code.Verify fixGoogle Android
1 min read - 8.4CVE-2026-58975In multiple locations, there is a possible out-of-bounds write due to a missing bounds check.Verify fixGoogle Android
1 min read - 8.4CVE-2026-58970In deliverResult of AppTimeTracker.java, there is a possible background activity launch due to a confused deputy.Verify fixGoogle Android
1 min read - 8.4CVE-2026-58965In handleAudioEffectBroadcast of MusicFxHelper.java, there is a possible permission bypass due to a confused deputy.Verify fixGoogle Android
1 min read - 8.4CVE-2026-58956In modpowF4 of avb_rsa.c, there is a possible signature verification bypass due to a logic error in the code.Verify fixGoogle Android
1 min read - 8.4CVE-2026-58943In run of AddAccountSettings.java, there is a possible background activity launch due to a confused deputy.Verify fixGoogle Android
1 min read - 8.4CVE-2026-58942In do_fault_around of memory.c, there is a possible use after free due to a logic error in the code.Verify fixGoogle Android
1 min read - 8.4CVE-2026-58885In multiple locations, there is a possible permission bypass due to a confused deputy.Verify fixGoogle Android
1 min read - 8.4CVE-2026-58884In startTetheredHotspotRequest of WifiServiceImpl.java, there is a possible permission bypass due to a confused deputy.Verify fixGoogle Android
1 min read - 8.4CVE-2026-58879In descramble of multiple files, there is a possible out-of-bounds write due to improper casting.Verify fixGoogle Android
1 min read - 8.4CVE-2026-58871In set_type4_frame_classifier of sta_iface.cpp, there is a possible memory safety issue due to a heap buffer overflow.Verify fixGoogle Android
1 min read - 8.4CVE-2026-58847In kvm_vfio_pviommu_attach of vfio.c, there is a possible double free due to a logic error in the code.Verify fixGoogle Android
1 min read - 8.4CVE-2026-58845In multiple locations, there is a possible out of bounds write due to an integer overflow.Verify fixGoogle Android
1 min read - 8.4CVE-2026-58844In multiple locations, there is a possible out of bounds read/write due to an incorrect bounds check.Verify fixGoogle Android
1 min read - 8.4CVE-2026-58829In fuse_backing_mmap of backing.c, there is a possible memory corruption due to a use after free.Verify fixGoogle Android
1 min read - 7.4CVE-2026-58828In multiple functions of base.c, there is a possible use-after-free due to a race condition.Verify fixGoogle Android
1 min read - 7.4CVE-2026-58827In multiple functions of dma-buf.c, there is a possible use after free due to a race condition.Verify fixGoogle Android
1 min read - 8.4CVE-2026-58826In ksys_unshare of fork.c, there is a possible memory corruption due to a use after free.Verify fixGoogle Android
1 min read - 8.4CVE-2026-58825In multiple functions of fork.c, there is a possible use after free due to a logic error in the code.Verify fixGoogle Android
1 min read - 8.4CVE-2026-58824In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to an incorrect bounds check.Verify fixGoogle Android
1 min read - 8.4CVE-2026-55289In multiple functions in multiple locations, there is a possible execution of sensitive USSD codes due to a confused deputy.Verify fixGoogle Android
1 min read - 8.4CVE-2026-55288In validEfCfis of SIMRecords.java, there is a possible way to cause a denial of service due to an uncaught exception.Verify fixGoogle Android
1 min read - 8.4CVE-2026-55283In multiple locations, there is a possible memory safety issue due to a use-after-free.Verify fixGoogle Android
1 min read - 8.4CVE-2026-55275In multiple locations, there is a possible use-after-free due to a race condition.Verify fixGoogle Android
1 min read - 8.4CVE-2026-55262In setNotificationListenerAccessGrantedForUserInternal of NotificationManagerService.java, there is a possible policy desynchronization due to impropeVerify fixGoogle Android
1 min read - 8.4CVE-2026-55261In nfa_t4tnfcee_store_rx_buf of nfa_nfcee_act.cc, there is a possible way to achieve code execution due to a missing permission check.Verify fixGoogle Android
1 min read - 7.8CVE-2026-49934In multiple functions of MmiUtils.java, there is a possible risk of USSD/MMI code execution due to improper input validation.Verify fixGoogle Android
1 min read - 8.4CVE-2026-49931In onActivityResult in multiple locations, there is a possible contact leak from protected profile due to a confused deputy.Verify fixGoogle Android
1 min read - 8.4CVE-2026-49922In queryRemoteConnectionServices of ConnectionServiceWrapper.java, there is a possible permission bypass due to a confused deputy.Verify fixGoogle Android
1 min read - 8.4CVE-2026-28665In onCreate of SettingsApplication.java, there is a possible cross-profile consent dialog label injection due to improper input validation.Verify fixGoogle Android
1 min read - 8.4CVE-2026-0053In multiple locations, there is a possible method for a primary user to disable secure nfc on other full users due to insufficient isolation between AVerify fixGoogle Android
1 min read - 8.4CVE-2025-22436In multiple locations, there is a possible way to trick a user into disclosing Autofill contents due to a tapjacking/overlay attack.Verify fixGoogle Android
1 min read - 7.8CVE-2026-91893Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Privilege Management vulnerability.LPEFix availableDell Alienware Command Center (AWCC)
1 min read - 9.8CVE-2026-102435Ultra Addons for Contact Form 7 <= 3.5.54 - Unauthenticated PHP Object Injection to Arbitrary File Deletion via CF7 Form FieldRCEVerify fixthemefic Ultra Addons for Contact Form 7
1 min read - 7.5CVE-2026-120061psqlODBC ODBC escape parser stack buffer overflowFix availablePostgreSQL psqlODBC
1 min read - 7.5CVE-2026-120062psqlODBC SQL injection through SQLSpecialColumns table and schema namesFix availablePostgreSQL psqlODBC
1 min read - 7.5CVE-2026-120064psqlODBC does not validate column numbers and row indexes in binding and descriptor functionsFix availablePostgreSQL psqlODBC
1 min read - 7.1CVE-2026-120065psqlODBC does not escape a server-supplied column name in its updatable-cursor queriesFix availablePostgreSQL psqlODBC
1 min read - 8.2CVE-2026-119736Attendo Admin Android 3.0.13 Hard-coded MQTT Broker CredentialsVerify fixPetpooja Munshi
1 min read - 7.5CVE-2026-120057psqlODBC large-object read overflows the application bufferFix availablePostgreSQL psqlODBC
1 min read - 7.5CVE-2026-120058psqlODBC row cache overflow when a later FETCH changes the column countFix availablePostgreSQL psqlODBC
1 min read - 9.4CVE-2026-105603Joomla Extension - dj-extensions.com - Authenticated arbitrary file upload in DJ-Classifieds < 3.11.3RCEVerify fixdj-extensions.com DJ-Classifieds extension for Joomla
1 min read - 9.5CVE-2026-105606Joomla Extension - joomlaboat.com - Unauthenticated arbitrary file upload in Custom Tables < 3.7.8Verify fixjoomlaboat.com Custom Tables extension for Joomla
1 min read - 7.1CVE-2026-119734Munshi IDOR via Purchase Inquiry Thread EndpointVerify fixPetpooja Munshi
1 min read - 7.2CVE-2026-119733Munshi Missing Authorization in Company Deletion APIVerify fixPetpooja Munshi
1 min read - 7.1CVE-2026-119732Munshi Broken Object Level Authorization via Invoice Deletion APIVerify fixPetpooja Munshi
1 min read - 8.7CVE-2026-119731Munshi Payment Bypass via Unauthenticated Webhook EndpointVerify fixPetpooja Munshi
1 min read - 9.3CVE-2026-105604Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3.11.3Verify fixdj-extensions.com DJ-Classifieds extension for Joomla
1 min read - 7.7CVE-2026-81938Arbitrary file read via Alertmanager receiver configuration in Grafana MimirFix availableGrafana Enterprise Metrics (GEM)
1 min read - 7.5CVE-2026-106808OpenAirInterface Core Network v2.2.1 has a stack-based buffer overflow vulnerability in the OAI CN5G UDM Nudm_UEAU Generate Authentication Data endpoiVerify fixUnknown product
1 min read - 8.4CVE-2026-111048FOSSBilling: Low-privileged staff can run JavaScript in administrators' browsers via stored XSS in support ticket notesVerify fixFOSSBilling FOSSBilling
1 min read - 8.8CVE-2026-119085Template injection in the publishing component of awslabs Virtual Engineering WorkbenchCloudFix availableAWS virtual-engineering-workbench
1 min read - 7.5CVE-2026-120596CVE-2026-120596Verify fixEthernut / egnite GmbH Nut/Net TCP/IP Stack
1 min read - 7.9CVE-2026-119301Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandasCloudFix availableAWS aws-sdk-pandas
1 min read - 9.8CVE-2026-106803A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_registrar_pcscf module.Verify fixUnknown product
1 min read - 9.3CVE-2026-105769kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hostsCloudFix availablechainguard-forks kaniko
1 min read - 9.1CVE-2026-88811Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxyFix availableSUSE Rancher
1 min read - 7.2CVE-2026-88810Privilege escalation in downstream clusters via GlobalRole inheritedNamespacedRulesFix availableSUSE Rancher
1 min read - 9.1CVE-2026-94290Privilege escalation to cluster-admin on the Rancher local cluster through Fleet's agent management controllerFix availableSUSE Rancher
1 min read - 8.4CVE-2026-109141Krill users restricted to one CA can make any other CA delegate its prefixes and publish ROAs for them via bulk importFix availableNLnet Labs Krill
1 min read - 8.4CVE-2026-109142Krill treats a "local parent" as already-authenticated, letting a CA operator act as any child of any CA on the same serverFix availableNLnet Labs Krill
1 min read - 8.7CVE-2026-114408NULL pointer dereference in ICMPv6 Packet Too Big processing when the destination table is fullVerify fixEclipse Foundation Eclipse ThreadX
1 min read - 8.4CVE-2026-109140Krill login-session tokens reuse their encryption nonce across restarts, so any user who can log in can forge an "admin" tokenFix availableNLnet Labs Krill
1 min read - 7.8CVE-2026-99239Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has connFix availableLinux Linux
2 min read - 7.8CVE-2026-99237tracing: Hold trace_types_lock when resetting last boot data from readersVerify fixLinux Linux
1 min read - 7.8CVE-2026-99238tracing: Hold trace_types_lock when updating modules in persistent instancesVerify fixLinux Linux
1 min read - 7.8CVE-2026-99235tracing: Save the event file instead of the compatible histogramVerify fixLinux Linux
2 min read - 7.8CVE-2026-99236tracing: Reject incomplete event filter expressionsVerify fixLinux Linux
1 min read - 7.8CVE-2026-99233tracing/histograms: Verify event_call identity when updating synth_event refcountVerify fixLinux Linux
1 min read - 7.8CVE-2026-99231io_uring/waitid: own the request before clearing ->headFix availableLinux Linux
2 min read - 7.8CVE-2026-99227io_uring/waitid: prevent cancel reference wrapVerify fixLinux Linux
1 min read - 7.0CVE-2026-99224keys: Protect the type name while describing a keyVerify fixLinux Linux
2 min read - 7.0CVE-2026-99218coredump: hold RCU while releasing parked threadsVerify fixLinux Linux
1 min read - 7.6CVE-2026-88809Rancher meta proxy allowlist bypass leading to server-side request forgeryFix availableSUSE Rancher
1 min read - 8.6CVE-2026-104080Control Web Panel (CWP) < 1.30 OS Command Injection via valid_tokenFix availableControl Web Panel Control Web Panel
1 min read - 8.6CVE-2026-77880Control Web Panel (CWP) < 1.16 OS Command Injection via /newpass/RCEFix availableControl Web Panel Control Web Panel
1 min read - 8.5CVE-2026-77879Control Web Panel (CWP) < 1.16 SQL Injection via access_token() APIFix availableControl Web Panel Control Web Panel
1 min read - 8.6CVE-2026-77878Control Web Panel (CWP) < 1.30 OS Command Injection via restoredatabase APIFix availableControl Web Panel Control Web Panel
1 min read - 8.6CVE-2026-77877Control Web Panel (CWP) < 1.30 Unauthenticated Loopback API Root AccessFix availableControl Web Panel Control Web Panel
1 min read - 9.3CVE-2026-77876Control Web Panel (CWP) < 1.16 OS Command Injection via protected_directoryRCEFix availableControl Web Panel Control Web Panel
1 min read - 9.8CVE-2026-73695Control Web Panel (CWP) < 1.16 Path Traversal via services/users/index.phpFix availableControl Web Panel Control Web Panel
1 min read - 9.8CVE-2026-73696Control Web Panel (CWP) < 1.12 Authentication Bypass via Execution After RedirectFix availableControl Web Panel Control Web Panel
1 min read - 9.8CVE-2026-73697Control Web Panel (CWP) < 1.16 File Write and Command InjectionRCEFix availableControl Web Panel Control Web Panel
1 min read - 8.8CVE-2026-120460Jpom through 2.11.12 Cross-Workspace Authorization Bypass via Docker ControllersFix availabledromara Jpom
1 min read - 8.8CVE-2026-120461Jpom through 2.11.12 Cross-Workspace Authorization Bypass via /node/ssh_command/batchFix availabledromara Jpom
1 min read - 7.2CVE-2026-120487LaraDashboard before 1.4.5 Incorrect Authorization via SettingPolicy Core UpgradesFix availableLaraDashboard LaraDashboard
1 min read - 7.4CVE-2026-120459python-jose through 3.5.0 Authentication Bypass via Empty HMAC KeyVerify fixmpdavis python-jose
1 min read - 8.8CVE-2026-120445madong-admin-saas through 5.1.4 Incorrect Authorization via /platformapi AccessTokenMiddlewareFix availablemadong-code madong-admin-saas
1 min read - 9.4CVE-2026-120446madong-admin-saas through 5.1.4 Missing Authentication via Platform Tenant Management APIFix availablemadong-code madong-admin-saas
1 min read - 8.1CVE-2026-120447HotGo through 2.15.1 Authentication Bypass via Client-Set SMS Verification CodeFix availablebufanyun HotGo
1 min read - 8.1CVE-2026-120448DoraCMS through 3.1.0 Mass Assignment via API Key Update EndpointFix availabledoramart DoraCMS
1 min read - 9.8CVE-2026-120442ape-volo-admin before 3.6.1 Hardcoded JWT Signing Key Authentication BypassFix availablexianhc ape-volo-admin
1 min read - 8.1CVE-2026-120444GoFound through 1.4.1 Path Traversal via database parameter in /api/db/dropVerify fixsea-team GoFound
1 min read - 7.8CVE-2026-120434Netpbm before 10.86.51, 11.02.30, and 11.15.08 picttoppm Stack Overflow via scanPolyFix availableNetpbm Netpbm
1 min read - 7.8CVE-2026-120435Netpbm before 10.86.51, 11.02.30, and 11.15.08 Heap Overflow in xpmtoppmFix availableNetpbm Netpbm
1 min read - 7.8CVE-2026-120436Netpbm before 10.86.51, 11.02.30, and 11.15.08 Heap Overflow via jbigtopnmFix availableNetpbm Netpbm
1 min read - 7.8CVE-2026-120438QuickJS-NG before 0.16.0 Heap Buffer Overflow via Proxy ownKeys EnumerationFix availablequickjs-ng QuickJS-NG
1 min read - 7.0CVE-2026-120439QuickJS-NG before 0.16.0 Heap Buffer Overflow via TypedArray.prototype.sortFix availablequickjs-ng QuickJS-NG
1 min read - 7.1CVE-2026-120429Camaleon CMS before 2.9.2 Missing Authorization via Admin::MediaControllerFix availableowen2345 Camaleon CMS
1 min read - 7.8CVE-2026-120431Netpbm before 10.86.51, 11.02.29, and 11.15.07 sgitopnm Heap Buffer OverflowFix availableNetpbm Netpbm
1 min read - 7.8CVE-2026-120432Netpbm before 10.86.51, 11.02.30, and 11.15.08 Integer Overflow in winicontopamFix availableNetpbm Netpbm
1 min read - 7.8CVE-2026-120433Netpbm before 10.86.51, 11.02.30, and 11.15.08 picttoppm Stack Buffer Overflow via paintPolyFix availableNetpbm Netpbm
1 min read - 7.5CVE-2026-120426OpenCSG CSGHub through v2.6.0-ce Unauthenticated Private Repository File Read via Resolve RouteVerify fixOpenCSG CSGHub
1 min read - 7.2CVE-2026-120318Product Gallery Slider for WooCommerce 2.3.23 before 2.3.26 Missing Authorization via Codestar AJAXFix availableCodeixer Product Gallery Slider & Additional Variation Images for WooCommerce
1 min read - 7.0CVE-2026-115653Cortex-M module ports save a preempted user-mode module thread's registers through its unchecked stack pointer in privileged modeVerify fixEclipse Foundation Eclipse ThreadX
1 min read - 7.1CVE-2026-120425Chatify before 1.6.4 Pusher Authorization Bypass via /chat/auth EndpointFix availablemunafio Chatify
1 min read - 7.5CVE-2026-74993SQL Injection in Starnet Computer Systems' Inventory Tracking ApplicationVerify fixStarnet Computer and Network Systems Inventory Tracking Application
1 min read - 8.9CVE-2026-102802Joomla Extension - regularlabs.com - PHP code injection vector in Sourcerer extension < 17.0.1 when used with Articles Anywhere extension < 20.1.1RCEVerify fixregularlabs.com Sourcerer Free extension for Joomla
1 min read - 8.6CVE-2026-103419Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Media Picker in Helix Ultimate < 2.2.11.Verify fixjoomshaper.com Helix Ultimate extension for Joomla
1 min read - 7.2CVE-2026-103420Joomla Extension - php-web-design.com - CSRF for various actions in StageIt 1.0-5.7.5, 6.0-6.3.5Verify fixphp-web-design.com StageIt extension for Joomla
1 min read - 8.6CVE-2026-105600Joomla Extension - php-web-design.com - RCE via setting strings in StageIt 1.0-5.7.5, 6.0-6.3.5RCEVerify fixphp-web-design.com StageIt extension for Joomla
1 min read - 8.6CVE-2026-105602Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Mega Menu Badge Text in Helix Ultimate < 2.2.11.Verify fixjoomshaper.com Helix Ultimate extension for Joomla
1 min read - 7.8CVE-2026-92886Local Privilege Escalation via Polkit Misconfiguration in TÜBİTAK BİLGEM's eta-registerLPEFix availableTÜBİTAK BİLGEM Software Technologies Research Institute eta-register
1 min read - 8.0CVE-2026-94349Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command InjectFix availableDell OpenManage Enterprise
1 min read - 9.3CVE-2026-116606Authentication Bypass Allows Global Configuration Restore in Barracuda Email Security GatewayFix availableBarracuda Networks Barracuda Email Security Gateway (ESG)
1 min read - 8.6CVE-2026-111560OS Command Injection in Barracuda AppliancesRCEVerify fixBarracuda Networks Barracuda Email Security Gateway (ESG)
1 min read - 8.2CVE-2026-117518@fastify/reply-from vulnerable to path traversal via backslash dot-segment prefix escapeFix available@fastify/reply-from @fastify/reply-from
1 min read - 8.7CVE-2026-8923Remote Code ExecutionRCEFix availableZohocorp ManageEngine Eventlog Analyzer
1 min read - 9.1CVE-2026-120213@fastify/http-proxy vulnerable to prefix escape via decoded route parametersFix available@fastify/http-proxy @fastify/http-proxy
1 min read - 8.7CVE-2026-2613SQL Injection via Admin REST API in Multiple WSO2 Products Allows Database Information Inference and Service DisruptionFix availableWSO2 WSO2 API Manager
1 min read - 8.8CVE-2026-18199Remote Code Execution VulnerabilityRCEFix availableZohocorp ManageEngine Password Manager Pro
1 min read - 7.3CVE-2026-120349dayrui XunRuiCMS Mobile Site Directory index.php str_replace code injectionVerify fixdayrui XunRuiCMS
1 min read - 7.1CVE-2026-101176Permission control vulnerability in the event notification management module.Verify fixHuawei HarmonyOS
1 min read - 7.5CVE-2026-101186DoS vulnerability in the window module.Verify fixHuawei HarmonyOS
1 min read - 7.3CVE-2026-120347dayrui XunRuiCMS Member View.php View sql injectionFix availabledayrui XunRuiCMS
1 min read - 7.3CVE-2026-120348dayrui XunRuiCMS Email Template Rendering Notice.php _get_tpl_content code injectionVerify fixdayrui XunRuiCMS
1 min read - 9.4CVE-2025-11969Broken Access Control via System REST APIs in Multiple WSO2 Products Allows Unauthorized Administrative ActionsFix availableWSO2 WSO2 API Manager
1 min read - 7.3CVE-2026-120342mathurvishal CloudClassroom-PHP-Project viewquery.php sql injectionVerify fixmathurvishal CloudClassroom-PHP-Project
1 min read - 7.3CVE-2026-120341mathurvishal CloudClassroom-PHP-Project studentdetails.php redirectVerify fixmathurvishal CloudClassroom-PHP-Project
1 min read - 10.0CVE-2026-120345WAVLINK WN551X3-A DNS Resolution ioos sub_41a430 os command injectionRCEVerify fixWAVLINK WN551X3-A
1 min read - 10.0CVE-2026-120344WAVLINK WN551X3-A WireGuard CLI Group ioos system os command injectionRCEVerify fixWAVLINK WN551X3-A
1 min read - 7.3CVE-2026-120336VStarcam O-KAM Client DevDll_925.dll FUN_10003EA0 stack-based overflowVerify fixVStarcam O-KAM Client
1 min read - 7.3CVE-2026-120337VStarcam O-KAM SuperIPCam P2P Session Teardown SuperIPCam.exe FUN_005a2d44 use after freeVerify fixVStarcam O-KAM SuperIPCam
1 min read - 7.5CVE-2026-20585In Modem, there is a possible out of bounds write due to a missing bounds check.Verify fixMediaTek, Inc. MediaTek chipset
1 min read - 8.4CVE-2026-20558In GPU pdma, there is a possible escalation of privilege due to use after free.Verify fixMediaTek, Inc. MediaTek chipset
1 min read - 8.3CVE-2026-120324Aklivity Zilla http-filesystem Binding FileSystemServerFactory Path.resolve path traversalFix availableAklivity Zilla
1 min read - 7.5CVE-2026-120313Network-AI before 5.15.5 Path Traversal via InputSanitizer.sanitizePathFix availableJovancoding Network-AI
1 min read - 7.3CVE-2026-120314Network-AI 5.14.0 before 5.15.5 Missing Authentication in A2AServer Task OperationsFix availableJovancoding Network-AI
1 min read - 8.8CVE-2026-120315LobeHub Chat 1.84.26 before 2.1.49 Path Traversal RCE via writeTempFileFix availablelobehub chat
1 min read - 8.8CVE-2026-120311Network-AI 5.13.4 before 5.15.5 Path Traversal via FileJobStore Job IDFix availableJovancoding Network-AI
1 min read - 8.8CVE-2026-120312Network-AI 5.13.4 before 5.15.5 Path Traversal via AgentVCR Cassette NameFix availableJovancoding Network-AI
1 min read - 8.4CVE-2026-20591In GPU pdma, there is a possible escalation of privilege due to a missing permission check.Verify fixMediaTek, Inc. MediaTek chipset
1 min read - 8.4CVE-2026-20565In Modem, there is a possible out of bounds write due to an incorrect bounds check.Verify fixMediaTek, Inc. MediaTek chipset
1 min read - 7.8CVE-2026-20559In GPU pdma, there is a possible memory corruption due to use after free.Verify fixMediaTek, Inc. MediaTek chipset
1 min read - 7.5CVE-2026-20557In Modem, there is a possible out of bounds write due to a missing bounds check.Verify fixMediaTek, Inc. MediaTek chipset
1 min read - 7.5CVE-2026-20556In Modem, there is a possible out of bounds write due to a missing bounds check.Verify fixMediaTek, Inc. MediaTek chipset
1 min read - 7.5CVE-2026-20554In Modem, there is a possible system crash due to a missing bounds check.Verify fixMediaTek, Inc. MediaTek chipset
1 min read - 7.5CVE-2026-20549In Modem, there is a possible out of bounds write due to improper input validation.Verify fixMediaTek, Inc. MediaTek chipset
1 min read - 7.5CVE-2026-20548In Modem, there is a possible out of bounds write due to an integer overflow.Verify fixMediaTek, Inc. MediaTek chipset
1 min read - 7.5CVE-2026-20547In Modem, there is a possible out of bounds write due to a missing bounds check.Verify fixMediaTek, Inc. MediaTek chipset
1 min read - 7.5CVE-2026-20546In Modem, there is a possible out of bounds write due to an incorrect bounds check.Verify fixMediaTek, Inc. MediaTek chipset
1 min read - 7.5CVE-2026-20545In Modem, there is a possible out of bounds write due to a missing bounds check.Verify fixMediaTek, Inc. MediaTek chipset
1 min read - 7.5CVE-2026-20499In Modem, there is a possible out of bounds write due to a missing bounds check.Verify fixMediaTek, Inc. MediaTek chipset
1 min read - 8.2CVE-2026-120317http4k 4.9.10.0 before 6.60.0.0 Digest auth-int Missing Body IntegrityFix availablehttp4k http4k
1 min read - 9.4CVE-2026-120322Termix-SSH Termix transferToHost path traversalVerify fixTermix-SSH Termix
1 min read - 10.0CVE-2026-120281WAVLINK WN536AX6-A OpenVPN protocol.csp strcpy stack-based overflowVerify fixWAVLINK WN536AX6-A
1 min read - 10.0CVE-2026-120279WAVLINK WN536AX6-A openvpn_cli protocol.csp os command injectionVerify fixWAVLINK WN536AX6-A
1 min read - 10.0CVE-2026-120280WAVLINK WN536AX6-A WireGuard protocol.csp wireguard_cli_group handler os command injectionVerify fixWAVLINK WN536AX6-A
1 min read - 10.0CVE-2026-120283Linksys E8450 portal.cgi strcpy stack-based overflowVerify fixLinksys E8450
1 min read - 9.4CVE-2026-120282WAVLINK WN536AX6-A protocol.csp host_black os command injectionRCEVerify fixWAVLINK WN536AX6-A
1 min read - 10.0CVE-2026-120277WAVLINK WN536AX6-A WireGuard CLI Group ioos sub_41a1d8 os command injectionVerify fixWAVLINK WN536AX6-A
1 min read - 10.0CVE-2026-120276WAVLINK WN536AX6-A Web Management ioos sub_416760 os command injectionVerify fixWAVLINK WN536AX6-A
1 min read - 7.5CVE-2026-106804A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_qos_npn module.Verify fixUnknown product
1 min read - 7.5CVE-2026-117069An integer truncation vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a Verify fixUnknown product
1 min read - 7.4CVE-2026-84231Apache Wicket: XSS in ExternalLink via the model URL when the component is bound to a non-anchor tagVerify fixApache Software Foundation Apache Wicket
2 min read - 7.6CVE-2026-82956Apache Wicket: XSS in AjaxNewWindowNotifyingBehavior via the client-supplied window nameVerify fixApache Software Foundation Apache Wicket
2 min read - 7.4CVE-2026-83539Apache Wicket: XSS in SmartLinkLabel and SmartLinkMultiLineLabel via a javascript: URL in the model dataVerify fixApache Software Foundation Apache Wicket
2 min read - 7.4CVE-2026-83559Apache Wicket: JavaScriptUtils#escapeQuotes does not escape the backslash, so its output can leave its string literalVerify fixApache Software Foundation Apache Wicket
2 min read - 8.3CVE-2026-83594Apache Wicket: FileUploadToResourceField accepts a client-asserted upload result and allocates the size it namesVerify fixApache Software Foundation Apache Wicket
2 min read - 8.3CVE-2026-84170Apache Wicket: Configured upload limits are not enforced by the standalone file upload resourceVerify fixApache Software Foundation Apache Wicket
2 min read - 7.6CVE-2026-111089Apache Wicket: XSS via a resource bundle text written unescaped into generated JavaScript and markupVerify fixApache Software Foundation Apache Wicket
2 min read - 7.6CVE-2026-95863Apache Wicket: XSS via a component id or markup id written unescaped into generated JavaScript and markupVerify fixApache Software Foundation Apache Wicket
2 min read - 7.2CVE-2026-82840Apache Wicket: The session id is renewed only on the first sign in, not on re-authenticationVerify fixApache Software Foundation Apache Wicket
2 min read - 9.9CVE-2026-120240WAVLINK WN553X1-B WireGuard CLI Group ioos sub_41A748 os command injectionVerify fixWAVLINK WN553X1-B
1 min read - 8.7CVE-2026-120241Ruijie RG-ES205GC Local Firmware Upgrade httpupg.cgi buffer overflowVerify fixRuijie RG-ES205GC
1 min read - 9.4CVE-2026-120239WAVLINK WN553X1-B WireGuard CLI ioos sub_419DA8 os command injectionRCEVerify fixWAVLINK WN553X1-B
1 min read - 9.4CVE-2026-120238WAVLINK WN553X1-B ovpn_file ioos sub_4162A8 os command injectionRCEVerify fixWAVLINK WN553X1-B
1 min read - 10.0CVE-2026-120338Prefab UI Pyodide sandbox escape to host RCERCEFix availablePrefectHQ prefab-ui
2 min read - 9.3CVE-2026-62048WordPress BookIt plugin <= 2.6.0.6 - SQL Injection vulnerabilityVerify fixLiquid Web / StellarWP BookIt
1 min read - 7.1CVE-2026-66570WordPress WordPress File Upload plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerabilityVerify fixNickboss WordPress File Upload
1 min read - 8.8CVE-2026-120232Horizon DataSys Reboot Restore Standard Kernel Driver shield.sys sub_23908 memory corruptionVerify fixHorizon DataSys Reboot Restore Standard
1 min read - 9.4CVE-2026-120231WAVLINK WN553X1-B OpenVPN CLI ioos sub_416568 os command injectionRCEVerify fixWAVLINK WN553X1-B
1 min read - 9.1CVE-2026-120229WAVLINK WN553X1-B ioos sub_416B50 os command injectionVerify fixWAVLINK WN553X1-B
1 min read - 9.4CVE-2026-120230WAVLINK WN701AE ioos Web Backend del_vlan_group os command injectionRCEVerify fixWAVLINK WN701AE
1 min read - 9.4CVE-2026-120228WAVLINK WN553X1-B ioos Service sub_416D88 os command injectionRCEVerify fixWAVLINK WN553X1-B
1 min read - 9.9CVE-2026-120306Beta9 build sandbox escape via chroot-only isolationCloudFix availablebeam-cloud Beta9 worker
1 min read - 9.9CVE-2026-120307Beta9 container escape via unvalidated sandbox file pathsCloudFix availablebeam-cloud Beta9 worker
2 min read - 9.9CVE-2026-120227WAVLINK WN701AE ioos Web Backend static_route_setting.sh del_staticrule os command injectionVerify fixWAVLINK WN701AE
1 min read - 9.9CVE-2026-120308Beta9 host filesystem exposure via volume path traversalFix availablebeam-cloud Beta9 gateway
1 min read - 9.4CVE-2026-120225Oray Pugongying X5 Pro openwrt_release config_restore_ex path traversalVerify fixOray Pugongying X5 Pro
1 min read - 9.4CVE-2026-120224Oray Pugongying X5 Pro API Authorization run_async_task improper authorizationVerify fixOray Pugongying X5 Pro
1 min read - 9.9CVE-2026-120197WAVLINK WL-WN530HG4B wapi.cgi port_forward os command injectionVerify fixWAVLINK WL-WN530HG4B
1 min read - 10.0CVE-2026-120195WAVLINK WL-WN579A3-A Initial Setup Wizard adm.cgi set_wzdgwMesh os command injectionVerify fixWAVLINK WL-WN579A3-A
1 min read - 10.0CVE-2026-120198WAVLINK WL-WN530BE1-A protocol.csp con_check_read_finish command injectionVerify fixWAVLINK WL-WN530BE1-A
1 min read - 9.4CVE-2026-120196WAVLINK WN579X3-D wapi.cgi port_forward os command injectionRCEVerify fixWAVLINK WN579X3-D
1 min read - 7.3CVE-2026-120191Presenton API missing authenticationFix availablePresenton
1 min read - 10.0CVE-2026-120189D-Link DIR-505 TFTP Upload Filename tftpd mp_upload_file stack-based overflowVerify fixD-Link DIR-505
1 min read - 8.2CVE-2026-120135Apache Thrift: Java TProtocolUtil.skip() does not limit the recursion depth by defaultFix availableApache Software Foundation Apache Thrift
1 min read - 9.8CVE-2026-118636Apache MINA: Unsafe Deserialization (CWE-502) in JavaNativeMessageDecoderRCEVerify fixApache Software Foundation Apache MINA
1 min read - 7.4CVE-2026-118147Visual Studio Spoofing VulnerabilityFix availableMicrosoft Microsoft Visual Studio 2017 version 15.9
1 min read - 9.3CVE-2026-120209AJ-Report through 1.7.1 Authentication Bypass leading to RCE via Share-TokenRCEVerify fixanji-plus AJ-Report
1 min read - 7.7CVE-2026-120208libheif 1.18.0 before 1.23.3 Heap Buffer Overflow via unci Mixed-Interleave DecoderFix availablestrukturag libheif
1 min read - 7.0CVE-2026-120207Thelia Page Module before 2.0.4 CSRF via Page Tag, Document and Image Delete RoutesFix availableThelia Thelia Page Module
1 min read - 7.4CVE-2026-120205Thelia before 3.1.0 Stored XSS via Coupon Condition Customer NameFix availableThelia Thelia
1 min read - 8.7CVE-2026-120203ShowDoc 2.8.14 before 3.9.6 Code Injection via Mock TemplatesRCEFix availableShowDoc ShowDoc
1 min read - 7.1CVE-2026-120202Highflame ramparts 0.8.1 through 0.8.10 Skill Bundle Scan Bypass via Nested .pycVerify fixhighflame-ai ramparts
1 min read - 9.3CVE-2026-120201Jpom 2.10.0 through 2.11.12 Authentication Bypass via JPOM-USER-TOKEN HeaderVerify fixdromara Jpom
1 min read - 8.4CVE-2026-102212Pre-Auth Heap Buffer Overflow in the Multipart RequestFix availableOpengear IM7200
1 min read - 7.2CVE-2026-120114Debug Log Manager <= 2.5.2 - Unauthenticated Stored Cross-Site Scripting via 'log_js_errors' AJAX EndpointVerify fixqriouslad Debug Log Manager – Conveniently Monitor and Inspect Errors
1 min read - 7.5CVE-2026-120194Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice stepVerify fixRed Hat Red Hat Enterprise Linux 10
1 min read - 8.8CVE-2026-76010Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 4.4.1 - Authenticated (Custom+) Remote Code Execution via XML-RPC 'meta_data' Mass Assignment and Path TraversalRCEVerify fixsmub Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery
1 min read - 7.5CVE-2026-109197WP Directory Kit <= 1.6.0 - Unauthenticated SQL Injection via 'idfield' ParameterVerify fixwpdirectorykit WP Directory Kit
1 min read - 8.6CVE-2026-114217Konflux-ci: github token plaintext exposure in ci/cd scriptsVerify fixUnknown product
1 min read - 8.8CVE-2026-116086Konflux-ci: jq filter injection in github workflow issue managementRCEVerify fixUnknown product
1 min read - 8.4CVE-2026-116964Konflux-ci: remote code execution via eval() in manifest scriptsRCEVerify fixUnknown product
1 min read - 8.0CVE-2026-117681Konflux-ci: ui proxy skips backend tls verification on non-openshift clusters, leaking a token that can impersonate anyoneLPEVerify fixUnknown product
1 min read - 9.8CVE-2026-118235SimpleForm <= 3.10.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename via Unknown File Key in simpleform_get_submit_dataRCEVerify fixwpazleen SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notificatio…
1 min read - 7.2CVE-2026-120075WP Activity Log <= 5.6.1 - Unauthenticated Stored Cross-Site ScriptingVerify fixmelapress WP Activity Log
1 min read - 9.1CVE-2026-103882Acadlix LMS <= 1.1.9 - Unauthenticated Arbitrary File Deletion via 'delete_file_data.file_path' ParameterRCEVerify fixacadlix Acadlix LMS – AI Quiz Maker, Online Exam & Course Plugin for WordPress
1 min read - 7.2CVE-2026-110530FeedWordPress <= 2026.0517 - Unauthenticated Stored Cross-Site Scripting via Syndicated Feed ContentVerify fixradgeek FeedWordPress
1 min read - 9.8CVE-2026-119096Uncanny Toolkit for LearnDash <= 3.8.2 - Unauthenticated Authentication Bypass via 'email' ParameterVerify fixuncannyowl Uncanny Toolkit for LearnDash
1 min read - 8.8CVE-2026-120070User Frontend <= 4.3.13 - Authenticated (Subscriber+) Privilege Escalation via post_content ParameterVerify fixwedevs User Frontend – Membership, User Registration, User Profile, User Directory & C…
2 min read - 7.2CVE-2026-107759WPO365 | MICROSOFT 365 GRAPH MAILER <= 6.2 - Unauthenticated Stored Cross-Site Scripting via Email Subject via wp_mailVerify fixwpo365 WPO365 | MICROSOFT 365 GRAPH MAILER
1 min read - 9.8CVE-2026-116512Project Manager <= 4.1.1 - Unauthenticated Remote Code Execution via 'id' Parameter Function InjectionRCEVerify fixwedevs Project Manager – AI Powered Project Management, Task Management, Kanban Board…
1 min read - 7.2CVE-2026-118057Shield Security <= 22.3.2 - Unauthenticated Stored Cross-Site Scripting via Request Path (REQUEST_URI) in Traffic LogVerify fixpaultgoodchild Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scann…
1 min read - 8.1CVE-2026-103898Wp Social Login and Register Social Counter <= 3.2.2 - Unauthenticated Authentication Bypass via Insufficient Email Verification in Social Login CallbackVerify fixroxnor Wp Social Login and Register Social Counter
1 min read - 8.8CVE-2026-104012Rox Appointment Booking <= 1.3.1 - Unauthenticated Privilege Escalation via Mass Assignment to Mass Assignment via '/public/booking' EndpointVerify fixroxnor Rox Appointment Booking – Event, Calendar & Appointment Scheduling
1 min read - 7.5CVE-2026-120040Mail logging & Catcher <= 2.2.0 - Authenticated (Subscriber+) Sensitive Information Exposure to Privilege Escalation to Mail Log Viewer / Password-Reset Email DisclosureVerify fixwardee Mail logging & Catcher
1 min read - 9.1CVE-2026-89270Popup Builder <= 4.4.5 - Missing Authorization to Unauthenticated Arbitrary Popup Post Trashing via 'post_type' and 'sg_popup_preview_id' ParametersVerify fixpopupbuilder Popup Builder – Create highly converting, mobile friendly marketing popups.
1 min read - 7.2CVE-2026-118070Welcart e-Commerce <= 2.12.5 - Unauthenticated Stored Cross-Site Scripting via 'gid' ParameterVerify fixuscnanbu Welcart e-Commerce
1 min read - 7.2CVE-2026-119065Shipping Zones by Drawing for WooCommerce <= 3.3.0 - Unauthenticated Stored Cross-Site Scripting via 'szbd-picked' Checkout ParameterVerify fixarosoft Shipping Zones by Drawing for WooCommerce
1 min read - 7.2CVE-2026-119089ThirstyAffiliates <= 3.12.1 - Unauthenticated Stored Cross-Site Scripting via Comment Content via <ta> TagVerify fixsupercleanse ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing P…
1 min read - 7.2CVE-2026-119162User Submitted Posts <= 20260916 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'user-submitted-content' Parameter via Block-Comment Shortcode SplittingVerify fixspecialk User Submitted Posts – Enable Users to Submit Posts from the Front End
1 min read - 7.5CVE-2026-119163FunnelKit Automations <= 3.8.5.2 - Unauthenticated SQL Injection via 'bwfan_cart_id' ParameterVerify fixteamfunnelkit FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooC…
1 min read - 7.2CVE-2026-115840VikRentCar Car Rental Management System <= 1.4.9 - Unauthenticated Stored Cross-Site Scripting via 'poplink' ParameterVerify fixe4jvikwp VikRentCar Car Rental Management System
1 min read - 7.2CVE-2026-116522Relevanssi <= 4.28.5 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Late Entity DecodeVerify fixcomesio Relevanssi – A Better Search
1 min read - 7.2CVE-2026-116548VikRentCar Car Rental Management System <= 1.4.10 - Unauthenticated Stored Cross-Site Scripting via 'optionals' ParameterVerify fixe4jvikwp VikRentCar Car Rental Management System
1 min read - 9.1CVE-2026-116557WP Booking System <= 2.1.0.5 - Missing Authorization to Unauthenticated Arbitrary Calendar Note Deletion via wpbs_calendar_remove_note AJAX ActionVerify fixmurgroland WP Booking System – Booking Calendar
1 min read - 9.8CVE-2026-109220PDF Invoice for WooCommerce + Drag and Drop Template Builder <= 7.1.1 - Unauthenticated PHP Object Injection to Remote Code Execution via 'customer_note' Checkout FieldRCEVerify fixaddonsorg PDF Invoice for WooCommerce + Drag and Drop Template Builder
1 min read - 7.2CVE-2026-111254W3 Total Cache <= 2.10.7 - Unauthenticated Stored Cross-Site Scripting via Comment Content Cached as HTML after License ExpiryVerify fixboldgrid W3 Total Cache
1 min read - 7.2CVE-2026-107750PDF Invoices & Packing Slips for WooCommerce <= 5.16.4 - Unauthenticated Stored Cross-Site Scripting via Billing First Name / Last Name / Company / Customer Note fields at guest c…Verify fixwpovernight PDF Invoices & Packing Slips for WooCommerce
1 min read - 7.2CVE-2026-107653SureCart <= 4.9.4 - Unauthenticated Stored Cross-Site Scripting via 'manual-payment-instructions' Attribute of sc-order-manual-instructions in CommentsVerify fixsurecart SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads…
1 min read - 8.1CVE-2026-119977WordPress Core 4.7.0 - 7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code ExecutionRCEVerify fixWordPress Foundation WordPress
1 min read - 7.5CVE-2026-118638Mapster WP Maps < 2.0.6 - Unauthenticated Arbitrary Post Modification via save-mapmaker REST RouteFix availableMapster WP Maps
1 min read - 7.2CVE-2026-118043Bulk Media Register < 2.01 - Author+ Arbitrary File Move via Path TraversalFix availableBulk Media Register
1 min read - 7.5CVE-2026-118185Security Optimizer < 1.6.9 - 2FA Bypass via Missing Rate LimitingFix availableSecurity Optimizer
1 min read - 7.2CVE-2026-116520PPWP <= 1.9.26 - Unauthenticated Stored Cross-Site Scripting via '[ppwp]' Shortcode 'desc_below_form' Attribute via Placeholder Marker CollisionVerify fixbuildwps PPWP – Password Protect Pages
1 min read - 7.2CVE-2026-109234Meow Lightbox <= 5.6.4 - Unauthenticated Stored Cross-Site Scripting via HTML Parser Quote-Metadata DesynchronizationVerify fixtigroumeow Meow Lightbox
1 min read - 7.2CVE-2026-109997Ninja Forms <= 3.15.5 - Unauthenticated Stored Cross-Site Scripting via 'extra' Parameter via Metadata Key NormalizationVerify fixkstover Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI F…
1 min read - 7.4CVE-2026-116755SoftIron HyperCloud: OS Command Injection in Orchestrator via Virtual Machine Template FieldsFix availableSoftIron HyperCloud
1 min read - 8.7CVE-2026-110176File Force Download for Drupal 7 Access Bypass via Unconditional Download HeadersFix availableDrupal File Force Download
1 min read - 9.3CVE-2026-117656Unverified Sign in with Apple callback parameter can override verified ID token claimsFix availablepow-auth assent
1 min read - 8.8CVE-2026-63339IXP Manager has authenticated non-administrator privilege escalationVerify fixinex IXP-Manager
1 min read - 7.5CVE-2026-63341Aedes has Uncaught Exception and Uncontrolled Resource ConsumptionVerify fixmoscajs aedes
1 min read - 8.6CVE-2026-63345Refitter: C# source injection through OpenAPI path keysRCEVerify fixchristianhelle refitter
1 min read - 7.5CVE-2026-118761Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memoryFix availablegithub.com/kubeflow/pipelines
2 min read - 7.5CVE-2026-118759Kubeflow Pipelines: Run-log endpoint permits unauthorized access to pod logsCloudFix availablegithub.com/kubeflow/pipelines
2 min read - 7.5CVE-2026-118772joi: quadratic-time split in `string().email({ multiple: true })` allows denial of serviceFix availablejoi
2 min read - 7.5CVE-2026-119202@hapi/content: quadratic-time parsing of Content-Disposition parameters allows denial of serviceFix available@hapi/content
2 min read - 7.5CVE-2026-119196pyasn1 has quadratic CPU consumption in constructed BIT STRING decodingFix availablepyasn1
2 min read - 7.5CVE-2026-119197pyasn1 has quadratic-complexity denial of service in binary REAL decodingFix availablepyasn1
2 min read - 7.5CVE-2026-119195pyasn1 has quadratic-time denial of service in constructed string and indefinite-length ANY decodingFix availablepyasn1
2 min read - 7.5CVE-2026-119194pyasn1 has quadratic CPU use in schemaless BER/CER/DER container decodingFix availablepyasn1
2 min read - 7.5CVE-2026-118779Forge: Regular expression denial of service in PEM decoding (pem.decode)Fix availablenode-forge
2 min read - 7.5CVE-2026-118782Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration countFix availablenode-forge
2 min read - 7.5CVE-2026-119188Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake messageFix availablenode-forge
2 min read - 7.5CVE-2026-119187Forge: Denial of service in TLS record processing via call stack exhaustionFix availablenode-forge
2 min read - 7.4CVE-2026-119190Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13Fix availablenode-forge
2 min read - 7.4CVE-2026-118763@sigstore/oci sends the registry Authorization header to a cross-host blob-upload LocationFix available@sigstore/oci
2 min read - 7.5CVE-2026-119286GraphQL-core has denial of service via memory leak in aborted validationsFix availablegraphql-core
2 min read - 8.1CVE-2026-96633AdminNeo SQLite Database-List Drop Arbitrary File DeletionFix availableadminneo-org/adminneo
2 min read - 8.2CVE-2026-96631AdminNeo has Cookie Attribute Injection via Unsanitized X-Forwarded-Prefix in Set-Cookie HeadersFix availableadminneo-org/adminneo
2 min read - 7.2CVE-2026-96630AdminNeo: RCE via SQLite VACUUM INTO (ATTACH Blocklist Bypass)Fix availableadminneo-org/adminneo
2 min read - 7.6CVE-2026-63414Shopify App: Token exchange shop context confusion may allow cross-shop authorization bypass in affected appsFix availableShopify shopify_app
1 min read - 7.4CVE-2026-63398Coop has SAML cross-tenant authentication bypassVerify fixroostorg coop
1 min read - 8.7CVE-2026-63396Coop has a data leak via unauthenticated GraphQL Query.allOrgsVerify fixroostorg coop
1 min read - 8.3CVE-2026-63338IXP Manager has Broken Object-Level AuthorizationVerify fixinex IXP-Manager
1 min read - 8.7CVE-2026-63393OpenSearch SQL plugin: Unsafe cursor deserialization permits server code executionRCEVerify fixopensearch-project sql
1 min read - 8.8CVE-2026-63378TAKO AI Agent for Okta: Authenticated Python execution through validator bypassRCEVerify fixfctr-id okta-ai-agent
2 min read - 9.8CVE-2026-63377TAKO AI Agent for Okta: Unauthenticated first-run administrator takeoverVerify fixfctr-id okta-ai-agent
1 min read - 8.6CVE-2026-63346Refitter: C# source injection through OpenAPI header parameter namesRCEVerify fixchristianhelle refitter
1 min read - 8.1CVE-2026-63182LightSAML: Signature reference wrapping permits unsigned assertion claimsVerify fixlitesaml lightsaml
1 min read - 8.8CVE-2026-16760Fickling check_safety() bypass: likely_safe_imports grants module-origin trust to unvalidated standard library callablesRCEVerify fixtrailofbits fickling
2 min read - 8.6CVE-2026-63344Refitter: C# source injection through OpenAPI content-type map keysRCEVerify fixchristianhelle refitter
1 min read - 7.2CVE-2026-63224OpenRemote has authenticated SQL injection in crosstab datapoint exportsVerify fixopenremote openremote
1 min read - 7.1CVE-2026-63201netopeer2-server logging has format string vulnerability via subtree filterRCEVerify fixCESNET netopeer2
1 min read - 7.1CVE-2026-63184Refitter: Unrestricted OpenAPI references permit build-host SSRF and file inclusionVerify fixchristianhelle refitter
1 min read - 8.8CVE-2026-118938Fickling check_safety() bypass: dotted __qualname__ in STACK_GLOBAL resolves a class-method attribute path that evades call analysisRCEVerify fixtrailofbits fickling
2 min read - 7.5CVE-2026-111578PDF Invoices & Packing Slips for WooCommerce 5.16.2 - 5.16.4 - Unauthenticated Stored XSS via Order Address and Customer Note FieldsFix availablePDF Invoices & Packing Slips for WooCommerce
1 min read - 8.1CVE-2026-62967ZTNET privilege bypass: any user can deactivate arbitrary accounts via /api/auth/user/invalidateUserVerify fixsinamics ztnet
1 min read - 8.7CVE-2026-62968Dream Displays has command-line argument injection in yt-dlp invocationVerify fixarsmotorin dreamdisplays
1 min read - 8.1CVE-2026-62989Shopper: missing variant-delete authorization permits destructive single and bulk actionsVerify fixshopperlabs shopper
1 min read - 9.6CVE-2026-62863MoLing: unauthenticated SSE and wildcard CORS expose tool sessionsVerify fixgojue moling
1 min read - 7.5CVE-2026-62864Ring's nested-params middleware has inefficient regular expression complexityVerify fixring-clojure ring
1 min read - 7.9CVE-2026-62958libriscv: Out of bounds read vuln in the ELF parser (Denial of service)Verify fixlibriscv libriscv
1 min read - 7.0CVE-2026-62965SABnzbd: Orphan-job path traversal permits arbitrary file deletionVerify fixsabnzbd sabnzbd
1 min read - 8.2CVE-2026-58412Filecoin Pin: Fork bypass in the privileged GitHub Actions workflowVerify fixfilecoin-project filecoin-pin
1 min read - 8.6CVE-2026-40573NovumOS: Nova Interpreter Privilege EscalationVerify fixMinecAnton209 NovumOS
1 min read - 8.7CVE-2026-62990Shopper: same-origin SVG and HTML uploads enable stored XSS and persistent administrator creationVerify fixshopperlabs shopper
2 min read - 7.5CVE-2026-62297ag-psd has uncontrolled memory allocation via declared PSD dimensions (DoS)Verify fixAgamnentzar ag-psd
1 min read - 8.4CVE-2026-62979jack: upstream error responses expose backend and peer credentialsCloudVerify fixroziscoding jack
1 min read - 7.5CVE-2026-62966ESPAsyncWebServer multipart parser has null-pointer writeVerify fixESP32Async ESPAsyncWebServer
1 min read - 9.1CVE-2026-62849ThingLinks TDengine TDS APIs vulnerable to unauthenticated SQL injectionVerify fixmqttsnet thinglinks
1 min read - 9.9CVE-2026-62853ThingLinks vulnerable to authenticated remote code execution via Groovy script registration in ThingLinksRCEVerify fixmqttsnet thinglinks
1 min read - 8.2CVE-2026-62847Metalama: Local code execution via DLL planting in world-writable temporary directories (Linux/macOS)LPEVerify fixmetalama Metalama
1 min read - 9.1CVE-2026-117666ssl_verify_fun: partial-label wildcard certificate matches hostnames across a label boundaryFix availabledeadtrickster ssl_verify_fun
1 min read - 7.3CVE-2026-62848Metalama's Visual Studio inter-process named pipe allows unsafe deserialization that enables local code executionRCELPEFix availablemetalama Metalama
2 min read - 7.8CVE-2026-78402Stack Buffer Overflow in Sentinel Keys ServerLPEFix availableThalesgroup Sentinel Keys Server
1 min read - 9.8CVE-2026-78403Unauthenticated Stack Buffer Overflow in Sentinel Keys ServerRCEFix availableThalesgroup Sentinel Keys Server
1 min read - 8.7CVE-2026-62302MyTube: Unauthenticated Media Access via Static Routes Bypassing LoginVerify fixfranklioxygen MyTube
1 min read - 8.7CVE-2026-62333OpenVM: MemoryMerkleAir allows below-leaf rows to alter memory rootsVerify fixopenvm-org openvm
1 min read - 8.7CVE-2026-62334OpenVM's OpenVmHalo2Verifier self-call can bypass proof verificationVerify fixopenvm-org openvm
1 min read - 9.3CVE-2026-61850Kargo: Privilege escalation via Project RBAC management in the Kargo APIVerify fixakuity kargo
2 min read - 8.6CVE-2026-62284OSAC operator: Kubeconfig credential-plugin execution and SSRF in console proxyRCECloudVerify fixosac-project osac-operator
1 min read - 7.1CVE-2026-62301MyTube: Visitor Can Access Hidden Video Metadata and ContentVerify fixfranklioxygen MyTube
1 min read - 9.1CVE-2026-55598PinePods: Authenticated SSRF via podcast RSS enclosure URL (server-side fetch of attacker-controlled URL, no host validation)Verify fixmadeofpendletonwool PinePods
1 min read - 9.8CVE-2026-61620HoneySQL unchecked entity names can lead to SQL injection resultsVerify fixseancorfield honeysql
1 min read - 7.8CVE-2026-119335Pi-hole: Local privilege escalation from `pihole` user to root via CVE-2026-41489 fix bypassVerify fixpi-hole pi-hole
1 min read - 7.8CVE-2026-119336Pi-hole: arbitrary root file clobber / chmod / disclosure via updatecheck.sh cron following /etc/pihole/versions symlinkVerify fixpi-hole pi-hole
1 min read - 7.1CVE-2026-119331Ladybird: Missing origin-clean enforcement in CSSStyleSheet allows cross-origin CSS read and mutationVerify fixLadybirdBrowser ladybird
1 min read - 8.8CVE-2026-119332Ladybird: FinalizationRegistry::cleanup() heap use-after-free via reentrant unregister()Verify fixLadybirdBrowser ladybird
1 min read - 7.8CVE-2026-119333draw.io Desktop allows Windows executable search-path hijackingVerify fixjgraph drawio-desktop
1 min read - 8.4CVE-2026-116249pgAdmin 4: Connection file paths and parameter keys escape the user's storage directoryFix availablepgadmin.org pgAdmin 4
1 min read - 7.5CVE-2026-116243pgAdmin 4: Utility binary path can point at a shared storage directoryFix availablepgadmin.org pgAdmin 4
1 min read - 8.2CVE-2026-116244pgAdmin 4: libpq uses the pgAdmin service account's Kerberos credentialsFix availablepgadmin.org pgAdmin 4
1 min read - 8.2CVE-2026-116245pgAdmin 4: Connection services are not restricted in server modeFix availablepgadmin.org pgAdmin 4
1 min read - 8.2CVE-2026-116247pgAdmin 4: libpq uses the pgAdmin service account's own password file and client certificateFix availablepgadmin.org pgAdmin 4
1 min read - 8.5CVE-2026-116239pgAdmin 4: An LDAP or Kerberos login is logged in to another account with the same usernameFix availablepgadmin.org pgAdmin 4
2 min read - 9.9CVE-2026-116241pgAdmin 4: Import/Export Data query export runs a command through a backslash in a double-quoted identifierRCEFix availablepgadmin.org pgAdmin 4
2 min read - 8.2CVE-2026-116242pgAdmin 4: SSH tunnels use the pgAdmin service account's own SSH identityFix availablepgadmin.org pgAdmin 4
1 min read - 8.7CVE-2026-115829Secret Server partial login bypassVerify fixDelinea Secret Server
1 min read - 8.7CVE-2026-115830Secret Server JWT issuance errorVerify fixDelinea Secret Server
1 min read - 8.1CVE-2026-116238pgAdmin 4: The failed login limit can be bypassed, and Flask-Security's own views skip pgAdmin's login and password checksFix availablepgadmin.org pgAdmin 4
2 min read - 7.1CVE-2026-119337RAGFlow: OpenAI-compatible agent completion bypasses private canvas authorizationVerify fixinfiniflow ragflow
1 min read - 8.2CVE-2026-62331praktor: Telegram upload traversal permits persistent agent instruction injectionFix availablemtzanidakis praktor
1 min read - 8.7CVE-2026-62160Daptin: ParseAcceptLanguage `_` separator bypass enables >250x CPU amplification via Accept-Language header in LanguageMiddlewareVerify fixgithub.com/daptin/daptin
1 min read - 8.9CVE-2026-61845Crass: Large numeric exponents cause CPU and memory denial of serviceVerify fixrgrove crass
1 min read - 7.5CVE-2026-59978AdminNeo: version-cache array injection causes persistent denial of serviceFix availableadminneo-org/adminneo
2 min read - 8.8CVE-2026-118086WordPress WP BASE Booking plugin <= 6.5.2 - Privilege Escalation vulnerabilityVerify fixHakan Ozevin WP BASE Booking
1 min read - 9.1CVE-2026-116852WordPress Widget Options plugin <= 4.2.5 - Remote Code Execution (RCE) vulnerabilityRCEVerify fixMarketing Fire Widget Options
1 min read - 7.5CVE-2026-116401WordPress HUSKY plugin <= 1.4.6 - Broken Access Control vulnerabilityVerify fixRealMag777 HUSKY
1 min read - 8.8CVE-2026-78527WordPress GS Testimonial Slider plugin <= 3.3.10 - PHP Object Injection vulnerabilityRCEVerify fixGS Plugins GS Testimonial Slider
1 min read - 7.1CVE-2026-48201WordPress Fast Velocity Minify plugin <= 3.5.7 - Cross Site Scripting (XSS) vulnerabilityVerify fixRaul P. Fast Velocity Minify
1 min read - 9.8CVE-2026-39738WordPress FunnelKit Automations plugin <= 3.8.6.1 - PHP Object Injection vulnerabilityRCEVerify fixAman FunnelKit Automations
1 min read - 7.1CVE-2026-28160WordPress VikRentCar plugin <= 1.4.10 - Cross Site Scripting (XSS) vulnerabilityVerify fixe4jvikwp VikRentCar
1 min read - 8.2CVE-2026-62162Hydra: Deposit Claim omits Head state-token spending requirementVerify fixcardano-scaling hydra
1 min read - 7.0CVE-2026-84243gettext: Directory traversal via the LANGUAGE environment variableRCEFix availableThe GNU C Library glibc
2 min read - 7.8CVE-2026-119777Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: stack buffer overflow in h.266/vvc parserFix availableRed Hat Red Hat Enterprise Linux 10
1 min read - 8.5CVE-2026-119978Flowise through 3.1.4 Custom Function Sandbox Escape RCE via LocalFileStoreVerify fixFlowiseAI Flowise
1 min read - 7.3CVE-2026-11961937954679 cak-filemanagement-system save_student.php mysqli_query sql injectionVerify fix37954679 cak-filemanagement-system
1 min read - 7.5CVE-2026-119760sniproxy through 0.7.0 NULL Pointer Dereference via resolv_cancel()Fix availabledlundquist sniproxy
1 min read - 8.0CVE-2026-118696In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2Fix availableJetBrains IntelliJ IDEA
1 min read - 9.0CVE-2026-118697In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA before 2026.3 and 2026.2.4, the jetbrainsd daemon trusted compromised intermediate certFix availableJetBrains Toolbox App
1 min read - 7.5CVE-2026-107630Email Templates Customizer and Designer for WordPress and WooCommerce <= 1.5.14 - Missing Authorization to Unauthenticated Order PII Disclosure via 'preview_order' ParameterVerify fixsaadiqbal Email Templates Customizer and Designer for WordPress and WooCommerce
1 min read - 7.8CVE-2026-119116Use-after-free in the SetClient command handler of kmstool-enclave in AWS aws-nitro-enclaves-sdk-cRCECloudFix availableAWS kmstool-enclave
1 min read - 10.0CVE-2026-112816Improper certificate validation in the HTTPS listener in LXDFix availableCanonical LXD
1 min read - 8.1CVE-2026-119716pybars3 through 0.9.7 Code Injection via Bracketed Path SegmentsRCEVerify fixwbond pybars3
1 min read - 7.8CVE-2026-119718Blender before 4.5.15 and 5.x before 5.2.3 Heap Buffer Overflow via Point CacheFix availableBlender Foundation Blender
1 min read - 7.8CVE-2026-119719Blender before 4.5.15 and 5.x before 5.2.3 Heap Buffer Overflow via Thumbnail ExtractionFix availableBlender Foundation Blender
1 min read - 7.8CVE-2026-119722Blender before 4.5.15 and 5.x before 5.2.3 Heap Out-of-Bounds Access via read_struct()Fix availableBlender Foundation Blender
1 min read - 7.1CVE-2026-119710PipesHub 0.3.0 before 0.10.0 Connector Deletion via Crawling-Manager Schedule RouteFix availablepipeshub-ai pipeshub-ai
1 min read - 9.8CVE-2026-119706LMDeploy 0.9.0 through 0.18.0 Unauthenticated RCE via /update_weights Pickle DeserializationRCEFix availableInternLM lmdeploy
1 min read - 7.1CVE-2026-119707SonicJS through 3.0.0 Missing Authorization in Content Write APIFix availableSonicJs-Org sonicjs
1 min read - 7.8CVE-2026-104064Scribus before 1.6.7 Heap Overflow via TIFF Tile Buffer HandlingFix availableScribus Scribus
1 min read - 7.8CVE-2026-104065Scribus before 1.6.7 Heap Out-of-Bounds Write via Micrografx Draw ImportFix availableScribus Scribus
1 min read - 7.8CVE-2026-104067Scribus before 1.6.7 Out-of-Bounds Memory Access via SVM Import PluginFix availableScribus Scribus
1 min read - 7.8CVE-2026-104061Scribus before 1.6.7 Heap Out-of-Bounds Write via PSD Image LoaderFix availableScribus Scribus
1 min read - 9.8CVE-2026-119660MuseBot before 2.0.0 Authentication Bypass via Hard-Coded Session KeyFix availableyincongcyincong MuseBot
1 min read - 7.5CVE-2026-119655CoreShop through 1.5.5 SQL Injection via order Parameter in GetGoodsPageListFix availableCoreUnion CoreShop
1 min read - 7.5CVE-2026-119656CoreShop through 1.5.5 SQL Injection via order Parameter in Agent/GetGoodsPageListFix availableCoreUnion CoreShop
1 min read - 8.5CVE-2026-104066Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Buffer Overflow via PICT 4-bit Pixel UnpackingFix availableScribus Scribus
1 min read - 8.5CVE-2026-104062Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Buffer Overflow via PICT Pixmap LoaderFix availableScribus Scribus
1 min read - 7.5CVE-2026-119283joserfc: Unbounded JWE General JSON `recipients` Array Leads to CPU Exhaustion (DoS) via Repeated RSA Private-Key DecryptionFix availablejoserfc
2 min read - 7.1CVE-2026-86715Clear Text Storage of Password in Crypttech's Vatos DLPFix availableCrypttech Crypto and Informatics Technologies Industry and… Vatos DLP
1 min read - 8.8CVE-2026-91913Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command InjectRCEVerify fixDell OpenManage Enterprise
1 min read - 9.8CVE-2026-119597OpenDeepWiki through 2.0.6 Hard-coded JWT Signing Key Admin Token ForgeryFix availableAIDotNet OpenDeepWiki
1 min read - 7.8CVE-2026-119578MONAI 1.6.0 before 1.6.1 Code Execution via Auto3DSeg algo_from_json()RCEFix availableProject-MONAI MONAI
1 min read - 8.7CVE-2026-119572Traefik 3.7.0-ea.1 before 3.7.15 mTLS Bypass via Ingress NGINX ProviderCloudFix availabletraefik traefik
1 min read - 7.8CVE-2026-119528Gimp: gimp: stack buffer overflow in psd image resource header loaderRCEVerify fixRed Hat Red Hat Enterprise Linux 10
1 min read - 7.6CVE-2026-112347Kirki WordPress Plugin < 6.4.1 Broken Object-Level Access Control via Page APIFix availableThemeum Kirki
1 min read - 8.0CVE-2026-91917Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Input Validation vulnerability.Verify fixDell OpenManage Enterprise
1 min read - 7.8CVE-2026-119586SQLite CLI through 3.54.1 Command Injection via .recover OutputVerify fixSqlite Sqlite
1 min read - 7.5CVE-2026-119426phpMyAdmin through 5.2.3 CSRF Token Bypass via Non-AJAX POST to /sqlFix availablePhpmyadmin Phpmyadmin
1 min read - 8.1CVE-2026-119419CakePHP through 5.4.3 SQL Injection via StringExpression and IdentifierExpression CollationFix availablecakephp cakephp
1 min read - 8.8CVE-2026-119420Lago through 1.55.0 Authentication Bypass via acceptInvite GraphQL MutationFix availablegetlago lago
1 min read - 7.1CVE-2026-119407Element Web and Element Desktop before 1.12.32 Forced Logout via Guest Credential URL ParametersFix availableelement-hq element-web
1 min read - 8.8CVE-2026-119408n8n before 2.42.6, 2.43.3 and 3.0.1 Code Execution Outside Task Runner Isolation via Deprecated Function NodesRCEFix availablen8n-io n8n
1 min read - 7.8CVE-2026-119373SQLite before 3.54.0 FTS5 Heap Buffer Overflow via fts5MergeRowidLists()Fix availableSQLite SQLite
1 min read - 7.8CVE-2026-119379SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in sqlite3changeset_apply() that allows attackers Fix availableSqlite Sqlite
1 min read - 7.8CVE-2026-119374SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5DoSecureDelete() that allows attackers to write past the leaf page buffer Fix availableSqlite Sqlite
1 min read - 8.8CVE-2026-111505Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command InjectRCEVerify fixDell OpenManage Enterprise
1 min read - 7.2CVE-2026-101210Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command InjectRCEVerify fixDell OpenManage Enterprise
1 min read - 7.8CVE-2026-101213Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Privilege Management vulnerability.LPEVerify fixDell OpenManage Enterprise
1 min read - 7.2CVE-2026-101214Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command InjectRCEVerify fixDell OpenManage Enterprise
1 min read - 7.2CVE-2026-111504Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vuVerify fixDell OpenManage Enterprise
1 min read - 8.6CVE-2026-110972Use of Client-Side Authentication in PłatnikVerify fixZakład Ubezpieczeń Społecznych Płatnik
1 min read - 7.7CVE-2026-110971Weak password encoding in PłatnikVerify fixZakład Ubezpieczeń Społecznych Płatnik
1 min read - 9.8CVE-2026-64618Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") vulnerability exists in Apache Fineract (through version 1.15.0).Fix availableApache Fineract
1 min read - 8.8CVE-2026-65874This issue affects Apache Fineract versions up to and including 1.15.0.Fix availableApache Fineract
1 min read - 8.8CVE-2026-59387Broken access control restriction in Cloud Controller APIFix availableCloud Foundry CAPI (Cloud Controller API)
1 min read - 7.5CVE-2026-103963Glib-networking: unbounded tls 1.3 session ticket queue growth in glib-networking allows remote denial of serviceVerify fixRed Hat Red Hat Enterprise Linux 10
1 min read - 9.8CVE-2026-107249Block AJAX - Highly critical - PHP object injection - SA-CONTRIB-2026-192Fix availableDrupal Block AJAX
1 min read - 8.8CVE-2026-76026Memory corruption in Autofill in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a craFix availableGoogle Chrome
1 min read - 8.8CVE-2026-76028Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafFix availableGoogle Chrome
1 min read - 8.8CVE-2026-76029Memory corruption in Network in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandboFix availableGoogle Chrome
1 min read - 8.8CVE-2026-76030Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sanFix availableGoogle Chrome
1 min read - 8.8CVE-2026-76031Use after free in Input in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HFix availableGoogle Chrome
1 min read - 8.8CVE-2026-119271Use after free in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTFix availableGoogle Chrome
1 min read - 8.8CVE-2026-76025Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafFix availableGoogle Chrome
1 min read - 9.6CVE-2026-119263Memory corruption in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code outsideFix availableGoogle Chrome
1 min read - 8.8CVE-2026-119264Memory corruption in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox vFix availableGoogle Chrome
1 min read - 8.8CVE-2026-119265Memory corruption in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox Fix availableGoogle Chrome
1 min read - 8.8CVE-2026-119266Use after free in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox viaFix availableGoogle Chrome
1 min read - 8.8CVE-2026-119267Memory corruption in DOM in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox viFix availableGoogle Chrome
1 min read - 8.8CVE-2026-119268Integer overflow in Editing in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandboxFix availableGoogle Chrome
1 min read - 8.8CVE-2026-119269Use after free in Blink in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HFix availableGoogle Chrome
1 min read - 8.8CVE-2026-119270Improper input validation in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code insiFix availableGoogle Chrome
1 min read - 8.8CVE-2026-119260Use after free in Frames in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted Fix availableGoogle Chrome
1 min read - 9.6CVE-2026-119261Improper input validation in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code outside the Fix availableGoogle Chrome
1 min read - 8.8CVE-2026-119262Improper input validation in V8 in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sanFix availableGoogle Chrome
1 min read - 7.0CVE-2026-111357Ivanti Connect Secure Missing Authentication for Critical Function VulnerabilityExploitedFix availableIvanti Connect Secure
1 min read - 7.5CVE-2026-117183A path traversal vulnerability in the FeaturedImage component of astro-notion-blog 0.13.0 allows attackers to escape the intended directory, as well aVerify fixUnknown product
1 min read - 7.5CVE-2026-117184An issue in the GraphQL endpoint of traggo server v0.8.3 allows attackers to cause a Denial of Service (DoS) via a crafted POST request to the GraphQLVerify fixUnknown product
1 min read - 8.3CVE-2026-61654Lightdash: Unauthenticated dbt Cloud webhook with path injection leaks API keyVerify fixlightdash lightdash
1 min read - 8.9CVE-2026-61719WeGIA: Stored Cross-Site Scripting (XSS) in "historico_prontuarios.php" via "textoProntuario" FieldVerify fixLabRedesCefetRJ WeGIA
1 min read - 7.3CVE-2026-119282Nx: OS command injection via nx.json plugin options in @nx/maven and @nx/gradleVerify fixnrwl nx
1 min read - 7.1CVE-2026-119206pypdf: Possible long runtimes when retrieving page labelsFix availablepy-pdf pypdf
1 min read - 7.8CVE-2026-51831An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a local attacker to execute arbiVerify fixUnknown product
1 min read - 7.5CVE-2026-119191Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript.Fix availableDigitalbazaar Forge
1 min read - 7.8CVE-2026-119250A malicious actor with local access and low privileges could exploit an External Control of File Name or Path vulnerability found in WiFiman Desktop tFix availableUbiquiti Inc WiFiman Desktop
1 min read - 7.5CVE-2026-119249A malicious actor with access to the network could exploit a Binding to an Unrestricted IP Address vulnerability found in WiFiman Desktop to obtain inFix availableUbiquiti Inc WiFiman Desktop
1 min read - 8.1CVE-2026-51903SuperAGI v0.0.14 contains an improper access control vulnerability in get_agent_by_latest_execution in superagi/controllers/agent_execution.py.Verify fixUnknown product
1 min read - 9.8CVE-2026-107057An issue in AndBible versionCode 1111 allows attackers to execute arbitrary code via uploading a crafted module zip.Verify fixUnknown product
1 min read - 9.1CVE-2026-107053Insecure permissions in foobnix Librera PDF Reader versionCode 7222 allows unauthorized attackers to arbitrarily write and truncate files in a shared Verify fixUnknown product
1 min read - 9.1CVE-2026-107043Insecure permissions in Code Catcher versionCode 131 allow unauthorized attackers to arbitrarily manipulate the app's SMS-code-capture mechanism.Verify fixUnknown product
1 min read - 7.5CVE-2026-115907zip: legacy Shrink/Reduce/Implode decoder: denial of service from attacker-controlled ZIP64 uncompressed sizeFix availablezip
2 min read - 7.4CVE-2026-115908zip: Arbitrary file write outside the extraction directory, because ZipArchive::extract validates symlink targets lexically.Fix availablezip
2 min read - 7.5CVE-2026-115909zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During ExtractionFix availablezip
2 min read - 7.3CVE-2026-62290cert-manager: Direct ACME Challenge resources can bypass Issuer DNS01 solver policy and use ClusterIssuer DNS credentialsFix availablegithub.com/cert-manager/cert-manager
2 min read - 7.3CVE-2026-9086Keycloak vulnerable to cross-site scripting (xss) via case-insensitive uri validation bypassRCEFix availableorg.keycloak:keycloak-services
1 min read - 8.1CVE-2026-9800Keycloak vulnerable to authorization bypass via incorrect uri comparisonFix availableorg.keycloak:keycloak-services
1 min read - 7.5CVE-2026-62264@sylphx/pdf-reader-mcp: HTTP transport accepts unauthenticated requests despite a configured MCP_API_KEYFix available@sylphx/pdf-reader-mcp
2 min read - 7.3CVE-2026-61438PraisonAI vulnerable to Remote Code Execution via Broken AST SandboxFix availablepraisonai
2 min read - 8.8CVE-2026-96203Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.Fix availableMicrosoft Edge
1 min read - 8.8CVE-2026-96192Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a network.Fix availableMicrosoft Edge
1 min read - 8.8CVE-2026-96199Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.Fix availableMicrosoft Edge Chromium
1 min read - 7.4CVE-2026-96187Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose informatiFix availableMicrosoft Edge Chromium
1 min read - 8.8CVE-2026-96196Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.Fix availableMicrosoft Edge Chromium
1 min read - 8.8CVE-2026-96198Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.Fix availableMicrosoft Edge Chromium
1 min read - 8.8CVE-2026-85890Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.Fix availableMicrosoft Edge Chromium
1 min read - 8.8CVE-2026-85897Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.Fix availableMicrosoft Edge Chromium
1 min read - 8.8CVE-2026-119144Frappe Framework before 15.111.0 and 16.x before 16.21.0 Server-Side Template Injection via Message FieldsFix availablefrappe frappe
1 min read - 8.1CVE-2026-119127ZITADEL 4.0.0 before 4.19.5 Account Takeover via Login V2 Host Header InjectionFix availablezitadel zitadel
1 min read - 7.4CVE-2026-119128ZITADEL 4.0.0 before 4.19.5 Login V2 Account Takeover via Forgeable verificationCheck CookieFix availablezitadel zitadel
1 min read - 7.5CVE-2026-119119Crawl4AI before 0.9.5 Denial of Service via Unbounded CrawlerRunConfig Delay FieldsFix availableunclecode crawl4ai
1 min read - 7.5CVE-2026-119120Crawl4AI 0.9.0 before 0.9.5 Untrusted Model Loading via CosineStrategy model_nameRCEFix availableunclecode crawl4ai
1 min read - 7.5CVE-2026-110245IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to obtain sensitive information due to improper authentication.Fix availableLangflow Langflow
1 min read - 9.9CVE-2026-107327IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to missing authorization.Fix availableLangflow Langflow
1 min read - 9.9CVE-2026-107328IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of code in RCEFix availableLangflow Langflow
1 min read - 9.9CVE-2026-107329IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generationRCEFix availableLangflow Langflow
1 min read - 7.5CVE-2026-107025Insecure permissions in WikiAndPad alpha/beta v0.2alpha03 (versionCode 200300) allows unauthorized attackers to export the application's data.Verify fixUnknown product
1 min read - 7.5CVE-2026-107030Insecure permissions in craftxbox YubiClip XOR fork v1.0.1 (versionCode 10003) allows unauthorized attackers to trigger the OTP-clipboard (One-Time PaVerify fixUnknown product
1 min read - 8.1CVE-2026-104317IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute arbitrary code on the system due to RCEFix availableLangflow Langflow
1 min read - 8.5CVE-2026-103092IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper access control.Fix availableLangflow Langflow
1 min read - 7.2CVE-2026-118079WordPress FV Flowplayer Video Player plugin <= 7.5.56.7212 - PHP Object Injection vulnerabilityRCEVerify fixFolioVision FV Flowplayer Video Player
1 min read - 8.8CVE-2026-88077Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityFix availableMicrosoft Microsoft Edge (Chromium-based)
1 min read - 8.1CVE-2026-85899Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityFix availableMicrosoft Microsoft Edge (Chromium-based)
1 min read - 7.8CVE-2026-114148ASP.NET Core Elevation of Privilege VulnerabilityFix availableMicrosoft .NET 10.0 installed on Linux
1 min read - 8.8CVE-2026-107019Insecure permissions in the feiertage.ImportActivity component of Arbeitszeiterfassung2 versionCode 159 allows unauthorized attackers to create forgedVerify fixUnknown product
1 min read - 8.1CVE-2026-107018Insecure permissions in Ghost Commander File Manager versionCode 479 allows unauthorized attackers to arbitrarily read and write files inside the commVerify fixUnknown product
1 min read - 7.5CVE-2026-107016Insecure permissions in Fossify v1.3.0 allows unauthorized attackers to access and read another user's stored contacts.Verify fixUnknown product
1 min read - 9.1CVE-2026-107021Insecure permissions in the CardProvider content provider component of helloworld1 AnyMemo versionCode 20260730 allows unauthorized attackers to arbitVerify fixUnknown product
1 min read - 9.8CVE-2026-79589The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker to gain unauthenticated root Verify fixUnknown product
1 min read - 7.6CVE-2026-119049FreeMail before 5.3.2 Authorization Bypass via /api/create Mailbox ClaimingFix availableidinging FreeMail
1 min read - 8.1CVE-2026-119050Agno through 3.1.11 Code Execution via PandasTools Unsafe ReflectionVerify fixagno-agi agno
1 min read - 7.5CVE-2019-25781Python-Markdown 3.0 through 3.11.2 Denial of Service via Link Bracket ParsingVerify fixPython-Markdown Markdown
1 min read - 8.8CVE-2026-49142OpenEMR Before 8.5.0 SQL Injection via form_icd_codes[]Fix availableopenemr openemr
1 min read - 8.2CVE-2026-119051flat through 6.0.1 Denial of Service via unflatten() Numeric Array Index KeysVerify fixhughsk flat
1 min read - 7.5CVE-2026-119025open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on WindowsRCEFix availablesindresorhus open
1 min read - 7.4CVE-2026-114488Wildfly: wildfly-iiop: wildfly-ejb3: wildfly: authentication bypass on iiop ejb invocations as csiv2 ittprincipalname accepted without transport bindingVerify fixRed Hat Red Hat Fuse 7
1 min read - 8.6CVE-2026-76418Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference VulnerabilityExploitedVerify fixCisco Secure Firewall ASA Software and Cisco Secure FTD Software
1 min read - 10.0CVE-2026-97229GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound VulnerabilityExploitedFix availableGitLab Community Edition and Enterprise Edition
1 min read - 7.8CVE-2026-51832An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a local attacker to execute arbiVerify fixUnknown product
1 min read - 7.5CVE-2026-107041Insecure permissions in the FeatureActionActivity component of Oasis Feng Island versionCode 51801 allows unauthorized attackers to arbitrarily force Verify fixUnknown product
1 min read - 9.1CVE-2026-51863DB-GPT v0.7.5 and 0.8.0 contains directory traversal in use_example_file (packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/examples_api.py:129).Verify fixUnknown product
1 min read - 9.1CVE-2026-107014Insecure permissions in Bander Notepad (bander.notepad) versionCode 12 allow unauthorized attackers to write and read notes in another user's' note daVerify fixUnknown product
1 min read - 7.5CVE-2026-107051Insecure permissions in klassm AndFHEM v2.4.1 (versionCode 241, the verified build) allows unauthorized attackers to arbitrarily manipulate another usVerify fixUnknown product
1 min read - 7.5CVE-2026-107024Insecure permissions in Share 2 Archive Today versionCode 61 allows unauthorized attackers to arbitrarily overwrite another user's clipboard content vVerify fixUnknown product
1 min read - 9.1CVE-2026-107029Insecure permissions in rubenalfon Pile v1.1.3 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and oveVerify fixUnknown product
1 min read - 7.5CVE-2026-107059An issue in Nextcloud versionCode 30390190 allows attackers to force victim users to logout of their accounts and switch to an attacker controlled proVerify fixUnknown product
1 min read - 9.8CVE-2026-107048An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101 allows attackers to execute arbitrary code via supplying Verify fixUnknown product
1 min read - 9.1CVE-2026-107038Insecure permissions in Yet Another UPnP Controller versionCode 50200 allows unauthorized attackers to invoke an exported component, leading to arbitrVerify fixUnknown product
1 min read - 9.1CVE-2026-107027Insecure permissions in lz233 Tarnhelm v1.8.2 (versionCode 20250630) allows unauthorized attackers to invoke an exported component, leading to arbitraVerify fixUnknown product
1 min read - 7.8CVE-2026-116576systeminformation vulnerable to Windows command injection in services() through Unicode quotation marksFix availablesysteminformation
2 min read - 7.3CVE-2026-61571AVideo-Encoder: missing authentication on control and status endpointsVerify fixWWBN AVideo-Encoder
1 min read - 10.0CVE-2026-61567AVideo-Encoder: unauthenticated command execution through streamer login trustRCEVerify fixWWBN AVideo-Encoder
1 min read - 7.8CVE-2026-118753FreeImage (danoli3 fork) before 3.19.25 Heap Buffer Overflow via GIF_PLAYBACK CompositingFix availabledanoli3 FreeImage
1 min read - 7.0CVE-2026-118692CherryTree through 1.7.2 OS Command Injection via Custom Web Link ActionVerify fixgiuspen cherrytree
1 min read - 7.8CVE-2026-118752FreeImage before 3.19.22 Heap Buffer Overflow via IFF/LBM PBM RLE DecoderFix availabledanoli3 FreeImage
1 min read - 7.5CVE-2026-118682ClashMi through 1.0.32.1801 Disabled TLS Certificate Validation Enables Update MITMVerify fixKaringX clashmi
1 min read - 7.5CVE-2026-118689OvenMediaEngine through 0.21.0 OVT Relay DoS via Oversized payload_lengthFix availableOvenMediaLabs OvenMediaEngine
1 min read - 8.4CVE-2026-118669OAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different clientFix availableoauthlib
1 min read - 7.2CVE-2026-54453OpenCATS: Authenticated Remote Code Execution via SettingsUI (manageProfessional)Verify fixopencats OpenCATS
1 min read - 10.0CVE-2026-61564AVideo-Encoder: unauthenticated installer PHP code injectionRCEVerify fixWWBN AVideo-Encoder
1 min read - 7.5CVE-2026-117601Electrum: Malicious server can replace a just-broadcast tx and try to trick user into RBF-ing itFix availableelectrum
2 min read - 7.5CVE-2026-116581Seroval: fromJSON deserializer trusts node-supplied array length and sequence doneAt (unauthenticated event-loop DoS)Fix availableseroval
1 min read - 7.5CVE-2026-116584Seroval `fromJSON`/`fromCrossJSON` denial of service via unvalidated array node lengthFix availableseroval
1 min read - 7.3CVE-2026-116580Seroval: Deserialization invokes attacker-chosen callables: AsyncIteratorFactoryInstance calls source.on(listener) without type checkRCEFix availableseroval
2 min read - 8.2CVE-2026-118665GraphQL Tools: Per-request connection parameters persist into later users' WebSocket authenticationsVerify fixardatan graphql-tools
1 min read - 9.9CVE-2026-115893Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instructionFix availablewasmtime
1 min read - 7.5CVE-2026-115887graphql-scalars PhoneNumber scalar is vulnerable to regular expression denial of serviceFix availablegraphql-scalars
2 min read - 7.5CVE-2026-118803Bricks Theme Unauthenticated Dynamic Data Tag Injection via query_resultFix availableBricks Bricks Theme
1 min read - 7.5CVE-2026-116795RE2JS: Quadratic-time denial of service in re2js lookbehind matchingFix availablere2js
2 min read - 7.7CVE-2026-13451Kserve: kserve: server-side request forgery via malicious storageuriCloudVerify fixRed Hat Red Hat OpenShift AI (RHOAI)
1 min read - 9.1CVE-2026-117574Ai-gateway-payload-processing: ai-gateway-payload-processing: tenant/credential selection from client-controlled url path with no in-process authorizationCloudVerify fixRed Hat Red Hat OpenShift AI (RHOAI)
1 min read - 8.3CVE-2025-14260Server Side Request Forgery in Multiple WSO2 Products Allows Access to Internal and External ResourcesFix availableWSO2 WSO2 API Manager
1 min read - 8.6CVE-2026-61542Gearboy advisory / Gearsystem body: Unauthenticated network exposure of MCP HTTP toolsVerify fixdrhelius Gearboy
1 min read - 7.5CVE-2026-118650Echo: middleware.Static: `%2F`-encoded path bypasses route/group middleware guarding a statically-served pathVerify fixlabstack echo
1 min read - 7.5CVE-2026-118686EspoCRM before 9.3.11 and 10.0.8 Unauthenticated Denial of Service via Password-Redaction RegexFix availableespocrm espocrm
1 min read - 7.9CVE-2026-118688Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 Sandbox Escape via Symlink RenameFix availablebytecodealliance wasmtime
1 min read - 7.5CVE-2026-118679n8n before 1.123.83, 2.41.4, and 2.42.1 Slack Token Exfiltration via Slack TriggerFix availablen8n-io n8n
1 min read - 7.3CVE-2026-118648n8n before 1.123.85, 2.43.5, and 2.44.1 Stored XSS via Webhook Responses Missing Sandbox PolicyFix availablen8n-io n8n
1 min read - 7.1CVE-2026-118675n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Guard Bypass via Execute Sub-workflowFix availablen8n-io n8n
1 min read - 7.1CVE-2026-118676n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check BypassFix availablen8n-io n8n
1 min read - 7.1CVE-2026-118642n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass via Inline Sub-WorkflowsFix availablen8n-io n8n
1 min read - 8.2CVE-2026-118643n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Exposure via Node Execution Error DataCloudFix availablen8n-io n8n
1 min read - 7.7CVE-2026-118644n8n before 2.41.5 and 2.42.2 Credential Theft via Error-Workflow Context InheritanceFix availablen8n-io n8n
1 min read - 8.2CVE-2026-118647n8n before 1.123.85, 2.43.5, and 2.44.1 SeaTable Trigger API Token Exposure via Execution DataFix availablen8n-io n8n
1 min read - 9.1CVE-2026-118264Echo: Rejected WebSocket upgrades can bypass Echo route-level access controlsVerify fixlabstack echo
1 min read - 8.2CVE-2026-118260Echo: BodyDump captures request and response bodies without size limits in v4Verify fixlabstack echo
1 min read - 8.2CVE-2026-118262Echo: WebSocket proxy can retain connections and handlers after client disconnectVerify fixlabstack echo
1 min read - 8.4CVE-2026-118255Highcharts Grid: javascript: URL in credits.href runs script on clickVerify fixhighcharts highcharts
1 min read - 8.1CVE-2026-84725Openjdk-orb: incomplete fix for cve-2026-15560,unauthed class loading via iiop in eapVerify fixRed Hat Red Hat JBoss Enterprise Application Platform 7
1 min read - 7.2CVE-2026-118250Highcharts: dotted series.keys paths write to Object.prototypeVerify fixhighcharts highcharts
1 min read - 8.4CVE-2026-118246Highcharts Core: `breadcrumbs.style` keys become SVG event-handler attributesVerify fixhighcharts highcharts
1 min read - 8.3CVE-2026-116794russh: Agent server never calls `Agent::confirm`, so keys added with the confirm constraint (`ssh-add -c`) sign without confirmationFix availablerussh
1 min read - 8.5CVE-2026-118242Highcharts Grid: custom icon definition objects written with raw `setAttribute` on `<path>`Verify fixhighcharts highcharts
1 min read - 8.6CVE-2026-118254Highcharts Grid: pagination language options are parsed as HTMLVerify fixhighcharts highcharts
1 min read - 8.4CVE-2026-118251Highcharts: javascript: URL in credits.href runs script on clickVerify fixhighcharts highcharts
1 min read - 8.8CVE-2026-117624Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not consistently enforce the restriction on deserializing objects of types marked as storing tRCEFix availableJenkins Jenkins
1 min read - 8.1CVE-2026-117619Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows requests authenticated using HTTP Basic authentication, including with an API token, to obtaFix availableJenkins Jenkins
1 min read - 8.8CVE-2026-117620Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers with Overall/Read permission to trigger warnings in the "Manage Old Data" feature Fix availableJenkins Jenkins
1 min read - 8.1CVE-2026-117617Jenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic links in the path of an extracted file only before creating its parent directorFix availableJenkins Jenkins
1 min read - 8.1CVE-2026-117618In Jenkins 2.587 and earlier, LTS 2.580.1 and earlier, the HTTP endpoint for creating the first user account does not check whether the setup wizard hFix availableJenkins Jenkins
1 min read - 8.8CVE-2026-117616Jenkins 2.587 and earlier, LTS 2.580.1 and earlier provides an HTTP endpoint that loads agents by name without validating the name, allowing attackersRCEFix availableJenkins Jenkins
1 min read - 7.2CVE-2026-117614Jenkins 2.587 and earlier, LTS 2.580.1 and earlier converts the launch commands in older agent configurations into launchers provided by the Command AFix availableJenkins Jenkins
1 min read - 8.8CVE-2026-117612Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not apply its deserialization filter to classes referenced by the `resolves-to` attribute duriRCEFix availableJenkins Jenkins
1 min read - 8.8CVE-2026-106079Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configurationRCEFix availableJuniper Networks Session Smart Router
1 min read - 7.1CVE-2026-103411Session Smart Router: A malicious DHCP server causes information disclosure and a service crash during DHCP option parsingFix availableJuniper Networks Session Smart Router
1 min read - 9.8CVE-2026-103409Session Smart Router: An attacker obtains administrative privileges when an unauthenticated internal endpoint is accessedFix availableJuniper Networks Session Smart Router
1 min read - 8.8CVE-2026-103407Session Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI managementFix availableJuniper Networks Session Smart Router
1 min read - 8.8CVE-2026-103408Session Smart Router: An attacker-controlled input causes remote code execution when parsing DHCP optionsRCEFix availableJuniper Networks Session Smart Router
1 min read - 9.8CVE-2026-103406Session Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management.RCEFix availableJuniper Networks Session Smart Conductor
1 min read - 8.8CVE-2026-103401Session Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as rootFix availableJuniper Networks Session Smart Router
1 min read - 8.8CVE-2026-103402Session Smart Router and Session Smart Conductor: Lack of integrity verification in cache files causes arbitrary code execution and privilege escalationFix availableJuniper Networks Session Smart Router
1 min read - 8.8CVE-2026-103403Session Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rulesRCEFix availableJuniper Networks Session Smart Router
1 min read - 7.1CVE-2026-67187Ninja Forms WordPress Plugin < 3.15.4 Server-Side Validation Bypass via List FieldsFix availableSaturday Drive Ninja Forms
1 min read - 8.3CVE-2026-59979YosemiteCrew: Missing organization authorization on service and PMS library/template routesVerify fixYosemiteCrew Yosemite-Crew
2 min read - 8.8CVE-2026-56828Shopper: read-only team permissions allow administrator creation and permission escalationVerify fixshopperlabs shopper
1 min read - 9.9CVE-2026-44179XWiki Pro Macros: excerpt-include title and content injection executes codeRCEVerify fixxwikisas xwiki-pro-macros
1 min read - 7.8CVE-2026-112357GFI KerioConnect KOFF < 10.0.9p2 Privilege EscalationLPEFix availableGFI USA, LLC GFI KerioConnect
1 min read - 7.5CVE-2026-106971An integer overflow in the MessagePack\BufferUnpacker component of rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a denial of servVerify fixUnknown product
1 min read - 7.1CVE-2026-52729Xibo: IDOR (Broken Object-Level Authorization) on PUT/DELETE /action/{id} Allows Arbitrary Layout Action Modification and DeletionVerify fixxibosignage xibo-cms
1 min read - 8.8CVE-2026-59177ESPHome Device Builder allows unauthenticated dashboard access via the HA add-on ingress site bound to all interfacesVerify fixesphome device-builder
1 min read - 7.8CVE-2026-59176Functype: MCP set_functype_version Package Alias RCE via Unsanitized pnpm install + Dynamic ImportFix availablejordanburke functype
1 min read - 9.6CVE-2026-115904Topluyo Desktop for Linux has an OS Command Injection issueRCEVerify fixtopluyo App
1 min read - 8.8CVE-2026-99185firewire: core: fix race condition in split transaction handlingVerify fixLinux Linux
1 min read - 7.8CVE-2026-99177KVM: SEV: Fix page dirtying in sev_gmem_post_populate()Verify fixLinux Linux
1 min read - 7.8CVE-2026-99180unicode: free the map after a grace periodVerify fixLinux Linux
2 min read - 7.8CVE-2026-99167net/sched: fix use-after-free in __tcf_action_put()Verify fixLinux Linux
1 min read - 8.8CVE-2026-99170namespace: a mount that copy_tree() leaves out can't take over a lockVerify fixLinux Linux
2 min read - 7.8CVE-2026-99173eventfs: Free the eventfs_inode after an rcu grace period tooFix availableLinux Linux
2 min read - 7.8CVE-2026-99163tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fieldsFix availableLinux Linux
1 min read - 7.8CVE-2026-99164spi: imx: fix slab corruption from undersized DMA bounce buffersVerify fixLinux Linux
2 min read - 7.5CVE-2026-99152scsi: libiscsi: Validate the task named by a management responseVerify fixLinux Linux
2 min read - 9.8CVE-2026-99153scsi: libiscsi: Validate the ITT reflected in a Reject PDUVerify fixLinux Linux
2 min read - 9.8CVE-2026-99154scsi: libiscsi: Reject a negative task index from parse_pdu_ittVerify fixLinux Linux
1 min read - 7.8CVE-2026-99156scsi: st: Fix use-after-free race between st_remove() and st_open()Verify fixLinux Linux
2 min read - 7.1CVE-2026-99142tracing: Check operator stack capacity before pushingVerify fixLinux Linux
1 min read - 7.8CVE-2026-99143tracing: Keep the predicate limit separate from program capacityVerify fixLinux Linux
1 min read - 7.0CVE-2026-99148drm/amdgpu: keep the eviction fence until the last handle is closedVerify fixLinux Linux
2 min read - 7.0CVE-2026-99136dm-crypt: fix a tiny race condition in crypt_dec_pendingFix availableLinux Linux
1 min read - 8.2CVE-2026-99131xfs: fix capability check in xfsVerify fixLinux Linux
1 min read - 7.8CVE-2026-99116net: psp: do not inherit the Rx association on cloneVerify fixLinux Linux
2 min read - 7.8CVE-2026-99117net: bridge: mcast: don't truncate the port group walk on teardownVerify fixLinux Linux
2 min read - 7.3CVE-2026-99122vsock/vmci: validate packet source for connected socketsVerify fixLinux Linux
1 min read - 7.1CVE-2026-99123vsock/virtio: validate packet source for connected socketsVerify fixLinux Linux
2 min read - 7.8CVE-2026-99107ntfs: fix incorrect MFT record pointer passed to ntfs_attr_record_resizeVerify fixLinux Linux
1 min read - 7.8CVE-2026-99109smb: client: reject SetEA requests that do not fit the request bufferVerify fixLinux Linux
2 min read - 7.0CVE-2026-99110smb: client: fix heap overflow in cifs_do_set_acl()Verify fixLinux Linux
1 min read - 7.1CVE-2026-99112net/sched: cls_flower: validate mask pointer after nla_next()Fix availableLinux Linux
2 min read - 8.4CVE-2026-99216Drivers: hv: Don't reset VMBus connection state on error/exit pathsFix availableLinux Linux
1 min read - 7.8CVE-2026-99213vsock: treat TCP_CLOSING as once-establishedVerify fixLinux Linux
2 min read - 7.0CVE-2026-99212net/rds: don't let the rdma_cm destroy an id RDS still owns on route failureVerify fixLinux Linux
1 min read - 7.8CVE-2026-99203pipe: preserve existing fasync readers on writer setup failureVerify fixLinux Linux
1 min read - 9.6CVE-2026-103799Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTVerify fixDell PowerProtect Data Domain Management Center
1 min read - 9.1CVE-2026-90717Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTVerify fixDell PowerProtect Data Domain Management Center
1 min read - 8.1CVE-2026-118375llama.cpp b8841 before b11865 Stack-based Buffer Overflow via ggml-rpc RDMA rdma_recv()Fix availableggml-org llama.cpp
1 min read - 7.5CVE-2026-118377mews/pos through 2.0.0 Missing Hash Verification in 3D Pay and 3D Host CallbacksFix availablemewebstudio pos
1 min read - 7.8CVE-2026-118378Tabularis before 0.28.0 SQL Injection via MCP describe_table table_nameFix availableTabularisDB tabularis
1 min read - 7.2CVE-2026-117607Xerte Online Toolkits through 3.15.5 RCE via Language Pack ImportRCEVerify fixthexerteproject xerteonlinetoolkits
1 min read - 8.8CVE-2014-125138C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, Cart Engine through 3.0.0 Unrestricted File Upload via Image FieldsVerify fixC97net qEngine CMS
1 min read - 8.8CVE-2015-20129CrushFTP before 7.3.0 Cross-Site Request Forgery via /WebInterface/function/Fix availableCrushFTP CrushFTP
1 min read - 7.2CVE-2013-20007Linksys WAG200G through 1.01.06 OS Command Injection via timer_interval in setup.cgiRCEVerify fixLinksys WAG200G
1 min read - 8.2CVE-2026-118374LibreSSL ocspcheck through 4.4.0 Memory Exhaustion via Unbounded OCSP HTTP ResponseFix availableOpenBSD LibreSSL
1 min read - 8.2CVE-2026-118370libexpat through 2.9.0 Integer Overflow in storeAtts via attIndex and nPrefixesFix availablelibexpat libexpat
1 min read - 7.0CVE-2013-20008Linksys WAG200G through 1.01.06 Admin Password Change Without Current PasswordVerify fixLinksys WAG200G
1 min read - 2.7CVE-2026-41709Broadcom VMWare ESX Insufficient Logging VulnerabilityExploitedFix availableBroadcom VMware ESX
1 min read - 7.8CVE-2026-46300Linux Kernel Missing Initialization of a Variable VulnerabilityExploitedVerify fixLinux Kernel
1 min read - 7.2CVE-2026-58257GRR vulnerable to Arbitrary File Read and DeletionVerify fixJeromeDevome GRR
1 min read - 9.3CVE-2026-118337Improper access control in Forms in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin policy via a crafted HTML pageFix availableGoogle Chrome
1 min read - 9.3CVE-2026-118333Missing authorization in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin policy via a crafted HTML page.Fix availableGoogle Chrome
1 min read - 8.8CVE-2026-118335Improper input validation in Metrics in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary codeFix availableGoogle Chrome
1 min read - 9.1CVE-2026-58256GRR vulnerable to Remote Code Execution Via PHP Code InjectionRCEVerify fixJeromeDevome GRR
1 min read - 8.2CVE-2026-57191Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsingVerify fixasterisk asterisk
1 min read - 7.5CVE-2026-62765Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityFix availableMicrosoft Microsoft Edge (Chromium-based)
1 min read - 8.8CVE-2026-85898Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over Fix availableMicrosoft Edge
1 min read - 8.8CVE-2026-83831Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityFix availableMicrosoft Microsoft Edge (Chromium-based)
1 min read - 7.5CVE-2026-57200Asterisk: ARI REST-over-WebSocket read-only bypass allows arbitrary module path load and conditional RCERCEVerify fixasterisk asterisk
1 min read - 7.5CVE-2026-57195Asterisk: NULL Pointer Dereference in HTTP AMI Digest AuthenticationVerify fixasterisk asterisk
1 min read - 8.7CVE-2026-116693dd-trace: ReDOS in URL query string obfuscationVerify fixDataDog dd-trace-js
1 min read - 7.5CVE-2026-112355MembershipWorks WordPress Plugin < 6.17 Information Disclosure via WordPress REST APIFix availableMembershipWorks MembershipWorks
1 min read - 7.5CVE-2026-112350Sunhillo SureLine Path Traversal via radarUpdater.cgiFix availableSunhillo Corporation SureLine
1 min read - 8.8CVE-2026-112351Sunhillo SureLine OS Command Injection via networkDiag.cgiRCEFix availableSunhillo Corporation SureLine
1 min read - 9.1CVE-2026-112352Sunhillo SureLine before 9.1.5 contains an authentication bypass vulnerability that allows an unauthenticated remote attacker to impersonate any user Fix availableSunhillo Sureline
1 min read - 9.8CVE-2026-116692MLflow: Remote code execution on unauthenticated MLflow servers via third-party scorer deserialization importing caller-placed artifact modulesRCEVerify fixmlflow mlflow
1 min read - 8.1CVE-2026-116688CKEditor: Cross-site scripting (XSS) in the engine packageVerify fixckeditor ckeditor5
1 min read - 7.1CVE-2026-116683CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive valuesVerify fixctfer-io terraform-provider-ctfd
1 min read - 7.3CVE-2026-117516oretnom23 php-travel-agency-system Contact Form contact_insert.php sql injectionVerify fixoretnom23 php-travel-agency-system
1 min read - 7.1CVE-2026-57188Asterisk: Stack buffer overflow in res_xmpp XMPP namespace prefix handlingVerify fixasterisk asterisk
1 min read - 8.6CVE-2026-116682FileBrowser Quantum: Symlink following escapes user scope allowing arbitrary file read outside the served directoryVerify fixgtsteffaniak filebrowser
1 min read - 7.7CVE-2026-57197Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex)Verify fixasterisk asterisk
1 min read - 7.3CVE-2026-117514oretnom23 php-travel-agency-system Admin Record Pages customer_detail.php sql injectionVerify fixoretnom23 php-travel-agency-system
1 min read - 7.3CVE-2026-117513oretnom23 php-travel-agency-system Admin Search Pages customer_search.php sql injectionVerify fixoretnom23 php-travel-agency-system
1 min read - 8.8CVE-2026-116672Authlib RFC 7592 examples omit registration-access-token client bindingFix availableauthlib authlib
1 min read - 9.1CVE-2026-105779Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Verify fixAdobe Adobe Campaign Classic
1 min read - 9.9CVE-2026-105780Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)RCEVerify fixAdobe Adobe Campaign Classic
1 min read - 10.0CVE-2026-105781Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)RCEVerify fixAdobe Adobe Campaign Classic
1 min read - 9.3CVE-2026-104350Adobe Campaign Classic (ACC) | Cross-site Scripting (Reflected XSS) (CWE-79)Verify fixAdobe Adobe Campaign Classic
1 min read - 9.9CVE-2026-104351Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)RCEVerify fixAdobe Adobe Campaign Classic
1 min read - 9.9CVE-2026-104353Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)RCEVerify fixAdobe Adobe Campaign Classic
1 min read - 7.1CVE-2026-102637Fusion Protocol URL Reflected Cross-Site Scripting (XSS) in Autodesk Fusion DesktopFix availableAutodesk Fusion
1 min read - 7.1CVE-2026-102638Electronic Library Description Stored Cross-Site Scripting (XSS) in Autodesk Fusion DesktopFix availableAutodesk Fusion
1 min read - 7.1CVE-2026-102636Design Name Stored Cross-Site Scripting (XSS) in Autodesk Fusion DesktopFix availableAutodesk Fusion
1 min read - 8.8CVE-2026-116676Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during planRCEVerify fixrunatlantis atlantis
1 min read - 7.5CVE-2026-57201Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte BufferVerify fixasterisk asterisk
1 min read - 7.3CVE-2026-117511desmondmorris node-tesseract Command Builder tesseract.js process os command injectionVerify fixdesmondmorris node-tesseract
1 min read - 7.5CVE-2026-1041893Dviewer-Nextcloud: Share password not enforced when streaming 3D models from a public link shareVerify fixmaz1987in 3Dviewer-Nextcloud
2 min read - 9.8CVE-2026-78845Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart Light Bulb 3.15.21, and Linkind Wi-Fi Smart Light Bulb 3.30.17 are vulnerable to RCEVerify fixUnknown product
1 min read - 7.5CVE-2026-117604Grav from 1.7.53.3 before 1.7.53.6 Clockwork Profiler Authorization Bypass via Loopback FallbackFix availablegetgrav grav
1 min read - 8.4CVE-2026-117602Electrum before 4.7.2 External Plugin Authorization Bypass Local Code ExecutionRCEFix availablespesmilo electrum
1 min read - 7.8CVE-2026-117567esp-mcp through commit 28afddf OS Command Injection via MCP Tool ParametersVerify fixhorw esp-mcp
1 min read - 7.8CVE-2026-117569Kali-GPT through commit a608c74 OS Command Injection via MCP Scanner Tool ParametersVerify fixalishahid74 kali-gpt
1 min read - 7.8CVE-2026-117573hagent through commit 761eec6 OS Command Injection via Arduino and ESP32 MCP ToolsVerify fixmasc-ucsc hagent
1 min read - 7.8CVE-2026-117561sf-mcp through 1.3.2 OS Command Injection via Salesforce CLI Flag ValuesVerify fixcodefriar sf-mcp
1 min read - 7.8CVE-2026-117558ai-sdlc MCP Server through 0.31.2 Command Injection via check_issue and check_pr_statusFix availableai-sdlc-framework ai-sdlc
1 min read - 7.8CVE-2026-117559DroidMind through 0.4.0 Command Injection via Shell Allowlist BypassVerify fixhyperb1iss droidmind
1 min read - 7.5CVE-2026-117553Umbraco CMS before 17.7.2 and 18.2.2 Account Takeover via Host Header PoisoningFix availableumbraco Umbraco-CMS
1 min read - 7.5CVE-2026-92546Authentication Bypass with X-Agentic-Ally-Token in Keepnet Labs Agentic AI / Agentic AllyFix availableKeepnet Labs Cybersecurity Inc. Agentic AI / Agentic Ally
1 min read - 7.5CVE-2026-100164User Enumeration in Rolantis Information Technologies' AgentisFix availableRolantis Information Technologies Tourism Industry and Trad… Agentis
1 min read - 9.3CVE-2026-117603Electrum before 4.7.2 Nostr Wallet Connect Plugin Daily Spending Limit BypassFix availablespesmilo electrum
1 min read - 8.8CVE-2026-117536REDAXO before 5.21.3 CSRF Token Bypass via users/users Privilege EscalationFix availableredaxo core
1 min read - 7.5CVE-2026-117540svg-sanitizer before 1.1.0 Quadratic CPU-Exhaustion DoS via PHP-Tag Stripping LoopFix availabledarylldoyle svg-sanitizer
1 min read - 9.8CVE-2026-117532REDAXO Core 5.3.0 before 5.21.4 Authentication Bypass via History PluginFix availableredaxo core
1 min read - 7.5CVE-2026-116896REDAXO before 5.21.5 Privilege Escalation via Backup Export of Authentication TablesFix availableredaxo core
1 min read - 7.3CVE-2026-116890Semantic MediaWiki from 3.0.0 before 7.3.0 contains a missing authorization vulnerability in the api.php smwtask module that allows unauthenticated atFix availableSemantic-mediawiki Semantic Mediawiki
1 min read - 7.1CVE-2026-116880Semantic MediaWiki 3.0.0 before 7.3.1 CSRF via Special:SMWAdmin Maintenance ActionsFix availableSemanticMediaWiki SemanticMediaWiki
1 min read - 7.3CVE-2026-116873Semantic MediaWiki 7.3.0 Missing Authorization via smwtask API run-joblist and updateFix availableSemanticMediaWiki SemanticMediaWiki
1 min read - 7.1CVE-2026-116876Semantic MediaWiki 2.5.0 before 7.3.1 Missing Authorization via Is edit protectedFix availableSemanticMediaWiki SemanticMediaWiki
1 min read - 7.5CVE-2026-116871Semantic MediaWiki 3.0.0 before 7.3.1 Uncontrolled Recursion via Special:AskFix availableSemanticMediaWiki SemanticMediaWiki
1 min read - 7.5CVE-2026-116872Semantic MediaWiki 3.0.0 before 7.3.1 Denial of Service via Special:Search Compact FiltersFix availableSemanticMediaWiki SemanticMediaWiki
1 min read - 8.8CVE-2026-116843Mistral Vibe before 3.0.3 RCE via Git Filter Drivers in Worktree ModeRCEFix availablemistralai mistral-vibe
1 min read - 7.3CVE-2026-116623code-projects Simple Content Management System Admin welcome.php authorizationVerify fixcode-projects Simple Content Management System
1 min read - 7.8CVE-2026-116816llama.cpp b5899 before b10261 Heap Out-of-Bounds Write via plamo2 TokenizerFix availableggml-org llama.cpp
1 min read - 8.5CVE-2026-116819OpenPanel before 3.0.0 Credential Disclosure via notification.rules QueryFix availableOpenpanel-dev openpanel
1 min read - 8.8CVE-2026-116811OpenPanel before 3.0.0 Sandbox Escape RCE via Webhook JavaScript TemplateRCEFix availableOpenpanel-dev openpanel
1 min read - 7.2CVE-2026-116808OpenPanel before 3.0.0 ClickHouse SQL Injection via profile.valuesFix availableOpenpanel-dev openpanel
1 min read - 9.2CVE-2026-111497Google Brotli Unchecked Return Value VulnerabilityExploitedFix availableGoogle Brotli
1 min read - 9.3CVE-2026-48356Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type VulnerabilityRCEExploitedVerify fixAdobe Commerce and Magento
1 min read - 8.2CVE-2026-116827YesWiki before 4.7.0 SSRF via copyUrlToLocalFile in Bazar CSV ImportFix availableYesWiki yeswiki
1 min read - 8.1CVE-2026-116747Kener 3.0.0 before 4.1.10 Authentication Bypass via Hardcoded Fallback JWT SecretFix availablerajnandan1 kener
1 min read - 8.8CVE-2026-116748Transmission 4.0.0 before 4.1.3 Permissive CORS Leaks RPC Anti-CSRF TokenFix availabletransmission transmission
1 min read - 7.8CVE-2026-116724FLTK through 1.4.5 Heap Buffer Overflow via Fl_BMP_Image Integer OverflowFix availablefltk fltk
1 min read - 7.8CVE-2026-116723FLTK through 1.4.5 Stack Buffer Overflow via Fl_BMP_Image colors_used FieldFix availablefltk fltk
1 min read - 8.2CVE-2026-116589Datadog dd-trace-py: IAST instrumentation can lead to application DOSVerify fixDataDog dd-trace-py
1 min read - 10.0CVE-2026-116508TOTOLINK A950RG Device-Information CGI infostat.cgi sub_402340 stack-based overflowVerify fixTOTOLINK A950RG
1 min read - 8.3CVE-2026-116741Speex through 1.2.1 Out-of-Bounds Write via speex_bits_read_whole_bytesFix availablexiph speex
1 min read - 8.7CVE-2026-116588Datadog dd-trace-py: ReDOS in URL query string obfuscationVerify fixDataDog dd-trace-py
1 min read - 7.8CVE-2026-86916A use after free issue was addressed with improved memory management.Fix availableApple Ipados
1 min read - 7.8CVE-2026-84627A buffer overflow was addressed with improved bounds checking.Fix availableApple Ipados
1 min read - 7.8CVE-2026-84604A stack buffer overflow was addressed through improved input validation.Fix availableApple Macos
1 min read - 7.8CVE-2026-84599The issue was addressed with improved memory handling.Fix availableApple Ipados
1 min read - 8.8CVE-2026-84545A use after free issue was addressed with improved memory management.Fix availableApple macOS
1 min read - 7.1CVE-2026-84494An out-of-bounds write issue was addressed with improved bounds checking.Fix availableApple Ipados
1 min read - 7.8CVE-2026-84495A use-after-free issue was addressed with improved memory management.Fix availableApple Ipados
1 min read - 7.8CVE-2026-65385An out-of-bounds write issue was addressed with improved bounds checking.Fix availableApple Ipados
1 min read - 8.4CVE-2026-65363The issue was addressed with improved checks.Fix availableApple Ipados
1 min read - 7.1CVE-2026-65350A use-after-free issue was addressed with improved memory management.Fix availableApple Ipados
1 min read - 8.8CVE-2026-64759An integer overflow was addressed with improved input validation.RCEFix availableApple Ipados
1 min read - 9.9CVE-2026-116506TOTOLINK A950RG firewall.so apmib_set command injectionVerify fixTOTOLINK A950RG
1 min read - 9.1CVE-2026-116505TOTOLINK A950RG device-information udhcpd.leases getDeviceInfo command injectionVerify fixTOTOLINK A950RG
1 min read - 8.8CVE-2026-113949A type confusion issue was addressed with improved state management.Fix availableApple Safari
1 min read - 7.1CVE-2026-113941An out-of-bounds read was addressed with improved bounds checking.Fix availableApple Macos
1 min read - 7.1CVE-2026-113942An out-of-bounds read was addressed with improved bounds checking.Fix availableApple Macos
1 min read - 7.1CVE-2026-113944An out-of-bounds read was addressed with improved bounds checking.Fix availableApple Macos
1 min read - 7.8CVE-2026-113946An out-of-bounds write issue was addressed with improved bounds checking.Fix availableApple Macos
1 min read - 7.8CVE-2026-113934The issue was addressed with improved memory handling.Fix availableApple Macos
1 min read - 7.1CVE-2026-113912An out-of-bounds access issue was addressed with improved bounds checking.Fix availableApple Ipados
1 min read - 8.0CVE-2026-113909A memory corruption issue was addressed with improved input validation.Fix availableApple Ipados
1 min read - 10.0CVE-2026-113897This issue was addressed by removing the vulnerable code.Fix availableApple Safari
1 min read - 8.8CVE-2026-112697A use-after-free issue was addressed with improved memory management.RCEFix availableApple Safari
1 min read - 7.8CVE-2026-112696An out-of-bounds write issue was addressed with improved bounds checking.Fix availableApple Ipados
1 min read - 8.8CVE-2026-112688A memory corruption issue was addressed with improved memory handling.RCEFix availableApple Ipados
1 min read - 8.4CVE-2026-112689An out-of-bounds write issue was addressed with improved input validation.Fix availableApple Ipados
1 min read - 10.0CVE-2026-112690This issue was addressed with improved input validation.Fix availableApple Ipados
1 min read - 7.8CVE-2026-112677An authorization issue was addressed with improved access control.Fix availableApple macOS
1 min read - 8.8CVE-2026-112659A type confusion issue was addressed with improved memory handling.RCEFix availableApple Safari
1 min read - 8.8CVE-2026-112655A use-after-free issue was addressed with improved memory management.RCEFix availableApple Safari
1 min read - 8.8CVE-2026-112651A use-after-free issue was addressed with improved memory management.RCEFix availableApple Safari
1 min read - 8.8CVE-2026-112637A use-after-free issue was addressed with improved memory management.RCEFix availableApple Safari
1 min read - 8.8CVE-2026-112639A use-after-free issue was addressed with improved memory management.RCEFix availableApple Safari
1 min read - 8.8CVE-2026-112623A use-after-free issue was addressed with improved memory management.RCEFix availableApple Safari
1 min read - 8.8CVE-2026-112626A use-after-free issue was addressed with improved memory management.RCEFix availableApple Safari
1 min read - 7.5CVE-2026-112622An out-of-bounds read was addressed with improved bounds checking.Fix availableApple iOS and iPadOS
1 min read - 7.8CVE-2026-112548A use after free issue was addressed with improved memory management.Fix availableApple macOS
1 min read - 7.8CVE-2026-112545A parsing issue in the handling of directory paths was addressed with improved path validation.Fix availableApple macOS
1 min read - 7.7CVE-2026-112536An out-of-bounds write issue was addressed with improved bounds checking.Fix availableApple macOS
1 min read - 7.5CVE-2026-112510An out-of-bounds write issue was addressed with improved bounds checking.Fix availableApple macOS
1 min read - 7.8CVE-2026-112487A path handling issue was addressed with improved validation.Fix availableApple macOS
1 min read - 7.4CVE-2026-112473An authorization issue was addressed with improved state management.Fix availableApple macOS
1 min read - 7.7CVE-2026-112453A path handling issue was addressed with improved validation.Fix availableApple macOS
1 min read - 7.7CVE-2025-13833Insecure TLS Fingerprint Validation in ForeScout SecureConnector Configuration Enables Remote Code ExecutionFix availableForescout Technologies SecureConnector
1 min read - 7.8CVE-2026-112437A logic issue was addressed with improved checks.Fix availableApple macOS
1 min read - 7.8CVE-2026-112493A downgrade issue was addressed with additional version checks.Fix availableApple macOS
1 min read - 7.0CVE-2026-112492A race condition was addressed with additional validation.Fix availableApple macOS
1 min read - 7.7CVE-2026-112517A use after free issue was addressed with improved memory management.Fix availableApple iOS and iPadOS
1 min read - 7.0CVE-2026-113900A race condition was addressed with improved state handling.Fix availableApple macOS
1 min read - 7.8CVE-2026-86936A logic issue was addressed with improved checks.Fix availableApple macOS
1 min read - 7.8CVE-2026-112541A parsing issue in the handling of directory paths was addressed with improved path validation.Fix availableApple macOS
1 min read - 7.8CVE-2026-112668A logic issue was addressed with improved checks.Fix availableApple macOS
1 min read - 7.1CVE-2026-112424An out-of-bounds read was addressed with improved bounds checking.Fix availableApple macOS
1 min read - 7.7CVE-2026-112593An out-of-bounds write issue was addressed with improved bounds checking.Fix availableApple macOS
1 min read - 7.7CVE-2026-86946A use-after-free issue was addressed with improved memory management.Fix availableApple macOS
1 min read - 7.8CVE-2026-112434A logic issue was addressed with improved checks.Fix availableApple macOS
1 min read - 7.8CVE-2026-112530A logic issue was addressed with improved checks.Fix availableApple macOS
1 min read - 7.8CVE-2026-86896A permissions issue was addressed with additional restrictions.Fix availableApple macOS
1 min read - 7.8CVE-2026-65373A permissions issue was addressed with additional restrictions.Fix availableApple macOS
1 min read - 7.1CVE-2026-57187Asterisk: Heap-use-after-free in Asterisk PJSIP TCP/SDP handling when TCP connection closes during SDP processingVerify fixasterisk asterisk
1 min read - 8.6CVE-2026-115924Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphsVerify fixdanielgatis rembg
1 min read - 7.5CVE-2026-104597libosmocore through 1.14.1 contains an out-of-bounds read in iuup_rx_initialization() in src/gsm/iuup.c.Verify fixUnknown product
1 min read - 7.5CVE-2026-104598libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c.Verify fixUnknown product
1 min read - 7.3CVE-2014-125135OctoPrint Flask Secret Key hard-coded keyFix availableOctoPrint
1 min read - 7.4CVE-2026-65629Weak PBKDF2 parameters for password-encrypted private-key export in joseFix availablepotatosalad jose
2 min read - 7.5CVE-2026-104593osmo-msc through 1.15.0 contains a stack-based buffer overflow in decode_mme_name() in src/libmsc/sgs_iface.c.Verify fixUnknown product
1 min read - 8.1CVE-2026-115915vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCEFix availableVllm Vllm
1 min read - 7.5CVE-2026-105765Consul vulnerable to an authorization bypass in the agent's service mesh leaf certificate APIFix availableHashiCorp Consul
1 min read - 9.9CVE-2026-102649Burrito: Unauthenticated webhooks trigger unauthorized Terraform plans when webhookSecret is unsetCloudVerify fixpadok-team burrito
2 min read - 8.5CVE-2026-71456Use of hard-coded cryptographic key vulnerability in Johnson Controls Kantech Entrapass allows Padding Oracle Crypto Attack.Fix availableJohnson Controls Kantech Entrapass
1 min read - 7.5CVE-2026-115912vLLM: Public multimodal SHM handle forgery reaches worker-side `pickle.loads()` with insecure serialization disabledRCEFix availableVllm Vllm
1 min read - 7.3CVE-2026-115418SQL injection in the database-query custom resource handlers in Amazon Web Services (AWS) Cloud Development Kit (CDK) @aws-cdk/aws-redshift-alphaCloudFix availableAWS aws-cdk/aws-redshift-alpha
1 min read - 10.0CVE-2026-115905zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCEVerify fixzip-rs zip2
1 min read - 7.7CVE-2026-85297Bucket Squatting in Cloud Run MCP leads to Service Account TakeoverCloudFix availableGoogle Cloud Cloud Run MCP
1 min read - 7.5CVE-2026-116543Open5GS 1.3.0 through 2.8.0 Heap Out-of-Bounds Write via SBI Multipart ParserFix availableopen5gs open5gs
1 min read - 7.5CVE-2026-116489Timescale pgvectorscale before 0.9.1 Type Confusion via Unqualified DiskANN Operator ClassesFix availabletimescale pgvectorscale
1 min read - 9.8CVE-2026-112346OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCERCEFix availableOpenHands OpenHands Software Agent SDK
1 min read - 8.1CVE-2026-112343Syncplify Server! < 8.8.0 Permission Override Bypass via Path CasingFix availableSyncplify, Inc. Syncplify Server!
1 min read - 7.6CVE-2026-112344Syncplify Server! 6.0.0 < 8.8.0 Symbolic Link Jail EscapeFix availableSyncplify, Inc. Syncplify Server!
1 min read - 7.5CVE-2026-99094Bluetooth: btintel_pcie: fix TX descriptor bounds checkVerify fixLinux Linux
1 min read - 7.8CVE-2026-99099x86/CPU/AMD: Fix AMD TLBI Erratum #1718Verify fixLinux Linux
1 min read - 9.3CVE-2026-77055Improper Privilege Assignment in boneIOFix availableboneIO black_debian_images
1 min read - 8.7CVE-2026-77052Missing Authentication for Node-RED in boneIORCEFix availableboneIO boneIO
1 min read - 8.7CVE-2026-77053Missing Authentication in Default Configuration in boneIOFix availableboneIO boneIO
1 min read - 8.8CVE-2026-115748Apache Vysper: Authorization bypassVerify fixApache Software Foundation Apache Vysper
1 min read - 7.5CVE-2026-115721Apache Vysper: Unbounded allocationVerify fixApache Software Foundation Apache Vysper
1 min read - 9.8CVE-2026-116485danmu_api before 1.21.7 Authentication Bypass via Default Token in Env EndpointsFix availablehuangxd- danmu_api
1 min read - 7.2CVE-2026-116219Dolibarr ERP CRM before 24.0.0 OS Command Injection via mysqldump ParameterRCEFix availableDolibarr dolibarr
1 min read - 9.1CVE-2026-116214MacCMS v10 before 2026.1000.4054 Account Takeover via Unbound Password Recovery CodeFix availablemaccmspro maccms10
1 min read - 7.6CVE-2026-116218Dolibarr ERP CRM 19.0.0 before 23.0.4 SQL Injection via bankaccounts API type fieldFix availableDolibarr dolibarr
1 min read - 9.1CVE-2026-115693Custom cacerts or cacertfile do not restrict trust to the pinned CA in hackneyFix availablebenoitc hackney
1 min read - 9.2CVE-2026-59107Shared SSH Authentication Key in vSolution Matrix File SharingFix availableWolfVision Cynap Pro, Cynap Core Pro
1 min read - 7.1CVE-2026-116492Frappe CRM before 1.89.1 Missing Authorization via Phone Lookup APIFix availablefrappe crm
1 min read - 9.3CVE-2026-110475Improper Authentication Vulnerability in CreditNirvana Collections PlatformVerify fixCreditNirvana CreditNirvana Collections Platform (CollectionWorkz)
1 min read - 7.3CVE-2026-116260libimobiledevice AFC Service afc.c service_receive double freeVerify fixlibimobiledevice
1 min read - 7.7CVE-2026-115717Frappe Builder before 1.36.1 SSRF via convert_to_webpFix availablefrappe builder
1 min read - 8.7CVE-2026-110474Hardcoded API Key Vulnerability in CreditNirvana Agentic AI Call Centre applicationVerify fixCreditNirvana Agentic AI Call Centre
1 min read - 7.3CVE-2026-116257BillaBear Installation InstallController.php processInstall missing authenticationVerify fixBillaBear
1 min read - 8.4CVE-2026-116237Oray Pugongying X5 Pro Dnsmasq crlf injectionVerify fixOray Pugongying X5 Pro
1 min read - 7.2CVE-2026-116236Oray Pugongying X5 Pro PPPoE WAN Setting upload_files plugin_init unrestricted uploadVerify fixOray Pugongying X5 Pro
1 min read - 7.7CVE-2026-116372MISP mispguard: Feed responses with 2xx status codes other than 200 bypass filtering rulesFix availableMISP misp-guard
1 min read - 9.1CVE-2026-116233Oray Pugongying X5 Pro Dnsmasq crlf injectionVerify fixOray Pugongying X5 Pro
1 min read - 9.1CVE-2026-116234Oray Pugongying X5 Pro IPsec Policy ipsec.conf crlf injectionVerify fixOray Pugongying X5 Pro
1 min read - 7.1CVE-2026-82947Multiple Out-of-Bounds Reads in Frame ProcessingFix availableRT-Labs AB SOEM
1 min read - 8.8CVE-2026-82944Buffer Overflow in CoE SDO Upload Multi-Segment Data TransfersFix availableRT-Labs AB SOEM
1 min read - 8.3CVE-2026-70388Memory Corruption via Integer Underflow in Message Length ValidationFix availableRT-Labs AB SOEM
1 min read - 9.9CVE-2026-116231Oray Pugongying X5 Pro Ser2net crlf injectionVerify fixOray Pugongying X5 Pro
1 min read - 8.2CVE-2026-116116Yoosee GM8135S Camera Secure Boot signature verificationVerify fixYoosee GM8135S Camera
1 min read - 7.3CVE-2026-116110GiantappMan LiveWallPaper SignalR Hub UploadFile missing authenticationFix availableGiantappMan LiveWallPaper
1 min read - 9.2CVE-2026-109619PHP Stale Internal Request-State VulnerabilityRCEExploitedFix availablePHP Group PHP
1 min read - 9.2CVE-2026-109618PHP Memory Corruption VulnerabilityRCEExploitedFix availablePHP Group PHP
1 min read - 8.8CVE-2026-36698Xovis AG APS-R-POE, APS-R-POE-PP, APS-R, APS-R-POE-USB, and APS-B 2.10.1.1 and earlier contains an OS command injection vulnerability in /sbin/ImportPRCEVerify fixUnknown product
1 min read - 7.8CVE-2026-107090An issue in Maltego Technologies GmbH Maltego Windows Installer 4.13.0 allows a local attacker to execute arbitrary code via the Maltego Windows instaVerify fixUnknown product
1 min read - 7.1CVE-2026-106677Homestay3 homestay-backend 0.0.1-SNAPSHOT contains an IDOR in ChatServiceImpl.Verify fixUnknown product
1 min read - 9.1CVE-2026-115823Starman versions before 0.4019 for Perl send response bodies for HEAD requests, desynchronizing responses on keep-alive connectionsFix availableUnknown product
1 min read - 7.5CVE-2026-115824Starman versions before 0.4019 for Perl allow memory exhaustion via unbounded buffering of chunked request bodiesFix availableUnknown product
1 min read - 7.5CVE-2026-115825HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-LengthFix availableUnknown product
1 min read - 7.5CVE-2026-115822Starman versions before 0.4019 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodiesFix availableUnknown product
1 min read - 7.5CVE-2026-115817Starman versions before 0.4019 for Perl allow a stalled request body to hold a worker indefinitely, as read_timeout covers only the headersFix availableUnknown product
1 min read - 8.1CVE-2026-116208YesWiki 4.6.2 before 4.7.0 Missing Authorization in ActivityPub syncActorPostsFix availableYesWiki yeswiki
1 min read - 8.1CVE-2026-116204YesWiki before 4.7.0 CSRF via despam Admin ActionFix availableYesWiki yeswiki
1 min read - 8.2CVE-2026-116176vLLM from 0.9.2 before 0.24.0 contains a server-side request forgery vulnerability that allows API callers to force outbound connections by embedding Fix availableVllm Vllm
1 min read - 8.1CVE-2026-116149ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a stack-based buffer overflow in the handling of bzip2 compressed images.Fix availableImagemagick Imagemagick
1 min read - 9.9CVE-2026-115933Forged signed tokens let any registered user take over other users and organizationsFix availableGitroomHQ postiz-app
1 min read - 9.4CVE-2026-115557Distrust compromised intermediate certificates in ssl moduleFix availablePython Software Foundation CPython
1 min read - 7.5CVE-2026-114629Web::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for urlencoded body parametersFix availableUnknown product
1 min read - 9.6CVE-2026-115932Path traversal in post media lets any registered user read server filesFix availableGitroomHQ postiz-app
1 min read - 7.1CVE-2026-116016yudao-cloud through 2026.09 Data Permission Bypass via data-permission-enable HeaderFix availableYunaiV yudao-cloud
1 min read - 7.1CVE-2026-115975Broken access control in JiraControllerFix availableCervantesSec cervantes
1 min read - 7.6CVE-2026-115929MongoDB Compass trusts certificates issued by recoverable eMudhra intermediate CAsFix availableMongoDB, Inc. Compass
1 min read - 9.9CVE-2026-115931Arbitrary file read and backend crash through unrestricted provider method callsFix availableGitroomHQ postiz-app
1 min read - 8.8CVE-2026-115935Control panel only API response emulation replaces "securityKey" and reaches server RCERCEFix availablecraftcms cms
1 min read - 8.8CVE-2026-115938Low privilege condition filter escapes Twig sandbox, recovers "securityKey" and reaches RCEFix availablecraftcms cms
1 min read - 8.7CVE-2026-115937Unauthenticated payment reuse allows unpaid orders to be marked as paidFix availablecraftcms commerce-mollie
1 min read - 7.5CVE-2026-113877HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular expressionsFix availableUnknown product
1 min read - 7.8CVE-2026-113951If an attacker can write to the filesystem of a container k8s cluster container, they can plant an exec credential plugin in /etc/kubernetes/admin.conCloudFix availableApple Container
1 min read - 7.5CVE-2026-19741OpenThread joiner autostart uses a publicly documented default Joining Device Credential (PSKd)Fix availablezephyrproject zephyr
2 min read - 7.1CVE-2026-115580pypdf: Possible long runtimes for large xref table header limitsVerify fixpy-pdf pypdf
1 min read - 7.1CVE-2026-115585pypdf: Possible long runtimes for repeated malformed cross-reference entries (Follow-up)Verify fixpy-pdf pypdf
1 min read - 7.1CVE-2026-115572pypdf: Possible long runtimes for repeated references to the same missing objectVerify fixpy-pdf pypdf
1 min read - 8.8CVE-2026-79982Out-of-bounds write in the USB Bluetooth HCI transport class when a controller-to-host HCI packet exceeds the bulk endpoint maximum packet sizeRCEFix availablezephyrproject zephyr
2 min read - 7.8CVE-2026-79979Stale TLB entries after demand-paging page-out let arm64 user threads access reused physical framesFix availablezephyrproject zephyr
2 min read - 8.2CVE-2026-79977WireGuard peer endpoint learned from unauthenticated transport-data messages allows off-path tunnel hijack in ZephyrFix availablezephyrproject zephyr
2 min read - 9.8CVE-2026-115812Relative path traversal during model archive extraction in Amazon Web Services Multi Model ServerCloudVerify fixAWS multi-model-server
1 min read - 7.6CVE-2026-115863ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Reply message.Verify fixConnMan ConnMan
1 min read - 7.4CVE-2026-110975Autotune: kruize/autotune: kruize/autotune: datasources credential disclosureFix availableUnknown product
1 min read - 7.4CVE-2026-106069A flaw in Node.js TLS hostname verification can cause a server certificate to be validated against a different IP address than the one the client connVerify fixnodejs node
1 min read - 7.4CVE-2026-105483A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address SAN to authenticate a connection to an IPv4 address wheVerify fixnodejs node
1 min read - 8.3CVE-2026-87901Improper sanitization in the registration module allows reflected Cross-Site Scripting.Verify fixphpBB phpBB
1 min read - 7.4CVE-2026-105482A flaw in Node.js DNS resolution allows hostnames containing a NUL byte to be silently truncated by the dns.resolve*() functions and dns.reverse().Verify fixnodejs node
1 min read - 7.5CVE-2026-106765@rog0x/mcp-docker-tools: executes arbitrary code via the handleImageList functionVerify fix@rog0x/mcp-docker-tools
1 min read - 7.5CVE-2026-106764@rog0x/mcp-git-tools executes arbitrary code via the resolveBaseBranch functionVerify fix@rog0x/mcp-git-tools
1 min read - 7.5CVE-2026-106763@justice8096/sagemath-mcp-server: executes arbitrary code via the escapeShellString and sanitizeCode functionsRCEVerify fix@justice8096/sagemath-mcp-server
1 min read - 8.6CVE-2026-102786Joomla Extension - phoca.cz - Authenticated stored cross-site scripting through HTML attribute injection in Phoca Gallery 4.5.0 - 6.1.5Verify fixphoca.cz Phoca Gallery extension for Joomla
1 min read - 8.7CVE-2026-50053Zimbra Collaboration Suite RestFilter Request Attribute Override via Unauthenticated URL ParametersVerify fixSynacor Zimbra Collaboration Suite
1 min read - 7.2CVE-2026-114622baserCMS: Encoded path traversal bypass in the theme file APIVerify fixbaserproject basercms
1 min read - 9.1CVE-2026-107685WebSocket sessions do not verify TLS certificates, exposing API keys and OAuth tokens to on-path attackersFix availableagentjido req_llm
1 min read - 8.8CVE-2026-89320HmacShaCryptor.Hash never hashes its input — returns constant HMAC_K("") for all inputs, voiding CBC-HMAC JWE integrityFix availableEclipse Foundation Eclipse KeyPont - GOSE
1 min read - 9.3CVE-2026-25784bluespice/wiki container: Insecure default configuration of service token authentication allows privilege escalation to sysopFix availableHallo Welt! GmbH BlueSpice
1 min read - 9.8CVE-2026-63244Authentication Bypass VulnerabilityVerify fixWizLearn Technologies Pte. Ltd. Learning Management System
1 min read - 7.7CVE-2026-75775Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows remote user to execute arbitrary commands with root pVerify fixASUS Router
1 min read - 8.7CVE-2026-93489Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP request and forge an access ticket, subsequently Verify fixASUS Router
1 min read - 8.6CVE-2026-75779Improper Neutralization of Special Elements used in an OS Command (“OS Command Injection”) and Cross-Site Request Forgery (CSRF) in an ASUS router modRCEVerify fixASUS Router
1 min read - 9.6CVE-2026-55981Firmware verification vulnerabilityVerify fixCreative Labs Creative Sound Blaster Katana V2, V2X, SE
1 min read - 7.2CVE-2026-107858Cross-Site WebSocket Hijacking and Permissive CORS in Google Agent Development Kit (ADK) for Java Development ServerFix availableGoogle Agent Development Kit (ADK) for Java
2 min read - 8.7CVE-2026-19678Server-Side Request Forgery (SSRF) Leading to Internal Solr Data DisclosureVerify fixonPhase onPhase Forms
1 min read - 9.3CVE-2026-19677Authentication Bypass Leading to Server-Side Command ExecutionVerify fixonPhase onPhase Forms
1 min read - 7.1CVE-2026-115486Open-iscsi: open-iscsi: ipv6 neighbor discovery missing option length validation in iscsiuio allows arp table poisoningVerify fixRed Hat Red Hat Enterprise Linux 10
1 min read - 9.9CVE-2026-114625Arista VeloCloud Orchestrator SQL Injection VulnerabilityExploitedFix availableArista VeloCloud Orchestrator
1 min read - 9.2CVE-2026-110447Collabora Online – Built-in CODE Server OS Command Injection VulnerabilityRCEExploitedFix availableCollabora Collabora Online – Built-in CODE Server
1 min read - 7.4CVE-2026-114616Authlib is a Python library which builds OAuth and OpenID Connect servers.Fix availableAuthlib Authlib
1 min read - 7.5CVE-2026-92450Kiloview E3 NDI Encoder Use of Hard-coded CredentialsFix availableKiloview E3 Firmware
1 min read - 8.1CVE-2026-111594InterSystems Corporation InterSystems IRIS for Health Cleartext Transmission of Sensitive InformationVerify fixInterSystems IRIS for Health
1 min read - 8.1CVE-2026-115419Unintended disclosure of data element to wrong session in Strands Agents SDK A2A ServerCloudFix availableAWS strands-agents
1 min read - 7.5CVE-2026-115506libexpat through 2.9.0 Denial of Service via Billion Laughs Detection DelayFix availableLibexpat Project Libexpat
1 min read - 8.2CVE-2026-79885Unauthenticated File Write Vulnerability leads to Denial-of-Service in AOS-8Verify fixHewlett Packard Enterprise (HPE) ArubaOS (AOS)
1 min read - 8.2CVE-2026-79886Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8Verify fixHewlett Packard Enterprise (HPE) ArubaOS (AOS)
1 min read - 9.3CVE-2026-79876Unauthenticated Adjacent Sensitive Information Disclosure in AOS-10 Wi-Fi Frame ProcessingVerify fixHewlett Packard Enterprise (HPE) ArubaOS (AOS)
1 min read - 8.8CVE-2026-79877Unauthenticated Adjacent Remote Code Execution Vulnerability in AOS-10RCEVerify fixHewlett Packard Enterprise (HPE) ArubaOS (AOS)
1 min read - 8.8CVE-2026-79878Unauthenticated Adjacent Command Injection Vulnerability in the AOS-8 Command Line Interface Accessed by the PAPI ProtocolRCEVerify fixHewlett Packard Enterprise (HPE) ArubaOS (AOS)
1 min read - 8.8CVE-2026-79879Unauthenticated Adjacent Memory Corruption Vulnerabilities lead to Remote Code Execution in AOS-10RCEVerify fixHewlett Packard Enterprise (HPE) ArubaOS (AOS)
1 min read - 8.7CVE-2026-79880Authenticated Server-Side Request Forgery leads to Remote Code Execution in AOS-8Verify fixHewlett Packard Enterprise (HPE) ArubaOS (AOS)
1 min read - 8.3CVE-2026-79881Authentication Bypass Leading to Remote Code Execution in AOS-8Verify fixHewlett Packard Enterprise (HPE) ArubaOS (AOS)
1 min read - 8.3CVE-2026-79882Unauthenticated Adjacent Command Injection Vulnerability in the PAPI Protocol of AOS-10RCEVerify fixHewlett Packard Enterprise (HPE) ArubaOS (AOS)
1 min read - 8.3CVE-2026-79883Unauthenticated Adjacent Buffer Overflow Vulnerability in the PAPI Protocol leads to Sensitive Information Disclosure in AOS-10Verify fixHewlett Packard Enterprise (HPE) ArubaOS (AOS)
1 min read - 8.2CVE-2026-79884Authentication Bypass leads to Sensitive Information Disclosure in AOS-8Verify fixHewlett Packard Enterprise (HPE) ArubaOS (AOS)
1 min read - 9.3CVE-2026-79875Authentication Bypass in the PAPI Protocol of AOS-8 Allows Unauthorized Administrative AccessVerify fixHewlett Packard Enterprise (HPE) ArubaOS (AOS)
1 min read - 9.6CVE-2026-79869Authentication Bypass Leading to Remote Code Execution in AOS-10Verify fixHewlett Packard Enterprise (HPE) ArubaOS (AOS)
1 min read - 9.3CVE-2026-79874Authentication Bypass in the API allows Administrative Access of AOS-10Verify fixHewlett Packard Enterprise (HPE) ArubaOS (AOS)
1 min read - 9.8CVE-2026-79858Unauthenticated SQL Injection Vulnerability in the PAPI Protocol of AOS-8Verify fixHewlett Packard Enterprise (HPE) ArubaOS (AOS)
1 min read - 9.8CVE-2026-79853Unauthenticated Sensitive Information Disclosure leads to Remote Code Execution in AOS-10Verify fixHewlett Packard Enterprise (HPE) ArubaOS (AOS)
1 min read - 10.0CVE-2026-79846Unauthenticated Command Injection Vulnerabilities in AOS-8Verify fixHewlett Packard Enterprise (HPE) ArubaOS (AOS)
1 min read - 7.6CVE-2026-114648NoSQL injection via dot and dollar characters in LINQ filter field names and dictionary keysFix availableMongoDB C# Driver
1 min read - 8.6CVE-2026-114519Missing authorization in the Prospero Flow CRM user API allows a basic role user to read and delete other accountsFix availableRoskus Prospero Flow CRM
2 min read - 8.2CVE-2026-114644Memory-exhaustion denial of service via unbounded symbol interning during BSON/JSON deserializationFix availableMongoDB C# Driver
1 min read - 9.3CVE-2026-79873Unauthenticated Adjacent Authentication Bypasses in the PAPI Protocol of AOS-10 Leads to Unauthorized Administrative AccessVerify fixHewlett Packard Enterprise (HPE) ArubaOS (AOS)
1 min read - 9.4CVE-2026-79872Unauthenticated Buffer Overflow Vulnerability allows Remote Code Execution in AOS-10 and AOS-8RCEVerify fixHewlett Packard Enterprise (HPE) ArubaOS (AOS)
1 min read - 9.6CVE-2026-79871Unauthenticated Sensitive Information Disclosure in the Command Line Interface of AOS-10Verify fixHewlett Packard Enterprise (HPE) ArubaOS (AOS)
1 min read - 9.6CVE-2026-79870Authentication Bypass leads to Unauthorized Access in AOS-8Verify fixHewlett Packard Enterprise (HPE) ArubaOS (AOS)
1 min read - 7.1CVE-2026-93336Missing authorization in the unit resources download route in Juju controllersFix availableCanonical Juju
1 min read - 9.5CVE-2026-97631Pre-boot RCE in EDK II PXE driverRCEVerify fixTianoCore EDK2
1 min read - 7.7CVE-2026-115416Incorrect authorization checks in Amazon Athena engine version 3 query processingCloudVerify fixAWS Amazon Athena
1 min read - 7.1CVE-2026-114510Flexible GraphRAG: Cypher/Graph Injection via broken string-escaping in FalkorDB adapter (_escape()) - full graph wipe from ingested-document contentVerify fixstevereiner flexible-graphrag
1 min read - 9.1CVE-2022-51022YiShaAdmin 3.1 Unauthenticated Path Traversal via DownloadFile endpointFix availableliukuo362573 YiShaAdmin
1 min read - 8.8CVE-2025-71434Weaver E-cology < 10.76 Unauthenticated SQL Injection via doc/out/more/listFix availableWeaver Network Co., Ltd. E-cology
1 min read - 8.7CVE-2019-25779WooThemes Diarise 1.5.9 Local File Disclosure via download.phpVerify fixWooThemes Diarise
1 min read - 8.3CVE-2026-114727Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 passes potentially unsafe content into ImageMagick when resizing images.Fix availableRoundcube Webmail
1 min read - 10.0CVE-2026-110264Integer Overflow or Wraparound in GitLabFix availableGitLab GitLab
1 min read - 8.1CVE-2026-51954An issue in Webasyst Framework 4.0.3 and before allows a remote attacker to execute arbitrary code via a crafted OAuth authorization URL with an arbitVerify fixUnknown product
1 min read - 7.5CVE-2026-76290In Splunk Enterprise versions below 10.4.4, 10.2.8, and 10.0.11, an unauthenticated user could send repeated requests to the Edge Processor package doFix availableSplunk Splunk
1 min read - 7.5CVE-2026-76288In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could send a single crafted request to the Splunk WebFix availableSplunk Splunk
1 min read - 9.8CVE-2026-76528Protection Mechanism Failure in Splunk SOARFix availableSplunk Splunk SOAR
1 min read - 9.8CVE-2026-76407Improper Access Control in Splunk SOARFix availableSplunk Splunk SOAR
1 min read - 7.5CVE-2026-76306Information Disclosure through REST API Query Filters in Splunk SOARFix availableSplunk Splunk SOAR
1 min read - 7.5CVE-2026-114136Django REST framework: JSONParser applies an attacker-named codec to the request streamVerify fixencode django-rest-framework
1 min read - 7.5CVE-2026-114123D365 F&O MCP Server: Official Azure one-click deployment ships with authentication disabled by default, exposing proprietary X++ source over the public internetCloudVerify fixdynamics365ninja d365fo-mcp-server
2 min read - 8.1CVE-2026-114053vLLM from 0.7.3 before 0.31.0 forwards the request-supplied mm_processor_kwargs.code_revision to Transformers AutoProcessor.from_pretrained, letting cRCEFix availableVllm Vllm
1 min read - 7.5CVE-2026-114055vLLM from 0.7.3 before 0.31.0 contains an uncontrolled resource consumption vulnerability that allows remote clients to control multimodal processor pFix availableVllm Vllm
1 min read - 7.5CVE-2026-114050vLLM before 0.31.0 uses a client-supplied multimodal uuid verbatim as cache identity with no consistency check on cache hits, allowing engine crashes.Fix availableVllm Vllm
1 min read - 7.5CVE-2026-114051vLLM before 0.31.0 skips the min_tokens <= max_tokens check for /inference/v1/generate requests with a null max_tokens, so the EngineCore input threadFix availableVllm Vllm
1 min read - 7.5CVE-2026-114052vLLM after 0.24.0 and before 0.31.0 contains a memory exhaustion vulnerability in MOSS-Audio model serving that caches a processor for every distinct Fix availableVllm Vllm
1 min read - 9.8CVE-2026-91495Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Verify fixOracle Webcenter Content
1 min read - 7.5CVE-2026-91504Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Portal Suite).Verify fixOracle Webcenter Content
1 min read - 8.8CVE-2026-91407Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices).Verify fixOracle Identity Manager
1 min read - 9.8CVE-2026-91408Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: End User Self Service).Verify fixOracle Identity Manager
1 min read - 7.8CVE-2026-91315Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).Verify fixOracle Jd Edwards Enterpriseone Tools
1 min read - 8.1CVE-2026-91313Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).Verify fixOracle Jd Edwards Enterpriseone Tools
1 min read - 7.8CVE-2026-91314Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).Verify fixOracle Jd Edwards Enterpriseone Tools
1 min read - 8.8CVE-2026-91303Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).Verify fixOracle Jd Edwards Enterpriseone Tools
1 min read - 7.8CVE-2026-91304Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).Verify fixOracle Jd Edwards Enterpriseone Tools
1 min read - 9.1CVE-2026-91305Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).Verify fixOracle Jd Edwards Enterpriseone Tools
1 min read - 7.8CVE-2026-91306Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).Verify fixOracle Jd Edwards Enterpriseone Tools
1 min read - 7.5CVE-2026-91307Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).Verify fixOracle Jd Edwards Enterpriseone Tools
1 min read - 7.5CVE-2026-91308Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).Verify fixOracle Jd Edwards Enterpriseone Tools
1 min read - 8.8CVE-2026-91310Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation SEC).Verify fixOracle Jd Edwards Enterpriseone Tools
1 min read - 7.8CVE-2026-91311Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).Verify fixOracle Jd Edwards Enterpriseone Tools
1 min read - 8.8CVE-2026-91295Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).Verify fixOracle Jd Edwards Enterpriseone Tools
1 min read - 8.8CVE-2026-91296Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).Verify fixOracle Jd Edwards Enterpriseone Tools
1 min read - 10.0CVE-2026-91299Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security).Verify fixOracle Jd Edwards Enterpriseone Orchestrator
1 min read - 7.4CVE-2026-91288Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC).Verify fixOracle Jd Edwards Enterpriseone Tools
1 min read - 8.2CVE-2026-91286Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC).Verify fixOracle Jd Edwards Enterpriseone Tools
1 min read - 8.1CVE-2026-91287Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).Verify fixOracle Jd Edwards Enterpriseone Tools
1 min read - 8.1CVE-2026-91269Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).Verify fixOracle Jd Edwards Enterpriseone Tools
1 min read - 8.8CVE-2026-91270Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC).Verify fixOracle Jd Edwards Enterpriseone Tools
1 min read - 8.1CVE-2026-91271Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC).Verify fixOracle Jd Edwards Enterpriseone Tools
1 min read - 7.4CVE-2026-91272Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC).Verify fixOracle Jd Edwards Enterpriseone Tools
1 min read - 8.6CVE-2026-91273Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Object and Env Tech SEC).Verify fixOracle Jd Edwards Enterpriseone Tools
1 min read - 9.1CVE-2026-91265Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).Verify fixOracle Jd Edwards Enterpriseone Tools
1 min read - 8.4CVE-2026-91266Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC).Verify fixOracle Jd Edwards Enterpriseone Tools
1 min read - 8.6CVE-2026-91267Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC).Verify fixOracle Jd Edwards Enterpriseone Tools
1 min read - 8.8CVE-2026-91268Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).Verify fixOracle Jd Edwards Enterpriseone Tools
1 min read - 8.8CVE-2026-91259Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).Verify fixOracle Identity Manager
1 min read - 7.5CVE-2026-87363Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).Verify fixOracle Payroll
1 min read - 7.8CVE-2026-87356Vulnerability in the Applications Platform Engineering product of Oracle E-Business Suite (component: Valid Session).Verify fixOracle Corporation Applications Platform Engineering
1 min read - 8.7CVE-2026-87346Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Oracle Weblogic Server Proxy Plug-in for Oracle HTTP Server).Verify fixOracle Corporation Oracle HTTP Server
1 min read - 8.8CVE-2026-83402Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).Verify fixOracle Identity Manager
1 min read - 8.8CVE-2026-83403Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).Verify fixOracle Identity Manager
1 min read - 8.8CVE-2026-113264Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insideFix availableGoogle Chrome
1 min read - 7.5CVE-2026-101708Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).Verify fixOracle Payroll
1 min read - 7.5CVE-2026-101712Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).Verify fixOracle Payroll
1 min read - 7.8CVE-2026-101682Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities).Verify fixOracle Corporation Applications DBA
1 min read - 7.0CVE-2026-101544Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).Verify fixOracle Payroll
1 min read - 8.8CVE-2026-101495Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Siebel Approval Manager).Verify fixOracle Corporation Siebel CRM Development
1 min read - 8.2CVE-2026-101458Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Verify fixOracle Corporation Siebel CRM Deployment
1 min read - 8.7CVE-2026-101451Vulnerability in the Siebel Life Sciences product of Oracle Siebel CRM (component: Web UI).Verify fixOracle Corporation Siebel Life Sciences
1 min read - 8.7CVE-2026-101431Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework).Verify fixOracle Corporation PeopleSoft Enterprise PeopleTools
1 min read - 8.1CVE-2026-101427Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution).Verify fixOracle Peoplesoft Enterprise Peopletools
1 min read - 7.6CVE-2026-101434Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Database Server).Verify fixOracle Peoplesoft Enterprise Peopletools
1 min read - 8.1CVE-2026-101422Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution).Verify fixOracle Peoplesoft Enterprise Peopletools
1 min read - 7.5CVE-2026-101410Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink).Verify fixOracle Corporation PeopleSoft Enterprise PeopleTools
1 min read - 7.5CVE-2026-101409Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution).Verify fixOracle Peoplesoft Enterprise Peopletools
1 min read - 7.8CVE-2026-101757Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges).Verify fixOracle Corporation Oracle Application Object Library
1 min read - 7.7CVE-2026-101705Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: Role Summary).Verify fixOracle Corporation Oracle Common Applications
1 min read - 7.8CVE-2026-101676Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other Issues).Verify fixOracle Corporation Oracle Concurrent Processing
1 min read - 7.8CVE-2026-101566Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges).Verify fixOracle Corporation Oracle Application Object Library
1 min read - 7.1CVE-2026-101447Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workflow).Verify fixOracle Corporation Siebel CRM Development
1 min read - 7.7CVE-2026-105311Console-operator: streams for apache kafka console: cross-namespace kafkauser secret exfiltration via confused deputyCloudFix availableRed Hat StreamsHub Console for Apache Kafka®
1 min read - 9.9CVE-2026-105312Console-operator: streams for apache kafka console: tenant-controlled container image on clusterrole-bound pod enables namespace-to-cluster privilege escalationCloudFix availableRed Hat StreamsHub Console for Apache Kafka®
1 min read - 8.8CVE-2026-105949Cruise-control: streams for apache kafka cruise control: authentication bypass via extra path segment allows unauthenticated access to all admin endpointsFix availableRed Hat streams for Apache Kafka 2
1 min read - 7.3CVE-2026-112177Ghostscript: reintroduction of .charkeys -dsafer bypass in rhel 8Verify fixRed Hat Red Hat Enterprise Linux 8
1 min read - 9.3CVE-2026-113380In the RingRTC library before 2.72.0 for Signal, a peer that saturates a call's FSM queue can interfere with the ability of a local hangup to tear theFix availableSignal RingRTC
1 min read - 7.5CVE-2026-86977An authorization issue was addressed with improved network restrictions.Fix availableApple Ipados
1 min read - 8.8CVE-2026-86948This issue was addressed by enforcing library validation on the affected binaries.Fix availableApple Xcode
1 min read - 7.8CVE-2026-86961A race condition was addressed with additional validation.Fix availableApple Ipados
1 min read - 8.8CVE-2026-84579A logic issue was addressed with improved checks.Fix availableApple macOS
1 min read - 8.3CVE-2026-107366IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification.Fix availableLangflow Langflow
1 min read - 6.7CVE-2026-110936Siemens Software Center Uncontrolled Search Path Element VulnerabilityRCEExploitedFix availableSiemens Software Center
1 min read - 7.8CVE-2026-106931EG Secure Solutions SiteGuard Server Edition OS Command Injection VulnerabilityExploitedVerify fixEG Secure Solutions SiteGuard Server Edition
1 min read - 8.6CVE-2026-96656Plex Media Server External Control of File Name or Path VulnerabilityExploitedFix availablePlex Media Server
1 min read - 4.3CVE-2026-96655Plex Media Server Server-Side Request Forgery (SSRF) VulnerabilityExploitedFix availablePlex Media Server
1 min read - 6.9CVE-2026-96654Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page VulnerabilityExploitedFix availablePlex Media Server
1 min read - 4.3CVE-2026-96652Plex Media Server Server-Side Request Forgery (SSRF) VulnerabilityExploitedFix availablePlex Media Server
1 min read - 8.2CVE-2026-53995MLflow 3.17.1 and prior Path Traversal via Trace ID APIFix availablemlflow mlflow
1 min read - 7.8CVE-2026-112261Gimp: gimp: use-after-free in xcf loader via prop_selected_pathRCEVerify fixRed Hat Red Hat Enterprise Linux 9
1 min read - 7.8CVE-2026-112258Gimp: gimp: use-after-free in xcf loader via prop_linked and prop_selection on channelsRCEVerify fixRed Hat Red Hat Enterprise Linux 9
1 min read - 7.8CVE-2026-112257Gimp: gimp: heap out-of-bounds read/write in psd thumbnail loader (load_resource_1033)RCEVerify fixRed Hat Red Hat Enterprise Linux 9
1 min read - 7.1CVE-2026-112260Gimp: gimp: heap out-of-bounds read in xcf text-layer parasite parsingVerify fixRed Hat Red Hat Enterprise Linux 9
1 min read - 7.5CVE-2026-6719IBM Concert Software Use of Insufficiently Random ValuesFix availableIbm Concert
1 min read - 7.4CVE-2026-103314Stackrox: stackrox: saml response replay allows multiple central authentication tokensCloudFix availableRed Hat Red Hat Advanced Cluster Security for Kubernetes 4.10
1 min read - 9.8CVE-2026-78162Deserialization of Untrusted Data vulnerability in Apache Camel.RCEFix availableApache Camel
2 min read - 7.5CVE-2026-109553Gitea SSH certificate principal impersonation of other usersFix availableGitea Gitea
1 min read - 7.8CVE-2026-104715Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypassLPEVerify fixRed Hat Red Hat Enterprise Linux 10
1 min read - 9.3CVE-2026-102764BeyondTrust Remote Support Authentication Bypass by Spoofing VulnerabilityExploitedVerify fixBeyondTrust Remote Support
1 min read - 5.4CVE-2025-61624Fortinet Multiple Products Path Traversal VulnerabilityExploitedVerify fixFortinet Multiple Products
1 min read - 7.5CVE-2026-109468ASP.NET Core Denial of Service VulnerabilityFix availableMicrosoft Microsoft Visual Studio 2022 version 17.14
1 min read - 8.8CVE-2026-108452Microsoft Office SharePoint Remote Code Execution VulnerabilityFix availableMicrosoft Microsoft SharePoint Server Subscription Edition
1 min read - 8.8CVE-2026-108450Microsoft Office Word Remote Code Execution VulnerabilityFix availableMicrosoft Microsoft 365 Apps for Enterprise
1 min read - 8.8CVE-2026-108451Microsoft Office Word Remote Code Execution VulnerabilityFix availableMicrosoft Microsoft 365 Apps for Enterprise
1 min read - 8.8CVE-2026-108449Microsoft Office Word Remote Code Execution VulnerabilityFix availableMicrosoft Microsoft 365 Apps for Enterprise
1 min read - 8.8CVE-2026-108446Microsoft Office Excel Remote Code Execution VulnerabilityFix availableMicrosoft Microsoft 365 Apps for Enterprise
1 min read - 8.8CVE-2026-108447Microsoft Office Word Remote Code Execution VulnerabilityFix availableMicrosoft Microsoft 365 Apps for Enterprise
1 min read - 7.5CVE-2026-108448Microsoft Office Outlook Remote Code Execution VulnerabilityFix availableMicrosoft Microsoft 365 Apps for Enterprise
1 min read - 8.8CVE-2026-108445Microsoft Office Word Remote Code Execution VulnerabilityFix availableMicrosoft Microsoft 365 Apps for Enterprise
1 min read - 8.8CVE-2026-108443Microsoft Office Word Remote Code Execution VulnerabilityFix availableMicrosoft Microsoft 365 Apps for Enterprise
1 min read - 8.8CVE-2026-108444Microsoft Office Remote Code Execution VulnerabilityFix availableMicrosoft Microsoft 365 Apps for Enterprise
1 min read - 10.0CVE-2026-94603Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotationFix availablego.podman.io/podman/v6
2 min read - 8.8CVE-2026-85634Wildfly-core: wildfly-core: deployer rbac role privilege escalation via path traversal in deployment nameVerify fixRed Hat Red Hat Fuse 7
1 min read - 9.8CVE-2026-98432ipv4: free inet_opt and ireq_opt after an RCU grace periodVerify fixLinux Linux
2 min read - 9.3CVE-2026-21589Atlassian Multiple Products Files or Directories Accessible to External Parties VulnerabilityExploitedVerify fixAtlassian Multiple Products
1 min read - 8.8CVE-2026-86848Dpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-cryptoVerify fixRed Hat Red Hat Enterprise Linux 10
1 min read - 8.8CVE-2026-86567Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmapVerify fixRed Hat Fast Datapath for RHEL 10
1 min read - 8.6CVE-2026-0322Palo Alto Networks PAN-OS Code Injection VulnerabilityExploitedFix availablePalo Alto Networks PAN-OS
1 min read - 8.6CVE-2026-100236Dpdk: dpdk: heap out-of-bounds read/write in gso header copyVerify fixRed Hat Fast Datapath for RHEL 10
1 min read - 8.2CVE-2026-86565Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds writeVerify fixRed Hat Fast Datapath for RHEL 10
1 min read - 7.8CVE-2026-86563Dpdk: dpdk: double offset bug in vhost log mapping calculationVerify fixRed Hat Fast Datapath for RHEL 10
1 min read - 7.8CVE-2026-86562Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse)Verify fixRed Hat Fast Datapath for RHEL 10
1 min read - 9.8CVE-2026-76519Cisco Secure Email Gateway Relative Path Traversal VulnerabilityExploitedVerify fixCisco Secure Email Gateway
1 min read - 10.0CVE-2026-105134Ahsay AhsayCBS Command Injection VulnerabilityRCEExploitedFix availableAhsay AhsayCBS
1 min read - 6.9CVE-2026-105133Ahsay AhsayCBS Improper Authentication VulnerabilityExploitedFix availableAhsay AhsayCBS
1 min read - 8.0CVE-2026-96956Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.Fix availableMicrosoft Sql Server 2017
1 min read - 8.8CVE-2026-94512Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.Fix availableMicrosoft Sql Server 2017
1 min read - 7.0CVE-2026-88088Microsoft SQL Server Elevation of Privilege VulnerabilityFix availableMicrosoft Microsoft SQL Server 2019 (GDR)
1 min read - 7.7CVE-2026-88081Microsoft SQL Server Information Disclosure VulnerabilityFix availableMicrosoft Microsoft SQL Server 2017 (GDR)
1 min read - 7.0CVE-2026-88082Microsoft SQL Server Elevation of Privilege VulnerabilityFix availableMicrosoft Microsoft SQL Server 2019 (GDR)
1 min read - 7.5CVE-2026-88083Microsoft SQL Server Remote Code Execution VulnerabilityFix availableMicrosoft Microsoft SQL Server 2022 (GDR)
1 min read - 7.0CVE-2026-85919Microsoft SQL Server Elevation of Privilege VulnerabilityFix availableMicrosoft Microsoft SQL Server 2019 (GDR)
1 min read - 8.5CVE-2026-85886Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.Fix availableMicrosoft Sql Server 2017
1 min read - 7.0CVE-2026-85876Use after free in SQL Server allows an authorized attacker to elevate privileges locally.Fix availableMicrosoft Sql Server 2019
1 min read - 8.8CVE-2026-65674Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.RCEFix availableMicrosoft Sql Server 2019
1 min read - 8.5CVE-2026-68883Microsoft SQL Server Elevation of Privilege VulnerabilityFix availableMicrosoft Microsoft SQL Server 2017 (GDR)
1 min read - 8.5CVE-2026-67625Microsoft SQL Server Remote Code Execution VulnerabilityFix availableMicrosoft Microsoft SQL Server 2017 (GDR)
1 min read - 8.1CVE-2026-70197Microsoft Security Advisory CVE-2026-70197 - .NET and Visual Studio Remote Code Execution VulnerabilityFix availableMicrosoft.NETCore.App.Runtime.win-arm64
2 min read - 9.3CVE-2026-83662Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Verify fixAdobe Experience Manager
1 min read - 9.9CVE-2026-75732Adobe Experience Manager | Incorrect Authorization (CWE-863)RCEVerify fixAdobe Experience Manager
1 min read - 10.0CVE-2026-48383Adobe Experience Manager | Incorrect Authorization (CWE-863)RCEVerify fixAdobe Experience Manager
1 min read - 7.1CVE-2026-110083Adobe Experience Manager | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Verify fixAdobe Experience Manager
1 min read - 7.1CVE-2026-110084Adobe Experience Manager | XML Injection (aka Blind XPath Injection) (CWE-91)Verify fixAdobe Experience Manager
1 min read - 7.8CVE-2026-85908Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.Fix availableMicrosoft Windows 10 1607
1 min read - 7.8CVE-2026-83781Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.Fix availableMicrosoft Windows 11 23h2
1 min read - 9.8CVE-2026-83782Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.Fix availableMicrosoft Windows 10 1607
1 min read - 7.8CVE-2026-83783Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.Fix availableMicrosoft Windows 10 1607
1 min read - 7.0CVE-2026-83775Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevFix availableMicrosoft Windows 10 1607
1 min read - 8.8CVE-2026-83777Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network.Fix availableMicrosoft Windows 10 1607
1 min read - 7.8CVE-2026-83779Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.Fix availableMicrosoft Windows 10 1607
1 min read - 9.8CVE-2026-83780Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.Fix availableMicrosoft Windows 10 1607
1 min read - 9.8CVE-2026-83770Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.Fix availableMicrosoft Windows 10 1607
1 min read - 8.8CVE-2026-83771Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network.Fix availableMicrosoft Windows 11 23h2
1 min read - 7.0CVE-2026-70271Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.Fix availableMicrosoft Windows 10 1607
1 min read - 7.8CVE-2026-70106Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.Fix availableMicrosoft Windows 10 1607
1 min read - 7.0CVE-2026-69736Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Manager allows an authorized attackeFix availableMicrosoft Windows 10 1607
1 min read - 7.0CVE-2026-105725Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.Fix availableMicrosoft Windows Security App
1 min read - 9.8CVE-2026-105016Microsoft QUIC Remote Code Execution VulnerabilityFix availableMicrosoft .NET 10.0 runtime
1 min read - 7.8CVE-2026-108133Windows Modern Device Management (MDM) Elevation of Privilege VulnerabilityFix availableMicrosoft Windows Server 2022
1 min read - 7.0CVE-2026-108134Windows Autopilot Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 11 Version 24H2
1 min read - 7.0CVE-2026-108135Windows Backup Engine Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 21H2
1 min read - 7.8CVE-2026-108136Microsoft Windows Search Component Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 8.8CVE-2026-108463Windows SmartScreen Security Feature Bypass VulnerabilityFix availableMicrosoft Windows 11 Version 24H2
1 min read - 8.8CVE-2026-108471Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1809
1 min read - 7.8CVE-2026-108130Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 11 Version 24H2
1 min read - 7.5CVE-2026-108131Active Directory Federation Services (AD FS) Spoofing VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.0CVE-2026-108132Windows Kerberos Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 8.8CVE-2026-105007Windows NDIS Elevation of Privilege VulnerabilityLPEFix availableMicrosoft Windows 10 Version 1607
1 min read - 9.0CVE-2026-105008Windows Schannel Spoofing VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.5CVE-2026-105009Windows Server Update Service Elevation of Privilege VulnerabilityFix availableMicrosoft Windows Server 2012
1 min read - 9.8CVE-2026-105010Microsoft Windows Search Component Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.4CVE-2026-105013Microsoft Office SharePoint Remote Code Execution VulnerabilityFix availableMicrosoft Microsoft SharePoint Server Subscription Edition
1 min read - 7.0CVE-2026-103565Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1809
1 min read - 7.8CVE-2026-103568Windows Credential Providers Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.5CVE-2026-103569Windows IKE Extension Information Disclosure VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 8.8CVE-2026-103575Remote Desktop Client Remote Code Execution VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.5CVE-2026-103577Microsoft QUIC Security Feature Bypass VulnerabilityFix availableMicrosoft Windows 11 version 23H2
1 min read - 7.8CVE-2026-105003HID Class Driver Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.8CVE-2026-105004Windows Overlay Filter Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 8.1CVE-2026-105005Windows Schannel Remote Code Execution VulnerabilityFix availableMicrosoft Windows 11 version 26H1
1 min read - 7.8CVE-2026-100215Microsoft Graphics Component Remote Code Execution VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 8.8CVE-2026-102217WebDAV Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 8.8CVE-2026-102225Windows Text Shaping Remote Code Execution VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 8.8CVE-2026-102226Dynamics Business Central Elevation of Privilege VulnerabilityFix availableMicrosoft Microsoft Dynamics NAV 2018
1 min read - 8.8CVE-2026-102869.NET and Visual Studio Elevation of Privilege VulnerabilityFix availableMicrosoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2
1 min read - 7.8CVE-2026-103553Windows Partition Management Driver Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.0CVE-2026-103554Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1809
1 min read - 7.0CVE-2026-103555Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.5CVE-2026-103558Windows Routing and Remote Access Service (RRAS) Denial of Service VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.0CVE-2026-109453Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.8CVE-2026-102205Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.0CVE-2026-102207Windows Kernel Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.0CVE-2026-102208Windows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.0CVE-2026-102209Microsoft Graphics Component Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 11 version 26H1
1 min read - 9.8CVE-2026-102210Windows Text Shaping Remote Code Execution VulnerabilityFix availableMicrosoft Windows 10 Version 1809
1 min read - 7.0CVE-2026-102211Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 8.8CVE-2026-102214Windows Hyper-V Remote Code Execution VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.8CVE-2026-102215Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.8CVE-2026-102216Windows StateRepository API Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.8CVE-2026-102218Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.8CVE-2026-102220Windows VHD miniport driver Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.5CVE-2026-102192Windows Failover Cluster Denial of Service VulnerabilityFix availableMicrosoft Windows Server 2019
1 min read - 7.0CVE-2026-102193Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1809
1 min read - 7.0CVE-2026-102194Windows Graphics Kernel Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.0CVE-2026-102195Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 11 version 23H2
1 min read - 7.8CVE-2026-102196Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1809
1 min read - 7.0CVE-2026-102197Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1809
1 min read - 7.8CVE-2026-102201Microsoft Windows Media Foundation Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1809
1 min read - 7.8CVE-2026-102202Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 11 version 23H2
1 min read - 8.8CVE-2026-102203RPC Runtime Remote Code Execution VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.8CVE-2026-102204Windows Subsystem for Linux Elevation of Privilege VulnerabilityFix availableMicrosoft Windows Subsystem for Linux (WSL2)
1 min read - 7.0CVE-2026-102189Windows Storage Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 11 version 23H2
1 min read - 7.0CVE-2026-102191Windows Storage Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 11 version 23H2
1 min read - 7.0CVE-2026-70212Windows Security Center Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 8.8CVE-2026-100214Microsoft Dynamics 365 Business Central Remote Code Execution VulnerabilityFix availableMicrosoft Microsoft Dynamics NAV 2017
1 min read - 7.0CVE-2026-100216Windows Storage Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1809
1 min read - 7.8CVE-2026-100217Windows Group Policy Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 8.1CVE-2026-100218Remote Desktop Gateway Service Remote Code Execution VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 9.8CVE-2026-100219Microsoft QUIC Remote Code Execution VulnerabilityFix availableMicrosoft Windows 11 version 23H2
1 min read - 8.8CVE-2026-100220Windows Media Video Decoder Remote Code Execution VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 9.8CVE-2026-100222Network Policy Server (NPS) Remote Code Execution VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.0CVE-2026-100225Windows Storage Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.0CVE-2026-108396Windows Modern Device Management (MDM) Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1809
1 min read - 7.8CVE-2026-70023Windows Hyper-V Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1809
1 min read - 8.8CVE-2026-88219RPC Runtime Library Remote Code Execution VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 9.8CVE-2026-100202Windows Message Queuing Queue Manager Remote Code Execution VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.0CVE-2026-100203Windows Update Service Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.1CVE-2026-100205SysInternals Elevation of Privilege VulnerabilityFix availableMicrosoft Windows Sysinternals Process Monitor
1 min read - 7.3CVE-2026-100207Azure CycleCloud Remote Code Execution VulnerabilityCloudFix availableMicrosoft Azure CycleCloud 8.9.1
1 min read - 8.8CVE-2026-100209Microsoft Office Excel Remote Code Execution VulnerabilityFix availableMicrosoft Microsoft 365 Apps for Enterprise
1 min read - 8.8CVE-2026-100210Microsoft Office Excel Remote Code Execution VulnerabilityFix availableMicrosoft Microsoft 365 Apps for Enterprise
1 min read - 8.8CVE-2026-100211Microsoft Office Excel Remote Code Execution VulnerabilityFix availableMicrosoft Microsoft 365 Apps for Enterprise
1 min read - 8.8CVE-2026-100212Microsoft Office Excel Remote Code Execution VulnerabilityFix availableMicrosoft Microsoft 365 Apps for Enterprise
1 min read - 8.8CVE-2026-102870ASP.NET Core Remote Code Execution VulnerabilityRCEFix availableMicrosoft .NET 10.0 installed on Linux
1 min read - 7.1CVE-2026-105729SysInternals Elevation of Privilege VulnerabilityFix availableMicrosoft Windows Sysinternals Process Monitor
1 min read - 7.5CVE-2026-58280.NET Denial of Service VulnerabilityFix availableMicrosoft .NET 10.0 runtime
1 min read - 7.0CVE-2026-100200Windows Update Service Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 11 version 23H2
1 min read - 7.0CVE-2026-100201Windows Client License Service Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1809
1 min read - 8.8CVE-2026-96951Microsoft Windows Command Injection VulnerabilityExploitedFix availableMicrosoft Windows
1 min read - 8.1CVE-2026-88094Azure Storage Library Elevation of Privilege VulnerabilityCloudFix availableMicrosoft azure-storage-blob-batch
1 min read - 8.0CVE-2026-70049Microsoft Configuration Manager Elevation of Privilege VulnerabilityFix availableMicrosoft Microsoft Configuration Manager
1 min read - 8.1CVE-2026-70013Windows iSCSI Remote Code Execution VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 9.8CVE-2026-70024Windows Internet Information Services Remote Code Execution VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.5CVE-2026-70031Windows iSCSI Denial of Service VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 8.1CVE-2026-70038Windows iSCSI Remote Code Execution VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.0CVE-2026-70045Windows Work Folders Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1809
1 min read - 8.8CVE-2026-70068Windows Client-Side Caching (CSC) Service Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.8CVE-2026-69949Windows Client for NFS Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.0CVE-2026-69977Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.8CVE-2026-70008Windows IP Over USB Service Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 21H2
1 min read - 7.8CVE-2026-69923Windows AI Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 11 Version 24H2
1 min read - 7.8CVE-2026-69916Windows NTFS Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.8CVE-2026-69934Windows Spaceport.sys Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 11 version 23H2
1 min read - 8.8CVE-2026-69943Microsoft Office SharePoint Remote Code Execution VulnerabilityFix availableMicrosoft Microsoft SharePoint Server Subscription Edition
1 min read - 7.8CVE-2026-70048Windows Resilient File System (ReFS) Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.8CVE-2026-70052Microsoft PowerShell Remote Code Execution VulnerabilityFix availableMicrosoft Windows 11 version 23H2
1 min read - 9.8CVE-2026-69886Windows Imaging Component Remote Code Execution VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.8CVE-2026-69633Windows Update Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.8CVE-2026-69650Windows Key Distribution Center Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.8CVE-2026-69673Windows Update Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 11 version 23H2
1 min read - 7.8CVE-2026-69718Windows Update Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 11 version 23H2
1 min read - 7.0CVE-2026-69743Windows Program Compatibility Assistant Service Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 11 version 23H2
1 min read - 8.1CVE-2026-69830Windows DHCP Server Remote Code Execution VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.8CVE-2026-69882Windows Update Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 11 version 23H2
1 min read - 7.8CVE-2026-69354Windows Error Reporting Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.0CVE-2026-69387Windows Error Reporting Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.5CVE-2026-69651.NET Denial of Service VulnerabilityFix availableMicrosoft .NET 10.0 runtime
1 min read - 9.8CVE-2026-69883Windows iSCSI Remote Code Execution VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 7.8CVE-2026-68836Windows kernel32.dll Elevation of Privilege VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 8.8CVE-2026-69521Windows iSCSI Remote Code Execution VulnerabilityFix availableMicrosoft Windows 10 Version 1607
1 min read - 8.6CVE-2026-104935Ivanti Connect Secure Authentication Bypass by Spoofing VulnerabilityExploitedVerify fixIvanti Connect Secure
1 min read - 7.2CVE-2023-22894Strapi Cleartext Storage of Sensitive Information VulnerabilityRCEExploitedVerify fixStrapi Strapi
1 min read - 9.8CVE-2021-3199ONLYOFFICE Docs Server Path Traversal VulnerabilityRCEExploitedVerify fixONLYOFFICE Docs
1 min read - 8.1CVE-2016-3081Apache Struts Command Injection VulnerabilityExploitedVerify fixApache Struts
1 min read - 7.5CVE-2015-5477ISC BIND Data Processing Errors VulnerabilityExploitedVerify fixISC BIND
1 min read - 10.0CVE-2015-3306ProFTPD Improper Access Control VulnerabilityExploitedVerify fixProFTPD ProFTPD
1 min read - 8.7CVE-2026-88779Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityExploitedFix availableCitrix NetScaler
1 min read - 8.5CVE-2026-102490Zammad GmbH Zammad Improper Privilege Management VulnerabilityLPEExploitedFix availableZammad GmbH Zammad
1 min read - 8.7CVE-2026-102489Zammad GmbH Zammad Session Fixation VulnerabilityRCEExploitedFix availableZammad GmbH Zammad
1 min read - 9.8CVE-2026-104286Fortinet FortiMail Path Traversal VulnerabilityExploitedVerify fixFortinet FortiMail
1 min read - 9.8CVE-2026-76504Cisco Catalyst SD-WAN Manager Hex Encoding VulnerabilityExploitedVerify fixCisco Catalyst SD-WAN Manager
1 min read - 8.8CVE-2026-86950Apple Multiple Products Out-of-Bounds Write VulnerabilityRCEExploitedFix availableApple Multiple Products
1 min read - 9.5CVE-2026-88772Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityRCEExploitedFix availableCitrix NetScaler
1 min read - 9.5CVE-2026-88771Citrix NetScaler Improper Input Validation VulnerabilityExploitedFix availableCitrix NetScaler
1 min read - 8.1CVE-2026-87902WordPress Core Remote File Inclusion VulnerabilityRCEExploitedFix availableWordPress Core
1 min read - 6.9CVE-2026-67279Mikrotik RouterOS Improper Enforcement of Behavioral Workflow VulnerabilityExploitedFix availableMikroTik RouterOS
1 min read - 8.8CVE-2026-65660Microsoft SharePoint Code Injection VulnerabilityExploitedFix availableMicrosoft SharePoint
1 min read - 9.1CVE-2026-71362Adobe Commerce and Magento Incorrect Authorization VulnerabilityExploitedVerify fixAdobe Commerce and Magento
1 min read - 10.0CVE-2026-5430WSO2 Multiple Products Path Traversal VulnerabilityRCEExploitedFix availableWSO2 Multiple Products
1 min read - 9.8CVE-2026-94127F5 BIG-IP APM Heap-based Buffer Overflow VulnerabilityRCEExploitedFix availableF5 BIG-IP APM
1 min read - 9.8CVE-2026-93616Check Point Multiple Products Path Traversal VulnerabilityExploitedVerify fixCheck Point Multiple Products
1 min read - 10.0CVE-2026-93952Arista VeloCloud Orchestrator Improper Input Validation VulnerabilityExploitedVerify fixArista VeloCloud Orchestrator
1 min read - 9.8CVE-2026-85102Check Point Multiple Products Improper Certificate Validation VulnerabilityExploitedVerify fixCheck Point Multiple Products
1 min read - 8.8CVE-2026-7273Zyxel GS1900 Series Switches Stack-Based Buffer Overflow VulnerabilityExploitedVerify fixZyxel GS1900 Series Switches
1 min read - 8.8CVE-2026-53266Linux Kernel Out-of-Bounds Write VulnerabilityExploitedFix availableLinux Kernel
1 min read - 7.8CVE-2025-39964Linux Kernel Race Condition VulnerabilityExploitedVerify fixLinux Kernel
1 min read - 9.8CVE-2025-39682Linux Kernel Improper Check for Unusual or Exceptional Conditions VulnerabilityExploitedVerify fixLinux Kernel
1 min read - 7.8CVE-2026-87886Acronis Backup Incorrect Default Permissions VulnerabilityLPEExploitedFix availableAcronis Backup
1 min read - 10.0CVE-2026-76460Cisco Identity Services Engine Incorrect Use of Privileged APIs VulnerabilityExploitedVerify fixCisco Identity Services Engine
1 min read - 8.8CVE-2026-58704Google Pixel Improper Authorization VulnerabilityLPEExploitedVerify fixGoogle Pixel
1 min read - 9.8CVE-2026-76461Cisco Secure Email Gateway SQL Injection VulnerabilityExploitedVerify fixCisco Secure Email Gateway
1 min read - 10.0CVE-2026-85706GitLab Community Edition and Enterprise Edition Path Traversal VulnerabilityExploitedFix availableGitLab Community Edition and Enterprise Edition
1 min read - 9.9CVE-2026-84869ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization VulnerabilityExploitedVerify fixConnectWise ScreenConnect
1 min read - 7.5CVE-2026-42018JFrog Artifactory Improper Authentication VulnerabilityExploitedFix availableJFrog Artifactory
1 min read - 8.1CVE-2026-42016JFrog Artifactory Incorrect Authorization VulnerabilityExploitedFix availableJFrog Artifactory
1 min read - 9.2CVE-2026-86060MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command VulnerabilityExploitedFix availableMikroTik RouterOS
1 min read - 8.8CVE-2026-67277MikroTik RouterOS Missing Authentication for Critical Function VulnerabilityExploitedFix availableMikroTik RouterOS
1 min read - 8.8CVE-2026-87491Google Chromium V8 Out of Bounds Write VulnerabilityExploitedFix availableGoogle Chromium V8
1 min read - 9.3CVE-2026-19490Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel VulnerabilityExploitedVerify fixCitrix NetScaler
1 min read - 10.0CVE-2026-20079Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel VulnerabilityExploitedVerify fixCisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewa…
1 min read - 7.4CVE-2025-25249Fortinet Multiple Products Heap-based Buffer Overflow VulnerabilityExploitedVerify fixFortinet Multiple Products
1 min read - 7.8CVE-2026-81963Microsoft Windows Link Following VulnerabilityLPEExploitedFix availableMicrosoft Windows
1 min read - 7.8CVE-2026-85880Microsoft Windows Heap-Based Buffer Overflow VulnerabilityExploitedFix availableMicrosoft Windows
1 min read - 10.0CVE-2026-75650Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityExploitedVerify fixAdobe Commerce and Magento
1 min read - 10.0CVE-2026-86218N-able N-central Static Code Injection VulnerabilityRCEExploitedFix availableN-able N-central
1 min read - 8.8CVE-2026-85046Google Chromium V8 Type Confusion VulnerabilityExploitedFix availableGoogle Chromium V8
1 min read - 7.8CVE-2026-83549SonicWall SMA1000 Appliances OS Command Injection VulnerabilityRCEExploitedVerify fixSonicWall SMA1000 Appliances
1 min read - 10.0CVE-2026-83548SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityExploitedVerify fixSonicWall SMA1000 Appliances
1 min read - 9.8CVE-2026-82329JFrog Artifactory Improper Authentication VulnerabilityExploitedFix availableJFrog Artifactory
1 min read - 9.3CVE-2026-9586Sangoma Switchvox SQL Injection VulnerabilityRCEExploitedFix availableSangoma Switchvox
1 min read - 8.8CVE-2026-59822BerriAI LiteLLM Improper Authentication VulnerabilityExploitedVerify fixBerriAI LiteLLM
1 min read - 10.0CVE-2026-49869Kestra OSS OS Command Injection VulnerabilityRCEExploitedVerify fixKestra Kestra OSS
1 min read - 6.5CVE-2026-48710Kludex Starlette HTTP Request/Response Smuggling VulnerabilityExploitedVerify fixKludex Starlette
1 min read - 9.4CVE-2026-82078PaperCut NG/MF Unsafe Reflection VulnerabilityExploitedFix availablePaperCut NG/MF
1 min read - 8.8CVE-2026-81578PaperCut NG/MF Missing Authentication for Critical Function VulnerabilityExploitedFix availablePaperCut NG/MF
1 min read - 5.3CVE-2026-66384JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory VulnerabilityExploitedFix availableJFrog Artifactory
1 min read - 7.8CVE-2026-53362Linux Kernel Unspecified VulnerabilityLPEExploitedVerify fixLinux Kernel
1 min read - 9.8CVE-2023-49105ownCloud Improper Authentication VulnerabilityExploitedVerify fixownCloud ownCloud
1 min read - 9.8CVE-2026-60004Gitea Code Injection VulnerabilityRCEExploitedFix availableGitea Gitea
1 min read - 8.8CVE-2026-8452Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityExploitedFix availableCitrix NetScaler ADC and NetScaler Gateway
1 min read - 7.8CVE-2022-0995Linux Kernel Out-of-Bounds Write VulnerabilityExploitedVerify fixLinux Kernel
1 min read - 8.1CVE-2021-23758Ajax.NET Professional Deserialization of Untrusted Data VulnerabilityRCEExploitedVerify fixAjax.NET Professional Ajax.NET Professional
1 min read - 8.8CVE-2019-1068Microsoft SQL Server Remote Code Execution VulnerabilityRCEExploitedVerify fixMicrosoft SQL Server
1 min read - 7.8CVE-2015-5287Red Hat Automatic Bug Reporting Tool Privilege Escalation VulnerabilityLPEExploitedVerify fixRed Hat Automatic Bug Reporting Tool
1 min read - 7.4CVE-2015-3246Red Hat Libuser Race Condition VulnerabilityLPEExploitedVerify fixRed Hat Libuser
1 min read - 10.0CVE-2026-21962Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control VulnerabilityExploitedVerify fixOracle HTTP Server and Oracle Weblogic Server Proxy Plug-in
1 min read - 8.9CVE-2026-73570Zimbra Collaboration Suite (ZCS) OS Command Injection VulnerabilityRCEExploitedFix availableSynacor Zimbra Collaboration Suite (ZCS)
1 min read - 9.0CVE-2026-72530TrueConf Server Code Injection VulnerabilityRCEExploitedFix availableTrueConf Server
1 min read - 9.8CVE-2026-72529TrueConf Server Missing Authentication for Critical Function VulnerabilityExploitedFix availableTrueConf Server
1 min read - 9.3CVE-2026-64849MLflow Server-Side Request Forgery VulnerabilityExploitedVerify fixMLflow MLflow
1 min read - 9.8CVE-2026-65400Apple macOS Improper Authentication VulnerabilityExploitedFix availableApple macOS
1 min read - 9.8CVE-2026-59310Broadcom VMware vCenter Path Traversal VulnerabilityExploitedFix availableBroadcom VMware vCenter
1 min read - 9.1CVE-2026-55040Microsoft SharePoint Weak Authentication VulnerabilityExploitedFix availableMicrosoft SharePoint
1 min read - 9.8CVE-2026-33824Microsoft Internet Key Exchange (IKE) Service Extensions Double Free VulnerabilityRCEExploitedFix availableMicrosoft Internet Key Exchange (IKE) Service Extensions
1 min read - 9.4CVE-2025-62593Ray-Project Ray Code Injection VulnerabilityRCEExploitedVerify fixRay-Project Ray
1 min read - 8.6CVE-2026-20349Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection VulnerabilityExploitedVerify fixCisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat De…
1 min read - 7.0CVE-2026-68820Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free VulnerabilityExploitedFix availableMicrosoft Windows Ancillary Function Driver for WinSock
1 min read - 10.0CVE-2026-72898Metabase SQL Injection VulnerabilityExploitedFix availableMetabase Metabase
1 min read - 9.6CVE-2026-8037Progress LoadMaster Command Injection VulnerabilityExploitedFix availableProgress LoadMaster
1 min read - 9.8CVE-2026-63077JetBrains TeamCity Deserialization of Untrusted Data VulnerabilityRCEExploitedVerify fixJetBrains TeamCity
1 min read - 8.2CVE-2026-18556N-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityExploitedVerify fixN-able N-central
1 min read - 9.8CVE-2026-9198IBM Langflow Code Injection VulnerabilityRCEExploitedFix availableIBM Langflow
1 min read - 7.5CVE-2026-34486Apache Tomcat Missing Encryption of Sensitive Data VulnerabilityExploitedVerify fixApache Tomcat
1 min read - 8.2CVE-2026-18577N-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityExploitedVerify fixN-able N-central
1 min read - 5.3CVE-2026-20316Cisco Secure Firewall Management Center Use of Hard-coded Password VulnerabilityExploitedVerify fixCisco Secure Firewall Management Center (FMC)
1 min read - 10.0CVE-2026-16812Arista VeloCloud Orchestrator On-Prem OS Command Injection VulnerabilityRCEExploitedFix availableArista VeloCloud Orchestrator
1 min read - 5.3CVE-2025-68686Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityExploitedVerify fixFortinet FortiOS
1 min read - 9.3CVE-2026-16232Check Point SmartConsole Improper Authentication VulnerabilityExploitedVerify fixCheck Point SmartConsole
1 min read - 9.8CVE-2026-50522Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityExploitedFix availableMicrosoft SharePoint
1 min read - 5.9CVE-2026-60137WordPress Core SQL Injection VulnerabilityRCEExploitedFix availableWordPress Core
1 min read - 9.8CVE-2026-63030WordPress Core Interpretation Conflict VulnerabilityRCEExploitedFix availableWordPress Core
1 min read - 8.1CVE-2021-27137DD-WRT Stack-Based Buffer Overflow VulnerabilityExploitedFix availableDD-WRT DD-WRT
1 min read - 9.8CVE-2026-0770Langflow Inclusion of Functionality from Untrusted Control Sphere VulnerabilityExploitedVerify fixLangflow Langflow
1 min read - 9.8CVE-2026-58644Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityExploitedFix availableMicrosoft SharePoint
1 min read - 9.1CVE-2026-25089Fortinet FortiSandbox OS Command Injection VulnerabilityExploitedVerify fixFortinet FortiSandbox
1 min read - 9.1CVE-2026-39808Fortinet FortiSandbox OS Command Injection VulnerabilityExploitedVerify fixFortinet FortiSandbox
1 min read - 9.8CVE-2026-46817Oracle E-Business Suite Improper Privilege Management VulnerabilityExploitedVerify fixOracle E-Business Suite
1 min read - 7.5CVE-2023-4346KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism VulnerabilityExploitedVerify fixKNX Association KNX Protocol Connection Authorization Option 1
1 min read - 7.2CVE-2026-15410SonicWall SMA1000 Appliances Code Injection VulnerabilityRCEExploitedVerify fixSonicWall SMA1000 Appliances
1 min read - 10.0CVE-2026-15409SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityExploitedVerify fixSonicWall SMA1000 Appliances
1 min read - 5.3CVE-2026-56164Microsoft SharePoint Server Missing Authentication for Critical Function VulnerabilityExploitedFix availableMicrosoft SharePoint Server
1 min read - 7.8CVE-2026-56155Microsoft Active Directory Federation Services Insufficient Granularity of Access Control VulnerabilityExploitedFix availableMicrosoft Active Directory Federation Services
1 min read - 8.1CVE-2008-4128Cisco IOS Cross-Site Request Forgery VulnerabilityExploitedVerify fixCisco IOS
1 min read - 10.0CVE-2026-56291Balbooa Forms Unrestricted Upload of File with Dangerous Type VulnerabilityRCEExploitedVerify fixBalbooa Forms
1 min read - 10.0CVE-2026-48939iCagenda Unrestricted Upload of File with Dangerous Type VulnerabilityExploitedFix availableiCagenda iCagenda
1 min read - 10.0CVE-2026-48282Adobe ColdFusion Path Traversal VulnerabilityRCEExploitedVerify fixAdobe ColdFusion
1 min read - 10.0CVE-2026-56290Joomlack Page Builder Improper Access Control VulnerabilityRCEExploitedFix availableJoomlack Page Builder
1 min read - 8.4CVE-2026-55255Langflow Authorization Bypass Through User-Controlled Key VulnerabilityExploitedVerify fixLangflow Langflow
1 min read - 10.0CVE-2026-48908JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type VulnerabilityExploitedFix availableJoomShaper SP Page Builder
1 min read - 8.8CVE-2026-45659Microsoft SharePoint Server Deserialization of Untrusted Data VulnerabilityExploitedFix availableMicrosoft SharePoint Server
1 min read - 9.5CVE-2026-48558SimpleHelp Authentication Bypass VulnerabilityExploitedFix availableSimpleHelp SimpleHelp
1 min read - 9.3CVE-2026-12569PTC Windchill and FlexPLM Improper Input Validation VulnerabilityExploitedVerify fixPTC Windchill and FlexPLM
1 min read - 8.6CVE-2026-20230Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) VulnerabilityExploitedVerify fixCisco Unified Communications Manager
1 min read - 10.0CVE-2026-34910Ubiquiti UniFi OS Improper Input Validation VulnerabilityExploitedFix availableUbiquiti UniFi OS
1 min read - 10.0CVE-2026-34909Ubiquiti UniFi OS Path Traversal VulnerabilityExploitedFix availableUbiquiti UniFi OS
1 min read - 10.0CVE-2026-34908Ubiquiti UniFi OS Improper Access Control VulnerabilityExploitedFix availableUbiquiti UniFi OS
1 min read - 9.8CVE-2025-67038Lantronix EDS5000 Code Injection VulnerabilityRCEExploitedFix availableLantronix EDS5000
1 min read - 9.8CVE-2026-20253Splunk Enterprise Missing Authentication for Critical Function VulnerabilityExploitedFix availableSplunk Enterprise
1 min read - 10.0CVE-2026-48907Widget Factory Joomla Content Editor Improper Access Control VulnerabilityExploitedVerify fixWidget Factory Joomla Content Editor
1 min read - 6.5CVE-2026-20262Cisco Catalyst SD-WAN Manager Directory or Path Traversal VulnerabilityExploitedVerify fixCisco Catalyst SD-WAN Manager
1 min read - 8.5CVE-2026-54420LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following VulnerabilityExploitedFix availableLiteSpeed cPanel Plugin
1 min read - 9.8CVE-2026-35273Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function VulnerabilityExploitedVerify fixOracle PeopleSoft Enterprise PeopleTools
1 min read - 10.0CVE-2026-10520Ivanti Sentry OS Command Injection VulnerabilityRCEExploitedVerify fixIvanti Sentry
1 min read - 8.8CVE-2026-11645Google Chromium V8 Out-of-Bounds Read and Write VulnerabilityExploitedFix availableGoogle Chromium V8
1 min read - 5.8CVE-2026-7473Arista Extensible Operating System Incomplete Comparison with Missing Factors VulnerabilityExploitedVerify fixArista Extensible Operating System
1 min read - 7.8CVE-2026-20245Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output VulnerabilityExploitedVerify fixCisco Catalyst SD-WAN Manager
1 min read - 9.3CVE-2026-50751Check Point Security Gateway Improper Authentication VulnerabilityExploitedVerify fixCheck Point Security Gateway
1 min read - 8.7CVE-2026-42271BerriAI LiteLLM Command Injection VulnerabilityExploitedVerify fixBerriAI LiteLLM
1 min read - 7.5CVE-2026-28318SolarWinds Serv-U Uncontrolled Resource Consumption VulnerabilityExploitedVerify fixSolarWinds Serv-U
1 min read - 9.3CVE-2026-45247Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data VulnerabilityRCEExploitedFix availableMirasvit Mirasvit Full Page Cache Warmer
1 min read - 8.4CVE-2025-48595Android Framework Integer Overflow VulnerabilityLPEExploitedVerify fixAndroid Framework
1 min read - 7.8CVE-2022-0492Linux Kernel Improper Authentication VulnerabilityLPEExploitedVerify fixLinux Kernel
1 min read - 7.5CVE-2024-21182Oracle WebLogic Server Unspecified VulnerabilityExploitedVerify fixOracle WebLogic Server
1 min read - 7.8CVE-2026-0257Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityExploitedFix availablePalo Alto Networks PAN-OS
1 min read - 9.3CVE-2026-48027Nx Console Embedded Malicious Code VulnerabilityExploitedVerify fixNx Nx Console
1 min read - 9.8CVE-2026-8398Daemon Tools Lite Embedded Malicious Code VulnerabilityExploitedVerify fixDaemon Daemon Tools Lite
1 min read - 9.6CVE-2026-45321TanStack Unspecified VulnerabilityExploitedVerify fixTanStack TanStack
1 min read - 10.0CVE-2026-48172LiteSpeed cPanel Plugin Privilege Escalation VulnerabilityExploitedFix availableLiteSpeed cPanel Plugin
1 min read - 9.8CVE-2026-9082Drupal Core SQL Injection VulnerabilityRCEExploitedFix availableDrupal Core
1 min read - 6.7CVE-2026-34926Trend Micro Apex One (On-Premise) Directory Traversal VulnerabilityExploitedFix availableTrend Micro Apex One
1 min read - 9.4CVE-2025-34291Langflow Origin Validation Error VulnerabilityExploitedVerify fixLangflow Langflow
1 min read - 7.8CVE-2026-41091Microsoft Defender Link Following VulnerabilityExploitedFix availableMicrosoft Defender
1 min read - 4.0CVE-2026-45498Microsoft Defender Denial of Service VulnerabilityExploitedFix availableMicrosoft Defender
1 min read - 8.8CVE-2010-0806Microsoft Internet Explorer Use-After-Free VulnerabilityExploitedVerify fixMicrosoft Internet Explorer
1 min read - 8.8CVE-2010-0249Microsoft Internet Explorer Use-After-Free VulnerabilityExploitedVerify fixMicrosoft Internet Explorer
1 min read - 8.8CVE-2009-3459Adobe Acrobat and Reader Heap-Based Buffer Overflow VulnerabilityExploitedVerify fixAdobe Acrobat and Reader
1 min read - 8.8CVE-2009-1537Microsoft DirectX NULL Byte Overwrite VulnerabilityExploitedVerify fixMicrosoft DirectX
1 min read - 9.8CVE-2008-4250Microsoft Windows Buffer Overflow VulnerabilityExploitedVerify fixMicrosoft Windows
1 min read - 8.1CVE-2026-42897Microsoft Exchange Server Cross-Site Scripting VulnerabilityExploitedFix availableMicrosoft Microsoft
1 min read - 10.0CVE-2026-20182Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityExploitedVerify fixCisco Catalyst SD-WAN
1 min read - 9.3CVE-2026-42208BerriAI LiteLLM SQL Injection VulnerabilityExploitedVerify fixBerriAI LiteLLM
1 min read