CVEs published October 8, 2026
492 CVEs were published on October 8, 2026: 51 critical, 197 high. Browse them by severity, product and exploitation status.
- Published
- 492
- Critical
- 51
- High
- 197
- Medium
- 219
- Low
- 25
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 388
Most affected products
- Brocade Fabric OS
- 43
- IBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- 37
- IBM Guardium Data Protection
- 31
- Progressive Robot hMailServer
- 24
- IBM Security Verify Access · IBM Verify Identity Access
- 22
- Brocade Active Support Connectivity Gateway
- 14
- banq jivejdon
- 13
- sumatrapdfreader sumatrapdf
- 11
- pydantic-ai · pydantic-ai-slim
- 10
- FFmpeg
- 9
Critical 51
- CVE-2026-78663Double flow control refund on HTTP/2 server streams in net/httpGo standard library net/http · Go standard library net/h… +3
- CVE-2026-56857Root.Mkdir(All) can follow junctions out of the root on Windows in osGo standard library os · Go standard library internal/sy… +1
- CVE-2026-96207Microsoft Partner Center Elevation of Privilege VulnerabilityMicrosoft Partner Center
- CVE-2026-94510Microsoft Bookings Elevation of Privilege VulnerabilityMicrosoft Bookings
- CVE-2026-88131Microsoft Dataverse Remote Code Execution VulnerabilityMicrosoft Dataverse
- CVE-2026-77900Azure App Service Remote Code Execution VulnerabilityMicrosoft Azure App Service for Linux
- CVE-2026-69435Azure SRE Agent Elevation of Privilege VulnerabilityMicrosoft Azure SRE Agent
- CVE-2026-107726Hazelcast: Arbitrary member memory access by low-privileged clienthazelcast · com.hazelcast:hazelcast
- CVE-2026-107722fast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusionnearform fast-jwt · fast-jwt
- CVE-2026-75875Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data ProtectionIBM Guardium Data Protection
- CVE-2026-80381Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data ProtectionIBM Guardium Data Protection
- CVE-2026-84249IBM Guardium Data Protection is affected by vulnerabilityIBM Guardium Data Protection
- CVE-2026-107406Memory overflow vulnerability leading to Remote Code Execution or Denial of ServiceNetScaler ADC · NetScaler Gateway
- CVE-2026-16823Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessIBM Security Verify Access · IBM Verify Identity Access
- CVE-2026-16916Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessIBM Security Verify Access · IBM Verify Identity Access
- CVE-2026-19491Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessIBM Security Verify Access · IBM Verify Identity Access
- CVE-2026-78401Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessIBM Security Verify Access · IBM Verify Identity Access
- CVE-2026-78406Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessIBM Security Verify Access · IBM Verify Identity Access
- CVE-2026-79842An authentication bypass vulnerability exists in HPE Intelligent Management Center (iMC) prior to v7.3 E0713Hewlett Packard Enterprise HPE Intelligent Management Center
- CVE-2026-107781Dromara Skyeye Unauthenticated SSRF and File Overwrite via editUploadOfficeFileByIddromara skyeye
- CVE-2026-107780Dromara Skyeye Unauthenticated OS Command Injection via textToSpeech format Parameterdromara skyeye
- CVE-2026-107779Dromara Skyeye xxl-job-admin Missing Authentication on Job Endpoints Allows RCEdromara skyeye
- CVE-2026-106126Command InjectionTenable Identity Exposure
- CVE-2026-104076TVU Networks Receiver/Transceiver Missing Authentication via REST APITVU Networks TVU Receiver / Transceiver
- CVE-2026-104075TVU Networks Receiver/Transceiver Authentication Bypass via /tvu/LoginTVU Networks TVU Receiver / Transceiver
Show all 51 entriesShow fewer entries
- CVE-2026-84244IBM Guardium Data Protection Cross-Site ScriptingIBM Guardium Data Protection
- CVE-2026-84272IBM Guardium Data Protection Missing AuthenticationIBM Guardium Data Protection
- CVE-2026-107704image_optimizer 1.3.0 through 1.9.0 OS Command Injection via identify_formatjtescher image_optimizer
- CVE-2026-107703@enmaso/node-convert through 1.0.0 OS Command Injection via filepath and convertTo@enmaso/node-convert
- CVE-2026-107700dot-access 0.0.3 through 1.0.0 Code Injection via get() Path Argumentntharim dot-access
- CVE-2026-107699ppt2png through 0.0.6 OS Command Injection via input and output pathstzwm ppt2png
- CVE-2026-9209mJobTime 15.7.3.32 Unauthenticated SQL Execution RCE via Login.aspxmJobTime
- CVE-2026-14269IBM DataPower Gateway Buffer OverflowIBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- CVE-2026-107640Integrics Enswitch 3.13 through 4.4 Authentication Bypass via Password Reset APIIntegrics Enswitch
- CVE-2026-14502IBM DataPower Gateway Improper AuthenticationIBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- CVE-2026-93034CVE-2026-93034SGLang
- CVE-2026-14992IBM DataPower Gateway Out-of-bounds WriteIBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- CVE-2026-14990IBM DataPower Gateway affected by cross-site scriptingIBM DataPower Gateway
- CVE-2026-14991IBM DataPower Gateway Out-of-bounds WriteIBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- CVE-2026-15762IBM DataPower Gateway Out-of-bounds WriteIBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- CVE-2026-16340IBM DataPower Gateway Out-of-bounds WriteIBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- CVE-2026-19218Password Reset Code Brute Force Leading to Account Takeover in AKIN Software's MyRezztaAKIN Software Computer Import-Export Industry and Trade Co.…
- CVE-2026-92555Database Credentials Disclosure in AKIN Software's AKINSOFT WOLVOX Control PanelAKIN Software Computer Import-Export Industry and Trade Co.…
- CVE-2026-107510Authenticated argument injection in NIOS command line leading to privilege escalationInfoblox NIOS
- CVE-2026-105110Iskratel Innbox Unauthenticated Remote Code Execution via login.xgi CLI ParameterIskratel Innbox
- CVE-2026-12260SQL injection in the NetBoard CRM demo platformNetBoard CRM Demo Platform
- CVE-2026-85097Bricksforge <= 3.1.8.9 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' ParameterBricksforge
- CVE-2026-103692Frontend Dashboard 3.0.0 - 3.0.4 - Unauthenticated Privilege Escalation via Arbitrary Function CallFrontend Dashboard
- CVE-2026-103646Ultimate Multisite < 2.17.0 - Unauthenticated Authentication Bypass via 'email_address' ParameterUltimate Multisite
- CVE-2026-107459Openfind｜SecuShare Pro - OS Command InjectionOpenfind SecuShare Pro
- CVE-2026-17609Super Forms <= 6.3.316 - Unauthenticated Arbitrary Directory Deletion via 'data[...][files][][subdir]' ParameterWebRehab Super Forms – Drag & Drop Form Builder
High 197
- CVE-2026-97032HTTP/2 server crash due to HPACK encoder race in net/httpGo standard library net/http · Go standard library net/h… +3
- CVE-2026-94439HTTP/1 server connection desynchronization after 2xx CONNECT response in net/httpGo standard library net/http · stdlib
- CVE-2026-78669Excessive CPU consumption from repeated initial window changes in net/httpGo standard library net/http · Go standard library net/h… +3
- CVE-2026-78660HTTP/2 transport accepts malformed framing-related headers in net/httpGo standard library net/http · Go standard library net/h… +3
- CVE-2026-78667Lack of limit on size of parsed Range headers in net/httpGo standard library net/http · stdlib
- CVE-2026-94440Memory limit bypass when parsing MIME headers in net/textproto, mime/multipartGo standard library net/textproto · Go standard library… +1
- CVE-2026-97031Reject malformed ECH outer extension references in crypto/tlsGo standard library crypto/tls · stdlib
- CVE-2026-56866HTTP/1 client connection desynchronization after CONNECT rejection in net/httpGo standard library net/http · Go standard library net/h… +1
- CVE-2026-78659HTTP/2 server memory exhaustion due to Trailer headers in net/httpGo standard library net/http · Go standard library net/h… +3
- CVE-2026-94447Checksum database bypass for golang.org/toolchain in cmd/goGo toolchain cmd/go · toolchain
- CVE-2026-94444Checksum bypass for golang.org/fips140 in cmd/goGo toolchain cmd/go · toolchain
- CVE-2026-107802SumatraPDF — Windows command-line argument injection in AI selection-translatesumatrapdfreader sumatrapdf
- CVE-2026-107734SumatraPDF: SyncTeX Argument Injection in Inverse Search Enables Arbitrary Command Execution via External Editorssumatrapdfreader sumatrapdf
- CVE-2026-107732SumatraPDF: Markup/command-link injection into UI notification textsumatrapdfreader sumatrapdf
- CVE-2026-105674Predictable Media Stream Pre-Shared Key Vulnerability in TP-Link Tapo C325WBTP-Link Systems Tapo C325WB
- CVE-2026-105672Unauthenticated JSON API Authorization Bypass Vulnerability in TP-Link Tapo C325WBTP-Link Systems Tapo C325WB
- CVE-2026-105673Unauthenticated RTSP Tunnel Denial-of-Service Vulnerability in TP-Link Tapo C325WBTP-Link Systems Tapo C325WB
- CVE-2026-83947Azure Event Grid Spoofing VulnerabilityMicrosoft Azure Event Grid System
- CVE-2026-83943Azure API Center Information Disclosure VulnerabilityMicrosoft Azure API Center
- CVE-2026-107728Strawberry GraphQL: Synchronous permission checks can treat an awaitable authorization result as truthystrawberry-graphql strawberry · strawberry-graphql
- CVE-2026-107725Hazelcast: Authorization bypass in IMap Predicates APIhazelcast · com.hazelcast:hazelcast
- CVE-2026-107724fast-jwt treats raw public JWK JSON as an HMAC secret, enabling HS256 token forgerynearform fast-jwt · fast-jwt
- CVE-2026-107829Jivejdon through 5.0 Unsalted MD5 Password Storage via AccountDaoSqlbanq jivejdon
- CVE-2026-107723fast-jwt : Silent claim-validator bypass when JWT payload is a JSON arraynearform fast-jwt · fast-jwt
- CVE-2026-89091Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code executionRed Hat Migration Toolkit for Applications · Red Hat Mi… +11
Show all 197 entriesShow fewer entries
- CVE-2026-107720fast-jwt: createVerifier accepts unsigned JWTs when key is '' or null and algorithms is explicitly setnearform fast-jwt · fast-jwt
- CVE-2026-107716Banks: Symlink traversal and arbitrary file disclosure/overwrite in DirectoryPromptRegistrymasci banks · banks
- CVE-2026-82895Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data ProtectionIBM Guardium Data Protection
- CVE-2026-82900IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
- CVE-2026-105269Satel Netco Design Cross-site ScriptingSatel Netco Design
- CVE-2026-81932Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data ProtectionIBM Guardium Data Protection
- CVE-2026-84035Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data ProtectionIBM Guardium Data Protection
- CVE-2026-84057IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
- CVE-2026-84058Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data ProtectionIBM Guardium Data Protection
- CVE-2026-84198Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data ProtectionIBM Guardium Data Protection
- CVE-2026-84209IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
- CVE-2026-84230IBM Guardium Data Protection is affected by multiple vulnerabilitiesIBM Guardium Data Protection
- CVE-2026-84246Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data ProtectionIBM Guardium Data Protection
- CVE-2026-84247IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
- CVE-2026-84875Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data ProtectionIBM Guardium Data Protection
- CVE-2026-104628Satel Netco Design Inefficient Regular Expression ComplexitySatel Netco Design
- CVE-2026-11318Deskin 3.3.4.3 XPC Service Privilege Escalation via Unauthenticated InstallerZuler Technology DeskIn
- CVE-2026-101024Satel Netco Design Relative path traversalSatel Netco Design
- CVE-2026-17189Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessIBM Security Verify Access · IBM Verify Identity Access
- CVE-2026-18740Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessIBM Security Verify Access · IBM Verify Identity Access
- CVE-2026-19494Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessIBM Security Verify Access · IBM Verify Identity Access
- CVE-2026-19493Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessIBM Security Verify Access · IBM Verify Identity Access
- CVE-2026-19482Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessIBM Security Verify Access · IBM Verify Identity Access
- CVE-2026-107318@fastify/reply-from vulnerable to improper certificate validation in built-in HTTPS transports@fastify/reply-from
- CVE-2026-107782System Informer before 4.0.26241.138 Incorrect Authorization in phsvc ALPC Portwinsiderss System Informer
- CVE-2026-107778MIT krb5 through 1.22.2 NULL Pointer Dereference via krb5_rd_cred()MIT krb5
- CVE-2026-107707Intego Antivirus through 3.0.0.1 Local Privilege Escalation via Optimization Module JunctionIntego Antivirus
- CVE-2026-107705Poppler 0.42.0 through 26.10.0 Stack Buffer Overflow via Decrypt::revision6Hash()freedesktop poppler
- CVE-2026-82334IBM Guardium Data Protection Out-of-bounds ReadIBM Guardium Data Protection
- CVE-2026-82335IBM Guardium Data Protection Buffer OverflowIBM Guardium Data Protection
- CVE-2026-82344IBM Guardium Data Protection Buffer OverflowIBM Guardium Data Protection
- CVE-2026-84245IBM Guardium Data Protection Privilege EscalationIBM Guardium Data Protection
- CVE-2026-84250IBM Guardium Data Protection Hard-coded CredentialsIBM Guardium Data Protection
- CVE-2026-84271IBM Guardium Data Protection Signature Verification BypassIBM Guardium Data Protection
- CVE-2026-84275IBM Guardium Data Protection Path TraversalIBM Guardium Data Protection
- CVE-2026-107325Application denial of service via missing BSON array length validation in MongoDB Go DriverMongoDB Go Driver
- CVE-2026-84276IBM Guardium Data Protection Denial of ServiceIBM Guardium Data Protection
- CVE-2026-84278IBM Guardium Data Protection Command InjectionIBM Guardium Data Protection
- CVE-2026-107324Application denial of service via integer overflow in BSON value-length validation in MongoDB Go DriverMongoDB Go Driver
- CVE-2026-106433Heap corruption via duplicate masterKey fields in MongoDB libmongocryptMongoDB libmongocrypt
- CVE-2026-106429Application denial of service via malformed KMS endpoint in MongoDB libmongocryptMongoDB libmongocrypt
- CVE-2026-40804WordPress aBlocks plugin <= 2.16.0 - Cross Site Scripting (XSS) vulnerabilityKodezen aBlocks
- CVE-2026-107322OS command injection in Amazon Agent Plugins for AWS databases-on-awsdatabases-on-aws
- CVE-2026-107385MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPESmariadb-corporation mariadb-connector-nodejs · mariadb +2
- CVE-2026-107701dot-access through 1.0.0 Prototype Pollution via set() path argumentntharim dot-access
- CVE-2026-107384MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries)mariadb-corporation mariadb-connector-nodejs · mariadb +2
- CVE-2026-107383MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parametersmariadb-corporation mariadb-connector-nodejs · mariadb +2
- CVE-2026-107378CairoSVG: Quadratic-time DoS parsing a crafted SVG <path>Kozea CairoSVG · cairosvg
- CVE-2026-107377datamodel-code-generator: Protobuf weak-import path traversal allows files to be written outside the temporary directorydatamodel-code-generator
- CVE-2026-107376webonyx graphql-php: Unbounded recursion in parser causes stack overflow on crafted nested inputwebonyx graphql-php · webonyx/graphql-php
- CVE-2026-97147In OpenStack Mistral through 23.0.0, several of the v2 API write paths resolve the target object with a query that can return another projecOpenStack Mistral
- CVE-2026-107375JHipster: SQL Injection in the Parameter of JHipster-Generated Reactive (WebFlux + R2DBC) Applicationssortgenerator-jhipster
- CVE-2026-93860In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the maintenance service directlOpenStack Mistral
- CVE-2026-107696FFmpeg through 9.0.2 Infinite Loop via RTSP Redirect Handling in rtsp.cFFmpeg
- CVE-2026-107695FFmpeg before 8.1.3 HLS Demuxer Infinite Loop via Self-Referencing PlaylistFFmpeg
- CVE-2026-93858In OpenStack Mistral through 23.0.0, the std.ssh_proxied action passes a caller-supplied proxy_command value directly to paramiko.ProxyCommaOpenStack Mistral
- CVE-2026-107337Cross-Site Request Forgery in MalcolmCISA Malcolm
- CVE-2026-107362Server-Side Request Forgery in MalcolmCISA Malcolm
- CVE-2026-107333Incorrect Authorization in MalcolmCISA Malcolm
- CVE-2026-107303JHipster: Generated Applications Allow Stored XSS via Unrestricted Blob ContentType Opened as Same-Origin Blobgenerator-jhipster · react-jhipster
- CVE-2026-107302msgpack5: Truncated map32 headers throw an unexpected errormcollina msgpack5 · msgpack5
- CVE-2026-107300msgpack5: Many buffered values can exhaust the streaming decoder stackmcollina msgpack5 · msgpack5
- CVE-2026-107295`pydantic-ai-slim` web UI `/api/chat` accepts browser-simple cross-origin requests that can trigger agent tool executionpydantic-ai · pydantic-ai-slim
- CVE-2026-105436WordPress MainWP Child plugin <= 6.2.1 - Deserialization of untrusted data vulnerabilityMainWP Child
- CVE-2026-107709Bower decompress-zip has a path traversal vulnerabilityBower Decompress-Zip decompress-zip
- CVE-2026-104078Obsidian Desktop < 1.14.0 RCE via MathJax Safe Filter BypassObsidian Desktop
- CVE-2026-104077Obsidian Desktop < 1.14.0 RCE via Slides Plugin MarkdownObsidian Desktop
- CVE-2026-50054Zimbra Collaboration Suite GrantRightsRequest SOAP Handler Allows Self-Granting of Undocumented loginAs Mailbox Delegation RightZimbra Collaboration Suite
- CVE-2026-107286Pydantic AI: Concurrency-limited models can keep their slot when a streamed request ends earlypydantic-ai · pydantic-ai-slim
- CVE-2026-107589Authentication Bypass by Spoofing in Jacamar CIJacamar CI
- CVE-2026-93017Insights-operator: gather serviceaccount has cluster-wide secret read plus nodes/proxy and cluster-readerRed Hat OpenShift Container Platform
- CVE-2026-107639ILIAS before 9.24, 10.12, and 11.5 Argument Injection via Image Map Question Upload FilenameILIAS-eLearning e.V. ILIAS
- CVE-2026-107638pH7Builder before 18.5.0 2FA Brute Force via VerificationCodeFormProcess.phpph7software ph7builder
- CVE-2026-107636pH7Builder before 18.5.1 Payment Bypass via Payment Module MainControllerph7software ph7builder
- CVE-2026-105833EspoCRM before 10.0.5 IDOR via PersonalAccount Service Exposes IMAP Passwordsespocrm
- CVE-2026-105830league/commonmark 2.0.0 before 2.10.2 Quadratic DoS via TableStartParserthephpleague commonmark · league/commonmark
- CVE-2026-14496IBM DataPower Gateway Out-of-bounds ReadIBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- CVE-2026-14497IBM DataPower Gateway Improper Verification of Cryptographic SignatureIBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- CVE-2026-14507IBM DataPower Gateway Out-of-bounds WriteIBM DataPower Gateway
- CVE-2026-14888IBM DataPower Gateway Buffer OverflowIBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- CVE-2026-14905IBM DataPower Gateway XXEIBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- CVE-2026-14999IBM DataPower Gateway Improper Verification of Cryptographic SignatureIBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- CVE-2026-15781IBM DataPower Gateway Buffer OverflowIBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- CVE-2026-91844Remote Code Execution via Unrestricted File Upload in İzometri Informatics' eimzamipİzometri IT Services Domestic and Foreign Trade Co. eimzamip
- CVE-2026-107615DLL search order hijacking via screenhooks libraries in TightVNC ServerGlavSoft TightVNC
- CVE-2026-107612World-accessible IPC shared memory with predictable name in TightVNC ServerGlavSoft TightVNC
- CVE-2026-107611Out-of-bounds read in TightVNC Viewer ZRLE palette decodingGlavSoft TightVNC
- CVE-2026-15784IBM DataPower Gateway Out-of-bounds WriteIBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- CVE-2026-15819IBM DataPower Gateway Out-of-bounds WriteIBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- CVE-2026-15822IBM DataPower Gateway Denial of ServiceIBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- CVE-2026-15824IBM DataPower Gateway Denial of ServiceIBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- CVE-2026-16111IBM DataPower Gateway Type ConfusionIBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- CVE-2026-16159IBM DataPower Gateway Out-of-bounds WriteIBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- CVE-2026-16161IBM DataPower Gateway Out-of-bounds ReadIBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- CVE-2026-16164IBM DataPower Gateway Out-of-bounds WriteIBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- CVE-2026-16165IBM DataPower Gateway NULL Pointer DereferenceIBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- CVE-2026-16163IBM DataPower Gateway Out-of-bounds WriteIBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- CVE-2026-16167IBM DataPower Gateway Out-of-bounds WriteIBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- CVE-2026-16169IBM DataPower Gateway Denial of ServiceIBM DataPower Gateway
- CVE-2026-16170IBM DataPower Gateway Out-of-bounds WriteIBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- CVE-2026-16176IBM DataPower Gateway Denial of ServiceIBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- CVE-2026-16178IBM DataPower Gateway Out-of-bounds WriteIBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- CVE-2026-16181IBM DataPower Gateway Improper AuthorizationIBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- CVE-2026-16179IBM DataPower Gateway Buffer UnderwriteIBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- CVE-2026-106611WordPress Forminator plugin <= 1.57.3 - Cross Site Request Forgery (CSRF) vulnerabilityWPMU DEV Forminator
- CVE-2026-105076WordPress Vitepos plugin <= 3.6.1 - SQL Injection vulnerabilityAppsbd Vitepos
- CVE-2026-44031Uncontrolled recursion in the DCMTK DICOM dataset parser allows unauthenticated remote denial of serviceOFFIS DCMTK
- CVE-2026-102784Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox < 2.20.4.0balbooa.com Gridbox extension for Joomla
- CVE-2026-62142WordPress WP 2FA plugin <= 4.1.0 - Cross Site Request Forgery (CSRF) vulnerabilityMelapress WP 2FA
- CVE-2026-66479WordPress WPComplete plugin <= 2.9.5.6 - CSRF to Stored XSS vulnerabilityLiquid Web / StellarWP WPComplete
- CVE-2026-107584Not Failing Securely ('Failing Open') in hMailServerProgressive Robot hMailServer
- CVE-2026-107579Inefficient Algorithmic Complexity in hMailServerProgressive Robot hMailServer
- CVE-2026-107576Inefficient Algorithmic Complexity in hMailServerProgressive Robot hMailServer
- CVE-2026-107577Loop with Unreachable Exit Condition ('Infinite Loop') in hMailServerProgressive Robot hMailServer
- CVE-2026-107573Incorrect Default Permissions in hMailServerProgressive Robot hMailServer
- CVE-2026-107574Inefficient Algorithmic Complexity in hMailServerProgressive Robot hMailServer
- CVE-2026-19083IDOR in AKIN Software's OctoCloudAKIN Software Computer Import-Export Industry and Trade Co.…
- CVE-2026-103010Heap-based Buffer Overflow in hMailServerProgressive Robot hMailServer
- CVE-2026-103647Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in hMailServerProgressive Robot hMailServer
- CVE-2026-103649Synchronous Access of Remote Resource without Timeout in hMailServerProgressive Robot hMailServer
- CVE-2026-104659Origin Validation Error in hMailServerProgressive Robot hMailServer
- CVE-2026-104660Missing Authorization in hMailServerProgressive Robot hMailServer
- CVE-2026-104658Reliance on Untrusted Inputs in a Security Decision in hMailServerProgressive Robot hMailServer
- CVE-2026-104704Cleartext Transmission of Sensitive Information in hMailServerProgressive Robot hMailServer
- CVE-2026-107503In Eclipse Ditto versions 3.6.0 to 3.8.13 and 3.9.0 to 3.9.7, the Ditto Explorer UI loads its complete environment configuration, including Eclipse Ditto Ditto Explorer UI
- CVE-2026-71895Apache DolphinScheduler: Missing Authorization Checks Allow Non-Admin Users to Retrieve Kubernetes CredentialsApache Software Foundation Apache DolphinScheduler
- CVE-2026-71183Apache DolphinScheduler: Missing Authorization Checks Allow Disclosure of Data Source Information and PasswordsApache Software Foundation Apache DolphinScheduler
- CVE-2026-66087Apache DolphinScheduler: Project Authorization Bypass in the Task instance stop/savepoint EndpointApache Software Foundation Apache DolphinScheduler
- CVE-2026-66084Apache DolphinScheduler: Project Authorization Bypass in the Task Definition with-upstream EndpointApache Software Foundation Apache DolphinScheduler
- CVE-2026-93699Argument injection in WP Toolkit for cPanel allows local users to execute arbitrary code as other accounts on the same server.WebPros WP Toolkit
- CVE-2026-87428In Brocade ASCG before 3.5.0, a local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can extBrocade Active Support Connectivity Gateway
- CVE-2026-87425An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0.Brocade Active Support Connectivity Gateway
- CVE-2026-87424A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentBrocade Active Support Connectivity Gateway
- CVE-2026-85490When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitiBrocade Active Support Connectivity Gateway
- CVE-2026-85489An authentication flaw exists in the Brocade ASCG administrative management service component.Brocade Active Support Connectivity Gateway
- CVE-2026-85488Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer.Brocade Active Support Connectivity Gateway
- CVE-2026-85487A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0.Brocade Active Support Connectivity Gateway
- CVE-2026-85486Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation.Brocade Active Support Connectivity Gateway
- CVE-2026-85423A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0.Brocade Active Support Connectivity Gateway
- CVE-2026-85422A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the softwarBrocade Active Support Connectivity Gateway
- CVE-2026-85421A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0.Brocade Active Support Connectivity Gateway
- CVE-2026-103309GPTranslate < 2.34.14 - Unauthenticated Stored XSS via REST API Translation StorageGPTranslate
- CVE-2026-5047A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log files.Brocade SANnav
- CVE-2026-94585An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXGBrocade Fabric OS
- CVE-2026-17196Super Forms <= 6.3.316 - Authenticated (Subscriber+) Arbitrary File Upload via 'extensions' Form Element AttributeWebRehab Super Forms – Drag & Drop Form Builder
- CVE-2026-94586A command injection vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operationBrocade Fabric OS
- CVE-2026-94581An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 thrBrocade Fabric OS
- CVE-2026-94577A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorization handling mechanism of Brocade Fabric Brocade Fabric OS
- CVE-2026-87664A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1Brocade Fabric OS
- CVE-2026-87663An authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Brocade Fabric OS versioBrocade Fabric OS
- CVE-2026-87662Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of specific download protocols utilizes unsanitized parameter strBrocade Fabric OS
- CVE-2026-87660An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS veBrocade Fabric OS
- CVE-2026-87667An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d Brocade Fabric OS
- CVE-2026-87666An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.Brocade Fabric OS
- CVE-2026-87675An OS command injection vulnerability exists in the configuration management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.Brocade Fabric OS
- CVE-2026-87674A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 througBrocade Fabric OS
- CVE-2026-87673An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versions before 9.2.2d anBrocade Fabric OS
- CVE-2026-87687An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.Brocade Fabric OS
- CVE-2026-87685An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.Brocade Fabric OS
- CVE-2026-87688An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative managementBrocade Fabric OS
- CVE-2026-94578Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and AccountBrocade Fabric OS
- CVE-2026-87659A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS versions before 10.0.1.Brocade Fabric OS
- CVE-2026-87671An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1.Brocade Fabric OS
- CVE-2026-87684A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1.Brocade Fabric OS
- CVE-2026-102488In affected versions, Octopus Server incorrectly evaluates multiple scoped permission assignments, allowing a highly privileged user to obtaOctopus Deploy Octopus Server
- CVE-2026-82627Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included <= 7.6.1.1 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary File Deletionuncannyowl Uncanny Automator – AI + Automation for WordPres…
- CVE-2026-87683Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.Brocade Fabric OS
- CVE-2026-87682Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Brocade Fabric OS versionBrocade Fabric OS
- CVE-2026-87681An Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation engine of Brocade Fabric OS versions beforeBrocade Fabric OS
- CVE-2026-87680A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated uBrocade Fabric OS
- CVE-2026-87679When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings inBrocade Fabric OS
- CVE-2026-95116An issue in libming through 0.4.8 allows a remote attacker to cause a denial of service via the readtag_file() in src/blocks/fromswf.c.
Medium, low and unrated 244
- CVE-2026-97030Recognize yield as regexp preceder keyword in html/templateGo standard library html/template · stdlib
- CVE-2026-94448Reset context tracking on consecutive template expressions in html/templateGo standard library html/template · stdlib
- CVE-2026-107738SumatraPDF: Untrusted binary record offset used without lower-bound validationsumatrapdfreader sumatrapdf
- CVE-2026-107737SumatraPDF CHM `its://` signed index causes an out-of-bounds object lookupsumatrapdfreader sumatrapdf
- CVE-2026-107736SumatraPDF: stack buffer overflow while processing EXIF Orientation metadatasumatrapdfreader sumatrapdf
- CVE-2026-107735SumatraPDF: `sumatrapdfrestrict.ini` never revokes any permission (fail-open policy initialization)sumatrapdfreader sumatrapdf
- CVE-2026-107733SumatraPDF: Null-pointer dereference in `CmdExec` when no document tab is opensumatrapdfreader sumatrapdf
- CVE-2026-107731SumatraPDF: LIT parser range-validation flaws cause invalid-pointer reads and denial of servicesumatrapdfreader sumatrapdf
- CVE-2026-107730SumatraPDF: Signed integer overflow in the LIT header parsing causes invalid-pointer readsumatrapdfreader sumatrapdf
- CVE-2026-107651Eog: eog: arbitrary code execution via heap buffer overflow in png metadata readerRed Hat Enterprise Linux
- CVE-2026-107729SumatraPDF: Unsigned-to-signed hdrLen validation bypass in SumatraPDF MOBI parsing causes out-of-bounds readsumatrapdfreader sumatrapdf
- CVE-2026-107727Strawberry legacy graphql-ws retains naturally completed subscription slotsstrawberry-graphql strawberry · strawberry-graphql
- CVE-2026-107831Jivejdon through 5.0 CSRF via GET-based Account and Thread Actionsbanq jivejdon
- CVE-2026-107830Jivejdon through commit ee67a65e Missing Rate Limiting via /account/smsVRAction SMS Endpointbanq jivejdon
- CVE-2026-107828Jivejdon through 5.0 Predictable Passwords via Sina Weibo OAuth Loginbanq jivejdon
- CVE-2026-107801Jivejdon through 5.0 Stored XSS via Attachment Upload Content-Typebanq jivejdon
- CVE-2026-107800Jivejdon through 5.0 Stored XSS via Private Short Messagesbanq jivejdon
- CVE-2026-107799Jivejdon through 5.0 Stored XSS via messageListBody.jsp Forum Message Renderingbanq jivejdon
- CVE-2026-107798Jivejdon through commit ee67a65e Stored XSS via Markdown Links in TextStyle Rendering Filterbanq jivejdon
- CVE-2026-107797Jivejdon through 5.0 Reflected XSS via postThread.jsp to and tag Parametersbanq jivejdon
- CVE-2026-107796Jivejdon through commit ee67a65e Reflected XSS via taggedThreadList.jsp tagID and count Parametersbanq jivejdon
- CVE-2026-107793Jivejdon through 5.0 IDOR via subSaveAction Subscription Deletebanq jivejdon
- CVE-2026-107792Jivejdon through commit ee67a65e Missing Authorization via /message/threadToForum/save Thread Movebanq jivejdon
- CVE-2025-71428Jivejdon through 5.0 SQL Injection via username in userListActionbanq jivejdon
- CVE-2026-107721fast-jwt clockTolerance: Infinity silently bypasses both exp and nbf validation (and persists in the verifier cache)nearform fast-jwt · fast-jwt
Show all 244 entriesShow fewer entries
- CVE-2026-107719fast-jwt: Verifier cache accepts expired JWTs without iat.nearform fast-jwt · fast-jwt
- CVE-2026-107718AdonisJS: Unencoded route parameters can produce open redirectsadonisjs http-server · @adonisjs/http-server
- CVE-2026-107717Banks: User-controlled prompt input can be parsed as privileged chat messagesmasci banks · banks
- CVE-2026-84032IBM Guardium Data Protection is affected by multiple vulnerabilitiesIBM Guardium Data Protection
- CVE-2026-84891Security vulnerability affects the Windows GIM component as part of IBM Guardium Data ProtectionIBM Guardium Data Protection
- CVE-2026-107715Mechanize sends credential headers to another host after an HTTP redirectsparklemotion mechanize · mechanize
- CVE-2026-107714Mechanize sends credential headers to a different scheme or port after a redirectsparklemotion mechanize
- CVE-2026-87980Security vulnerability affects the UNIX S-TAP component as part of IBM Guardium Data ProtectionIBM Guardium Data Protection
- CVE-2026-107399Mechanize sends credential headers to another origin after a meta refreshsparklemotion mechanize · mechanize
- CVE-2026-105275Satel Netco Design Relative Path TraversalSatel Netco Design
- CVE-2026-11888Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessIBM Security Verify Access · IBM Verify Identity Access
- CVE-2026-11930Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessIBM Security Verify Access · IBM Verify Identity Access
- CVE-2026-11939Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessIBM Security Verify Access · IBM Verify Identity Access
- CVE-2026-16830Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessIBM Security Verify Access · IBM Verify Identity Access
- CVE-2026-19498Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessIBM Security Verify Access · IBM Verify Identity Access
- CVE-2026-78399Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessIBM Security Verify Access · IBM Verify Identity Access
- CVE-2026-78388Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessIBM Security Verify Access · IBM Verify Identity Access
- CVE-2026-19878Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessIBM Security Verify Access · IBM Verify Identity Access
- CVE-2026-12091Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessIBM Security Verify Access · IBM Verify Identity Access
- CVE-2026-11936Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessIBM Security Verify Access · IBM Verify Identity Access
- CVE-2026-12109Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessIBM Security Verify Access · IBM Verify Identity Access
- CVE-2026-78407Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessIBM Security Verify Access · IBM Verify Identity Access
- CVE-2026-102368Plaintext Storage of a Device-Specific Private Key in Tapo S505 FirmwareTP-Link System Tapo S505
- CVE-2026-107708MIT krb5 through 1.22.2 KDC NULL Pointer Dereference via S4U2Proxy PACMIT krb5
- CVE-2026-106435Application denial of service via out-of-bounds read in BSON Regex decoding in MongoDB Python DriverMongoDB Python Driver · pymongo
- CVE-2026-107397Indico: Cross-Site-Scripting in minutes editorindico
- CVE-2026-107396Indico: Cross-Site-Scripting in link fieldsindico
- CVE-2026-107395Indico: Missing access check in legacy session export APIindico
- CVE-2026-107394Indico: Incomplete Server-Side Request Forgery (SSRF) checkindico
- CVE-2026-107393FreeScout: Stored HTML Injection in Administrator Alert Emails via Spoofed CF-Connecting-IP Headerfreescout-help-desk freescout
- CVE-2026-107706Dolibarr before 24.0.2 Incorrect Authorization via updateextrafield.phpdolibarr
- CVE-2026-107608Improper link resolution in asset bundling output handling in aws-cdk-libaws-cdk-lib
- CVE-2026-107392music-metadata: uncatchable process crash parsing a crafted `.dsf` (residual of CVE-2026-32256)Borewit music-metadata · music-metadata
- CVE-2026-107391music-metadata: MP4 stsd sample-entry size==0 causes a synchronous infinite loop (DoS) — unreleased regression on masterBorewit music-metadata · music-metadata
- CVE-2026-107390music-metadata: MP4 parser allows memory exhaustion via oversized extended atom lengthBorewit music-metadata
- CVE-2026-107389music-metadata: EBML parser trusts element lengths, allowing memory exhaustion or process abortBorewit music-metadata · music-metadata
- CVE-2026-84274IBM Guardium Data Protection Information DisclosureIBM Guardium Data Protection
- CVE-2026-106436Application denial of service and data truncation via unchecked BSON append failures in MongoDB PHP DriverMongoDB PHP Driver
- CVE-2026-106432Heap buffer overflow via 32-bit string-length truncation in MongoDB PHP DriverMongoDB PHP Driver
- CVE-2026-107388music-metadata: ID3v2 tag size not validated before allocation, causing memory exhaustion DoSBorewit music-metadata · music-metadata
- CVE-2026-107387music-metadata: Uncontrolled memory allocation in APEv2 parserBorewit music-metadata · music-metadata
- CVE-2026-84290Security vulnerability affects the Windows S-TAP component as part of IBM Guardium Data ProtectionIBM Guardium Data Protection
- CVE-2026-106434Unrecognized payload acceptance in explicit decryption in MongoDB libmongocryptMongoDB libmongocrypt
- CVE-2026-107386amqp091-go: Pre-negotiation frame limit is not enforced to 4KBrabbitmq amqp091-go · github.com/rabbitmq/amqp091-go
- CVE-2026-105452Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hostsDocker Sandboxes
- CVE-2026-101998Fail-open response masking in Docker Sandboxes can expose proxy-managed credentialsDocker Sandboxes
- CVE-2026-105570Docker Sandboxes OAuth response masking could be bypassed with a case-variant token hostDocker Sandboxes
- CVE-2026-106430Query and rename target confusion via embedded NUL truncation in MongoDB C++ DriverMongoDB C++ Driver
- CVE-2026-106438Silent Decimal128 value corruption via incorrect exactness check in MongoDB C DriverMongoDB C Driver
- CVE-2026-106437Out-of-bounds read and write via undersized BSON buffer reservation in MongoDB C DriverMongoDB C Driver
- CVE-2026-106431One-byte heap buffer overflow in BSON bulk document writer in MongoDB C DriverMongoDB C Driver
- CVE-2026-106428Out-of-bounds read in SCRAM response parsing in MongoDB C DriverMongoDB C Driver
- CVE-2026-107382MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLSmariadb-corporation mariadb-connector-nodejs · mariadb +2
- CVE-2026-107702QloApps through 1.7.0 Authorization Bypass via id_hotel in Admin Room BookingWebkul QloApps
- CVE-2026-107380enshrined/svg-sanitize: Stored XSS via DTD Entity / HTML5 Named Character Reference Collisiondarylldoyle svg-sanitizer · enshrined/svg-sanitize
- CVE-2026-107379enshrined/svg-sanitize: Denial of Service via DTD Attribute Declaration Crashdarylldoyle svg-sanitizer · enshrined/svg-sanitize
- CVE-2026-93861In OpenStack Mistral through 23.0.0, the workflow membership API lets a project that has accepted a share of another project's private workfOpenStack Mistral
- CVE-2026-107332Insecure Default File Permissions on Cached Credentials in AWS Toolkit for Visual Studio Codeaws-toolkit-vscode
- CVE-2026-107334Incorrect Authorization in MalcolmCISA Malcolm
- CVE-2026-107698FFmpeg before 7.1.4 and 8.0.2 SSRF via RTSP Redirect HandlingFFmpeg
- CVE-2026-107697FFmpeg before 8.1.3 HLS Demuxer Security Check Bypass via parse_playlist()FFmpeg
- CVE-2026-107335Improper Handling of Highly Compressed Data in MalcolmCISA Malcolm
- CVE-2026-107361Authentication Bypass Using an Alternate Path or Channel in MalcolmCISA Malcolm
- CVE-2026-107336Authentication Bypass by Spoofing in MalcolmCISA Malcolm
- CVE-2026-107301msgpack5: Partial options disable prototype protectionmcollina msgpack5 · msgpack5
- CVE-2026-107299msgpack5: Reserved byte can cause unbounded stream bufferingmcollina msgpack5 · msgpack5
- CVE-2026-107298msgpack5: Deeply nested input can exhaust the decoder stackmcollina msgpack5 · msgpack5
- CVE-2026-107297msgpack5: Quadratic parsing in the streaming decodermcollina msgpack5 · msgpack5
- CVE-2026-107296msgpack5: Decoding negative int64 values mutates the input buffermcollina msgpack5 · msgpack5
- CVE-2026-107294Pydantic AI: Unbounded memory use when downloading remote content via web_fetch or FileUrlpydantic-ai · pydantic-ai-slim
- CVE-2026-107293Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when `include_content=False`pydantic-ai · pydantic-ai-slim
- CVE-2026-107292Pydantic AI Web chat UI (`Agent.to_web()`, `clai web`): the local chat endpoint does not validate the `Host` headerpydantic-ai · pydantic-ai-slim
- CVE-2026-50055Zimbra Collaboration Suite Sieve Notify Filter Action Bypasses Mail Forwarding Restriction via Variable ExpansionZimbra Collaboration Suite
- CVE-2026-10631Zimbra Collaboration Suite EWS Extension Authorization Bypass via Crafted Composite Folder/Item IdentifierZimbra Collaboration Suite
- CVE-2026-107291Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when `include_content=False`pydantic-ai · pydantic-ai-slim
- CVE-2026-61801github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database filesmoby sys · github.com/moby/sys/user
- CVE-2026-107290Pydantic AI: Event loop blocked by quadratic title extraction in `web_fetch`pydantic-ai · pydantic-ai-slim
- CVE-2026-106177HP Sure Click Kernel Buffer OverflowHP Sure Click Enterprise · HP Wolf Security for Business +1
- CVE-2026-107678FFmpeg through 9.0.2 Stack Exhaustion via Recursive Free of pssh BoxesFFmpeg
- CVE-2026-107677FFmpeg through 9.0.2 DASH Demuxer Infinite Loop via Empty SegmentTemplate MediaFFmpeg
- CVE-2026-107676FFmpeg through 9.0.2 Uninitialized Memory Disclosure via HDR10+ Metadata SerializerFFmpeg
- CVE-2026-107675FFmpeg through 9.0.2 Missing SSH Host Key Verification in sftp ProtocolFFmpeg
- CVE-2026-107660FFmpeg before 8.1.3 and 9.x before 9.0.2 mbedTLS Hostname Verification Bypass for IP HostsFFmpeg
- CVE-2026-19585Go-getter vulnerable to a path traversal in S3/GCS directory download handlingHashiCorp Shared library
- CVE-2026-107289Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv6 zone identifier (incomplete fix for CVE-2026-46678 and CVE-2026-48782)pydantic-ai · pydantic-ai-slim
- CVE-2026-107288Pydantic AI: web_fetch_tool blocked_domains bypass via a hostname the resolver normalizes differentlypydantic-ai · pydantic-ai-slim
- CVE-2026-107287Pydantic AI: Excessive resource use when local web fetching converts nested HTMLpydantic-ai · pydantic-ai-slim
- CVE-2026-107586Allocation of Resources Without Limits or Throttling in hMailServerProgressive Robot hMailServer
- CVE-2026-107585Allocation of Resources Without Limits or Throttling in hMailServerProgressive Robot hMailServer
- CVE-2026-107623Keycloak-services: keycloak-services: oidc dcr read-modify-write silently disables offline token revocationRed Hat build of Keycloak · Red Hat Single Sign-On
- CVE-2026-107604Keycloak-services: keycloak-services: view-clients role allows retrieval of active client secrets via installation provider endpointsRed Hat Build of Keycloak · Red Hat Single Sign-On
- CVE-2026-107565Luksmeta: incomplete gap-boundary and overlap checks in luks1 metadata allocator allow data corruptionRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-12859IDOR in Caz Informatics' Advancity ALMS CloudCaz Informatics Services Trade Advancity ALMS Cloud
- CVE-2026-105331mk-oracle: Local privilege escalation via malicious Oracle Instant ClientCheckmk
- CVE-2026-107637pH7Builder before 18.5.0 Improper Authorization via Note Module delete() Actionph7software ph7builder
- CVE-2026-107635Dislocker through 0.7.3 Out-of-Bounds Heap Read via VMK/FVEK Datum Size UnderflowAorimn dislocker
- CVE-2026-107634Dislocker through 0.7.3 Heap Out-of-Bounds Read via BitLocker Metadata Dataset SizeAorimn dislocker
- CVE-2026-105832EspoCRM before 10.0.6 Two-Factor Authentication Bypass on Unauthenticated Routesespocrm
- CVE-2026-105831EspoCRM before 10.0.6 Unauthenticated Stored HTML Injection via Lead Capture Formespocrm
- CVE-2026-105829League CommonMark 1.3.0 before 2.10.2 Stored XSS via DisallowedRawHtml Bypassthephpleague commonmark · league/commonmark
- CVE-2026-105828Parse Server 9.0.0 before 9.10.1-alpha.12 Class Name Disclosure via GraphQL Errorsparse-community parse-server · parse
- CVE-2026-13257IBM DataPower Gateway Insufficient Verification of Data AuthenticityIBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- CVE-2026-13258IBM DataPower Gateway Cross-Site ScriptingIBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- CVE-2026-14273IBM DataPower Gateway Incorrect AuthorizationIBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- CVE-2026-14508IBM DataPower Gateway Use After FreeIBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- CVE-2026-14509IBM DataPower Gateway Denial of ServiceIBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- CVE-2026-14988IBM DataPower Gateway Out-of-bounds ReadIBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- CVE-2026-89290HTML Injection in İzometri Informatics' eimzamipİzometri IT Services Domestic and Foreign Trade Co. eimzamip
- CVE-2026-104634beam_mcp: JSON boolean and null tool arguments reach dispatch as stringsScriptKittyOS beam_mcp · beam_mcp
- CVE-2026-88257beam_mcp: nested tool argument constraints advertised but not enforcedScriptKittyOS beam_mcp · beam_mcp
- CVE-2026-107614Integer underflow in TightVNC Server cursor shape trimming leads to out-of-bounds readGlavSoft TightVNC
- CVE-2026-107613NULL pointer dereference in TightVNC Server Win8ScreenDriver after failed DXGI re-initializationGlavSoft TightVNC
- CVE-2026-27420WordPress Zotpress plugin <= 7.4.4 - Cross Site Scripting (XSS) vulnerabilityKatie Seaborn Zotpress
- CVE-2026-103663Path Traversal leading to Remote Code Execution in OllamaOllama
- CVE-2026-42698WordPress Tutor LMS plugin <= 4.1.1 - Race Condition vulnerabilityThemeum Tutor LMS
- CVE-2026-16177IBM DataPower Gateway Out-of-bounds ReadIBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- CVE-2026-62127WordPress WP plugin Info Card plugin <= 6.3.5 - Cross Site Scripting (XSS) vulnerabilityMediaRon WP Plugin Info Card
- CVE-2026-62128WordPress Creator LMS plugin <= 1.2.21 - Broken Access Control vulnerabilityCreator LMS
- CVE-2026-16182IBM DataPower Gateway NULL Pointer DereferenceIBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- CVE-2026-105893WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerabilityLiquid Web / StellarWP Event Tickets
- CVE-2026-14521IBM DataPower Gateway affected by server-side request forgeryIBM DataPower Gateway 10.6CD · IBM DataPower Gateway
- CVE-2026-105079WordPress MasterStudy LMS plugin <= 3.7.52 - Cross Site Scripting (XSS) vulnerabilityStylemixThemes MasterStudy LMS
- CVE-2026-105891WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerabilityLiquid Web / StellarWP Event Tickets
- CVE-2026-103072WordPress VillaTheme Core plugin <= 1.0.5 - Broken Access Control vulnerabilityVillaTheme Core
- CVE-2026-105890WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.7.12 - Cross Site Scripting (XSS) vulnerabilityLiquid Web / StellarWP Gutenberg Blocks by Kadence Blocks
- CVE-2026-105888WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerabilityLiquid Web / StellarWP Event Tickets
- CVE-2026-105078WordPress WP Store Locator plugin <= 3.0.3 - Cross Site Scripting (XSS) vulnerabilityWP Store Locator
- CVE-2026-106596WordPress Visual Composer Website Builder plugin <= 45.16.3 - Broken Access Control vulnerabilityVisual Composer Website Builder
- CVE-2026-105887WordPress Robo Gallery plugin <= 5.1.6 - Cross Site Scripting (XSS) vulnerabilityRobosoft Robo Gallery
- CVE-2026-103070WordPress ShortPixel Image Optimizer plugin <= 6.5.6 - Cross Site Scripting (XSS) vulnerabilityShortPixel Image Optimizer
- CVE-2026-105886WordPress Ultimate Post Kit plugin <= 4.5.5 - Broken Access Control vulnerabilityBdThemes Ultimate Post Kit
- CVE-2026-44038Global buffer out-of-bounds read in DCMTK JPEG Huffman decodingOFFIS DCMTK
- CVE-2026-44037Uncontrolled recursion in DCMTK JSON reader allows denial of serviceOFFIS DCMTK
- CVE-2026-44036Uncontrolled recursion in DCMTK xml2dcm allows denial of serviceOFFIS DCMTK
- CVE-2026-44035Uncontrolled recursion in DCMTK DICOMDIR parsing allows denial of serviceOFFIS DCMTK
- CVE-2026-44034Heap out-of-bounds read in DCMTK RLE decodeFrame()OFFIS DCMTK
- CVE-2026-44033Uncontrolled recursion in the DCMTK bundled XML parser allows denial of serviceOFFIS DCMTK
- CVE-2026-102783Joomla Extension - balbooa.com - Path Traversal in image preview Gridbox < 2.20.4.0balbooa.com Gridbox extension for Joomla
- CVE-2026-105878WordPress YITH WooCommerce Product Bundles plugin <= 2.29.0 - Broken Access Control vulnerabilityYITH WooCommerce Product Bundles
- CVE-2026-106603WordPress HollerBox plugin <= 2.3.14 - Insecure Direct Object References (IDOR) vulnerabilityGroundhogg HollerBox
- CVE-2026-106600WordPress GiveWP plugin <= 4.18.0 - Broken Access Control vulnerabilityLiquid Web / StellarWP GiveWP
- CVE-2026-107583Inefficient Algorithmic Complexity in hMailServerProgressive Robot hMailServer
- CVE-2026-107587Improper Certificate Validation in hMailServerProgressive Robot hMailServer
- CVE-2026-107582Inefficient Algorithmic Complexity in hMailServerProgressive Robot hMailServer
- CVE-2026-107581Inefficient Algorithmic Complexity in hMailServerProgressive Robot hMailServer
- CVE-2026-107580Inefficient Algorithmic Complexity in hMailServerProgressive Robot hMailServer
- CVE-2026-107578Improper Link Resolution Before File Access ('Link Following') in hMailServerProgressive Robot hMailServer
- CVE-2026-107575Inefficient Algorithmic Complexity in hMailServerProgressive Robot hMailServer
- CVE-2026-107572Inefficient Regular Expression Complexity in hMailServerProgressive Robot hMailServer
- CVE-2026-107570Use of Out-of-range Pointer Offset in muttmutt
- CVE-2026-107275@fastify/jwt vulnerable to missing token expiration when temporal options cannot be parsed@fastify/jwt
- CVE-2026-103011Heap-based Buffer Overflow in hMailServerProgressive Robot hMailServer
- CVE-2026-93509Wallet System for WooCommerce 2.0.0 - 2.7.10 - Subscriber+ Wallet Balance Manipulation via Negative Transfer AmountWallet System for WooCommerce
- CVE-2026-105190Easy Digital Downloads < 3.7.1 - Unauthenticated Account Creation with Registration DisabledEasy Digital Downloads
- CVE-2026-104671TutorStarter < 4.0.4 - Unauthenticated User Registration Bypass via AJAXTutorStarter
- CVE-2026-103517Airwallex Online Payments Gateway < 1.36.0 - Unauthenticated Payment Bypass via Forged WebhookAirwallex Online Payments Gateway
- CVE-2026-4894Authentication bypass in multiple products from Frappe TechnologiesFrappe Technologies
- CVE-2026-71896Apache DolphinScheduler: Missing Authorization Checks Allow Unauthorized Disclosure of User Account InformationApache Software Foundation Apache DolphinScheduler
- CVE-2026-66082Apache DolphinScheduler: Cross-project authorization bypasses in DolphinScheduler API (schedule / workflow）Apache Software Foundation Apache DolphinScheduler
- CVE-2026-89191Stored Cross-Site Scripting in SQLView KRISSQLView KRIS
- CVE-2026-107466Flatpak-builder: local file exfiltration via `fileRed Hat Enterprise Linux
- CVE-2026-87426An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions before 3.5.0 to enumeratBrocade Active Support Connectivity Gateway
- CVE-2026-5769A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swBrocade SANnav
- CVE-2026-94275Track Orders for WooCommerce < 1.2.7 - Unauthenticated PII Disclosure via 'email' ParameterTrack Orders for WooCommerce
- CVE-2026-94258SMS Alert 3.6.4 - 4.0.0 - Admin+ Network User Billing Phone Disclosure via Bulk User ActionsSMS Alert
- CVE-2026-94246Wallet System for WooCommerce 2.0.0 - 2.7.10 - Subscriber+ Forged Wallet Withdrawal Request via IDORWallet System for WooCommerce
- CVE-2026-94245Wallet System for WooCommerce 2.0.0 - 2.7.10 - Subscriber+ Arbitrary Wallet Balance Theft via IDORWallet System for WooCommerce
- CVE-2026-94244Wallet System for WooCommerce < 2.8.0 - Subscriber+ Store-Wide Wallet Transaction Disclosure via ExportWallet System for WooCommerce
- CVE-2026-86828BackWPup < 5.7.7 - Admin+ Path Traversal to RCE via Restore PclZip FallbackBackWPup
- CVE-2026-86827BackWPup 3.3 - 5.7.6 - Unauthenticated Backup Job Execution via wp-cron.phpBackWPup
- CVE-2026-86826BackWPup < 5.7.7 - Unauthenticated Sensitive Data Disclosure via Restore Working Directory on NGINXBackWPup
- CVE-2026-105260Database Addon For WPForms < 1.1.1 - Arbitrary Form Entry Deletion via CSRFDatabase Addon For WPForms
- CVE-2026-105198LatePoint < 5.7.3 - Unauthenticated Customer PII Disclosure via IDORAppointment Booking Plugin
- CVE-2026-105197LatePoint < 5.6.5 - Agent+ Arbitrary Order, Customer and Transaction Deletion via IDORAppointment Booking Plugin
- CVE-2026-105196LatePoint < 5.6.9 - Agent+ Cross-Agent Data Disclosure and Modification via Abilities APIAppointment Booking Plugin
- CVE-2026-105195Booking Calendar 10.15 - 11.8.2 - Editor+ Arbitrary Option DisclosureBooking Calendar
- CVE-2026-105194Easy Digital Downloads < 3.7.1 - Subscriber+ Sensitive Information Disclosure via User Downloads BlockEasy Digital Downloads
- CVE-2026-105193Booking Calendar < 11.8 - Unauthenticated Booking Information Disclosure and Modification via Predictable Booking HashBooking Calendar
- CVE-2026-104646Image Photo Gallery Final Tiles Grid < 3.6.14 - Contributor+ Stored XSS via Gallery Shortcode AttributesImage Photo Gallery Final Tiles Grid
- CVE-2026-104645Image Photo Gallery Final Tiles Grid < 3.6.14 - Contributor+ Arbitrary Gallery Cloning, Image Modification and Post Meta Update via IDORImage Photo Gallery Final Tiles Grid
- CVE-2026-5049A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a.Brocade SANnav
- CVE-2026-5048In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authBrocade SANnav
- CVE-2023-5649An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a local authenticatedBrocade Active Support Connectivity Gateway
- CVE-2023-5648In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL paths, aiding unautBrocade Active Support Connectivity Gateway
- CVE-2026-107450In Stump through 0.1.10, the updateSmartList and deleteSmartList GraphQL mutations (crates/graphql/src/mutation/smart_lists.rs) depend only stumpapp Stump
- CVE-2026-94587A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations Brocade Fabric OS
- CVE-2026-94579An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session terminBrocade Fabric OS
- CVE-2026-94576An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions befoBrocade Fabric OS
- CVE-2026-87661Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup orBrocade Fabric OS
- CVE-2026-107449linuxserver Heimdall through 2.8.3 applies its SafeUrlFetcher SSRF protection mechanism only to ItemController; the enhanced-application teslinuxserver Heimdall
- CVE-2026-87677An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 throBrocade Fabric OS
- CVE-2026-107448Magic: The Gathering Arena (Windows/Steam client; 2026.59.30.12801.127931.6 and certain later 2026.60.x builds) passes a server-supplied URLWizards of the Coast Magic: The Gathering Arena
- CVE-2026-107445Rubygem-katello: katello: katello: katello flatpak remote repositories api cross-organization authorization bypassRed Hat Hardened Images · Red Hat Satellite
- CVE-2026-107444Rubygem-katello: katello: katello: katello docker tags repositories api cross-organization authorization bypassRed Hat Hardened Images · Red Hat Satellite
- CVE-2026-107446containerd overlaybd through 1.0.18 has a do_load_index (LSMT index loading) integer overflow (and resultant out-of-bounds heap access) for containerd overlaybd
- CVE-2026-94584A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1.Brocade Fabric OS
- CVE-2026-94580An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on BrocadBrocade Fabric OS
- CVE-2026-94575A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-privileged user to bBrocade Fabric OS
- CVE-2026-94583A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before Brocade Fabric OS
- CVE-2026-94582A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path FirsBrocade Fabric OS
- CVE-2026-87668A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1.Brocade Fabric OS
- CVE-2026-87665A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabric OS versions beforBrocade Fabric OS
- CVE-2026-87672An information disclosure vulnerability exists in the SupportLink diagnostic collection utilities of Brocade Fabric OS versions before 10.0.Brocade Fabric OS
- CVE-2026-92862The Android application "Ticket Ryutsu Center" improperly handles custom URL schemes, allowing a malicious application to cause access to anWavedash Co. Ticket Ryutsu Center
- CVE-2026-92861The Android application "Ticket Ryutsu Center" contains hard-coded credentials, which may allow an attacker to obtain an API key used by theWavedash Co. Ticket Ryutsu Center
- CVE-2026-87670An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway.Brocade Fabric OS
- CVE-2026-87669A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authentBrocade Fabric OS
- CVE-2026-87678An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versions before 10.0.1.Brocade Fabric OS
- CVE-2026-87676A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1.Brocade Fabric OS
- CVE-2026-87686An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions beforeBrocade Fabric OS
- CVE-2017-20283NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom() implementation.NXP MQX
- CVE-2026-87726Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00_Pub may allow an attacker with privileges or an untNxpNfcRdLib
- CVE-2024-8122Potential brute force vulnerability due to non-expiring SMS OTPsWSO2 Identity Server
- CVE-2026-67693GnuTLS v3.8.13 does not reject end-entity X.509 certificates that contain a contradictory combination of Key Usage (KU) and Extended Key…
- CVE-2026-88647GnuTLS v3.8.13 can perhaps unexpectedly trust a certificate on the basis of Common Name when Subject Alternative Name has an SRV otherName…
- CVE-2026-88648In GnuTLS v3.8.13, an excluded msUPN/SRV otherName is never checked.
- CVE-2026-95125libming through 0.4.8 contains a heap buffer overflow in r_readc() in src/blocks/fromswf.c.
- CVE-2026-95184GnuTLS v3.8.13 does not properly enforce name constraints, as demonstrated by a permitted subtree violation for "EE O=Evil accepted…
- CVE-2026-95210GnuTLS v3.8.13 does not reject a critical keyUsage extension when it cannot be processed, such as when extnValue is an ASN.1 NULL (05 00)…