CVEs published April 15, 2026
194 CVEs were published on April 15, 2026: 20 critical, 82 high. Browse them by severity, product and exploitation status.
- Published
- 194
- Critical
- 20
- High
- 82
- Medium
- 83
- Low
- 9
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 100
Most affected products
- Google Chrome
- 31
- WeblateOrg weblate · weblate
- 10
- Red Hat Enterprise Linux
- 6
- apostrophecms apostrophe · apostrophe
- 5
- Cisco Unity Connection
- 5
- Cisco Identity Services Engine Software
- 4
- Lenovo Software Fix
- 3
- Splunk Enterprise · Splunk Cloud Platform
- 3
- @fastify/express
- 2
- Apache Software Foundation apache-airflow · Apache Softw… +2
- 2
Critical 20
- CVE-2026-4880Barcode Scanner (+Mobile App) <= 1.11.0 - Unauthenticated Privilege Escalation via Insecure Token Authenticationukrsolution Barcode Scanner (+Mobile App) – Inventory manag…
- CVE-2026-6388Argocd-image-updater: argocd image updater: cross-namespace privilege escalation via insufficient namespace validationRed Hat OpenShift GitOps
- CVE-2026-40173Dgraph: Unauthenticated pprof endpoint leaks admin auth tokendgraph-io dgraph · github.com/dgraph-io/dgraph/v25 +3
- CVE-2025-41118Sensitive COS `SecretKey` exposed in plaintext via configuration API due to missing type protectionGrafana Pyroscope · github.com/grafana/pyroscope
- CVE-2026-6296Heap buffer overflow in ANGLE in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially perform a sandbox escape…Google Chrome
- CVE-2026-5189Nexus Repository 3 - Hardcoded Credential in Internal Database ComponentSonatype Nexus Repository
- CVE-2025-15610The .NET Remoting framework used by OpenText Fax (RightFax) includes known security vulnerabilities that could be exploited if the service…OpenText RightFax
- CVE-2026-20184Cisco Webex Meetings Certificate Validation VulnerabilityCisco Webex Meetings
- CVE-2026-20180Cisco Identity Services Engine Multiple Remote Code Execution VulnerabilityCisco Identity Services Engine Software
- CVE-2026-20186Cisco Identity Services Engine Multiple Authenticated Remote Code Execution VulnerabilityCisco Identity Services Engine Software
- CVE-2026-20147Cisco Identity Services Engine Remote Code Execution VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-5387AVEVA Pipeline Simulation Missing AuthorizationAVEVA Pipeline Simulation
- CVE-2026-33805@fastify/reply-from vulnerable to connection header abuse enabling stripping of proxy-added headers@fastify/reply-from · @fastify/http-proxy
- CVE-2026-33807@fastify/express vulnerable to middleware path doubling causing authentication bypass in child plugin scopes@fastify/express
- CVE-2026-33808@fastify/express vulnerable to middleware authentication bypass via URL normalization gaps (duplicate slashes and semicolons)@fastify/express
- CVE-2025-14813GOSTCTR implementation unable to process more than 255 blocks correctlyLegion of the Bouncy Castle BC-JAVA · org.bouncycastle:… +13
- CVE-2026-3461Visa Acceptance Solutions <= 2.1.0 - Unauthenticated Authentication Bypass via Billing Emailvisaacceptancesolutions Visa Acceptance Solutions
- CVE-2026-1555WebStack <= 1.2024 - Unauthenticated Arbitrary File UploadOwen WebStack
- CVE-2026-30625Upsonic 0.71.6 contains a remote code execution vulnerability in its MCP server/task creation functionality.upsonic
- CVE-2026-30993Slah CMS v1.5.0 and below was discovered to contain a remote code execution (RCE) vulnerability in the session() function at config.php.
High 82
- CVE-2026-40245Free5GC: UDR nudr-dr influenceData/subs-to-notify leaks SUPI in error response body without authenticationfree5gc · github.com/free5gc/udr
- CVE-2026-40193Maddy Mail Server: LDAP Filter Injection via Unsanitized Usernamefoxcpp maddy · github.com/foxcpp/maddy
- CVE-2026-40192Pillow is vulnerable to a FITS GZIP decompression bombpython-pillow Pillow · pillow
- CVE-2026-40316OWASP BLT has RCE in Github Actions via untrusted Django model execution in workflowOWASP-BLT BLT
- CVE-2026-40261Composer has Command Injection via Malicious Perforce Referencecomposer · composer/composer
- CVE-2026-40176Composer is vulnerable to Command Injection via Malicious Perforce Repositorycomposer · composer/composer
- CVE-2026-22676Barracuda RMM < 2025.2.2 Privilege Escalation via Insecure Directory PermissionsBarracuda Networks RMM
- CVE-2026-35569ApostropheCMS: Stored XSS in SEO Fields Leads to Authenticated API Data Exposure in ApostropheCMSapostrophecms apostrophe · apostrophe
- CVE-2026-6384Gimp: gimp: arbitrary code execution or denial of service via buffer overflow in gif image processingRed Hat Enterprise Linux
- CVE-2026-6319Use after free in Payments in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in…Google Chrome
- CVE-2026-6318Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via…Google Chrome
- CVE-2026-6363Type Confusion in V8 in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially perform out of bounds memory access…Google Chrome
- CVE-2026-6317Use after free in Cast in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code via a crafted HTML page.Google Chrome
- CVE-2026-6361Heap buffer overflow in PDFium in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote attacker who convinced a user to…Google Chrome
- CVE-2026-6316Use after free in Forms in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via…Google Chrome
- CVE-2026-6315Use after free in Permissions in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage…Google Chrome
- CVE-2026-6314Out of bounds write in GPU in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the GPU process to…Google Chrome
- CVE-2026-6311Uninitialized Use in Accessibility in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote attacker who had compromised the…Google Chrome
- CVE-2026-6310Use after free in Dawn in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-6360Use after free in FileSystem in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially exploit object corruption…Google Chrome
- CVE-2026-6309Use after free in Viz in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-6308Out of bounds read in Media in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific…Google Chrome
- CVE-2026-6307Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox…Google Chrome
- CVE-2026-6306Heap buffer overflow in PDFium in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a…Google Chrome
- CVE-2026-6305Heap buffer overflow in PDFium in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a…Google Chrome
Show all 82 entriesShow fewer entries
- CVE-2026-6304Use after free in Graphite in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-6303Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via…Google Chrome
- CVE-2026-6302Use after free in Video in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via…Google Chrome
- CVE-2026-6301Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox…Google Chrome
- CVE-2026-6300Use after free in CSS in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a…Google Chrome
- CVE-2026-6359Use after free in Video in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer…Google Chrome
- CVE-2026-6358Use after free in XR in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker to perform an out of bounds memory read…Google Chrome
- CVE-2026-6299Use after free in Prerender in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code via a crafted…Google Chrome
- CVE-2026-6297Use after free in Proxy in Google Chrome prior to 147.0.7727.101 allowed an attacker in a privileged network position to potentially…Google Chrome
- CVE-2026-33667OpenProject: 2FA OTP Verification Missing Rate Limitingopf openproject
- CVE-2026-34632Photoshop Installer | CWE-427: Uncontrolled Search Path ElementAdobe Photoshop Installer
- CVE-2026-34393Weblate: Privilege escalation in the user API endpointWeblateOrg weblate · weblate
- CVE-2026-34242Weblate: Arbitrary File Read via SymlinkWeblateOrg weblate · weblate
- CVE-2026-33435Weblate: Remote code execution during backup restorationWeblateOrg weblate · weblate
- CVE-2026-4857SailPoint IdentityIQ Debug UI Incorrect AuthorizationSailPoint Technologies IdentityIQ
- CVE-2026-6290Velociraptor Query() Plugin Misapplies Permissions To OrgsRapid7 Velociraptor · www.velocidex.com/golang/velociraptor
- CVE-2026-32631Git for Windows: `git clone` from manipulated repositories can leak NTLM hashes to arbitrary serversgit-for-windows git
- CVE-2025-63029WordPress WCFM Marketplace plugin <= 3.7.1 - SQL Injection vulnerabilityWC Lovers WCFM Marketplace
- CVE-2026-6372WordPress Accept Cryptocurrencies with Plisio plugin <= 2.0.5 - Payment Bypass vulnerabilityAccept Cryptocurrencies with Plisio
- CVE-2026-20205Sensitive Information Disclosure in ''_internal'' index in Splunk MCP Server appSplunk MCP Server
- CVE-2026-20204Improper Handling and Insufficient Isolation of Specific Temporary Files in Splunk EnterpriseSplunk Enterprise · Splunk Cloud Platform
- CVE-2026-4682Certain HP DeskJet All In One (AIO) Devices – Potential Remote Code Execution & Potential Buffer OverflowHP DeskJet 2800e All-in-One Printer series · HP DeskJet… +4
- CVE-2026-4667HP System Optimizer - Escalation of PrivilegeHP OMEN Gaming Hub
- CVE-2026-4145During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix that could allow a local…Lenovo Software Fix
- CVE-2026-4134During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix, that during installation could…Lenovo Software Fix
- CVE-2026-30778Apache SkyWalking: The SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information of MySQL/PostgreSQL.Apache Software Foundation Apache SkyWalking · org.apache.s…
- CVE-2026-40784WordPress FluentBoards plugin <= 1.91.2 - Insecure Direct Object References (IDOR) vulnerabilityMahmudul Hasan Arif FluentBoards
- CVE-2026-40764WordPress Contact Form by WPForms plugin <= 1.10.0.2 - Cross Site Request Forgery (CSRF) vulnerabilitySyed Balkhi Contact Form by WPForms
- CVE-2026-40745WordPress Element Pack Elementor Addons plugin <= 8.4.2 - SQL Injection vulnerabilitybdthemes Element Pack Elementor Addons
- CVE-2026-40744WordPress Beaver Builder plugin <= 2.10.1.2 - SQL Injection vulnerabilityBeaver Builder
- CVE-2024-33618Uncontrolled Resource Consumption in Bosch VMS Central Server in Bosch VMS 12.0.1 allows attackers to consume excessive amounts of disk…Bosch BVMS · Bosch DIVAR IP all-in-one 7000 R3 +2
- CVE-2026-3505Unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion.Legion of the Bouncy Castle BC-JAVA · org.bouncycastle:b… +6
- CVE-2026-5598Non-constant time comparisons risk private key leakage in FrodoKEM.Legion of the Bouncy Castle BC-JAVA · org.bouncycastle:b… +2
- CVE-2026-3643Accessibly <= 3.0.3 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting via Widget Source Injection via REST APIonthemapmarketing Accessibly – WordPress Website Accessibil…
- CVE-2025-40899Stored Cross-Site Scripting (XSS) in Assets and Nodes in Guardian/CMC before 26.0.0Nozomi Networks Guardian · Nozomi Networks CMC
- CVE-2025-40897Incorrect authorization for Threat Intelligence in Guardian/CMC before 26.0.0Nozomi Networks Guardian · Nozomi Networks CMC
- CVE-2026-5694Quick Interest Slider <= 3.1.5 - Unauthenticated Stored Cross-Site Scriptingaerin Quick Interest Slider
- CVE-2026-5617Login as User <= 1.0.3 - Authenticated (Subscriber+) Privilege Escalation via 'oclaup_original_admin' Cookieroyalnavneet Login as User – Switch User & WooCommerce Logi…
- CVE-2026-5088Apache::API::Password versions through 0.5.2 for Perl can generate insecure random values for saltsJDEGUEST Apache::API::Password
- CVE-2026-40719Deadwood in MaraDNS 3.5.0036 allows attackers to exhaust connection slots via a zone whose authoritative nameserver address cannot be…MaraDNS
- CVE-2026-5397Vulnerability Related to an Uncontrolled Search Path Element in a UPS Management ApplicationOMRON SOCIAL SOLUTIONS CO. PowerAttendant Standard Edition
- CVE-2026-6328XQUIC Improper STREAM Frame Validation in Initial/Handshake PacketsXQUIC Project XQUIC
- CVE-2026-40499radare2 < 6.1.4 Command Injection via PDB Parser print_gvars()radareorg radare2
- CVE-2026-2834Age Verification & Identity Verification by Token of Trust <= 3.32.3 - Unauthenticated Stored Cross-Site Scripting via 'description'…tokenoftrust Age Verification & Identity Verification by To…
- CVE-2025-54550Apache Airflow: RCE by race condition in example_xcom dagApache Software Foundation apache-airflow · Apache Softw… +2
- CVE-2026-33806fastify vulnerable to Body Schema Validation Bypass via Leading Space in Content-Type Headerfastify
- CVE-2024-53412Command injection in the connect function in NietThijmen ShoppingCart 0.0.2 allows an attacker to execute arbitrary shell commands and…github.com/NietThijmen/ShoppingCart
- CVE-2025-67841Nordic Semiconductor IronSide SE for nRF54H20 before 23.0.2+17 has an Algorithmic complexity issue.
- CVE-2026-30364CentSDR commit e40795 was discovered to contain a stack overflow in the "Thread1" function.
- CVE-2026-30461Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the…
- CVE-2026-30615A prompt injection vulnerability in Windsurf 1.9544.26 allows remote attackers to execute arbitrary commands on a victim system.
- CVE-2026-30616Jaaz 1.0.30 contains a remote code execution vulnerability in its MCP STDIO command execution handling.
- CVE-2026-30617LangChain-ChatChat 0.3.1 contains a remote code execution vulnerability in its MCP STDIO server configuration and execution handling.
- CVE-2026-30624Agent Zero 0.9.8 contains a remote code execution vulnerability in its External MCP Servers configuration feature.
- CVE-2026-30994Incorrect access control in the config.php component of Slah v1.5.0 and below allows unauthenticated attackers to access sensitive…
- CVE-2026-30995Slah CMS v1.5.0 and below was discovered to contain a SQL injection vulnerability via the id parameter in the vereador_ver.php endpoint.
- CVE-2026-30996An issue in the file handling logic of the component download.php of SAC-NFe v2.0.02 allows attackers to execute a directory traversal and…
Medium, low and unrated 92
- CVE-2026-5363Use of weak cryptographic key in TP-Link Archer C7TP-Link Systems Archer C7 v5 and
- CVE-2026-40947Yubico libfido2 before 1.17.0, python-fido2 before 2.2.0, and yubikey-manager before 5.9.1 have an unintended DLL search path.Yubico libfido2 · Yubico python-fido2 +1
- CVE-2026-39350Istio AuthorizationPolicy Incorrect Regex Matching of Dots in serviceAccounts Fields Allows Policy Bypassistio · istio.io/istio
- CVE-2026-40179Prometheus: Stored XSS via metric names and label values in web UI tooltips and metrics explorerprometheus · github.com/prometheus/prometheus
- CVE-2026-4949ProfilePress <= 4.16.12 - Missing Authorization to Authenticated (Subscriber+) Inactive Membership Plan Subscriptionproperfraction Paid Membership Plugin, Ecommerce, User Regi…
- CVE-2026-1711Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-Site Scripting vulnerability in a user interface component…Pegasystems Pega Infinity
- CVE-2026-1564Pega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerability in a user interface component. Requires a high…Pegasystems Pega Infinity
- CVE-2026-40186ApostropheCMS: sanitize-html allowedTags Bypass via Entity-Decoded Text in nonTextTags Elementsapostrophecms apostrophe · apostrophecms sanitize-html +1
- CVE-2026-39857Information Disclosure via `choices`/`counts` Query Parameters Bypassing publicApiProjection Field Restrictionsapostrophecms apostrophe · apostrophe
- CVE-2026-33889ApostropheCMS: Stored XSS via CSS Custom Property Injection in `@apostrophecms/color-field` Escaping Style Tag Contextapostrophecms apostrophe · apostrophe
- CVE-2026-33888ApostropheCMS: publicApiProjection Bypass via `project` Query Builder in Piece-Type REST APIapostrophecms apostrophe · apostrophe
- CVE-2026-21726Loki Path Traversal - CVE-2021-36156 BypassGrafana Loki · github.com/grafana/loki/v3 +1
- CVE-2026-6385Ffmpeg: ffmpeg: denial of service and potential arbitrary code execution via signed integer overflow in dvd subtitle parserRed Hat Lightspeed Core · Red Hat AI Inference Server +2
- CVE-2026-33877ApostropheCMS: User Enumeration via Timing Side Channel in Password Reset Endpointapostrophecms apostrophe · apostrophe
- CVE-2026-6364Out of bounds read in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to obtain potentially sensitive information…Google Chrome
- CVE-2026-6362Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially perform out of bounds memory…Google Chrome
- CVE-2026-6313Insufficient policy enforcement in CORS in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the…Google Chrome
- CVE-2026-6312Insufficient policy enforcement in Passwords in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the…Google Chrome
- CVE-2026-6298Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to obtain potentially sensitive…Google Chrome
- CVE-2026-40919Gimp: gimp: denial of service via specially crafted seattle filmworks fileRed Hat Enterprise Linux
- CVE-2026-40918Gimp: gimp: denial of service via crafted pvr image fileRed Hat Enterprise Linux
- CVE-2026-40917Gimp: gimp: application crashes or information disclosure via crafted icns image filesRed Hat Enterprise Linux
- CVE-2026-40916Gimp: gimp: denial of service due to stack buffer overflow in tim image loaderRed Hat Enterprise Linux
- CVE-2026-40915Gimp: gimp: heap buffer overflow due to integer overflow in fits image loaderRed Hat Enterprise Linux
- CVE-2026-21727Grafana Correlations: Cross-Tenant Data Disclosure and Permanent Deletion via Legacy org_id=0 RecordGrafana Correlations · github.com/grafana/grafana
Show all 92 entriesShow fewer entries
- CVE-2026-40256Weblate: Prefix-Based Repository Boundary Check Bypass via Symlink/Junction Path Prefix CollisionWeblateOrg weblate · weblate
- CVE-2026-6245Sssd: out-of-bounds read in the sssdRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-39845Weblate: SSRF via the webhook add-on using unprotected fetch_url()WeblateOrg weblate · weblate
- CVE-2026-34244Weblate: SSRF via Project-Level Machinery ConfigurationWeblateOrg weblate · weblate
- CVE-2026-6383Kubevirt: kubevirt: unauthorized subresource access due to improper rbac evaluationRed Hat OpenShift Virtualization · kubevirt.io/kubevirt
- CVE-2026-33440Weblate: Authenticated SSRF via redirect bypass of ALLOWED_ASSET_DOMAINS in screenshot URL uploadsWeblateOrg weblate · weblate
- CVE-2026-33220Weblate: JavaScript localization CDN add-on allows arbitrary local file read outside the repositoryWeblateOrg weblate · weblate
- CVE-2026-33214Weblate has improper access control for the translation memory APIWeblateOrg weblate · weblate
- CVE-2026-33212Weblate: Improper access control for pending tasks in APIWeblateOrg weblate · weblate
- CVE-2026-5758Mafintosh's protocol-buffers-schema is vulnerable to prototype pollutionMafintosh Protocol-buffers-schema parser · protocol-buffers…
- CVE-2026-20136Cisco Identity Services Engine Authenticated Privilege Escalation VulnerabilityCisco Identity Services Engine Software
- CVE-2026-20059Cisco Unity Connection Reflected Cross-Site Scripting VulnerabilityCisco Unity Connection
- CVE-2026-20061Cisco Unity Connection SQL Injection VulnerabilityCisco Unity Connection
- CVE-2026-20060Cisco Unity Connection Open Redirect VulnerabilityCisco Unity Connection
- CVE-2026-20170A vulnerability in the Desktop Agent functionality of Cisco Webex Contact Center could have allowed an unauthenticated, remote attacker to…Cisco Webex Contact Center
- CVE-2026-20152Cisco Secure Web Appliance Authentication Service Traffic Bypass VulnerabilityCisco Secure Web Appliance
- CVE-2026-20161Cisco ThousandEyes Enterprise Agent Arbitrary File Overwrite VulnerabilityCisco ThousandEyes Enterprise Agent
- CVE-2026-20148Cisco Identity Services Engine Path Traversal VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-20081Cisco Unity Connection Arbitrary File Download VulnerabilityCisco Unity Connection
- CVE-2026-20078Cisco Unity Connection Arbitrary File Download VulnerabilityCisco Unity Connection
- CVE-2026-20132Cisco Identity Services Engine Multiple Cross-Site Scripting VulnerabilitiesCisco Identity Services Engine Software
- CVE-2026-6370WordPress Mini Ajax Cart for WooCommerce plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerabilityHashThemes Mini Ajax Cart for WooCommerce
- CVE-2025-15636WordPress YouTube Showcase plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerabilityemarket-design YouTube Showcase
- CVE-2025-15635WordPress Smart Online Order for Clover plugin <= 1.6.0 - Cross Site Request Forgery (CSRF) vulnerabilityZAYTECH Smart Online Order for Clover
- CVE-2025-53444WordPress Userpro plugin < 5.1.11 - Cross Site Request Forgery (CSRF) vulnerabilityDeluxeThemes Userpro
- CVE-2026-20203Improper Access Control in Data Model Acceleration in Splunk EnterpriseSplunk Enterprise · Splunk Cloud Platform
- CVE-2026-20202Improper Input Validation during User Account Creation in Splunk EnterpriseSplunk Enterprise · Splunk Cloud Platform
- CVE-2025-12141Grafana Alerting Editors can edit destination of webhooks they did not createGrafana Alerting
- CVE-2026-25219Apache Airflow: Sensitive Azure Service Bus connection string (and possibly other providers) exposed to users with view accessApache Software Foundation apache-airflow · Apache Softw… +2
- CVE-2026-4135During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix, that during installation could…Lenovo Software Fix
- CVE-2026-1636A potential DLL hijacking vulnerability was reported in Lenovo Service Bridge that, under certain conditions, could allow a local…Lenovo Service Bridge
- CVE-2026-0827During an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the HardwareScanAddin used in…Lenovo Diagnostics · Lenovo Vantage
- CVE-2026-1852Product Pricing Table by WooBeWoo <= 1.1.0 - Cross-Site Request Forgery to Stored XSS and Pricing Table Deletionwoobeewoo Product Pricing Table by WooBeWoo
- CVE-2026-3590Race Condition in Guest Magic Link Authentication Allows Token ReuseMattermost · github.com/mattermost/mattermost/server/v8 +3
- CVE-2026-40786WordPress MyRewards plugin <= 5.7.3 - Broken Access Control vulnerabilityLong Watch Studio MyRewards
- CVE-2026-40778WordPress Majestic Support plugin <= 1.1.2 - Broken Access Control vulnerabilityMajestic Support
- CVE-2026-40763WordPress Royal Elementor Addons plugin <= 1.7.1056 - Broken Access Control vulnerabilityWP Royal Royal Elementor Addons
- CVE-2026-40742WordPress Nelio AB Testing plugin <= 8.2.8 - Sensitive Data Exposure vulnerabilityNelio Software Nelio AB Testing
- CVE-2026-40740WordPress Tutor LMS plugin <= 3.9.7 - Broken Access Control vulnerabilityThemeum Tutor LMS
- CVE-2026-40737WordPress COMPE plugin <= 1.1.4 - Insecure Direct Object References (IDOR) vulnerabilityVillaTheme COMPE
- CVE-2026-40734WordPress Categories Images plugin <= 3.3.1 - Cross Site Scripting (XSS) vulnerabilityZahlan Categories Images
- CVE-2026-40730WordPress ThemeGrill Demo Importer plugin <= 2.0.0.6 - Broken Access Control vulnerabilityThemeGrill Demo Importer
- CVE-2026-40729WordPress 3D viewer – Embed 3D Models plugin <= 1.8.5 - Broken Access Control vulnerabilitybPlugins 3D viewer – Embed 3D Models
- CVE-2026-40728WordPress Magazine Blocks plugin <= 1.8.3 - Broken Access Control vulnerabilityBlockArt Magazine Blocks
- CVE-2026-28741CSRF Protection Bypass Allows Updating a User's Authentication MethodMattermost · github.com/mattermost/mattermost/server/v8 +3
- CVE-2026-27769Connected Workspaces: Malicious remote server can manipulate arbitrary user's statusMattermost · github.com/mattermost/mattermost-server
- CVE-2026-5588PKIX draft CompositeVerifier accepts empty signature sequence as valid.Legion of the Bouncy Castle BC-JAVA · Legion of the Boun… +8
- CVE-2026-0636LDAP Injection Vulnerability in LDAPStoreHelper.javaLegion of the Bouncy Castle BC-JAVA · org.bouncycastle:b… +2
- CVE-2025-52641Internal Filesystem Exploration vulnerabilityHCL AION
- CVE-2026-4011Power Charts <= 0.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attributedgwyer Power Charts – Responsive Beautiful Charts & Graphs
- CVE-2026-3998WM JqMath <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attributewebmindpt WM JqMath
- CVE-2026-1782MetForm Pro <= 3.9.7 - Unauthenticated Payment Amount Manipulation via 'mf-calculation'Wpmet MetForm Pro
- CVE-2026-3649Katalogportal-pdf-sync Widget <= 1.0.0 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure via…colbeinformatik Katalogportal-pdf-sync Widget
- CVE-2026-4091OPEN-BRAIN <= 0.5.0 - Cross-Site Request Forgeryfaridsaniee OPEN-BRAIN
- CVE-2026-3642e-shot <= 1.0.2 - Missing Authorization to Authenticated (Subscriber+) Form Settings Modification via AJAXforfront e-shot
- CVE-2026-4005Coachific Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'userhash' Shortcode AttributeCoachific Shortcode
- CVE-2026-4002Petje.af <= 2.1.8 - Cross-Site Request Forgery to Account Deletion via 'petjeaf_disconnect' AJAX Actionpetjeaf Petje.af
- CVE-2026-3659WP Circliful <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attributebappidgreat WP Circliful
- CVE-2026-5717VI: Include Post By <= 0.4.200706 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class_container' Shortcode Attributeknighthawk VI: Include Post By
- CVE-2026-6293Inquiry form to posts or pages <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'inq_header' Parameterudamadu Inquiry form to posts or pages
- CVE-2026-5160Versions of the package github.com/yuin/goldmark/renderer/html before 1.7.17 are vulnerable to Cross-site Scripting (XSS) due to improper…github.com/yuin/goldmark/renderer/html · github.com/yuin/go…
- CVE-2026-26291Stored cross-site scripting vulnerability exists in GROWI v7.4.6 and earlier.GROWI
- CVE-2026-1509Avada (Fusion) Builder <= 3.15.1 - Authenticated (Subscriber+) Limited Arbitrary WordPress Action Executionthemefusion Avada (Fusion) Builder
- CVE-2026-1541Avada (Fusion) Builder <= 3.15.1 - Authenticated (Subscriber+) Sensitive Information Exposure via Insecure Direct Object Referencethemefusion Avada (Fusion) Builder
- CVE-2026-4812Advanced Custom Fields (ACF®) <= 6.7.0 - Unauthenticated Missing Authorization to Arbitrary Post/Page Disclosure via AJAX Field Query…wpengine Advanced Custom Fields
- CVE-2026-40105XWiki has Reflected Cross-Site Scripting (XSS) in its page history compare functionalityxwiki-platform · org.xwiki.platform:xwiki-platform-web-temp…
- CVE-2026-40104XWiki's REST APIs can list all pages/spaces, leading to unavailabilityorg.xwiki.platform:xwiki-platform-oldcore · org.xwiki.platf…