CVEs published April 21, 2026
352 CVEs were published on April 21, 2026: 34 critical, 129 high. Browse them by severity, product and exploitation status.
- Published
- 352
- Critical
- 34
- High
- 129
- Medium
- 170
- Low
- 19
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 139
Most affected products
- Mozilla Firefox · Mozilla Thunderbird
- 40
- Oracle MySQL Server
- 25
- freescout-help-desk freescout
- 20
- WWBN AVideo · wwbn/avideo
- 19
- Oracle VM VirtualBox
- 9
- Oracle Identity Manager Connector
- 7
- Oracle Java SE · Oracle GraalVM for JDK +1
- 7
- mailcow-dockerized
- 6
- Oracle Financial Services Analytical Applications Infrastru…
- 6
- Fortra GoAnywhere MFT
- 5
Critical 34
- CVE-2026-40575OAuth2 Proxy has an Authentication Bypass via X-Forwarded-Uri Header Spoofingoauth2-proxy · github.com/oauth2-proxy/oauth2-proxy/v7 +1
- CVE-2026-41064AVideo has an incomplete fix for CVE-2026-33502 (Command Injection)WWBN AVideo · wwbn/avideo
- CVE-2026-40946Oxia: OIDC token audience validation bypass via SkipClientIDCheckoxia-db oxia · github.com/oxia-db/oxia
- CVE-2026-40933Flowise: Authenticated RCE Via MCP AdaptersFlowiseAI Flowise · FlowiseAI flowise-components +2
- CVE-2026-33519Incorrect privilege assignment in Portal for ArcGISEsri Portal for ArcGIS
- CVE-2026-33518Incorrect privilege assignment in Portal for ArcGISEsri Portal for ArcGIS
- CVE-2026-34287Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).Oracle Identity Manager Connector
- CVE-2026-34286Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).Oracle Identity Manager Connector
- CVE-2026-34285Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).Oracle Identity Manager Connector
- CVE-2026-34279Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management).Oracle Enterprise Manager Base Platform
- CVE-2026-34275Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite (component: Setup and Administration).Oracle Advanced Inbound Telephony
- CVE-2026-40906Electric: SQL Injection via ORDER BY Parameter in Shape APIelectric-sql electric
- CVE-2026-40911WWBN AVideo YPTSocket WebSocket Broadcast Relay Leads to Unauthenticated Cross-User JavaScript Execution via Client-Side eval() SinksWWBN AVideo · wwbn/avideo
- CVE-2026-40903Goshs - ArtiPACKED Vulnerability – GitHub Actions Credential Persistencepatrickhener goshs
- CVE-2026-40884goshs: Empty-username SFTP password authentication bypass in goshspatrickhener goshs · github.com/patrickhener/goshs +1
- CVE-2026-40887@vendure/core has a SQL Injection vulnerabilityvendurehq vendure · @vendure/core
- CVE-2026-40372ASP.NET Core Elevation of Privilege VulnerabilityMicrosoft ASP.NET Core · Microsoft Visual Studio +2
- CVE-2026-40872mailcow: dockerized vulnerable to stored XSS in autodiscover logs email address fieldmailcow-dockerized
- CVE-2026-41193FreeScout has Zip Slip path traversal in module installation that allows arbitrary file write leading to RCEfreescout-help-desk freescout
- CVE-2026-21571This Critical severity OS Command Injection vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.0.0, 11.1.0…Atlassian Bamboo Data Center
- CVE-2026-40050CrowdStrike LogScale Unauthenticated Path TraversalCrowdStrike LogScale Self-Hosted
- CVE-2026-40569FreeScout's Mass Assignment in Mailbox Connection Settings Enables Silent Email Exfiltrationfreescout-help-desk freescout
- CVE-2026-40576Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in excel-mcp-serverharis-musa excel-mcp-server · excel-mcp-server
- CVE-2026-5652Authorization Bypass Through User-Controlled Key in Crafty ControllerArcadia Technology Crafty Controller
- CVE-2019-25714Seeyon Office Anywhere (OA) A8 Unauthenticated Arbitrary File Write via htmlofficeservletSeeyon Internet Software A8-V5 Collaborative Management Sof…
Show all 34 entriesShow fewer entries
- CVE-2025-15638Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcryptATRODO Net::Dropbear
- CVE-2017-20230Storable versions before 3.05 for Perl has a stack overflowNWCLARK Storable
- CVE-2025-41029SQL injection in Zeon Academy Pro by Zeon Global TechZeon Global Tech Zeon Academy Pro
- CVE-2026-6771Mitigation bypass in the DOM: Security componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-6768Mitigation bypass in the Networking: Cookies componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-6760Mitigation bypass in the Networking: Cookies componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-6748Uninitialized memory in the Audio/Video: Web Codecs componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-5965NewSoft｜NewSoftOA - OS Command InjectionNewSoftOA
- CVE-2026-38835Tenda W30E V2.0 V16.01.0.21 was found to contain a command injection vulnerability in the formSetUSBPartitionUmount function via the…
High 129
- CVE-2026-41135free5GC PCF: Memory Leak via CORS Middleware Registration in HTTP Handler Leads to Denial of Servicefree5gc pcf · github.com/free5gc/pcf
- CVE-2026-41133pyLoad has Stale Session Privilege After Role/Permission Change (Privilege Revocation Bypass)pyload · pyload-ng
- CVE-2026-41059OAuth2 Proxy has an Authentication Bypass via Fragment Confusion in skip_auth_routes and skip_auth_regexoauth2-proxy · github.com/oauth2-proxy/oauth2-proxy +1
- CVE-2026-41304WWBN AVideo vulnerable to RCE caused by clonesite pluginWWBN AVideo · wwbn/avideo
- CVE-2026-41060AVideo's SSRF via same-domain hostname with alternate port bypasses isSSRFSafeURLWWBN AVideo · wwbn/avideo
- CVE-2026-41058AVideo has an incomplete fix for CVE-2026-33293 (Path Traversal) in AVideoWWBN AVideo · wwbn/avideo
- CVE-2026-5845Improper authorization fallback allows scoped user-to-server token installation escape in GitHub Enterprise ServerGitHub Enterprise Server
- CVE-2026-41057AVideo has CORS Origin Reflection Bypass via plugin/API/router.php and allowOrigin(true) that Exposes Authenticated API ResponsesWWBN AVideo · wwbn/avideo
- CVE-2026-41056AVideos has CORS Origin Reflection with Credentials on Sensitive API Endpoints that Enables Cross-Origin Account TakeoverWWBN AVideo · wwbn/avideo
- CVE-2026-41055AVideo has an incomplete fix for CVE-2026-33039 (SSRF)WWBN AVideo · wwbn/avideo
- CVE-2026-4296Incorrect Regular Expression vulnerability in GitHub Enterprise Server allowed unauthorized access to user accounts via OAuth callback URL…GitHub Enterprise Server
- CVE-2026-40926WWBN AVideo Vulnerable to CSRF in Admin JSON Endpoints (Category CRUD, Plugin Update Script)WWBN AVideo · wwbn/avideo
- CVE-2026-5921Server-Side Request Forgery in GitHub Enterprise Server allowed extraction of sensitive environment variables via timing side-channel attackGitHub Enterprise Server
- CVE-2026-6832Nesquena Hermes WebUI Arbitrary File Deletion via Unvalidated session_idnesquena hermes-webui
- CVE-2026-40945Oxia: Bearer token exposed in debug log messages on authentication failureoxia-db oxia · github.com/oxia-db/oxia
- CVE-2026-40943Oxia: Server crash via race condition in session heartbeat handlingoxia-db oxia · github.com/oxia-db/oxia
- CVE-2026-40931Complete Bypass of CVE-2026-24884 Patch via Git-Delivered Symlink Poisoning in compressingnode-modules compressing · compressing
- CVE-2026-40938Tekton Pipelines: Git Resolver Unsanitized Revision Parameter Enables git Argument Injection Leading to RCEtektoncd pipeline · github.com/tektoncd/pipeline
- CVE-2026-6823HKUDS OpenHarness Insecure Default Remote Channel AllowlistHKUDS OpenHarness
- CVE-2026-35251Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-35246Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-35245Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-35243Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: ADF Faces).Oracle Application Development Framework
- CVE-2026-35242Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-35231Vulnerability in the Oracle Financial Services Transaction Filtering product of Oracle Financial Services Applications (component: User…Oracle Financial Services Transaction Filtering
Show all 129 entriesShow fewer entries
- CVE-2026-35230Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-35229Vulnerability in the Java VM component of Oracle Database Server.Oracle Database Server
- CVE-2026-34320Vulnerability in the Oracle Financial Services Customer Screening product of Oracle Financial Services Applications (component: User…Oracle Financial Services Customer Screening
- CVE-2026-34310Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications…Oracle Financial Services Analytical Applications Infrastru…
- CVE-2026-34309Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-34305Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services).Oracle WebLogic Server
- CVE-2026-34297Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Knowledge Integration).Oracle HCM Common Architecture
- CVE-2026-34292Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2026-34291Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Core).Oracle HTTP Server
- CVE-2026-34290Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).Oracle Identity Manager Connector
- CVE-2026-34282Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component…Oracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-22016Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).Oracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-22011Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: ADPatch).Oracle Applications DBA
- CVE-2026-22010Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications…Oracle Financial Services Analytical Applications Infrastru…
- CVE-2026-21997Vulnerability in the Oracle Life Sciences Empirica Signal product of Oracle Life Science Applications (component: Common Core).Oracle Life Sciences Empirica Signal
- CVE-2026-40905LinkAce: Password Reset Poisoning via X-Forwarded-Host Header Injection Leading to Account TakeoverKovah LinkAce
- CVE-2026-40925WWBN AVideo has CSRF in configurationUpdate.json.php Enables Full Site Configuration Takeover Including Encoder URL and SMTP CredentialsWWBN AVideo · wwbn/avideo
- CVE-2026-40892PJSIP: Stack buffer overflow in pjsip_auth_create_digest2()pjsip pjproject
- CVE-2026-40909WWBN AVideo has a Path Traversal in Locale Save Endpoint that Enables Arbitrary PHP File Write to Any Web-Accessible Directory (RCE)WWBN AVideo · wwbn/avideo
- CVE-2026-40890github.com/gomarkdown/markdown: Out-of-bounds Read in SmartypantsRenderergomarkdown markdown · github.com/gomarkdown/markdown
- CVE-2026-6819HKUDS OpenHarness Plugin Management Command ExposureHKUDS OpenHarness
- CVE-2026-40885goshs: Public collaborator feed leaks .goshs ACL credentials and enables unauthorized accesspatrickhener goshs · github.com/patrickhener/goshs/v2 +1
- CVE-2026-40876SFTP root escape via prefix-based path validation in goshspatrickhener goshs · github.com/patrickhener/goshs +1
- CVE-2026-33813Panic when decoding large WEBP image on 32-bit platforms in golang.org/x/imagegolang.org/x/image/webp · golang.org/x/image
- CVE-2026-40875mailcow: dockerized vulnerable to stored XSS in user login history real_ripmailcow-dockerized
- CVE-2026-40880Zebra: Cached Mempool Verification Bypasses Consensus Rules for Ahead-of-Tip BlocksZcashFoundation zebrad · ZcashFoundation zebra-consensus +2
- CVE-2026-40873mailcow: dockerized vulnerable to stored XSS in Quarantine attachment filenamesmailcow-dockerized
- CVE-2026-40879Nest: DoS via Recursive handleData in JsonSocket (TCP Transport)nestjs nest · @nestjs/microservices
- CVE-2026-40871mailcow: dockerized vulnerable to Second Order SQL Injection in quarantine category via APImailcow-dockerized
- CVE-2026-40869Decidim amendments can be accepted or rejected by anyonedecidim · decidim-core
- CVE-2026-40870Decidim's comments API allows access to all commentable resourcesdecidim
- CVE-2026-40868kyverno apicall servicecall implicit bearer token injection leaks kyverno serviceaccount tokenkyverno · github.com/kyverno/kyverno
- CVE-2026-40867Horilla: Unauthorized Helpdesk Attachment Access via Attachment ID Manipulationhorilla-opensource horilla
- CVE-2026-40866Horilla: Unauthorized Document Overwrite via File Upload Endpointhorilla-opensource horilla
- CVE-2026-40865Horilla: Insecure Direct Object Reference at `/employee/view-file/<int:id>horilla-opensource horilla
- CVE-2026-40614PJSIP: Heap buffer overflow in Opus codec decodingpjsip pjproject
- CVE-2026-40613Coturn: Misaligned Memory Access in coturn STUN Attribute Parser (Remote DoS on ARM64)coturn
- CVE-2026-40611Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Providergo-acme lego · github.com/go-acme/lego/v4 +2
- CVE-2026-40604ClearanceKit: opfilter system extension can be suspended or signalled by a root process, disabling file-access policy enforcementcraigjbass clearancekit
- CVE-2026-40599ClearanceKit: Ad-hoc signed binaries can spoof Apple process identities in the global allowlistcraigjbass clearancekit
- CVE-2026-41192FreeScout's client-controlled attachment IDs allow deletion of existing conversation attachmentsfreescout-help-desk freescout
- CVE-2026-40588blueprintUE: Authenticated Password Change Does Not Verify Current Passwordblueprintue-self-hosted-edition
- CVE-2026-40586blueprintUE: Login Endpoint Has No Rate Limiting, Lockout, or Brute-Force Protectionblueprintue-self-hosted-edition
- CVE-2026-41191FreeScout's signature only mailbox permission allows unauthorized mailbox chat setting changesfreescout-help-desk freescout
- CVE-2026-40585blueprintUE: Password Reset Tokens Have No Expiry Windowblueprintue-self-hosted-edition
- CVE-2026-41190FreeScout has assigned-only visibility bypass via save_draft that allows hidden conversation draft injectionfreescout-help-desk freescout
- CVE-2026-41189FreeScout has assigned-only visibility bypass that allows editing hidden customer-authored threadsfreescout-help-desk freescout
- CVE-2026-40583UltraDAG: SmartOp Vote Path Triggers Fatal Supply Invariant HaltUltraDAGcom core
- CVE-2026-40591FreeScout: Improper Authorization in Phone Conversation Creation Enables Cross-Mailbox Hidden Customer Modificationfreescout-help-desk freescout
- CVE-2026-40589FreeScout has Customer Edit Cross-Mailbox Email Takeoverfreescout-help-desk freescout
- CVE-2026-40161Tekton Pipelines: Git resolver API mode leaks system-configured API token to user-controlled serverURLtektoncd pipeline · github.com/tektoncd/pipeline
- CVE-2026-24189NVIDIA CUDA-Q contains a vulnerability in an endpoint, where an unauthenticated attacker could cause an out-of-bounds read by sending a…NVIDIA CUDA-Q
- CVE-2026-24177NVIDIA KAI Scheduler contains a vulnerability where an attacker could access API endpoints without authorization.NVIDIA KAI Scheduler
- CVE-2026-40568FreeScout Vulnerable to XSS via Mailbox Signature Due to Incomplete HTML Sanitizationfreescout-help-desk freescout
- CVE-2026-40498FreeScout has Authentication Bypass and Information Disclosure in SystemController via /system/cronfreescout-help-desk freescout
- CVE-2026-3298Out-of-bounds write in Windows asyncio.ProacterEventLoop.sock_recvfrom_into() when using nbytesPython Software Foundation CPython
- CVE-2026-5789Search path without quotes in CivetWebCivetWeb
- CVE-2025-14362GoAnywhere MFT SFTP Service Login Vulnerable to Brute Force Attack Under Certain CircumstancesFortra GoAnywhere MFT
- CVE-2026-6786Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150Mozilla Firefox · Mozilla Thunderbird
- CVE-2026-6785Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150Mozilla Firefox · Mozilla Thunderbird
- CVE-2026-6784Memory safety bugs fixed in Firefox 150 and Thunderbird 150Mozilla Firefox · Mozilla Thunderbird
- CVE-2026-6782Information disclosure in the IP Protection componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-6781Denial-of-service in the Audio/Video: Playback componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-6780Denial-of-service in the Audio/Video: Playback componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-6776Incorrect boundary conditions in the WebRTC: Networking componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-6773Denial-of-service due to integer overflow in the Graphics: WebGPU componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-40520FreePBX api module Command Injection via GraphQLFreePBX api
- CVE-2026-6772Incorrect boundary conditions in the Libraries component in NSSMozilla Firefox · Mozilla Thunderbird
- CVE-2026-6769Privilege escalation in the Debugger componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-6766Incorrect boundary conditions in the Libraries component in NSSMozilla Firefox · Mozilla Thunderbird
- CVE-2026-6761Privilege escalation in the Networking componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-6759Use-after-free in the Widget: Cocoa componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-6758Use-after-free in the JavaScript: WebAssembly componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-6756Mitigation bypass in Firefox for AndroidMozilla Firefox
- CVE-2026-6754Use-after-free in the JavaScript Engine componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-6753Incorrect boundary conditions in the WebRTC componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-6752Incorrect boundary conditions in the WebRTC componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-6751Uninitialized memory in the Audio/Video: Web Codecs componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-6750Privilege escalation in the Graphics: WebRender componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-6749Information disclosure due to uninitialized memory in the Graphics: Canvas2D componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-6747Use-after-free in the WebRTC componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-6746Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-41039Information Disclosure Vulnerability in Quantum Networks Router QN-I-470Quantum Networks Router QN-I-470
- CVE-2026-41038Weak Password Policy Vulnerability in Quantum Networks Router QN-I-470Quantum Networks Router QN-I-470
- CVE-2026-41036Command Injection Vulnerability in Quantum Networks Router QN-I-470Quantum Networks Router QN-I-470
- CVE-2026-41037Missing Rate Limiting Vulnerability in Quantum Networks Router QN-I-470Quantum Networks Router QN-I-470
- CVE-2026-6553TYPO3 CMS Stores Cleartext Password in User Settings Moduletypo3/cms-backend
- CVE-2026-39467WordPress Responsive Slider by MetaSlider plugin <= 3.106.0 - PHP Object Injection vulnerabilityResponsive Slider by MetaSlider
- CVE-2025-13826Incorrect input validation on the Zervit portable HTTP/Web serverZervit portable HTTP/Web server
- CVE-2026-31368Privilege Bypass in AiAssistantHonor AIAssistant
- CVE-2026-40497FreeScout Vulnerable to CSS Injection via Stored Style Tag in Mailbox Signature (CSRF Token Exfiltration)freescout-help-desk freescout
- CVE-2026-40496FreeScout has Predictable Attachment Token that Allows Unauthenticated Private File Download via Brute Forcefreescout-help-desk freescout
- CVE-2026-39973Apktool: Path Traversal to Arbitrary File WriteiBotPeaches Apktool · org.apktool:apktool-lib
- CVE-2026-40250OpenEXR has integer overflow in DWA decoder outBufferEnd pointer arithmetic (missed variant of CVE-2026-34589)AcademySoftwareFoundation openexr
- CVE-2026-40244OpenEXR has integer overflow in DWA setupChannelData planarUncRle pointer arithmetic (missed variant of CVE-2026-34589)AcademySoftwareFoundation openexr
- CVE-2026-39866Lawnchair vulnerable to Command Injection via unquoted workflow dispatch input in release_update.ymlLawnchairLauncher lawnchair
- CVE-2026-39861Claude Code: Sandbox Escape via Symlink Following Allows Arbitrary File Write Outside Workspaceanthropics claude-code · @anthropic-ai/claude-code
- CVE-2026-39386Neko has Self-service Privilege Escalation for Authenticated Usersm1k1o neko · github.com/m1k1o/neko/server
- CVE-2026-39320Signal K Server has an Unauthenticated Regular Expression Denial of Service (ReDoS) via WebSocket Subscription Pathssignalk-server
- CVE-2026-31018In Dolibarr ERP & CRM <= 22.0.4, PHP code detection and editing permission enforcement in the Website module is not applied consistently…dolibarr/dolibarr
- CVE-2026-31019In the Website module of Dolibarr ERP & CRM 22.0.4 and below, the application uses blacklist-based filtering to restrict dangerous PHP…dolibarr/dolibarr
- CVE-2026-37748Visitor Management System 1.0 by sanjay1313 is vulnerable to Unrestricted File Upload in vms/php/admin_user_insert.php and…
- CVE-2026-38834Tenda W30E V2.0 V16.01.0.21 was found to contain a command injection vulnerability in the do_ping_action function via the hostName…
- CVE-2026-40706In NTFS-3G 2022.10.3 before 2026.2.25, a heap buffer overflow exists in ntfs_build_permissions_posix() in acls.c that allows an attacker…Tuxera NTFS-3G
Medium, low and unrated 189
- CVE-2026-41144F´ (F Prime) has Integer Overflow in FileUplinknasa fprime
- CVE-2026-41136free5GC AMF missing default case in Content-Type switch in HTTPUEContextTransferfree5gc amf · github.com/free5gc/amf
- CVE-2026-40343free5GC UDR: Fail-open handling in PolicyDataSubsToNotifyPost allows unintended subscription creationfree5gc udr · github.com/free5gc/udr
- CVE-2026-41131OpenFGA has Improper Policy Enforcementopenfga · github.com/openfga/openfga
- CVE-2026-41130Craft CMS has a host header injection leading to SSRF via resource-js endpointcraftcms cms · craftcms/cms
- CVE-2026-41129Craft CMS has Server-Side Request Forgery (SSRF) with Asset Uploads Mutationscraftcms cms · craftcms/cms
- CVE-2026-41128Craft CMS has a Missing Authorization Check on User Group Removal via save-permissions Actioncraftcms cms · craftcms/cms
- CVE-2026-41127BigBlueButton's missing authorization allows viewer to inject/overwrite captionsbigbluebutton
- CVE-2026-41126BigBlueButton has Open Redirect through bigbluebutton/api/join via get-parameter "logoutURL"bigbluebutton
- CVE-2026-41063WWBN AVideo has incomplete fix for CVE-2026-33500 (XSS)WWBN AVideo · wwbn/avideo
- CVE-2026-41062WWBN/AVideo has an incomplete fix for a directory traversal bypass via query string in ReceiveImage downloadURL parametersWWBN AVideo · wwbn/avideo
- CVE-2026-41061WWBN AVideo Vulnerable to stored XSS via Unanchored Duration Regex in Video Encoder ReceiverWWBN AVideo · wwbn/avideo
- CVE-2026-3307Authorization bypass in GitHub Enterprise Server secret scanning push protection allows cross-repository modification of delegated bypass…GitHub Enterprise Server
- CVE-2026-40935WWBN/AVideo has CAPTCHA Bypass via Attacker-Controlled Length Parameter and Missing Token Invalidation on FailureWWBN AVideo · wwbn/avideo
- CVE-2026-40929WWBN AVideo's missing CSRF protection in objects/commentDelete.json.php enables mass comment deletion against moderators and content…WWBN AVideo · wwbn/avideo
- CVE-2026-40928AVideo: Missing CSRF Protection on State-Changing JSON Endpoints Enables Forced Comment Creation, Vote Manipulation, and Category Asset…WWBN AVideo · wwbn/avideo
- CVE-2026-5512Improper authorization vulnerability in GitHub Enterprise Server allowed disclosure of private repository names via mobile upload policy APIGitHub Enterprise Server
- CVE-2026-1354Zero Motorcycles Firmware Key Exchange without Entity AuthenticationZero Motorcycles firmware
- CVE-2026-6830Nesquena Hermes WebUI Environment Variable Credential Leakage via Profile Switchnesquena hermes-webui
- CVE-2026-40944Oxia: TLS CA certificate chain validation fails with multi-certificate PEM bundlesoxia-db oxia · github.com/oxia-db/oxia
- CVE-2026-6829nesquena hermes-webui Arbitrary Workspace Directory Accessnesquena hermes-webui
- CVE-2026-40942DSF: Inverted Time Comparison in OIDC JWKS and Token Cachedatasharingframework dsf · dev.dsf dsf-bpe-process-api-v2 +3
- CVE-2026-40939DSF: Missing Session Timeout for OIDC Sessionsdatasharingframework dsf · dev.dsf dsf-bpe-server +5
- CVE-2026-6799Comfast CF-N1-S Endpoint mbox-config command injectionComfast CF-N1-S
- CVE-2026-40927Docmost: XSS in Comments with JavaScript URIdocmost
Show all 189 entriesShow fewer entries
- CVE-2026-40923Tekton Pipelines: VolumeMount path restriction bypass via missing filepath.Clean in /tekton/ checktektoncd pipeline · github.com/tektoncd/pipeline
- CVE-2026-40924Tekton Pipelines: HTTP Resolver Unbounded Response Body Read Enables Denial of Service via Memory Exhaustiontektoncd pipeline · github.com/tektoncd/pipeline
- CVE-2026-6797Sanluan PublicCMS DocToHtmlUtils.java ZipSecureFile.setMinflateRatio resource consumptionSanluan PublicCMS
- CVE-2026-35252Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: C Oracle SSL API).Oracle Security Service
- CVE-2026-35250Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-35249Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-35248Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-35247Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-35244Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management).Oracle Hyperion Infrastructure Technology
- CVE-2026-35241Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Research Tracking).Oracle PeopleSoft Enterprise CS Student Records
- CVE-2026-35240Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2026-35239Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).Oracle MySQL Server
- CVE-2026-35238Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2026-35237Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2026-35236Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2026-35235Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: GIS).Oracle MySQL Server
- CVE-2026-35234Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Partition).Oracle MySQL Server
- CVE-2026-35232Vulnerability in Oracle Fusion Middleware (component: Dynamic Monitoring Service).Oracle Fusion Middleware
- CVE-2026-34325Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications…Oracle Financial Services Analytical Applications Infrastru…
- CVE-2026-34324Vulnerability in the Oracle Life Sciences InForm product of Oracle Life Science Applications (component: App Server).Oracle Life Sciences InForm
- CVE-2026-34323Vulnerability in the Oracle Life Sciences InForm product of Oracle Life Science Applications (component: IDM Authentication).Oracle Life Sciences InForm
- CVE-2026-34321Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications…Oracle Financial Services Analytical Applications Infrastru…
- CVE-2026-34319Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client).Oracle MySQL Shell
- CVE-2026-34318Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client).Oracle MySQL Shell
- CVE-2026-34317Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client).Oracle MySQL Shell
- CVE-2026-34315Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services).Oracle WebLogic Server
- CVE-2026-34314Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications…Oracle Financial Services Analytical Applications Infrastru…
- CVE-2026-34313Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications…Oracle Financial Services Analytical Applications Infrastru…
- CVE-2026-34312Vulnerability in the RDBMS component of Oracle Database Server.Oracle Database Server
- CVE-2026-34308Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: JSON).Oracle MySQL Server
- CVE-2026-34307Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Workflow).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-34306Vulnerability in the PeopleSoft Enterprise FIN Project Costing product of Oracle PeopleSoft (component: Projects).Oracle PeopleSoft Enterprise FIN Project Costing
- CVE-2026-34304Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2026-34303Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2026-34302Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Loader).Oracle Workflow
- CVE-2026-34301Vulnerability in the PeopleSoft Enterprise FIN Maintenance Management product of Oracle PeopleSoft (component: Work Order Management).Oracle PeopleSoft Enterprise FIN Maintenance Management
- CVE-2026-34300Vulnerability in the PeopleSoft Enterprise FIN Contracts product of Oracle PeopleSoft (component: Contracts).Oracle PeopleSoft Enterprise FIN Contracts
- CVE-2026-34299Vulnerability in the PeopleSoft Enterprise FIN Maintenance Management product of Oracle PeopleSoft (component: Work Order Management).Oracle PeopleSoft Enterprise FIN Maintenance Management
- CVE-2026-34298Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization).Oracle Applications Framework
- CVE-2026-34296Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality…Oracle Agile Product Lifecycle Management for Process
- CVE-2026-34295Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Purchasing).Oracle PeopleSoft Enterprise SCM Purchasing
- CVE-2026-34294Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Microsoft Active Directory).Oracle Identity Manager Connector
- CVE-2026-34293Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).Oracle MySQL Server
- CVE-2026-34289Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).Oracle Identity Manager Connector
- CVE-2026-34288Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).Oracle Identity Manager Connector
- CVE-2026-34284Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human workflow 11g+).Oracle Business Process Management Suite
- CVE-2026-34283Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Identity Console).Oracle Identity Manager
- CVE-2026-34281Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel).Oracle Solaris
- CVE-2026-34280Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Job Profile Manager).Oracle PeopleSoft Enterprise HCM Human Resources
- CVE-2026-34278Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2026-34277Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-34276Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin).Oracle MySQL Server
- CVE-2026-34274Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: User Interface).Oracle Configurator
- CVE-2026-34273Vulnerability in Oracle GoldenGate (component: Libraries).Oracle GoldenGate
- CVE-2026-34272Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2026-34271Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin).Oracle MySQL Server
- CVE-2026-34270Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin).Oracle MySQL Server
- CVE-2026-34269Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-34268Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component…Oracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-34267Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2026-34266Vulnerability in the PeopleSoft Enterprise HCM Absence Management product of Oracle PeopleSoft (component: Absence Management).Oracle PeopleSoft Enterprise HCM Absence Management
- CVE-2026-22021Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).Oracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-22019Vulnerability in the PeopleSoft Enterprise HCM Shared Components product of Oracle PeopleSoft (component: Person Search).Oracle PeopleSoft Enterprise HCM Shared Components
- CVE-2026-22018Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component…Oracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-22017Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2026-22015Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema).Oracle MySQL Server
- CVE-2026-22014Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Workflow and Business Events).Oracle User Management
- CVE-2026-22013Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).Oracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-22009Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2026-22008Vulnerability in Oracle Java SE (component: Libraries).Oracle Java SE
- CVE-2026-22007Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component…Oracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-22006Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Employee Snapshot).Oracle PeopleSoft Enterprise HCM Human Resources
- CVE-2026-22005Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2026-22004Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2026-22003Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).Oracle Java SE · Oracle GraalVM Enterprise Edition
- CVE-2026-22002Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2026-22001Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema).Oracle MySQL Server
- CVE-2026-21999Vulnerability in the XML Database component of Oracle Database Server.Oracle Database Server
- CVE-2026-21998Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2026-6796Sanluan PublicCMS Failed Login LoginAdminController.java log_login cleartext storage in fileSanluan PublicCMS
- CVE-2026-40910frp: Authentication bypass in frp HTTP vhost routing when routeByHTTPUser is used for access controlfatedier frp · github.com/fatedier/frp
- CVE-2026-40895follow-redirects: Custom Authentication Headers Leaked to Cross-Domain Redirect Targetsfollow-redirects
- CVE-2026-40908WWBN AVideo has an Unauthenticated Information Disclosure via git.json.php that Exposes Developer Emails and Deployed VersionWWBN AVideo · wwbn/avideo
- CVE-2026-40907WWBN AVideo has IDOR in Live Restreams list.json.php that Exposes Other Users' Stream Keys and OAuth TokensWWBN AVideo · wwbn/avideo
- CVE-2026-40883goshs: CSRF in state-changing GET routes enables authenticated file deletion and directory creationpatrickhener goshs · github.com/patrickhener/goshs +1
- CVE-2026-41320Frappe HR has possibility of SQL Injection due to improper field sanitizationfrappe hrms
- CVE-2026-40889Frappe HR has Improper Access Control on Filesfrappe hrms
- CVE-2026-40888Frappe HR vulnerable to Improper Access Controlfrappe hrms
- CVE-2026-40878mailcow-dockerized Login Page has Reflected Parameter Injection / Wrong-Context XSS Escapingmailcow-dockerized
- CVE-2026-33812Excessive memory allocation when decoding malicious SFNT in golang.org/x/imagegolang.org/x/image/font/sfnt · golang.org/x/image
- CVE-2026-40881Zebra: addr/addrv2 Deserialization Resource ExhaustionZcashFoundation zebrad · ZcashFoundation zebra-network +2
- CVE-2026-40874mailcow: dockerized missing authorization on Forwarding Hosts delete actionmailcow-dockerized
- CVE-2026-22751Spring Security JdbcOneTimeTokenService allows a one-time token to authenticate multiple sessionsSpring Security · org.springframework.security:spring-secur…
- CVE-2026-6745Bagisto Custom Scripts cross site scriptingBagisto · bagisto/bagisto
- CVE-2026-41456Bludit CMS Reflected XSS via Search Pluginbludit
- CVE-2026-6744Bagisto Downloadable Link copy server-side request forgeryBagisto · bagisto/bagisto
- CVE-2026-40608Next AI Draw.io: Unbounded HTTP Body — Denial of ServiceDayuanJiang next-ai-draw-io
- CVE-2026-40606ProxyAuth Addon LDAP Injection in mitmproxymitmproxy
- CVE-2026-40602hass-cli: Handling of user-supplied Jinja2 templateshome-assistant-ecosystem home-assistant-cli · homeassistant…
- CVE-2026-41194FreeScout's Mailbox OAuth disconnect uses a state-changing GET and is CSRFablefreescout-help-desk freescout
- CVE-2026-40594pyLoad: Session Cookie Security Downgrade via Untrusted X-Forwarded-Proto Header Spoofing (Global State Race Condition)pyload · pyload-ng
- CVE-2026-40587blueprintUE: Active Sessions Are Not Invalidated After Password Change or Resetblueprintue-self-hosted-edition
- CVE-2026-40584RansomLook - Improper Filtering of Private Location Entries in API Endpoints Leads to Information ExposureRansomLook
- CVE-2026-41183FreeScout allows non-folder conversation queries to disclose assigned-only hidden conversationsfreescout-help-desk freescout
- CVE-2026-40592FreeScout's cross-user undo reply allows mailbox peers to recall another agent's outbound replyfreescout-help-desk freescout
- CVE-2026-40590FreeScout's Customer AJAX Create Modifies Hidden Existing Customerfreescout-help-desk freescout
- CVE-2026-40570FreeScout's Missing Authorization in load_customer_info Allows Any Authenticated User to Access Full Customer PIIfreescout-help-desk freescout
- CVE-2026-40574OAuth2 Proxy has an Authorization Bypass in Email Domain Validation via Malformed Multi-@ Email Claimsoauth2-proxy · github.com/oauth2-proxy/oauth2-proxy/v7 +1
- CVE-2026-6743WebSystems WebTOTUM Calendar cross site scriptingWebSystems WebTOTUM
- CVE-2026-40279BACnet Stack: Undefined-behavior signed left shift in `decode_signed32()`bacnet-stack
- CVE-2026-35451Twenty: Stored XSS via BlockNote FileBlocktwentyhq twenty
- CVE-2026-29179October: Editor Sub-Permission Bypass for Asset and Blueprint File Operationsoctobercms october · october/system
- CVE-2026-27937October: Reflected XSS via DataTable Form Widgetoctobercms october · october/system
- CVE-2026-24176NVIDIA KAI Scheduler contains a vulnerability where an attacker could cause improper authorization through cross-namespace pod references.NVIDIA KAI Scheduler
- CVE-2026-26274October: Safe Mode Bypass via Twig Database Write Operationsoctobercms october · october/october
- CVE-2026-26067October: Safe Mode Bypass via CSS Preprocessor Compilersoctobercms october · october/system
- CVE-2026-40567FreeScout has HTML Injection in Outgoing Emails via Unsanitized Customer Name in Signature Variablesfreescout-help-desk freescout
- CVE-2026-25542Tekton Pipelines: VerificationPolicy regex pattern bypass via substring matchingtektoncd pipeline · github.com/tektoncd/pipeline
- CVE-2026-40566FreeScout vulnerable to SSRF via IMAP/SMTP Connection Test Endpointsfreescout-help-desk freescout
- CVE-2026-40565FreeScout has Stored XSS / CSS Injection via linkify() — Unescaped URL in Anchor hreffreescout-help-desk freescout
- CVE-2025-41011HTML injection in PHP Point Of SalePHP Point Of Sale
- CVE-2025-10354Reflected Cross-Site Scripting (XSS) in Semantic MediaWikiSemantic MediaWiki
- CVE-2025-31981HCL BigFix Service Management (SM) Discovery is vulnerable to unenforced encryptionHCLSoftware BigFix Service Management
- CVE-2026-1089User‑Controlled HTTP Header In Fortra's GoAnywhere MFT Allows Arbitrary DNS LookupsFortra GoAnywhere MFT
- CVE-2026-0972HTML Injection possible in system generated emails in Fortra's GoAnywhere MFTFortra GoAnywhere MFT
- CVE-2026-0971GoAnywhere MFT SAML Sessions do not redirect to logout URL on session timeoutFortra GoAnywhere MFT
- CVE-2025-1241Encryption vulnerable to brute-force decryption in GoAnywhere MFTFortra GoAnywhere MFT
- CVE-2025-31958HCL BigFix Service Management (SM) is susceptible to HTTP Request SmugglingHCLSoftware BigFix Service Management
- CVE-2026-6783Incorrect boundary conditions, integer overflow in the Audio/Video: Playback componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-6779Other issue in the JavaScript Engine componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-6778Invalid pointer in the Audio/Video: Playback componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-6777Other issue in the Networking: DNS componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-6775Incorrect boundary conditions in the WebRTC componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-6774Mitigation bypass in the DOM: Security componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-6770Other issue in the Storage: IndexedDB componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-6767Other issue in the Libraries component in NSSMozilla Firefox · Mozilla Thunderbird
- CVE-2026-6765Information disclosure in the Form Autofill componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-6764Incorrect boundary conditions in the DOM: Device Interfaces componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-6763Mitigation bypass in the File Handling componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-6762Spoofing issue in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-6757Invalid pointer in the JavaScript: WebAssembly componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-6755Mitigation bypass in the DOM: postMessage componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-32147SFTP chroot bypass via path traversal in SSH_FXP_FSETSTATErlang OTP
- CVE-2026-3317Reflected Cross-Site Scripting in Navigate CMS applicationNavigate CMS
- CVE-2026-6711Website LLMs.txt <= 8.2.6 - Reflected Cross-Site Scriptingryhowa Website LLMs.txt
- CVE-2026-6712Website LLMs.txt <= 8.2.6 - Authenticated (Admin+) Stored Cross-Site Scriptingryhowa Website LLMs.txt
- CVE-2026-6703Responsive Blocks <= 2.2.1 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via AJAX Actionscyberchimps Responsive Blocks – Page Builder for Blocks & P…
- CVE-2026-31370Information Leak Vulnerability in Honor EHonor E
- CVE-2026-31369Privilege Bypass in PcManagerHonor PcManager
- CVE-2026-6674Plugin: CMS für Motorrad Werkstätten <= 1.0.0 - Authenticated (Subscriber+) SQL Injection via 'arttype' Parametertholstkabelbwde Plugin: CMS für Motorrad Werkstätten
- CVE-2026-6675Responsive Blocks <= 2.2.0 - Unauthenticated Open Email Relay via REST API 'email_to' Parametercyberchimps Responsive Blocks – Page Builder for Blocks & P…
- CVE-2026-6058* UNSUPPORTED WHEN ASSIGNED * An improper encoding or escaping vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version…Zyxel WRE6505 v2 firmware
- CVE-2026-39886OpenEXR has HTJ2K Signed Integer Overflow in ht_undo_impl()AcademySoftwareFoundation openexr
- CVE-2026-40264OpenBao's Token Store Allows Cross-Namespace Renewal, Revocationopenbao · github.com/openbao/openbao
- CVE-2026-39396OpenBao has Decompression Bomb via Unbounded Copy in OCI Plugin Extraction (DoS)openbao · github.com/openbao/openbao
- CVE-2026-39388OpenBao's Certificate Authentication Allows Token Renewal With Different Certificateopenbao · github.com/openbao/openbao
- CVE-2026-39946OpenBao allows SQL Injection in PostgreSQL database secrets engineopenbao · github.com/openbao/openbao
- CVE-2026-39378nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embeddingjupyter nbconvert · nbconvert
- CVE-2026-39377nbconvert has an Arbitrary File Write via Path Traversal in Cell Attachment Filenamesjupyter nbconvert · nbconvert
- CVE-2026-29644XiangShan (open-source high-performance RISC-V processor) commit edb1dfaf7d290ae99724594507dc46c2c2125384 (2024-11-28) has improper gating…
- CVE-2026-30452Textpattern CMS 4.9.0 contains a Broken Access Control vulnerability in the article management system that allows authenticated users with…
- CVE-2026-31013Dovestones Softwares ADPhonebook <4.0.1.1 has a reflected cross-site scripting (XSS) vulnerability in the search parameter of the…
- CVE-2026-31014Dovestones Softwares AD Self Update <4.0.0.5 is vulnerable to Cross Site Request Forgery (CSRF).
- CVE-2026-41527KDE Kleopatra before 26.08.0 on Windows allows local users to obtain the privileges of a Kleopatra user, because there is an error in the…KDE Kleopatra