CVEs published May 19, 2026
205 CVEs were published on May 19, 2026: 29 critical, 79 high. Browse them by severity, product and exploitation status.
- Published
- 205
- Critical
- 29
- High
- 79
- Medium
- 85
- Low
- 10
- Unrated
- 2
- Now in CISA KEV
- 0
- Fix available
- 114
Most affected products
- Mozilla Firefox · Mozilla Thunderbird
- 29
- Apache Software Foundation Apache OFBiz
- 17
- OpenHarmony
- 10
- Red Hat build of Keycloak · org.keycloak:keycloak-services
- 9
- Samsung Open Source Escargot
- 9
- mantisbt · mantisbt/mantisbt
- 7
- Ctrlpanel-gg panel
- 6
- strukturag libheif
- 6
- Nozomi Networks Guardian · Nozomi Networks CMC
- 5
- ScadaBR
- 4
Critical 29
- CVE-2026-8495Date iCal - Critical - Information disclosure - SA-CONTRIB-2026-037Drupal Date iCal · drupal/date_ical
- CVE-2026-34234CtrlPanel: Unauthenticated RCE using installer scriptCtrlpanel-gg panel
- CVE-2026-33642Kitty has a Heap Buffer Over-Read/Write via Integer Overflow in compose_rectangles Bounds Checkkovidgoyal kitty
- CVE-2026-2586An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console.Eclipse Foundation Eclipse Glassfish · org.glassfish.mai… +1
- CVE-2026-2587A critical Remote Code Execution (RCE) vulnerability was identified in the server-side template rendering mechanism used by the Glassfish…Eclipse Foundation Eclipse Glassfish · org.glassfish.mai… +1
- CVE-2026-44159Tyler Identity Local (TID-L) default administrative credentialsTyler Technologies TID-L
- CVE-2026-43633HestiaCP 1.9.0-1.9.4 Deserialization RCE via Web Terminalhestiacp
- CVE-2026-42097Authentication Bypass in Sparx Pro Cloud ServerSparx Systems Pro Cloud Server
- CVE-2026-8959Sandbox escape due to incorrect boundary conditions in the Widget: Win32 componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-8956Integer overflow in the Networking: JAR componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-8953Sandbox escape due to use-after-free in the Disability Access APIs componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-8950Same-origin policy bypass in the Networking: HTTP componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-8948Same-origin policy bypass in the DOM: Networking componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-47323Apache Camel: Camel-CXF Message Header Injection via Missing Inbound FilteringApache Software Foundation org.apache.camel:camel-cxf-rest…
- CVE-2026-4883Piotnet Forms <= 2.1.40 - Unauthenticated Arbitrary File Upload via Form File UploadPiotnet Forms
- CVE-2026-43493crypto: pcrypt - Fix handling of MAY_BACKLOG requestsLinux
- CVE-2026-45434Apache OFBiz: Authentication Bypass via Password-Change Logic Flaw Leading to RCEApache Software Foundation Apache OFBiz
- CVE-2026-41919Apache OFBiz: Authentication Bypass due to Improper Neutralization of LDAP Special Elements in DN ConstructionApache Software Foundation Apache OFBiz
- CVE-2026-31986Apache OFBiz: Unauthenticated RCE via Default JWT Signing Key and Widget Template InjectionApache Software Foundation Apache OFBiz
- CVE-2026-46725Remote Code Execution in extension "Content Element Selector" (ceselector)TYPO3 mmc/ceselector · mmc/ceselector
- CVE-2026-2611Improper Origin Validation in mlflow/mlflowmlflow/mlflow · mlflow
- CVE-2026-4885Piotnet Addons for Elementor Pro <= 7.1.70 - Unauthenticated Arbitrary File Upload via Form File UploadPiotnet Addons For Elementor Pro
- CVE-2026-30117scalar/astro v0.1.13 was discovered to contain an arbitrary file upload vulnerability in the the scalar_url query parameter of the Scalar…
- CVE-2026-30118scalar/astro v0.1.13 was discovered to contain a Server-Side Request Forgery (SSRF) in the scalar_url query parameter of the Scalar Proxy…
- CVE-2026-31070The LalanaChami Pharmacy Management System (commit 5c3d028) allows unauthenticated remote attackers to escalate privileges by…
Show all 29 entriesShow fewer entries
- CVE-2026-31071API endpoints in LalanaChami Pharmacy Management System (commit 5c3d028) lack authentication middleware.
- CVE-2026-31072The JSONSerializer and CBORSerializer in APScheduler (all versions including 3.10.x and 4.0.0a5) are vulnerable to Remote Code Execution…apscheduler
- CVE-2026-36829An authentication bypass vulnerability exists in the embedded HTTP server of Panabit PAP-XM320 up to and including v7.7.
- CVE-2026-37281An OS command injection vulnerability in the /stream-to-vlc Express route in hitarth-gg Zenshin before 2.7.0 allows remote attackers to…
High 79
- CVE-2026-34463MantisBT has Stored HTML Injection/XSS via Clone Issue Formmantisbt · mantisbt/mantisbt
- CVE-2026-34358CtrlPanel: Missing Authorization on Admin Write Endpoints Allows RBAC BypassCtrlpanel-gg panel
- CVE-2026-34241CtrlPanel: Stored XSS in Ticket Reply Notifications Allows Session HijackingCtrlpanel-gg panel
- CVE-2026-32882libheif: Heap Buffer OOB Read in overlay compositing due to wrong alpha stridestrukturag libheif
- CVE-2026-32741libheif has a heap buffer overflow in decode_mask_image()strukturag libheif
- CVE-2026-32740libheif: Heap-Buffer-Overflow Write in Grid Tile Chroma Compositingstrukturag libheif
- CVE-2026-27173Apache Airflow CNCF Kubernetes provider: JWT Token Exposure in KubernetesExecutor Command-Line ArgumentsApache Software Foundation apache-airflow-providers-cncf-ku…
- CVE-2026-41470LIVE555 < 2026.04.22 RTSP Server Authorization Bypass via Session TokenLive Networks LIVE555
- CVE-2026-8370Automic Automation Agent Unix privilege escalationBroadcom Automic Automation
- CVE-2026-8073Kirki <= 6.0.6 - Unauthenticated Limited Arbitrary File Read and Deletion via downloadZIPthemeum Kirki – Freeform Page Builder, Website Builder & Cu…
- CVE-2026-33633Kitty has a Heap Buffer Overflow in its Graphics Protocol Handlerkovidgoyal kitty
- CVE-2026-6009Jaspersoft Library Deserialisation VulnerabilityJaspersoft JasperReports Library Community Edition · Jas… +7
- CVE-2026-8604Cross-Site request forgery (CSRF) in ScadaBRScadaBR
- CVE-2026-8603Improper neutralization of special elements used in an OS command ('OS command injection') in ScadaBRScadaBR
- CVE-2026-8602Missing authentication for critical function in ScadaBRScadaBR
- CVE-2026-47107Windmill < 1.703.2 Incorrect Default Permissions in nsjail Configurationwindmill-labs windmill
- CVE-2026-47358Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via external URL resolution in uploaded IaC templates…tenable Terrascan
- CVE-2026-47357Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the remote_url parameter in the remote directory scan…tenable Terrascan
- CVE-2026-47356Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the webhook_url parameter in the file scan endpoint…tenable Terrascan
- CVE-2026-5804An improper authentication vulnerability was discovered in the Motorola Factory Test component (com.motorola.motocit).Motorola Phones
- CVE-2026-8711NGINX JavaScript vulnerabilityF5 NGINX JavaScript
- CVE-2026-47100Funnel Builder for WooCommerce Checkout < 3.15.0.3 Missing Authorization via AJAXFunnelKit Funnel Builder for WooCommerce Checkout
- CVE-2026-43634HestiaCP 1.2.0-1.9.4 IP Spoofing via CF-Connecting-IP Headerhestiacp
- CVE-2026-42100DoS in Sparx Pro Cloud ServerSparx Systems Pro Cloud Server
- CVE-2026-42099Race Condition in Sparx Pro Cloud ServerSparx Systems Pro Cloud Server
Show all 79 entriesShow fewer entries
- CVE-2026-42098Authorization Bypass in Sparx Enterprise ArchitectSparx Systems Enterprise Architect
- CVE-2026-42096Broken Access Control in Sparx Pro Cloud ServerSparx Systems Pro Cloud Server
- CVE-2026-23558grant table v2 race in status page mappingXen
- CVE-2026-8975Memory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151Mozilla Firefox · Mozilla Thunderbird
- CVE-2026-8974Memory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151Mozilla Firefox · Mozilla Thunderbird
- CVE-2026-8973Memory safety bugs fixed in Thunderbird 151Mozilla Firefox · Mozilla Thunderbird
- CVE-2026-8972Privilege escalation in the WebRTC: Audio/Video componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-8970Privilege escalation in the Security componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-8969Mitigation bypass in the DOM: Security componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-8968Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-8967Information disclosure in the Graphics: WebGPU componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-8966Information disclosure in the IP Protection componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-8965Information disclosure in the DOM: Security componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-8964Spoofing issue in the Popup Blocker componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-8963Spoofing issue in the Web Speech componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-8962Mitigation bypass in the DOM: Security componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-8960Spoofing issue in WebExtensionsMozilla Firefox · Mozilla Thunderbird
- CVE-2026-8958Information disclosure, sandbox escape in the Security: Process Sandboxing componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-8957Privilege escalation in the Enterprise Policies componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-8955Privilege escalation in the DOM: Workers componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-8954Incorrect boundary conditions, integer overflow in the Audio/Video componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-8952Privilege escalation in the Application Update componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-8949Integer overflow in the Widget: Win32 componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-8947Use-after-free in the DOM: Bindings (WebIDL) componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-8946Incorrect boundary conditions in the Audio/Video: Web Codecs componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-8945Sandbox escape in Firefox and Firefox Focus for AndroidMozilla Firefox
- CVE-2026-8912Contest Gallery <= 28.1.6 - Unauthenticated SQL Injectioncontest-gallery Contest Gallery – Upload & Vote Photos, Med…
- CVE-2026-7571Keycloak: keycloak: access token disclosure and implicit flow bypass via forged client dataRed Hat build of Keycloak · org.keycloak:keycloak-services
- CVE-2026-7507Org.keycloak/keycloak-services: session fixation in oidc login flow that can lead to account takeoverRed Hat build of Keycloak · Red Hat Single Sign-On +2
- CVE-2026-7504Org.keycloak/keycloak-services: open redirect when using wildcard valid redirect uris in keycloakRed Hat build of Keycloak · org.keycloak:keycloak-services
- CVE-2026-7307Keycloak: keycloak: denial of service via specially crafted saml inputkeycloak · Red Hat build of Keycloak +3
- CVE-2026-46586Apache OFBiz: Improper Validation in traverseContent Service Enables Authenticated Groovy Code ExecutionApache Software Foundation Apache OFBiz
- CVE-2026-31910Apache OFBiz: Improper Input Validation in UI Factory Classes Leads to SSRF and Blind File AccessApache Software Foundation Apache OFBiz
- CVE-2026-31909Apache OFBiz: Unauthenticated Shipment Label Image DisclosureApache Software Foundation Apache OFBiz
- CVE-2026-8827SQL Injection in extension "Address List" (tt_address)friendsoftypo3/tt-address
- CVE-2026-8726SQL Injection in extension "News system" (news)TYPO3 georgringer/news · georgringer/news
- CVE-2026-29226Apache OFBiz: Low-Privilege SSRF in Content ComponentApache Software Foundation Apache OFBiz
- CVE-2026-8727Remote Code Execution in extension "Site Crawler" (crawler)TYPO3 tomasnorre/crawler · tomasnorre/crawler
- CVE-2026-47314Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers.Samsung Open Source Escargot
- CVE-2025-15609Fortis For WooCommerce < 1.3.1 - Sensitive API Key DisclosureFortis for WooCommerce
- CVE-2026-8813This affects versions of the package exifreader before 4.39.0.exifreader
- CVE-2026-47311Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers.Samsung Open Source Escargot
- CVE-2026-47310Use after free vulnerability in Samsung Open Source Escargot allows Pointer Manipulation.Samsung Open Source Escargot
- CVE-2026-25781kernel_liteos_a has an out-of-bounds write vulnerabilityOpenHarmony
- CVE-2026-27648web_webview has an out-of-bounds write vulnerabilityOpenHarmony
- CVE-2026-24792web_webview has a Race Condition vulnerabilityOpenHarmony
- CVE-2026-33233AutoGPT Platform: Remote Code Execution via Unsafe Pickle Deserialization of Redis Cache EntriesSignificant-Gravitas AutoGPT
- CVE-2026-33232AutoGPT: Unauthenticated DoS via Disk Space ExhaustionSignificant-Gravitas AutoGPT
- CVE-2026-32323Mullvad VPN for macOS: Local Privilege Escalation via unverified bundle path in installermullvadvpn-app
- CVE-2025-51427An issue was discovered in ModelScope 1.25.0 allowing attackers to execute arbitrary code via crafted module listed in the configuration…modelscope
- CVE-2025-70950An issue in gohttp commit 34ea51 allows attackers to execute a directory traversal via supplying a crafted request.github.com/itang/gohttp
- CVE-2026-31069BillaBear (all versions prior to Jan 2026) contains a SQL Injection vulnerability in the EventRepository.billabear/billabear
- CVE-2026-36828A command injection vulnerability exists in the /cgi-bin/tools/ajax_cmd endpoint of Panabit PAP-XM320 up to and including v7.7.
- CVE-2026-39250An authorization vulnerability exists in Innoshop 0.6.0.
Medium, low and unrated 97
- CVE-2026-39309Trilium Notes: macOS TCC Bypass via Prompt SpoofingTriliumNext Trilium
- CVE-2026-35593Trilium Notes has Local File Inclusion via upload modified file API endpointTriliumNext Trilium
- CVE-2026-45585Windows BitLocker Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-34970MantisBT Bugnote Revision Page Leaks Private Issue Metadata After Issue Access Is Revokedmantisbt · mantisbt/mantisbt
- CVE-2026-34754MantisBT allows unauthorized users to upload attachments to restricted issues via REST APImantisbt · mantisbt/mantisbt
- CVE-2026-34744MantisBT authorization bypass allows continued access to self-uploaded attachments on private issuesmantisbt · mantisbt/mantisbt
- CVE-2026-8493Colorbox Inline - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-036Drupal Colorbox Inline · drupal/colorbox_inline
- CVE-2026-8492Translate Drupal with GTranslate - Less critical - DOM clobbering / link manipulation - SA-CONTRIB-2026-035Translate Drupal with GTranslate · drupal/gtranslate
- CVE-2026-8491Node View Permissions - Moderately critical - Access bypass - SA-CONTRIB-2026-034Drupal Node View Permissions · drupal/node_view_permissions
- CVE-2026-6871Obfuscate - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-033Drupal Obfuscate · drupal/obfuscate
- CVE-2026-34600Joplin Server delta API returns note content after share access is revokedlaurent22 joplin
- CVE-2026-6367Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-003Drupal core · drupal/core
- CVE-2026-6366Drupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002Drupal core · drupal/core
- CVE-2026-6365Drupal core - Critical - Cross-site scripting - SA-CORE-2026-001Drupal core · drupal/core
- CVE-2026-6095Orejime - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-032Drupal Orejime · drupal/orejime
- CVE-2026-34579MantisBT has an authorization bypass via private issue monitoringmantisbt · mantisbt/mantisbt
- CVE-2023-7345Ledger Live hw-app-eth EIP-712 Message Parsing Integer Truncationledgerhq/hw-app-eth · Ledger Live
- CVE-2026-34390MantisBT: Privilege Escalation from Manager to Administratormantisbt · mantisbt/mantisbt
- CVE-2025-15645Ledger Nano X, Flex, Stax MCU Firmware Update Denial of ServiceLedger Nano X · Ledger Flex +1
- CVE-2026-5090Template::Plugin::HTML versions before 3.103 for Perl allows HTML and JavaScript to be injectedTemplate-Toolkit
- CVE-2026-34246CtrlPanel: Stored XSS in Admin Role Management via Unescaped DataTable HTML OutputCtrlpanel-gg panel
- CVE-2024-36343Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to perform an out of…AMD EPYC™ · AMD Ryzen™ 6000 Series Processors with Rade… +14
- CVE-2026-34233CtrlPanel has Missing Authentication Checks in Datatable Admin EndpointsCtrlpanel-gg panel
- CVE-2026-34216CtrlPanel: Authenticated Remote Code Execution via Dynamic Class Instantiation in SettingsController.phpCtrlpanel-gg panel
- CVE-2025-57798Joplin has Denial of Service (DoS) via Uncontrolled Resource Allocation through Title Inputlaurent22 joplin
Show all 97 entriesShow fewer entries
- CVE-2026-32814libheif: Uninitialized Heap Memory Information Leak via Failed Grid Tilesstrukturag libheif
- CVE-2026-42526Apache Airflow Amazon provider: Prevent unauthorized access to team-scoped secrets in AWS Secrets Manager and SSM Parameter Store backendsApache Software Foundation apache-airflow-providers-amazon…
- CVE-2026-32739libheif is Vulnerable to Infinite Loop DoS via stts Sample Duration Lookupstrukturag libheif
- CVE-2026-32738libheif has a Heap OOB Read/SEGV Crash via Zero samples_per_chunkstrukturag libheif
- CVE-2026-34154Discourse has a subscription access bypass in its discourse-subscriptions plugindiscourse
- CVE-2026-8096Kirki <= 6.0.6 - Missing Authorization to Authenticated (Subscriber+) Sensitive Form Submission Data Exposure via…themeum Kirki – Freeform Page Builder, Website Builder & Cu…
- CVE-2026-33741EspoCRM: Stored XSS via SVG attachment loading same-origin JavaScriptespocrm
- CVE-2026-33637Faraday: Protocol-relative URI objects still bypass host scoping (possible incomplete fix for GHSA-33mh-2634-fwr2)lostisland faraday · faraday
- CVE-2026-32134NanoMQ: NULL Pointer Dereference Crash in tcptran_pipe_peer During Session Restorenanomq
- CVE-2026-8605Use of Hard-coded Credentials in ScadaBRScadaBR
- CVE-2026-5511Information Disclosure via Diagnostic Interface Due to Improper Input Validation on TP-Link's Archer AX72TP-Link Systems Archer AX72 (SG)
- CVE-2026-8706Sensitive user data could be leaked to other applications through Reader modeMozilla Firefox for iOS
- CVE-2026-45557Technitium DNS Server excessive DNSSEC requestsTechnitium DNS Server
- CVE-2025-40904HTML injection in Smart Polling in Guardian/CMC before 26.1.0Nozomi Networks Guardian · Nozomi Networks CMC
- CVE-2025-40903HTML injection in Schedule Restore Archive in Guardian/CMC before 26.1.0Nozomi Networks Guardian · Nozomi Networks CMC
- CVE-2025-40902HTML injection in Users in Guardian/CMC before 26.1.0Nozomi Networks Guardian · Nozomi Networks CMC
- CVE-2025-40901HTML injection in Credentials Manager in Guardian/CMC before 26.1.0Nozomi Networks Guardian · Nozomi Networks CMC
- CVE-2025-40900Angular template injection in Reports in Guardian/CMC before 26.1.0Nozomi Networks Guardian · Nozomi Networks CMC
- CVE-2025-14575Uncontrolled Search Path Element in Qt Network OpenSSL TLS backend allows rogue CA certificate loadingQt
- CVE-2026-23557Xenstored DoS via XS_RESET_WATCHES commandXen
- CVE-2026-8971Same-origin policy bypass in the Networking: JAR componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-8961Spoofing issue in the Form Autofill componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-8951Spoofing issue in the Toolbar component in Firefox for AndroidMozilla Firefox
- CVE-2026-7860Possible information disclosure of environment variables in Vaadin Build Plugins via Failed Frontend Buildcom.vaadin:flow-plugin-base · com.vaadin:flow-maven-plug… +2
- CVE-2026-45442WordPress Presto Player plugin <= 4.1.3 - Broken Access Control vulnerabilityBrainstorm Force Presto Player
- CVE-2026-37982Keycloak: org.keycloak.authentication: keycloak: unauthorized account takeover via webauthn token replayRed Hat build of Keycloak · org.keycloak:keycloak-services
- CVE-2026-37979Keycloak: keycloak: information disclosure via oidc token introspection endpoint audience bypassRed Hat build of Keycloak · org.keycloak:keycloak-services
- CVE-2026-37978Keycloak: org.keycloak.services: keycloak: information disclosure via evaluate-scopes admin apiRed Hat build of Keycloak · org.keycloak:keycloak-services
- CVE-2026-43492lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()Linux
- CVE-2026-43491net: qrtr: ns: Limit the maximum server registration per nodeLinux
- CVE-2026-37981Keycloak: org.keycloak.authorization: keycloak: information disclosure via broken access control in user lookup endpointRed Hat build of Keycloak · org.keycloak:keycloak-services
- CVE-2026-4630Keycloak: keycloak: unauthorized resource access and data modification via insecure direct object referenceRed Hat build of Keycloak · org.keycloak:keycloak-services
- CVE-2026-45187Apache OFBiz: Improper Authorization in Scheduled Job Creation Allows Low-Privileged Users to Submit System JobsApache Software Foundation Apache OFBiz
- CVE-2026-35086Apache OFBiz: Authenticated Remote Code Execution via Unsafe Template Expansion in email servicesApache Software Foundation Apache OFBiz
- CVE-2026-31906Apache OFBiz: Reflected XSS via Improper HTML Attribute Escaping in Layered-Modal Dialog ParametersApache Software Foundation Apache OFBiz
- CVE-2026-31388Apache OFBiz: Cross-Tenant Data Exposure via Program Export FeatureApache Software Foundation Apache OFBiz
- CVE-2026-31387Apache OFBiz: Cookie Manipulation Allows Authenticated JWT Forgery and Account ImpersonationApache Software Foundation Apache OFBiz
- CVE-2026-31380Apache OFBiz: FreeMarker SSTI via Duplicate Parameter Sanitization BypassApache Software Foundation Apache OFBiz
- CVE-2026-46724Path Traversal in extension "Faceted Search" (ke_search)TYPO3 tpwd/ke_search · tpwd/ke_search
- CVE-2026-46723Information Disclosure in extension "Faceted Search" (ke_search)TYPO3 tpwd/ke_search · tpwd/ke_search
- CVE-2026-46722XML External Entity Injection in extension "Faceted Search" (ke_search)TYPO3 tpwd/ke_search · tpwd/ke_search
- CVE-2026-31379Apache OFBiz: Path Traversal and File Upload Validation Bypass Leading to Arbitrary File Write, Stored XSS and RCE in Catalog ManagerApache Software Foundation Apache OFBiz
- CVE-2026-31378Apache OFBiz: JSON Attribute Override and URL Allowlist Bypass Leads to Remote Code ExecutionApache Software Foundation Apache OFBiz
- CVE-2026-46721Broken Access Control in extension "Frontend User Registration" (sf_register)TYPO3 evoweb/sf-register · evoweb/sf-register
- CVE-2026-29207Apache OFBiz: Low-Privilege SSTI Leading to RCE in the Content ComponentApache Software Foundation Apache OFBiz
- CVE-2026-29220Apache OFBiz: Low-Privilege LFI in Content ComponentApache Software Foundation Apache OFBiz
- CVE-2026-44408Unauthorized access vulnerability in ZTE MU5250ZTE MU5250
- CVE-2026-47317Uncontrolled Recursion vulnerability in Samsung Open Source Escargot allows Excessive Allocation.Samsung Open Source Escargot
- CVE-2026-47316Improper Check or Handling of Exceptional Conditions vulnerability in Samsung Open Source Escargot allows Input Data Manipulation.Samsung Open Source Escargot
- CVE-2026-47315Improper Check for Unusual or Exceptional Conditions vulnerability in Samsung Open Source Escargot allows Input Data Manipulation.Samsung Open Source Escargot
- CVE-2026-47313Memory allocation with excessive size value vulnerability in Samsung Open Source Escargot allows Excessive Allocation.Samsung Open Source Escargot
- CVE-2026-8922Org.keycloak/keycloak-services: keycloak: org.keycloak.protocol.oidc: security flaw in org.keycloak/keycloak-servicesRed Hat build of Keycloak · org.keycloak:keycloak-services
- CVE-2026-47312Release of invalid pointer or reference vulnerability in Samsung Open Source Escargot allows Buffer Manipulation.Samsung Open Source Escargot
- CVE-2026-8830Keycloak: org.keycloak/keycloak-services: keycloak: policy bypass during webauthn credential registration via client-side javascript…Red Hat build of Keycloak · org.keycloak:keycloak-services
- CVE-2026-8814Versions of the package exifreader before 4.39.0 are vulnerable to Improper Handling of Highly Compressed Data (Data Amplification) due to…exifreader
- CVE-2026-47309Uncontrolled Recursion vulnerability in Samsung Open Source Escargot allows Oversized Serialized Data Payloads.Samsung Open Source Escargot
- CVE-2026-32994The /api/v1/autotranslate.translateMessage endpoint in versions <8.5.0, <8.4.2, <8.3.4, <8.2.4, <8.1.5, <8.0.6, <7.13.8, and <7.10.12…Rocket.Chat
- CVE-2026-47308NULL pointer dereference vulnerability in Samsung Open Source Walrus allows Pointer Manipulation.Samsung Open Source Walrus
- CVE-2026-33565kernel_linux_common_modules has a Race Condition vulnerabilityOpenHarmony
- CVE-2026-28733filemanagement_storage_service has an use after free vulnerabilityOpenHarmony
- CVE-2026-27766multimedia_audio_framework has a Race Condition vulnerabilityOpenHarmony
- CVE-2026-25850filemanagement_storage_service has an improper preservation of permissions vulnerabilityOpenHarmony
- CVE-2026-28751filemanagement_storage_service has an improper input validation vulnerabilityOpenHarmony
- CVE-2026-27781kernel_liteos_a has an integer overflow vulnerabilityOpenHarmony
- CVE-2026-25110Sensors_medical_sensor has a NULL pointer dereference vulnerabilityOpenHarmony
- CVE-2026-47307NULL pointer dereference vulnerability in Samsung Open Source Walrus allows an attacker to cause a denial of service via a crafted…Samsung Open Source Walrus
- CVE-2026-33514Discourse: Information Disclosure in Form Template API Due to Missing Authorizationdiscourse
- CVE-2026-33234AutoGPT: SendEmailBlock's IP blocklist bypass allows SSRF via user-controlled SMTP serverSignificant-Gravitas AutoGPT
- CVE-2026-33052MantisBT: Authorization Bypass in Global Profile Creationmantisbt · mantisbt/mantisbt
- CVE-2026-32244Discourse: Cached outdated summaries can leak removed contentdiscourse
- CVE-2026-34883An issue was discovered in the Portrait Dell Color Management application before 3.7.0 for Dell monitors.
- CVE-2026-36827A command injection vulnerability exists in Panabit PAP-XM320 up to and including V7.7.