CVEs published February 4, 2026
251 CVEs were published on February 4, 2026: 21 critical, 78 high. Browse them by severity, product and exploitation status.
- Published
- 251
- Critical
- 21
- High
- 78
- Medium
- 73
- Low
- 8
- Unrated
- 71
- Now in CISA KEV
- 0
- Fix available
- 136
Most affected products
- Linux
- 79
- n8n-io n8n · n8n
- 10
- Samsung Mobile Devices
- 7
- Autodesk 3ds Max
- 6
- chainguard-dev melange · chainguard.dev/melange
- 4
- InternationalColorConsortium iccDEV
- 4
- Six Apart Movable Type
- 4
- WeKan
- 4
- chainguard-dev apko · chainguard.dev/apko
- 3
- espressif esp-idf
- 3
Critical 21
- CVE-2025-62616AutoGPT has SSRF vulnerability in SendDiscordFileBlockSignificant-Gravitas AutoGPT
- CVE-2025-62615AutoGPT has SSRF vulnerability in ReadRSSFeedBlockSignificant-Gravitas AutoGPT
- CVE-2026-25579Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>`…navidrome · github.com/navidrome/navidrome
- CVE-2026-25547Uncontrolled Resource Consumption in @isaacs/brace-expansionisaacs brace-expansion · @isaacs/brace-expansion
- CVE-2026-25539SiYuan has Arbitrary File Write via /api/file/copyFile leading to RCEsiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-25526JinJava Bypass through ForTag leads to Arbitrary Java ExecutionHubSpot jinjava · com.hubspot.jinjava:jinjava
- CVE-2026-25521Locutus is vulnerable to Prototype Pollutionlocutusjs locutus · locutus
- CVE-2026-25512Group-Office is vulnerable to RCE due to Command Injection via TNEF Attachment HandlerIntermesh groupoffice
- CVE-2025-13375IBM Common Cryptographic Architecture Arbitrary Command ExecutionIBM Common Cryptographic Architecture · IBM 4769 Developers…
- CVE-2026-25505Bambuddy Uses Hardcoded Secret Key + Many API Endpoints do not Require Authenticationmaziggy bambuddy · bambuddy
- CVE-2026-25481Langroid has WAF Bypass Leading to RCE in TableChatAgentlangroid
- CVE-2026-25160Alist has Insecure TLS ConfigAlistGo alist · github.com/alist-org/alist +1
- CVE-2026-21893n8n Vulnerable to Command Injection in Community Package Installationn8n-io n8n · n8n
- CVE-2025-64712Unstructured has Path Traversal via Malicious MSG Attachment that Allows Arbitrary File WriteUnstructured-IO unstructured · unstructured
- CVE-2026-25115n8n is vulnerable to Python sandbox escapen8n-io n8n · n8n
- CVE-2026-25056n8n Arbitrary File Write leading to RCE in n8n Merge Noden8n-io n8n · n8n
- CVE-2026-25053n8n is Vulnerable to OS Command Injection in Git Noden8n-io n8n · n8n
- CVE-2026-25052n8n Improper File Access Controls Allow Arbitrary File Read by Authenticated Usersn8n-io n8n · n8n
- CVE-2026-25049n8n Has an Expression Escape Vulnerability Leading to RCEn8n-io n8n · n8n
- CVE-2025-5329SQLi in Martcode Software's Delta Course AutomationMartcode Software Delta Course Automation
- CVE-2025-59818Authenticated Remote Code Execution via the file name of an uploaded fileZenitel TCIS-3+
High 78
- CVE-2025-13192Popup builder with Gamification <= 2.2.0 - Unauthenticated SQL Injection via Multiple REST API Endpointsroxnor Popup builder with Gamification, Multi-Step Popups,…
- CVE-2019-25286_GCafé 3.0 - 'gbClienService' Unquoted Service PathGcafe _GCafé
- CVE-2019-25283Shrew Soft VPN Client 2.2.2 - 'iked' Unquoted Service PathShrew Soft VPN Client
- CVE-2019-25288Wacom WTabletService 6.6.7-3 - 'WTabletServicePro' Unquoted Service PathWacom WTabletService
- CVE-2019-25287Adaware Web Companion version 4.8.2078.3950 - 'WCAssistantService' Unquoted Service PathWebcompanion Adaware Web Companion version
- CVE-2019-25285Alps Pointing-device Controller 8.1202.1711.04 - 'ApHidMonitorService' Unquoted Service PathAlps device Controller
- CVE-2019-25281NCP_Secure_Entry_Client 9.2 - Unquoted Service Pathsncp-e NCP_Secure_Entry_Client
- CVE-2019-25276Studio 5000 Logix Designer 30.01.00 - 'FactoryTalk Activation Service' Unquoted Service PathRockwellautomation Studio
- CVE-2019-25275BartVPN 1.2.2 - 'BartVPNService' Unquoted Service PathFileHorse BartVPN
- CVE-2019-25274ProShow Producer 9.0.3797 - Unquoted Service PathPhotodex ProShow Producer
- CVE-2019-25273Easy-Hide-IP 5.0.0.3 - 'EasyRedirect' Unquoted Service PathEasy-Hide-Ip IP
- CVE-2019-25272TexasSoft CyberPlanet 6.4.131 - 'CCSrvProxy' Unquoted Service PathTenaxsoft TexasSoft CyberPlanet
- CVE-2019-25271NETGATE Data Backup 3.0.620 - 'NGDatBckpSrv' Unquoted Service PathNETGATE Data Backup
- CVE-2019-25269Amiti Antivirus 25.0.640 - Unquoted Service Path VulnerabilityNetgate Amiti Antivirus
- CVE-2019-25267Wing FTP Server 6.0.7 - Unquoted Service PathWftpserver Wing FTP Server
- CVE-2026-22038AutoGPT's API Keys and Secrets Logged in Plaintext in Stagehand Integration BlocksSignificant-Gravitas AutoGPT
- CVE-2026-25585iccDEV vulnerable to OOB in CIccXform3DLut::Apply()InternationalColorConsortium iccDEV
- CVE-2026-25584iccDEV vulnerable to Stack-based Buffer Overflow in CIccTagFloatNum::GetValues()InternationalColorConsortium iccDEV
- CVE-2026-25583iccDEV vulnerable to Heap Buffer Overflow in CIccFileIO::Read8()InternationalColorConsortium iccDEV
- CVE-2026-25582iccDEV vulnerable to Heap Buffer Overflow in CIccIO::WriteUInt16Float()InternationalColorConsortium iccDEV
- CVE-2026-25575NavigaTUM has a Path Traversal Vulnerability in the propose_edits functionalityTUM-Dev NavigaTUM
- CVE-2026-25546Godot MCP is vulnerable to Command Injection via unsanitized projectPathCoding-Solo godot-mcp · @coding-solo/godot-mcp
- CVE-2026-25538Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakagedevtron-labs devtron · github.com/devtron-labs/devtron
- CVE-2026-25536@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reusemodelcontextprotocol typescript-sdk · @modelcontextprotocol…
- CVE-2026-25519OpenSlides has incorrect access control vulnerability in authentication serviceOpenSlides
Show all 78 entriesShow fewer entries
- CVE-2026-25511Group-Office is vulnerable to SSRF and File Read in WOPI service discoveryIntermesh groupoffice
- CVE-2026-25499terraform-provider-proxmox has insecure sudo recommendation in the documentationbpg terraform-provider-proxmox · github.com/bpg/terraform-p…
- CVE-2026-25513FacturaScripts has SQL Injection vulnerability in API ORDER BY ClauseNeoRazorX facturascripts · facturascripts/facturascripts
- CVE-2026-25514FacturaScripts has SQL Injection vulnerability in Autocomplete ActionsNeoRazorX facturascripts · facturascripts/facturascripts
- CVE-2026-25157OpenClaw/Clawdbot has OS Command Injection via Project Root Path in sshNodeCommandopenclaw · clawdbot
- CVE-2026-25161Alist vulnerable to Path Traversal in multiple file operation handlersAlistGo alist · github.com/alist-org/alist/v3 +1
- CVE-2026-24884Compressing Vulnerable to Arbitrary File Write via Symlink Extractionnode-modules compressing · compressing
- CVE-2026-25143melange affected by potential host command execution via license-check YAML mode patch pipelinechainguard-dev melange · chainguard.dev/melange
- CVE-2026-24844melange pipeline working-directory could allow command injectionchainguard-dev melange · chainguard.dev/melange
- CVE-2026-24843melange QEMU runner could write files outside workspace directorychainguard-dev melange · chainguard.dev/melange
- CVE-2026-23897Apollo Server is vulnerable to denial of service with `startStandaloneServer`apollographql apollo-server · apollo-server +1
- CVE-2026-25140apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streamschainguard-dev apko · chainguard.dev/apko
- CVE-2026-25121apko is vulnerable to path traversal in apko dirFS which allows filesystem writes outside basechainguard-dev apko · chainguard.dev/apko
- CVE-2026-0536GIF File Parsing Stack Based Buffer OverflowAutodesk 3ds Max
- CVE-2026-25139RIOT Vulnerable to Multiple Out-of-Bounds Read When Processing Received 6LoWPAN SFR FragmentsRIOT-OS RIOT
- CVE-2025-69215OpenSTAManager has an SQL Injection in the Stampe Moduledevcode-it openstamanager · devcode-it/openstamanager
- CVE-2025-69213OpenSTAManager has a SQL Injection in ajax_complete.php (get_sedi endpoint)devcode-it openstamanager · devcode-it/openstamanager
- CVE-2026-25055n8n Arbitrary File Write on Remote Systems via SSH Noden8n-io n8n · n8n
- CVE-2026-25054n8n is Vulnerable to Stored Cross-Site Scripting via Markdown Rendering in Workflow UIn8n-io n8n · n8n
- CVE-2026-25051n8n Improper CSP Enforcement in Webhook Responses May Allow Stored XSSn8n-io n8n · n8n
- CVE-2025-61917n8n Unsafe Buffer Allocation Allows In-Process Memory Disclosure in Task Runnern8n-io n8n · n8n
- CVE-2026-0662Untrusted Search Path Vulnerability when opening max FilesAutodesk 3ds Max
- CVE-2026-0660Stack Based Buffer Overflow in GIF File ParsingAutodesk 3ds Max
- CVE-2026-0661Out-of-Bounds Write in RGB File ParsingAutodesk 3ds Max
- CVE-2026-0537RGB File Parsing Memory CorruptionAutodesk 3ds Max
- CVE-2026-0538GIF File Parsing Out-of-Bounds WriteAutodesk 3ds Max
- CVE-2026-20119Cisco TelePresence Collaboration Endpoint Software and RoomOS Software Denial of Service VulnerabilityCisco RoomOS Software · Cisco TelePresence Endpoint Software
- CVE-2026-20098Cisco Meeting Management Arbitrary File Upload VulnerabilityCisco Meeting Management
- CVE-2026-23105net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_agLinux
- CVE-2026-23103ipvlan: Make the addrs_lock be per portLinux
- CVE-2026-23098netrom: fix double-free in nr_route_frame()Linux
- CVE-2026-23095gue: Fix skb memleak with inner IP protocol 0.Linux
- CVE-2026-23077mm/vma: fix anon_vma UAF on mremap() faulted, unfaulted mergeLinux
- CVE-2026-23074net/sched: Enforce that teql can only be used as root qdiscLinux
- CVE-2026-23066rxrpc: Fix recvmsg() unconditional requeueLinux
- CVE-2026-0659USD File Parsing Out-of-Bounds Write VulnerabilityAutodesk USD for Arnold · Autodesk Arnold +1
- CVE-2025-71192ALSA: ac97: fix a double free in snd_ac97_controller_register()Linux
- CVE-2025-15368SportsPress <= 2.7.26 - Authenticated (Contributor+) Local File Inclusion via Shortcodethemeboy SportsPress – Sports Club & League Manager
- CVE-2026-24735Apache Answer: Revision API Improper Access Control leads to Information DisclosureApache Software Foundation Apache Answer · github.com/apach…
- CVE-2025-15268Infility Global <= 2.14.46 - Unauthenticated SQL Injection via Predictable API Key and IP Whitelist BypassInfility Global
- CVE-2025-15285SEO Flow by LupsOnline <= 2.2.1 - Unauthenticated Arbitrary Post/Category ModificationSEO Flow by LupsOnline
- CVE-2026-1819Stored XSS in Karel Electronics' ViPortKarel Electronics Industry and Trade ViPort
- CVE-2026-1756WP FOFT Loader <= 2.1.39 - Authenticated (Author+) Arbitrary File Uploadseezee WP FOFT Loader
- CVE-2026-20987Improper input validation in GalaxyDiagnostics prior to version 3.5.050 allows local privileged attackers to execute privileged commands.Samsung Mobile GalaxyDiagnostics
- CVE-2026-20985Improper input validation in Samsung Members prior to version 5.6.00.11 allows remote attackers to connect arbitrary URL and launch…Samsung Mobile Samsung Members
- CVE-2026-20983Improper export of android application components in Samsung Dialer prior to SMR Feb-2026 Release 1 allows local attackers to launch…Samsung Mobile Devices
- CVE-2026-20980Improper input validation in PACM prior to SMR Feb-2026 Release 1 allows physical attacker to execute arbitrary commands.Samsung Mobile Devices
- CVE-2026-20979Improper privilege management in Settings prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with…Samsung Mobile Devices
- CVE-2025-29867Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Hancom Inc.Hancom Office
- CVE-2025-69618An arbitrary file overwrite vulnerability in the file import process of Tarot, Astro & Healing v11.4.0 allows attackers to overwrite…
- CVE-2025-69621An arbitrary file overwrite vulnerability in the file import process of Comic Book Reader v1.0.95 allows attackers to overwrite critical…
- CVE-2025-70997A vulnerability has been discovered in eladmin v2.7 and before.
- CVE-2025-71031Water-Melon Melon commit 9df9292 and below is vulnerable to Denial of Service.
Medium, low and unrated 152
- CVE-2026-1896WeKan Migration Operation comprehensiveBoardMigration.js ComprehensiveBoardMigration MigrationBleed access controlWeKan
- CVE-2025-22873Improper access to parent directory of root in osGo standard library os · stdlib
- CVE-2026-1895WeKan Attachment Storage lists.js applyWipLimit ListWIPBleed access controlWeKan
- CVE-2026-1894WeKan REST API checklistItems.js Checklist REST Bleed improper authorizationWeKan
- CVE-2026-25541Bytes is vulnerable to integer overflow in BytesMut::reservetokio-rs bytes · bytes
- CVE-2026-1892WeKan REST API boards.js setBoardOrgs improper authorizationWeKan
- CVE-2026-25578Navidrome is vulnerable to XSS via comment from song metadatanavidrome · github.com/navidrome/navidrome
- CVE-2026-25543HtmlSanitizer has a bypass via template tagmganss HtmlSanitizer · HtmlSanitizer
- CVE-2026-25540Mastodon's signature-dependent ActivityPub collection responses cached under signature-independent keys (Web Cache Poisoning via…mastodon
- CVE-2026-1884ZenTao Webhook model.php fetchHook server-side request forgeryZenTao
- CVE-2026-25537jsonwebtoken has Type Confusion that leads to potential authorization bypassKeats jsonwebtoken · jsonwebtoken
- CVE-2026-25523Magento's X-Original-Url header can expose admin urlOpenMage magento-lts · openmage/magento-lts
- CVE-2024-51451Multiple Vulnerabilities in IBM Concert SoftwareIBM Concert
- CVE-2024-43181Multiple Vulnerabilities in IBM Concert SoftwareIBM Concert
- CVE-2026-25518cert-manager-controller DoS via Specially Crafted DNS Responsecert-manager · github.com/cert-manager/cert-manager
- CVE-2024-40685IBM Operations Analytics - Log Analysis is affected by CSRF Token Replay AttackIBM Operations Analytics - Log Analysis
- CVE-2025-2134IBM Jazz Reporting Service Denial of ServiceIBM Jazz Reporting Service
- CVE-2025-27550IBM Jazz Reporting Service Information DisclosureIBM Jazz Reporting Service
- CVE-2025-1823IBM Jazz Reporting Service Denial of ServiceIBM Jazz Reporting Service
- CVE-2024-39724IBM Db2 Big SQL on Cloud Pak for Data is vulnerable to a denial of service due to lack of throttling on an APIIBM Db2 Big SQL on Cloud Pak for Data
- CVE-2026-25517Wagtail has improper permission handling on admin preview endpointswagtail
- CVE-2023-38281Multiple Vulnerabilities in IBM Cloud Pak SystemIBM Cloud Pak System · IBM OS Image for Red Hat Linux Syste…
- CVE-2023-38017Multiple Vulnerabilities in IBM Cloud Pak SystemIBM Cloud Pak System · IBM OS Image for Red Hat Linux Syste…
- CVE-2025-15555Open5GS VoLTE Cx-Test hss-cx-path.c hss_ogs_diam_cx_mar_cb stack-based overflowOpen5GS
- CVE-2026-1554Central Authentication System (CAS) Server - Less critical - XML Element Injection - SA-CONTRIB-2026-007Drupal Central Authentication System (CAS) Server · drupal/…
Show all 152 entriesShow fewer entries
- CVE-2026-1553Drupal Canvas - Moderately critical - Access bypass - SA-CONTRIB-2026-006Drupal Canvas · drupal/canvas
- CVE-2026-0948Microsoft Entra ID SSO Login - Critical - Access bypass - SA-CONTRIB-2026-005Drupal Microsoft Entra ID SSO Login · drupal/social_auth_en…
- CVE-2026-0947AT Internet Piano Analytics - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-004Drupal AT Internet Piano Analytics · drupal/pianoanalytics
- CVE-2026-0946AT Internet SmartTag - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-003Drupal AT Internet SmartTag · drupal/atsmarttag
- CVE-2026-0945Role Delegation - Moderately critical - Access bypass - SA-CONTRIB-2026-002Drupal Role Delegation · drupal/role_delegation
- CVE-2026-0944Group invite - Moderately critical - Access bypass - SA-CONTRIB-2026-001Drupal Group invite · drupal/ginvite
- CVE-2023-38010Multiple Vulnerabilities in IBM Cloud Pak SystemIBM Cloud Pak System · IBM OS Image for Red Hat Linux Syste…
- CVE-2026-25475OpenClaw Vulnerable to Local File Inclusion via MEDIA: Path Extractionopenclaw
- CVE-2026-25145melange has a path traversal in license-path which allows reading files outside workspacechainguard-dev melange · chainguard.dev/melange
- CVE-2025-68699NanoMQ $share/ Subscription Validation and Forwarding Parsing Inconsistency: NULL Pointer Increment Causes Crashnanomq
- CVE-2026-25122apko is vulnerable to unbounded resource consumption in expandapk.Split on attacker-controlled .apk streamschainguard-dev apko · chainguard.dev/apko
- CVE-2026-25508ESF-IDF Has Memory Safety Vulnerabilities in BLE Provisioningespressif esp-idf
- CVE-2026-25507ESF-IDF Has Use-after-free Vulnerability in BLE Provisioningespressif esp-idf
- CVE-2026-25532ESF-IDF is Vulnerable to WPS Enrollee Fragment Integer Underflowespressif esp-idf
- CVE-2026-22044GLPI is Vulnerable to Authenticated SQL Injectionglpi-project glpi
- CVE-2026-23624GLPI is vulnerable to session stealing on externally authenticated user changeglpi-project glpi
- CVE-2026-22247GLPI is Vulnerable to SSRF via Webhooksglpi-project glpi
- CVE-2026-20111Cisco Prime Infrastructure Stored Cross-Site Scripting VulnerabilityCisco Prime Infrastructure
- CVE-2026-20123Cisco Prime Infrastructure and Evolved Programmable Network Manager Open Redirect VulnerabilityCisco Evolved Programmable Network Manager · Cisco Prime In…
- CVE-2026-20056Cisco Secure Web Appliance TBD Bypass VulnerabilityCisco Secure Web Appliance
- CVE-2026-23110scsi: core: Wake up the error handler when final completions race against each otherLinux
- CVE-2026-23109fs/writeback: skip AS_NO_DATA_INTEGRITY mappings in wait_sb_inodes()Linux
- CVE-2026-23108can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leakLinux
- CVE-2026-23107arm64/fpsimd: signal: Allocate SSVE storage when restoring ZALinux
- CVE-2026-23106timekeeping: Adjust the leap state for the correct auxiliary timekeeperLinux
- CVE-2026-23104ice: fix devlink reload call traceLinux
- CVE-2026-23102arm64/fpsimd: signal: Fix restoration of SVE contextLinux
- CVE-2026-23101leds: led-class: Only Add LED to leds_list when it is fully readyLinux
- CVE-2026-23100mm/hugetlb: fix hugetlb_pmd_shared()Linux
- CVE-2026-23099bonding: limit BOND_MODE_8023AD to Ethernet devicesLinux
- CVE-2026-23097migrate: correct lock ordering for hugetlb file foliosLinux
- CVE-2026-23096uacce: fix cdev handling in the cleanup pathLinux
- CVE-2026-23094uacce: fix isolate sysfs check conditionLinux
- CVE-2026-23093ksmbd: smbd: fix dma_unmap_sg() nentsLinux
- CVE-2026-23092iio: dac: ad3552r-hs: fix out-of-bound write in ad3552r_hs_write_data_sourceLinux
- CVE-2026-23091intel_th: fix device leak on output open()Linux
- CVE-2026-23090slimbus: core: fix device reference leak on report presentLinux
- CVE-2026-23089ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()Linux
- CVE-2026-23088tracing: Fix crash on synthetic stacktrace field usageLinux
- CVE-2026-23087scsi: xen: scsiback: Fix potential memory leak in scsiback_remove()Linux
- CVE-2026-23086vsock/virtio: cap TX credit to local buffer sizeLinux
- CVE-2026-23085irqchip/gic-v3-its: Avoid truncating memory addressesLinux
- CVE-2026-23084be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_listLinux
- CVE-2026-23083fou: Don't allow 0 for FOU_ATTR_IPPROTO.Linux
- CVE-2026-23082can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() errorLinux
- CVE-2026-23081net: phy: intel-xway: fix OF node refcount leakageLinux
- CVE-2026-23080can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leakLinux
- CVE-2026-23079gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify()Linux
- CVE-2026-23078ALSA: scarlett2: Fix buffer overflow in config retrievalLinux
- CVE-2026-23076ALSA: ctxfi: Fix potential OOB access in audio mixer handlingLinux
- CVE-2026-23075can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leakLinux
- CVE-2026-23073wifi: rsi: Fix memory corruption due to not set vif driver data sizeLinux
- CVE-2026-23072l2tp: Fix memleak in l2tp_udp_encap_recv().Linux
- CVE-2026-23071regmap: Fix race condition in hwspinlock irqsave routineLinux
- CVE-2026-23070Octeontx2-af: Add proper checks for fwdataLinux
- CVE-2026-23069vsock/virtio: fix potential underflow in virtio_transport_get_credit()Linux
- CVE-2026-23068spi: spi-sprd-adi: Fix double free in probe error pathLinux
- CVE-2026-23067iommu/io-pgtable-arm: fix size_t signedness bug in unmap pathLinux
- CVE-2026-23065platform/x86/amd: Fix memory leak in wbrf_record()Linux
- CVE-2026-23064net/sched: act_ife: avoid possible NULL derefLinux
- CVE-2026-23063uacce: ensure safe queue release with state managementLinux
- CVE-2026-23062platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macroLinux
- CVE-2026-23061can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leakLinux
- CVE-2026-23060crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN specLinux
- CVE-2026-23059scsi: qla2xxx: Sanitize payload size to prevent member overflowLinux
- CVE-2026-23058can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leakLinux
- CVE-2026-23057vsock/virtio: Coalesce only linear skbLinux
- CVE-2026-23056uacce: implement mremap in uacce_vm_ops to return -EPERMLinux
- CVE-2025-71199iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driverLinux
- CVE-2025-71198iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detectionLinux
- CVE-2025-71197w1: therm: Fix off-by-one buffer overflow in alarms_storeLinux
- CVE-2026-23055i2c: riic: Move suspend handling to NOIRQ phaseLinux
- CVE-2026-23054net: hv_netvsc: reject RSS hash key programming without RX indirection tableLinux
- CVE-2026-23053NFS: Fix a deadlock involving nfs_release_folio()Linux
- CVE-2026-23052ftrace: Do not over-allocate ftrace memoryLinux
- CVE-2026-23051drm/amdgpu: fix drm panic null pointer when driver not support atomicLinux
- CVE-2026-23050pNFS: Fix a deadlock when returning a delegation during open()Linux
- CVE-2026-23049drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panelLinux
- CVE-2025-71196phy: stm32-usphyc: Fix off by one in probe()Linux
- CVE-2025-71195dmaengine: xilinx: xdma: Fix regmap max_registerLinux
- CVE-2025-71194btrfs: fix deadlock in wait_current_trans() due to ignored transaction typeLinux
- CVE-2025-71193phy: qcom-qusb2: Fix NULL pointer dereference on early suspendLinux
- CVE-2026-23048udp: call skb_orphan() before skb_attempt_defer_free()Linux
- CVE-2026-23047libceph: make calc_target() set t->paused, not just clear itLinux
- CVE-2026-23046virtio_net: fix device mismatch in devm_kzalloc/devm_kfreeLinux
- CVE-2026-23045net/ena: fix missing lock when update devlink paramsLinux
- CVE-2026-23044PM: hibernate: Fix crash when freeing invalid crypto compressorLinux
- CVE-2026-23043btrfs: fix NULL pointer dereference in do_abort_log_replay()Linux
- CVE-2026-23042idpf: fix aux device unplugging when rdma is not supported by vportLinux
- CVE-2026-23041bnxt_en: Fix NULL pointer crash in bnxt_ptp_enable during error cleanupLinux
- CVE-2026-23040wifi: mac80211_hwsim: fix typo in frequency notificationLinux
- CVE-2026-22549BIG-IP Container Ingress Services vulnerabilityF5 BIG-IP Container Ingress Services
- CVE-2026-1642NGINX vulnerabilityF5 NGINX Open Source · F5 NGINX Plus
- CVE-2026-22548BIG-IP Advanced WAF and ASM vulnerabilityF5 BIG-IP
- CVE-2026-20732BIG-IP Configuration utility vulnerabilityF5 BIG-IP
- CVE-2026-20730BIG-IP Edge Client for Windows vulnerabilityF5 BIG-IP Edge Client
- CVE-2025-14740Docker Desktop for Windows Incorrect Permission Assignment Privilege Escalation VulnerabilitiesDocker Desktop
- CVE-2026-0873Privilege Elevation in Ercom Cryptobox administration consoleErcom Cryptobox
- CVE-2025-41085Stored Cross-Site Scripting (XSS) in Apidog web platformApidog Web Platform
- CVE-2026-1622Unredacted data exposure in query.logneo4j Enterprise Edition · neo4j Community Edition +1
- CVE-2026-0816All push notification for WP <= 1.5.3 - Authenticated (Administrator+) SQL Injection via 'delete_id' Parametergtlwpdev All push notification for WP
- CVE-2025-15487Code Explorer <= 1.4.6 - Authenticated (Administrator+) Arbitrary File Read via 'file' Parameterqriouslad Code Explorer
- CVE-2026-1370SIBS - WooCommerce <= 2.2.0 - Authenticated (Admin+) SQL Injection via 'referencedId' Parametercomprassibs SIBS woocommerce payment gateway
- CVE-2026-0743WP Content Permission <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'ohmem-message' Parameterorenhav WP Content Permission
- CVE-2026-0742Smart Appointment & Booking <= 1.0.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via saab_save_form_data AJAX Actionzealopensource Smart Appointment & Booking
- CVE-2026-0679Fortis for WooCommerce <= 1.2.0 - Missing Authorization to Unauthenticated Arbitrary Order Status Update to Paid via 'wc-api' Endpointfortispay Fortis for WooCommerce
- CVE-2025-15508Magic Import Document Extractor <= 1.0.6 - Unauthenticated Sensitive Information Exposuremagicimport Magic Import Document Extractor
- CVE-2026-0572WebPurify Profanity Filter <= 4.0.2 - Missing Authorization to Unauthenticated Plugin Settings Change via webpurify_save_optionsWebPurify Profanity Filter
- CVE-2025-15507Magic Import Document Extractor <= 1.0.5 - Missing Authorization to Unauthenticated Plugin License Status Modificationmagicimport Magic Import Document Extractor
- CVE-2026-0681Extended Random Number Generator <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settingsrtddev Extended Random Number Generator
- CVE-2025-14461Xendit Payment <= 6.0.2 - Missing Authorization to Unauthenticated Arbitrary Order Status Update to Paidtpixendit Xendit Payment
- CVE-2025-15260MyRewards – Loyalty Points and Rewards for WooCommerce <= 5.6.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Loyalty…lwsdevelopers MyRewards
- CVE-2025-15482Chapa Payment Gateway Plugin for WooCommerce <= 1.0.3 - Unauthenticated Sensitive Information Exposurechapaet Chapa Payment Gateway Plugin for WooCommerce
- CVE-2026-24447If a malformed data is input to the affected product, a CSV file downloaded from the affected product may contain such malformed data.Six Apart Movable Type
- CVE-2026-23704A non-administrative user can upload malicious files.Six Apart Movable Type
- CVE-2026-22875Movable Type contains a stored cross-site scripting vulnerability in Export Sites.Six Apart Movable Type
- CVE-2026-21393Movable Type contains a stored cross-site scripting vulnerability in Edit Comment.Six Apart Movable Type
- CVE-2026-20986Path traversal in Samsung Members prior to Chinese version 15.5.05.4 allows local attackers to overwrite data within Samsung Members.Samsung Mobile Chinese Samsung Members
- CVE-2026-20984Improper handling of insufficient permission in Galaxy Wearable installed on non-Samsung Device prior to version 2.2.68 allows local…Samsung Mobile Galaxy Wearable
- CVE-2026-20982Path traversal in ShortcutService prior to SMR Feb-2026 Release 1 allows privileged local attacker to create file with system privilege.Samsung Mobile Devices
- CVE-2026-20981Improper input validation in FacAtFunction prior to SMR Feb-2026 Release 1 allows privileged physical attacker to execute arbitrary…Samsung Mobile Devices
- CVE-2026-20978Improper authorization in KnoxGuardManager prior to SMR Feb-2026 Release 1 allows local attackers to bypass the persistence configuration…Samsung Mobile Devices
- CVE-2026-20977Improper access control in Emergency Sharing prior to SMR Feb-2026 Release 1 allows local attackers to interrupt its functioning.Samsung Mobile Devices
- CVE-2026-1791Arbitrary File Upload Vulnerability in Operation and Maintenance Security GatewayHillstone Networks Operation and Maintenance Security Gatew…
- CVE-2026-1835lcg0124 BootDo cross-site request forgerylcg0124 BootDo
- CVE-2025-69620A path traversal in Moo Chan Song v4.5.7 allows attackers to cause a Denial of Service (DoS) via writing files to the internal storage.
- CVE-2025-70545A stored cross-site scripting (XSS) vulnerability exists in the web management interface of the PPC (Belden) ONT 2K05X router running…