# CVEs published 2026-05-12

553 CVEs were published on May 12, 2026: 72 critical, 285 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2026-8053](https://cve.now/CVE-2026-8053.md): FlatBSON Duplicate Field Index Drift (CVSS 8.7, MongoDB Server)
- [CVE-2026-42158](https://cve.now/CVE-2026-42158.md): Flowsint: Broken Access Control allows modification of investigation metadata from any user (CVSS 2.3, reconurge flowsint)
- [CVE-2026-42156](https://cve.now/CVE-2026-42156.md): Flowsint: Cypher query injection in node type on node creation (CVSS 7.1, reconurge flowsint)
- [CVE-2026-42157](https://cve.now/CVE-2026-42157.md): Flowsint: Stored XSS on map node marker in map page (CVSS 5.1, reconurge flowsint)
- [CVE-2026-44352](https://cve.now/CVE-2026-44352.md): Flowsint: Broken Access Control allows reading of sketch logs from any user (CVSS 5.3, reconurge flowsint)
- [CVE-2026-44245](https://cve.now/CVE-2026-44245.md): Kyverno: \[policy-reporter-ui\] XSS via Stored Property Values in PropertyCard Component (CVSS 6.1, kyverno · github.com/kyverno/policy-reporter-ui)
- [CVE-2026-44347](https://cve.now/CVE-2026-44347.md): Warpgate: SSO CSRF -- State Token Not Validated on Return (CVSS 5.8, warp-tech warpgate)
- [CVE-2026-44341](https://cve.now/CVE-2026-44341.md): GoJobs: Insecure Direct Object Reference (IDOR) in Job Retrieval Endpoint (CVSS 5.3, karnop gojobs)
- [CVE-2026-41901](https://cve.now/CVE-2026-41901.md): Thymeleaf: Improper recognition of unauthorized syntax patterns in sandboxed Thymeleaf expressions (CVSS 9.0, thymeleaf · org.thymeleaf:thymeleaf +2)
- [CVE-2026-44548](https://cve.now/CVE-2026-44548.md): ChurchCRM: CSRF via legacy GET-delete pages (FundRaiserDelete.php, PropertyTypeDelete.php, NoteDelete.php) (CVSS 8.1, ChurchCRM CRM)
- [CVE-2026-44547](https://cve.now/CVE-2026-44547.md): ChurchCRM: Incomplete fix for CVE-2026-40582: public API login still bypasses 2FA and account lockout in ChurchCRM 7.2.2 (CVSS 9.6, ChurchCRM CRM)
- [CVE-2026-8108](https://cve.now/CVE-2026-8108.md): Fuji Electric Tellus Exposed Dangerous Method or Function (CVSS 7.8, Fuji Electric Tellus)
- [CVE-2026-42288](https://cve.now/CVE-2026-42288.md): ChurchCRM: Incomplete fix for CVE-2026-39337: Unauthenticated RCE in Setup Wizard via unsanitized DB\_PASSWORD (CVSS 10.0, ChurchCRM CRM)
- [CVE-2026-43680](https://cve.now/CVE-2026-43680.md): A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to bypass a front-end… (CVSS 7.2, Claris FileMaker Cloud)
- [CVE-2026-43685](https://cve.now/CVE-2026-43685.md): A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to inject arbitrary operating… (CVSS 7.2, Claris FileMaker Cloud)
- [CVE-2025-15463](https://cve.now/CVE-2025-15463.md): Advanced Custom Fields: Extended \<= 0.9.2.3 - Unauthenticated Arbitrary Shortcode Execution (CVSS 6.5, hwk-fr Advanced Custom Fields: Extended)
- [CVE-2026-1250](https://cve.now/CVE-2026-1250.md): Court Reservation – Manage Your Court Bookings Online \<= 1.10.11 - Unauthenticated SQL Injection (CVSS 7.5, webmuehle Court Reservation – Manage Your Court Bookings On…)
- [CVE-2026-5371](https://cve.now/CVE-2026-5371.md): MonsterInsights \<= 10.1.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure And Plugin Integration Reset (CVSS 7.1, chriscct7 MonsterInsights – Google Analytics Dashboard for…)
- [CVE-2026-42289](https://cve.now/CVE-2026-42289.md): ChurchCRM: Cross-Site Request Forgery (CSRF) Leading to Admin Privilege Escalation (CVSS 8.8, ChurchCRM CRM)
- [CVE-2026-40863](https://cve.now/CVE-2026-40863.md): PhpSpreadsheet: CPU Denial of Service via Unbounded Row Index in SpreadsheetML XML Reader (CVSS 7.5, PHPOffice PhpSpreadsheet · phpoffice/phpspreadsheet)
- [CVE-2026-40902](https://cve.now/CVE-2026-40902.md): PhpSpreadsheet: CPU Denial of Service via Unbounded Row Number in XLSX Row Dimensions (CVSS 7.5, PHPOffice PhpSpreadsheet · phpoffice/phpspreadsheet)
- [CVE-2026-42854](https://cve.now/CVE-2026-42854.md): arduino-esp32: Stack buffer overflow in WebServer multipart boundary parsing leads to remote crash potential RCE (CVSS 9.8, espressif arduino-esp32)
- [CVE-2026-42855](https://cve.now/CVE-2026-42855.md): arduino-esp32: Digest authentication URI mismatch bypass in WebServer allows cross-resource replay attack (CVSS 7.5, espressif arduino-esp32)
- [CVE-2026-44307](https://cve.now/CVE-2026-44307.md): Mako: Path traversal via backslash URI on Windows in TemplateLookup (CVSS 8.7, sqlalchemy mako · mako)
- [CVE-2026-42545](https://cve.now/CVE-2026-42545.md): Granian: DoS via WSGI response header panic (CVSS 5.9, emmett-framework granian · granian)
- [CVE-2026-42544](https://cve.now/CVE-2026-42544.md): Granian: Unauthenticated DoS via WebSocket subprotocol header panic (CVSS 7.5, emmett-framework granian · granian)
- [CVE-2026-42844](https://cve.now/CVE-2026-42844.md): Grav: Low-privileged API users can create super-admin accounts via blueprint-upload (CVSS 8.7, getgrav grav · getgrav/grav)
- [CVE-2026-42268](https://cve.now/CVE-2026-42268.md): ModSecurity: Unsigned integer underflow in @verifySSN / @verifyCPF / @verifySVNR operators (CVSS 8.2, owasp-modsecurity ModSecurity)
- [CVE-2026-44301](https://cve.now/CVE-2026-44301.md): Hugo: Node tool execution allows file system access outside the project directory (CVSS 6.2, gohugoio hugo · github.com/gohugoio/hugo)
- [CVE-2026-44302](https://cve.now/CVE-2026-44302.md): Snappier: Infinite loop in SnappyStream decompression on malformed framed input (CVSS 7.5, brantburnett Snappier · Snappier)
- [CVE-2026-44306](https://cve.now/CVE-2026-44306.md): Statamic: Email enumeration via forgot password endpoint (CVSS 5.3, statamic cms · statamic/cms)
- [CVE-2026-44305](https://cve.now/CVE-2026-44305.md): Lemur: LDAP TLS certificate verification globally disabled enables credential interception (CVSS 6.8, Netflix lemur · lemur)
- [CVE-2026-44304](https://cve.now/CVE-2026-44304.md): Lemur: LDAP Filter Injection enables post-authentication privilege escalation (CVSS 8.1, Netflix lemur · lemur)
- [CVE-2026-41195](https://cve.now/CVE-2026-41195.md): mosparo: Rule package source URL stored SSRF enables internal HTTP probing (CVSS 5.0, mosparo)
- [CVE-2026-44241](https://cve.now/CVE-2026-44241.md): Micronaut Framework: Unbounded formattersCache in TimeConverterRegistrar Allows Memory Exhaustion via Accept-Language Header (CVSS 7.5, micronaut-projects micronaut-core · io.micronaut:micronaut-…)
- [CVE-2026-45227](https://cve.now/CVE-2026-45227.md): Heym \< 0.0.21 Sandbox Escape via Python Introspection (CVSS 8.7, heymrun heym)
- [CVE-2026-44242](https://cve.now/CVE-2026-44242.md): Micronaut Framework: Unbounded bundleCache in ResourceBundleMessageSource Allows Memory Exhaustion via Accept-Language Header (CVSS 3.7, micronaut-projects micronaut-core · io.micronaut:micronaut-…)
- [CVE-2026-45226](https://cve.now/CVE-2026-45226.md): Heym \< 0.0.21 Authorization Bypass in Workflow Execution (CVSS 7.6, heymrun heym)
- [CVE-2026-44260](https://cve.now/CVE-2026-44260.md): efw4.X: readonly Flag Not Enforced Server-Side (CVSS 8.1, efwGrp efw4.X)
- [CVE-2026-45225](https://cve.now/CVE-2026-45225.md): Heym \< 0.0.21 Path Traversal File Upload via upload\_file() (CVSS 7.2, heymrun heym)
- [CVE-2026-44259](https://cve.now/CVE-2026-44259.md): efw4.X: Stored XSS via previewServlet (CVSS 4.6, efwGrp efw4.X)
- [CVE-2026-44257](https://cve.now/CVE-2026-44257.md): efw4.X: RCE via zipslip (CVSS 9.3, efwGrp efw4.X)
- [CVE-2026-44871](https://cve.now/CVE-2026-44871.md): Authenticated Command Injection Vulnerabilities in Command Line Interface (CLI) Service Accessed by PAPI Protocol of AOS-8 and AOS-10… (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-44258](https://cve.now/CVE-2026-44258.md): efw4.X: Path Traversal via Unchecked dst Parameter leads to Remote Code Execution (CVSS 9.3, efwGrp efw4.X)
- [CVE-2026-26289](https://cve.now/CVE-2026-26289.md): Subnet Solutions PowerSYSTEM Center Incorrect Authorization (CVSS 8.4, Subnet Solutions PowerSYSTEM Center)
- [CVE-2026-33570](https://cve.now/CVE-2026-33570.md): Subnet Solutions PowerSYSTEM Center Incorrect Authorization (CVSS 6.9, Subnet Solutions PowerSYSTEM Center)
- [CVE-2026-42196](https://cve.now/CVE-2026-42196.md): django-s3file: Relative path traversal (CVSS 9.9, codingjoe django-s3file · django-s3file)
- [CVE-2026-44262](https://cve.now/CVE-2026-44262.md): Scramble: Remote code execution via evaluation of user-controlled input in validation rules (CVSS 9.4, dedoc scramble · dedoc/scramble)
- [CVE-2026-44296](https://cve.now/CVE-2026-44296.md): Deskflow: TLS multiplexer DoS on failed \`SSL\_accept\` (CVSS 7.5, deskflow)
- [CVE-2026-44015](https://cve.now/CVE-2026-44015.md): Nginx UI: Server-Side Request Forgery (SSRF) via Cluster Proxy Middleware Allows Access to Internal Services (CVSS 8.5, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-35555](https://cve.now/CVE-2026-35555.md): Subnet Solutions PowerSYSTEM Center Incorrect Authorization (CVSS 7.0, Subnet Solutions PowerSYSTEM Center)
- [CVE-2026-43948](https://cve.now/CVE-2026-43948.md): wger: cross-tenant password reset and plaintext disclosure via gym=None bypass (CVSS 9.9, wger-project wger · wger)
- [CVE-2026-44403](https://cve.now/CVE-2026-44403.md): Wing FTP Server \< 8.1.3 Authenticated Remote Code Execution via Session Serialization (CVSS 7.2, Wing FTP Server)
- [CVE-2026-44246](https://cve.now/CVE-2026-44246.md): nnU-Net: Agentic workflow injection in \`.github/workflows/issue-triage.yml\` of \`MIC-DKFZ/nnUNet\` (CVSS 7.2, MIC-DKFZ nnUNet)
- [CVE-2026-44240](https://cve.now/CVE-2026-44240.md): basic-ftp allows a malicious FTP server to cause client-side denial of service via unbounded multiline control response buffering (CVSS 7.5, patrickjuchli basic-ftp · basic-ftp)
- [CVE-2026-44224](https://cve.now/CVE-2026-44224.md): Wiki.js: Privilege Escalation via Missing Group Validation in users.update (CVSS 8.6, requarks wiki)
- [CVE-2026-44232](https://cve.now/CVE-2026-44232.md): dssrf: every IPv6 category bypasses is\_url\_safe (CVSS 8.7, HackingRepo dssrf-js · dssrf)
- [CVE-2025-65088](https://cve.now/CVE-2025-65088.md): Out-of-bounds read in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share (CVSS 8.4, Ashlar-Vellum Cobalt · Ashlar-Vellum Xenon +2)
- [CVE-2025-65087](https://cve.now/CVE-2025-65087.md): Out-of-bounds read in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share (CVSS 8.4, Ashlar-Vellum Cobalt · Ashlar-Vellum Xenon +2)
- [CVE-2026-44011](https://cve.now/CVE-2026-44011.md): Craft CMS: Potential authenticated Remote Code Execution via malicious attached Behavior (CVSS 8.6, craftcms cms · craftcms/cms)
- [CVE-2025-65086](https://cve.now/CVE-2025-65086.md): Out-of-bounds write in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share (CVSS 8.4, Ashlar-Vellum Cobalt · Ashlar-Vellum Xenon +2)
- [CVE-2026-35504](https://cve.now/CVE-2026-35504.md): Subnet Solutions PowerSYSTEM Center CRLF injection (CVSS 5.1, Subnet Solutions PowerSYSTEM Center)
- [CVE-2026-44012](https://cve.now/CVE-2026-44012.md): Craft CMS: Missing Volume Permission Check in AssetsController::actionShowInFolder Allows Information Disclosure (CVSS 7.1, craftcms cms · craftcms/cms)
- [CVE-2026-44010](https://cve.now/CVE-2026-44010.md): Craft CMS: Missing Authorization in GraphQL Address Resolver Allows Cross-Scope PII Disclosure (CVSS 7.1, craftcms cms · craftcms/cms)
- [CVE-2026-34672](https://cve.now/CVE-2026-34672.md): CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191) (CVSS 6.2, Adobe Content Credentials JS SDK · Adobe Content Credential…)
- [CVE-2026-34671](https://cve.now/CVE-2026-34671.md): CAI Content Credentials | Integer Overflow or Wraparound (CWE-190) (CVSS 6.2, Adobe Content Credentials JS SDK · Adobe Content Credential…)
- [CVE-2026-34669](https://cve.now/CVE-2026-34669.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 6.2, Adobe Content Credentials JS SDK · Adobe Content Credential…)
- [CVE-2026-34678](https://cve.now/CVE-2026-34678.md): CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) (CVSS 6.2, Adobe Content Credentials JS SDK · Adobe Content Credential…)
- [CVE-2026-34688](https://cve.now/CVE-2026-34688.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 6.2, Adobe Content Credentials JS SDK · Adobe Content Credential…)
- [CVE-2026-34680](https://cve.now/CVE-2026-34680.md): CAI Content Credentials | Integer Overflow or Wraparound (CWE-190) (CVSS 6.2, Adobe Content Credentials JS SDK · Adobe Content Credential…)
- [CVE-2026-34668](https://cve.now/CVE-2026-34668.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 6.2, Adobe Content Credentials JS SDK · Adobe Content Credential…)
- [CVE-2026-34673](https://cve.now/CVE-2026-34673.md): CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) (CVSS 6.2, Adobe Content Credentials JS SDK · Adobe Content Credential…)
- [CVE-2026-34667](https://cve.now/CVE-2026-34667.md): CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191) (CVSS 6.2, Adobe Content Credentials JS SDK · Adobe Content Credential…)
- [CVE-2026-34665](https://cve.now/CVE-2026-34665.md): CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) (CVSS 7.5, Adobe Content Credentials JS SDK · Adobe Content Credential…)
- [CVE-2026-34670](https://cve.now/CVE-2026-34670.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 6.2, Adobe Content Credentials JS SDK · Adobe Content Credential…)
- [CVE-2026-34679](https://cve.now/CVE-2026-34679.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 6.2, Adobe Content Credentials JS SDK · Adobe Content Credential…)
- [CVE-2026-34666](https://cve.now/CVE-2026-34666.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 6.2, Adobe Content Credentials JS SDK · Adobe Content Credential…)
- [CVE-2026-34677](https://cve.now/CVE-2026-34677.md): CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) (CVSS 6.2, Adobe Content Credentials JS SDK · Adobe Content Credential…)
- [CVE-2026-44225](https://cve.now/CVE-2026-44225.md): Pulpy: Incomplete filesystem sandbox in pulpy.fs bridge allows packaged web apps to read arbitrary user files (CVSS 9.3, enesgkky Pulpy)
- [CVE-2026-44223](https://cve.now/CVE-2026-44223.md): vLLM: extract\_hidden\_states speculative decoding crashes server on any request with penalty parameters (CVSS 6.5, vllm-project vllm · vllm)
- [CVE-2026-44222](https://cve.now/CVE-2026-44222.md): vLLM: Remote DoS via Special-Token Placeholders (CVSS 6.5, vllm-project vllm · vllm)
- [CVE-2026-44221](https://cve.now/CVE-2026-44221.md): ArcadeDB: Cross-database authorization bypass and unsecured newly-created databases (CVSS 9.0, ArcadeData arcadedb · com.arcadedb:arcadedb-server)
- [CVE-2026-44217](https://cve.now/CVE-2026-44217.md): sse-channel: SSE Injection via unsanitized event fields (CVSS 6.6, rexxars sse-channel · sse-channel)
- [CVE-2026-34656](https://cve.now/CVE-2026-34656.md): Adobe Commerce | Improper Authorization (CWE-285) (CVSS 4.3, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-34658](https://cve.now/CVE-2026-34658.md): Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 4.8, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-34650](https://cve.now/CVE-2026-34650.md): Adobe Commerce | Uncontrolled Resource Consumption (CWE-400) (CVSS 7.5, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-34686](https://cve.now/CVE-2026-34686.md): Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 8.7, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-34647](https://cve.now/CVE-2026-34647.md): Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918) (CVSS 7.4, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-34685](https://cve.now/CVE-2026-34685.md): Adobe Commerce | Improper Input Validation (CWE-20) (CVSS 3.4, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-34653](https://cve.now/CVE-2026-34653.md): Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) (CVSS 8.7, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-34652](https://cve.now/CVE-2026-34652.md): Adobe Commerce | Dependency on Vulnerable Third-Party Component (CWE-1395) (CVSS 7.5, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-34645](https://cve.now/CVE-2026-34645.md): Adobe Commerce | Incorrect Authorization (CWE-863) (CVSS 7.5, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-34648](https://cve.now/CVE-2026-34648.md): Adobe Commerce | Uncontrolled Resource Consumption (CWE-400) (CVSS 7.5, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-34649](https://cve.now/CVE-2026-34649.md): Adobe Commerce | Uncontrolled Resource Consumption (CWE-400) (CVSS 7.5, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-34655](https://cve.now/CVE-2026-34655.md): Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 4.8, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-34654](https://cve.now/CVE-2026-34654.md): Adobe Commerce | Dependency on Vulnerable Third-Party Component (CWE-1395) (CVSS 5.3, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-34651](https://cve.now/CVE-2026-34651.md): Adobe Commerce | Uncontrolled Resource Consumption (CWE-400) (CVSS 7.5, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-34646](https://cve.now/CVE-2026-34646.md): Adobe Commerce | Incorrect Authorization (CWE-863) (CVSS 7.5, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-42338](https://cve.now/CVE-2026-42338.md): ip-address: XSS in Address6 HTML-emitting methods (CVSS 5.3, beaugunderson ip-address · ip-address)
- [CVE-2026-44219](https://cve.now/CVE-2026-44219.md): ciguard: SCA HTTP client reads response body without size cap (CVSS 3.7, Jo-Jo98 ciguard · ciguard)
- [CVE-2026-44218](https://cve.now/CVE-2026-44218.md): ciguard: Container image runs as root (no USER directive) (CVSS 3.0, Jo-Jo98 ciguard · ciguard)
- [CVE-2026-44220](https://cve.now/CVE-2026-44220.md): ciguard: discover\_pipeline\_files follows symlinks out of scan root (CVSS 3.2, Jo-Jo98 ciguard · ciguard)
- [CVE-2026-42889](https://cve.now/CVE-2026-42889.md): Relay Server WebSocket authentication bypass when token is omitted (CVSS 9.1, No-Instructions relay-server)
- [CVE-2026-34690](https://cve.now/CVE-2026-34690.md): After Effects | Stack-based Buffer Overflow (CWE-121) (CVSS 7.8, Adobe After Effects)
- [CVE-2026-44215](https://cve.now/CVE-2026-44215.md): NanaZip: Heap out-of-bounds write in NanaZip UFS directory parser (CVSS 4.4, M2Team NanaZip)
- [CVE-2026-42445](https://cve.now/CVE-2026-42445.md): NanaZip: Uncontrolled recursion in NanaZip UFS directory traversal causes stack exhaustion (CVSS 3.3, M2Team NanaZip)
- [CVE-2026-42444](https://cve.now/CVE-2026-42444.md): NanaZip: Unbounded resource consumption in NanaZip littlefs parser via attacker-controlled BlockCount (CVSS 3.3, M2Team NanaZip)
- [CVE-2026-42443](https://cve.now/CVE-2026-42443.md): NanaZip: Integer divide-by-zero in NanaZip UFS inode offset calculation (CVSS 3.3, M2Team NanaZip)
- [CVE-2026-42442](https://cve.now/CVE-2026-42442.md): NanaZip: Null-pointer dereference in NanaZip UFS parser when root inode is a symlink (CVSS 3.3, M2Team NanaZip)
- [CVE-2026-42355](https://cve.now/CVE-2026-42355.md): NanaZip: Uncontrolled recursion in NanaZip Electron ASAR parser causes stack exhaustion (CVSS 3.3, M2Team NanaZip)
- [CVE-2026-44873](https://cve.now/CVE-2026-44873.md): Insufficient Session Invalidation on User Account Deactivation in AOS-8 Operating System (CVSS 5.4, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-42446](https://cve.now/CVE-2026-42446.md): NanaZip: Stack out-of-bounds read in NanaZip ZealFS bitmap parser (CVSS 4.4, M2Team NanaZip)
- [CVE-2026-44874](https://cve.now/CVE-2026-44874.md): Authenticated Arbitrary File Download via AOS-10 Web-Based Management Interface (CVSS 4.9, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-44872](https://cve.now/CVE-2026-44872.md): Authenticated Arbitrary File Upload via Command Injection in AOS-8 AND AOS-10 Web-Based Management Interface (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-44870](https://cve.now/CVE-2026-44870.md): Authenticated Command Injection Vulnerabilities in Command Line Interface (CLI) Service Accessed by PAPI Protocol of AOS-8 and AOS-10… (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-44869](https://cve.now/CVE-2026-44869.md): Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-44868](https://cve.now/CVE-2026-44868.md): Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-44867](https://cve.now/CVE-2026-44867.md): Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-44866](https://cve.now/CVE-2026-44866.md): Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-42191](https://cve.now/CVE-2026-42191.md): OpenTelemetry.Exporter.OpenTelemetryProtocol: Disk retry default temp path enables local blob injection for OTLP Exporter (CVSS 6.5, open-telemetry opentelemetry-dotnet · OpenTelemetry.Exporte…)
- [CVE-2026-44865](https://cve.now/CVE-2026-44865.md): Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-44864](https://cve.now/CVE-2026-44864.md): Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-7474](https://cve.now/CVE-2026-7474.md): Nomad vulnerable to path traversal in dynamic host volume which may lead to code execution (CVSS 8.8, HashiCorp Nomad · github.com/hashicorp/nomad)
- [CVE-2026-44863](https://cve.now/CVE-2026-44863.md): Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-8052](https://cve.now/CVE-2026-8052.md): Nomad's exec2 task driver vulnerable to arbitrary file read/write on client host through symlink attack (CVSS 6.0, HashiCorp Shared library · github.com/hashicorp/nomad-drive…)
- [CVE-2026-44862](https://cve.now/CVE-2026-44862.md): Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-44861](https://cve.now/CVE-2026-44861.md): Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-44860](https://cve.now/CVE-2026-44860.md): Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-44859](https://cve.now/CVE-2026-44859.md): Authenticated Stack-Based Buffer Overflow in PAPI Services (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-44858](https://cve.now/CVE-2026-44858.md): Authenticated Stack-Based Buffer Overflow in PAPI Services (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-44857](https://cve.now/CVE-2026-44857.md): Authenticated Stack-Based Buffer Overflow in PAPI Services (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-44856](https://cve.now/CVE-2026-44856.md): Authenticated Stack-Based Buffer Overflow in PAPI Services (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-44855](https://cve.now/CVE-2026-44855.md): Authenticated Stack-Based Buffer Overflow in PAPI Services (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-6959](https://cve.now/CVE-2026-6959.md): Nomad vulnerable to arbitrary file read/write on client host through symlink attack (CVSS 6.0, HashiCorp Nomad · github.com/hashicorp/nomad)
- [CVE-2026-44854](https://cve.now/CVE-2026-44854.md): Authenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-44853](https://cve.now/CVE-2026-44853.md): Authenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-44852](https://cve.now/CVE-2026-44852.md): Authenticated Remote Code Execution via Arbitrary File Overwrite in the AOS-8 and AOS-10 Web-Based Management Interface (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-23827](https://cve.now/CVE-2026-23827.md): Unauthenticated Remote Code Execution via Heap Buffer Overflow in Network Management Service (CVSS 7.5, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-23826](https://cve.now/CVE-2026-23826.md): Unauthenticated Denial of Service in AOS-8 Network Management Service (CVSS 7.5, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-23825](https://cve.now/CVE-2026-23825.md): Unauthenticated Denial-of-Service via Crafted Messages in a Network Protocol Handling Component (CVSS 7.5, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-23824](https://cve.now/CVE-2026-23824.md): Unauthenticated Denial-of-Service via Crafted Messages in a Network Protocol Handling Component (CVSS 7.5, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-8430](https://cve.now/CVE-2026-8430.md): SPIP \< 4.4.14 Remote Code Execution via nginx (CVSS 8.1, SPIP)
- [CVE-2026-23823](https://cve.now/CVE-2026-23823.md): Authenticated Command Injection leads to RCE in AOS-10 CLI Command (CVSS 7.2, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-8431](https://cve.now/CVE-2026-8431.md): Ops Manager RCE via webhook body (CVSS 9.4, MongoDB Ops Manager)
- [CVE-2026-23822](https://cve.now/CVE-2026-23822.md): Unauthenticated XML External Entity Injection in AOS-8 Instant allows Denial of Service (CVSS 5.3, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-23821](https://cve.now/CVE-2026-23821.md): Inconsistent input filtering allows Authenticated Command Injection in AOS-10 CLI (CVSS 7.2, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-34659](https://cve.now/CVE-2026-34659.md): Adobe Connect | Deserialization of Untrusted Data (CWE-502) (CVSS 9.6, Adobe Connect)
- [CVE-2026-34660](https://cve.now/CVE-2026-34660.md): Adobe Connect | Incorrect Authorization (CWE-863) (CVSS 9.3, Adobe Connect)
- [CVE-2026-23820](https://cve.now/CVE-2026-23820.md): Inconsistent input filtering allows Authenticated Command Injection in AOS-8 Instant and AOS-10 CLI (CVSS 7.2, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-8429](https://cve.now/CVE-2026-8429.md): SPIP \< 4.4.14 Remote Code Execution via Private Space (CVSS 8.8, SPIP)
- [CVE-2026-23819](https://cve.now/CVE-2026-23819.md): Error in SSID Processing allows Stored XSS in Web Management Interface (CVSS 8.8, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-34682](https://cve.now/CVE-2026-34682.md): Substance3D - Designer | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance 3D Designer)
- [CVE-2026-34681](https://cve.now/CVE-2026-34681.md): Substance3D - Designer | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance 3D Designer)
- [CVE-2026-34684](https://cve.now/CVE-2026-34684.md): Substance3D - Designer | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance 3D Designer)
- [CVE-2026-34683](https://cve.now/CVE-2026-34683.md): Substance3D - Designer | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance 3D Designer)
- [CVE-2026-34664](https://cve.now/CVE-2026-34664.md): Substance3D - Designer | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) (CVSS 6.3, Adobe Substance 3D Designer)
- [CVE-2026-42348](https://cve.now/CVE-2026-42348.md): OpAMP client reads unbounded HTTP response bodies (CVSS 5.9, open-telemetry opentelemetry-dotnet-contrib · OpenTelemetry…)
- [CVE-2026-42541](https://cve.now/CVE-2026-42541.md): Kubewarden: RBAC Reconnaissance via unchecked can\_i host capability call (CVSS 4.3, kubewarden-controller · github.com/kubewarden/kubewarden-co…)
- [CVE-2026-42175](https://cve.now/CVE-2026-42175.md): requests-hardened: Server-Side Request Forgery (SSRF) in requests-hardened RFC 6598 (CVSS 6.5, saleor requests-hardened · requests-hardened)
- [CVE-2026-34662](https://cve.now/CVE-2026-34662.md): Illustrator | NULL Pointer Dereference (CWE-476) (CVSS 5.5, Adobe Illustrator Desktop)
- [CVE-2026-34687](https://cve.now/CVE-2026-34687.md): Illustrator | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Illustrator Desktop)
- [CVE-2026-34663](https://cve.now/CVE-2026-34663.md): Illustrator | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Illustrator Desktop)
- [CVE-2026-34661](https://cve.now/CVE-2026-34661.md): Illustrator | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Illustrator Desktop)
- [CVE-2026-43929](https://cve.now/CVE-2026-43929.md): ssrfcheck: Server-Side Request Forgery (SSRF) and Incomplete List of Disallowed Inputs (CVSS 8.2, felippe-regazio ssrfcheck · ssrfcheck)
- [CVE-2026-29204](https://cve.now/CVE-2026-29204.md): Insufficient ownership check in \`clientarea.php\` allows an authenticated client area user to submit requests using another user’s… (CVSS 9.1, WebPros WHMCS)
- [CVE-2026-44204](https://cve.now/CVE-2026-44204.md): Shelf: SQL Injection via sortBy Parameter (CVSS 6.5, Shelf-nu shelf.nu)
- [CVE-2026-43892](https://cve.now/CVE-2026-43892.md): AntSword: Incomplete noxss() sanitization leads to 1-click RCE via jquery.terminal format code injection (CVSS 8.8, AntSwordProject antSword)
- [CVE-2026-34676](https://cve.now/CVE-2026-34676.md): Substance3D - Painter | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance3D - Painter)
- [CVE-2026-34675](https://cve.now/CVE-2026-34675.md): Substance3D - Painter | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance3D - Painter)
- [CVE-2026-44196](https://cve.now/CVE-2026-44196.md): Pingvin Share X: TOTP Authentication Bypass via Password-only Login (CVSS 9.1, smp46 pingvin-share-x)
- [CVE-2026-42048](https://cve.now/CVE-2026-42048.md): Langflow: Path Traversal in Langflow Knowledge Bases API (CVSS 9.6, langflow-ai langflow · langflow)
- [CVE-2025-46311](https://cve.now/CVE-2025-46311.md): An inconsistent user interface issue was addressed with improved state management. (CVSS 7.5, Apple iOS and iPadOS)
- [CVE-2025-43524](https://cve.now/CVE-2025-43524.md): An access issue was addressed with additional sandbox restrictions. (CVSS 8.8, Apple macOS Sequoia · Apple macOS Sonoma +1)
- [CVE-2026-44184](https://cve.now/CVE-2026-44184.md): Cleanuparr: Reflective CORS combined with trusted-network auth allows cross-origin admin API reads (CVSS 8.0, Cleanuparr)
- [CVE-2026-20767](https://cve.now/CVE-2026-20767.md): Improper input validation for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may… (CVSS 8.5, Intel(R) QAT software drivers for Windows)
- [CVE-2026-44183](https://cve.now/CVE-2026-44183.md): Cleanuparr: X-Forwarded-For leftmost parsing allows remote unauthenticated admin takeover when reverse-proxy mode is enabled (CVSS 9.8, Cleanuparr)
- [CVE-2026-20714](https://cve.now/CVE-2026-20714.md): Out-of-bounds write for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a… (CVSS 8.5, Intel(R) QAT software drivers for Windows)
- [CVE-2026-42303](https://cve.now/CVE-2026-42303.md): Fides: Privacy Request Identity Verification Bypass Vulnerability via Duplicate Detection (CVSS 6.1, ethyca fides · ethyca-fides)
- [CVE-2026-5146](https://cve.now/CVE-2026-5146.md): Improper access control in the notification management endpoints in Devolutions Server allows an unauthenticated attacker to modify or… (CVSS 4.3, Devolutions Server)
- [CVE-2026-42300](https://cve.now/CVE-2026-42300.md): DevGuard: Unauthenticated identity assertion via \`X-Admin-Token\` header (CVSS 9.3, l3montree-dev devguard · github.com/l3montree-dev/devguard)
- [CVE-2026-44167](https://cve.now/CVE-2026-44167.md): phpseclib: CVE-2024-27355 mitigation bypass — OID amplification DoS in ASN1::decodeOID() (CVSS 7.5, phpseclib · phpseclib/phpseclib)
- [CVE-2026-34644](https://cve.now/CVE-2026-34644.md): After Effects | Integer Overflow or Wraparound (CWE-190) (CVSS 7.8, Adobe After Effects)
- [CVE-2026-34643](https://cve.now/CVE-2026-34643.md): After Effects | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe After Effects)
- [CVE-2026-34642](https://cve.now/CVE-2026-34642.md): After Effects | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe After Effects)
- [CVE-2026-44166](https://cve.now/CVE-2026-44166.md): Pocketbase: Account pre-hijacking via OAuth2 unverfied-\>verified autolinking upgrade (CVSS 6.1, pocketbase · github.com/pocketbase/pocketbase)
- [CVE-2026-34640](https://cve.now/CVE-2026-34640.md): Media Encoder | Integer Overflow or Wraparound (CWE-190) (CVSS 7.8, Adobe Media Encoder)
- [CVE-2026-34639](https://cve.now/CVE-2026-34639.md): Media Encoder | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Media Encoder)
- [CVE-2026-42141](https://cve.now/CVE-2026-42141.md): Xibo: Authenticated Server-Side Request Forgery (SSRF) in Library Upload via URL functionality (CVSS 7.7, xibosignage xibo-cms)
- [CVE-2026-42177](https://cve.now/CVE-2026-42177.md): linux-entra-sso: PRT SSO cookie can leak to attacker-controlled hosts when broad host permissions are granted (CVSS 5.3, siemens linux-entra-sso)
- [CVE-2026-34637](https://cve.now/CVE-2026-34637.md): Premiere Pro | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Premiere)
- [CVE-2026-34638](https://cve.now/CVE-2026-34638.md): Premiere Pro | Use After Free (CWE-416) (CVSS 7.8, Adobe Premiere)
- [CVE-2026-34636](https://cve.now/CVE-2026-34636.md): Premiere Pro | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Premiere)
- [CVE-2026-33821](https://cve.now/CVE-2026-33821.md): Microsoft Dynamics 365 Customer Insights Elevation of Privilege Vulnerability (CVSS 7.7, Microsoft Dynamics)
- [CVE-2026-42893](https://cve.now/CVE-2026-42893.md): Microsoft Outlook for iOS Tampering Vulnerability (CVSS 7.4, Microsoft Outlook for iOS)
- [CVE-2026-42838](https://cve.now/CVE-2026-42838.md): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CVSS 5.4, Microsoft Edge)
- [CVE-2026-40416](https://cve.now/CVE-2026-40416.md): Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability (CVSS 4.3, Microsoft Edge)
- [CVE-2026-42833](https://cve.now/CVE-2026-42833.md): Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability (CVSS 9.1, Microsoft Dynamics 365 (on-premises))
- [CVE-2026-42832](https://cve.now/CVE-2026-42832.md): Microsoft Office Spoofing Vulnerability (CVSS 7.7, Microsoft Excel for Android · Microsoft Office LTSC for… +1)
- [CVE-2026-42830](https://cve.now/CVE-2026-42830.md): Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability (CVSS 6.5, Microsoft Azure Monitor Agent Metrics Extension)
- [CVE-2026-42823](https://cve.now/CVE-2026-42823.md): Azure Logic Apps Elevation of Privilege Vulnerability (CVSS 9.9, Microsoft Azure Logic Apps)
- [CVE-2026-41613](https://cve.now/CVE-2026-41613.md): Visual Studio Code Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Visual Studio Code)
- [CVE-2026-41103](https://cve.now/CVE-2026-41103.md): Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege Vulnerability (CVSS 9.1, Microsoft Confluence SAML SSO plugin · Microsoft JIRA SAML…)
- [CVE-2026-40381](https://cve.now/CVE-2026-40381.md): Azure Connected Machine Agent Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Azure Connected Machine Agent)
- [CVE-2026-41097](https://cve.now/CVE-2026-41097.md): Secure Boot Security Feature Bypass Vulnerability (CVSS 6.7, Microsoft Windows)
- [CVE-2026-41086](https://cve.now/CVE-2026-41086.md): Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows Admin Center in Azure Portal)
- [CVE-2026-40420](https://cve.now/CVE-2026-40420.md): Microsoft Office Click-To-Run Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2026-35436](https://cve.now/CVE-2026-35436.md): Microsoft Office Click-To-Run Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2026-40418](https://cve.now/CVE-2026-40418.md): Microsoft Office Click-To-Run Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2026-40413](https://cve.now/CVE-2026-40413.md): Windows TCP/IP Denial of Service Vulnerability (CVSS 7.4, Microsoft Windows)
- [CVE-2026-40403](https://cve.now/CVE-2026-40403.md): Windows Graphics Component Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-40402](https://cve.now/CVE-2026-40402.md): Windows Hyper-V Elevation of Privilege Vulnerability (CVSS 9.3, Microsoft Windows)
- [CVE-2026-40401](https://cve.now/CVE-2026-40401.md): Windows TCP/IP Denial of Service Vulnerability (CVSS 7.1, Microsoft Windows)
- [CVE-2026-40398](https://cve.now/CVE-2026-40398.md): Windows Remote Desktop Services Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-32209](https://cve.now/CVE-2026-32209.md): Windows Filtering Platform (WFP) Security Feature Bypass Vulnerability (CVSS 4.4, Microsoft Windows)
- [CVE-2026-40397](https://cve.now/CVE-2026-40397.md): Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-40382](https://cve.now/CVE-2026-40382.md): Windows Telephony Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-40369](https://cve.now/CVE-2026-40369.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-40370](https://cve.now/CVE-2026-40370.md): SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SQL Server 2016 Service Pack · Microsoft SQL Serv…)
- [CVE-2026-40367](https://cve.now/CVE-2026-40367.md): Microsoft Word Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise · Microsoft Office +3)
- [CVE-2026-40365](https://cve.now/CVE-2026-40365.md): Microsoft SharePoint Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-40362](https://cve.now/CVE-2026-40362.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2026-40361](https://cve.now/CVE-2026-40361.md): Microsoft Outlook and Word Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise · Microsoft Office +1)
- [CVE-2026-40359](https://cve.now/CVE-2026-40359.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2026-40358](https://cve.now/CVE-2026-40358.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2026-40357](https://cve.now/CVE-2026-40357.md): Microsoft SharePoint Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-34341](https://cve.now/CVE-2026-34341.md): Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-34340](https://cve.now/CVE-2026-34340.md): Windows Projected File System Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-34339](https://cve.now/CVE-2026-34339.md): Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-34338](https://cve.now/CVE-2026-34338.md): Windows Telephony Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-34337](https://cve.now/CVE-2026-34337.md): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-34336](https://cve.now/CVE-2026-34336.md): Windows DWM Core Library Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-34334](https://cve.now/CVE-2026-34334.md): Windows TCP/IP Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-34332](https://cve.now/CVE-2026-34332.md): Windows Kernel-Mode Driver Remote Code Execution Vulnerability (CVSS 8.0, Microsoft Windows Server)
- [CVE-2026-33838](https://cve.now/CVE-2026-33838.md): Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-33837](https://cve.now/CVE-2026-33837.md): Windows TCP/IP Local Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-33835](https://cve.now/CVE-2026-33835.md): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-33833](https://cve.now/CVE-2026-33833.md): Azure Machine Learning Notebook Spoofing Vulnerability (CVSS 8.2, Microsoft Azure Machine Learning)
- [CVE-2026-33112](https://cve.now/CVE-2026-33112.md): Microsoft SharePoint Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-33110](https://cve.now/CVE-2026-33110.md): Microsoft SharePoint Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-42899](https://cve.now/CVE-2026-42899.md): ASP.NET Core Denial of Service Vulnerability (CVSS 7.5, Microsoft .NET · Microsoft.AspNetCore.App.Runtime.win-a… +11)
- [CVE-2026-42898](https://cve.now/CVE-2026-42898.md): Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability (CVSS 9.9, Microsoft Dynamics 365 (on-premises))
- [CVE-2026-42896](https://cve.now/CVE-2026-42896.md): Windows DWM Core Library Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-35429](https://cve.now/CVE-2026-35429.md): Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability (CVSS 4.3, Microsoft Edge for Android)
- [CVE-2026-42891](https://cve.now/CVE-2026-42891.md): Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability (CVSS 6.5, Microsoft Edge for Android)
- [CVE-2026-42825](https://cve.now/CVE-2026-42825.md): Windows Telephony Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-41107](https://cve.now/CVE-2026-41107.md): Microsoft Edge (Chromium-based) Information Disclosure Vulnerability (CVSS 7.4, Microsoft Edge)
- [CVE-2026-32175](https://cve.now/CVE-2026-32175.md): .NET Core Tampering Vulnerability (CVSS 4.3, Microsoft .NET · Microsoft Visual Studio +4)
- [CVE-2026-42831](https://cve.now/CVE-2026-42831.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Office for Android · Microsoft Office LTSC for Mac)
- [CVE-2026-32185](https://cve.now/CVE-2026-32185.md): Microsoft Teams Spoofing Vulnerability (CVSS 5.5, Microsoft Teams for Android)
- [CVE-2026-32170](https://cve.now/CVE-2026-32170.md): Windows Rich Text Edit Elevation of Privilege Vulnerability (CVSS 6.7, Microsoft Windows)
- [CVE-2026-32161](https://cve.now/CVE-2026-32161.md): Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-41614](https://cve.now/CVE-2026-41614.md): M365 Copilot for Desktop Spoofing Vulnerability (CVSS 6.2, Microsoft M365 Copilot for Desktop)
- [CVE-2026-41612](https://cve.now/CVE-2026-41612.md): Visual Studio Code Information Disclosure Vulnerability (CVSS 5.5, Microsoft Visual Studio Code - Live Preview extension)
- [CVE-2026-41611](https://cve.now/CVE-2026-41611.md): Visual Studio Code Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Visual Studio Code)
- [CVE-2026-41610](https://cve.now/CVE-2026-41610.md): Visual Studio Code Security Feature Bypass Vulnerability (CVSS 6.3, Microsoft Visual Studio Code)
- [CVE-2026-41109](https://cve.now/CVE-2026-41109.md): GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability (CVSS 8.8, Microsoft Visual Studio Code)
- [CVE-2026-41102](https://cve.now/CVE-2026-41102.md): Microsoft PowerPoint for Android Spoofing Vulnerability (CVSS 7.1, Microsoft PowerPoint for Android)
- [CVE-2026-41101](https://cve.now/CVE-2026-41101.md): Microsoft Word for Android Spoofing Vulnerability (CVSS 7.1, Microsoft Word for Android)
- [CVE-2026-41100](https://cve.now/CVE-2026-41100.md): Microsoft 365 Copilot for Android Spoofing Vulnerability (CVSS 4.4, Microsoft 365 Copilot for Android · Microsoft Excel for… +4)
- [CVE-2026-41096](https://cve.now/CVE-2026-41096.md): Windows DNS Client Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-41095](https://cve.now/CVE-2026-41095.md): Data Deduplication Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows Server 2012 R2 · Microsoft Windows Server)
- [CVE-2026-41094](https://cve.now/CVE-2026-41094.md): Microsoft Data Formulator Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Data Formulator)
- [CVE-2026-41089](https://cve.now/CVE-2026-41089.md): Windows Netlogon Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows Server)
- [CVE-2026-41088](https://cve.now/CVE-2026-41088.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-40421](https://cve.now/CVE-2026-40421.md): Microsoft Word Information Disclosure Vulnerability (CVSS 4.3, Microsoft 365 Apps for Enterprise · Microsoft Office +1)
- [CVE-2026-40419](https://cve.now/CVE-2026-40419.md): Microsoft Office Click-To-Run Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2026-40417](https://cve.now/CVE-2026-40417.md): Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Dynamics 365 Business Central 2024 Release Wav… +2)
- [CVE-2026-40415](https://cve.now/CVE-2026-40415.md): Windows TCP/IP Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-40414](https://cve.now/CVE-2026-40414.md): Windows TCP/IP Denial of Service Vulnerability (CVSS 7.4, Microsoft Windows)
- [CVE-2026-40410](https://cve.now/CVE-2026-40410.md): Windows SMB Client Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-40408](https://cve.now/CVE-2026-40408.md): Windows WAN ARP Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-40407](https://cve.now/CVE-2026-40407.md): Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-40406](https://cve.now/CVE-2026-40406.md): Windows TCP/IP Information Disclosure Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-40405](https://cve.now/CVE-2026-40405.md): Windows TCP/IP Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-40399](https://cve.now/CVE-2026-40399.md): Windows TCP/IP Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-40380](https://cve.now/CVE-2026-40380.md): Windows Volume Manager Extension Driver Remote Code Execution Vulnerability (CVSS 6.2, Microsoft Windows)
- [CVE-2026-40377](https://cve.now/CVE-2026-40377.md): Microsoft Cryptographic Services Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-40374](https://cve.now/CVE-2026-40374.md): Microsoft Power Automate Desktop Information Disclosure Vulnerability (CVSS 6.5, Microsoft Power Automate for Desktop)
- [CVE-2026-40368](https://cve.now/CVE-2026-40368.md): Microsoft SharePoint Server Remote Code Execution Vulnerability (CVSS 8.0, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-40366](https://cve.now/CVE-2026-40366.md): Microsoft Word Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise · Microsoft Office +1)
- [CVE-2026-40364](https://cve.now/CVE-2026-40364.md): Microsoft Word Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise · Microsoft Office +1)
- [CVE-2026-40363](https://cve.now/CVE-2026-40363.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2026-40360](https://cve.now/CVE-2026-40360.md): Microsoft Excel Information Disclosure Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2026-35440](https://cve.now/CVE-2026-35440.md): Microsoft Word Information Disclosure Vulnerability (CVSS 5.5, Microsoft 365 Apps for Enterprise · Microsoft Office +1)
- [CVE-2026-35439](https://cve.now/CVE-2026-35439.md): Microsoft SharePoint Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-35438](https://cve.now/CVE-2026-35438.md): Windows Admin Center Elevation of Privilege Vulnerability (CVSS 8.3, Microsoft Windows Admin Center)
- [CVE-2026-35433](https://cve.now/CVE-2026-35433.md): .NET Elevation of Privilege Vulnerability (CVSS 7.3, Microsoft .NET · Microsoft.WindowsDesktop.App.Runtime.wi… +2)
- [CVE-2026-35424](https://cve.now/CVE-2026-35424.md): Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-35423](https://cve.now/CVE-2026-35423.md): Windows 11 Telnet Client Information Disclosure Vulnerability (CVSS 5.4, Microsoft Windows)
- [CVE-2026-35422](https://cve.now/CVE-2026-35422.md): Windows TCP/IP Driver Security Feature Bypass Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-35421](https://cve.now/CVE-2026-35421.md): Windows GDI Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-35420](https://cve.now/CVE-2026-35420.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows Server)
- [CVE-2026-35419](https://cve.now/CVE-2026-35419.md): Windows DWM Core Library Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-35418](https://cve.now/CVE-2026-35418.md): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-35417](https://cve.now/CVE-2026-35417.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-35416](https://cve.now/CVE-2026-35416.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-35415](https://cve.now/CVE-2026-35415.md): Windows Storage Spaces Controller Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-34351](https://cve.now/CVE-2026-34351.md): Windows TCP/IP Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-34350](https://cve.now/CVE-2026-34350.md): Windows Storport Miniport Driver Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows Server)
- [CVE-2026-34347](https://cve.now/CVE-2026-34347.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-34345](https://cve.now/CVE-2026-34345.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-34344](https://cve.now/CVE-2026-34344.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-34343](https://cve.now/CVE-2026-34343.md): Windows Application Identity (AppID) Subsystem Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-34342](https://cve.now/CVE-2026-34342.md): Windows Print Spooler Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-34333](https://cve.now/CVE-2026-34333.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-34331](https://cve.now/CVE-2026-34331.md): Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-34330](https://cve.now/CVE-2026-34330.md): Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-34329](https://cve.now/CVE-2026-34329.md): Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-33841](https://cve.now/CVE-2026-33841.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-33840](https://cve.now/CVE-2026-33840.md): Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-33839](https://cve.now/CVE-2026-33839.md): Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-33834](https://cve.now/CVE-2026-33834.md): Windows Event Logging Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-33117](https://cve.now/CVE-2026-33117.md): Azure SDK for Java Security Feature Bypass Vulnerability (CVSS 9.1, Microsoft Azure SDK for Java · com.azure:azure-security-key…)
- [CVE-2026-21530](https://cve.now/CVE-2026-21530.md): Windows Rich Text Edit Elevation of Privilege Vulnerability (CVSS 6.7, Microsoft 365 Apps for Enterprise · Microsoft Office +1)
- [CVE-2026-32177](https://cve.now/CVE-2026-32177.md): .NET Elevation of Privilege Vulnerability (CVSS 7.3, Microsoft .NET · Microsoft Visual Studio)
- [CVE-2026-32204](https://cve.now/CVE-2026-32204.md): Azure Monitor Agent Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Azure Monitor)
- [CVE-2026-40379](https://cve.now/CVE-2026-40379.md): Azure Entra ID Spoofing Vulnerability (CVSS 9.3, Microsoft Entra)
- [CVE-2026-43891](https://cve.now/CVE-2026-43891.md): changedetection.io: Arbitrary Local File Read via crafted backup restore (CVSS 7.5, dgtlmoon changedetection.io · changedetection-io)
- [CVE-2025-53870](https://cve.now/CVE-2025-53870.md): An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAP 7.6.0… (CVSS 6.5, Fortinet FortiAP · Fortinet FortiAP-W2)
- [CVE-2025-53680](https://cve.now/CVE-2025-53680.md): An improper neutralization of special elements used in an OS command ("OS Command Injection") vulnerability \[CWE-78\] vulnerability in… (CVSS 6.1, Fortinet FortiAP-U · Fortinet FortiAP-W2 +1)
- [CVE-2025-67604](https://cve.now/CVE-2025-67604.md): A use of potentially dangerous function vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8… (CVSS 5.2, Fortinet FortiAnalyzer · Fortinet FortiManager)
- [CVE-2025-53681](https://cve.now/CVE-2025-53681.md): An improper neutralization of special elements used in an SQL Command ("SQL Injection&") vulnerability \[CWE-89\] vulnerability in Fortinet… (CVSS 6.3, Fortinet FortiMail)
- [CVE-2026-25690](https://cve.now/CVE-2026-25690.md): An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.0.0… (CVSS 4.0, Fortinet FortiDeceptor)
- [CVE-2025-53844](https://cve.now/CVE-2025-53844.md): A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11 allow (CVSS 8.3, Fortinet FortiOS)
- [CVE-2026-44279](https://cve.now/CVE-2026-44279.md): An improper export of android application components vulnerability in Fortinet FortiTokenAndroid 6.2 all versions, FortiTokenAndroid 6.1… (CVSS 5.0, Fortinet FortiTokenAndroid)
- [CVE-2026-44278](https://cve.now/CVE-2026-44278.md): A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.2, FortiClientWindows 7.2 all… (CVSS 2.1, Fortinet FortiClientWindows)
- [CVE-2026-25088](https://cve.now/CVE-2026-25088.md): An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiNDR 7.6.0 through… (CVSS 4.9, Fortinet FortiNDR)
- [CVE-2026-44277](https://cve.now/CVE-2026-44277.md): A improper access control vulnerability in Fortinet FortiAuthenticator 8.0.2, FortiAuthenticator 8.0.0, FortiAuthenticator 6.6.0 through… (CVSS 9.1, Fortinet FortiAuthenticator)
- [CVE-2026-26083](https://cve.now/CVE-2026-26083.md): A missing authorization vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 all… (CVSS 9.1, Fortinet FortiSandbox)
- [CVE-2026-41895](https://cve.now/CVE-2026-41895.md): changedetection.io: XXE vulnerability in the changedetection.io project (CVSS 8.2, dgtlmoon changedetection.io · changedetection-io)
- [CVE-2026-42045](https://cve.now/CVE-2026-42045.md): LobeHub: Cross-Site Scripting(XSS) escalate to Remote Code Execution(RCE) (CVSS 6.2, lobehub · @lobehub/lobehub)
- [CVE-2026-41513](https://cve.now/CVE-2026-41513.md): Horilla: Open Redirect via Unvalidated \`next\` Parameter in Notification Endpoints (CVSS 4.8, horilla-hr)
- [CVE-2026-44343](https://cve.now/CVE-2026-44343.md): WGDashboard: Critical Vulnerability in 4.3.2 (CVSS 9.3, WGDashboard)
- [CVE-2025-36515](https://cve.now/CVE-2025-36515.md): Uncontrolled search path for some AI Playground software before version 3.0.0 alpha within Ring 3: User Applications may allow an… (CVSS 5.4, AI Playground software)
- [CVE-2025-36510](https://cve.now/CVE-2025-36510.md): Improper buffer restrictions for some Display Virtualization for Windows OS driver software within Ring 2: Device Drivers may allow a… (CVSS 6.8, Display Virtualization for Windows OS driver software)
- [CVE-2025-35991](https://cve.now/CVE-2025-35991.md): Improper initialization in the UEFI firmware for some Intel platforms within Ring 0: Bare Metal OS may allow an information disclosure. (CVSS 5.6, Intel platforms)
- [CVE-2025-35990](https://cve.now/CVE-2025-35990.md): Improper input validation for some Intel Endpoint Management Assistant (EMA) software before version 1.14.5 within Ring 3: User… (CVSS 8.7, Intel Endpoint Management Assistant (EMA) software)
- [CVE-2025-35979](https://cve.now/CVE-2025-35979.md): Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some… (CVSS 6.8, Intel(R) Processors)
- [CVE-2025-35969](https://cve.now/CVE-2025-35969.md): Uncontrolled search path for some Intel(R) Server Firmware Update Utility Software before version 16.0.12. (CVSS 5.4, Intel(R) Server Firmware Update Utility Software)
- [CVE-2025-27723](https://cve.now/CVE-2025-27723.md): Use after free for some Linux kernel driver for the Intel(R) Ethernet 800 series before version 2.3.14 within Ring 0: Kernel may allow a… (CVSS 6.8, Intel(R) Ethernet 800 series)
- [CVE-2026-20914](https://cve.now/CVE-2026-20914.md): Null pointer dereference for some Intel(R) QAT software drivers for Windows before version 2.6.0 within Ring 3: User Applications may… (CVSS 6.8, Intel(R) QAT software drivers for Windows)
- [CVE-2026-20905](https://cve.now/CVE-2026-20905.md): Improper input validation for some Intel(R) QAT software drivers for Windows before version 2.6 within Ring 3: User Applications may allow… (CVSS 6.9, Intel(R) QAT software drivers for Windows)
- [CVE-2026-20887](https://cve.now/CVE-2026-20887.md): Improper access control for some Intel Vision software for all versions within Ring 3: User Applications may allow a denial of service. (CVSS 8.8, Intel Vision software)
- [CVE-2026-20881](https://cve.now/CVE-2026-20881.md): Divide by zero for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial… (CVSS 6.8, Intel(R) QAT software drivers for Windows)
- [CVE-2026-20879](https://cve.now/CVE-2026-20879.md): Out-of-bounds write for the Intel(R) Data Center Graphics Driver for VMware ESXi software before version 2.0.2 within Ring 1: Device… (CVSS 8.3, Intel(R) Data Center Graphics Driver for VMware ESXi softwa…)
- [CVE-2026-20794](https://cve.now/CVE-2026-20794.md): Buffer overflow for the Intel(R) Data Center Graphics Driver for VMware ESXi software before version 2.0.2 within Ring 1: Device Drivers… (CVSS 9.3, Intel(R) Data Center Graphics Driver for VMware ESXi softwa…)
- [CVE-2026-20793](https://cve.now/CVE-2026-20793.md): Unchecked return value for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a… (CVSS 4.8, Intel(R) QAT software drivers for Windows)
- [CVE-2026-20782](https://cve.now/CVE-2026-20782.md): Buffer overflow for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial… (CVSS 6.9, Intel(R) QAT software drivers for Windows)
- [CVE-2026-20772](https://cve.now/CVE-2026-20772.md): Uncontrolled search path for some Intel(R) Connectivity Performance Suite software installers before version 50.25.1121.193 within Ring 3… (CVSS 5.4, Intel(R) Connectivity Performance Suite software installers)
- [CVE-2026-20771](https://cve.now/CVE-2026-20771.md): Null pointer dereference for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow… (CVSS 6.9, Intel(R) QAT software drivers for Windows)
- [CVE-2026-20754](https://cve.now/CVE-2026-20754.md): Improper conditions check in some firmware for some Intel(R) NPU Drivers within Ring 1: Device Drivers may allow a denial of service. (CVSS 6.9, Intel(R) NPU Drivers)
- [CVE-2026-20753](https://cve.now/CVE-2026-20753.md): Integer overflow in the UEFI firmware for the Slim Bootloader may allow an escalation of privilege. (CVSS 8.7, Slim Bootloader may allow an escalation of privilege. Syste…)
- [CVE-2026-20751](https://cve.now/CVE-2026-20751.md): Out-of-bounds read for the Intel(R) Data Center Graphics Driver for VMware ESXi software before version 2.0.2 within Ring 1: Device… (CVSS 8.3, Intel(R) Data Center Graphics Driver for VMware ESXi softwa…)
- [CVE-2026-20738](https://cve.now/CVE-2026-20738.md): Untrusted pointer dereference for some Intel(R) QuickAssist Adapter 8960 software before version 1.13 within Ring 3: User Applications may… (CVSS 8.5, Intel(R) QuickAssist Adapter 8960 software)
- [CVE-2026-20718](https://cve.now/CVE-2026-20718.md): Incorrect default permissions for some Intel(R) NPU Driver software installers before version 32.0.100.4511 within Ring 3: User… (CVSS 5.4, Intel(R) NPU Driver software installers)
- [CVE-2026-20717](https://cve.now/CVE-2026-20717.md): Improper input validation for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may… (CVSS 6.9, Intel(R) QAT software drivers for Windows)
- [CVE-2026-40300](https://cve.now/CVE-2026-40300.md): Zulip: Message edit history visible in "moves only" policy through /api/v1/messages/{id}/history (CVSS 6.0, zulip)
- [CVE-2026-25431](https://cve.now/CVE-2026-25431.md): WordPress Hustle plugin \<= 7.8.10.1 - Broken Access Control vulnerability (CVSS 5.3, WPMU DEV Hustle)
- [CVE-2026-43993](https://cve.now/CVE-2026-43993.md): JunoClaw: SSRF in WAVS computeDataVerify allows cloud-metadata and internal-service access (CVSS 8.2, Dragonmonk111 junoclaw)
- [CVE-2026-43992](https://cve.now/CVE-2026-43992.md): JunoClaw: MCP write tools exposed raw BIP-39 mnemonic as a tool-call parameter (CVSS 9.8, Dragonmonk111 junoclaw)
- [CVE-2026-43990](https://cve.now/CVE-2026-43990.md): JunoClaw: plugin-shell shell-metacharacter injection via shell wrapper (CVSS 8.4, Dragonmonk111 junoclaw)
- [CVE-2026-43989](https://cve.now/CVE-2026-43989.md): JunoClaw: upload\_wasm accepted arbitrary filesystem paths without validation (CVSS 8.5, Dragonmonk111 junoclaw)
- [CVE-2026-43991](https://cve.now/CVE-2026-43991.md): JunoClaw: plugin-shell shell-injection bypass via substring blocklist (CVSS 8.4, Dragonmonk111 junoclaw)
- [CVE-2026-8407](https://cve.now/CVE-2026-8407.md): Missing authorization in the PAM module in Devolutions Server allows an authenticated user with a PAM license but no additional… (CVSS 4.3, Devolutions Server)
- [CVE-2026-5089](https://cve.now/CVE-2026-5089.md): YAML::Syck versions before 1.38 for Perl has an out-of-bounds read (CVSS 7.3, TODDR YAML::Syck)
- [CVE-2026-43515](https://cve.now/CVE-2026-43515.md): Apache Tomcat: Security constraints not correctly applied (CVSS 9.1, Apache Software Foundation Apache Tomcat · org.apache.to… +2)
- [CVE-2026-43514](https://cve.now/CVE-2026-43514.md): Apache Tomcat: AJP secret compared in non-constant time (CVSS 3.7, Apache Software Foundation Apache Tomcat · org.apache.to… +2)
- [CVE-2026-43513](https://cve.now/CVE-2026-43513.md): Apache Tomcat: LockOutRealm treats user names as case-sensitive (CVSS 7.5, Apache Software Foundation Apache Tomcat · org.apache.to… +2)
- [CVE-2026-43512](https://cve.now/CVE-2026-43512.md): Apache Tomcat: Digest authenticator will authenticate any unknown user (CVSS 9.8, Apache Software Foundation Apache Tomcat · org.apache.to… +2)
- [CVE-2026-41293](https://cve.now/CVE-2026-41293.md): Apache Tomcat: HTTP/2 request headers not validated (CVSS 9.8, Apache Software Foundation Apache Tomcat · org.apache.to… +2)
- [CVE-2026-42498](https://cve.now/CVE-2026-42498.md): Apache Tomcat: WebSocket authentication header exposure (CVSS 7.3, Apache Software Foundation Apache Tomcat · org.apache.to… +2)
- [CVE-2026-41284](https://cve.now/CVE-2026-41284.md): Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling (CVSS 7.5, Apache Software Foundation Apache Tomcat · org.apache.to… +2)
- [CVE-2026-34187](https://cve.now/CVE-2026-34187.md): SQL Injection in Graph Container Parameter (CVSS 7.6, Pandora FMS)
- [CVE-2026-30810](https://cve.now/CVE-2026-30810.md): Server-Side Request Forgery in API Checker leads to Privilege Escalation (CVSS 7.1, Pandora FMS)
- [CVE-2026-30808](https://cve.now/CVE-2026-30808.md): Session Fixation in Authentication leads to Session Hijacking (CVSS 7.6, Pandora FMS)
- [CVE-2026-30807](https://cve.now/CVE-2026-30807.md): Cross-Site Request Forgery on Extension Pages (CVSS 7.1, Pandora FMS)
- [CVE-2026-30805](https://cve.now/CVE-2026-30805.md): Insecure Default Initialization in API Authentication leads to Authentication Bypass (CVSS 9.1, Pandora FMS)
- [CVE-2026-8111](https://cve.now/CVE-2026-8111.md): SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to achieve… (CVSS 8.8, ivanti Endpoint Manager)
- [CVE-2026-8110](https://cve.now/CVE-2026-8110.md): Incorrect permissions assignment in the agent of Ivanti Endpoint Manager before version 2024 SU6 allows a local authenticated attacker to… (CVSS 7.8, ivanti Endpoint Manager)
- [CVE-2026-8109](https://cve.now/CVE-2026-8109.md): An exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker… (CVSS 6.5, ivanti Endpoint Manager)
- [CVE-2026-8051](https://cve.now/CVE-2026-8051.md): OS command injection in Ivanti Virtual Traffic Manager before version 22.9r4 allows a remote authenticated attacker with admin privileges… (CVSS 7.2, ivanti Virtual Traffic Manager)
- [CVE-2026-8401](https://cve.now/CVE-2026-8401.md): Sandbox escape in the Profile Backup component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-7432](https://cve.now/CVE-2026-7432.md): A race condition in Ivanti Secure Access Client before 22.8R6 allows a locally authenticated user to escalate privileges to SYSTEM (CVSS 7.8, ivanti Secure Access Client)
- [CVE-2026-43983](https://cve.now/CVE-2026-43983.md): Pocket ID: OIDC refresh token flow bypasses authorization revocation, account disabling, and group restrictions (CVSS 8.5, pocket-id · github.com/pocket-id/pocket-id/backend)
- [CVE-2026-7431](https://cve.now/CVE-2026-7431.md): An incorrect permission assignment for critical resource of Ivanti Secure Access Client before 22.8R6 allows a local authenticated user to… (CVSS 4.4, ivanti Secure Access Client)
- [CVE-2026-32687](https://cve.now/CVE-2026-32687.md): SQL injection via channel name in Postgrex.Notifications.listen/3 and unlisten/3 (CVSS 7.5, elixir-ecto postgrex · postgrex)
- [CVE-2026-8043](https://cve.now/CVE-2026-8043.md): External control of a file name in Ivanti Xtraction before version 2026.2 allows a remote authenticated attacker to read sensitive files… (CVSS 9.6, ivanti Xtraction)
- [CVE-2026-42260](https://cve.now/CVE-2026-42260.md): Open-WebSearch: SSRF in \`fetchWebContent\` MCP tool: bracketed IPv6 literals and non-resolving hostname check bypass… (CVSS 8.2, Aas-ee open-webSearch · open-websearch)
- [CVE-2026-8368](https://cve.now/CVE-2026-8368.md): LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirects (CVSS 6.5, OALDERS LWP::UserAgent)
- [CVE-2026-43937](https://cve.now/CVE-2026-43937.md): YAF.NET: Pre-Handler Authorization Bypass on Admin Pages Enabling Blind SQL Execution via \`/Admin/RunSql\` (CVSS 8.8, YAFNET · YAFNET.Core)
- [CVE-2026-6866](https://cve.now/CVE-2026-6866.md): Initialization of a Resource with an Insecure Default vulnerability on EcoStruxure™ Panel Server (CVSS 8.2, Schneider Electric EcoStruxure™ Panel Server)
- [CVE-2026-5061](https://cve.now/CVE-2026-5061.md): Consul-template vulnerable to sandbox path bypass in file helper via a symlink attack (CVSS 4.7, HashiCorp Tooling)
- [CVE-2026-43938](https://cve.now/CVE-2026-43938.md): YAF.NET: Unauthenticated Stored Second-Order XSS in Admin Event Log via Reflected \`User-Agent\` Header (CVSS 8.1, YAFNET · YAFNET.Core)
- [CVE-2026-43939](https://cve.now/CVE-2026-43939.md): YAF.NET: Stored XSS in Forum Thread Posts/Replies Allowing Arbitrary JavaScript Execution for All Thread Viewers (CVSS 7.3, YAFNET · YAFNET.Core)
- [CVE-2026-43930](https://cve.now/CVE-2026-43930.md): Parse Server: MFA SMS one-time password accepted twice under concurrent login (CVSS 2.1, parse-community parse-server · parse-server)
- [CVE-2026-43916](https://cve.now/CVE-2026-43916.md): pam\_authnft: Heap buffer overflow in NETLINK\_SOCK\_DIAG reply walker (CVSS 8.7, identd-ng pam\_authnft)
- [CVE-2026-40638](https://cve.now/CVE-2026-40638.md): Dell PowerScale InsightIQ, versions 5.0.0 through 6.2.0, contains an execution with unnecessary privileges vulnerability. (CVSS 6.7, Dell PowerScale InsightIQ)
- [CVE-2026-42006](https://cve.now/CVE-2026-42006.md): An attacker can cause uncontrolled memory usage with excessive bracing over IMAP. (CVSS 4.3, Open-Xchange OX Dovecot Pro)
- [CVE-2026-40020](https://cve.now/CVE-2026-40020.md): Attacker can use the IMAP SETACL command to inject the anyone permission to user's dovecot-acl file even if imap\_acl\_allow\_anyone=no. (CVSS 3.1, Open-Xchange OX Dovecot Pro)
- [CVE-2026-40016](https://cve.now/CVE-2026-40016.md): Attacker can upload a malicious Sieve script over ManageSieve service (or locally) to bypass configured CPU time limits for Sieve up to… (CVSS 5.3, Open-Xchange OX Dovecot Pro)
- [CVE-2026-33603](https://cve.now/CVE-2026-33603.md): Attacker can use a specially crafted base64 exchange between Dovecot and Client to fake SCRAM TLS channel binding. (CVSS 6.8, Open-Xchange OX Dovecot Pro)
- [CVE-2026-27851](https://cve.now/CVE-2026-27851.md): When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly interpreted as safe too… (CVSS 7.4, Open-Xchange OX Dovecot Pro)
- [CVE-2026-35071](https://cve.now/CVE-2026-35071.md): Dell PowerScale InsightIQ, versions 6.0.0 through 6.2.0, contains an improper neutralization of special elements used in an OS command… (CVSS 8.2, Dell PowerScale InsightIQ)
- [CVE-2026-45091](https://cve.now/CVE-2026-45091.md): sealed-env: TOTP secret embedded in unseal token payload (enterprise mode) (CVSS 9.1, davidalmeidac sealed-env · sealed-env +1)
- [CVE-2026-8391](https://cve.now/CVE-2026-8391.md): Other issue in the JavaScript Engine component (CVSS 5.3, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-8390](https://cve.now/CVE-2026-8390.md): Use-after-free in the JavaScript: WebAssembly component (CVSS 7.3, Mozilla Firefox)
- [CVE-2026-8389](https://cve.now/CVE-2026-8389.md): JIT miscompilation in the JavaScript Engine: JIT component (CVSS 8.8, Mozilla Firefox)
- [CVE-2026-8388](https://cve.now/CVE-2026-8388.md): Incorrect boundary conditions in the JavaScript Engine: JIT component (CVSS 6.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-12659](https://cve.now/CVE-2025-12659.md): Heap-based buffer overflow in Siemens Simcenter Femap (CVSS 7.3, Siemens Simcenter Femap)
- [CVE-2026-6865](https://cve.now/CVE-2026-6865.md): Improper Limitation of a Pathname to a Restricted Directory Vulnerability on Multiple Products (CVSS 7.1, Schneider Electric EasyLogic T150 (formerly Saitel DR) Remo…)
- [CVE-2026-4827](https://cve.now/CVE-2026-4827.md): Insufficient Entropy vulnerability on Multiple Products (CVSS 8.7, Schneider Electric Easergy MiCOM C264 · Schneider Elect… +12)
- [CVE-2026-45215](https://cve.now/CVE-2026-45215.md): WordPress WP EasyPay plugin \<= 4.3.0 - Sensitive Data Exposure vulnerability (CVSS 5.3, Saad Iqbal WP EasyPay)
- [CVE-2026-45218](https://cve.now/CVE-2026-45218.md): WordPress WP Travel plugin \<= 11.4.0 - SQL Injection vulnerability (CVSS 7.7, WP Travel)
- [CVE-2026-45214](https://cve.now/CVE-2026-45214.md): WordPress Xpro Elementor Addons plugin \<= 1.5.1 - SQL Injection vulnerability (CVSS 8.5, Xpro Elementor Addons)
- [CVE-2026-45213](https://cve.now/CVE-2026-45213.md): WordPress BEAR plugin \<= 1.1.7.1 - SQL Injection vulnerability (CVSS 7.6, RealMag777 BEAR)
- [CVE-2026-45211](https://cve.now/CVE-2026-45211.md): WordPress APIExperts Square for WooCommerce plugin \<= 4.7.1 - SQL Injection vulnerability (CVSS 8.5, Saad Iqbal APIExperts Square for WooCommerce)
- [CVE-2026-42742](https://cve.now/CVE-2026-42742.md): WordPress Views for WPForms plugin \<= 3.4.6 - SQL Injection vulnerability (CVSS 8.5, Aman Views for WPForms)
- [CVE-2026-45212](https://cve.now/CVE-2026-45212.md): WordPress Asset CleanUp: Page Speed Booster plugin \<= 1.4.0.3 - Broken Access Control vulnerability (CVSS 5.3, Gabe Livan Asset CleanUp: Page Speed Booster)
- [CVE-2026-45210](https://cve.now/CVE-2026-45210.md): WordPress Broadstreet Ads plugin \<= 1.52.2 - Broken Access Control vulnerability (CVSS 5.4, Broadstreet Ads)
- [CVE-2026-42741](https://cve.now/CVE-2026-42741.md): WordPress Ninja Forms Views – Display & Edit Ninja Forms Submissions on your site frontend plugin \<= 3.3.2 - SQL Injection vulnerability (CVSS 8.5, Aman Ninja Forms Views &#8211; Display &amp; Edit Ninja For…)
- [CVE-2026-32684](https://cve.now/CVE-2026-32684.md): The application does not impose strict enough restrictions on directory access permissions, posing a risk that other malicious… (CVSS 2.9, Hikvision Hik-Connect APP)
- [CVE-2026-2465](https://cve.now/CVE-2026-2465.md): Improper Authorization in E-Kalite's Turboard FOR-S (CVSS 8.8, E-Kalite Software Hardware Engineering Design and Internet…)
- [CVE-2026-41713](https://cve.now/CVE-2026-41713.md): Prompt Injection via Memory Poisoning in PromptChatMemoryAdvisor (CVSS 8.2, VMware Spring AI · org.springframework.ai:spring-ai-client-…)
- [CVE-2026-41712](https://cve.now/CVE-2026-41712.md): ChatMemory DEFAULT\_CONVERSATION\_ID causes unintended cross-user data leakage (CVSS 7.5, VMware Spring AI · org.springframework.ai:spring-ai-clie… +2)
- [CVE-2026-8072](https://cve.now/CVE-2026-8072.md): Insecure generation of SAT access credentials in Ingecon EMS Board (CVSS 9.2, Ingeteam Ingecon Sun EMS Board)
- [CVE-2026-6001](https://cve.now/CVE-2026-6001.md): IDOR in Abis Technology's BAPSİS (CVSS 8.8, ABIS Technology Ltd. BAPSİS)
- [CVE-2025-6577](https://cve.now/CVE-2025-6577.md): SQLi in Akilli Commerce's E-Commerce Website (CVSS 9.8, Akilli Commerce Software Technologies Ltd. E-Commerce Websi…)
- [CVE-2026-6813](https://cve.now/CVE-2026-6813.md): Continually \<= 4.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'continually\_embed\_code' Parameter (CVSS 4.4, Continually)
- [CVE-2026-6800](https://cve.now/CVE-2026-6800.md): FastBots \<= 1.0.12 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings (CVSS 4.4, FastBots)
- [CVE-2026-7428](https://cve.now/CVE-2026-7428.md): Insecure default administrative credentials in AlloyDB for PostgreSQL (CVSS 9.2, Google Cloud AlloyDB for PostgreSQL)
- [CVE-2026-8162](https://cve.now/CVE-2026-8162.md): multiparty vulnerable to Denial of Service via Uncaught Exception in filename parameter parsing (CVSS 7.5, multiparty)
- [CVE-2026-5029](https://cve.now/CVE-2026-5029.md): RCE in Code Runner MCP Server (CVSS 8.7, Code Runner MCP Server)
- [CVE-2026-8161](https://cve.now/CVE-2026-8161.md): multiparty vulnerable to Denial of Service via Prototype Pollution leading to Uncaught Exception (CVSS 7.5, multiparty)
- [CVE-2026-8159](https://cve.now/CVE-2026-8159.md): multiparty vulnerable to ReDoS via filename parsing (CVSS 7.5, multiparty)
- [CVE-2026-1934](https://cve.now/CVE-2026-1934.md): Motors – Car Dealership & Classified Listings Plugin \<= 1.4.103 - Missing Authorization to Authenticated (Subscriber+) Payment Bypass via… (CVSS 4.3, stylemix Motors – Car Dealership & Classified Listings Plug…)
- [CVE-2026-44412](https://cve.now/CVE-2026-44412.md): A vulnerability has been identified in Solid Edge SE2026 (All versions \< V226.0 Update 5). (CVSS 7.8, Siemens Solid Edge SE2026)
- [CVE-2026-44411](https://cve.now/CVE-2026-44411.md): A vulnerability has been identified in Solid Edge SE2026 (All versions \< V226.0 Update 5). (CVSS 7.8, Siemens Solid Edge SE2026)
- [CVE-2026-41551](https://cve.now/CVE-2026-41551.md): A vulnerability has been identified in ROS# (All versions \< V2.2.2). (CVSS 9.1, Siemens ROS#)
- [CVE-2026-41125](https://cve.now/CVE-2026-41125.md): A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions), blueplanet 105 TL3 (All (CVSS 6.0, Siemens blueplanet 100 NX3 M8 · Siemens blueplanet 100… +20)
- [CVE-2026-33893](https://cve.now/CVE-2026-33893.md): A vulnerability has been identified in Teamcenter V2312 (All versions \< V2312.0014), Teamcenter V2406 (All versions \< V2406.0012)… (CVSS 7.5, Siemens Teamcenter)
- [CVE-2026-33862](https://cve.now/CVE-2026-33862.md): A vulnerability has been identified in Teamcenter V2312 (All versions \< V2312.0014), Teamcenter V2406 (All versions \< V2406.0012)… (CVSS 7.3, Siemens Teamcenter)
- [CVE-2026-27662](https://cve.now/CVE-2026-27662.md): Affected devices do not properly restrict access to the web browser via the Control Panel when no corresponding security mechanisms are in… (CVSS 7.7, Siemens SIMATIC HMI MTP1000 Unified Comfort Panel · Sie… +35)
- [CVE-2026-25789](https://cve.now/CVE-2026-25789.md): Affected devices do not properly validate and sanitize filenames on the Firmware Update page. (CVSS 7.1, Siemens SIMATIC Drive Controller CPU 1504D TF · Siemens… +77)
- [CVE-2026-25787](https://cve.now/CVE-2026-25787.md): Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control Diagnostics" page of… (CVSS 9.1, Siemens SIMATIC Drive Controller CPU 1504D TF · Siemens… +77)
- [CVE-2026-25786](https://cve.now/CVE-2026-25786.md): Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters page of the web… (CVSS 9.1, Siemens SIMATIC Drive Controller CPU 1504D TF · Siemens… +77)
- [CVE-2026-22925](https://cve.now/CVE-2026-22925.md): A vulnerability has been identified in SIMATIC CN 4100 (All versions \< V5.0). (CVSS 7.5, Siemens SIMATIC CN)
- [CVE-2026-22924](https://cve.now/CVE-2026-22924.md): A vulnerability has been identified in SIMATIC CN 4100 (All versions \< V5.0). (CVSS 9.1, Siemens SIMATIC CN)
- [CVE-2025-40949](https://cve.now/CVE-2025-40949.md): A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions \< V2.17.1), RUGGEDCOM ROX MX5000RE (All versions \< V2.17.1)… (CVSS 9.1, Siemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9)
- [CVE-2025-40948](https://cve.now/CVE-2025-40948.md): A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions \< V2.17.1), RUGGEDCOM ROX MX5000RE (All versions \< V2.17.1)… (CVSS 6.8, Siemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9)
- [CVE-2025-40947](https://cve.now/CVE-2025-40947.md): A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions \< V2.17.1), RUGGEDCOM ROX MX5000RE (All versions \< V2.17.1)… (CVSS 7.5, Siemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9)
- [CVE-2025-40946](https://cve.now/CVE-2025-40946.md): A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions \< V6.1.4.9), blueplanet 1 (CVSS 8.3, Siemens blueplanet 100 NX3 M8 · Siemens blueplanet 100… +21)
- [CVE-2025-40833](https://cve.now/CVE-2025-40833.md): The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. (CVSS 7.5, Siemens IE/PB LINK HA · Siemens IE/PB link PN IO +201)
- [CVE-2024-54017](https://cve.now/CVE-2024-54017.md): A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions \< V11.0), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC… (CVSS 5.3, Siemens SIPROTEC 5 6MD84 · Siemens SIPROTEC 5 6MD85 +36)
- [CVE-2026-39432](https://cve.now/CVE-2026-39432.md): WordPress Timetics plugin \<= 1.0.53 - Broken Access Control vulnerability (CVSS 8.2, Arraytics Timetics)
- [CVE-2026-2300](https://cve.now/CVE-2026-2300.md): BJ Lazy Load \<= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom HTML Block (CVSS 6.4, bjornjohansen BJ Lazy Load)
- [CVE-2026-6247](https://cve.now/CVE-2026-6247.md): scratchblocks for WP \<= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'element' Shortcode Attribute (CVSS 6.4, tkc49 scratchblocks for WP)
- [CVE-2026-5028](https://cve.now/CVE-2026-5028.md): Eight Day Week Print Workflow \<= 1.2.6 - Authenticated (Subscriber+) SQL Injection via 'title' Parameter (CVSS 6.5, 10up Eight Day Week Print Workflow)
- [CVE-2026-7464](https://cve.now/CVE-2026-7464.md): WP Google Maps Integration \<= 1.2 - Reflected Cross-Site Scripting via 'page' Parameter (CVSS 6.1, trapesium WP Google Maps Integration)
- [CVE-2026-6710](https://cve.now/CVE-2026-6710.md): Skysa Text Ticker App \<= 1.4 - Cross-Site Request Forgery to Settings Modification via 'Save Settings' Form (CVSS 4.3, davidskysa Skysa Text Ticker App)
- [CVE-2026-6256](https://cve.now/CVE-2026-6256.md): Credits Shortcode \<= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link' Shortcode Attribute (CVSS 6.4, jashjacob Credits Shortcode)
- [CVE-2026-6932](https://cve.now/CVE-2026-6932.md): Woo Commerce Minimum Weight \<= 3.0.1 - Cross-Site Request Forgery via Settings Update Form (CVSS 4.3, hemant29 Woo Commerce Minimum Weight)
- [CVE-2026-5693](https://cve.now/CVE-2026-5693.md): Smart Appointment & Booking \<= 1.0.8 - Missing Authorization to Unauthenticated Arbitrary Booking Cancellation (CVSS 5.3, zealopensource Smart Appointment & Booking)
- [CVE-2026-6709](https://cve.now/CVE-2026-6709.md): Coinbase Commerce for Contact Form 7 \<= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) API Key Modification via… (CVSS 4.3, coderpress Coinbase Commerce for Contact Form)
- [CVE-2026-7659](https://cve.now/CVE-2026-7659.md): Advanced Social Media Icons \<= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'social' Shortcode (CVSS 6.4, riotweb Advanced Social Media Icons)
- [CVE-2026-5715](https://cve.now/CVE-2026-5715.md): Voyage Plus \<= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'post-content' Shortcode (CVSS 6.4, scui2 Voyage Plus)
- [CVE-2026-4920](https://cve.now/CVE-2026-4920.md): Next Date \<= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'default' Shortcode Attribute (CVSS 6.4, jeremyshapiro Next Date)
- [CVE-2026-7616](https://cve.now/CVE-2026-7616.md): Zawgyi Embed \<= 2.1.1 - Cross-Site Request Forgery via 'zawgyi\_forceCSS' Parameter (CVSS 4.3, saturngod Zawgyi Embed)
- [CVE-2026-7561](https://cve.now/CVE-2026-7561.md): Tm – WordPress Redirection \<= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting (CVSS 6.1, tienrocker Tm – WordPress Redirection)
- [CVE-2026-7050](https://cve.now/CVE-2026-7050.md): Forms Rb \<= 1.1.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via 'form\_id' Parameter (CVSS 4.3, rbplugins Forms Rb)
- [CVE-2026-2993](https://cve.now/CVE-2026-2993.md): AI Chatbot & Workflow Automation by AIWU \<= 1.4.17 - Unauthenticated SQL Injection in getListForTbl() (CVSS 7.5, wupsales AI Chatbot & Workflow Automation by AIWU)
- [CVE-2026-4859](https://cve.now/CVE-2026-4859.md): SP Blog Designer \<= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'design' Attribute (CVSS 6.4, softpulseinfotech SP Blog Designer)
- [CVE-2026-6237](https://cve.now/CVE-2026-6237.md): Quick Table \<= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute (CVSS 6.4, rdcravens Quick Table)
- [CVE-2026-6690](https://cve.now/CVE-2026-6690.md): LifePress \<= 2.2.2 - Unauthenticated Stored Cross-Site Scripting via 'n' Parameter via lp\_update\_mds AJAX Action (CVSS 7.2, ashanjay LifePress)
- [CVE-2026-6663](https://cve.now/CVE-2026-6663.md): GWD Connect \<= 2.9 - Unauthenticated Limited Code Execution via update\_agent (CVSS 4.8, thewebsitesupply GWD Conex)
- [CVE-2026-7437](https://cve.now/CVE-2026-7437.md): AzonPost \<= 1.3 - Reflected Cross-Site Scripting (CVSS 6.1, moch-a AzonPost)
- [CVE-2026-7626](https://cve.now/CVE-2026-7626.md): Slek Gateway for WooCommerce \<= 1.0 - Unauthenticated Insufficiently Protected Credentials via Payment Redirect Form Hidden Fields (CVSS 5.3, qqqjus Slek Gateway for WooCommerce)
- [CVE-2026-3604](https://cve.now/CVE-2026-3604.md): WP SEO Structured Data Schema \<= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via '\_kcseo\_ative\_tab' Parameter (CVSS 4.9, kcseopro WP SEO Structured Data Schema)
- [CVE-2026-7661](https://cve.now/CVE-2026-7661.md): Bootstrap Shortcode \<= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'box' Shortcode (CVSS 6.4, shamim\_d Bootstrap Shortcode)
- [CVE-2026-7562](https://cve.now/CVE-2026-7562.md): WP-Redirection \<= 1.0.3 - Cross-Site Request Forgery to Settings Update (CVSS 4.3, phkcorp2005 WP-Redirection)
- [CVE-2026-5340](https://cve.now/CVE-2026-5340.md): Fancy Image Show \<= 9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes (CVSS 6.4, gopi\_plus Fancy Image Show)
- [CVE-2026-4301](https://cve.now/CVE-2026-4301.md): Rate Star Review Vote \<= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification via 'rating\_id' Parameter (CVSS 4.3, videowhisper Rate Star Review Vote – AJAX Reviews, Votes, S…)
- [CVE-2026-6808](https://cve.now/CVE-2026-6808.md): Pricing Tables for WP \<= 1.1.0 - Reflected Cross-Site Scripting via 'page' Parameter (CVSS 6.1, optimalplugins Pricing Tables for WP)
- [CVE-2026-6913](https://cve.now/CVE-2026-6913.md): Shortcodely \<= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'widget\_area' Shortcode Attribute (CVSS 6.4, patilswapnilv Shortcodely)
- [CVE-2026-6708](https://cve.now/CVE-2026-6708.md): HEL Online Classroom: AI-powered Online Classrooms \<= 1.0.3 - Missing Authorization to Unauthenticated Arbitrary Classroom Deletion via… (CVSS 5.3, higheredlab HEL Online Classroom: AI-powered Online Classro…)
- [CVE-2026-6402](https://cve.now/CVE-2026-6402.md): webpack-dev-server vulnerable to cross-origin source code exposure on non-HTTPS origins (CVSS 5.3, webpack-dev-server)
- [CVE-2026-35227](https://cve.now/CVE-2026-35227.md): Improper resource management in CODESYS Modbus TCP Server (CVSS 8.2, CODESYS Modbus)
- [CVE-2026-1185](https://cve.now/CVE-2026-1185.md): A configuration file on the local file system had improper input validation which could allow code execution and potentially lead to… (CVSS 5.4, Axis Communications AB AXIS OS)
- [CVE-2026-0804](https://cve.now/CVE-2026-0804.md): An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege… (CVSS 6.7, Axis Communications AB AXIS OS)
- [CVE-2026-0802](https://cve.now/CVE-2026-0802.md): An ACAP configuration file lacked sufficient input validation, which could allow command injection and potentially lead to privilege… (CVSS 6.0, Axis Communications AB AXIS OS)
- [CVE-2026-0541](https://cve.now/CVE-2026-0541.md): ACAP applications can gain elevated privileges due to improper input validation during the installation process, potentially leading to… (CVSS 6.7, Axis Communications AB AXIS OS)
- [CVE-2026-1681](https://cve.now/CVE-2026-1681.md): net: Stack Overflow with Ping (to own IP Address) via Shell (CVSS 6.1, zephyrproject-rtos Zephyr)
- [CVE-2026-41872](https://cve.now/CVE-2026-41872.md): "Kura Sushi Official App" provided by EPG, Inc. (CVSS 7.4, EPG "Kura Sushi Official App" for Android · EPG "Kura Sushi…)
- [CVE-2026-41530](https://cve.now/CVE-2026-41530.md): The automatic folder creation feature of Lhaz and Lhaz+ provided by Chitora soft contains a path traversal vulnerability. (CVSS 3.3, Chitora soft Lhaz · Chitora soft Lhaz+)
- [CVE-2026-45430](https://cve.now/CVE-2026-45430.md): The Salesforce module before 1.x-1.0.1 for Backdrop CMS does not properly use a random state parameter to protect the authorization flow… (CVSS 7.1, Backdrop CMS contributed projects backdrop-contrib/salesfor…)
- [CVE-2026-7287](https://cve.now/CVE-2026-7287.md): \* UNSUPPORTED WHEN ASSIGNED \* A buffer overflow vulnerability in the formWep(), formWlAc(), formPasswordSetup(), formUpgradeCert(), and… (CVSS 7.5, Zyxel NWA1100-N firmware)
- [CVE-2026-7257](https://cve.now/CVE-2026-7257.md): \* UNSUPPORTED WHEN ASSIGNED \* An insecure storage of sensitive information vulnerability in the configuration file of Zyxel WRE6505 v2… (CVSS 4.4, Zyxel WRE6505 v2 firmware)
- [CVE-2026-7256](https://cve.now/CVE-2026-7256.md): \* UNSUPPORTED WHEN ASSIGNED \* A command injection vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0… (CVSS 8.8, Zyxel WRE6505 v2 firmware)
- [CVE-2026-7255](https://cve.now/CVE-2026-7255.md): \* UNSUPPORTED WHEN ASSIGNED \* An improper restriction of excessive authentication attempts vulnerability in the web management interface… (CVSS 6.5, Zyxel WRE6505 v2 firmware)
- [CVE-2026-40137](https://cve.now/CVE-2026-40137.md): Cross-Site Scripting (XSS) vulnerability in Business Server Pages Application (TAF\_APPLAUNCHER) (CVSS 6.1, SAP\_SE Business Server Pages Application)
- [CVE-2026-40136](https://cve.now/CVE-2026-40136.md): Denial of service (DoS) in SAP Financial Consolidation (CVSS 4.3, SAP\_SE SAP Financial Consolidation)
- [CVE-2026-40135](https://cve.now/CVE-2026-40135.md): OS Command Injection vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform (CVSS 6.5, SAP\_SE SAP NetWeaver Application Server for ABAP and ABAP P…)
- [CVE-2026-40134](https://cve.now/CVE-2026-40134.md): Missing Authorization Check in SAP Incentive and Commission Management (CVSS 4.3, SAP\_SE SAP Incentive and Commission Management)
- [CVE-2026-40133](https://cve.now/CVE-2026-40133.md): Missing Authorization check in SAP S/4HANA Condition Maintenance (CVSS 6.3, SAP\_SE SAP S/4HANA Condition Maintenance)
- [CVE-2026-40132](https://cve.now/CVE-2026-40132.md): Missing Authorization Check in SAP Strategic Enterprise Management (BSP application Balanced Scorecard Wizard) (CVSS 5.4, SAP\_SE SAP Strategic Enterprise Management)
- [CVE-2026-40131](https://cve.now/CVE-2026-40131.md): SQL Injection vulnerability in SAP HANA Deployment Infrastructure (HDI) deploy library (CVSS 3.4, SAP\_SE SAP HANA Deployment Infrastructure (HDI) deploy libr…)
- [CVE-2026-40129](https://cve.now/CVE-2026-40129.md): Code Injection vulnerability in SAP Application Server ABAP for SAP NetWeaver and ABAP Platform (CVSS 4.3, SAP\_SE SAP Application Server ABAP for SAP NetWeaver and AB…)
- [CVE-2026-34263](https://cve.now/CVE-2026-34263.md): Missing authentication check in SAP Commerce cloud configuration (CVSS 9.6, SAP\_SE SAP Commerce cloud configuration)
- [CVE-2026-34260](https://cve.now/CVE-2026-34260.md): SQL injection vulnerability in SAP S/4HANA (SAP Enterprise Search for ABAP) (CVSS 9.6, SAP\_SE SAP S/4HANA)
- [CVE-2026-34259](https://cve.now/CVE-2026-34259.md): OS Command Injection Vulnerability in SAP Forecasting & Replenishment (CVSS 8.2, SAP\_SE SAP Forecasting & Replenishment)
- [CVE-2026-34258](https://cve.now/CVE-2026-34258.md): Content Spoofing vulnerability in SAPUI5 (Search UI) (CVSS 4.7, SAP\_SE SAPUI5)
- [CVE-2026-27682](https://cve.now/CVE-2026-27682.md): Reflected Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages) (CVSS 4.7, SAP\_SE SAP NetWeaver Application Server ABAP)
- [CVE-2026-0502](https://cve.now/CVE-2026-0502.md): Cross Site Request Forgery (CSRF) in SAP BusinessObjects Business Intelligence Platform (CVSS 5.4, SAP\_SE SAP BusinessObjects Business Intelligence Platform)
- [CVE-2026-45393](https://cve.now/CVE-2026-45393.md): Local privilege escalation to SYSTEM in Cribl Edge for Windows (CVSS 8.5, Cribl Edge)
- [CVE-2026-45392](https://cve.now/CVE-2026-45392.md): DOM-based XSS in Cribl Stream (CVSS 7.1, Cribl Stream)
- [CVE-2026-45391](https://cve.now/CVE-2026-45391.md): Local privilege escalation in Cribl Edge for Linux (CVSS 8.5, Cribl Edge)
- [CVE-2026-45362](https://cve.now/CVE-2026-45362.md): Sangoma Switchvox before 8.4 places cleartext SIP authentication credentials in a backup file. (CVSS 3.2, Sangoma Switchvox)
- [CVE-2026-45321](https://cve.now/CVE-2026-45321.md): Malware in 42 @tanstack/\* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys (CVSS 9.6, KEV, @tanstack arktype-adapter · @tanstack eslint-plugin-rou… +82)
- [CVE-2023-27753](https://cve.now/CVE-2023-27753.md): An arbitrary file upload vulnerability in MK-Auth 23.01K4.9 allows attackers to execute arbitrary code via uploading a crafted PHP file. (CVSS 8.0)
- [CVE-2023-30059](https://cve.now/CVE-2023-30059.md): An insecure direct object reference in MK-Auth 23.01K4.9 allows attackers to access and send support calls for other users via… (CVSS 5.4)
- [CVE-2025-65719](https://cve.now/CVE-2025-65719.md): An issue in Open Source Kubectl MCP Server v1.1.1 allows attackers to execute arbitrary code on a victim system via user interaction with… (CVSS 9.8, kubectl-mcp-server)
- [CVE-2025-70842](https://cve.now/CVE-2025-70842.md): A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the File Management module of FluentCMS 1.2.3. (CVSS 5.4)
- [CVE-2026-31214](https://cve.now/CVE-2026-31214.md): The torch-checkpoint-shrink.py script in the ml-engineering project in commit 0099885db36a8f06556efe1faf552518852cb1e0 (2025-20-27)… (CVSS 9.8)
- [CVE-2026-31215](https://cve.now/CVE-2026-31215.md): The nexent v1.7.5.2 backend service contains an unauthorized arbitrary file deletion vulnerability in its ElasticSearch service interface. (CVSS 9.1)
- [CVE-2026-31216](https://cve.now/CVE-2026-31216.md): The nexent v1.7.5.2 backend service contains an unauthorized arbitrary storage file deletion vulnerability in its file management API. (CVSS 9.1)
- [CVE-2026-31217](https://cve.now/CVE-2026-31217.md): The \_load\_model() function in the neural\_magic\_training.py script of the optimate project in commit… (CVSS 9.8)
- [CVE-2026-31218](https://cve.now/CVE-2026-31218.md): The \_load\_model() function in the neural\_magic\_training.py script of the optimate project in commit… (CVSS 8.8)
- [CVE-2026-31219](https://cve.now/CVE-2026-31219.md): The \_load\_model() function in the neural\_magic\_training.py script of the optimate project in commit… (CVSS 8.8)
- [CVE-2026-31220](https://cve.now/CVE-2026-31220.md): PySyft (Syft Datasite/Server) versions 0.9.5 and earlier are vulnerable to remote code execution due to insufficient validation and… (CVSS 9.8, syft)
- [CVE-2026-31221](https://cve.now/CVE-2026-31221.md): PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading… (CVSS 8.8, pytorch-lightning · lightning)
- [CVE-2026-31222](https://cve.now/CVE-2026-31222.md): The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability (CWE-502) in the Trainer.load() method of the Trainer… (CVSS 8.8, snorkel)
- [CVE-2026-31223](https://cve.now/CVE-2026-31223.md): The snorkel library thru v0.10.0 contains a critical insecure deserialization vulnerability (CWE-502) in the BaseLabeler.load() method of… (CVSS 8.8, snorkel)
- [CVE-2026-31224](https://cve.now/CVE-2026-31224.md): The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability (CWE-502) in the MultitaskClassifier.load() method of… (CVSS 8.8, snorkel)
- [CVE-2026-31225](https://cve.now/CVE-2026-31225.md): The superduper project thru v0.10.0 contains a critical remote code execution vulnerability in its query parsing component. (CVSS 8.8, superduper-framework)
- [CVE-2026-31226](https://cve.now/CVE-2026-31226.md): The TinyZero project thru commit 6652a63c57fa7e5ccde3fc9c598c7176ff15b839 (2025-58-24) contains a critical command injection vulnerability… (CVSS 9.8)
- [CVE-2026-31228](https://cve.now/CVE-2026-31228.md): The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a remote code execution vulnerability in its Kubeflow component. (CVSS 9.8)
- [CVE-2026-31229](https://cve.now/CVE-2026-31229.md): The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains an insecure deserialization vulnerability (CWE-502) in its Kubeflow… (CVSS 9.8)
- [CVE-2026-31230](https://cve.now/CVE-2026-31230.md): The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a command-line argument injection vulnerability in its Kubeflow component… (CVSS 9.8)
- [CVE-2026-31231](https://cve.now/CVE-2026-31231.md): Cognee thru v0.4.0 contains a critical remote code execution vulnerability in its notebook cell execution API endpoint. (CVSS 9.8)
- [CVE-2026-31232](https://cve.now/CVE-2026-31232.md): The CosyVoice project thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability… (CVSS 8.8)
- [CVE-2026-31233](https://cve.now/CVE-2026-31233.md): Guardrails AI thru 0.6.7 contains a code injection vulnerability (CWE-94) in its Hub package installation mechanism. (CVSS 9.8, guardrails-ai)
- [CVE-2026-31234](https://cve.now/CVE-2026-31234.md): Horovod thru 0.28.1 contains an insecure deserialization vulnerability (CWE-502) in its KVStore HTTP server component. (CVSS 9.8, horovod)
- [CVE-2026-31235](https://cve.now/CVE-2026-31235.md): The imgaug library thru 0.4.0 contains an insecure deserialization vulnerability in its BackgroundAugmenter class within the multicore.py… (CVSS 9.8, imgaug)
- [CVE-2026-31236](https://cve.now/CVE-2026-31236.md): The llm CLI tool thru 0.27.1 contains a critical code injection vulnerability via its --functions command-line argument. (CVSS 9.8, llm)
- [CVE-2026-31237](https://cve.now/CVE-2026-31237.md): The Ludwig framework thru 0.10.4 is vulnerable to insecure deserialization (CWE-502) through its predict() method. (CVSS 9.8, ludwig)
- [CVE-2026-31238](https://cve.now/CVE-2026-31238.md): The Ludwig framework thru 0.10.4 is vulnerable to insecure deserialization (CWE-502) in its model serving component. (CVSS 9.8, ludwig)
- [CVE-2026-31239](https://cve.now/CVE-2026-31239.md): The mamba language model framework thru 2.2.6 is vulnerable to insecure deserialization (CWE-502) when loading pre-trained models from… (CVSS 9.8, mamba-ssm)
- [CVE-2026-31240](https://cve.now/CVE-2026-31240.md): The mem0 1.0.0 server lacks authentication and authorization controls for its memory management API endpoints. (CVSS 7.5, mem0ai)
- [CVE-2026-31241](https://cve.now/CVE-2026-31241.md): The mem0 1.0.0 server lacks authentication and authorization controls for its memory deletion API endpoint (DELETE /memories). (CVSS 6.5, mem0ai)
- [CVE-2026-31242](https://cve.now/CVE-2026-31242.md): The mem0 v1.0.0 server lacks authentication and authorization controls for its memory reset functionality accessible via the DELETE… (CVSS 9.1)
- [CVE-2026-31243](https://cve.now/CVE-2026-31243.md): The mem0 1.0.0 server lacks authentication and authorization controls for its memory reset and table re-creation functionality accessible… (CVSS 6.5)
- [CVE-2026-31244](https://cve.now/CVE-2026-31244.md): The mem0 1.0.0 server lacks authentication and authorization controls for its memory deletion API endpoint (DELETE /memories/{memory\_id}). (CVSS 6.5)
- [CVE-2026-31245](https://cve.now/CVE-2026-31245.md): The mem0 1.0.0 server lacks authentication and authorization controls for its memory creation API endpoint (POST /memories). (CVSS 5.3, mem0ai)
- [CVE-2026-45185](https://cve.now/CVE-2026-45185.md): Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing path. (CVSS 9.8, Exim)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2026-05-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.