CVEs published July 27, 2026
440 CVEs were published on July 27, 2026: 91 critical, 168 high. 3 are now in CISA KEV.
- Published
- 440
- Critical
- 91
- High
- 168
- Medium
- 165
- Low
- 10
- Unrated
- 6
- Now in CISA KEV
- 3
- Fix available
- 318
Most affected products
- Apple macOS
- 62
- Apple iOS and iPadOS · Apple macOS +3
- 44
- Linux
- 26
- Apple iOS and iPadOS · Apple macOS
- 19
- Apple iOS and iPadOS · Apple macOS +2
- 16
- jfrog artifactory
- 13
- vercel next.js · next
- 9
- Erlang OTP
- 8
- Apache Software Foundation Apache Thrift
- 7
- Apple Safari · Apple iOS and iPadOS +4
- 6
Critical 91
- CVE-2026-43757An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS
- CVE-2026-43805A race condition was addressed with improved state handling.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-39873The issue was addressed with improved memory handling.Apple macOS
- CVE-2026-64740A parsing issue in the handling of directory paths was addressed with improved path validation.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-64691A buffer overflow was addressed with improved size validation.Apple macOS
- CVE-2026-43809An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS
- CVE-2026-43799A use after free issue was addressed with improved memory management.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-28982A race condition was addressed with improved locking.Apple macOS
- CVE-2026-64700A use after free issue was addressed with improved memory management.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-64720A race condition was addressed with improved state handling.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-43812A use after free issue was addressed with improved memory management.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-64746An authorization issue was addressed with improved validation.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-64697The issue was addressed with improved memory handling.Apple macOS
- CVE-2026-43730A permissions issue was addressed with additional restrictions.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-28911The issue was addressed with improved memory handling.Apple macOS
- CVE-2026-43710The issue was addressed with improved memory handling.Apple macOS
- CVE-2026-64731A path handling issue was addressed with improved validation.Apple macOS
- CVE-2026-43803An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-64770An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-64727A type confusion issue was addressed with improved memory handling.Apple macOS · Apple tvOS
- CVE-2026-43793An issue existed in the handling of environment variables.Apple macOS
- CVE-2026-64726The issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-64771A buffer overflow was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-43814A use after free issue was addressed with improved memory management.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-64767A buffer overflow was addressed with improved bounds checking.Apple macOS
Show all 91 entriesShow fewer entries
- CVE-2026-43802An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS
- CVE-2026-43750A buffer overflow was addressed with improved bounds checking.Apple macOS
- CVE-2026-64696The issue was addressed with improved memory handling.Apple macOS
- CVE-2026-43822A use after free issue was addressed with improved memory management.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-64751A use after free issue was addressed with improved memory management.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-64729A use after free issue was addressed with improved memory management.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-43773An out-of-bounds read was addressed with improved bounds checking.Apple macOS
- CVE-2026-64695The issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS
- CVE-2026-43682The issue was addressed with improved memory handling.Apple macOS
- CVE-2026-64772An out-of-bounds write issue was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-43694The issue was addressed with improved memory handling.Apple macOS
- CVE-2026-43769An integer overflow was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-64733This issue was addressed with improved data protection.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-64698The issue was addressed with improved memory handling.Apple macOS
- CVE-2026-28928A use after free issue was addressed with improved memory management.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-64704A type confusion issue was addressed with improved memory handling.Apple macOS
- CVE-2026-43748An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS
- CVE-2026-43764An integer overflow was addressed with improved input validation.Apple macOS
- CVE-2026-64694An integer overflow was addressed with improved input validation.Apple macOS
- CVE-2026-64769An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-43779A logic issue was addressed with improved restrictions.Apple macOS
- CVE-2026-64774An integer overflow was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-43807A buffer overflow was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-64762An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS
- CVE-2026-64703A use after free issue was addressed with improved memory management.Apple macOS
- CVE-2026-64702An access issue was addressed with additional sandbox restrictions.Apple macOS
- CVE-2026-64738A permissions issue was addressed with additional restrictions.Apple iOS and iPadOS · Apple macOS
- CVE-2026-43810The issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-64775A memory initialization issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-43778A use after free issue was addressed with improved memory management.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-64551sctp: validate STALE_COOKIE cause length before reading stalenessLinux
- CVE-2026-64541net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socketLinux
- CVE-2026-66824Stored Cross-Site Scripting via Unsafe Capture Tree JSON Embeddinglookyloo
- CVE-2026-17552Plack::App::Prerender versions before 0.3.0 for Perl can proxy to an arbitrary host via unvalidated REQUEST_URI concatenation in callRRWO Plack::App::Prerender
- CVE-2026-55579Pheditor: Hardcoded default password 'admin' with no forced change enables full application compromisepheditor · pheditor/pheditor
- CVE-2026-48030Pheditor: OS Command Injection in terminal handler via unsanitized 'dir' parameter (CWE-78)pheditor · pheditor/pheditor
- CVE-2026-63077In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocolJetBrains TeamCity
- CVE-2026-17191VeloCloud Orchestrator Flow Metrics API SQL InjectionArista Networks VeloCloud Orchestrator On-Prem
- CVE-2026-16812VeloCloud Orchestrator OS Command InjectionArista Networks VeloCloud Orchestrator On-Prem
- CVE-2026-66398phpMyFAQ before 4.1.6 Remote Code Execution via Configuration APIthorsten phpMyFAQ
- CVE-2026-66396SiYuan before v3.7.2 Stored XSS to RCE via title-img IALsiyuan-note siyuan
- CVE-2026-66395SiYuan Desktop before v3.7.2 Reflected XSS to RCE via siyuan Protocolsiyuan-note siyuan
- CVE-2026-66394SiYuan before v3.7.3 Stored and Reflected XSS via SVG Sanitizer Bypasssiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-55953TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authenticationErlang OTP
- CVE-2026-59550WordPress AWP Classifieds plugin <= 4.4.7 - SQL Injection vulnerabilityStrategy11 Team AWP Classifieds
- CVE-2026-59549WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.10 - SQL Injection vulnerabilityrtCamp rtMedia for WordPress, BuddyPress and bbPress
- CVE-2026-59538WordPress GamiPress plugin <= 7.9.7 - SQL Injection vulnerabilityRuben Garcia GamiPress
- CVE-2026-59533WordPress Relevanssi Light plugin <= 1.2.2 - SQL Injection vulnerabilityChristoph Vielgrader Relevanssi Light
- CVE-2026-59527WordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerabilityRomanCode MapSVG
- CVE-2026-65876Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.8.0joomshaper.com SP Page Builder extension for Joomla
- CVE-2026-65879Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page Builder < 6.7.1joomshaper.com SP Page Builder extension for Joomla
- CVE-2026-65766Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.7.1joomshaper.com SP Page Builder extension for Joomla
- CVE-2026-61511vBulletin < 6.2.2 Eval Injection RCE via vb5/template/runtime.phpvBulletin
- CVE-2026-55971Apache Thrift: C++ ZLIB heap buffer overflow (write) in THeaderTransport::untransform()Apache Software Foundation Apache Thrift
- CVE-2026-48144Apache Thrift: c_glib TLS Client Missing Hostname VerificationApache Software Foundation Apache Thrift
- CVE-2026-64535nvmet-tcp: Fix potential UAF when ddgst mismatchLinux
- CVE-2026-64534nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error pathLinux
- CVE-2026-14289WP FacturaONE < 5.37 - Unauthenticated Remote Code ExecutionFacturaONE para WooCommerce con VeriFactu
- CVE-2026-13714Realtyna Organic IDX plugin + WPL Real Estate < 5.3.0 - Unauthenticated Arbitrary File Upload to Remote Code ExecutionRealtyna Organic IDX plugin + WPL Real Estate
- CVE-2026-13597QRcode Login for WeChat <= 1.3 - Unauthenticated Account Takeover微信二维码登陆
- CVE-2026-13332Masteriyo LMS < 2.3.1 - Unauthenticated Arbitrary User Session Termination (Denial of Service)Masteriyo LMS
- CVE-2026-12394MemberGlut < 1.1.5 - Unauthenticated Privilege Escalation to AdministratorMemberGlut
- CVE-2021-32084An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273.
- CVE-2021-32086An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273.
- CVE-2021-32088An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273.
- CVE-2025-50455SQL injection vulnerability exists in the order_by parameter of the /customers/search endpoint in Alex Tselegidis EasyAppointments <= 1.5.1.
High 168
- CVE-2026-65447WordPress Contest Gallery plugin <= 30.0.6 - Cross Site Scripting (XSS) vulnerabilityWasiliy Strecker / ContestGallery developer Contest Gallery
- CVE-2026-65446WordPress Kali Forms plugin <= 2.4.18 - Cross Site Scripting (XSS) vulnerabilityWP Chill Kali Forms
- CVE-2026-65443WordPress BackWPup plugin <= 5.7.4 - Cross Site Scripting (XSS) vulnerabilityWP Media BackWPup
- CVE-2026-65442WordPress FormCraft plugin <= 3.9.15 - Server Side Request Forgery (SSRF) vulnerabilitySubtle Web FormCraft
- CVE-2026-65441WordPress GiveWP plugin <= 4.16.3 - Cross Site Scripting (XSS) vulnerabilityNexcess GiveWP
- CVE-2026-65440WordPress GetGenie plugin <= 4.4.3 - Cross Site Scripting (XSS) vulnerabilityRoxnor GetGenie
- CVE-2026-65439WordPress Ultimate Addons for Contact Form 7 plugin <=3.5.45 - Cross Site Scripting (XSS) vulnerabilityThemefic Ultimate Addons for Contact Form
- CVE-2026-65438WordPress Message Filter for Contact Form 7 plugin <= 1.6.3.9 - Cross Site Scripting (XSS) vulnerabilityKofi Mokome Message Filter for Contact Form
- CVE-2026-65437WordPress Spam protection, AntiSpam, FireWall by CleanTalk plugin <= 6.82 - Cross Site Scripting (XSS) vulnerabilitySpam protection, AntiSpam, FireWall by CleanTalk
- CVE-2026-61957WordPress miniorange otp verification plugin <= 5.5.1 - Cross Site Scripting (XSS) vulnerabilityminiorange otp verification
- CVE-2026-61953WordPress Simple Link Directory Pro plugin <= 15.0.6 - Server Side Request Forgery (SSRF) vulnerabilityQuantumCloud Simple Link Directory Pro
- CVE-2026-66473WordPress Xendit Payment plugin <= 7.1.0 - Broken Access Control vulnerabilityXendit Payment
- CVE-2026-55685React Router: Unauthenticated Denial of Service via Inefficient Route Matchingremix-run react-router · react-router
- CVE-2026-64737An authorization issue was addressed with improved state management.Apple macOS
- CVE-2026-43813A validation issue was addressed with improved input sanitization.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-43673The issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-64783A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +3
- CVE-2026-43777This issue was addressed with improved input validation.Apple macOS
- CVE-2026-43776A buffer overflow was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS
- CVE-2026-43672An authorization issue was addressed with improved state management.Apple macOS
- CVE-2026-43760An access issue was addressed with improved access restrictions.Apple macOS
- CVE-2026-64716The issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-64757A memory corruption issue was addressed with improved state management.Apple Safari · Apple iOS and iPadOS +3
- CVE-2026-43771A stack overflow was addressed with improved input validation.Apple macOS
- CVE-2026-43747An out-of-bounds read was addressed with improved bounds checking.Apple macOS
Show all 168 entriesShow fewer entries
- CVE-2026-28931A buffer overflow was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-64766An integer overflow was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-39875A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2026-43681A buffer overflow was addressed with improved bounds checking.Apple macOS
- CVE-2026-39874A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2026-43711A memory corruption issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-28926A race condition was addressed with improved state handling.Apple macOS
- CVE-2026-43818An integer overflow was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS
- CVE-2026-28896The issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-64747A buffer overflow was addressed with improved size validation.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-64768An out-of-bounds read issue was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-43698An injection issue was addressed with improved validation.Apple macOS
- CVE-2026-64713This issue was addressed with improved checks.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-43749A parsing issue in the handling of directory paths was addressed with improved path validation.Apple macOS
- CVE-2026-64725An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-43728This issue was addressed through improved state management.Apple macOS
- CVE-2026-39877A memory corruption issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-64764An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-28973An integer overflow was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-64749The issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-64765An integer overflow was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-43729The issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-28945A permissions issue was addressed with additional sandbox restrictions.Apple macOS
- CVE-2026-43733The issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS
- CVE-2026-28912A logic issue was addressed with improved restrictions.Apple macOS
- CVE-2026-43772A path traversal issue was addressed with improved input validation.Apple macOS
- CVE-2026-43780An integer overflow was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-64719An out-of-bounds access issue was addressed with improved bounds checking.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-43755A race condition was addressed with improved state management.Apple macOS
- CVE-2026-64758The issue was addressed with improved bounds checks.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-64739An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-28981A buffer overflow was addressed with improved bounds checking.Apple macOS
- CVE-2026-64692An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-43723A path handling issue was addressed with improved validation.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-64763An out-of-bounds write issue was addressed by removing the vulnerable code.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-43693A race condition was addressed with improved state handling.Apple macOS
- CVE-2026-64555KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_handle_mops()Linux
- CVE-2026-64554netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment()Linux
- CVE-2026-64552virtio-net: fix len check in receive_big()Linux
- CVE-2026-64550net: qualcomm: rmnet: validate MAP frame length before ingress parsingLinux
- CVE-2026-64548bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data()Linux
- CVE-2026-64547net: usb: net1080: validate packet_len before pad-byte access in rx_fixupLinux
- CVE-2026-64546drm/edid: fix OOB read in drm_parse_tiled_block()Linux
- CVE-2026-64545net, bpf: check master for NULL in xdp_master_redirect()Linux
- CVE-2026-64543tipc: fix use-after-free of the discoverer in tipc_disc_rcv()Linux
- CVE-2026-64540usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup()Linux
- CVE-2026-64539Bluetooth: eir: Fix stack OOB write when prepending the Flags ADLinux
- CVE-2026-65922Potential unauthorized modification of Artifactory internal metadatajfrog artifactory
- CVE-2026-65617Potential remote code execution on an Artifactory package service container.jfrog artifactory
- CVE-2026-65616Potential privilege escalation to JFrog administrator privilegesjfrog artifactory
- CVE-2026-66015JFrog Platform contains an authorization flaw that may allow authenticated privilege escalation.jfrog artifactory
- CVE-2026-66014Potential authentication bypass leading to privilege escalation in Artifactoryjfrog artifactory
- CVE-2026-64649Next.js: Server-Side Request Forgery in Server Actions on Custom Serversvercel next.js · next
- CVE-2026-56748Authenticated RCE via Symlink Following in Cribl Stream Pack Git ImportCribl Stream
- CVE-2026-65921Potential path traversal leading to unauthorized file writesjfrog artifactory
- CVE-2026-42017Privilege escalation via JFrog Worker event token exposurejfrog artifactory
- CVE-2026-56747Code Injection in JSON Pointer Processing Component in Cribl StreamCribl Stream
- CVE-2026-42016Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalationjfrog artifactory
- CVE-2026-12383Eda-server: externaleventstreamviewset trusts subject header without validation and leaks expected dnRed Hat Ansible Automation Platform 2.5 for RHEL · Red H… +1
- CVE-2026-66759Gimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted icns imagesGNOME GIMP · Red Hat Enterprise Linux
- CVE-2026-66758Gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits imagesGNOME GIMP · Red Hat Enterprise Linux
- CVE-2026-66028Ekushey Project Manager CRM 5.0 Missing Uniqueness Constraint via Client EmailCreativeitem Ekushey Project Manager CRM
- CVE-2026-59239Stored XSS in Prospero Flow CRM email body allows administrator account takeoverRoskus Prospero Flow CRM
- CVE-2026-55578Pheditor: Incomplete command sanitization in terminal feature allows RCE via pipe operator, backtick substitution, and newline injectionpheditor · pheditor/pheditor
- CVE-2026-54540Authenticated terminal command whitelist bypass in Pheditorpheditor · pheditor/pheditor
- CVE-2026-64642Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single localevercel next.js · next
- CVE-2026-64641Next.js: Denial of Service in App Router using Server Actionsvercel next.js · next
- CVE-2026-64645Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostnamevercel next.js · next
- CVE-2026-17568Improper access control in the role membership management endpoint in Devolutions Server allows an authenticated non-administrative user…Devolutions Server
- CVE-2026-45623PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS commentspostcss
- CVE-2026-66731facil.io 0.7.5 - 0.7.6 HTTP/1.1 Chunked Transfer Encoding Parser Crash DoSboazsegev facil.io
- CVE-2026-66730facil.io 0.6.0 - 0.7.6 Infinite Loop DoS via Multipart MIME Body Parserboazsegev facil.io
- CVE-2026-66729facil.io 0.6.0 - 0.7.6 Integer Underflow DoS via Multipart MIME Body Parserboazsegev facil.io
- CVE-2026-24252NVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection.NVIDIA NeMo Framework
- CVE-2026-17192VeloCloud Orchestrator Missing Input Validation SSRFArista Networks VeloCloud Orchestrator On-Prem
- CVE-2026-66399phpMyFAQ before 4.1.6 Privilege Escalation via Group Membershipthorsten phpMyFAQ
- CVE-2026-66397phpMyFAQ before 4.1.6 Path Traversal via category image deletionthorsten phpMyFAQ
- CVE-2026-54890BEAM VM crash via integer underflow in binary_to_term BIT_BINARY_EXT decodingErlang OTP
- CVE-2026-59251Denial of service via exponential certificate policy tree growth in path validationErlang OTP
- CVE-2026-59250Megaco flex scanner buffer overflow via oversized property parm nameErlang OTP
- CVE-2026-58227TLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chainErlang OTP
- CVE-2026-66050NitroShare Desktop 0.3.4 Path Traversal via LAN File Transfer Servernitroshare-desktop
- CVE-2025-59172Improper Neutralization of Special Elements used in an OS Command VulnerabilityEricsson Packet Core Controller
- CVE-2026-66427WordPress WP Google Review Slider plugin <= 18.4 - SQL Injection vulnerabilityjgwhite33 WP Google Review Slider
- CVE-2026-59558WordPress Booking Calendar plugin <= 11.4.2 - Cross Site Scripting (XSS) vulnerabilitywpdevelop Booking Calendar
- CVE-2026-59556WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin <= 4.5.11 - Cross Site Scripting (XSS) vulnerabilityacowebs Dynamic Pricing With Discount Rules for WooCommerce
- CVE-2026-59553WordPress Product Feed Manager plugin <= 7.6.1 - Cross Site Scripting (XSS) vulnerabilityRexTheme Product Feed Manager
- CVE-2026-59552WordPress 3D Flipbook PDF Viewer & Embedder plugin <= 1.4.2 - Server Side Request Forgery (SSRF) vulnerabilityShahadat Hossain 3D Flipbook PDF Viewer & Embedder
- CVE-2026-59551WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.10 - SQL Injection vulnerabilityrtCamp rtMedia for WordPress, BuddyPress and bbPress
- CVE-2026-59548WordPress Byteflows Travel & Hotel Booking plugin <= 1.0.0 - Sensitive Data Exposure vulnerabilityByteflows Travel & Hotel Booking
- CVE-2026-59546WordPress Hide My WP Ghost plugin <= 7.0.06 - 2FA Bypass vulnerabilityJohn Darrel Hide My WP Ghost
- CVE-2026-59539WordPress Paid Member Subscriptions plugin <= 3.0.7 - Insecure Direct Object References (IDOR) vulnerabilityCozmoslabs Paid Member Subscriptions
- CVE-2026-59537WordPress Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce plugin <= 2.10.22 - SQL Injection vulnerabilitySender – Newsletter, SMS and Email Marketing Automation for…
- CVE-2026-59536WordPress CoCart – Headless ecommerce plugin <= 4.8.4 - Broken Access Control vulnerabilityCoCart Headless CoCart – Headless ecommerce
- CVE-2026-59535WordPress Thrive Product Manager plugin <= 10.9.2 - Broken Access Control vulnerabilityThrive Themes Coupon Thrive Product Manager
- CVE-2026-59534WordPress Post My CF7 Form plugin <= 6.2.0 - Broken Access Control vulnerabilityAurovrata Venet Post My CF7 Form
- CVE-2026-59532WordPress Booking and Rental Manager plugin <= 2.7.2 - Price Manipulation vulnerabilitymagepeopleteam Booking and Rental Manager
- CVE-2026-59531WordPress Falcon – WordPress Optimizations & Tweaks plugin <= 2.10.0 - Unknown vulnerabilityAnh Tran Falcon – WordPress Optimizations & Tweaks
- CVE-2026-59530WordPress Stripe For WooCommerce plugin <= 4.0.7 - Broken Access Control vulnerabilityPayment Plugins Stripe For WooCommerce
- CVE-2026-59529WordPress Ebook Store plugin <= 6.19 - Sensitive Data Exposure vulnerabilitymotov.net Ebook Store
- CVE-2026-59528WordPress ShipTime: Discounted Shipping Rates plugin <= 1.1.1 - Sensitive Data Exposure vulnerabilityShipTime: Discounted Shipping Rates
- CVE-2026-65877Joomla Extension - joomshaper.com - Authenticated SQL injection in SP Page Builder < 6.7.1joomshaper.com SP Page Builder extension for Joomla
- CVE-2026-65878Joomla Extension - joomshaper.com - Authenticated arbitrary file delete in SP Page Builder < 6.7.1joomshaper.com SP Page Builder extension for Joomla
- CVE-2026-59690Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant Missing Authorization Allows…Progress Software LoadMaster · Progress Software ECS Con… +3
- CVE-2026-59689Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF Improper Authorization Allows Privilege…Progress Software LoadMaster · Progress Software ECS Con… +2
- CVE-2026-59688Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Backup Restore…Progress Software LoadMaster · Progress Software ECS Con… +2
- CVE-2026-59687Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Geo Location…Progress Software LoadMaster · Progress Software ECS Con… +2
- CVE-2026-59686Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Management InterfaceProgress Software LoadMaster · Progress Software ECS Con… +2
- CVE-2026-12991Multiple vulnerabilities in Ghost Robotics' Vision 60Ghost Robotics Vision
- CVE-2026-12990Multiple vulnerabilities in Ghost Robotics' Vision 60Ghost Robotics Vision
- CVE-2026-12989Multiple vulnerabilities in Ghost Robotics' Vision 60Ghost Robotics Vision
- CVE-2026-58662Apache Thrift: C++ THeaderTransport::readString() info-header length bounds bypassApache Software Foundation Apache Thrift
- CVE-2026-58389Apache Thrift: Rust binary protocol non-strict path missing string size limitApache Software Foundation thrift
- CVE-2026-55969Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: integer overflow in…Apache Software Foundation Apache Thrift · Apache Softwa… +1
- CVE-2026-55968Apache Thrift: Node.js quadratic-time DoS in server receive transportsApache Software Foundation thrift
- CVE-2026-49158Apache Thrift: Ruby THeaderTransport ZLIB Decompression BombApache Software Foundation Apache Thrift
- CVE-2026-48586Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TZlibTransport Decompression Size LimitApache Software Foundation thrift · Apache Software Foun… +2
- CVE-2026-48145Apache Thrift: C++ TSSLSocket matchName() RFC 6125 Wildcard BypassApache Software Foundation Apache Thrift
- CVE-2026-43871Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limitApache Software Foundation thrift · Apache Software Foun… +6
- CVE-2026-41608Apache Thrift: Unbounded Zlib Decompression in Python THeaderTransportApache Software Foundation thrift · thrift
- CVE-2026-17527Virt-cdi-operator: containerized-data-importer: cdi.kubevirt.io:view aggregated clusterrole grants create on datavolumes/source, allowing…Red Hat Container Native Virtualization · Red Hat OpenShift…
- CVE-2026-17523can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_taskletLinux
- CVE-2026-65894Improper Authentication Vulnerability in CP PLUS EZ-P21 IP CameraCP-Plus EZ-P21 IP Camera
- CVE-2026-65893Arbitrary Code Execution Vulnerability in CP PLUS EZ-P21 IP CameraCP-Plus EZ-P21 IP Camera
- CVE-2026-14837SSH Enablement Signature Verification BypassLenze c430 · Lenze c520 +3
- CVE-2026-64536staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loopLinux
- CVE-2026-64533fs/ntfs3: validate lcns_follow in log_replay conversionLinux
- CVE-2026-64532fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation}Linux
- CVE-2026-64531net: openvswitch: reject oversized nested action attrsLinux
- CVE-2026-9830BookingPress Pro < 5.7.3 - Unauthenticated Customer PII Disclosure and Booking Tampering via Permission Callback Bugbookingpress-appointment-booking-pro
- CVE-2026-14235WordPress Download Manager < 3.3.62 - Unauthorized Protected File Download via Reusable Download KeyDownload Manager
- CVE-2026-13726Multiple Page Generator Plugin – MPG < 4.1.8 - Reflected XSS via mpg_shortcodeMPG
- CVE-2026-13152Custom Fields Account Registration For WooCommerce < 1.4 - Unauthenticated Privilege EscalationCustom Fields Account Registration For Woocommerce
- CVE-2026-12493Clover Payment Gateway by Zaytech for WooCommerce < 1.3.6 - Unauthenticated Payment Bypass via check_orderClover Payment Gateway by Zaytech for WooCommerce
- CVE-2026-12255MainWP Child < 6.1.2 - Unauthenticated Administrator Authentication Bypass via Passwordless Site RegistrationMainWP Child
- CVE-2025-15662Printcart Web to Print Product Designer for WooCommerce < 2.5.3 - Unauthenticated Arbitrary File Read and Server-Side Request ForgeryPrintcart Web to Print Product Designer for WooCommerce
- CVE-2026-66412Leantime all versions prior to and 3.6.2 Broken Access Control via tickets.getMilestone JSON-RPCLeantime
- CVE-2026-15928XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page…XMLRPC-C
- CVE-2021-32085An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273.
- CVE-2021-32087An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273.
- CVE-2025-63913An issue was discovered in OpenSBI 1.3 allowing attackers to cause a denial of service via crafted request to the SBI function #2 or the…
- CVE-2026-51077SQL injection vulnerability in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the sqlquery parameter of…
- CVE-2026-51078An issue in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the str parameter of the…
Medium, low and unrated 181
- CVE-2026-65448WordPress Anti Spam and list cleaner – AcyChecker plugin <= 1.8.1 - Cross Site Scripting (XSS) vulnerabilityAcyMailing Newsletter Team Anti Spam and list cleaner ̵…
- CVE-2026-65445WordPress Ad Invalid Click Protector (AICP) plugin <= 1.3.0 - Broken Access Control vulnerabilityiSaumya Ad Invalid Click Protector
- CVE-2026-53669React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass)remix-run react-router · react-router
- CVE-2026-53668React Router: Open redirect can lead to XSSremix-run react-router · react-router-dom +1
- CVE-2026-59240IDOR in Prospero Flow CRM allows deletion of other users' notificationsRoskus Prospero Flow CRM
- CVE-2026-53667React Router: Cross-site Scripting is Possible due to Missing RSCErrorHandler Protocol Validation (Incomplete fix for CVE-2026-53667)remix-run react-router · react-router
- CVE-2026-53666React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR Hydrationremix-run react-router · react-router
- CVE-2026-66825Cross-Site Scripting via Unsafe URL Schemes in Pivotick Property Linkspivotick
- CVE-2026-43782This issue was addressed with improved checks.Apple macOS
- CVE-2026-64776The issue was addressed with improved bounds checks.Apple macOS
- CVE-2026-64721This issue was addressed through improved state management.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-20672An information disclosure issue was addressed with improved privacy controls.Apple macOS
- CVE-2026-43665This issue was addressed with additional entitlement checks.Apple macOS
- CVE-2026-28900A file quarantine bypass was addressed with additional checks.Apple macOS
- CVE-2026-64741A permissions issue was addressed with additional restrictions.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2026-28849The issue was addressed with improved checks.Apple macOS
- CVE-2026-43804This issue was addressed through improved state management.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-43756A logic issue was addressed with improved validation.Apple macOS
- CVE-2026-64707A permissions issue was addressed with improved validation.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-64711This issue was addressed with additional entitlement checks.Apple iOS and iPadOS · Apple macOS
- CVE-2026-43767The issue was addressed with improved memory handling.Apple macOS
- CVE-2026-43819An access issue was addressed with additional sandbox restrictions.Apple macOS
- CVE-2026-43792An authorization issue was addressed with improved state management.Apple Safari · Apple macOS
- CVE-2026-64730The issue was addressed with improved UI.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-43770A race condition was addressed with additional validation.Apple macOS · Apple tvOS
Show all 181 entriesShow fewer entries
- CVE-2026-43766An authorization issue was addressed with improved state management.Apple macOS
- CVE-2026-64710A privacy issue was addressed by removing sensitive data.Apple macOS
- CVE-2026-43765This issue was addressed with improved handling of symlinks.Apple macOS
- CVE-2026-64744An information leakage was addressed with additional validation.Apple iOS and iPadOS · Apple macOS
- CVE-2026-43821An access issue was addressed with improved access restrictions.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-43817An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-43801This issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-64699A memory initialization issue was addressed with improved memory handling.Apple macOS
- CVE-2026-43753An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS
- CVE-2026-64709The issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-64708A file quarantine bypass was addressed with additional checks.Apple macOS
- CVE-2026-43744An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-28932A logic issue existed resulting in memory corruption.Apple macOS
- CVE-2026-64732This issue was addressed through improved state management.Apple iOS and iPadOS · Apple macOS
- CVE-2026-43768The issue was addressed with improved memory handling.Apple macOS
- CVE-2026-43800An information disclosure issue was addressed by removing the vulnerable code.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-43816An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-64724The issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-64745This issue was addressed with additional restrictions on the lock screen.Apple macOS
- CVE-2026-64728A permissions issue was addressed with improved validation.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-43796This issue was addressed with improved data protection.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-64723A logic issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS
- CVE-2026-43811A race condition was addressed with improved checks.Apple iOS and iPadOS
- CVE-2026-43738The issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS
- CVE-2026-64735An inconsistent user interface issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-43714The issue was addressed with improved input sanitization.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-43775An authorization issue was addressed with improved state management.Apple macOS
- CVE-2026-64693A type confusion issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-43763A permissions issue was addressed by removing the vulnerable code.Apple macOS
- CVE-2026-64742This issue was addressed by using HTTPS when sending information over the network.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2026-43759An authorization issue was addressed with improved state management.Apple macOS · Apple watchOS
- CVE-2026-64754An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-64755An authorization issue was addressed with improved state management.Apple iOS and iPadOS
- CVE-2026-43758An authorization issue was addressed with improved state management.Apple macOS · Apple watchOS
- CVE-2026-64743An authorization issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-43774An out-of-bounds read was addressed with improved bounds checking.Apple macOS
- CVE-2026-43754This issue was addressed with improved redaction of sensitive information.Apple iOS and iPadOS · Apple macOS
- CVE-2026-64718A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-64734The issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-43781A race condition was addressed with improved state handling.Apple macOS
- CVE-2026-43806A denial of service issue was addressed by removing the vulnerable code.Apple macOS
- CVE-2026-43739An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-64722A buffer overflow issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS
- CVE-2026-43797This issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS
- CVE-2026-64553net: psample: fix info leak in PSAMPLE_ATTR_DATALinux
- CVE-2026-64549Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup()Linux
- CVE-2026-64544crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contentsLinux
- CVE-2026-64542ipv6: ndisc: fix NULL deref in accept_untracked_na()Linux
- CVE-2026-64538ipv6: Fix null-ptr-deref in fib6_nh_mtu_change().Linux
- CVE-2026-64537bridge: cfm: reject invalid CCM interval at configuration timeLinux
- CVE-2026-12001Hardcoded Credential Vulnerability in Multiple TP-Link Router ModelsTP-Link Systems TL-WR850N · TP-Link Systems Archer C20 +3
- CVE-2026-59730@astrojs/node: Backslash-prefixed paths not recognized as internal by trailing-slash redirectwithastro astro · @astrojs/node
- CVE-2026-59728@astrojs/rss: XML Injection via Unescaped RSS Feed Fieldswithastro astro · @astrojs/rss
- CVE-2026-65923Potential server-side request forgery in Artifactory Ansible repository handlingjfrog artifactory
- CVE-2026-59727Astro: Cross-site scripting via unescaped transition: directive values on hydrated islandswithastro astro · astro
- CVE-2026-59729Astro: XSS via unescaped spread attribute names in renderHTMLElement (incomplete fix for CVE-2026-54298)withastro astro · astro
- CVE-2026-65924Server-Side Request Forgery (SSRF) via Terraform Remote repositoryjfrog artifactory
- CVE-2026-65925Server-Side Request Forgery (SSRF) via JFrog Artifactory Cargo remote repositoryjfrog artifactory
- CVE-2026-65618Improper URL validation when handling specific URLs Pub, Terraform and Docker packages might lead to SSRF vulnerabilityjfrog artifactory
- CVE-2026-66018JFrog Artifactory build environment properties exposurejfrog artifactory
- CVE-2026-64648Next.js: Response Body Cache Confusion for Requests Containing Bodiesvercel next.js · next
- CVE-2026-16481Server-Side Request Forgery (SSRF) and Credential Exfiltration in googleapis/mcp-toolbox cloud-healthcare-fhir-fetch-page ToolMCP Toolbox for Databases
- CVE-2026-64647Next.js: Response Body Cache Confusion with Invalid UTF-8 Request Bodiesvercel next.js · next
- CVE-2026-66757Gimp: signed integer overflow in file-sgi (sgi-lib) causes the plugin to crash on rle sgi imagesGNOME GIMP · Red Hat Enterprise Linux
- CVE-2026-64646Next.js: Unbounded Server Action payload in Edge runtimevercel next.js · next
- CVE-2026-17612Audit Log Exposure through Unauthorized AccessHoneywell S35 Series 3M/5M/8M/PinHole Cameras
- CVE-2026-10683DesignWare I2C target driver can be wedged into a permanent stuck state by an on-bus master (DoS)zephyrproject zephyr
- CVE-2026-10682Out-of-bounds write in Zephyr `log_filter_set` syscall verifier reachable from userspacezephyrproject zephyr
- CVE-2026-66031Ekushey Project Manager CRM 5.0 Stored XSS via Reply Ticket FieldCreativeitem Ekushey Project Manager CRM
- CVE-2026-66030Ekushey Project Manager CRM 5.0 Stored XSS via Ticket Title FieldCreativeitem Ekushey Project Manager CRM
- CVE-2026-66029Ekushey Project Manager CRM 5.0 Stored XSS via Client Name FieldCreativeitem Ekushey Project Manager CRM
- CVE-2026-48052Papra: Cross-organization tag deletion and modification via authenticated cross-tenant requestpapra-hq papra
- CVE-2026-48051Papra: SSRF via HTTP redirect bypass in webhook deliverypapra-hq papra · @papra/webhooks
- CVE-2026-64644Next.js: Denial of Service in the Image Optimization API using SVGsvercel next.js · next
- CVE-2026-64643Next.js: Unauthenticated Disclosure of Internal Server Function endpointsvercel next.js · next
- CVE-2026-17570Improper access control in the PAM password history endpoints in Devolutions Server allows an authenticated low-privileged user to…Devolutions Server
- CVE-2026-17569Improper access control in the NetBox synchronizer in Devolutions Server allows an authenticated user with view-only permission on an…Devolutions Server
- CVE-2026-54272ip-address: Misclassification of IPv4-mapped/NAT64 IPv6 addresses can bypass SSRF and trust-boundary checksbeaugunderson ip-address · ip-address
- CVE-2026-66391Apache Wicket: leaked and missing CSP headersApache Software Foundation org.apache.wicket:wicket-core
- CVE-2026-66390Apache Wicket: crafted Link URL strings can break out of the JavaScript sequenceApache Software Foundation org.apache.wicket:wicket-core
- CVE-2026-17531unitedbyai droidclaw Unsigned Scheduled Callback goals.ts authorizationunitedbyai droidclaw
- CVE-2026-17530AstrBotDevs AstrBot Subagent astr_agent_tool_exec.py _build_handoff_toolset authorizationAstrBotDevs AstrBot
- CVE-2026-17529AstrBotDevs AstrBot astr_main_agent.py authorizationAstrBotDevs AstrBot
- CVE-2026-55737Heap pointer corruption via signed/unsigned mismatch in LARGE_TUPLE_EXT decoding in erts external term format decoderErlang OTP
- CVE-2026-17574NULL Pointer Dereference in HDF5 via Invalid Variable-Length Datatype Type TagThe HDF Group HDF5
- CVE-2026-17573Double Free in H5D__chunk_copy() in HDF5 via a Crafted Chunk-Index Size FieldThe HDF Group HDF5
- CVE-2026-17572HDF5 SOHM List Index Heap Buffer OverflowThe HDF Group HDF5
- CVE-2026-47078Relative path traversal in zip:unzip/zip:extract via check_dir_level depth-counter bypassErlang OTP
- CVE-2026-42792epmd permanent DoS via EMFILE on accept(2) in ertsErlang OTP
- CVE-2025-59181Path traversal VulnerabilityEricsson Packet Core Controller
- CVE-2025-59180Use of Hard-coded Credentials VulnerabilityEricsson Packet Core Controller
- CVE-2025-59178Exposure of Sensitive System Information to an Unauthorized Control Sphere VulnerabilityEricsson Packet Core Controller
- CVE-2026-10819Mattermost Server Denial of Service via Animated GIF Emoji UploadMattermost
- CVE-2026-10600Denial of service via unbounded document content extraction in Mattermost ServerMattermost
- CVE-2025-59177Generation of Error Message Containing Sensitive Information VulnerabilityEricsson Packet Core Controller
- CVE-2026-66477WordPress Gillion theme <= 4.13 - Broken Access Control vulnerabilityShufflehound Gillion
- CVE-2026-66476WordPress Easy Digital Downloads plugin <= 3.6.9 - Arbitrary File Deletion vulnerabilitySyed Balkhi Easy Digital Downloads
- CVE-2026-66475WordPress Checkout Field Editor for WooCommerce – Checkout Manager plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerabilityacowebs Checkout Field Editor for WooCommerce – Check…
- CVE-2026-66474WordPress Insert Headers and Footers Code – HT Script plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) vulnerabilityHT Plugins Insert Headers and Footers Code – HT Script
- CVE-2026-66448WordPress Gallery PhotoBlocks plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerabilityWP Chill Gallery PhotoBlocks
- CVE-2026-66445WordPress Open User Map plugin <= 1.4.46 - Cross Site Scripting (XSS) vulnerability100plugins Open User Map
- CVE-2026-66442WordPress YayPricing plugin <= 3.5.6 - Broken Access Control vulnerabilityYayCommerce YayPricing
- CVE-2026-66438WordPress Exclusive Addons Elementor plugin <= 2.8.0 - Sensitive Data Exposure vulnerabilityTim Strifler Exclusive Addons Elementor
- CVE-2026-66437WordPress Feedzy plugin <= 5.2.4 - Server Side Request Forgery (SSRF) vulnerabilityThemeisle Feedzy
- CVE-2026-66434WordPress Photonic Gallery & Lightbox for Flickr, SmugMug & Others plugin <= 3.33 - Cross Site Scripting (XSS) vulnerabilitySayontan Sinha Photonic Gallery & Lightbox for Flickr, Smug…
- CVE-2026-66433WordPress Location Weather plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerabilityShapedPlugin Location Weather
- CVE-2026-66428WordPress WP Google Review Slider plugin <= 18.4 - Cross Site Request Forgery (CSRF) vulnerabilityjgwhite33 WP Google Review Slider
- CVE-2026-65568WordPress Visual Composer Website Builder plugin <= 45.15.0 - Broken Access Control vulnerabilityVisual Composer Website Builder
- CVE-2026-65567WordPress Event Tickets plugin <= 5.29.0.1 - Broken Access Control vulnerabilityNexcess Event Tickets
- CVE-2026-65564WordPress MapPress Maps for WordPress plugin <= 2.97.6 - Sensitive Data Exposure vulnerabilitychrisvrichardson MapPress Maps for WordPress
- CVE-2026-65563WordPress Orbit Fox by ThemeIsle plugin <= 3.0.7 - Cross Site Scripting (XSS) vulnerabilityOrbit Fox by ThemeIsle
- CVE-2026-65562WordPress BetterDocs plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerabilityWPDeveloper BetterDocs
- CVE-2026-65561WordPress WordPress Social Login and Register plugin <= 7.8.0 - Cross Site Scripting (XSS) vulnerabilityminiOrange WordPress Social Login and Register
- CVE-2026-65558WordPress AffiliateX plugin <= 2.3.5 - Server Side Request Forgery (SSRF) vulnerabilityWPCenter AffiliateX
- CVE-2026-65557WordPress Abandoned Cart Lite for WooCommerce plugin <= 6.8.0 - Cross Site Scripting (XSS) vulnerabilityTychesoftwares Abandoned Cart Lite for WooCommerce
- CVE-2026-65436WordPress Kirki plugin <= 6.0.13 - Arbitrary File Deletion vulnerabilityThemeum Kirki
- CVE-2026-65435WordPress Thrive Leads Version plugin <= 10.9.2 - Broken Access Control vulnerabilityThrive Themes Coupon Thrive Leads Version
- CVE-2026-65434WordPress ЮKassa для WooCommerce plugin <= 2.16.1 - Sensitive Data Exposure vulnerabilityyoomoney ЮKassa для WooCommerce
- CVE-2026-65433WordPress RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin <= 1.5.1 - Broken Access Control vulnerabilitythemewant RT Mega Menu – Mega Menu Builder for Elementor &a…
- CVE-2026-59560WordPress FundEngine plugin <= 1.7.8 - Broken Access Control vulnerabilityRoxnor FundEngine
- CVE-2026-59559WordPress RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerabilitythemewant RT Mega Menu – Mega Menu Builder for Elementor &a…
- CVE-2026-59557WordPress Events Made Easy plugin <= 3.1.3 - Broken Access Control vulnerabilityFranky Events Made Easy
- CVE-2026-15003Binutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of serviceRed Hat Hardened Images · Red Hat Enterprise Linux +2
- CVE-2026-17514ZJONSSON node-unzipper extract.js Extract path traversalZJONSSON node-unzipper
- CVE-2026-17513ggml-org whisper.cpp ggml.c ggml_ftype_to_ggml_type assertionggml-org whisper.cpp
- CVE-2026-17512ggml-org whisper.cpp log_mel_spectrogram out-of-boundsggml-org whisper.cpp
- CVE-2026-56538HCL Connections is vulnerable to information disclosureHCLSoftware Connections
- CVE-2026-56537HCL Connections is vulnerable to information disclosureHCLSoftware Connections
- CVE-2026-66053Apache Thrift: Python TSSLSocket Hostname Matcher ImportApache Software Foundation thrift · thrift
- CVE-2026-58023Apache Thrift: c_glib heap out-of-bounds read in transport leftover-bytes pathApache Software Foundation Apache Thrift
- CVE-2026-55970Apache Thrift: C++ heap out-of-bounds read in THeaderTransport::readHeaderFormat()Apache Software Foundation Apache Thrift
- CVE-2026-45112Apache Thrift: Unbounded Read Leading to Denial of ServiceApache Software Foundation org.apache.thrift:libthrift
- CVE-2026-12495Stack-Based Buffer Overflow in the Mercusys MB115-4GMercusys MB115-4G
- CVE-2026-57917Improper Restriction of XML External Entity Reference in proCertum SmartSignAsseco proCertum SmartSign
- CVE-2026-57916Arbitrary Path Execution via CPS URI in proCertum SmartSignAsseco proCertum SmartSign
- CVE-2026-14856Stored Cross-Site Scripting (XSS) in TastyIgniter Media ManagerMedia Manager TastyIgniter
- CVE-2026-40000Path Traversal Vulnerability in ZTE Blade A75 5GZTE Blade A75
- CVE-2026-17534Kimi Code FetchURL SSRF protection bypass via DNS-resolving hostnames and redirectsMoonshotAI Kimi Code
- CVE-2026-16554Integer Overflow Leading to Heap Buffer Overflow in cJSONDaveGamble cJSON
- CVE-2026-65765Joomla Extension - phoca.cz - Path traversal vulnerability in Phoca Commander 1.0.0-6.1.1phoca.cz Phoca Commander extension for Joomla
- CVE-2026-65764Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Maps 5.0.0-6.1.1phoca.cz Phoca Commander extension for Joomla
- CVE-2026-14827Calendar < 1.3.18 - Contributor+ Stored XSS via event_link ParameterCalendar
- CVE-2026-14820Quiz And Survey Master < 11.1.3 - Unauthenticated User Enumeration and Password Oracle via Quiz LoginQuiz and Survey Master
- CVE-2026-14568WP User Frontend < 4.3.8 - Unauthenticated Author-less Attachment DeletionUser Frontend: AI Powered Frontend Post Submission, User Di…
- CVE-2026-14236Contact Form 7 – PayPal & Stripe Add-on < 2.5 - Open RedirectContact Form
- CVE-2026-14203Smart Manager < 8.92.0 - Contributor+ Stored XSS via Post TitleSmart Manager
- CVE-2026-14190Sina Extension for Elementor < 3.10.2 - Reflected XSSSina Extension for Elementor
- CVE-2026-14189WPBot AI ChatBot < 8.5.2 - Admin+ Second-Order SQL Injection via qc_bot_str_fieldsWPBot
- CVE-2026-13400Simply Schedule Appointments < 1.6.12.4 - Unauthenticated Stored XSS via Booking Customer InformationSimply Schedule Appointments
- CVE-2026-13390The Events Calendar < 6.16.5.1 - Unauthenticated Event Aggregator Import Status ManipulationThe Events Calendar
- CVE-2026-12982Document Gallery < 5.1.1 - Reflected XSS via dg_generate_galleryDocument Gallery
- CVE-2026-10082Advanced Ads – Ad Manager & AdSense < 2.0.23 - Contributor+ Stored XSS via the_ad Shortcode 'ad_args' ParameterAdvanced Ads
- CVE-2026-17501ggml-org llama.cpp JSON-Schema-to-GBNF Conversion json-schema-to-grammar.cpp transform recursionggml-org llama.cpp
- CVE-2026-17500ggml-org llama.cpp json-schema-to-grammar.cpp _visit_pattern null pointer dereferenceggml-org llama.cpp
- CVE-2026-51564An issue in the redirect parameter in Milk admin <=0.9.8 allows remote attackers to redirect users to arbitrary external URLs via a…
- CVE-2026-51565Cross-site scripting (XSS) vulnerability in Modules/Docs/DocsController.php in Milk admin <=0.9.8 allows remote attackers to inject…