CVEs published September 29, 2026
611 CVEs were published on September 29, 2026: 96 critical, 254 high. Browse them by severity, product and exploitation status.
- Published
- 611
- Critical
- 96
- High
- 254
- Medium
- 227
- Low
- 34
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 383
Most affected products
- Google Chrome
- 140
- Mozilla Firefox · Mozilla Thunderbird
- 50
- Mozilla Thunderbird · Mozilla Firefox
- 26
- Wireshark Foundation Wireshark
- 19
- Hewlett Packard Enterprise (HPE) Instant ON
- 18
- Eclipse Foundation Eclipse ThreadX NetX Duo
- 16
- Joomla! Project Joomla! CMS · joomla
- 14
- OpenSSL
- 14
- WatchGuard Fireware OS
- 14
- Red Hat Enterprise Linux
- 10
Critical 96
- CVE-2026-102794Ziroom ZHOME A0101 ping command injectionZiroom ZHOME A0101
- CVE-2026-102793Ziroom ZHOME A0101 set_time_zone command injectionZiroom ZHOME A0101
- CVE-2026-86131Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code ExecutionWatchGuard Fireware OS
- CVE-2026-103041LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Embed Cache RPyC ServiceModelTC LightLLM
- CVE-2026-103040LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Router Profiler RPyC ServiceModelTC LightLLM
- CVE-2026-103044EasyTimeline should not serve image maps as application/xmlThe Wikimedia Foundation Mediawiki - EasyTimeline extension
- CVE-2026-102792Ziroom ZHOME A0101 set_syslog command injectionZiroom ZHOME A0101
- CVE-2026-72507Toptech TMS7 and TopHAT SQL InjectionToptech Systems TMS7 · Toptech Systems TopHAT
- CVE-2026-68068Toptech TMS7 and TopHAT SQL InjectionToptech Systems TMS7 · Toptech Systems TopHAT
- CVE-2026-68954Toptech TMS7 and TopHAT SQL InjectionToptech Systems TMS7 · Toptech Systems TopHAT
- CVE-2026-63713Toptech TMS7 and TopHAT SQL InjectionToptech Systems TMS7 · Toptech Systems TopHAT
- CVE-2026-72510Toptech TMS7 and TopHAT SQL InjectionToptech Systems TMS7 · Toptech Systems TopHAT
- CVE-2026-70356Toptech TMS7 and TopHAT Unrestricted Upload of File with Dangerous TypeToptech Systems TMS7 · Toptech Systems TopHAT
- CVE-2026-71379Toptech TMS7 and TopHAT Files or Directories Accessible to External PartiesToptech Systems TMS7 · Toptech Systems TopHAT
- CVE-2026-96587Use of Hard-coded Credentials in Viidure Dashcam Android ApplicationViidure Dashcam Android Application
- CVE-2026-53988Dockhand < 1.0.40 Unauthenticated Webhook Trigger via Git Webhook EndpointsFinsys dockhand
- CVE-2026-102308Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitraryGoogle Chrome
- CVE-2026-102309Use after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandboxGoogle Chrome
- CVE-2026-102304Use after free in Passwords in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox Google Chrome
- CVE-2026-102316Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitraryGoogle Chrome
- CVE-2026-102306Use after free in Bluetooth in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside Google Chrome
- CVE-2026-102331Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary coGoogle Chrome
- CVE-2026-100291Initialization of a resource with an insecure default in Anjvision YSSD-RTMP-H5Anjvision YSSD-RTMP-H5
- CVE-2026-76725Authentication Bypass in a Management Protocol of HPE Networking Instant ON APsHewlett Packard Enterprise (HPE) Instant ON
- CVE-2026-76724Unauthenticated Adjacent Command Injection Vulnerability in HPE Networking Instant ON APs Command Line Interface (CLI) Accessed by the PAPI ProtocolHewlett Packard Enterprise (HPE) Instant ON
Show all 96 entriesShow fewer entries
- CVE-2026-76723Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking Instant ON APSHewlett Packard Enterprise (HPE) Instant ON
- CVE-2026-76722Uncontrolled Format String Vulnerabilities lead to Remote Code Execution or Denial-of-Service in HPE Networking Instant ON APsHewlett Packard Enterprise (HPE) Instant ON
- CVE-2026-76721Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in HPE Networking Instant ON APsHewlett Packard Enterprise (HPE) Instant ON
- CVE-2026-102829simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detectionsteveukx git-js · @simple-git/argv-parser
- CVE-2026-102828simple-git unsafe-operation guard does not block trailer command configurationsteveukx git-js · simple-git
- CVE-2026-84436IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
- CVE-2026-95311Free of non-heap memory in Fonts in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentiaGoogle Chrome
- CVE-2026-95347Use after free in Updater in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the Google Chrome
- CVE-2026-95325Use after free in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the Google Chrome
- CVE-2026-95331Out of bounds write in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outsideGoogle Chrome
- CVE-2026-95299Use after free in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a Google Chrome
- CVE-2026-95318Buffer overflow in Video in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside theGoogle Chrome
- CVE-2026-95277Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the Google Chrome
- CVE-2026-95283Buffer overflow in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary codGoogle Chrome
- CVE-2026-95310Use after free in AdFilter in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox vGoogle Chrome
- CVE-2026-95356Use after free in WindowDialog in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentiallGoogle Chrome
- CVE-2026-95329Out of bounds write in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrarGoogle Chrome
- CVE-2026-95284Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside tGoogle Chrome
- CVE-2026-95349Buffer overflow in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary coGoogle Chrome
- CVE-2026-95313Use after free in Fullscreen in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outsideGoogle Chrome
- CVE-2026-95281Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside tGoogle Chrome
- CVE-2026-95339Use after free in ServiceWorker in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandGoogle Chrome
- CVE-2026-95357Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary Google Chrome
- CVE-2026-95350Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside tGoogle Chrome
- CVE-2026-102761NetX Duo's WebSocket client resets the unmasking cursor to the first `NX_PACKET` each time it advances through a chained packet, while the lEclipse Foundation NetX Duo
- CVE-2026-102425Joomla Extension - balbooa.com - Unauthenticated RCE via field shortcode injection in Balbooa Forms < 2.4.3.4balbooa.com Balbooa Forms extension for Joomla
- CVE-2026-100240TemplateSandbox does not check read permissions for the page being previewedWikimedia Foundation Mediawiki - TemplateSandbox Extension
- CVE-2023-54400Fumeng Cloud SQL Injection via AjaxMethod.ashx getEmpBynameFumasoft Fumeng Cloud
- CVE-2026-49243Webmin: Reflected XSS in the Configuration modulewebmin
- CVE-2026-22094Weak root password in EVbee DC 80EVbee DC
- CVE-2026-100829Mitigation bypass in the DOM: Security componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100828Mitigation bypass in the Bookmarks & History componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100819Sandbox escape due to incorrect boundary conditions in the XPCOM componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100818Sandbox escape due to use-after-free in the Widget: Gtk componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100811Sandbox escape due to use-after-free in the DOM: Core & HTML componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100810Other issue in the DevTools componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100804Sandbox escape due to use-after-free in the Preferences: Backend componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100800Sandbox escape due to use-after-free in the Disability Access APIs componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100794Sandbox escape due to incorrect boundary conditions in the Internationalization componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100788Invalid pointer in the JavaScript: WebAssembly componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100787Sandbox escape in the XUL componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100786Sandbox escape due to use-after-free in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100781Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100778Sandbox escape due to use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100775Sandbox escape in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100770Sandbox escape due to use-after-free in the DOM: Content Processes componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100763Incorrect boundary conditions in the Graphics: WebGPU componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100762Sandbox escape due to use-after-free in the DOM: Content Processes componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100760Sandbox escape in the Security: Process Sandboxing componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100758Sandbox escape in the DOM: Navigation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-82973Improper Neutralization of CRLF Sequences ('CRLF Injection') in docker-mailboxpsyb0t docker-mailbox
- CVE-2026-7192Multiple vulnerabilities in the T-CPE301K 4G Mini WiFi Router from Shenzhen Dbit Network EquipmentShenzhen Dbit Network Equipment T-CPE301K 4G Mini WiFi Rout…
- CVE-2026-85520Unauthenticated arbitrary file write leading to RCE in gmfeed PrestaShop moduleMyPresta Google Merchant Center Feed
- CVE-2026-15390Out-of-bounds write in Das U-BootDENX Software Engineering Das U-Boot
- CVE-2026-8066A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthenticatedHitachi Energy RTU500 series CMU firmware
- CVE-2026-8065An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticatHitachi Energy RTU500 series CMU firmware
- CVE-2026-96431Flowring Agentflow 4.0 - Unrestricted Upload of File with Dangerous TypeFlowring Technology Agentflow
- CVE-2026-91048Apache Karaf: Missing authorization on the jdbc:* shell command scope allows privilege escalation to remote code execution via jdbc:ds-createApache Software Foundation Apache Karaf
- CVE-2026-91012Apache Karaf: Path Traversal in Config Service Allows Manager-to-Admin Privilege EscalationApache Software Foundation Apache Karaf
- CVE-2026-96429Flowring Agentflow 4.0 - SQL InjectionFlowring Technology Agentflow
- CVE-2026-96428Flowring Agentflow 4.0 - SQL InjectionFlowring Technology Agentflow
- CVE-2026-84154Code Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026xDassault Systèmes GEOVIA Geospatial Data Manager
- CVE-2026-102240Netcore NAP930 Network Tools CGI network_tools eval os command injectionNetcore NAP930
- CVE-2026-101354FAST FAC1203R MmtAtePrase _tWlanTask stack-based overflowFAST FAC1203R
- CVE-2024-31026An issue in Greek Universities Network (GUnet) Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the chat i
- CVE-2026-39117An issue in AltumCode 66Uptime before v.54.0.0 and 66Uptime ping-servers plugin before v.2.0.0 allows a remote attacker to execute arbitrary
- CVE-2026-77177Open GenAI Stack (aka ogx-ai) 2026-06-11, as used in the Meta AI backend for WhatsApp and other products, allows code execution because prom
- CVE-2026-79536bytebase dbhub v1.2.0 was discovered to contain a SQL injection vulnerability in the /utils/sql-parser.ts component.
- CVE-2026-79537metatool-ai MetaMCP through 2.4.22 contains an insecure direct object reference (IDOR) in the MCP transport session dispatch.
- CVE-2026-79538metatool-ai MetaMCP up to and including 2.4.22 is vulnerable to Code Execution in the internal MCP inspector proxy endpoint GET /mcp-proxy/s
- CVE-2026-94952A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030.
High 254
- CVE-2026-86104Fireware OS Resource Exhaustion in Login Process Allows Denial of ServiceWatchGuard Fireware OS
- CVE-2026-18145Fireware OS Stack-based Buffer Overflow in spamd Allows Remote Code ExecutionWatchGuard Fireware OS
- CVE-2026-86101Fireware OS Authorization Bypass in SAML Login Allows Unauthorized SSLVPN AccessWatchGuard Fireware OS
- CVE-2026-13046Fireware OS Deserialization of Untrusted Data in samld Allows Remote Code ExecutionWatchGuard Fireware OS
- CVE-2026-13224Fireware OS Path Traversal in WebUI Management Agent Allows Arbitrary Local File ReadWatchGuard Fireware OS
- CVE-2026-86133Fireware OS Pre-Authentication Integer Underflow in iked Allows Remote Denial of ServiceWatchGuard Fireware OS
- CVE-2026-90441Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant BWatchGuard Fireware OS
- CVE-2026-18105Fireware OS Uncontrolled Resource Consumption in Diagnostic Tasks Allows Denial of ServiceWatchGuard Fireware OS
- CVE-2026-86136Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant AWatchGuard Fireware OS
- CVE-2026-86132Fireware OS Pre-Authentication Integer Underflow in iked Allows Denial of ServiceWatchGuard Fireware OS
- CVE-2026-86128Fireware OS NULL Pointer Dereference in NetFlow IPv6 Traffic Processing Allows Remote Denial of ServiceWatchGuard Fireware OS
- CVE-2026-81433Fireware OS Pre-Authentication Stack Buffer Overflow in fingerd Allows Remote Code ExecutionWatchGuard Fireware OS
- CVE-2026-103043anchorme through 3.0.8 Regular Expression Denial of Servicealexcorvi anchorme
- CVE-2026-103042LightLLM through 1.2.0 Unauthenticated Memory Exhaustion via NCCL Control Channel set_valueModelTC LightLLM
- CVE-2026-71302Toptech TMS7 and TopHAT Session FixationToptech Systems TMS7 · Toptech Systems TopHAT
- CVE-2026-74225U-Boot before 2026.10-rc5 Out-of-Bounds Write via DHCPv6u-boot
- CVE-2026-74222U-Boot before 2026.10-rc5 Use-After-Free in lwIP wget Receive Callbacku-boot
- CVE-2026-74221U-Boot before 2026.10-rc5 Buffer Overflow via NFS READLINKu-boot
- CVE-2026-74220U-Boot before 2026.10-rc5 Buffer Overflow via NFS READ Replyu-boot
- CVE-2026-71971U-Boot before 2026.10-rc3 Out-of-Bounds Write in IP Fragment Reassemblyu-boot
- CVE-2026-91191Lantronix G520 Series Cellular Gateway Improper Verification of Cryptographic SignatureLantronix G520 Series
- CVE-2026-84409Lantronix G520 Series Cellular Gateway Cross-site ScriptingLantronix G520 Series
- CVE-2026-102937virtualenv: Command injection via --prompt in activate.bat (batch activator)pypa virtualenv · virtualenv
- CVE-2026-93853Barman snapshot backup deletion trusts unverified backup catalog metadataEnterpriseDB Barman
- CVE-2026-102930virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before usepypa virtualenv · virtualenv
Show all 254 entriesShow fewer entries
- CVE-2026-102925virtualenv bash and fish activation scripts execute commands embedded in pathspypa virtualenv · virtualenv
- CVE-2026-94204Incorrect Permission Assignment for Critical Resource in Viidure Dashcam Android ApplicationViidure Dashcam Android Application
- CVE-2026-102253iperf3 < 3.22 UDP Receive Worker Infinite Loop DoSesnet iperf3
- CVE-2026-102878mcp-chrome-bridge through 1.0.31 CORS Origin Bypasshangwin mcp-chrome-bridge
- CVE-2026-102876SurrealDB before 3.3.0 Cross-Tenant Access via Headerssurrealdb
- CVE-2026-102875VLC media player before 3.0.24 Path Traversal via skins2videolan vlc
- CVE-2026-100298Insufficiently Protected Credentials in Anjvision YSSD-RTMP-H5Anjvision YSSD-RTMP-H5
- CVE-2026-100296Improper Check for Unusual or Exceptional Conditions in Anjvision YSSD-RTMP-H5Anjvision YSSD-RTMP-H5
- CVE-2026-102327Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the rGoogle Chrome
- CVE-2026-102321Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crGoogle Chrome
- CVE-2026-102302Buffer overflow in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a cGoogle Chrome
- CVE-2026-102324Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer procesGoogle Chrome
- CVE-2026-102301Out of bounds write in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potGoogle Chrome
- CVE-2026-102328Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crGoogle Chrome
- CVE-2026-102326Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crGoogle Chrome
- CVE-2026-102323Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crGoogle Chrome
- CVE-2026-102299Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crGoogle Chrome
- CVE-2026-102317Improper privilege management in Mojo in Google Chrome on on Windows prior to 154.0.8037.92 allowed a local attacker to potentially execute Google Chrome
- CVE-2026-100294Use of Hard-coded Credentials in Anjvision YSSD-RTMP-H5Anjvision YSSD-RTMP-H5
- CVE-2026-100293Improper verification of cryptographic signature in Anjvision YSSD-RTMP-H5Anjvision YSSD-RTMP-H5
- CVE-2026-100292Improper neutralization of special elements used in an OS command ('OS command injection') in Anjvision YSSD-RTMP-H5Anjvision YSSD-RTMP-H5
- CVE-2026-96274Uncaught exception in Baicells Nova 430HBaicells Nova 430H eNodeB
- CVE-2026-76728Authenticated Server-Side Request Forgery Leading to Remote Code Execution in HPE Networking Instant ON APsHewlett Packard Enterprise (HPE) Instant ON
- CVE-2026-76727Authenticated Command Injection Vulnerabilities in HPE Networking Instant ONHewlett Packard Enterprise (HPE) Instant ON
- CVE-2026-76726Authentication Bypass Leading to Unauthorized Network Access in HPE Networking Instant ON API EndpointHewlett Packard Enterprise (HPE) Instant ON
- CVE-2026-61519Liberu CRM 0.9.1 < 10.0.0 Broken Access Control via TeamPolicy::addTeamMember()Liberu Software Liberu CRM
- CVE-2026-102831JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboardjupyterlab · notebook +2
- CVE-2026-102827simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291)steveukx git-js · simple-git
- CVE-2026-102826simple-git allows command execution through unblocked Git configuration includessteveukx git-js · simple-git
- CVE-2026-102823russh: Client-side channel-scoped Handler callbacks fire for channel IDs the client never openedEugeny russh · russh
- CVE-2026-84414IBM i is Affected By An Incorrect Permission Assignment Vulnerability in Network Authentication Service []IBM i
- CVE-2026-102730Out-of-bounds Write via NAND Metadata Parsing at Mount in LevelXEclipse Foundation Eclipse ThreadX LevelX
- CVE-2026-102639MobilityDB through 1.3.0 Out-of-bounds Read DoS via WKB DeserializationMobilityDB
- CVE-2026-84421DataStage on Cloud Pak for Data has several vulnerabilitiesIBM DataStage on Cloud Pak for Data
- CVE-2026-84422IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
- CVE-2026-102726Unbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds ReadEclipse Foundation Eclipse ThreadX NetX Duo
- CVE-2026-84440IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
- CVE-2026-102725Out-of-bounds Read from Unvalidated MSRP Attribute List LengthEclipse Foundation Eclipse ThreadX NetX Duo
- CVE-2026-102724NULL pointer dereference when evicting the last MSRP attribute in a participant's listEclipse Foundation Eclipse ThreadX NetX Duo
- CVE-2026-102723NULL Pointer Dereference on MSRP Attribute Table ExhaustionEclipse Foundation Eclipse ThreadX NetX Duo
- CVE-2026-84842IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
- CVE-2026-102242Path Traversal via Symlink Following in allowedLocalRoots in MCP Toolbox for DatabasesGoogle MCP Toolbox for Databases
- CVE-2026-102718Out-of-bounds read in the NetX Duo SNMP OID parser via a multi-byte BER lengthEclipse Foundation Eclipse ThreadX NetX Duo
- CVE-2026-102716A malformed Session header permanently orphans one packet-pool block per RTSP requestEclipse Foundation Eclipse ThreadX NetX Duo
- CVE-2026-102677Electron: Sandboxed preload code cache can be poisoned by a compromised rendererelectron
- CVE-2026-102715mDNS string cache accepts a shorter name as a match for a longer stored one, so the known-answer encoder writes past the transmit packetEclipse Foundation Eclipse ThreadX NetX Duo
- CVE-2026-102714ICMPv6 option validation accepts a trailing byte residue, sending the Router Advertisement, Neighbor Solicitation, Neighbor Advertisement…Eclipse Foundation Eclipse ThreadX NetX Duo
- CVE-2026-102713Unbounded DATA datagram in the NetX Duo TFTP server causes an out-of-bounds read and a permanent stallEclipse Foundation Eclipse ThreadX NetX Duo
- CVE-2026-102710In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, built with TX_ENABLE_EVENT_TRACE, the Module Manager lets a user-mode…Eclipse Foundation Eclipse ThreadX
- CVE-2026-102709In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the four non-secure-callable secure stack functions of the TrustZone-M ports…Eclipse Foundation Eclipse ThreadX
- CVE-2026-102762The NetX Duo MQTT client leaks the packet carrying a malformed PUBLISH message.Eclipse Foundation NetX Duo
- CVE-2026-95380Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute Google Chrome
- CVE-2026-95326Incomplete cleanup in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass syGoogle Chrome
- CVE-2026-95319Use after free in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potGoogle Chrome
- CVE-2026-95334Incorrect reference resolution in WebProtect in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the rendeGoogle Chrome
- CVE-2026-95278Missing authorization in WakeLock in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer processGoogle Chrome
- CVE-2026-95285Missing authorization in WebView in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renGoogle Chrome
- CVE-2026-95333Use after free in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox viGoogle Chrome
- CVE-2026-95344Race condition in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass site isGoogle Chrome
- CVE-2026-95354Use after free in Verifier in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potGoogle Chrome
- CVE-2026-95341Improper input validation in Desktop in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer procGoogle Chrome
- CVE-2026-95353Use after free in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox viGoogle Chrome
- CVE-2026-95314Incorrect authorization in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process toGoogle Chrome
- CVE-2026-95276Improper input validation in Themes in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer proceGoogle Chrome
- CVE-2026-95345Use after free in Actor in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via aGoogle Chrome
- CVE-2026-95376Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57 allowed an adjacent attacker leveraging social engineeriGoogle Chrome
- CVE-2026-95369Inappropriate implementation in XML in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code Google Chrome
- CVE-2026-95362Cross-site request forgery in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to byGoogle Chrome
- CVE-2026-95381Improper input validation in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer proGoogle Chrome
- CVE-2026-95351Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to executGoogle Chrome
- CVE-2026-95306Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crGoogle Chrome
- CVE-2026-95304Out of bounds write in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox viaGoogle Chrome
- CVE-2026-95280Race condition in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crGoogle Chrome
- CVE-2026-95343Use after free in WebAudio in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox viGoogle Chrome
- CVE-2026-95365Type confusion in IndexedDB in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code inside tGoogle Chrome
- CVE-2026-95286Type confusion in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox viGoogle Chrome
- CVE-2026-95338Use after free in PDFium in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via Google Chrome
- CVE-2026-95335Use after free in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentiaGoogle Chrome
- CVE-2026-95348Use after free in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to poGoogle Chrome
- CVE-2026-95373Use after free in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to execute arbitrGoogle Chrome
- CVE-2026-95282Use after free in Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox viGoogle Chrome
- CVE-2026-95274Improper output encoding in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer procGoogle Chrome
- CVE-2026-95372Use after free in Chromecast in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to pGoogle Chrome
- CVE-2026-95298Use after free in Browser in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside theGoogle Chrome
- CVE-2026-95315Use after free in Aura in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside the saGoogle Chrome
- CVE-2026-95355Incorrect authorization in Navigation in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker who had compromised the reGoogle Chrome
- CVE-2026-95301Missing authorization in Extensions in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer proceGoogle Chrome
- CVE-2026-95322Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer Google Chrome
- CVE-2026-102760When NetX Secure is built with `NX_SECURE_KEY_CLEAR`, every TLS record sent on an active session is wiped after it has been handed to TCP.Eclipse Foundation NetX Duo
- CVE-2026-102758The `_nx_secure_x509_asn1_tlv_block_parse()` function parses ASN.1 TLV (tag-length-value) blocks out of DER-encoded data.Eclipse Foundation NetX Duo
- CVE-2026-102757An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing, in privileged mode,Eclipse Foundation ThreadX
- CVE-2026-102811Marmite through 0.4.2 Unauthenticated API Access via Development Serverrochacbruno marmite
- CVE-2026-102810Marmite through 0.4.2 Path Traversal via Development Serverrochacbruno marmite
- CVE-2026-102809PX4 Autopilot through 1.17.0 Stack Exhaustion via tests file2 CommandPX4-Autopilot
- CVE-2026-102808PX4 Autopilot through 1.17.0 NULL Pointer Dereference via sd_stressPX4-Autopilot
- CVE-2026-102560Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growthRed Hat Enterprise Linux
- CVE-2026-102559Libsoup: libsoup: heap buffer overflow during websocket client-frame maskingRed Hat Enterprise Linux
- CVE-2026-102558Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growthRed Hat Enterprise Linux
- CVE-2026-102555Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decodingRed Hat Enterprise Linux
- CVE-2026-102424Joomla Extension - balbooa.com - Unauthenticated path traversal exfiltrates local files through auto-reply attachments in Balbooa Forms < 2.4.3.4balbooa.com Balbooa Forms extension for Joomla
- CVE-2026-101127Joomla Extension - balbooa.com - Unauthenticated upload filename stored XSS in Balbooa Forms < 2.4.3.4balbooa.com Balbooa Forms extension for Joomla
- CVE-2026-102676Electron: <webview> can enable Node.js integration in Web Workers despite embedder restrictionselectron
- CVE-2026-102796Unauthenticated SQL injection in UserPageViewTracker via filterusers and ignoreusers parametersWikimedia Foundation Mediawiki - UserPageViewTracker Extens…
- CVE-2026-102675Electron: File and HTTP protocol handlers allow cross-origin reads without corsEnabledelectron
- CVE-2026-102674Electron: Windows opened from a sandboxed top-level document do not inherit its sandbox restrictionselectron
- CVE-2026-100244CentralAuth exposes locally suppressed block information via globaluserinfo API and Special:CentralAuth (incomplete fix for CVE-2025-62669)Wikimedia Foundation Mediawiki - CentralAuth Extension
- CVE-2026-102697Ollama 0.14.0 before 0.31.2 Experimental Agent Bash Approval Bypass via Prefix-Based Authorizationollama
- CVE-2026-90915Joomla! Core - [20260905] - Core - Arbitrary directory deletion via cache purge action in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3Joomla! Project Joomla! CMS · joomla
- CVE-2026-92226Joomla! Core - [20260913] - Core - Improper ACL checks for varous webservice edit tasks in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3Joomla! Project Joomla! CMS · joomla
- CVE-2026-92231Joomla! Core - [20260915] - Core - XSS filter bypass in InputFilter via HTML5 entity decode mismatch in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3Joomla! Project Joomla! CMS · Joomla! Project Joomla! Fr… +1
- CVE-2026-100242DataTransfer depends on phpspreadsheet version vulnerable to CVE-2026-59933 (XLS/OLE memory exhaustion)Wikimedia Foundation Mediawiki - DataTransfer Extension
- CVE-2026-92222Joomla! Core - [20260909] - Core - SSRF vectors in various core extensions in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3Joomla! Project Joomla! CMS · joomla
- CVE-2026-102673Electron drops inherited HTML sandbox restrictions for popups opened through OpenURLFromTabelectron
- CVE-2026-92227Joomla! Core - [20260914] - Core - MFA Authentication Bypass through rememberme cookies in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3Joomla! Project Joomla! CMS · joomla
- CVE-2026-92232Joomla! Core - [20260916] - Core - XSS filter bypass in InputFilter via whitespace characters in HTML data URIs in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3Joomla! Project Joomla! CMS · Joomla! Project Joomla! Fr… +1
- CVE-2026-100241Private change tags exposed to anonymous users via revision-tags-change eventsWikimedia Foundation Mediawiki - EventBus Extension
- CVE-2026-90913Joomla! Core - [20260903] - Core - Improper ACL checks for access level webservice endpoints in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3Joomla! Project Joomla! CMS · joomla
- CVE-2026-102557Libsoup: libsoup: heap buffer overflow during websocket message reassemblyRed Hat Enterprise Linux
- CVE-2026-102556Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusionRed Hat Enterprise Linux
- CVE-2026-102634SGLang through 0.5.20 Denial of Service via Duplicate bootstrap_roomsgl-project sglang
- CVE-2026-102633libexpat 2.7.2 through 2.8.5 Integer Overflow in expat_realloclibexpat
- CVE-2022-51019Akaunting before 2.1.31 OS Command Injection via app aliasakaunting
- CVE-2026-100288Cleartext storage of sensitive information in the database in Devolutions Server 2026.3.5.0 and earlier allows an attacker with read access Devolutions Server
- CVE-2026-92370Remote Session Access Control Bypass Leading to Remote Code ExecutionTeamViewer Full Client · TeamViewer Host
- CVE-2026-92371Local Privilege Escalation via Improper Link Resolution in Cloud Session RecordingTeamViewer Full Client · TeamViewer Host
- CVE-2026-92368Heap-Based Buffer Overflow in TeamViewer Session Recording Playback Leads to Remote Code ExecutionTeamViewer Full Client · TeamViewer Host
- CVE-2026-92369Time-of-check Time-of-use (TOCTOU) Race Condition in TeamViewer Windows Installer Rollback Mechanism Leads to Local Privilege EscalationTeamViewer Full Client · TeamViewer Host
- CVE-2026-19743Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) in TeamViewer Desktop ClientsTeamViewer Full Client · TeamViewer Host
- CVE-2026-97689urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memoryurllib3
- CVE-2026-84784QUIC: Unbounded RETIRE_CONNECTION_ID BacklogOpenSSL
- CVE-2026-84783Use-After-Free in X.509 Extension Cache Under Concurrent UseOpenSSL
- CVE-2026-84782DTLS Retransmits Handshake Messages From a Stale Buffer OffsetOpenSSL
- CVE-2026-72897Out-of-Bounds Access After SSL_set_SSL_CTX() During a HandshakeOpenSSL
- CVE-2026-54873QUIC STREAM Fragment Metadata DoSOpenSSL
- CVE-2026-97687urllib3: HTTPS proxy TLS configuration may be ignored or overriddenurllib3
- CVE-2026-102600Socket.IO: Prototype Pollution via Unsafe Client Session Lookupsocketio socket.io · @socket.io cluster-engine +1
- CVE-2026-100308GluonTS arbitrary command execution during model deserializationAWS gluonts
- CVE-2026-68911Nicotine+: Decompression of peer messages can exhaust available memorynicotine-plus
- CVE-2026-63209Integer Overflow or Wraparound and Out-of-bounds Write in compressklauspost compress · github.com/klauspost/compress
- CVE-2015-20122Seeyon A6 OA Unauthenticated SQL Injection via downloadAtt.jspYonyou A6 OA
- CVE-2026-86035Weblate: Mercurial argument injection via repository filenames allows authenticated command executionWeblateOrg weblate
- CVE-2026-102570ClipBucket v5 through 5.5.3-#197 SQL Injection via language_id ParameterMacWarrior clipbucket-v5
- CVE-2026-102569ClipBucket v5 through 5.5.3-#197 SQL Injection via videoid ParameterMacWarrior clipbucket-v5
- CVE-2026-102566CTranslate2 before 4.8.1 Heap Buffer Overflow via model.binOpenNMT CTranslate2
- CVE-2026-65102NVIDIA DeepStream contains a vulnerability where an attacker could cause an integer overflow by supplying crafted tensor dimensions in a YANVIDIA DeepStream
- CVE-2026-97395Apache Polaris: Allows authorized table writers to redirect server-side Iceberg FileIO requests to attacker-controlled endpoints using operation-scoped storage credentialsApache Software Foundation Apache Polaris
- CVE-2026-86450Sensitive Data Exposure in Parla Auto's DetaWix Mobile Web PortalParla Auto Automotive Trading Limited Company DetaWix Mobil…
- CVE-2026-102521lib0 `readFromDataView` out-of-bounds readdmonad lib0
- CVE-2026-102360lib0 `readUint8Array` performs an unbounded read past the end of the decoder’s view, disclosing adjacent process memorydmonad lib0
- CVE-2026-4034TIBCO Administrator Injection VulnerabilityTibco Administrator
- CVE-2026-82804Apache DolphinScheduler: Command Injection in the Alert Script PluginApache Software Foundation Apache DolphinScheduler
- CVE-2026-100832Use-after-free in the Graphics: Canvas2D componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100831Use-after-free in the DOM: UI Events & Focus Handling componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100830Mitigation bypass in the DOM: Navigation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100825Use-after-free in the JavaScript Engine: JIT componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100824Privilege escalation in the Places componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100820Privilege escalation in the Address Bar componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100816Site isolation issue in the DOM: Networking componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100815Use-after-free in the CSS Parsing and Computation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100814Incorrect boundary conditions in the JavaScript Engine: JIT componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100813Invalid pointer in the JavaScript Engine: JIT componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100809Same-origin policy bypass in the DevTools componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100808Mitigation bypass in the DOM: Service Workers componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100807Privilege escalation in the DOM: Service Workers componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100805Race condition, use-after-free in the Audio/Video componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100803Same-origin policy bypass in the WebExtensions componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100801Privilege escalation in the DLL Services componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100798Cryptography misuse in Storage: Quota Manager componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100797Privilege escalation due to use-after-free in the Graphics: WebRender componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100796Use-after-free in the JavaScript: WebAssembly componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100792JIT miscompilation in the JavaScript: WebAssembly componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100791Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100790Use-after-free in the XSLT componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100789Use-after-free in the Graphics: Canvas2D componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100785Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100784Use-after-free in the Layout: Text and Fonts componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100782Privilege escalation due to incorrect boundary conditions in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100780Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100779Use-after-free in the XSLT componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100777Use-after-free in the Graphics: Canvas2D componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100776Use-after-free in the JavaScript: WebAssembly componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100774Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100773Use-after-free in the Storage: IndexedDB componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100772Use-after-free in the DOM: Core & HTML componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100771Undefined behavior in the DOM: Streams componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100769Use-after-free in the JavaScript: WebAssembly componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100768Use-after-free in the Graphics: WebGPU componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100767Use-after-free in the Networking: Cache componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100765Use-after-free in the JavaScript: WebAssembly componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100764Privilege escalation due to incorrect boundary conditions in the Graphics: WebGPU componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100761Privilege escalation due to use-after-free in the Graphics: WebGPU componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100759Uninitialized memory in the Storage: Quota Manager componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100757Use-after-free in the Widget componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100756Incorrect boundary conditions in the Audio/Video: Playback componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-7193Multiple vulnerabilities in the T-CPE301K 4G Mini WiFi Router from Shenzhen Dbit Network EquipmentShenzhen Dbit Network Equipment T-CPE301K 4G Mini WiFi Rout…
- CVE-2026-102437Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in DeepSeek-Reasonixesengine DeepSeek-Reasonix
- CVE-2026-98164KVM: x86/mmu: Check write tracking in all address spacesLinux
- CVE-2026-73598Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical ResDell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-87748Privilege Escalation via Account Takeover in Interprobe's Qorela DCInterprobe Information Technologies Qorela DC
- CVE-2026-102497Apache XMLSchema: Denial of service through cyclic schema definitions in the schema walkerApache Software Foundation Apache XMLSchema
- CVE-2026-102496Apache XMLSchema: Denial of service through deeply nested schema structuresApache Software Foundation Apache XMLSchema
- CVE-2026-102495Apache XMLSchema: Denial of service through unbounded recursion when resolving schema imports and includesApache Software Foundation Apache XMLSchema
- CVE-2026-95520Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packagesRed Hat Enterprise Linux · Red Hat Hardened Images +1
- CVE-2026-95509Out-of-bounds read vulnerability in string formatting impacts Qt for MCUsQt for MCUs
- CVE-2026-19547Local Privilege Escalation in Ghostscript for WindowsArtifex Software Ghostscript
- CVE-2026-76719HPE OneView - Cross-site scripting vulnerabilityHewlett Packard Enterprise HPE OneView
- CVE-2026-76718HPE OneView - Cross-site scripting vulnerabilityHewlett Packard Enterprise HPE OneView
- CVE-2026-7395Asset Suite allows unauthenticated users to access HTTPPublishAdapterTestServlet that can be used for configuration file upload, leading to Hitachi Energy Asset Suite
- CVE-2026-84739Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabGitLab
- CVE-2026-95389Heap-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-95387Heap-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-96440Flowring Agentflow 4.0 - Improper Limitation of a Pathname to a Restricted Directory（Path Traversal）Flowring Technology Agentflow
- CVE-2026-92142Apache Karaf: Authorization bypass in JMX MBean lifecycle operationsApache Software Foundation Apache Karaf
- CVE-2026-96430Flowring Agentflow 4.0 - Exposed Dangerous Method or FunctionFlowring Technology Agentflow
- CVE-2026-101169In affected versions of Octopus Server, an authenticated user with permissions to edit an Environment or Project can set specifically crafteOctopus Deploy Octopus Server
- CVE-2026-86158Missing Authentication in the local .NET backend of Progress Telerik Fiddler EverywhereProgress Software Progress® Telerik® Fiddler® Everywhere
- CVE-2026-102422shell-quote `quote()` command injection via a line terminator in a token after a `{ comment }` tokenshell-quote
- CVE-2026-97024Flatpak: flatpak: arbitrary write in root context via path traversal in deploy directory files/etcRed Hat Enterprise Linux
- CVE-2026-102247FastAdmin Database Management database.php unnecessary privilegesFastAdmin
- CVE-2026-97685LimeSurvey Community Edition 7.3.0 - Cross-survey object authorization bypass in REST survey patch operationsLimeSurvey
- CVE-2026-101878Bitwarden Server 2025.6.0 < 2025.6.0 Authentication Bypass via SSO Identifier Truncationbitwarden server
- CVE-2026-101860RaspAP raspap-webgui sudo Configuration PluginInstaller.php addSudoers privileges managementraspap-webgui
- CVE-2026-96326HT Contact Form – Drag & Drop Form Builder for WordPress <= 2.10.2 Unauthenticated Stored Cross-Site Scripting via Rich Text Editor Fieldhtplugins HT Contact Form – Drag & Drop Form Builder for Wo…
- CVE-2026-102373GestSup before 3.2.62 Private Ticket Comment Disclosure via threadedit ParameterGestSup
- CVE-2026-67987crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains polynomial-time regular expression denial-of-service conditions i
- CVE-2026-67993basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f contains a login cross-site request forgery issue in the static credenti
- CVE-2026-79403An issue in Kilo Code before v7.4.1 allows a local attacker to execute arbitrary code via the permission/allow-everything endpoint
- CVE-2026-94953A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030.
- CVE-2026-94954A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030.
Medium, low and unrated 261
- CVE-2026-103051Stored i18n XSSs in CentralNoticeThe Wikimedia Foundation Mediawiki - CentralNotice extension
- CVE-2026-103050Stored i18n XSS in MassMessageThe Wikimedia Foundation Mediawiki - MassMessage extension
- CVE-2026-103049XSS in Cargo's Special:CargoQuery page due to unsanitized table headersThe Wikimedia Foundation Mediawiki - Cargo extension
- CVE-2026-86105Fireware OS Improper Authorization in Access Portal Reverse ProxyWatchGuard Fireware OS
- CVE-2026-103048Open Redirect in Special:BookThe Wikimedia Foundation Mediawiki - Collection extension
- CVE-2026-103047XSS through i18n message in CentralAuthThe Wikimedia Foundation Mediawiki - CentralAuth extension
- CVE-2026-103045XSS in Refreshed skinThe Wikimedia Foundation Mediawiki - Refreshed skin
- CVE-2026-103046WikifunctionsFragmentRenderer does unsafe string replacements on user-provided HTMLThe Wikimedia Foundation Mediawiki - WikiLambda Extension
- CVE-2026-102771Naichen ThinkCMF Email Template MailController.php templatePut special elements in template engineNaichen ThinkCMF
- CVE-2026-71189Toptech TMS7 and TopHAT Cross-site ScriptingToptech Systems TMS7 · Toptech Systems TopHAT
- CVE-2026-69662Toptech TMS7 and TopHAT Eval InjectionToptech Systems TMS7 · Toptech Systems TopHAT
- CVE-2026-102621Freedesktop Poppler SplashClip.cc clipToPath integer overflowFreedesktop Poppler
- CVE-2026-71974U-Boot before 2026.10-rc3 Out-of-Bounds Write via Android Bootmeth Partition Readu-boot
- CVE-2026-71973U-Boot before 2026.10-rc4 Integer Overflow in SquashFS Directory Table Allocationu-boot
- CVE-2026-71972U-Boot through 2026.10-rc5 Out-of-Bounds Write in BMP RLE8 Decoderu-boot
- CVE-2026-102938virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injectionpypa virtualenv · virtualenv
- CVE-2026-81842Library panel can be moved into a folder without library panel create permissionGrafana Enterprise · Grafana OSS
- CVE-2026-102904JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLsjupyterlab
- CVE-2026-81841Paused shared dashboard access tokens still expose data source configurationGrafana Enterprise · Grafana OSS
- CVE-2026-102620Freedesktop Poppler FoFiTrueType.cc cvtSfnts integer overflowFreedesktop Poppler
- CVE-2026-102879ClaraVerse through 0.3.1 SSRF Protection Bypassclaraverse-space ClaraVerse
- CVE-2026-102877Fider before 0.38.0 SSRF via DNS rebinding in webhook validationgetfider fider
- CVE-2026-100299Use of Weak Credentials in Anjvision YSSD-RTMP-H5Anjvision YSSD-RTMP-H5
- CVE-2026-100297Server-Side request forgery (SSRF) in Anjvision YSSD-RTMP-H5Anjvision YSSD-RTMP-H5
- CVE-2026-102305UI misrepresentation in SignIn in Google Chrome on on iOS prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafteGoogle Chrome
Show all 261 entriesShow fewer entries
- CVE-2026-102314UI misrepresentation in TabStrip in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafted HTML pGoogle Chrome
- CVE-2026-102330Incorrect authorization in SiteIsolation in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer Google Chrome
- CVE-2026-102310Missing authorization in Payments in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer processGoogle Chrome
- CVE-2026-102320Missing authorization in CORS in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to Google Chrome
- CVE-2026-102315Uninitialized resource in Media in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker who had compromised the rendGoogle Chrome
- CVE-2026-102329Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin policy into a privilegeGoogle Chrome
- CVE-2026-102318Out of bounds read in WebGL in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a craftGoogle Chrome
- CVE-2026-102319Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to Google Chrome
- CVE-2026-102325Uninitialized resource in Skia in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HGoogle Chrome
- CVE-2026-102300Uninitialized resource in WebGPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a craftedGoogle Chrome
- CVE-2026-102311Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderGoogle Chrome
- CVE-2026-102303Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data viGoogle Chrome
- CVE-2026-102307Uninitialized resource in Dawn in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to read memory outside the saGoogle Chrome
- CVE-2026-102313Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sGoogle Chrome
- CVE-2026-102312UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to spoof address bar via a cGoogle Chrome
- CVE-2026-100295Active debug code in Anjvision YSSD-RTMP-H5Anjvision YSSD-RTMP-H5
- CVE-2026-53989Dockhand < 1.0.36 Open Redirect via OIDC Initiation EndpointFinsys dockhand
- CVE-2026-102252Path Traversal in VMDK Extractor in OSV-SCALIBRGoogle OSV-SCALIBR
- CVE-2026-76738Authenticated Buffer Overflow Vulnerability in the API Endpoint of HPE Networking Instant On Causes Denial-of-ServiceHewlett Packard Enterprise (HPE) Instant ON
- CVE-2026-76737Authenticated Local Path Traversal Vulnerability Leads to Denial-of-Service in HPE Networking Instant OnHewlett Packard Enterprise (HPE) Instant ON
- CVE-2026-76736Authenticated Local Buffer Overflow Vulnerability leads to Denial-of-Service in HPE Networking Instant OnHewlett Packard Enterprise (HPE) Instant ON
- CVE-2026-76735Authenticated Local Sensitive Information Disclosure in HPE Networking Instant OnHewlett Packard Enterprise (HPE) Instant ON
- CVE-2026-76734Unauthenticated Memory Corruption Vulnerability leads to Denial-of-Service in HPE Networking Instant OnHewlett Packard Enterprise (HPE) Instant ON
- CVE-2026-76733Authenticated Denial-of-Service Vulnerability in HPE Networking Instant On API EndpointHewlett Packard Enterprise (HPE) Instant ON
- CVE-2026-76732Authenticated Local Privilege Escalation Vulnerability in a Daemon of HPE Networking Instant ONHewlett Packard Enterprise (HPE) Instant ON
- CVE-2026-76731Authentication Bypass in the Captive Portal of HPE Networking Instant OnHewlett Packard Enterprise (HPE) Instant ON
- CVE-2026-76730Improper PAPI Packet handling leads to unauthorized access in HPE Networking Instant ON APsHewlett Packard Enterprise (HPE) Instant ON
- CVE-2026-76729Authenticated Format String Vulnerability allows Memory Corruption in HPE Networking Instant ON API EndpointHewlett Packard Enterprise (HPE) Instant ON
- CVE-2026-102830JupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package (jupyterlab.json)jupyterlab · jupyterlite-core
- CVE-2026-102616risesoft-y9 WorkFlow-Engine OAuth2 Resource Filter CustomHistoricProcessServiceImpl.java getByIdAndYear sql injectionrisesoft-y9 WorkFlow-Engine
- CVE-2026-102825Russh: Configured server auth-attempt cap is not enforced in the USERAUTH_REQUEST runtime pathEugeny russh · russh
- CVE-2026-102824Russh: Missing X25519 zero-point validation in hybrid ML-KEM key exchangeEugeny russh · russh
- CVE-2026-102822russh: negotiating a MAC-requiring block cipher (CTR/CBC) with mac=none causes a slice-index-out-of-range panicEugeny russh · russh
- CVE-2026-102821Russh: Unbounded memory exhaustion via CHANNEL_OPEN flood during a client-stalled rekeyEugeny russh · russh
- CVE-2026-102820pageant: Out-of-bounds read / oversized allocation in `pageant` MemoryMap::read via a malicious Pageant agent (Windows)Eugeny russh · rust pageant +1
- CVE-2026-102729`gx_binres_theme_load()` sizes its theme buffer for the theme it was asked for, and allocates it even when the resource holds no theme with Eclipse Foundation GUIX
- CVE-2026-102727FTP Passive Data Connection Not Bound to the Authenticated Control PeerEclipse Foundation Eclipse ThreadX NetX Duo
- CVE-2026-102728Out-of-bounds reads in NetX Secure client-side handshake parsing (ServerHello and HelloVerifyRequest)Eclipse Foundation Eclipse ThreadX NetX Duo
- CVE-2026-102722The FTP client trusts arbitrary IP addresses in the PASV server responseEclipse Foundation Eclipse ThreadX NetX Duo
- CVE-2026-102721TFTP client and server copy the ERROR packet message without bounding the read against the packetEclipse Foundation Eclipse ThreadX NetX Duo
- CVE-2026-102720DHCP client option walk drifts one byte per skipped option, reading past the received message and past the saved options bufferEclipse Foundation Eclipse ThreadX NetX Duo
- CVE-2026-12345Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directoryPython Software Foundation CPython · libpython +2
- CVE-2026-102719NetX Secure DTLS server issues predictable HelloVerifyRequest cookies, so a spoofed client can pass the return-routability checkEclipse Foundation Eclipse ThreadX NetX Duo
- CVE-2026-102712Out-of-bounds read in the NetX Secure DTLS ClientHello parserEclipse Foundation Eclipse ThreadX NetX Duo
- CVE-2026-102711Out-of-bounds Read and Unverified Entry Pointers in the ThreadX Module LoaderEclipse Foundation Eclipse ThreadX
- CVE-2026-95305UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof Google Chrome
- CVE-2026-95364Improper input validation in Passwords in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted Google Chrome
- CVE-2026-95340Incorrect authorization in PictureInPicture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering Google Chrome
- CVE-2026-95328Confused deputy in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker leveraging social engineering to obGoogle Chrome
- CVE-2026-95316Unchecked return value in Performance in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially read memory via a locaGoogle Chrome
- CVE-2026-95296Missing authorization in Core in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to oGoogle Chrome
- CVE-2026-95342Missing authorization in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted HTMLGoogle Chrome
- CVE-2026-95288UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafteGoogle Chrome
- CVE-2026-95361Confused deputy in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web orGoogle Chrome
- CVE-2026-95309UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafteGoogle Chrome
- CVE-2026-95368Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potenGoogle Chrome
- CVE-2026-95385Inappropriate implementation in PlatformIntegration in Google Chrome on on Windows prior to 154.0.8037.57 allowed a remote attacker leveragiGoogle Chrome
- CVE-2026-95367Information leak in DataTransfer in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process Google Chrome
- CVE-2026-95279UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to spoof address bar via a cGoogle Chrome
- CVE-2026-95352Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypasGoogle Chrome
- CVE-2026-95292Incorrect authorization in Safebrowsing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictioGoogle Chrome
- CVE-2026-95308Integer overflow in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-95327Information leak in Networking in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to leak sensitive information via a craftedGoogle Chrome
- CVE-2026-95307UI misrepresentation in ExtensionsMenu in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spGoogle Chrome
- CVE-2026-95358Incorrect authorization in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to bypass system access resGoogle Chrome
- CVE-2026-95289Incorrect authorization in Scroll in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain Google Chrome
- CVE-2026-95312Information leak in Passwords in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to Google Chrome
- CVE-2026-95332Use of uninitialized variable in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to read memory outsideGoogle Chrome
- CVE-2026-95323UI misrepresentation in Chromium in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering tGoogle Chrome
- CVE-2026-95321UI misrepresentation in Payments in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a Google Chrome
- CVE-2026-95300Missing authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass Google Chrome
- CVE-2026-95374Incorrect authorization in Network in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a craftGoogle Chrome
- CVE-2026-95275Incorrect reference resolution in MediaStream in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy Google Chrome
- CVE-2026-95290Missing authorization in NFC in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bGoogle Chrome
- CVE-2026-95336Information leak in Transactions Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering toGoogle Chrome
- CVE-2026-95384Race condition in Transactions Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially leak sensitive infoGoogle Chrome
- CVE-2026-95363UI misrepresentation in FileSystem in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof Google Chrome
- CVE-2026-95371Missing authorization in Views in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer Google Chrome
- CVE-2026-95295Information leak in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a local attacker to leak sensitive information via physGoogle Chrome
- CVE-2026-95360Race condition in Editing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain sensitivGoogle Chrome
- CVE-2026-95303Incomplete cleanup in SmartCard in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass syGoogle Chrome
- CVE-2026-95370Inappropriate implementation in NFC in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions vGoogle Chrome
- CVE-2026-95330Improper state validation in Downloads in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictionGoogle Chrome
- CVE-2026-95317Incorrect authorization in MediaCapture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to oGoogle Chrome
- CVE-2026-95320Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer proceGoogle Chrome
- CVE-2026-95346UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via crafted networGoogle Chrome
- CVE-2026-95337UI misrepresentation in Messages in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker leveraging social engineeriGoogle Chrome
- CVE-2026-95294UI misrepresentation in Browser in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI Google Chrome
- CVE-2026-95359Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderGoogle Chrome
- CVE-2026-95302Incorrect authorization in WebAPKs in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to obtain cross-origin datGoogle Chrome
- CVE-2026-95375Incorrect authorization in BrowserTag in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer proGoogle Chrome
- CVE-2026-95297Missing authorization in Contextual Tasks in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via Google Chrome
- CVE-2026-95382Improper input validation in Auth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer processGoogle Chrome
- CVE-2026-95366Use of released resource in Core in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process Google Chrome
- CVE-2026-95287Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer proceGoogle Chrome
- CVE-2026-95293Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to read memory outside the sandbox via a…Google Chrome
- CVE-2026-95324Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process…Google Chrome
- CVE-2026-95291UI misrepresentation in SecurityIndicators in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof address bar Google Chrome
- CVE-2026-102759NetX Secure TLS accepts an empty application-data record without verifying its message authentication code.Eclipse Foundation NetX Duo
- CVE-2026-102807OpenClaw before 2026.9.4 Authorization Bypass via MCP App Standalone TicketOpenClaw
- CVE-2026-102806OpenClaw before 2026.9.5 Sandbox Isolation Bypass via Media PipelinesOpenClaw
- CVE-2026-102623Kubevirt: kubevirt: virt-controller nil-pointer dereference via malformed ephemeral volumeRed Hat OpenShift Virtualization
- CVE-2026-101126Joomla Extension - balbooa.com - File meta data tampering in Balbooa Forms < 2.4.3.4balbooa.com Balbooa Forms extension for Joomla
- CVE-2026-101112Joomla Extension - balbooa.com - Unauthorized Deletion of Attachments in Balbooa Forms < 2.4.3.4balbooa.com Balbooa Forms extension for Joomla
- CVE-2026-100245Stored XSS on Wikibase Special:SetSiteLink via unescaped system messageWikimedia Foundation Mediawiki - Wikibase Extension
- CVE-2026-92224Joomla! Core - [20260911] - Core - XSS in link toolbar layout in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3Joomla! Project Joomla! CMS · joomla
- CVE-2026-90907Joomla! Core - [20260902] - Core - Unauthorized user account creation via profile.save controller in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3Joomla! Project Joomla! CMS · joomla
- CVE-2026-100243Stored XSS in WikiSEO author and image properties on action=infoWikimedia Foundation Mediawiki - WikiSEO Extension
- CVE-2026-90914Joomla! Core - [20260904] - Core - XSS in the generic media output layouts in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3Joomla! Project Joomla! CMS · joomla
- CVE-2026-90918Joomla! Core - [20260908] - Core - XSS in HTML Mail Templates in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3Joomla! Project Joomla! CMS · joomla
- CVE-2026-92223Joomla! Core - [20260910] - Core - Improper ACL checks for workflow stage changes in Joomla 5.0.0-5.4.8, 6.0.0-6.1.3Joomla! Project Joomla! CMS · joomla
- CVE-2026-90917Joomla! Core - [20260907] - Core - Improper ACL checks in outputs for tagged items in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3Joomla! Project Joomla! CMS · joomla
- CVE-2026-92225Joomla! Core - [20260912] - Core - XSS in module list in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3Joomla! Project Joomla! CMS · joomla
- CVE-2026-90916Joomla! Core - [20260906] - Core - Improper ACL checks in content history comparison view in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3Joomla! Project Joomla! CMS · joomla
- CVE-2026-90906Joomla! Core - [20260901] - XSS in HTMLHelper::link method in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3Joomla! Project Joomla! CMS · joomla
- CVE-2026-100238Flow colon-separator and flow-guidedtour-optin-welcome-description messages allow stored XSSWikimedia Foundation Mediawiki - Flow Extension
- CVE-2026-102635ImageMagick before 7.1.2-32 and 6.9.13-57 Uninitialized Heap Memory Disclosure in GIF DecoderImageMagick
- CVE-2026-97711Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script> in serialized function bodiesyahoo serialize-javascript · serialize-javascript
- CVE-2026-100289Missing authorization in the gateway network scan token API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileDevolutions Server
- CVE-2026-102630UnoPim 2.0.0 before 2.0.1 and 2.1.0 before 2.1.1 Cache Poisoning via X-Forwarded-Hostunopim
- CVE-2026-100287Missing authorization in the attachment history API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileged userDevolutions Server
- CVE-2026-100286Missing authorization in the data source settings API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated non-administrativDevolutions Server
- CVE-2026-77696Timing Side-Channel in SM2 Signature GenerationOpenSSL
- CVE-2026-75806Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoSOpenSSL
- CVE-2026-75805NULL Pointer Dereference in CMP Client Revocation Response HandlingOpenSSL
- CVE-2026-75804QUIC Connection-Level Flow Control is Not Enforced for StreamsOpenSSL
- CVE-2026-97688urllib3: Chunked Deflate streaming can enter an infinite loopurllib3
- CVE-2026-54875Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-VOpenSSL
- CVE-2026-54872Timing Side-Channel in Scalar Multiplication for Non-NIST EC CurvesOpenSSL
- CVE-2026-42772Potential CPU DoS via O(n^2) Fragment Reassembly in QUICOpenSSL
- CVE-2026-35191QUIC Unvalidated Amplification Credit may be Over AccountedOpenSSL
- CVE-2026-35189Excessive Memory Allocation in Relative CRLDP ProcessingOpenSSL
- CVE-2026-93332Improper access control in the partial connection API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileged usDevolutions Server
- CVE-2026-102601Flysystem: WhitespacePathNormalizer's control-character (CorruptedPathDetected) check is bypassed by malformed UTF-8 in the path, affecting every adapterthephpleague flysystem · league/flysystem
- CVE-2026-93330Improper rule enforcement in the PAM Active Directory provider in Devolutions Server 2026.3.5 allows a user with PAM edit permissions to bypDevolutions Server
- CVE-2026-102598Werkzeug safe_join() allows Windows special device namespallets werkzeug · werkzeug
- CVE-2026-102491mahonelau kykms SqlInjectionUtil QueryGenerator.java QueryGenerator.doMultiFieldsOrder sql injectionmahonelau kykms
- CVE-2026-22101Sensitive information leak through hidden menuEVbee DC-80
- CVE-2026-102568Pardus Parental Control before 0.7.0 Incorrect Authorization via PPCActivator.pypardus-parental-control
- CVE-2026-102567CTranslate2 before 4.8.1 Out-of-Bounds Read via Model DeserializationOpenNMT CTranslate2
- CVE-2025-33207NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access controlNVIDIA BlueField GA · NVIDIA BlueField LTS23 +5
- CVE-2026-102371wsl-pro-service: Ubuntu Pro token exposed via process command-line argumentsCanonical Ubuntu Pro for WSL
- CVE-2026-71897Apache DolphinScheduler: Allows unauthorized workflow operations through batch-copy and batch-move endpointsApache Software Foundation Apache DolphinScheduler
- CVE-2026-71898Apache DolphinScheduler: Improper Authorization Allows Project Read-Only Users to Execute Workflows and Tamper with Workflow DefinitionsApache Software Foundation Apache DolphinScheduler
- CVE-2026-71899Apache DolphinScheduler: Missing Authorization in query-dynamic-sub-workflows API Leads to Information DisclosureApache Software Foundation Apache DolphinScheduler
- CVE-2026-78214Apache DolphinScheduler: Actuator Endpoint Authentication Bypass via Percent-Encoded PathsApache Software Foundation Apache DolphinScheduler
- CVE-2026-81569Apache DolphinScheduler: Improper Authorization in Sub-Workflow Tasks Allows Unauthorized Workflow ExecutionApache Software Foundation Apache DolphinScheduler
- CVE-2026-76875PyPy pyexpat ExternalEntityParserCreate Use-After-FreePyPy
- CVE-2026-100826Denial-of-service in the Storage: StorageManager componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100823Spoofing issue in the Downloads component in Firefox for AndroidMozilla Firefox
- CVE-2026-100822Spoofing issue in the Networking: HTTP componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100821Site isolation issue in the Panning and Zooming componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100817Other issue in the JavaScript: WebAssembly componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100812Denial-of-service in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100806Uninitialized memory in the Graphics: WebGPU componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100802Uninitialized memory in the Graphics: WebGPU componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100799Uninitialized memory in the Graphics: WebGPU componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100795Denial-of-service in the Networking componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-96869Information disclosure in the Networking componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100793JIT miscompilation in the JavaScript Engine componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100783Uninitialized memory in the Audio/Video componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100766Information disclosure in the Networking: JAR componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-76114Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cleartext Transmission of Sensitive Information vDell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-73599Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an URL Redirection to Untrusted Site ('Open RedirecDell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-101271OAuth credentials not disabled when application is disabledpretix
- CVE-2026-101270HTML injectionpretix
- CVE-2026-101269Incorrect session validation for API-uploaded filespretix
- CVE-2026-101268Customer session fixationpretix
- CVE-2026-101267Revenue information leakpretix
- CVE-2026-73597Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cross-Site Request Forgery (CSRF) vulnerability.Dell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-101266Checkout validation bypasspretix
- CVE-2026-73596Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure DeDell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-102507Sliver 1.7.7 Denial of Service via PE Parser Slice Bounds in Operator RPCBishopFox sliver
- CVE-2026-66083Apache DolphinScheduler: Unauthorized Disclosure of Data Source Information via /datasources/unauth-datasourceApache Software Foundation Apache DolphinScheduler
- CVE-2026-41875Cross-Site Request Forgery in admin panel of Quick.CartOpenSolution Quick.Cart
- CVE-2026-73595Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Download of Code Without Dell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-73594Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate ValDell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-73593Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Active Debug Code vulnerability.Dell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-76720HPE OneView - URL Redirect vulnerabilityHewlett Packard Enterprise HPE OneView
- CVE-2026-86843Apache Airflow Teradata provider: SQL injection via unvalidated Dag Params in the compute-cluster example DagApache Software Foundation Apache Airflow Teradata provider
- CVE-2026-81930Apache Airflow Snowflake provider: Unvalidated account field redirects SQL API bearer token off-domainApache Software Foundation Apache Airflow Snowflake provide…
- CVE-2026-81862Apache Airflow Teradata provider: Teradata transfer operators embed cloud storage credentials in SQL text, task logs and Teradata query logsApache Software Foundation Apache Airflow Teradata provider
- CVE-2026-81914Apache Airflow Google provider: Google Drive query injection via unescaped file and folder namesApache Software Foundation Apache Airflow Google provider ·…
- CVE-2026-11796Asset Suite allows unauthenticated users to access PropertiesReloadServlet, CacheFlushServlet, MetadataCacheFlushServlet and ResourceBundleRHitachi Energy Asset Suite
- CVE-2026-4523Missing Authorization in GitLabGitLab
- CVE-2026-8937Missing Authorization in GitLabGitLab
- CVE-2026-10518Incorrect Authorization in GitLabGitLab
- CVE-2026-8067An improper authorization vulnerability in the end-of-life versions of RTU500’s web application allows an authenticated user to trigger the Hitachi Energy RTU500 series CMU firmware
- CVE-2026-95391Use After Free in WiresharkWireshark Foundation Wireshark
- CVE-2026-95386Loop with Unreachable Exit Condition ('Infinite Loop') in WiresharkWireshark Foundation Wireshark
- CVE-2026-95390NULL Pointer Dereference in WiresharkWireshark Foundation Wireshark
- CVE-2026-95395Missing Release of Memory after Effective Lifetime in WiresharkWireshark Foundation Wireshark
- CVE-2026-95394Unchecked Input for Loop Condition in WiresharkWireshark Foundation Wireshark
- CVE-2026-95393Heap-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-95392Buffer Over-read in WiresharkWireshark Foundation Wireshark
- CVE-2026-95388Heap-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-96422Reachable Assertion in WiresharkWireshark Foundation Wireshark
- CVE-2026-96421Improperly Controlled Sequential Memory Allocation in WiresharkWireshark Foundation Wireshark
- CVE-2026-96417Heap-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-96418Loop with Unreachable Exit Condition ('Infinite Loop') in WiresharkWireshark Foundation Wireshark
- CVE-2026-96419Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in WiresharkWireshark Foundation Wireshark
- CVE-2026-96420Buffer Over-read in WiresharkWireshark Foundation Wireshark
- CVE-2026-96423Heap-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-96416Heap-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-96415Stack-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-102474Dash: dash: heap out-of-bounds write in conv_escape via undersized unicode escape reservationRed Hat Enterprise Linux
- CVE-2026-102473Dash: dash: super-polynomial backtracking in pmatch when libc fnmatch is disabledRed Hat Enterprise Linux
- CVE-2026-91085Apache Karaf: config:install missing ACL entry allows privilege escalation to adminApache Software Foundation Apache Karaf
- CVE-2026-86157Exposure of Privileged IPC Functionality in Progress Telerik Fiddler EverywhereProgress Software Progress® Telerik® Fiddler® Everywhere
- CVE-2026-102293realjerrytang tacomall api-admin Backend ApiMaApplication.java OrgStaffServiceImpl.add improper authorizationrealjerrytang tacomall
- CVE-2026-102292coolbeans1212 MateisHomePage-Website users.php cross site scriptingcoolbeans1212 MateisHomePage-Website
- CVE-2026-102290CodeCanyon Rocket LMS Student Profile Image Upload cross site scriptingCodeCanyon Rocket LMS
- CVE-2026-102264mwasikz robo-cafe-rms Edit Profile Feature update-account.php cross site scriptingmwasikz robo-cafe-rms
- CVE-2026-102263mwasikz robo-cafe-rms manage-food.php unrestricted uploadmwasikz robo-cafe-rms
- CVE-2026-102261owen2345 Camaleon CMS Media Crop media_controller.rb crop authorizationowen2345 Camaleon CMS
- CVE-2026-102249REBUILD file-editor-save authorizationREBUILD
- CVE-2026-97029Flatpak: flatpak: sandboxed app can signal unsandboxed processes in the same process groupRed Hat Enterprise Linux
- CVE-2026-102414pbkdf2 rehashes long passwords on every iteration, enabling denial of servicebrowserify pbkdf2 · pbkdf2
- CVE-2026-102248Rebuild Login Endpoint login improper authenticationRebuild
- CVE-2026-102245MODSetter SurfSense circleback Endpoint circleback_webhook_route.py missing authenticationMODSetter SurfSense
- CVE-2026-102244MODSetter SurfSense Document Export Feature editor_routes.py server-side request forgeryMODSetter SurfSense
- CVE-2026-102243MODSetter SurfSense MCP Connector Integration test command injectionMODSetter SurfSense
- CVE-2026-102241Netcore NAP930 Backup/Restore backup_common.sh hard-coded keyNetcore NAP930
- CVE-2026-101859RaspAP raspap-webgui OpenVPN Configuration del_ovpncfg.php escapeshellcmd os command injectionraspap-webgui
- CVE-2026-101858RaspAP raspap-webgui SSID Processing WiFiManager.php writeWpaSupplicant os command injectionraspap-webgui
- CVE-2026-101281Trusted Domain Project OpenDMARC SPF Macro opendmarc_spf.c opendmarc_sp2_find_mailfrom_domain improper authenticationTrusted Domain Project OpenDMARC
- CVE-2026-102374GestSup before 3.2.62 Stored XSS via Double-Decoded Email Subject in OAuth IMAP ConnectorGestSup
- CVE-2026-102372GestSup before 3.2.61 Stored XSS via Email Body in LOGIN IMAP ConnectorGestSup
- CVE-2026-101280Trusted Domain Project OpenDMARC Multi-Record Set opendmarc_policy_query_dmarc authentication spoofingTrusted Domain Project OpenDMARC
- CVE-2026-101279Trusted Domain Project OpenDMARC opendmarc_policy.c integer overflowTrusted Domain Project OpenDMARC
- CVE-2026-101278Trusted Domain Project OpenDMARC PSL Wildcard opendmarc_tld.c : opendmarc_get_tld origin validationTrusted Domain Project OpenDMARC
- CVE-2024-31027Cross Site Scripting vulnerability in Greek Universities Network (GUnet) Open eClass Platform v.3.15 allows a remote attacker to execute arb
- CVE-2026-79348KitchenAsty through 0.3.0 contains a broken object level authorization (IDOR) vulnerability in the reservations API.
- CVE-2026-79417Improper Access Control in ArgusMonitor.sys in Argotronic eGbR ArgusMonitor 7.4.02 and earlier allows local, low-privileged users to bypass
- CVE-2026-79534mark3labs mcp-filesystem-server v0.11.1 is vulnerable to Directory Traversal due to an improper link resolution in validatePath (filesystems
- CVE-2026-79535mbailey VoiceMode <= 8.10.1 is vulnerable to OS Command Injection.