CVEs published August 12, 2026
434 CVEs were published on August 12, 2026: 61 critical, 157 high. 2 are now in CISA KEV.
- Published
- 434
- Critical
- 61
- High
- 157
- Medium
- 188
- Low
- 14
- Unrated
- 14
- Now in CISA KEV
- 2
- Fix available
- 370
Most affected products
- IBM i
- 42
- jfrog artifactory
- 25
- Linux
- 22
- siyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- 22
- GitLab
- 13
- Canonical LXD
- 11
- Red Hat Advanced Cluster Management for Kubernetes
- 10
- admidio · admidio/admidio
- 9
- budibase · @budibase/server
- 9
- IBM Security Verify Access · IBM Verify Identity Access
- 9
Critical 61
- CVE-2026-49819UpSnap - Unauthenticated Initial-Superuser Takeover Chains to Root RCE via wake_cmdseriousm4x UpSnap
- CVE-2026-16770PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source documentMITHALDU PDF::WebKit
- CVE-2026-49481UpSnap vulnerable to Remote Code Execution via IP Field Template Injection in wake_cmd/shutdown_cmdseriousm4x UpSnap
- CVE-2026-71193In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone DB constraint) are scoped…OpenStack Designate
- CVE-2026-71471Acm-search-v2-rhel9: search-v2-operator: hub search cr collector.imageoverride propagated to every spoke as arbitrary container imageRed Hat Advanced Cluster Management for Kubernetes
- CVE-2026-73501kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Defaultgetkin kin-openapi · github.com/getkin/kin-openapi
- CVE-2024-27253IBM Engineering Requirements Management DOORS Next is impacted by vulnerability in Reviews delete requestIBM DOORS Next
- CVE-2026-73519WolfStack < 25.9.2 Hard-coded Secret Authentication Bypass via X-WolfStack-Secretwolfsoftwaresystemsltd WolfStack
- CVE-2026-18749CVE-2026-18749CERT/CC VINCE
- CVE-2026-19001MongoDB BI Connector ODBC driver may write outside an allocated buffer when handling oversized catalog object namesMongoDB BI Connector ODBC Driver
- CVE-2026-66898Path traversal via unvalidated instance name in backup tarball restore enables root file write / RCECanonical LXD
- CVE-2026-63293Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as rootCanonical LXD
- CVE-2026-63294Root RCE via image backup.yaml symlinkCanonical LXD
- CVE-2026-73414Shescape: Shell injection via unescaped parentheses on Windows with CMDericcornelissen shescape · shescape
- CVE-2026-72508Multicloud-operators-subscription: multicloud-operators-subscription: hub and spoke serviceaccounts bound to wildcard rbac (*/*/*)Red Hat Advanced Cluster Management for Kubernetes
- CVE-2026-17083IBM i is Affected By Multiple Vulnerabilities in the Debug ServerIBM i
- CVE-2026-63296Project restriction bypass via instance migration config overrideCanonical LXD
- CVE-2026-63297Cross-project instance copy bypasses target project restrictions via TOCTOU in config mergeCanonical LXD
- CVE-2026-62420Cross-project cluster migration bypasses project restrictions via cluster notification flagCanonical LXD
- CVE-2026-19656ScadaLTS Authenticated Remote Code ExecutionSCADA-LTS ScadaLTS
- CVE-2026-73407Budibase: Unauthenticated REST Datasource Credential Theft via Cross-Origin Auth Leak (bypass of CVE-2026-48152))budibase · @budibase/server
- CVE-2026-73332CamaleonCMS cama_contact_form Plugin Stored XSS via before_html Fieldowen2345 CamaleonCMS
- CVE-2026-63300Cross-project instance move bypasses all project restrictions allowing host command executionCanonical LXD
- CVE-2026-72804SiYuan before v3.7.4 Authentication Bypass via Graph Endpointssiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-72798SiYuan before v3.7.4 Information Disclosure via renderAttributeViewsiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
Show all 61 entriesShow fewer entries
- CVE-2026-72795SiYuan before v3.7.4 Information Disclosure via Embed Blocksiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-72794siyuan before v3.7.4 Session Cookie Key Disclosure via getConfsiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-72793SiYuan before v3.7.4 Information Disclosure via /api/system/getConfsiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-72789SiYuan before v3.7.4 Authentication Bypass via Encrypted Notebookssiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-73268Cluster-curator-controller: cluster-curator-controller: spec.install.overridejob allows arbitrary job spec injectionRed Hat multicluster engine for Kubernetes
- CVE-2026-73269Cluster-curator-controller: cluster-curator-controller: tenant-controllable trigger creates clusterrolebinding granting cluster-wide secrets access to namespace-local saRed Hat multicluster engine for Kubernetes
- CVE-2026-73329CamaleonCMS Stored XSS via Draft Post Title Creation Endpointowen2345 CamaleonCMS
- CVE-2026-73300Budibase: SQL Injection via `multipleStatements: true`budibase · @budibase/server
- CVE-2026-17218IBM i is Affected By Remote Code Execution Vulnerability in Line Printer Daemon []IBM i
- CVE-2026-73299Prompty: Server-Side Template Injection to Remote Code Execution in the @prompty/core Nunjucks Renderermicrosoft prompty · @prompty/core
- CVE-2026-16956IBM Db2 Mirror for i is vulnerable to OS command injection []IBM Db2 Mirror for i
- CVE-2026-16860IBM i is Affected By Remote Code Execution Vulnerability []IBM i
- CVE-2026-17276IBM i is Affected By Multiple Vulnerabilities in Navigator for iIBM i
- CVE-2026-73240Apache Allura: Git command injectionApache Software Foundation Apache Allura
- CVE-2026-73296Microsoft UFO: Unauthenticated Mobile MCP access allows remote Android device control and screen disclosuremicrosoft UFO
- CVE-2026-73294Semaphore U: OS Command Injectionsemaphoreui semaphore · github.com/semaphoreui/semaphore
- CVE-2026-64639Incorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2 allows a low-privileged user (customer, reseller)…WebPros Plesk
- CVE-2026-65941WhatsUp Gold versions prior to 26.0.2 contain an unauthenticated remote code execution vulnerability in an internal report scheduling…Progress Software WhatsUp Gold
- CVE-2026-73263Prowler: RCE on Prowler App workers via kubeconfig auth-provider cmd-pathprowler-cloud prowler
- CVE-2026-50561Yuxi has a JWT Authentication Bypass Leading to Cross-Instance Administrator Token Reusexerrors Yuxi
- CVE-2026-67285Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.8.0joomshaper.com SP Page Builder extension for Joomla
- CVE-2026-57858Cal.com Cal.diy 6.2.0 Stored XSS via BookingPageTagManager Analytics Tracking IDCal.com Self-Hosted
- CVE-2026-67282Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.6.8fabrikar.com Fabrik extension for Joomla
- CVE-2025-41769Unauthenticated Buffer Overflow in PROFINET ServicePhoenix Contact AXC F · Phoenix Contact BPC +4
- CVE-2026-66659WordPress Tablesome Table plugin <= 1.2.9 - SQL Injection vulnerabilityEssekia Tablesome Table
- CVE-2026-18391WooCommerce Subscriptions < 9.1.0 - Unauthenticated RCE via PHP Object InjectionWooCommerce Subscriptions
- CVE-2026-18366Events Manager < 7.4.1 - Unauthenticated Privilege Escalation to AdministratorEvents Manager
- CVE-2026-16538TeraWallet - Wallet for WooCommerce < 1.6.10 - Subscriber+ Wallet Balance Inflation via Discounted Top-UpWallet for WooCommerce
- CVE-2026-16051WPMU DEV Dashboard < 5.0.1 - Remote Code Execution via Hub Install Actionwpmudev-updates
- CVE-2026-15039Gift Cards For WooCommerce Pro < 4.2.10 - Unauthenticated Arbitrary File Uploadgiftware
- CVE-2026-70398Multicloud-integrations: multicloud-integrations: gitopscluster.spec.argoserver.argonamespace writes spoke bearer tokens to…Red Hat Advanced Cluster Management for Kubernetes
- CVE-2026-72526Multicloud-integrations: multicloud-integrations: pull-model propagation allows hub tenant to target arbitrary spoke cluster via…Red Hat Advanced Cluster Management for Kubernetes
- CVE-2026-68431ksmbd: validate minimum PDU size for transform requestsLinux
- CVE-2025-59321CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 contains a default TPM PCR policy that fails to consider the system boot state.
- CVE-2025-59324CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly validate LUKS encryption and, if encryption is present, all…
- CVE-2025-59326CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to enforce IMA policy protections across temporary file systems, allowing for…
High 157
- CVE-2026-46382Meeting Room Booking System has server-side request forgery in import functionalitymeeting-room-booking-system mrbs-code
- CVE-2026-49473@cedar-policy/authorization-for-expressjs has an authorization bypass via query string manipulationcedar-policy authorization-for-expressjs · @cedar-policy/au…
- CVE-2026-47717FUXA's Unauthenticated Project Data Disclosure Exposes Server-Side Scripts and Device Configurationsfrangoteam FUXA · fuxa-server
- CVE-2026-71469Acm-search-v2-api-rhel9: search-v2-api: unbounded tokenreviews cache allows unauthenticated memory-exhaustion dosRed Hat Advanced Cluster Management for Kubernetes
- CVE-2026-71473Acm-search-v2-rhel9: search-v2-operator: addonfactory.getvaluesfromaddonannotation enables arbitrary helm-values override per spokeRed Hat Advanced Cluster Management for Kubernetes
- CVE-2026-10534IBM® Db2® is vulnerable to buffer overflow in the IXF IMPORT parserIBM Db2
- CVE-2026-17485IBM i is Affected By Denial of Service Vulnerability []IBM i
- CVE-2026-73500etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadlineetcd-io etcd · go.etcd.io/etcd/v3 +1
- CVE-2026-73499etcd: Watch API authorization bypass via open-ended range requestsetcd-io etcd · go.etcd.io/etcd/server/v3 +1
- CVE-2026-73498MCP Atlassian is a Model Context Protocol (MCP): Arbitrary file read via missing path validation in confluence_upload_attachmentsooperset mcp-atlassian · mcp-atlassian
- CVE-2026-73495blaze: Chunked-body trailer fields promoted into Request.headers in blaze-server (front-end header-sanitization bypass)http4s blaze · org.http4s:blaze-http_2.13 +2
- CVE-2026-73493http4s-blaze-server: Unbounded WebSocket message aggregationhttp4s blaze · org.http4s:http4s-blaze-server_2.13 +2
- CVE-2026-19003MongoDB BI Connector ODBC driver may write outside an allocated buffer when the setup dialog opens a data source with oversized path…MongoDB BI Connector ODBC Driver
- CVE-2026-13476IBM Informix Wire Listener Vulnerable to Unauthenticated Remote Code ExecutionIBM Informix Dynamic Server
- CVE-2026-13367IBM Informix Dynamic Server Privilege Escalation Vulnerability in oninit UtilityIBM Informix Dynamic Server
- CVE-2026-10543IBM® Db2® is vulnerable to privilege escalation with a specially crafted queryIBM Db2
- CVE-2026-19654Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash…Red Hat Enterprise Linux · Red Hat Update Infrastructure
- CVE-2026-13622Kubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to hostRed Hat Container Native Virtualization
- CVE-2026-13094IBM i Access Client Solutions (ACS) is Affected By Multiple VulnerabilitiesIBM i Access Client Solutions
- CVE-2026-13433IBM i Access Client Solutions (ACS) is Affected By Multiple VulnerabilitiesIBM i Access Client Solutions
- CVE-2026-64826rConfig < 8.2.13 Path Traversal File Read via FileDownloadControllerrConfig
- CVE-2026-13105IBM i Access Client Solutions (ACS) is Affected By Multiple VulnerabilitiesIBM i Access Client Solutions
- CVE-2026-16695IBM i Access Client Solutions (ACS) is Affected By Multiple VulnerabilitiesIBM i Access Client Solutions
- CVE-2026-19004MongoDB BI Connector ODBC Driver Memory-Safety Issue When Handling Stored Procedure Output ParametersMongoDB BI Connector ODBC Driver
- CVE-2026-18888MongoDB BI Connector ODBC driver may write outside an allocated buffer when retrieving large floating point values as character dataMongoDB BI Connector ODBC Driver
Show all 157 entriesShow fewer entries
- CVE-2026-65370ServiceTalk HTTP/1.x incorrectly handles malformed Transfer-Encoding which could result in request smuggling attacks.Apple servicetalk
- CVE-2026-19002Crafted database metadata may cause memory corruption in MongoDB BI Connector ODBC DriverMongoDB BI Connector ODBC Driver
- CVE-2026-73418NextAuth.js: getToken() throws an uncaught exception on malformed Bearer authorization headersnextauthjs next-auth · @auth core +2
- CVE-2026-14866IBM i Access Client Solutions (ACS) is Affected By Multiple VulnerabilitiesIBM i Access Client Solutions
- CVE-2026-16033Arbitrary file read+write on host via templates/ symlink in malicious imageCanonical LXD
- CVE-2026-67579Filter expression injection via forged keyset pagination cursor in Ashash-project ash · ash
- CVE-2026-12359Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessIBM Security Verify Access · IBM Verify Identity Access
- CVE-2026-11923Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessIBM Security Verify Access · IBM Verify Identity Access
- CVE-2026-12004Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessIBM Security Verify Access · IBM Verify Identity Access
- CVE-2026-13267Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessIBM Security Verify Access · IBM Verify Identity Access
- CVE-2026-12618Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessIBM Security Verify Access · IBM Verify Identity Access
- CVE-2026-73415jupyterlab: Image viewer in JupyterLab allows XSS when opening malicious image in new browser tabjupyterlab
- CVE-2026-12005Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessIBM Security Verify Access · IBM Verify Identity Access
- CVE-2026-13361IBM Informix Server Vulnerability in SQL Interface Handler Could Allow Remote Code ExecutionIBM Informix Dynamic Server
- CVE-2026-17642IBM i is Affected By Remote Code Execution Vulnerabilities [, ]IBM i
- CVE-2026-18099IBM i is Affected By Multiple Vulnerabilities in Navigator for iIBM i
- CVE-2026-73413Shescape: Quadratic-time denial of service in flag-protectionericcornelissen shescape · shescape
- CVE-2026-17111IBM i is Affected By Multiple Vulnerabilities in SQLIBM i
- CVE-2026-17082IBM i is Affected By Multiple Vulnerabilities in the Debug ServerIBM i
- CVE-2026-17445IBM i is Affected By Improper Validation Vulnerability in Line Printer Daemon []IBM i
- CVE-2026-17417IBM i is Affected By Remote Code Execution Vulnerabilities [, ]IBM i
- GHSA-JWJP-4649-V8JPSIPSorcery vulnerable to Denial of Service via out-of-bounds read in SCTP SACK chunk parsingSIPSorcery
- CVE-2026-46731Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass by Spoofing vulnerability.Dell Display and Peripheral Manager
- CVE-2026-63298LXD arbitrary lxc.conf directive injection via NVIDIA instance configurationCanonical LXD
- CVE-2026-59914Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass by Spoofing vulnerability.Dell Display and Peripheral Manager
- CVE-2026-59917Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vulnerability.Dell Display and Peripheral Manager
- CVE-2026-59916Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vulnerability.Dell Display and Peripheral Manager
- CVE-2026-63299Storage volume cross-project move and snapshot restore bypass project disk limitsCanonical LXD
- CVE-2026-73326CamaleonCMS Missing Authorization via Plugin Administration Endpointsowen2345 CamaleonCMS
- CVE-2026-72809SiYuan before v3.7.4 Authentication Bypass via Localhost Trustsiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-72807SiYuan before v3.7.4 SQL Injection via queryBlocks templatesiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-72801SiYuan before v3.7.4 Information Disclosure via Encryption Key Materialsiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-72786Craft CMS 5.0.0-RC1 before 5.10.8 Authentication Bypass via Password Resetcraftcms cms · craftcms/cms
- CVE-2026-73331CamaleonCMS 2.9.1 Authenticated SQL Injection via Post Slug Fieldowen2345 CamaleonCMS
- CVE-2026-15217Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabGitLab
- CVE-2026-15216Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabGitLab
- CVE-2026-16494Missing Authorization in GitLabGitLab
- CVE-2026-19228Authorization Bypass Through User-Controlled Key in GitLabGitLab
- CVE-2026-73406Budibase: Unauthenticated user information disclosure via public tenant user lookup endpointbudibase · @budibase/server
- CVE-2026-73330CamaleonCMS 2.9.1 Server-Side Template Injection via test_email Actionowen2345 CamaleonCMS
- CVE-2026-73303Budibase: Email Change IDOR via POST /api/v2/email allows full Account Takeover (accountId not validated against session)budibase · @budibase/server
- CVE-2026-18952Missing Input Validation in Threat Intel Feed Parser in OpenSearch Security Analytics PluginAWS Opensearch · Github Opensearch
- CVE-2026-19311Missing Authorization in Execute Monitor API in OpenSearch Alerting PluginAWS OpenSearch · Github OpenSearch
- CVE-2026-15423Incorrect Authorization in GitLabGitLab
- CVE-2026-16627Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabGitLab
- CVE-2026-69106Potential cache poisoning in JFrog Artifactoryjfrog artifactory
- CVE-2026-42018Anonymous user token generation exposure in JFrog Artifactoryjfrog artifactory
- CVE-2026-16907IBM i is Affected By Multiple Vulnerabilities in the Debug ServerIBM i
- CVE-2026-17248IBM i is Affected By Multiple Vulnerabilities in the Debug ServerIBM i
- CVE-2026-17271IBM i is Affected By Multiple Vulnerabilities in the Debug ServerIBM i
- CVE-2026-18669IBM i is Affected By A Privilege Escalation Vulnerability []IBM i
- CVE-2026-16863IBM i is Affected By Out-of-Bounds Read Vulnerability []IBM i
- CVE-2026-16906IBM i is Affected By Multiple Vulnerabilities in Domain Name SystemIBM i
- CVE-2026-16856IBM i is Affected By Multiple Vulnerabilities in Domain Name SystemIBM i
- CVE-2026-16931IBM i is Affected By A Denial of Service Vulnerability []IBM i
- CVE-2026-17110IBM i is Affected By Multiple Vulnerabilities in SQLIBM i
- CVE-2026-73298Microsoft Container Migration Solution Accelerator: Authenticated IDOR allowing read/write/delete processesmicrosoft Container-Migration-Solution-Accelerator
- CVE-2026-17418IBM i is Affected By Multiple Vulnerabilities in SQLIBM i
- CVE-2026-18235IBM i is Affected By Multiple Vulnerabilities in Navigator for iIBM i
- CVE-2026-18713IBM i is Affected By Multiple Vulnerabilities in Navigator for iIBM i
- CVE-2026-16904IBM i is Affected By improper privilege management in Navigator for iIBM i
- CVE-2026-44741Pimcore Admin Classic Bundle Vulnerable to SQL Injection in Translation Grid Date Filter via Unsanitized Property Parameterpimcore · pimcore/admin-ui-classic-bundle
- CVE-2026-49467TOTP enrollment hijack: password gate skipped due to unawaited promisesmp46 pingvin-share-x
- CVE-2026-18847IBM i is Affected By Multiple Vulnerabilities in Navigator for iIBM i
- CVE-2026-17095IBM i is Affected By Multiple Vulnerabilities in Navigator for iIBM i
- CVE-2026-18098IBM i is Affected By XML injection flaw in Navigator for iIBM i
- CVE-2026-18683IBM i is Affected By privilege escalation in Navigator for iIBM i
- CVE-2026-48554Nagios Core / XI Authenticated RCE via Unfiltered NOTIFICATION-Family Macro SubstitutionNagios Enterprises, LLC. Nagios Core · Nagios Enterprises,…
- CVE-2026-48553Nagios Core / XI Authenticated RCE via Custom-Variable Macro InjectionNagios Enterprises, LLC. Nagios Core · Nagios Enterprises,…
- CVE-2026-18499IBM WebSphere Application Server Liberty is affected by a privilege escalationIBM WebSphere Application Server - Liberty
- CVE-2026-73293Semaphore UI: Manager-to-owner privilege escalation via custom-role slug collisionsemaphoreui semaphore · github.com/semaphoreui/semaphore
- CVE-2026-58076Apache Airflow: Unguarded import_string() of airflow_exc_ser / base_exc_ser exception nodes in BaseSerialization.deserialize enables…Apache Software Foundation apache-airflow-core · airflow +1
- CVE-2026-15803In Eclipse RDF4J, several XML parser entry points do not fully restrict XML External Entity (XXE) processing when parsing untrusted…Eclipse Foundation Eclipse RDF4J
- CVE-2026-73325Fujitsu OneCompression < 1.2.1 Arbitrary Code Execution via torch.load DeserializationFujitsu Research OneCompression
- CVE-2026-73292Semaphore UI: CSRF vulnerability on password change endpoint - No CSRF token or password confirmationsemaphoreui semaphore · github.com/semaphoreui/semaphore
- CVE-2026-67260Apache Airflow: DAG-author remote code execution on the Scheduler via awaiting_input next_kwargs deserializationApache Software Foundation apache-airflow-core · airflow +1
- CVE-2026-67587Apache Airflow: DAG-author remote code execution on the Scheduler via a Serde `Callback` deserialization gadgetApache Software Foundation apache-airflow-core · airflow +1
- CVE-2026-68968Apache Airflow: Authorization bypass in the Backfill API through conflicting interpretations of the backfill idApache Software Foundation apache-airflow · Apache Softw… +2
- CVE-2026-65937WhatsUp Gold versions prior to 26.0.2 contain multiple stored cross-site scripting (XSS) vulnerabilities across the web UIProgress Software WhatsUp Gold
- CVE-2026-69105Potential package cache integrity issue in JFrog Artifactoryjfrog artifactory
- CVE-2026-68759Integration credential holders may impersonate users in JFrog Accessjfrog artifactory
- CVE-2026-66375Low-privilege users may remove protected Artifactory metadatajfrog artifactory
- CVE-2026-68757Potential improper SAML signature verification in JFrog Artifactoryjfrog artifactory
- CVE-2026-68752Project Resource Managers may escalate privileges in JFrog Artifactoryjfrog artifactory
- CVE-2026-14478Incorrect Permission Assignment in Autodesk Installer Named PipesAutodesk Installer
- CVE-2026-73291Seerr: Path traversal to RCE via /avatarproxy image cache filename from upstream ETagseerr-team seerr
- CVE-2026-73289RustFS: ForAllValues/ForAnyValue negated string conditions are transposed, inverting IAM and bucket-policy decisionsrustfs
- CVE-2026-73286RustF: Request headers can populate server-derived IAM condition keys, letting a caller satisfy identity-based policy conditionsrustfs
- CVE-2026-73285RustFS: OPA policy plugin omits ExistingObjectTag conditions, allowing tag-based authorization policies to treat tagged objects as untaggedrustfs
- CVE-2026-73284RustFS: AddServiceAccount Handler Allows Creation of Root-Parent Service Accountsrustfs
- CVE-2026-73431Reusable Account Activation and Recovery Tokens Allow Repeated Account Takeover in vulnerability-lookupvulnerability-lookup
- CVE-2026-73264Prowler: Server-Side Request Forgery (SSRF) in Lighthouse Providerprowler-cloud prowler
- CVE-2026-47231Admidio has IDOR in `documents-files.php` `mode=move_save` that lets any folder-uploader exfiltrate files from private foldersadmidio · admidio/admidio
- CVE-2026-53996NetBSD hdaudio(4) Driver Privilege Bypass Use-After-Free via HDAUDIO_FGRP_SETCONFIG ioctlThe NetBSD Foundation NetBSD
- CVE-2026-70468A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5…Fortinet FortiManager
- CVE-2026-26035An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6…Fortinet FortiWeb
- CVE-2026-70465A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FFortinet FortiClientWindows
- CVE-2026-11325cloudflare/pages-action is deprecated — migration required by September 18th, 2026https://github.com/cloudflare/pages-action
- CVE-2026-19566Net::CIDR::Set versions before 0.23 for Perl allow memory exhaustion and malformed set ranges via unbounded IPv6 prefix lengthsRRWO Net::CIDR::Set
- CVE-2025-41770Unauthenticated Denial of ServicePhoenix Contact AXC F · Phoenix Contact BPC +5
- CVE-2026-19426FitSoft｜POS Sytstem - Missing AuthenticationFitSoft POS System
- CVE-2026-18789Ezoic < 2.23.1 - Unauthenticated Database Export via Content Export REST RoutesEzoic
- CVE-2026-18474WP Directory Kit < 1.5.6 - Unauthenticated SQL Injection via search_location and search_categoryWP Directory Kit
- CVE-2026-18230WP Directory Kit < 1.5.6 - Subscriber+ SQL Injection via section ParameterWP Directory Kit
- CVE-2026-18057Events Manager < 7.4.1 - Subscriber+ Booking Consent Record Tampering via SQL InjectionEvents Manager
- CVE-2026-18049WP Photo Album Plus < 9.2.07.002 - Unauthenticated Option Disclosure via gettogoWP Photo Album Plus
- CVE-2026-18048WP Photo Album Plus < 9.2.07.002 - Unauthenticated Arbitrary ZIP File Deletion via delmyzip Path TraversalWP Photo Album Plus
- CVE-2026-16977Form Maker by 10Web < 1.15.45 - Subscriber+ SQL Injection via display_nameForm Maker by 10Web
- CVE-2026-16294Blubrry PowerPress < 11.17.1 - Contributor+ Server-Side Request Forgery via Podcast Episode Chapters URLPowerPress Podcasting plugin by Blubrry
- CVE-2026-16253Total Upkeep < 1.17.3 - Unauthenticated Sensitive Data Disclosure and Forced Site Restore via Predictable cron_secretTotal Upkeep
- CVE-2026-14925Import WP < 2.14.23 - Unauthenticated Sensitive Information Exposure via Export File DownloadImport WP
- CVE-2026-13613KiviCare < 4.5.2 - Doctor/Receptionist+ SQL Injection via settings/listing REST EndpointKiviCare
- CVE-2026-13171Eventin < 4.1.20 - Unauthenticated Account Creation via Waiting List EndpointEventin
- CVE-2026-19594Path Traversal and HTTP Parameter Pollution in Snowflake Python API (snowflake.core) Allow Confused-Deputy Privilege EscalationSnowflake Python APIs
- CVE-2026-12234TOCTOU double-fetch in `zsock_sendmsg`/`recvmsg` userspace verifiers allows kernel-heap out-of-bounds writezephyrproject zephyr
- CVE-2026-64954Velociraptor collect_client() Permissions BypassRapid7 Velociraptor
- CVE-2026-18961Social Login, Passkeys, Magic Link & Email OTP – Passwordless Login by VentraConnect <= 1.4.3 - Unauthenticated Authentication Bypass via…fahdaslam Social Login, Passkeys, Magic Link & Email OTP –…
- CVE-2026-73122Multicloud-operators-channel: multicloud-operators-channel: auto-generated role grants every managed-cluster agent secrets:get,list,watch…Red Hat Advanced Cluster Management for Kubernetes
- CVE-2026-66878Multicloud-operators-subscription: multicloud-operators-subscription: fetchchannelreferences honours channel.spec.secretref.namespace…Red Hat Advanced Cluster Management for Kubernetes
- CVE-2026-68447drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO sizeLinux
- CVE-2026-6484Lack of verified boot to certain FV may cause arbitrary code executionInsyde Software InsydeH2O
- CVE-2026-68446drm/vmwgfx: Validate vmw_surface_metadata::array_sizeLinux
- CVE-2026-68445drm/vc4: Prevent shader BO mappings from becoming writableLinux
- CVE-2026-68442btrfs: don't propagate EXTENT_FLAG_LOGGING to split extent mapsLinux
- CVE-2026-68440net: txgbe: fix heap overflow when reading module EEPROMLinux
- CVE-2026-68433libceph: bound get_version reply decode to front lenLinux
- CVE-2026-68432vxlan: require CAP_NET_ADMIN in the device netns for changelinkLinux
- CVE-2025-59319CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to certify the integrity of the intended boot partition and selects the first…
- CVE-2025-59322CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly handle decryption errors and allows encrypted volumes to be…
- CVE-2025-59323CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to validate the integrity of the DataStore, a non-partitioned filesystem…
- CVE-2025-59325CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to encrypt the initramfs contents, allowing for the offline recovery of…
- CVE-2025-59327In CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4, bootxsa.efi fails to properly validate LUKS encryption and, if encryption is…
Medium, low and unrated 216
- CVE-2026-48791Sigstore Java has a vulnerability with bundle verification of integratedTimesigstore-java · dev.sigstore:sigstore-java
- CVE-2026-46688Meeting Room Booking System has an unauthenticated open redirectmeeting-room-booking-system mrbs-code
- CVE-2026-50544NortheBridge/luminalshine has Incorrect Permission Assignment for Critical Resource and Creation of Temporary File in Directory with…NortheBridge luminalshine
- CVE-2026-17431PDF::WebKit versions through 1.2 for Perl allow OS command injection via a 2-arg open() of the output path in to_pdf and of stylesheet…MITHALDU PDF::WebKit
- CVE-2026-15141Referer Validation Bypass in TL-WR820N Web Management InterfaceTP-Link Systems TL-WR820N
- CVE-2026-71194In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queries and NOTIFY requests.OpenStack Designate
- CVE-2026-47718FUXA provides guest and invalid-token access to protected read APIs in secure modefrangoteam FUXA · fuxa-server
- CVE-2026-71846Insights-client: insights-client: clusterrole grants cluster-wide secrets get/list/watch beyond least privilegeRed Hat Advanced Cluster Management for Kubernetes
- CVE-2026-7366IBM DataPower Gateway affected by HTTP request header leakage in XML-FirewallIBM DataPower Gateway
- CVE-2026-18727Open-iscsi: open-iscsi: integer underflow in iscsiuio dhcpv6 parsingRed Hat Enterprise Linux
- CVE-2026-18726Open-iscsi: open-iscsi: denial of service in iscsiuio router advertisement parsingRed Hat Enterprise Linux
- CVE-2026-18744CVE-2026-18744CERT/CC VINCE
- CVE-2026-18750CVE-2026-18750CERT/CC VINCE
- CVE-2026-73492Loofah `allowed_uri?` does not detect `javascript:` URIs split by numeric character references without semicolonsflavorjones loofah · loofah
- CVE-2026-73491Loofah `allowed_uri?` does not detect `javascript:` URIs split by named whitespace character referencesflavorjones loofah · loofah
- CVE-2026-73490Loofah: SVG `href` attribute bypasses local-reference restrictionflavorjones loofah · loofah
- CVE-2026-73430Russh: Pre-auth remote panic via all-zero Curve25519 peer public value (encode_mpint OOB)Eugeny russh · russh
- CVE-2026-73429Russh: client wrong-length X25519 `clone_from_slice` panic (pre-auth DoS)Eugeny russh · russh
- CVE-2026-73427Trix: XSS via JSON deserialization bypass in drag-and-drop (Level0InputController)basecamp trix · trix +1
- CVE-2026-16480IBM® Db2® is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass…IBM Db2
- CVE-2026-18097IBM® Db2® federated server could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in…IBM Db2
- CVE-2026-18096IBM® Db2® could allow a local attacker to cause a denial of service due to a memory leakIBM Db2
- CVE-2026-19130Provider-credential-controller: provider-credential-controller: cross-namespace credential propagation via attacker-controlled copiedfrom labels bypasses authorizationRed Hat multicluster engine for Kubernetes
- CVE-2026-73425@astrojs/netlify generates an overly-broad Netlify Image CDN allowlist because remotePatterns.pathname metacharacters are not escapedwithastro astro · @astrojs/netlify
- CVE-2026-73423Astro: composable `astro/hono` pipeline bypasses `security.checkOrigin` when `middleware()` is absent or misorderedwithastro astro · astro
Show all 216 entriesShow fewer entries
- CVE-2026-73422Astro: Reflected XSS via unescaped View Transition animation propertieswithastro astro · astro
- CVE-2026-73419NextAuth.js: OAuth state, nonce, and PKCE check cookies are not bound to the provider that created themnextauthjs next-auth · @auth core +2
- CVE-2026-19503Insufficient OIDC endpoint validation could invoke unintended local protocol handlersMongoDB Atlas SQL ODBC Driver · MongoDB Schema Builder CLI
- CVE-2026-19502Insufficient redaction of sensitive configuration values in diagnostic output of MongoDB SQL Schema Builder CLIMongoDB Schema Builder CLI
- CVE-2026-11932Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessIBM Security Verify Access · IBM Verify Identity Access
- CVE-2026-17616Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessIBM Security Verify Access · IBM Verify Identity Access
- CVE-2026-11937Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessIBM Security Verify Access · IBM Verify Identity Access
- CVE-2026-18150IBM i is Affected By Multiple Vulnerabilities in Navigator for iIBM i
- CVE-2026-18148IBM i is Affected By Multiple Vulnerabilities in Navigator for iIBM i
- CVE-2026-73412Shescape: Path disclosure on Unix with Zshericcornelissen shescape · shescape
- CVE-2026-19643Out-of-bounds read in the Base64 decoder in Amazon aws-sdk-cpp on signed-char platformsaws-sdk-cpp
- CVE-2026-19642Out-of-bounds write in the Base64 decoder in Amazon aws-sdk-cppaws-sdk-cpp
- CVE-2026-73411Shescape: Home-directory disclosure in assignment context on Unix with Dashericcornelissen shescape · shescape
- CVE-2026-63295Project restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated`Canonical LXD
- CVE-2026-49466Draft List - Contributor Stored Cross-Site Scripting via Draft Title in Custom Drafts Template Attributesdartiss draft-list
- CVE-2026-73409Budibase: Server Filesystem Existence/Read Oracle via Builder-Controlled MongoDB tlsCertificateKeyFilebudibase · @budibase/server
- CVE-2026-19657ScadaLTS Unauthenticated Reflected XSSSCADA-LTS ScadaLTS
- CVE-2026-72808SiYuan before v3.7.4 Information Disclosure via getFileAnnotationsiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-72806SiYuan before v3.7.4 Authentication Bypass via Attribute Viewsiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-72805SiYuan before v3.7.4 Information Disclosure via Block Endpointssiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-72803SiYuan before v3.7.4 Information Disclosure via getBlockAttrssiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-72802SiYuan before v3.7.4 Information Disclosure via resolveAssetPathsiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-72800SiYuan before v3.7.4 Information Disclosure via Unfiltered APIsiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-72799SiYuan before v3.7.4 Information Disclosure via Path Resolutionsiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-72797SiYuan before v3.7.4 Information Disclosure via getEncryptedNotebookStatussiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-72796SiYuan before v3.7.4 Access Control Bypass via Static Routessiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-72792SiYuan before v3.7.4 Information Disclosure via Tag APIsiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-72791SiYuan v3.7.4-alpha.1 Information Disclosure via getAttributeViewFieldViewssiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-72790SiYuan before v3.7.4 Information Disclosure via getNotebookInfosiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-72788SiYuan before v3.7.4 Information Disclosure via UILayout Filtersiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-72787Craft CMS 5.0.0-RC1 before 5.10.8 Stored XSS via Draft Namecraftcms cms · craftcms/cms
- CVE-2025-9486Incorrect Privilege Assignment in GitLabGitLab
- CVE-2026-73433Gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux fujifilm strd parsing leading to out-of-bounds read/writeGStreamer gst-plugins-good · Red Hat Enterprise Linux
- CVE-2026-73434Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsingGStreamer gst-plugins-good · Red Hat Enterprise Linux
- CVE-2026-4879Missing Authorization in GitLabGitLab
- CVE-2026-6821Missing Authorization in GitLabGitLab
- CVE-2026-18433Incorrect Authorization in GitLabGitLab
- CVE-2026-73308Budibase: OAuth2 Token Disclosure via Automation Test Results Broadcast to Other Buildersbudibase · @budibase/server
- CVE-2026-73307Budibase: SSRF via bare fetch() in uploadUrl during AI table generationbudibase · @budibase/server
- CVE-2026-73306Budibase: Account Enumeration via Login Lockout Response Differentialbudibase · @budibase/server
- CVE-2026-18679Kong Mesh: kuma-dp connects to the control plane without verifying the TLS certificate when no CA is configuredKong Mesh · github.com/kumahq/kuma +1
- CVE-2026-18678Kong Mesh: kumactl connects to the control plane without verifying the TLS certificate when no CA is configuredKong Mesh · github.com/kumahq/kuma +1
- CVE-2026-18677Kong Mesh: a dataplane token without a workload binding can claim any workload's SPIFFE identityKong Mesh
- CVE-2026-18676Kong Mesh: default control plane config leaks the admin token cross-origin via a CORS wildcard and localhost adminKong Mesh · github.com/kumahq/kuma +1
- CVE-2026-18675Kong Mesh: control plane denial of service via a malformed dataplane token with a non-string JWT kidKong Mesh
- CVE-2026-18673Kong Mesh: the kuma-dp readiness service exposes the Envoy admin API without authenticationKong Mesh
- CVE-2026-73301Budibase: Missing RBAC on GET /api/global/groups allows BASIC users to enumerate all tenant groups and role mappingsbudibase · @budibase/server
- CVE-2026-7427Allocation of Resources Without Limits or Throttling in GitLabGitLab
- CVE-2026-8667Incorrect Authorization in GitLabGitLab
- CVE-2026-18244Missing Authorization in GitLabGitLab
- CVE-2026-17109IBM i is Affected By Multiple Vulnerabilities in SQLIBM i
- CVE-2026-17420IBM i is Affected By Multiple Vulnerabilities in SQLIBM i
- CVE-2026-17222IBM i is Affected By Multiple Vulnerabilities in SQLIBM i
- CVE-2026-17419IBM i is Affected By Multiple Vulnerabilities in SQLIBM i
- CVE-2026-17266IBM i is Affected By Multiple Vulnerabilities in Navigator for iIBM i
- CVE-2026-17268IBM i is Affected By Multiple Vulnerabilities in Navigator for iIBM i
- CVE-2026-18250IBM i is Affected By Multiple Vulnerabilities in Navigator for iIBM i
- CVE-2026-16694IBM i is Affected By Stored Cross-site Scripting for iIBM i
- CVE-2026-17094IBM i is Affected By Path Traversal Vulnerability in Navigator for iIBM i
- CVE-2026-18246IBM i is Affected By security restrictions bypass in Navigator for iIBM i
- CVE-2026-18106IBM i is Affected By Multiple Vulnerabilities in Navigator for iIBM i
- CVE-2026-18144IBM i is Affected By Multiple Vulnerabilities in Navigator for iIBM i
- CVE-2026-73237Apache Allura: XSS in markdown pipelineApache Software Foundation Apache Allura
- CVE-2026-73238Apache Allura: XSS in code displayApache Software Foundation Apache Allura
- CVE-2026-73239Apache Allura: Missing permission checks IDORApache Software Foundation Apache Allura
- CVE-2026-48552Nagios Core / XI DOM-based XSS via jsonquery.jsNagios Enterprises, LLC. Nagios Core · Nagios Enterprises,…
- CVE-2026-48551Nagios Core / XI CSRF Protection Bypass via Double-Submit CookieNagios Enterprises, LLC. Nagios Core · Nagios Enterprises,…
- CVE-2026-73297Microsoft UFO: IPv6 transition address bypass of SSRF guard in URL validationmicrosoft UFO
- CVE-2026-48550Nagios Core / XI cmd.cgi Reflected XSS via NagFormId ParameterNagios Enterprises, LLC. Nagios Core · Nagios Enterprises,…
- CVE-2026-73295Material for MkDocs: DOM XSS in search suggestions via query parametersquidfunk mkdocs-material · mkdocs-material
- CVE-2026-69107Potential unauthorized artifact access in JFrog Artifactoryjfrog artifactory
- CVE-2026-19548Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processingRed Hat Hardened Images · Red Hat Enterprise Linux +2
- CVE-2026-59244Apache Airflow: Secrets masker: `var.json` Variable values not masked in the Rendered Templates UIApache Software Foundation apache-airflow · Apache Softw… +2
- CVE-2026-59242Apache Airflow: Arbitrary airflow. class instantiation on the API server via the XCom deserialize endpointApache Software Foundation apache-airflow · Apache Softw… +2
- CVE-2026-54183Apache Airflow: Airflow Variables were not masked in the UI for authenticated usersApache Software Foundation apache-airflow · Apache Softw… +2
- CVE-2026-65017Apache Airflow: Config API: team-scoped Celery broker secret disclosed to a Viewer (multi-team masking bypass)Apache Software Foundation apache-airflow-core · airflow +1
- CVE-2026-68969Apache Airflow: Bulk Variable and Connection endpoints record secret values in the audit log in cleartextApache Software Foundation apache-airflow · Apache Softw… +2
- CVE-2026-68970Apache Airflow: Values of a list-shaped Variable are not masked in task logs and the Rendered Templates UIApache Software Foundation apache-airflow · Apache Softw… +2
- CVE-2026-68971Apache Airflow: Cross-team authorization bypass in the asset materialization and dag-run result endpointsApache Software Foundation apache-airflow · Apache Softw… +2
- CVE-2026-65940WhatsUp Gold versions prior to 26.0.2 excessive file system permissions allows a privileged attacker to write arbitrary files to a…Progress Software WhatsUp Gold
- CVE-2026-68076Apache Airflow: Connections test API: team-scope guard bypass resolves another team's environment ConnectionApache Software Foundation apache-airflow · Apache Softw… +2
- CVE-2026-65939WhatsUp Gold versions prior to 26.0.2 contain an arbitrary file write vulnerability in the LogToFile action handler.Progress Software WhatsUp Gold
- CVE-2026-65938WhatsUp Gold versions prior to 26.0.2 contain an improper authorization vulnerability in the Scheduled Reports API.Progress Software WhatsUp Gold
- CVE-2026-70547Potential unauthorized metadata exposure in JFrog Artifactoryjfrog artifactory
- CVE-2026-66016Rendered Artifactory Helm manifests may contain generated TLS private keysjfrog artifactory
- CVE-2026-65926Private Release Bundle versions may be disclosed under specific configurationsjfrog artifactory
- CVE-2026-66384Authenticated users may write data outside the intended Docker cache pathjfrog artifactory
- CVE-2026-68758Authenticated users may access restricted Artifactory support informationjfrog artifactory
- CVE-2026-68756Potential insecure deserialization in JFrog Artifactoryjfrog artifactory
- CVE-2026-66382Authenticated users may write files outside the intended Artifactory work directoryjfrog artifactory
- CVE-2026-66381Repository readers may access content outside configured upstream pathsjfrog artifactory
- CVE-2026-68760Potential remember-me authentication bypass in JFrog Artifactoryjfrog artifactory
- CVE-2026-66379Authenticated users may view private Puppet module metadatajfrog artifactory
- CVE-2026-66378Authenticated users may access private NuGet metadatajfrog artifactory
- CVE-2026-66377Anonymous users may access restricted Artifactory repository informationjfrog artifactory
- CVE-2026-68755Bundle writers may alter trusted release information in JFrog Artifactoryjfrog artifactory
- CVE-2026-66380Authenticated users may access private OCI referrer metadatajfrog artifactory
- CVE-2026-68754Publishers without delete permission can overwrite docker layer informationjfrog artifactory
- CVE-2026-68753Anonymous users may access restricted Artifactory content under specific configurationsjfrog artifactory
- CVE-2026-66376Deleted users may temporarily retain access to JFrog Artifactoryjfrog artifactory
- CVE-2026-14479Denial of Service in Autodesk Installer IPC ChannelAutodesk Installer
- CVE-2026-18171Docker Sandboxes read-only runtime mount writable through its shared-export aliasDocker Sandboxes
- CVE-2026-73290RustFS: Anonymous ListObjectVersions bypasses RestrictPublicBuckets through the ListBucket fallbackrustfs
- CVE-2026-73288RustFS: Object Lock (WORM) protections are treated as absent when bucket metadata cannot be read, allowing retained objects to be deletedrustfs
- CVE-2026-73287RustFS: FTPS MKD bypasses IAM CreateBucket authorizationrustfs
- CVE-2026-73432Stored Server-Side Request Forgery in Remote-Instance Synchronization Allows Access to Internal Services in vulnerability-lookupvulnerability-lookup
- CVE-2026-73265RustFS: Version-specific object reads authorize the non-version actionrustfs
- CVE-2026-73405Authorization Bypass in SSE Pub/Sub Allows Unconfirmed Accounts to Access Stream Events in vulnerability-lookupvulnerability-lookup
- CVE-2026-73262Prowler: Stored XSS in HTML reports through unescaped cloud resource tagsprowler-cloud prowler · prowler +1
- CVE-2026-49349regclient may leak authentication credentials to external blob storesregclient · github.com/regclient/regclient
- CVE-2026-73374Stored Cross-Site Scripting (XSS) via Unescaped CNA Reference Tags in vulnerability-lookupvulnerability-lookup
- CVE-2026-49262Aimeos Pagible CMS vulnerable to Server Side Request Forgery (SSRF) via DNS rebinding in admin proxyaimeos pagible · aimeos/pagible
- CVE-2026-67287Joomla Extension - joomshaper.com - Unauthenticated comment creation in SP Page Builder < 6.8.0joomshaper.com SP Page Builder extension for Joomla
- CVE-2026-67286Joomla Extension - joomshaper.com - Unauthenticated arbitrary directory creation and file write in SP Page Builder < 6.8.0joomshaper.com SP Page Builder extension for Joomla
- CVE-2026-47234Admidio writes session IDs and auto-login cookie values to application logsadmidio · admidio/admidio
- CVE-2026-47233Admidio: Any logged-in user can delete inventory fields via `mode=field_delete` — incomplete fix of #2024admidio · admidio/admidio
- CVE-2026-16999XXE in Ministry of Justice's UYAP Document EditorMinistry of Justice UYAP Document Editor
- CVE-2026-47232Admidio PKCS#12 private key export action lacks CSRF protectionadmidio · admidio/admidio
- CVE-2026-47230Admidio: IDOR in documents-files.php allows cross-folder file rename and description changes by unauthorized uploadersadmidio · admidio/admidio
- CVE-2026-47229Admidio: CSRF in SSO client `enable` action toggles SAML/OIDC clients without token validationadmidio · admidio/admidio
- CVE-2026-47228Admidio's CSRF in registration `send_login` mode resets arbitrary user passwordsadmidio · admidio/admidio
- CVE-2026-47227Admidio module-administrator can delete or reorder categories owned by other modules via dead authorization check in…admidio · admidio/admidio
- CVE-2026-47226Admidio: Authorization bypass in file_delete enables cross-folder file removal by authenticated users without delete privilegesadmidio · admidio/admidio
- CVE-2026-70466A incomplete list of disallowed inputs vulnerability [CWE-184] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0…Fortinet FortiWeb
- CVE-2026-71407A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated…Fortinet FortiOS
- CVE-2026-70467A server-side request forgery (ssrf) vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0 through 7.4.2, FortiSIEM 7.3.0 through…Fortinet FortiSIEM
- CVE-2026-71408A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions…Fortinet FortiOS
- CVE-2026-18044Estatik Real Estate Plugin < 4.3.4 - Unauthenticated Arbitrary-Recipient Mail Relay via Signed-Value MismatchEstatik Real Estate Plugin
- CVE-2026-17008Quick PayPal Payments <= 5.7.50 - Unauthenticated Payment Bypass via PayPal IPNQuick Paypal Payments
- CVE-2026-16990Payment Button for PayPal <= 1.2.3.44 - Unauthenticated Payment Price ManipulationPayment Button for PayPal
- CVE-2026-16747Kirki < 6.2.1 - Unauthenticated Arbitrary Shortcode Execution via Form Email ActionsKirki
- CVE-2026-16621Payment Gateway for PayPal on WooCommerce < 9.2.1 - Unauthenticated Payment Bypass via PayPal Advanced Return HandlerPayment Gateway for PayPal on WooCommerce
- CVE-2026-15213Welcart e-Commerce < 2.11.33 - Unauthenticated Payment Bypass via Forged Settlement CallbackWelcart e-Commerce
- CVE-2026-15045Wallet System for WooCommerce < 2.7.10 - Customer+ Checkout Price Manipulation via Unvalidated Wallet AmountWallet System for WooCommerce
- CVE-2026-70560Ultimate POS Stored XSS via First Name Field in Leave NotificationsUltimate Fosters Ultimate POS
- CVE-2026-68868Apache Airflow Google provider: google Secret Manager backend: team scope is never applied, exposing every team's Connections and VariablesApache Software Foundation apache-airflow-providers-google…
- CVE-2026-67284Joomla Extension - tabaoca.org - Improper ACL checks allow file operations in Cotton Cloud < 2.0.2tabaoca.org Cotton Cloud extension for Joomla
- CVE-2026-18652Velociraptor STACK Type Download Path Bypasses Denied Prefix CheckRapid7 Velociraptor
- CVE-2026-64951Velociraptor DoS triggered by Divide by Zero panicRapid7 Velociraptor
- CVE-2026-64952Velociraptor Hunt Deletion With Insufficient Permission CheckRapid7 Velociraptor
- CVE-2026-64955Velociraptor CSV Formula Injection in Export PipelineRapid7 Velociraptor
- CVE-2026-18663389-ds-base: 389-ds-base: pre-authentication double-free in get_ldapmessage_controls_ext() via critical session tracking controlRed Hat Directory Server · Red Hat Enterprise Linux
- CVE-2026-67283Joomla Extension - tabaoca.org - Improper ACL implementation allows allow file operations in Cotton Cloud < 2.0.2tabaoca.org Cotton Cloud extension for Joomla
- CVE-2025-41771SQL injectionPhoenix Contact AXC F · Phoenix Contact BPC +5
- CVE-2026-19217Royal Elementor Addons < 1.7.1065 - Contributor+ Stored XSS via Icon Box WidgetRoyal Addons for Elementor
- CVE-2026-19073Order Sync with Zendesk for WooCommerce < 2.2.3 - Unauthenticated Customer Order Data DisclosureOrder Sync with Zendesk for WooCommerce
- CVE-2026-19052ProSolution WP Client < 2.0.9 - Subscriber+ proSol_ajaxTablesync and proSol_ajaxClearlog CallsProSolution WP Client
- CVE-2026-19050ProSolution WP Client < 2.0.9 - Subscriber+ SSRF via proSol_url_validateProSolution WP Client
- CVE-2026-18962WP Photo Album Plus < 9.2.09.002 - Subscriber+ Cross-Album File Upload via Missing AuthorizationWP Photo Album Plus
- CVE-2026-18943WPC Admin Columns < 2.3.4 - Subscriber+ Arbitrary User/Post/Term Meta DisclosureWPC Admin Columns
- CVE-2026-18046Cookie Consent < 0.0.10 - Subscriber+ MaxMind License Key UpdateCookie Consent
- CVE-2026-18035User Access Manager < 2.3.15 - Unauthenticated Restricted Content Disclosure via REST APIUser Access Manager
- CVE-2026-17013WP Photo Album Plus < 9.2.07.002 - Reflected XSS via lbstartWP Photo Album Plus
- CVE-2026-16737WP Travel Engine < 6.8.5 - Unauthenticated Booking Details Disclosure and Modification via wte_add_trip_to_cartWP Travel Engine
- CVE-2026-16066Welcart e-Commerce < 2.11.34 - Author+ Stored XSS via Product NameWelcart e-Commerce
- CVE-2026-15388Cookie Consent < 0.0.10 - Subscriber+ Consent Settings Update and Consent Log DisclosureCookie Consent
- CVE-2026-15249Patterns Kit <= 1.0.3 - Contributor+ Stored XSS via YouTube Popup LinkPatterns Kit
- CVE-2026-14859WP Crowdfunding < 2.2.1 - Subscriber+ Campaign Creation via Missing AuthorizationWP Crowdfunding
- CVE-2026-14858WP Crowdfunding < 2.2.1 - Subscriber+ Order Data Disclosure via IDORWP Crowdfunding
- CVE-2026-14857WP Crowdfunding < 2.2.1 - Subscriber+ Campaign Update Modification via IDORWP Crowdfunding
- CVE-2026-13612KiviCare < 4.5.2 - Patient+ Cross-Patient Bill, Invoice and Appointment Disclosure via IDORKiviCare
- CVE-2026-13177Eventin < 4.1.20 - Contributor+ Order Information Disclosure via IDOREventin
- CVE-2026-13168Eventin < 4.1.20 - Contributor+ Customer PII Disclosure via REST APIEventin
- CVE-2026-12976LearnPress < 4.4.4 - Subscriber+ Sensitive Information Exposure via AI AssistantLearnPress
- CVE-2026-12235Out-of-bounds write in Xtensa llext PLT relocation from malformed ELF (CWE-787)zephyrproject zephyr
- CVE-2026-12233Uninitialized mutex in TLS trusted-credential backend causes kernel NULL-deref DoS under contentionzephyrproject zephyr
- CVE-2026-12232Out-of-bounds read via unvalidated stream_id in Intel ALH DAI get_propertieszephyrproject zephyr
- CVE-2025-15687Open5GS SMF Diameter Gx Credit-Control-Answer smf_gx_cca_cb denial of serviceOpen5GS
- CVE-2025-15686Open5GS HSS Service fd_msg_sess_get denial of serviceOpen5GS
- CVE-2026-19588Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers.Samsung Open Source rlottie
- CVE-2026-9318tablib versions prior to 3.10.0 Stored XSS via HTML Export Dataset TitleJazzband tablib · tablib
- CVE-2025-15685Open5GS freeDiameter memory corruptionOpen5GS
- CVE-2026-19587Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation.Samsung Open Source rlottie
- CVE-2025-15684Open5GS CER init.c diam_log_func assertionOpen5GS
- CVE-2026-64927Multicloud-operators-channel: multicloud-operators-channel: cross-namespace secret and configmap mutation via spec.secretref.namespace…Red Hat Advanced Cluster Management for Kubernetes
- CVE-2024-14044Open5GS Diameter Rx pcrf-rx-path.c pcrf_rx_aar_cb buffer overflowOpen5GS
- CVE-2026-68450btrfs: free mapping node on duplicate reloc root insertLinux
- CVE-2026-68449ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanningLinux
- CVE-2026-68448ovl: check access to copy_file_range source with src mounter credsLinux
- CVE-2026-68444firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()Linux
- CVE-2026-68443hwmon: (gigabyte_waterforce) Stop device IO before calling hid_hw_stopLinux
- CVE-2026-68441net/sched: Handle TC_ACT_REDIRECT from qdisc filter chainsLinux
- CVE-2026-68439wifi: mt76: mt7925: fix possible NULL-pointer deref in mt7925_mcu_bss_he_tlv()Linux
- CVE-2026-68438smp: Make CSD lock acquisition atomic for debug modeLinux
- CVE-2026-68437drm/imagination: Fit paired fragment job in the correct CCCBLinux
- CVE-2026-68436drm/amd/display: use kvzalloc to allocate struct dcLinux
- CVE-2026-68435LoongArch: Fix address space mismatch in kexec command line lookupLinux
- CVE-2026-68434serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platformsLinux
- CVE-2026-68430drm/amdgpu/gfx8: drop unecessary BUG_ON()Linux
- CVE-2026-68429drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe()Linux
- CVE-2025-59320CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 stores TPM2.0 secrets in a serialized format within unused disk sectors.