CVEs published August 19, 2026
674 CVEs were published on August 19, 2026: 110 critical, 287 high. 4 are now in CISA KEV.
- Published
- 674
- Critical
- 110
- High
- 287
- Medium
- 247
- Low
- 30
- Unrated
- 0
- Now in CISA KEV
- 4
- Fix available
- 540
Most affected products
- IBM AIX · IBM PowerVM VIOS
- 69
- Splunk Enterprise
- 53
- Wireshark Foundation Wireshark
- 25
- FreeBSD
- 23
- IBM Power Systems Firmware
- 16
- Splunk SOAR
- 15
- thorsten phpMyFAQ
- 14
- wazuh
- 13
- orval-labs orval · orval
- 12
- Dell Command Update
- 11
Critical 110
- CVE-2026-76590TRENDnet TEW-755AP ssi wan.cgi stack-based overflowTRENDnet TEW-755AP
- CVE-2026-76850LMDeploy Remote Code Execution via Unsafe Pickle Deserialization in the Disaggregated Serving Peer ConnectorInternLM lmdeploy
- CVE-2026-76404Remote Code Execution (RCE) through Deserialization of Untrusted Data in Splunk MCP Server appSplunk MCP Server app
- CVE-2026-76312Improper Access Control through Embedded Reports in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76311Improper Access Control in Embedded Report Dispatch Archives in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76310Improper Access Control through Embedded Report REST API Requests in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76589TRENDnet TEW-755AP mycli FUN_401000 stack-based overflowTRENDnet TEW-755AP
- CVE-2026-75595Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContextnetty · io.netty:netty-handler
- CVE-2026-76584TRENDnet TV-IP751WIC alphapd set_time.cgi stack-based overflowTRENDnet TV-IP751WIC
- CVE-2026-53545Termix: Remote Code Execution via Tunnel Disconnect pkill Command InjectionTermix-SSH Termix
- CVE-2026-53546Termix: Missing authorization in SSH host credential resolution exposes stored credentialsTermix-SSH Termix
- CVE-2026-53548Termix: IDOR — Authenticated user can fetch SSH passwords for hosts owned by other usersTermix-SSH Termix
- CVE-2026-16919Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16917Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16913Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16903Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16894Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16885Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16882Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16872Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16864Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16862Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-55085Etherpad: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in etherpad-liteetherpad
- CVE-2026-55089Etherpad: JWT `admin` claim presence-only check lets non-admin OAuth users invoke every Etherpad HTTP API endpointetherpad
- CVE-2026-16845Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
Show all 110 entriesShow fewer entries
- CVE-2026-16840Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16839Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16834Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-19508RDK WebUI heap-based buffer overflow vulnerabilityRDK-B WebUI
- CVE-2026-19505RDK-B WebUI improper cryptographic signature verification vulnerabilityRDK-B WebUI
- CVE-2026-16822Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-22306Critical flaw impacting OZOLS ERP's automatic update channelOzols Grupa OZOLS
- CVE-2026-16687Power System Buffer OverflowIBM Power Systems Firmware
- CVE-2026-16835Power System Improper Certificate ValidationIBM Power Systems Firmware
- CVE-2026-18315TrueBooker <= 1.2.6 - Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover to 'truebooker_wp_user_id'…themetechmount TrueBooker – Appointment Booking and Schedul…
- CVE-2026-70496Search-v2-operator: search-v2-operator: operator clusterrole is cluster-admin equivalent via impersonate, rbac write, csr approve, and…Red Hat Advanced Cluster Management for Kubernetes
- CVE-2026-62682Orval: RCE via servers[].url -> unescaped request-URL template literal (with getBaseUrlFromSpecification)orval-labs orval · orval
- CVE-2025-14600Admin Account Takeover via Path Traversal in vsDeskvsDesk
- CVE-2026-72717Orval: Import-time RCE via schema default -> zod module-level template literalorval-labs orval · orval
- CVE-2026-71867Orval: RCE via schema property name -> computed-property-key injection in the MSW mock generatororval-labs orval · orval
- CVE-2026-71868Orval: Import-time RCE via enum-typed default -> zod module-level template literalorval-labs orval · orval
- CVE-2026-71865Orval: Import-time RCE via query parameter name -> computed-property-key injection in the zod cliorval-labs orval · orval
- CVE-2026-71869Orval: Import-time RCE via array-items default -> zod module-level template literalorval-labs orval · orval
- CVE-2026-71864Orval: Import-time RCE via header parameter name -> computed-property-key injection in the zod clientorval-labs orval · orval
- CVE-2026-71871Orval: Import-time RCE via header-parameter default -> zod module-level template literalorval-labs orval · orval
- CVE-2026-72716Orval: Import-time RCE via query-parameter default -> zod module-level template literalorval-labs orval · orval
- CVE-2026-62681Orval: RCE via OpenAPI path -> unescaped request-URL template literal (backtick breakout)orval-labs orval · orval
- CVE-2026-66794Cluster-proxy-addon: cluster-proxy-addon: unauthenticated ssrf to arbitrary managed-cluster services via public routeRed Hat multicluster engine for Kubernetes
- CVE-2026-71866Orval: Import-time RCE via schema property name -> computed-property-key injection in the zod clientorval-labs orval · orval
- CVE-2026-32475WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerabilityElementor Pro
- CVE-2026-71470Acm-search-v2-rhel9: search-v2-operator: search cr imageoverride/arguments/envvar flow unsanitized into pods running impersonating saRed Hat Advanced Cluster Management for Kubernetes
- CVE-2026-72530A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X tTrueConf Server
- CVE-2026-72529A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X tTrueConf Server
- CVE-2026-75143FFmpeg Heap Buffer Overflow via RIST Protocol ReaderFFmpeg
- CVE-2026-49441Wazuh : peer-controlled metadata key in process_files_from_worker non-merged branch allows arbitrary file write under WAZUH_PATH on Wazuh…wazuh
- CVE-2026-20315Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Access Control VulnerabilitiesCisco Secure Workload
- CVE-2026-20317Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Authentication VulnerabilitiesCisco Secure Workload
- CVE-2026-20318Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Input Validation VulnerabilitiesCisco Secure Workload
- CVE-2026-20359Cisco Crosswork Security Hardening Release: August 2026Cisco Crosswork Planning
- CVE-2026-20357Cisco Crosswork Security Hardening Release: August 2026Cisco Crosswork Planning
- CVE-2026-20358Cisco Crosswork Security Hardening Release: August 2026Cisco Crosswork Planning
- CVE-2026-20231Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Neutralization of Special Elements VulnerabilitiesCisco Secure Workload
- CVE-2026-20030Cisco Crosswork Security Hardening Release: August 2026Cisco Crosswork Planning
- CVE-2026-48024Wazuh: merged-file header path traversal in cluster sync allows arbitrary file write under WAZUH_PATH in Wazuh managerwazuh
- CVE-2026-48162Wazuh: cluster peer can read arbitrary master files and forge offline REST API administrator tokens via DAPI tmp_file path injection in…wazuh
- CVE-2026-62668Grav API Plugin: Webhook SSRF via Unrestricted cURL Protocolsgetgrav grav · getgrav grav-plugin-api
- CVE-2026-16816Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-52889Formie: Server-Side Template Injection in Formie Hidden field defaultsverbb formie · verbb/formie
- CVE-2026-16656Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-53451Ground Station: Unauthenticated arbitrary file write (path traversal) in save-waterfall-snapshot leads to remote code executionsgoudelis ground-station
- CVE-2026-47187SSHFS Symlink Escape: Rogue SFTP Server → Local File Read/Writelibfuse sshfs
- CVE-2026-75954Joomla Extension - cmsjunkie.com - SQL injection in trips search in J-BusinessDirectory < 6.2.3cmsjunkie.com J-BusinessDirectory extension for Joomla
- CVE-2026-75949Joomla Extension - cmsjunkie.com - Arbitrary file upload / deletion (path traversal) in J-BusinessDirectory < 6.2.3cmsjunkie.com J-BusinessDirectory extension for Joomla
- CVE-2026-45272MyBooks: Remote Code Execution via SOCIAL_AUTH Key Name Injection in Python Config FilePoxenStudio talebook
- CVE-2026-15068Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-15065Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-71960Cudy WR3000 2.0 Hard-coded JWT Secret Authentication Bypass via MQTTShenzhen Cudy Technology Co. WR3000 · Shenzhen Cudy Technol…
- CVE-2026-76244stigmem-node Insecure Federation Transport Configurationeidetic-labs stigmem · stigmem-node
- CVE-2026-76243stigmem before 0.9.0a2 Authentication Bypass via Disabled Autheidetic-labs stigmem · stigmem-node
- CVE-2026-76242stigmem Federation Peer Registration Authentication Bypasseidetic-labs stigmem · stigmem-node
- CVE-2026-76214phpMyFAQ before 4.1.7 WebAuthn Replay Attack via Challengethorsten phpMyFAQ
- CVE-2026-76213phpMyFAQ before 4.1.7 2FA Brute-Force via Session-Scoped Throttlethorsten phpMyFAQ
- CVE-2026-75917SiYuan before v3.7.4 XSS-to-RCE via pathName.tssiyuan-note siyuan
- CVE-2026-75916SiYuan XSS-to-RCE via unescaped block metadata in hint popupsiyuan-note siyuan
- CVE-2026-16019SQL Injection in Faydam Innovation's FAYDAM DataloggerFaydam Innovation FAYDAM Datalogger
- CVE-2026-74803Joomla Extension - yootheme.com - Unauthenticated arbitrary file upload in Zoo < 4.1.64yootheme.com Zoo extension for Joomla
- CVE-2026-74804Joomla Extension - yootheme.com - Unauthenticated SQL injection in Zoo < 4.1.64yootheme.com Zoo extension for Joomla
- CVE-2026-67364Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms < 2.4.3.2balbooa.com Balbooa Forms extension for Joomla
- CVE-2026-19490NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490NetScaler ADC · NetScaler Gateway
- CVE-2026-73391WordPress Total Donations plugin <= 2.0.5 - SQL Injection vulnerabilityKlbTheme Total Donations
- CVE-2026-73390WordPress Total Donations plugin <= 2.0.5 - Privilege Escalation vulnerabilityKlbTheme Total Donations
- CVE-2026-73389WordPress Kalles Addons plugin <= 1.0.6 - PHP Object Injection vulnerabilityThe4 Kalles Addons
- CVE-2026-73388WordPress Nikstore Core plugin <= 1.5 - SQL Injection vulnerabilityTeconceTheme Nikstore Core
- CVE-2026-73364WordPress Flexible Subscriptions plugin <= 1.8.1 - PHP Object Injection vulnerabilitywpdesk Flexible Subscriptions
- CVE-2026-73347WordPress TrueBooker plugin <= 1.2.6 - Privilege Escalation vulnerabilityThemetechMount TrueBooker
- CVE-2026-73185WordPress NGG Smart Image Search plugin < 4.0.0 - SQL Injection vulnerabilitywpo-HR NGG Smart Image Search
- CVE-2026-73183WordPress Maps Marker Pro plugin <= 4.32 - SQL Injection vulnerabilityGet Maps Marker Pro Maps Marker Pro
- CVE-2026-66613WordPress JetEngine plugin <= 3.8.14 - Remote Code Execution (RCE) vulnerabilityCrocoblock. Jetimpex JetEngine
- CVE-2026-58082Stack based buffer overflow in iconv(3)FreeBSD
- CVE-2026-58081Heap based buffer overflow in iconv(3)FreeBSD
- CVE-2026-72889Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verifyNet-OAuth
- CVE-2026-18937Broken Link Checker < 2.4.12 - Unauthenticated RCE via Query Variable InjectionBroken Link Checker
- CVE-2026-18776TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Account Takeover via Multiple AJAX ActionsTrueBooker
- CVE-2026-18051W3 Total Cache < 2.10.5 - Unauthenticated Arbitrary Directory File Write and .htaccess Overwrite via Path Traversal in the Page Cache KeyW3 Total Cache
- CVE-2026-18031TabaPay Gateway <= 1.4.0 - Unauthenticated Account Takeover via Payment CallbackTabaPay Gateway
- CVE-2026-76008Comfast CF-N1-S URI Parameter Parsing mbox-config get_para_from_uri stack-based overflowComfast CF-N1-S
- CVE-2026-76004UTT HiPER 1250GW HTTP aspApBasicConfigUrcp strcpy stack-based overflowUTT HiPER 1250GW
- CVE-2026-76003UTT HiPER 1200GW formGroupConfig strcpy stack-based overflowUTT HiPER 1200GW
- CVE-2026-11751A vulnerability has been identified in armeria-xds versions prior to 1.41.0, where xDS upstream TLS peer verification may be silently…LY Armeria
- CVE-2026-51366SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the…
High 287
- CVE-2026-8619Unauthenticated Denial-of-Service Vulnerability in HTTP Service in TP-Link TL-MR100, TL-MR150, TL-MR6400 and Archer MR600TP-Link Systems TL-MR100 · TP-Link Systems TL-MR150 v.3.2 +2
- CVE-2026-76928NULL Pointer Dereference in WiresharkWireshark Foundation Wireshark
- CVE-2026-76880Out-of-bounds Write in WiresharkWireshark Foundation Wireshark
- CVE-2026-76879Stack-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-76886Heap-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-76878In OpenStack Aodh before 22.0.1, the alarm list API bypasses project scoping when the all_projects query parameter is set to false.OpenStack Aodh
- CVE-2026-76832Agno PythonTools Path Traversal via joinpath file_name argumentAgno AGI Agno
- CVE-2026-76403Improper Certificate Validation through HTTP Event Collector Kerberos Authentication in Splunk Connect for KafkaSplunk Connect for Kafka
- CVE-2026-76402Server-Side Request Forgery (SSRF) through the REST API in Splunk Connect for KafkaSplunk Connect for Kafka
- CVE-2026-76399Incorrect Permission Assignment for Scheduled Searches in Splunk AI ToolkitSplunk AI Toolkit
- CVE-2026-76397Improper Access Control in Experiment History through the REST API in Splunk AI ToolkitSplunk AI Toolkit
- CVE-2026-76396Improper Access Control through Scheduled Searches in Splunk AI ToolkitSplunk AI Toolkit
- CVE-2026-76395Remote Code Execution (RCE) through Deserialization of Untrusted Data in the Model Loading REST API in Splunk AI ToolkitSplunk AI Toolkit
- CVE-2026-76394Missing Authorization in Container and Connection Management through the REST API in Splunk AI ToolkitSplunk AI Toolkit
- CVE-2026-76391Improper Privilege Management through Agent Run History in Splunk AI ToolkitSplunk AI Toolkit
- CVE-2026-76389Server-Side Request Forgery (SSRF) through the REST API in Cisco Talos Intelligence for Enterprise Security CloudSplunk Cisco Talos Intelligence for Enterprise Security Clo…
- CVE-2026-76388Privilege Escalation through Search Macro Permissions in Splunk Enterprise SecuritySplunk Enterprise Security
- CVE-2026-76387SPL Injection through the REST API in Splunk Enterprise SecuritySplunk Enterprise Security
- CVE-2026-76362Improper Certificate Validation through CyberArk Vault Privileged Access Manager in Splunk SOARSplunk SOAR
- CVE-2026-76357Remote Code Execution (RCE) through Path Traversal in the REST API in Splunk SOARSplunk SOAR
- CVE-2026-76356Authentication Bypass through IP Address Spoofing in the Automation Broker in Splunk SOARSplunk SOAR
- CVE-2026-76355Unauthenticated Information Disclosure through an Edge Processor Service Endpoint in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76354Path Traversal through Search Head Clustering in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76352Improper Authorization through the REST API in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76351Server-Side Request Forgery (SSRF) through the Report Notification REST API in Splunk Secure GatewaySplunk Enterprise · Splunk Secure Gateway
Show all 287 entriesShow fewer entries
- CVE-2026-76350Improper Privilege Management through PDF Attachments for Email Alert Actions in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76344Path Traversal through the Search Dispatch REST API in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76338Improper Authentication through REST API Distributed Search Token Requests in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76336Improper Access Control through the REST API in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76335Remote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76333Stored Cross-Site Scripting (XSS) through Dashboard Studio Workflow Actions in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76332SPL Injection through Splunk Web in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76331SPL Injection through the REST API in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76330SPL Injection through Monitoring Console Forwarder Filters in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76325Stored Cross-Site Scripting (XSS) through Splunk Web in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76321SPL Injection through Nearby Event Searches in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76319Remote Code Execution (RCE) through Federated Search in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76317Path Traversal through the Lookup Configuration REST API in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76316Stored SPL Injection through Deployment Server Broker Registration in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76315Code Injection through Splunk Web Manager Configuration in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76314Remote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76313Remote Code Execution (RCE) through the REST API in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76262Exposure of Sensitive Information to an Unauthorized Actor through the REST API in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76259Improper Privilege Management on the Management Port in Splunk Enterprise for WindowsSplunk Enterprise
- CVE-2026-76254SPL Command Safeguards Bypass through Splunk Web in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76253Privilege Escalation through Scheduled Search Alert Action Configuration in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76251Missing Authorization through REST API Endpoints in the Splunk App for Splunk Observability CloudSplunk Enterprise
- CVE-2025-36254DS8900F and DS8A00 Authentication BypassIBM DS8A00 · IBM DS8900F
- CVE-2025-36255DS8900F and DS8A00 Privilege EscalationIBM DS8A00 · IBM DS8900F
- CVE-2026-62727Windows Telephony Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-75596Netty: Fragmented ClientHello records trigger quadratic pre-handshake reassembly in default SNI parsingnetty · io.netty:netty-handler
- CVE-2026-69222LiquidJS: Uncontrolled Resource Consumption in `join` filter allows template authors to bypass `memoryLimit` and crash the processharttle liquidjs · liquidjs
- CVE-2026-61556LiquidJS: An infinite loop vulnerability in `strip_html` filterharttle liquidjs · liquidjs
- CVE-2026-54491Koel: Incomplete fix for CVE-2026-47260 — systemic SSRF in podcast & radio fetch pathskoel · phanan/koel
- CVE-2026-76139Acm-operator-bundle: acm-operator-bundle: bundle build execs unpinned stolostron/release@master with full build credentialsRed Hat Advanced Cluster Management for Kubernetes
- CVE-2026-75569Mce-operator-bundle: all github actions pinned by mutable tag, not commit shaRed Hat multicluster engine for Kubernetes
- CVE-2026-54493Koel: Authenticated Full-Read SSRF via Subsonic Internet Radio Stationskoel · phanan/koel
- CVE-2026-75616Command Injection in Router Web Management InterfaceTP-Link Systems Archer C20
- CVE-2026-68553Coturn: Format String Injection via TURN USERNAME/REALM into hiredis Redis Commandcoturn
- CVE-2026-12522Stack buffer overflow in Zephyr hl7800 modem driver parsing network-supplied +CGCONTRDP address fieldszephyrproject zephyr
- CVE-2026-12633Out-of-bounds write in IPv6 6LoWPAN Context Option handling via unauthenticated Router Advertisementzephyrproject zephyr
- CVE-2026-53542Termix: Tar option injection in file-manager archive creation allows command execution on managed SSH hostsTermix-SSH Termix
- CVE-2026-53547Termix: Account Takeover via Global Settings DisclosureTermix-SSH Termix
- CVE-2026-53549Termix: Server-Side Request Forgery via Proxy Connectivity TestTermix-SSH Termix
- CVE-2026-18544Portieris is vulnerable to Image Policy Bypass via Unvalidated ownerReferenceIBM Portieris
- CVE-2026-16707Power System Out-of-bounds ReadIBM PowerVM Hypervisor
- CVE-2026-75593BuildKit: Malicious client can bypass destination directory validation on local sources uploadmoby buildkit
- CVE-2026-16911Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16909Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16901Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-63188logto-tunnel serves files outside --experience-path via path traversallogto-io logto · @logto/tunnel
- CVE-2026-17091Power System Integer OverflowIBM PowerVM Hypervisor
- CVE-2026-17097Power System Improper ValidationIBM PowerVM Hypervisor
- CVE-2026-16877Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16875Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16874Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16873Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-18821Power System Out-of-bounds WriteIBM PowerVM Hypervisor
- CVE-2026-62317Logto: ReDoS via unescaped user input in email subaddressing regex (blockSubaddressing)logto-io logto
- CVE-2026-16869Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16865Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16857Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16852Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16851Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16850Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-18871Power System Buffer OverflowIBM PowerVM Hypervisor
- CVE-2026-16848Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-17414Power System Improper Input ValidationIBM PowerVM Hypervisor
- CVE-2026-16847Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16844Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16842Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16841Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16661Power System Integer OverflowIBM PowerVM Hypervisor
- CVE-2026-16838Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16837Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16836Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16831Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-19507RDK WebUI uncontrolled resource consumptionRDK-B WebUI
- CVE-2026-19506RDK-B WebUI race condition vulnerabilityRDK-B WebUI
- CVE-2026-68900Wekan: Stored XSS in HTML board exports through a card-title second parsewekan
- CVE-2026-76647Leantime JSON-RPC API contains a missing authorization vulnerabilityLeantime JSON-RPC API
- CVE-2026-16824Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-68899Wekan: File Upload MIME Type Validation Bypass — Stored XSS via Missing System Binary Fallbackwekan
- CVE-2026-68561Wekan: a low-privilege board member escalates to board admin and takes over a private board via the `sort` collection-allow rulewekan
- CVE-2026-68560Wekan:hell Injection in External Antivirus Scanner Path via asyncExecwekan
- CVE-2026-68558Wekan: SSRF filter bypass via DNS-resolving hostname in outgoing webhooks (incomplete fix of CVE-2026-53446)wekan
- CVE-2026-63722ICEcoder 8.1 Unauthenticated RCE via terminal-xhr.phpICEcoder
- CVE-2026-16933Power System Integer OverflowIBM Power Systems Firmware
- CVE-2026-17042Power System Out-of-bounds ReadIBM Power Systems Firmware
- CVE-2026-17063Power System Incorrect AuthorizationIBM Power Systems Firmware
- CVE-2026-19198Akaunting 3.1.21 - Improper authorization in BulkActions handle dispatchAkaunting
- CVE-2026-16832Power System Buffer OverflowIBM Power Systems Firmware
- CVE-2026-18848Power System Cross-Site Request Forgery (CSRF)IBM Power Systems Firmware
- CVE-2026-16828Power System Out-of-bounds ReadIBM Power Systems Firmware
- CVE-2026-17494Power System Buffer OverflowIBM Power Systems Firmware
- CVE-2026-17429Power System Incorrect AuthorizationIBM Power Systems Firmware
- CVE-2026-16930Power System Missing AuthorizationIBM Power Systems Firmware
- CVE-2026-17093Power System Buffer OverflowIBM Power Systems Firmware
- CVE-2026-75618RTSP Null Pointer Dereference Denial-of-Service Vulnerability on TP-Link Tapo C100 and C101TP-Link Systems Tapo C100 · TP-Link Systems Tapo C101
- CVE-2026-55694Snipe-IT: Chained Information Disclosure and IDOR Leads to Full EULA File Takeovergrokability snipe-it · snipe/snipe-it
- CVE-2026-17100Power System Out-of-bounds WriteIBM Power Systems Firmware
- CVE-2026-55643Snipe-IT: Tenant Isolation Bypass in FMCS Floater Modegrokability snipe-it · snipe/snipe-it
- CVE-2026-19234Power System Buffer OverflowIBM Power Systems Firmware
- CVE-2026-63633FreeRDP: Heap buffer overflow in Opus audio decode (`freerdp_dsp_decode_opus` resizes the wrong stream) — server→clientFreeRDP
- CVE-2026-63652FreeRDP: Double-free of `client_formats` in the rdpsnd server channel on a malformed Client Audio Formats PDUFreeRDP
- CVE-2026-55192FreeRDP: Out-of-bounds read in H.264 YUV-to-RGB conversion due to decoder/surface dimension mismatchFreeRDP
- CVE-2026-55194FreeRDPHeap-buffer-overflow write in TS Gateway RPC RESPONSE reassembly due to alloc_hint capacity mismatchFreeRDP
- CVE-2026-75149marimo < 0.23.15 Code Injection via MCP Server Configurationmarimo-team marimo
- CVE-2026-55193FreeRDP: Heap-buffer-overflow write in TS Gateway RPC fragment receive due to uncapped bind_ack max_xmit_fragFreeRDP
- CVE-2026-61518ISPConfig Authenticated SQL Injection via Remote API primary_id Parameterispconfig3
- CVE-2026-55191FreeRDP: Heap-buffer-overflow write in AVC444 YUV buffer allocationFreeRDP
- CVE-2026-62680Orval: Generation-time SSRF + remote/local file inclusion via unrestricted $reforval-labs orval · orval
- CVE-2026-19875Unauthenticated Registration POST Endpoint Permits Admin Email Overwrite and Outbound Relay Abuse in LangflowIBM Langflow OSS
- CVE-2026-17183CVE-2026-17183 CVE RecordGrafana OSS · Grafana Enterprise
- CVE-2026-67581On-chain transfer proof is not single-use in mpp EVM payment method, enabling cross-challenge replayZenHive mpp · mpp
- CVE-2026-73541Tempo fee sponsorship in mpp bounds each transaction but not aggregate exposure, allowing concurrent sponsor-wallet drainZenHive mpp · mpp
- CVE-2026-73136Static memo configuration in mpp Tempo disables per-challenge attribution binding, enabling third-party replayZenHive mpp · mpp
- CVE-2025-14603Use of user input in raw SQL queries in vsDesk leading to blind SQL injectionvsDesk
- CVE-2026-50173Flow-Like: Azure invoke presign grants app content write SAS to ExecuteEvents-only usersRheosoph flow-like
- CVE-2024-13942Rockchip RK3588s Secure BootROM TOCTOU (time-of-check to time-of-use) vulnerability leading to arbitrary code execution with highest…Rockchip RK3588s
- CVE-2026-20320A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read…Cisco BroadWorks
- CVE-2026-75146FFmpeg Out-of-Bounds Read in DASH Demuxer via dashdec.cFFmpeg
- CVE-2026-75144FFmpeg Heap Buffer Overflow in VC-2/Dirac RTP PacketizerFFmpeg
- CVE-2026-75142FFmpeg Stack Buffer Overflow in MPEG-PS Muxer via mpegenc.cFFmpeg
- CVE-2026-75141FFmpeg Heap Buffer Overflow in hvcC Box Writer via HEVC MuxingFFmpeg
- CVE-2026-45798Wazuh: Pre-auth stack-buffer-overflow in compare_wazuh_versions reachable from wazuh-authd (TCP/1515) via crafted enrollment V: fieldwazuh
- CVE-2026-20319Cisco Secure Workload Software Security Hardening Release August 2026 - Buffer Management VulnerabilitiesCisco Secure Workload
- CVE-2026-41424Wazuh: Privilege Escalation via Admin-Protection Bypass in update-user API Endpointwazuh
- CVE-2026-44901Wazuh Cluster DAPI Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerabilitywazuh
- CVE-2026-46343Wazuh: Arbitrary File Deletion via Cluster Protocol – Incomplete Path Validation in end_receiving_file()wazuh
- CVE-2026-44252Wazuh Manager dapi RBAC Bypass Allows Privilege Escalationwazuh
- CVE-2026-64852Grav API Plugin: Missing authorization on API-key generate/revoke lets any admin.login user forge keys for any accountgetgrav grav-plugin-api
- CVE-2026-64850Grav: Remote code execution via unrestricted callable in Blueprint::dynamicData()getgrav grav · getgrav/grav
- CVE-2026-64851Grav Shortcode Core Plugin: Stored XSS in shortcode-core attribute handlersgetgrav grav-plugin-shortcode-core
- CVE-2026-63408Grav API Plugin: JWT Access Token Accepted via `?token=` URL Query Parametergetgrav grav-plugin-api
- CVE-2026-18430HumHub 1.18.4 - Stored XSS in comment-deletion notifications through unescaped administrator reasonHumHub
- CVE-2026-63407Grav API Plugin: CORS 'Access-Control-Allow-Origin: *' on Authenticated API Responsesgetgrav grav-plugin-api
- CVE-2026-62673Grav: .htaccess file extension rules bypass via case variation on case-insensitive filesystemsgetgrav grav · getgrav/grav
- CVE-2026-62667Grav API Plugin : API Key 'scopes' Never Enforced - Delegated Least-Privilege Keys Carry Full User ACLgetgrav grav-plugin-api
- CVE-2026-62669Grav Login Plugin: 2FA Bypass via 'login.regenerate2FASecret' - Secret Rotation During Pending Challengegetgrav grav · getgrav grav-plugin-login +1
- CVE-2026-62666Grav API Plugin: non-super api.users.write manager -> super-admin via createApiKey (incomplete fix of CVE-2026-59190); + 2FA strip of supergetgrav grav-plugin-api
- CVE-2026-16819Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-53477Dell Command Update (DCU), versions prior to 5.7.1, contain a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability.Dell Command Update
- CVE-2026-58564Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Default Permissions vulnerability.Dell Command Update
- CVE-2026-16818Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16817Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16814Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16706Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16703Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-58565Dell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability.Dell Command Update
- CVE-2026-16690Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16686Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-14970Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-52834jxl-oxide: Out-of-bounds writes due to integer overflow in jxl-grid on 32-bit platformstirr-c jxl-oxide · tirr-c jxl-grid +1
- CVE-2026-58562Dell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability.Dell Command Update
- CVE-2026-56797Dell Command Update (DCU), versions prior to 5.7.1, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability.Dell Command Update
- CVE-2026-49816Dell Command Update (DCU), versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability.Dell Command Update
- CVE-2026-52792Algernon: Server-side script source disclosure on Windows via NTFS filenamexyproto algernon · github.com/xyproto/algernon
- CVE-2026-49289SimpleSAMLphp SAML2: Possible DoS via XPath Transformsimplesamlphp saml2 · simplesamlphp/saml2 +1
- CVE-2026-49817Dell Command Update (DCU), versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability.Dell Command Update
- CVE-2026-49283SimpleSAMLphp HTTP-Artifact TLS validator confusion allows cross-IdP authentication bypasssimplesamlphp saml2 · simplesamlphp/saml2 +1
- CVE-2026-18756HumHub Community Edition 1.18.4-pl1 - Reflected XSS in Space membership request button renderingHumHub
- CVE-2026-75953Joomla Extension - cmsjunkie.com - Open mail relay in J-BusinessDirectory < 6.2.3cmsjunkie.com J-BusinessDirectory extension for Joomla
- CVE-2026-48711SSHFS: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')libfuse sshfs
- CVE-2026-75956Joomla Extension - cmsjunkie.com - DOS vector in pagination parameter handling in J-BusinessDirectory < 6.2.3cmsjunkie.com J-BusinessDirectory extension for Joomla
- CVE-2026-23501Dell RecoverPoint for VMs, versions 6.0.3 and 6.0.3.1, contains an Improper Neutralization of Special Elements used in an OS Command ('OS…Dell RecoverPoint for Virtual Machines
- CVE-2026-45273MyBooks: Privilege Escalation via Missing Authorization on Admin Settings EndpointPoxenStudio talebook
- CVE-2026-15078Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-44829Gotenberg: Path traversal in zip entry name via Windows-style separators in upload filenamegotenberg · github.com/gotenberg/gotenberg/v7 +1
- CVE-2026-45742Gotenberg: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')gotenberg · github.com/gotenberg/gotenberg/v8 +1
- CVE-2026-15061Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-45741Gotenberg: SSRF deny-list bypass in IsPublicIP via IPv6 6to4 / NAT64 / site-local prefixesgotenberg · github.com/gotenberg/gotenberg/v7 +1
- CVE-2026-49253electerm: Path Traversal in Zmodem and Trzsz Download Filename Handlingelecterm
- CVE-2026-49255electerm: Command Injection in File System Operations (rmrf, mv, cp)electerm
- CVE-2026-71961Cudy WR3000 2.0 OS Command Injection via Mesh MQTT Command HandlerShenzhen Cudy Technology Co. WR3000
- CVE-2026-18526HumHub 1.18.4 / 1.18.4-pl1 – Stored Cross-Site Scripting in oEmbed confirmationHumHub
- CVE-2026-71176Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL…Dell OpenManage Enterprise
- CVE-2026-43961Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code executionvim · Red Hat Hardened Images +3
- CVE-2026-54794Dell OpenManage Enterprise, versions prior to 4.7.0, contains a Server-Side Request Forgery (SSRF) vulnerability.Dell OpenManage Enterprise
- CVE-2026-76245stigmem Federation Peer Token Timestamp Validation Bypasseidetic-labs stigmem · stigmem-node
- CVE-2026-76241stigmem Plugin Signature Enforcement Bypass via Configurationeidetic-labs stigmem · stigmem-node
- CVE-2026-76240stigmem Postgres SQL Injection via Schema Identifiereidetic-labs stigmem · stigmem-node
- CVE-2026-76238stigmem before 0.9.0a12 Cross-Tenant BOLA via decay sweepeidetic-labs stigmem-node · stigmem-node
- CVE-2026-76237stigmem before 0.9.0a12 Cross-Tenant BOLA via quarantineeidetic-labs stigmem-node · stigmem-node
- CVE-2026-76236stigmem before 0.9.0a12 Cross-Tenant BOLA via Tombstoneseidetic-labs stigmem-node · stigmem-node
- CVE-2026-76234libcrux before 0.0.6 Cryptographic Implementation Bug Fixescelabshq libcrux-ecdh · celabshq libcrux-ed25519 +4
- CVE-2026-76233Renovate 39.53.0 before 40.33.0 Command Injection via gleam managerrenovatebot renovate · renovate
- CVE-2026-76232Renovate 31.51.0 before 40.33.0 Command Injection via helmv3renovatebot renovate · renovate
- CVE-2026-76231Renovate 32.135.0 before 40.33.0 Command Injection via hermitrenovatebot renovate · renovate
- CVE-2026-76230Renovate 35.63.0 before 40.33.0 Command Injection via npmrenovatebot renovate · renovate
- CVE-2026-76229Renovate 39.218.0 before 40.33.0 Arbitrary Command Injection via kustomizerenovatebot renovate · renovate
- CVE-2026-76228Renovate before 42.68.5 Remote Code Execution via Gradle Wrapperrenovatebot renovate · mend renovate-ce +3
- CVE-2026-76225ArcadeDB before 26.8.1 Server-Side Request Forgery via LOAD CSVArcadeData arcadedb
- CVE-2026-76224ArcadeDB before 26.8.1 Remote Code Execution via Groovy FallbackArcadeData arcadedb
- CVE-2026-76223ArcadeDB before 26.8.1 Permission Bypass via DEFINE FUNCTIONArcadeData arcadedb
- CVE-2026-76222GitPython before 3.1.58 Path Traversal via .gitmodules Submodule Namegitpython-developers GitPython · gitpython
- CVE-2026-76221GitPython before 3.1.58 Config Injection via option-namegitpython-developers GitPython · gitpython
- CVE-2026-76220GitPython before 3.1.58 Command Execution via split_single_char_optionsgitpython-developers GitPython · gitpython
- CVE-2026-76219GitPython before 3.1.58 Arbitrary File Overwrite via read-treegitpython-developers GitPython · gitpython
- CVE-2026-76218GitPython before 3.1.58 Remote Code Execution via Repo.initgitpython-developers GitPython · gitpython
- CVE-2026-76217GitPython before 3.1.58 Arbitrary File Read via pathspec-from-filegitpython-developers GitPython · gitpython
- CVE-2026-76216Vikunja through 2.4.0 Principal-Type Confusion via LinkSharinggo-vikunja vikunja · code.vikunja.io/api
- CVE-2026-76210phpMyFAQ before v4.1.6 Local File Disclosure via PDF Exportthorsten phpMyFAQ
- CVE-2026-76208phpMyFAQ 3.1.0 through 4.1.6 Authentication Bypass via LDAPthorsten phpMyFAQ
- CVE-2026-76207phpMyFAQ before 4.1.7 2FA Bypass via Remember-Me Cookiethorsten phpMyFAQ
- CVE-2026-76205phpMyFAQ before 4.1.7 SQL Injection via Glossarythorsten phpMyFAQ
- CVE-2026-75918phpMyFAQ before 4.1.7 Authentication Bypass via Tracking Filethorsten phpMyFAQ
- CVE-2024-58376Renovate 37.158.0 before 37.199.0 Command Injection via helmv3renovatebot renovate · renovate
- CVE-2020-37267Renovate 19.180.0 before 23.25.1 Token Leakage via Logsrenovatebot renovate · renovate
- CVE-2019-25766Renovate before 19.38.7 Credential Exposure via Go Modulesrenovatebot renovate · renovate
- CVE-2026-70422Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL…Dell OpenManage Enterprise
- CVE-2026-56088Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL…Dell OpenManage Enterprise
- CVE-2026-54795Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS…Dell OpenManage Enterprise
- CVE-2026-70421Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Privilege Management vulnerability.Dell OpenManage Enterprise
- CVE-2026-54796Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS…Dell OpenManage Enterprise
- CVE-2026-67363Joomla Extension - balbooa.com - Pre-auth Payment Amount Tampering in Balbooa Forms < 2.4.3.2balbooa.com Balbooa Forms extension for Joomla
- CVE-2026-19489Vulnerability in NetScaler ADC and NetScaler Gateway.NetScaler ADC · NetScaler Gateway
- CVE-2026-76235Cockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via cockpitlang cookie in send_login_htmlRed Hat Enterprise Linux · Red Hat OpenShift Dev Spaces
- CVE-2026-73387WordPress Resido theme <= 1.5 - Local File Inclusion vulnerabilitySmartDataSoft Resido
- CVE-2026-73386WordPress Track Geolocation Of Users Using Contact Form 7 plugin <= 3.0.2 - Sensitive Data Exposure vulnerabilityZealousWeb Track Geolocation Of Users Using Contact Form
- CVE-2026-73385WordPress Outranking plugin Options plugin <= 1.1.3 - Broken Access Control vulnerabilityOutanking Team Outranking Plugin Options
- CVE-2026-73384WordPress Pay with Contact Form 7 plugin <= 1.0.4 - Sensitive Data Exposure vulnerabilitycmsMinds Pay with Contact Form
- CVE-2026-73354WordPress SimplyRETS Real Estate IDX plugin <= 3.2.8 - Cross Site Scripting (XSS) vulnerabilityReichertBrothers SimplyRETS Real Estate IDX
- CVE-2026-73184WordPress Global Gallery plugin <= 11.1.2 - Cross Site Scripting (XSS) vulnerabilityLCweb Global Gallery
- CVE-2026-73182WordPress BBQ Pro plugin <= 3.9 - Cross Site Scripting (XSS) vulnerabilityJeff Starr BBQ Pro
- CVE-2026-66668WordPress Community by PeepSo plugin <= 9.0.5.2 - SQL Injection vulnerabilityCommunity by PeepSo
- CVE-2026-66596WordPress Newsletter plugin <= 9.3.3 - Cross Site Scripting (XSS) vulnerabilityStefano Lissa Newsletter
- CVE-2026-61986WordPress Contest Gallery plugin <= 30.0.5 - Cross Site Scripting (XSS) vulnerabilityWasiliy Strecker Contest Gallery
- CVE-2026-32552WordPress YITH WooCommerce Membership Premium plugin <= 2.33.0 - SQL Injection vulnerabilityYITH WooCommerce Membership Premium
- CVE-2026-73394WordPress Stitch Express plugin <= 1.9.0 - Broken Access Control vulnerabilityStitchexpress Stitch Express
- CVE-2026-76164Authenticated Server-Side Request Forgery in AIL Framework Crawler Allows Access to Internal Network Resourcesail-project ail-framework
- CVE-2026-58088Race condition in ELF core dump segment countingFreeBSD
- CVE-2026-58087Heap out-of-bounds access in semctl(2)FreeBSD
- CVE-2026-58086ktrace(2) privilege incorrectly validated in jailsFreeBSD
- CVE-2026-58085Missing MAC validation in wg(4) packet decryptionFreeBSD
- CVE-2026-58083Use-after-free in kqueue copy-on-forkFreeBSD
- CVE-2026-75589Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant-time comparison in verifyNet-OAuth
- CVE-2026-75981TranslatePress – Translate Multilingual sites with AI Translation <= 3.2.5 - Unauthenticated Stored Cross-Site Scriptingcozmoslabs TranslatePress – Translate Multilingual sites wi…
- CVE-2026-15780WP Statistics <= 14.16.8 - Unauthenticated Stored Cross-Site Scripting via 'utm_campaign' Parameterveronalabs WP Statistics – Simple, privacy-friendly Google…
- CVE-2026-19842SAML Single Sign On 4.8.85 - 5.4.6 - Unauthenticated Administrator Account Takeover via SAML Trust Anchor OverwriteSAML Single Sign On
- CVE-2026-19056ProSolution WP Client < 2.0.11 - Reflected XSS via 'page' ParameterProSolution WP Client
- CVE-2026-19055ProSolution WP Client < 2.0.11 - Reflected XSS via Multiple ParametersProSolution WP Client
- CVE-2026-17565Animation Addons for Elementor < 2.7.2 - Unauthenticated Server-Side Request ForgeryAnimation Addons for Elementor
- CVE-2026-16950Product Shortlist <= 1.0.4 - Unauthenticated SQL Injection via get_shortlisted_productsProduct Shortlist
- CVE-2026-16617Simple File List <= 6.3.11 - Unauthenticated Stored XSS via File DescriptionSimple File List
- CVE-2026-16616Simple File List <= 6.3.11 - Unauthenticated Arbitrary File Read and Move via Path TraversalSimple File List
- CVE-2026-16570NextScripts: Social Networks Auto-Poster < 4.4.8 - Reflected XSS via Facebook OAuth CallbackNextScripts: Social Networks Auto-Poster
- CVE-2026-14861User Verification <= 2.0.47 - Unauthenticated Arbitrary Account Lockout via IDORUser Verification by PickPlugins
- CVE-2026-14334Booking calendar, Appointment Booking System <= 3.2.36 - Unauthenticated Stored XSS via SVG File UploadBooking calendar, Appointment Booking System
- CVE-2026-13174Eventin < 4.1.21 - Contributor+ Speaker Account Deletion via IDOREventin
- CVE-2026-13169Eventin < 4.1.21 - Contributor+ Arbitrary Event Modification, Deletion and Ownership Takeover via IDOREventin
- CVE-2026-12983Dinatur <= 1.18 - Unauthenticated SQL Injection via Column Name InjectionDinatur
- CVE-2026-11565Advanced File Manager < 5.4.13 - Authenticated Arbitrary File Read and Write via fma_load_fma_uiAdvanced File Manager
- CVE-2026-49428posixshm: system calls can incorrectly free memory of largepage objectsFreeBSD
- CVE-2026-49427posixshm: largepage shared memory objects not explicitly wiredFreeBSD
- CVE-2026-49422Use-after-free in TCP RACK stack option handlerFreeBSD
- CVE-2026-49421unlinkat(2) ignores AT_RESOLVE_BENEATH flagFreeBSD
- CVE-2026-49420Buffer overflow in libalias RTSP handlerFreeBSD
- CVE-2026-49430Kernel heap overflow in ZFS_IOC_RECV_NEW ioctlFreeBSD
- CVE-2026-49429Kernel heap overflow in ZFS_IOC_USERSPACE_MANY ioctlFreeBSD
- CVE-2026-70408An incorrect authorization vulnerability exists in acmailer, which may allow a user to create a sub-account that has administrative…Extra Innovation acmailer CGI · Extra Innovation acmailer DB
- CVE-2026-49415Local privilege escalation via execve(2) TOCTOU raceFreeBSD
- CVE-2026-49419Jail reference count underflowFreeBSD
- CVE-2026-19942Atarim <= 5.1.1 - Authenticated (Author+) Arbitrary File Deletion via '_wp_attached_file' Metawpfeedback Atarim – AI Agency for WordPress: Edit Pages, Fi…
- CVE-2026-49418Use-after-free in device pager page listFreeBSD
- CVE-2026-51367An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to obtain sensitive information via the api_vedo/chat…
- CVE-2026-71694An issue in Berkeley Out-of-Order Machine (BOOM) / BoomTile RTL benchmark v1.2 2d08d0d8b4563212175212f9db0e69f6e68c9619 allows a remote…
Medium, low and unrated 277
- CVE-2022-4996mruby bigint.c udiv floating point comparison with incorrect operatormruby
- CVE-2026-76762code-projects Assessment Management welcome.php sql injectioncode-projects Assessment Management
- CVE-2026-76929Out-of-bounds Read in WiresharkWireshark Foundation Wireshark
- CVE-2026-76761chenhg5 cc-connect Management API engine.go shellExecCommand os command injectionchenhg5 cc-connect
- CVE-2026-76927NULL Pointer Dereference in WiresharkWireshark Foundation Wireshark
- CVE-2026-76926Reachable Assertion in WiresharkWireshark Foundation Wireshark
- CVE-2026-76891Expired Pointer Dereference in WiresharkWireshark Foundation Wireshark
- CVE-2026-76890Expired Pointer Dereference in WiresharkWireshark Foundation Wireshark
- CVE-2026-76885Buffer Over-read in WiresharkWireshark Foundation Wireshark
- CVE-2026-76924Out-of-bounds Read in WiresharkWireshark Foundation Wireshark
- CVE-2026-76923Out-of-bounds Read in WiresharkWireshark Foundation Wireshark
- CVE-2026-76922NULL Pointer Dereference in WiresharkWireshark Foundation Wireshark
- CVE-2026-76921Use After Free in WiresharkWireshark Foundation Wireshark
- CVE-2026-76920Out-of-bounds Write in WiresharkWireshark Foundation Wireshark
- CVE-2026-76760chenhg5 cc-connect webhook.go authenticate code injectionchenhg5 cc-connect
- CVE-2026-76919Use of Uninitialized Variable in WiresharkWireshark Foundation Wireshark
- CVE-2026-76918Heap-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-76917Heap-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-76889Heap-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-76888Heap-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-76887Heap-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-76884Buffer Over-read in WiresharkWireshark Foundation Wireshark
- CVE-2026-76883Heap-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-76882Out-of-bounds Read in WiresharkWireshark Foundation Wireshark
- CVE-2026-76881NULL Pointer Dereference in WiresharkWireshark Foundation Wireshark
Show all 277 entriesShow fewer entries
- CVE-2026-76591TRENDnet TEW-755AP ssi email.cgi log_email_server command injectionTRENDnet TEW-755AP
- CVE-2026-63123Tina: Cross-origin `POST /media/upload/*` requests can write arbitrary files into the Tina dev server media roottinacms · @tinacms/cli
- CVE-2026-76405Information Disclosure through Cleartext Storage in the App Key Value Store in the Splunk On-Call (VictorOps) appSplunk On-Call
- CVE-2026-76401Regular Expression Denial of Service (DoS) through the REST API in Splunk Connect for KafkaSplunk Connect for Kafka
- CVE-2026-76400Denial of Service (DoS) through the REST API in Splunk Connect for KafkaSplunk Connect for Kafka
- CVE-2026-76398Improper Access Control during Experiment History Deletion through the REST API in Splunk AI ToolkitSplunk AI Toolkit
- CVE-2026-76393Race Condition during Model Upload through the REST API in Splunk AI ToolkitSplunk AI Toolkit
- CVE-2026-76392Use of Hard-coded Credentials in Container Connections in Splunk AI ToolkitSplunk AI Toolkit
- CVE-2026-76390Information Disclosure through Splunk Web in Cisco Talos Intelligence for Enterprise Security CloudSplunk Cisco Talos Intelligence for Enterprise Security Clo…
- CVE-2026-76386Information Disclosure through Action Parameters in Zoom app for Splunk SOARZoom app for Splunk SOAR
- CVE-2026-76385Information Disclosure through Action Parameters in Venafi app for Splunk SOARVenafi app for Splunk SOAR
- CVE-2026-76384Information Disclosure through Action Parameters in Splunk Attack Analyzer Connector for Splunk SOARSplunk Attack Analyzer Connector for Splunk SOAR
- CVE-2026-76383Information Disclosure through Action Parameters in RSA SecurID Authentication Manager app for Splunk SOARRSA SecurID Authentication Manager app for Splunk SOAR
- CVE-2026-76382Information Disclosure through Action Parameters in Phantom app for Splunk SOARPhantom app for Splunk SOAR
- CVE-2026-76381Information Disclosure through Action Parameters in MS Graph for Active Directory app for Splunk SOARMS Graph for Active Directory app for Splunk SOAR
- CVE-2026-76380Information Disclosure through Action Parameters in CrowdStrike OAuth API app for Splunk SOARCrowdStrike OAuth API app for Splunk SOAR
- CVE-2026-76379Information Disclosure through Action Parameters in Cisco Webex app for Splunk SOARCisco Webex app for Splunk SOAR
- CVE-2026-76378Information Disclosure through Action Parameters in Cisco Secure Malware Analytics app for Splunk SOARCisco Secure Malware Analytics app for Splunk SOAR
- CVE-2026-76377Information Disclosure through Action Parameters in Azure AD Graph app for Splunk SOARAzure AD Graph app for Splunk SOAR
- CVE-2026-76376Information Disclosure through Action Parameters in AWS IAM app for Splunk SOARAWS IAM app for Splunk SOAR
- CVE-2026-76375Information Disclosure through Environment Data Logging in AD LDAP app for Splunk SOARAD LDAP app for Splunk SOAR
- CVE-2026-76374Information Disclosure through Sensitive Data Logging in AD LDAP app for Splunk SOARAD LDAP app for Splunk SOAR
- CVE-2026-76373Filter Injection through Action Parameters in AD LDAP app for Splunk SOARAD LDAP app for Splunk SOAR
- CVE-2026-76372Incorrect Permission Assignment through Safe Mode in Nmap Scanner for Splunk SOARSplunk Nmap Scanner
- CVE-2026-76371Incorrect Permission Assignment through Safe Mode in FireAMP for Splunk SOARSplunk FireAMP
- CVE-2026-76370Information Disclosure through the REST API in Splunk SOARSplunk SOAR
- CVE-2026-76369Path Traversal through Automation Broker in Splunk SOARSplunk SOAR
- CVE-2026-76368Missing Authorization through Playbooks in Splunk SOARSplunk SOAR
- CVE-2026-76367Stored Cross-Site Scripting (XSS) through Notes in Splunk SOARSplunk SOAR
- CVE-2026-76366Information Disclosure through the REST API in Splunk SOARSplunk SOAR
- CVE-2026-76365Structured Query Language (SQL) Injection through Custom Lists in Splunk SOARSplunk SOAR
- CVE-2026-76364Structured Query Language (SQL) Injection through Custom Function Results in Splunk SOARSplunk SOAR
- CVE-2026-76363Structured Query Language Injection through the REST API in Splunk SOARSplunk SOAR
- CVE-2026-76361Server-Side Request Forgery (SSRF) through the Connectivity Check REST API in Splunk SOARSplunk SOAR
- CVE-2026-76360Information Disclosure through Missing Authorization in the Health REST API in Splunk SOARSplunk SOAR
- CVE-2026-76359Path Traversal through Universal Forwarder Installer Archive Extraction in Splunk SOARSplunk SOAR
- CVE-2026-76358Path Traversal through App Installation Tar Extraction in Splunk SOARSplunk SOAR
- CVE-2026-76353Path Traversal through Knowledge Bundle Replication in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76349SPL Injection through Splunk Web Form Tokens in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76348Missing Authorization in Search Head Cluster Member Controls in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76347Server-Side Request Forgery (SSRF) through the Report Notifications REST API in Splunk Secure GatewaySplunk Enterprise · Splunk Secure Gateway
- CVE-2026-76346Stored Cross-Site Scripting (XSS) through Splunk Web Dashboard Sparkline Format Options in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76345Remote Code Execution (RCE) through the REST API in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76343Structured Query Language (SQL) Injection through the REST API in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76342Risky Commands Safeguards Bypass through Splunk Web in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76341Risky Commands Safeguards Bypass through Table Editor Dataset Initial Data in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76340Missing Authorization for Reloading Token-Signing Keys through the REST API in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76339SPL Injection through the geostats Command in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76337Path Traversal through Splunk Web Static File Serving in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76334SPL Injection through Dashboard Studio Workflow Actions in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76329SPL Injection through Monitoring Console Dashboard Inputs in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76328SPL Injection through Splunk Web in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76327SPL Injection through Splunk Web in Splunk Secure GatewaySplunk Enterprise · Splunk Secure Gateway
- CVE-2026-76326Stored Cross-Site Scripting through Dashboard Sparkline Tooltip Options in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76324Stored Cross-Site Scripting (XSS) in Splunk Web Tours in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76323SPL Risky Command Safeguards Bypass through the Job Details Dashboard in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76322SPL Injection through Dashboard Studio Search Query Options in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76320SPL Injection through Cross-Site Request Forgery (CSRF) in the Event Type Builder in Splunk Web for Splunk EnterpriseSplunk Enterprise
- CVE-2026-76318Stored Cross-Site Scripting (XSS) through Splunk Web in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76309Structured Query Language (SQL) Injection through the REST API in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76263Improper Access Control through the REST API in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76261Insecure Default Access Control List through the REST API in Splunk Secure GatewaySplunk Enterprise · Splunk Secure Gateway
- CVE-2026-76260Incorrect Permission Assignment for Critical Resource through the REST API in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76258Use of Hard-coded Cryptographic Key through Companion App Registration in Splunk Secure GatewaySplunk Enterprise · Splunk Secure Gateway
- CVE-2026-76257Missing Authorization through REST API Endpoints in Splunk Secure GatewaySplunk Enterprise · Splunk Secure Gateway
- CVE-2026-76256Information Exposure through REST API Endpoints in Splunk Secure GatewaySplunk Enterprise · Splunk Secure Gateway
- CVE-2026-76255Risky Command Safeguards Bypass through Splunk Web in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76252Cross-Site Scripting (XSS) through Splunk Web Message Validation in Splunk EnterpriseSplunk Enterprise
- CVE-2026-59992Tina: Broken Access Control: arbitrary bucket-key write/delete in `next-tinacms-s3` (and sibling production media adapters)tinacms · next-tinacms-s3 +3
- CVE-2025-36398DS8900F and DS8A00 Information DisclosureIBM DS8A00 · IBM DS8900F
- CVE-2026-69550Windows App for Mac Information Disclosure VulnerabilityMicrosoft Windows App for Mac
- CVE-2026-14978Unicode normalization mismatch in go-slug ignore pattern matching may bypass intended file exclusionsHashiCorp go-slug
- CVE-2026-11617Tanium addressed a compression bomb vulnerability in Findings.Tanium Findings
- CVE-2026-75476Tanium addressed a compression bomb vulnerability in Threat Response.Tanium Threat Response
- CVE-2026-14514Reliable Scalable Cluster Technology Denial-of-ServiceIBM Reliable Scalable Cluster Technology
- CVE-2026-76827Search-indexer: search-indexer: update/delete operations not scoped to caller's cluster (cross-tenant data tampering)Red Hat Advanced Cluster Management for Kubernetes
- CVE-2026-54494Koel: Full-read SSRF via podcast enclosure URL: isPublicHost() filter_var guard does not reject NAT64 (64:ff9b::/96) or 6to4 (2002::/16)…koel · phanan/koel
- CVE-2026-76583TRENDnet TV-IP751WIC alphapd set_time.cgi command injectionTRENDnet TV-IP751WIC
- CVE-2026-54492Koel: Authenticated Blind SSRF via Subsonic Podcast Channel Creationkoel · phanan/koel
- CVE-2026-68555coturn: Chained mobility resumes allow authenticated remote memory exhaustioncoturn
- CVE-2026-68552Coturn: uint16_t truncation overflow in STUN message length causes TCP stream framing bypasscoturn
- CVE-2026-68554Coturn: STUN attributes after MESSAGE-INTEGRITY are processed, letting on-path attackers modify authenticated TURN requestscoturn
- CVE-2026-12634Out-of-bounds stack write in the settings NVS backend from over-reported nvs_read lengthzephyrproject zephyr
- CVE-2026-17015IBM i Denial of ServiceIBM i
- CVE-2026-18102IBM i Buffer OverflowIBM i
- CVE-2026-76582TRENDnet TEW-821DAP ssi ping.cgi system command injectionTRENDnet TEW-821DAP
- CVE-2026-54738Lemmy: Rate limit bypass via X-Forwarded-For header spoofing in actix-web ConnectionInfoLemmyNet lemmy
- CVE-2026-18849IBM OpenBMC Code ExecutionIBM OPENBMC
- CVE-2026-54743Lemmy: Stored XSS via markdown image alt-text in lemmy-ui html5-embedLemmyNet lemmy
- CVE-2026-54739Lemmy: Login Endpoint User Enumeration via HTTP Response Code DifferentialLemmyNet lemmy
- CVE-2026-76576yangzongzhuan RuoYi-Vue Common Download Endpoint CommonController.java resourceDownload path traversalyangzongzhuan RuoYi-Vue
- CVE-2026-4936Power System Insufficient EntropyIBM PowerVM Hypervisor
- CVE-2026-54740Lemmy: Lower-ranked federated moderator can remove higher-ranked moderatorsLemmyNet lemmy
- CVE-2026-54741Lemmy: Blocked users can edit private messages sent before the blockLemmyNet lemmy
- CVE-2026-4937Power System Insufficient EntropyIBM PowerVM Hypervisor
- CVE-2026-54742Lemmy: `CollectionAdd::Featured` does not check the post is in the communityLemmyNet lemmy
- CVE-2026-61711BuildKit: Custom frontend could bypass Seccomp/AppArmormoby buildkit · github.com/moby/buildkit
- CVE-2026-61712BuildKit: Possible runtime DoS via unbounded group parsingmoby buildkit · github.com/moby/buildkit
- CVE-2026-76574code-projects Hospital Information System User Login UsersController.php login sql injectioncode-projects Hospital Information System
- CVE-2026-16914Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16897Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16891Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16890Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16886Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16888Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-63187Logto: OS command injection vulnerability exists in the Commitlint workflowlogto-io logto
- CVE-2026-17028Power System Out-of-bounds ReadIBM PowerVM Hypervisor
- CVE-2026-16883Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16724Power System Integer OverflowIBM Virtualization Management Interface
- CVE-2026-16866Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16855Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16849Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-55086Etherpad: Import/export use Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwriteetherpad · ep_etherpad-lite
- CVE-2026-16846Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-55090Etherpad: Stored XSS in HTML export via unescaped attribute-pool valuesetherpad · ep_etherpad-lite
- CVE-2026-55088Etherpad: Device-to-device author-token transfer endpoint is replayable, never expires, and exposes the cleartext author tokenetherpad · ep_etherpad-lite
- CVE-2026-76572pkp pkp-lib XSLTransformer.php _transformPHP xml external entity referencepkp-lib
- CVE-2026-55087Etherpad: x-proxy-path header reflected into admin HTML/JS/CSS (cache-poisoning XSS) and concatenated into redirect (open-redirect)etherpad · ep_etherpad-lite
- CVE-2026-16833Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16829Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-19509RDK WebUI DOS vulnerabilityRDK-B WebUI
- CVE-2026-68901WeKan Board Export REST Endpoints: NULL Pointer Dereference on Invalid authToken Leads to Uncaught Exception / Remote Denial of Servicewekan
- CVE-2026-16827Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-16825Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-68559Wekan: Broken access control in the Excel-export route (`/api/boards/:boardId/exportExcel`)wekan
- CVE-2026-67189pfSense Plus/CE Stored XSS via Traffic Graphs PTR RecordNetgate pfSense Plus · Netgate pfSense CE
- GHSA-QWGH-2VCV-G2F7block_buffer: panic corrupts inline buffer positionblock_buffer
- CVE-2026-75112OTTO® Fleet Manager – Weak Password Hashing ConfigurationRockwell Automation OTTO® Fleet Manager
- CVE-2026-16938Power System Missing AuthorizationIBM Power Systems Firmware
- CVE-2026-18681This Power System Buffer OverflowIBM Server Firmware
- CVE-2026-75619RTSP Heap Buffer Overflow Denial-of-Service Vulnerability on TP-Link Tapo C100 and C101TP-Link Systems Tapo C100 · TP-Link Systems Tapo C101
- CVE-2026-55703Snipe-IT: Maintenance Record Disclosure via Missing Authorization on GETgrokability snipe-it · snipe/snipe-it
- CVE-2026-61807Snipe-IT: Stored DOM XSS via table selected-count IDsgrokability snipe-it · snipe/snipe-it
- CVE-2026-19321Power System Integer OverflowIBM Power Systems Firmware
- CVE-2026-55519Snipe-IT: Improper Authorization in File Deletion (IDOR)grokability snipe-it · snipe/snipe-it
- CVE-2026-55482Snipe-IT: Multi-Tenancy Bypass via Bulk Asset Updategrokability snipe-it · snipe/snipe-it
- CVE-2026-55483Snipe-IT: Privilege Escalation via Missing admin Permission Check in User Creationgrokability snipe-it · snipe/snipe-it
- CVE-2026-50550Snipe-IT: 2FA reset privilege bypassgrokability snipe-it · snipe/snipe-it
- CVE-2026-49870Snipe-IT: TOTP Brute-Forceable Due to Missing Rate Limiting on `POST /two-factor`grokability snipe-it · snipe/snipe-it
- CVE-2026-49976Snipe-IT: User Account Escalation via CSV Importgrokability snipe-it · snipe/snipe-it
- CVE-2026-63117FreeRDP: Denial of service through ADPCM frame size calculationFreeRDP
- CVE-2026-18874Volsync-addon-controller: volsync-addon-controller: annotation values rendered into yaml via text/template without escaping allows yaml…Red Hat Advanced Cluster Management for Kubernetes
- CVE-2026-55648FreeRDP: Integer Overflow in `freerdp_image_copy_from_icon_data` Bypasses Bounds CheckFreeRDP
- CVE-2026-55564FreeRDP: Out-of-bounds read in glyph_cache_get via crafted glyph fragmentsFreeRDP
- CVE-2026-19653Vulnerabilities in IBM AIX and PowerVM VIOSIBM AIX · IBM PowerVM VIOS
- CVE-2026-73829Non-atomic hash-credential dedup in mpp Tempo allows replay of a confirmed payment under a concurrent raceZenHive mpp · mpp
- CVE-2026-75583keeper.sh Calendar version prior to 2.18.14 SSRF Guard Bypass via DNS Rebindingridafkih keeper.sh
- CVE-2026-75147FFmpeg Out-of-Bounds Read in AV1 RTP Packetizer via rtpenc_av1.cFFmpeg
- CVE-2026-75145FFmpeg Integer Narrowing Conversion OOB Memory Access in AV1 RTP PacketizerFFmpeg
- CVE-2026-49392Wazuh: Local SQL injection in FIM db due to path lookup interpolation in wazuh-syscheckdwazuh
- CVE-2026-20327Cisco Unified Intelligence Center SQL Injection VulnerabilityCisco Unified Intelligence Center
- CVE-2026-44256Wazuh: CRLF Log Injection via Unsanitized Basic-Auth Usernamewazuh
- CVE-2026-20314Cisco Packaged Contact Center Enterprise & Cisco Unified Contact Center Enterprise Server-Side Request Forgery VulnerabilityCisco Packaged Contact Center Enterprise · Cisco Unified Co…
- CVE-2026-20302Cisco RoomOS Stack Overflow VulnerabilityCisco RoomOS Software
- CVE-2026-20232Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting VulnerabilityCisco Industrial Ethernet Switches
- CVE-2026-20177Cisco Industrial Ethernet 1000 Series Switches Denial of Service VulnerabilityCisco Industrial Ethernet Switches
- CVE-2026-44255Wazuh: Username Enumeration via Timing Side-Channelwazuh
- CVE-2026-44254Wazuh: Stack Out-of-Bounds Write in remoted Decompression Pathwazuh
- CVE-2026-44253Wazuh: Cluster Protocol Memory Exhaustion (DoS) via unbounded receive_str allocation and div_msg_box accumulationwazuh
- CVE-2026-62671CSRF in grav-plugin-login: anonymous attacker rotates a logged-in user's 2FA (TOTP) secret (no nonce on task=login.regenerate2FASecret)getgrav grav-plugin-login
- CVE-2026-62672Grav: Authenticated ReDoS via regex_replace in Twig Sandboxgetgrav grav · getgrav/grav
- CVE-2026-62670Fail-open authorization in grav-plugin-flex-objects admin-next API: api.access user gets full CRUD on permission-less directories…getgrav grav-plugin-flex-objects
- CVE-2026-19672tarfile extraction filter bypass allows creation of directories outside the destinationPython Software Foundation CPython
- CVE-2026-61842Grav: Twig sandbox config exfiltration via grav.offsetGet + dump filter (CVE-2026-44738 bypass)getgrav grav · getgrav/grav
- CVE-2026-61690Grav: Decompression Bomb via ZipArchiver - Missing Extraction Limitsgetgrav grav · getgrav/grav
- CVE-2026-61607Grav API Plugin: Stored XSS via SVG Upload - API Media Pipeline Bypasses Sanitizergetgrav grav-plugin-api
- CVE-2026-53654Grav: Unauthenticated open redirect via login twofa_cancel _redirectgetgrav grav
- CVE-2026-67268Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Restriction of XML External Entity Reference vulnerability.Dell Command Update
- CVE-2026-67266Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Authorization vulnerability.Dell Command Update
- CVE-2026-76614OpenEMR < 8.3.0 Path Traversal Information Disclosure via EDI Archive Restoreopenemr
- CVE-2026-67267Dell Command Update (DCU), versions prior to 5.7.1, contain an Exposure of Sensitive System Information to an Unauthorized Control Sphere…Dell Command Update
- CVE-2026-40509OpenEMR < 8.3.0 CSRF via DICOM Viewer web_path Parameteropenemr
- CVE-2026-40508OpenEMR < 8.3.0 Stored XSS via Patient Portal Template Import Handleropenemr
- CVE-2026-40507OpenEMR < 8.3.0 Reflected XSS via templateHtml Parameter in Patient Portalopenemr
- CVE-2026-75952Joomla Extension - cmsjunkie.com - Cross-site request forgery in J-BusinessDirectory < 6.2.3cmsjunkie.com J-BusinessDirectory extension for Joomla
- CVE-2026-56796Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability.Dell Command Update
- CVE-2026-75955Joomla Extension - cmsjunkie.com - Reflected XSS / XML injection in J-BusinessDirectory < 6.2.3cmsjunkie.com J-BusinessDirectory extension for Joomla
- CVE-2026-53452Ground Station: Unauthenticated out-of-containment file read via `sigmfplayback` `recordingPath`sgoudelis ground-station
- CVE-2026-75951Joomla Extension - cmsjunkie.com - Insecure Direct Object Reference (multiple frontend/API actions) in J-BusinessDirectory < 6.2.3cmsjunkie.com J-BusinessDirectory extension for Joomla
- CVE-2026-75950Joomla Extension - cmsjunkie.com - Unauthenticated listing ownership takeover in J-BusinessDirectory < 6.2.3cmsjunkie.com J-BusinessDirectory extension for Joomla
- CVE-2026-45274MyBooks: Unauthenticated Registration Bypass via Missing Server-Side ALLOW_REGISTER EnforcementPoxenStudio talebook
- CVE-2026-15961Power System Information DisclosureIBM PowerVM Hypervisor
- CVE-2026-32802Dell PowerPath, version 7.2 through to 8.0 SP1, contains an Improper Privilege Management vulnerability.Dell PowerPath
- CVE-2026-76203CSS sanitizer bypass in Pentestify report themes allows forced outbound requestsmaalfer Pentestify
- CVE-2026-50149Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabledprojectcontour contour · github.com/projectcontour/contour
- CVE-2026-54793Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site…Dell OpenManage Enterprise
- CVE-2026-76239Stigmem before 0.9.0a11 SSRF via unvalidated webhook delivery_addresseidetic-labs stigmem-node · stigmem-node
- CVE-2026-76227Renovate 42.68.1 before 42.96.3 and 43.0.0 before 43.4.4 Environment Variable Exposurerenovatebot renovate · mend renovate-ce +3
- CVE-2026-76226Renovate 43.65.0 before 43.102.11 Remote Code Execution via lockFileMaintenancerenovatebot renovate · renovate
- CVE-2026-76215phpMyFAQ before 4.1.7 Missing Authorization via child resourcesthorsten phpMyFAQ
- CVE-2026-76212phpMyFAQ before 4.1.7 LIKE Wildcard Injection via PostgreSQLthorsten phpMyFAQ
- CVE-2026-76211phpMyFAQ before 4.1.7 Information Disclosure via Admin APIthorsten phpMyFAQ
- CVE-2026-76209phpMyFAQ before v4.1.6 Registration Bypass via APIthorsten phpMyFAQ
- CVE-2026-76206phpMyFAQ before 4.1.7 Information Disclosure via PDF Exportthorsten phpMyFAQ
- CVE-2026-75920phpMyFAQ before 4.1.6 Information Disclosure via Backup ZIPthorsten phpMyFAQ
- CVE-2026-75919phpMyFAQ before 4.1.7 Authentication Bypass via Setup APIthorsten phpMyFAQ
- CVE-2026-70424Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path…Dell OpenManage Enterprise
- CVE-2026-70423Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Restriction of XML External Entity Reference vulnerability.Dell OpenManage Enterprise
- CVE-2026-75114Joomla Extension - yootheme.com - Open redirect in CommentController::twitterAuthenticate() in Zoo < 4.1.64yootheme.com Zoo extension for Joomla
- CVE-2026-75148cgltf 1.15 Integer Overflow via cgltf_validate() Accessor Bounds Checkjkuhlmann cgltf
- CVE-2026-65612Shell Command Injection in nnnnnn
- CVE-2026-65611Shell Command Injection in nnnnnn
- CVE-2026-65610Numeric Truncation Error in nnnnnn
- CVE-2026-65609Out-of-bounds write in nnnnnn
- CVE-2026-73363WordPress Taxi Booking Manager for WooCommerce plugin < 2.0.8 - Broken Access Control vulnerabilitymagepeopleteam Taxi Booking Manager for WooCommerce
- CVE-2026-18372CSS injection in M-Files WebM-Files Web
- CVE-2026-18371HTML injection in M-Files WebM-Files Web
- CVE-2026-16440In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotations causes a segmentation fault.Eclipse Foundation Eclipse OpenJ9
- CVE-2026-76166Modcluster-core: mod_cluster advertise listener: unauthenticated dos via crafted multicast datagramRed Hat JBoss Web Server · Red Hat JBoss Enterprise Appl… +1
- CVE-2026-75900Swtpm: swtpm: out-of-bounds read in swtpm_nvram_checkheader due to sizeof(pointer) vs sizeof(struct) mismatchRed Hat Enterprise Linux
- CVE-2026-58084Kernel stack disclosure via timer_settime(2)FreeBSD
- CVE-2026-49425Kernel stack disclosure in 32-bit compatibility supportFreeBSD
- CVE-2026-49424Kernel stack disclosure in Linux compatibility layerFreeBSD
- CVE-2026-49423Remote DOS via uninitialized memory access in KTLS receiveFreeBSD
- CVE-2026-15446EWWW Image Optimizer <= 8.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-script' Lazy Load Attribute in Post…nosilver4u EWWW Image Optimizer
- CVE-2026-49426Incorrect audit records for ptrace(2) syscall requestsFreeBSD
- CVE-2026-8810HDD Password leakage vulnerabilityInsyde Software InsydeH2O, InsydeH2O ARM
- CVE-2026-19782WPS Bidouille < 1.33.5 - Subscriber+ User Email Disclosure via wps_get_usersWPS Bidouille
- CVE-2026-19709Membership For WooCommerce < 3.1.2 - Unauthenticated Member Data Disclosure via REST Consumer Secret BypassMembership For WooCommerce
- CVE-2026-19417KiviCare < 4.5.4 - Patient+ Arbitrary Media Attachment Read via IDORKiviCare
- CVE-2026-19416KiviCare < 4.5.4 - Patient+ Cross-Patient Appointment Modification via IDORKiviCare
- CVE-2026-19406Easy Appointments < 4.0.1 - Contributor+ Sensitive Information Disclosure via REST Appointments ListingEasy Appointments
- CVE-2026-18779TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Appointment and Payment Record Deletion via update_appointment_bookedTrueBooker
- CVE-2026-18778TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Customer PII Disclosure via Multiple AJAX ActionsTrueBooker
- CVE-2026-18777TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Arbitrary Appointment Status Change via update_appointment_statusTrueBooker
- CVE-2026-18466WP Maps < 4.9.8 - Subscriber+ Unlimited Autoloaded Option CreationWP Maps
- CVE-2026-18231WP Directory Kit < 1.5.7 - Unauthenticated User Email Disclosure via select_2_ajax_userWP Directory Kit
- CVE-2026-18202JetEngine < 3.8.14 - Author+ Stored XSS via SVG UploadJetEngine
- CVE-2026-16979SmartCrawl < 3.16.3 - Subscriber+ Private/Draft Post Title Disclosure and Post Meta Key EnumerationSmartCrawl SEO checker, analyzer & optimizer
- CVE-2026-16058YayCurrency < 3.3.5 - Unauthenticated Order and Vendor Financial Data Disclosure via Dokan IntegrationYayCurrency
- CVE-2026-15253Easy Media Replace <= 0.2.0 - Author+ Stored XSS via Attachment TitleEasy Media Replace
- CVE-2026-14826Quiz And Survey Master < 11.2.4 - Contributor+ Cross-Quiz Email and Results Configuration Disclosure via IDORQuiz and Survey Master
- CVE-2026-14825Quiz And Survey Master < 11.2.4 - Contributor+ Arbitrary Quiz Text Settings Update via IDORQuiz and Survey Master
- CVE-2026-14287TenWeb Speed Optimizer < 2.33.5 - Unauthenticated Stored XSS via Critical CSS Token Bypass10Web Booster
- CVE-2026-14196WCFM Marketplace < 3.8.1 - Store Vendor+ Cross-Vendor Review Deletion and Status Update via IDORWCFM Marketplace
- CVE-2026-13175Eventin < 4.1.21 - Contributor+ Schedule Deletion and Modification via IDOREventin
- CVE-2026-13173Eventin < 4.1.21 - Contributor+ User Role and Meta Modification via Speaker CreationEventin
- CVE-2026-49431Incorrect user validation in ZFS_IOC_SET_PROP ioctlFreeBSD
- CVE-2026-66358A cross-site scripting vulnerability exists in acmailer, which may allow an attacker to execute an arbitrary script.Extra Innovation acmailer CGI · Extra Innovation acmailer DB
- CVE-2026-76050SourceCodester Simple Online Food Ordering System ajax.php delete_menu sql injectionSourceCodester Simple Online Food Ordering System
- CVE-2026-76049SourceCodester Simple Online Food Ordering System ajax.php save_menu sql injectionSourceCodester Simple Online Food Ordering System
- CVE-2026-76048SourceCodester Simple Online Food Ordering System ajax.php login sql injectionSourceCodester Simple Online Food Ordering System
- CVE-2026-76014BusyBox FEATURE_WGET_TIMEOUT wget.c null pointer dereferenceBusyBox
- CVE-2026-75987SPLWare esProc SocketData.java ObjectInputStream.readUnshared deserializationSPLWare esProc
- CVE-2026-75986code-projects Online Job Portal System Password Recovery ForPass.php sql injectioncode-projects Online Job Portal System
- CVE-2026-15421Speed Optimizer <= 7.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Tag Attributessiteground Speed Optimizer – The All-In-One Performance-Boo…
- CVE-2026-75985TRENDnet Router ping.cgi command injectionTRENDnet Router
- CVE-2026-75984TRENDnet TEW-823DRU admin.cgi command injectionTRENDnet TEW-823DRU
- CVE-2026-75979xianrendzw EasyReport SQL Preview Endpoint DesignerController.java previewSqlText special elements in template enginexianrendzw EasyReport
- CVE-2026-75978xianrendzw EasyReport QueryerFactory DataSourceController.java DataSourceController.add permissionxianrendzw EasyReport
- CVE-2026-50719The Ingenic T41, and probably also T32, T40, and A1 SoC boot ROMs parse and execute an attacker-controlled init table from the SPL header…
- CVE-2026-50720The Ingenic T31 SoC boot ROM flash-boot verification path compares only a single 32-bit word of the RSA signature output against a single…