CVEs published October 9, 2026
316 CVEs were published on October 9, 2026: 38 critical, 149 high. Browse them by severity, product and exploitation status.
- Published
- 316
- Critical
- 38
- High
- 149
- Medium
- 107
- Low
- 17
- Unrated
- 5
- Now in CISA KEV
- 0
- Fix available
- 197
Most affected products
- Dell Secure Connect Gateway (SCG) Policy Manager
- 19
- Apache Software Foundation Apache CXF
- 11
- 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- 10
- Linux
- 10
- MariaDB server · mariadb +2
- 8
- canva affinity
- 7
- FalkorDB
- 7
- Red Lion Controls 700 Series
- 7
- contao · contao/core-bundle
- 6
- illumos-gate · OmniOS
- 6
Critical 38
- CVE-2026-108474In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functionsJetBrains Exposed
- CVE-2026-108269ra-tls-clients: RA-TLS challenge verifier accepted quotes not bound to the TLS sessionPrivasys ra-tls-clients
- CVE-2026-108268enclave-os-virtual: RA-TLS challenge certificates were not bound to the TLS sessionPrivasys enclave-os-virtual
- CVE-2026-108267Privasys Go fork: RA-TLS challenge mode did not bind attestation evidence to the TLS sessionPrivasys go
- CVE-2026-108266Privasys rustls fork: RA-TLS challenge mode did not bind attestation evidence to the TLS sessionPrivasys rustls
- CVE-2026-108265enclave-os-mini: RA-TLS challenge certificates were not bound to the TLS sessionPrivasys enclave-os-mini
- CVE-2026-108264Wizarr: Authenticated Server-Side Template Injection (SSTI) in wizard step rendering leads to Remote Code Execution (RCE)wizarrrr wizarr
- CVE-2026-108263Astron Agent: Unsandboxed code-node leads to cross-tenant RCEiflytek astron-agent
- CVE-2026-108261TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragmenttinacms · @tinacms app +1
- CVE-2026-107845Contao: Cross-site scripting in the comments bundlecontao · contao/comments-bundle
- CVE-2026-107824x64dbg-MCP Server exposes debugger operations to unauthenticated network clientsduty1g x64dbg-mcp-server
- CVE-2026-108157Pingvin Share X 0.19.0 before 1.22.0 Account Takeover via OAuth Email Linkingsmp46 pingvin-share-x
- CVE-2026-107806Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config Overwrite0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-15340Savannah lwIP SMTP client Classic Buffer OverflowSavannah lwIP SMTP client
- CVE-2026-108109PHPNuxBill through 2025.3.20 Account Takeover via Brute-Forceable Password Reset Codehotspotbilling phpnuxbill
- CVE-2026-108107PHPNuxBill through 2025.3.20 Unauthenticated SQL Injection via radius.phphotspotbilling phpnuxbill
- CVE-2026-105278Grid Protection Alliance openPDC (Docker image) Use of Hard-coded CredentialsGrid Protection Alliance openPDC
- CVE-2026-100730Grid Protection Alliance openPDC and openHistorian Deserialization of Untrusted DataGrid Protection Alliance openPDC · Grid Protection Alliance…
- CVE-2026-86405Payment Validation Bypass in Sipay Electronic Money's SanalPos PrestaShopSipay Electronic Money and Payment Services PrestaShop Virt…
- CVE-2026-85531Payment Validation Bypass in Sipay Electronic Money's OpenCart 3.xSipay Electronic Money and Payment Services OpenCart Virtua…
- CVE-2026-107938Apache CXF: The Netty HTTP client transport does not perform TLS hostname verification.Apache Software Foundation Apache CXF
- CVE-2026-97468Apache CXF: Authentication bypass via weak cache keys for validated STS tokensApache Software Foundation Apache CXF
- CVE-2026-71575Apache CXF: Inoperative max_age authentication-freshness check in OidcClientCodeRequestFilterApache Software Foundation Apache CXF
- CVE-2026-93947WordPress Traveler theme <= 3.2.9 - SQL Injection vulnerabilityShinetheme Traveler
- CVE-2026-94503WordPress Zombify plugin <= 1.7.7 - Arbitrary File Upload vulnerabilityPX-lab Zombify
Show all 38 entriesShow fewer entries
- CVE-2026-96809WordPress EduAdmin Booking plugin < 6.0.0 - SQL Injection vulnerabilityMultiNet Interactive AB EduAdmin Booking
- CVE-2026-96331WordPress Ajax Search Pro plugin <= 4.29.1 - SQL Injection vulnerabilitywpdreams Ajax Search Pro
- CVE-2026-96330WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerabilitytagDiv Opt-In Builder
- CVE-2026-96328WordPress JNews - Pay Writer plugin <= 12.0.1 - SQL Injection vulnerabilityjegtheme JNews - Pay Writer
- CVE-2026-96327WordPress WPLMS plugin < 1.9.9.8.2 - SQL Injection vulnerabilityVibeThemes WPLMS
- CVE-2026-107935Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /exposegvisor-tap-vsock · Red Hat Build of Podman Desktop +7
- CVE-2026-107910Authentication bypass in FalkorDB Bolt endpoint via fail-open AUTH probe error handlingFalkorDB
- CVE-2026-107908Pre-authentication heap out-of-bounds write in FalkorDB Bolt BoltReadHandler via RESET messageFalkorDB
- CVE-2026-7827Stack-based buffer overflow in FalkorDB _RdbLoadEntity via unbounded property count in crafted RDBFalkorDB
- CVE-2026-5759Double free and use-after-free in FalkorDB RdbLoadDeletedNodes allows remote code execution via crafted RDBFalkorDB
- CVE-2026-78796An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a remote attacker to
- CVE-2026-78797An issue in iStoreOS istoreos-24.10.7 and before allows a remote attacker to execute arbitrary code via the task_id in tasks-lib.lua.
- CVE-2026-78835Rocket Software Rocket Remote Desktop 18.0.8583.1 is vulnerable to Insufficiently Protected Credentials.
High 149
- CVE-2026-22061CVE-2026-22061 Debug Log Information Disclosure Vulnerability in TridentNetApp Trident
- CVE-2026-62376Vikunja: Plaintext storage of password-reset/email-confirm tokens in database enables account takeover on DB read accessgo-vikunja vikunja · code.vikunja.io/api
- CVE-2026-62367Vikunja: OIDC email-fallback account linking ignores email_verified, enabling local-account takeovergo-vikunja vikunja · code.vikunja.io/api
- CVE-2026-57458Vikunja: Scoped API token can mint unrestricted OAuth session credentialsgo-vikunja vikunja · code.vikunja.io/api
- CVE-2026-108260@tinacms/web-components: `tina-markdown` writes rich-text link URLs into `href` without scheme validation, allowing stored XSStinacms · @tinacms web-components +1
- CVE-2026-92705Aegisub executes arbitrary code through automatically loaded Automation scriptsTypesettingTools Aegisub
- CVE-2026-108259Tina: Code injection via unescaped Git branch name in generated client sourcetinacms · @tinacms cli +1
- CVE-2026-107852Jexactyl: Stripe checkout confirmation accepts mismatched-currency/amount payments as full payment (payment forgery)Jexactyl
- CVE-2026-107840yopass Prometheus metrics middleware allows remote memory exhaustion through unbounded method labelsjhaals yopass · github.com/jhaals/yopass
- CVE-2026-107839ageLANServer: Unbounded JSON Array Allocation in AoE3 Cloud `getFileURL` Endpoint Leads to Remote Denial of Serviceluskaner ageLANServer · github.com/luskaner/ageLANServer/se…
- CVE-2026-107838RIOT: nanocoap_fileserver ignores response initialization failure, leading to reachable assertionRIOT-OS RIOT
- CVE-2026-107837RIOT: Out-of-Bounds Read in RIOT OS 6LoWPAN SFF Fragment HandlingRIOT-OS RIOT
- CVE-2026-107836RIOT: nanoCoAP Block2 client slice handling underflows on inconsistent server-controlled block sizeRIOT-OS RIOT
- CVE-2026-107826OWASP Coraza WAF: JSON body processor: argument-limit truncation reopens an unbounded-depth gjson.Valid stack overflow (process crash)corazawaf coraza · github.com/corazawaf/coraza/v3 +2
- CVE-2026-107823MariaDB: privilege escalation via incorrect view frm parsingMariaDB server · mariadb +2
- CVE-2026-107821MariaDB: insufficient validation of binary frm data when opening a tableMariaDB server · mariadb +2
- CVE-2026-107818MariaDB: environment injection via wsrep bootstrap in the mariadb.service fileMariaDB server · mariadb +2
- CVE-2026-55797Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URLargoproj argo-cd · argo-cd +3
- CVE-2026-107815MariaDB: one byte OOB write in DOS tables of the CONNECT engineMariaDB server · mariadb +2
- CVE-2026-108160AstronRPA through 1.1.6 Unsigned Update Installation via Plain-HTTP Feediflytek astron-rpa
- CVE-2026-108159AstronRPA through 1.1.6 RCE via Smart-Component Chat XSS and IPC Bridgeiflytek astron-rpa
- CVE-2026-108158plugNmeet Server through 2.5.2 Path Traversal via /api/whiteboard/convertmynaparrot plugNmeet-server
- CVE-2026-107814MariaDB: Insecure $HOME in MariaDB rpm packagesMariaDB server · mariadb +2
- CVE-2026-107813Nginx UI: Incomplete fix of CVE-2026-84315 - the api/cluster router was not - wrapped in RequireSecureSession, so those sensitive mutations run without OTP step-up0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-107812Nginx UI: Self-upgrade runs an unsigned binary verified only by a same-origin digest → RCE via a compromised mirror or MITM0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
Show all 149 entriesShow fewer entries
- CVE-2026-1078110xJacky/nginx-ui /api/nodes Leaks Cluster Node Tokens and Allows Cross-Node Impersonation as initUser0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-107810Nginx UI: Backup restore follows crafted symlinks into the live Nginx configuration path before restore flags are applied0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-90983OTP Code Exposure in Hayat Hospital's Hayat MobileHayat Health Facilities Inc. (Hayat Hospital) Hayat Mobile
- CVE-2026-107809Nginx-UI AuthRequired token cookie fallback enables CSRF against management APIs0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-107808Nginx UI: Authentication bypass: password login does not enforce a passkey-only second factor (2FA bypass)0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-104084SmarterMail < Build 9777 Stale JWT Role Claim Privilege Escalation via Refresh TokenSmartertools Smartermail
- CVE-2026-102554Denial of Service via Eager Array Allocation During Deserialization in GuavaGoogle Guava · com.google.guava:guava
- CVE-2026-104082SmarterMail < Build 9777 SysAdmin Remote Code Execution via Volume MountSmartertools Smartermail
- CVE-2026-108113ILIAS before 9.24, 10.12, and 11.5 Unrestricted File Upload via QTI ImportILIAS-eLearning e.V. ILIAS
- CVE-2026-108110MOVO through 0.2.3 Authorization Bypass via Document Endpointshimovo MOVO
- CVE-2026-107807Nginx UI: Node Secret Credential Exposure via URL Query Parameter0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-108125WordPress Post Author Authenticated SQLiwp-post-author
- CVE-2026-107805Nginx UI: Unauthenticated signed-request body staging can exhaust temporary storage0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-95702Code Execution in Host Sentry Process via Double Free in gVisor VFS MemoryFileGoogle gVisor
- CVE-2026-39453Red Lion Controls N-Tron 700 Series Reachable AssertionRed Lion Controls 700 Series
- CVE-2026-29797Red Lion Controls N-Tron 700 Series Download of Code Without Integrity CheckRed Lion Controls 700 Series
- CVE-2026-33367Red Lion Controls N-Tron 700 Series Missing Authentication for Critical FunctionRed Lion Controls 700 Series
- CVE-2026-28745Red Lion Controls N-Tron 700 Series Storing Passwords in a Recoverable FormatRed Lion Controls 700 Series
- CVE-2026-108108PHPNuxBill through 2025.3.20 CHAP Authentication Bypass via Password::chap_verify()hotspotbilling phpnuxbill
- CVE-2026-108106Xerial snappy-java before 1.1.10.9 Unbounded Memory Allocation Denial of Servicexerial snappy-java · org.xerial.snappy:snappy-java
- CVE-2026-39460Red Lion Controls N-Tron 700 Series Insufficiently Protected CredentialsRed Lion Controls 700 Series
- CVE-2026-104081KodExplorer < 4.55 Path Traversal via unzip_pre_name() ZIP Extractionkalcaddle KodExplorer
- CVE-2026-108105Open5GS through 2.8.0 MME Reachable Assertion via GTPv1 SGSN Context Requestopen5gs
- CVE-2026-108101HortusFox through 6.3 Unrestricted File Upload via Plant Attachmentsdanielbrendel hortusfox-web
- CVE-2026-108100HortusFox before 6.2 SQL Injection via /api/locations/list include_info Parameterdanielbrendel hortusfox-web
- CVE-2026-94067WordPress The Voux theme <= 6.9.5 - Local File Inclusion vulnerabilityFuelthemes The Voux
- CVE-2026-94066WordPress Pond theme <= 2.6.1 - Reflected Cross Site Scripting (XSS) vulnerabilitySpabRice Pond
- CVE-2026-94063WordPress Education Center theme <= 3.6.12 - Reflected Cross Site Scripting (XSS) vulnerabilityThemeREX Education Center
- CVE-2026-94065WordPress ColorFolio theme <= 1.3 - PHP Object Injection vulnerabilityBuddhaThemes ColorFolio
- CVE-2026-94064WordPress Neo | Barber Shop WordPress Theme theme <= 3.5 - PHP Object Injection vulnerabilityBuddhaThemes Neo | Barber Shop WordPress Theme
- CVE-2026-104629Grid Protection Alliance openPDC and openHistorian Use of Externally-Controlled Input to Select Classes or CodeGrid Protection Alliance openPDC · Grid Protection Alliance…
- CVE-2026-105281Grid Protection Alliance openPDC and openHistorian Missing Authentication for Critical FunctionGrid Protection Alliance openPDC · Grid Protection Alliance…
- CVE-2026-106581Docker Desktop for Windows installer failed to verify external packagesDocker Desktop
- CVE-2026-62026WordPress Dashboard Notes plugin <= 1.0.3 - Cross Site Request Forgery (CSRF) vulnerabilityMIGHTYminnow Dashboard Notes
- CVE-2026-94062WordPress Werkstatt theme <= 4.8.3 - Local File Inclusion vulnerabilityFuelthemes Werkstatt
- CVE-2026-94061WordPress Whistle - Sports Club theme <= 4.2 - Reflected Cross Site Scripting (XSS) vulnerabilityDesignthemes Whistle - Sports Club
- CVE-2026-94060WordPress Voldor theme <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerabilityBracketweb Voldor
- CVE-2026-94059WordPress Ogency theme <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerabilityBracketweb Ogency
- CVE-2026-94058WordPress Treck theme <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerabilityBracketweb Treck
- CVE-2026-103413Apache Camel Karavan: unvalidated Kubernetes resources applied from a project's kubernetes.yamlApache Software Foundation Apache Camel Karavan
- CVE-2026-103412Apache Camel Karavan: project file name path traversal when committing a project to GitApache Software Foundation Apache Camel Karavan
- CVE-2026-8374Misuse and Misconfiguration of Cryptographic Algorithm in Bluetooth CommunicationSwitchBot Lock · SwitchBot Keypad +1
- CVE-2026-105883WordPress Th Shop Mania theme <= 1.9.1 - Broken Access Control vulnerabilityThemeHunk Th Shop Mania
- CVE-2026-104392WordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerabilityExpressTech Quiz And Survey Master
- CVE-2026-105870WordPress WP Associate Post R2 plugin <= 5.0.1 - Cross Site Scripting (XSS) vulnerabilityDelight Star WP Associate Post R2
- CVE-2026-105872WordPress Product Configurator for WooCommerce plugin <= 1.7.5 - PHP Object Injection vulnerabilitymklacroix Product Configurator for WooCommerce
- CVE-2026-105318WordPress AcyMailing SMTP Newsletter plugin <= 11.1.0 - Cross Site Scripting (XSS) vulnerabilityDatasolution AcyMailing SMTP Newsletter
- CVE-2026-108039Apache CXF: Prevent unbounded XML document size in StaxUtils by adding default element and character limitsApache Software Foundation Apache CXF
- CVE-2026-107937Apache CXF: The attachment header size and count limits can be bypassed, which allows denial of service through memory exhaustion.Apache Software Foundation Apache CXF
- CVE-2026-100227Apache CXF: XML Signature wrapping in JAX-RS XML SecurityApache Software Foundation Apache CXF
- CVE-2026-97791Apache CXF: STSTokenValidator can accept untrusted SAML assertions because it shares validation state between requestsApache Software Foundation Apache CXF
- CVE-2026-86463Apache CXF: FIQL Query Parser Denial of ServiceApache Software Foundation Apache CXF
- CVE-2026-78384Apache CXF: Unbounded DEFLATE Decompression in CXF JOSE/JWE and SAML Processing (Decompression Bomb)Apache Software Foundation Apache CXF
- CVE-2026-73179Apache CXF: JPA authorization-code consume is non-atomicApache Software Foundation Apache CXF
- CVE-2026-94158WordPress Gloria Admin Panel plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerabilitybkninja Gloria Admin Panel
- CVE-2026-94161WordPress Grand Restaurant theme < 7.0.11 - Reflected Cross Site Scripting (XSS) vulnerabilityThemeGoods Grand Restaurant
- CVE-2026-94159WordPress Total Donations plugin <= 2.0.5 - Cross Site Scripting (XSS) vulnerabilityKlbTheme Total Donations
- CVE-2026-94167WordPress Kubio AI Page Builder plugin <= 2.9.3 - Cross Site Scripting (XSS) vulnerabilityExtend Themes Kubio AI Page Builder
- CVE-2026-94170WordPress Sassy Social Share plugin <= 3.3.79 - Cross Site Scripting (XSS) vulnerabilityHeateor Support Sassy Social Share
- CVE-2026-94664WordPress PDF for Contact Form 7 plugin <= 7.1.0 - Arbitrary File Download vulnerabilityadd-ons.org PDF for Contact Form
- CVE-2026-96607WordPress NEX-Forms plugin <= 9.3.1 - Cross Site Scripting (XSS) vulnerabilityBasix NEX-Forms
- CVE-2026-94666WordPress Generate PDF using Contact Form 7 plugin <= 4.2.1 - Arbitrary File Download vulnerabilityZealousWeb Generate PDF using Contact Form
- CVE-2026-96332WordPress Simple Payment plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnerabilityyalla ya! Simple Payment
- CVE-2026-94668WordPress Salon booking system plugin <= 10.31.5 - Cross Site Scripting (XSS) vulnerabilityDimitri Grassi Salon booking system
- CVE-2026-94663WordPress ProfileGrid plugin <= 6.0.0.2 - SQL Injection vulnerabilityMetagauss ProfileGrid
- CVE-2026-94661WordPress JetBlog plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetBlog
- CVE-2026-94641WordPress UsersWP plugin <= 1.2.73 - Cross Site Scripting (XSS) vulnerabilityStiofan UsersWP
- CVE-2026-94632WordPress BlockStrap Page Builder - Bootstrap Blocks plugin <= 0.1.58 - Cross Site Scripting (XSS) vulnerabilityStiofan BlockStrap Page Builder - Bootstrap Blocks
- CVE-2026-94415WordPress Betheme theme <= 28.5.8 - Cross Site Scripting (XSS) vulnerabilityMuffingroup Betheme
- CVE-2026-94166WordPress UpSolution Core plugin < 9.4.1 - Cross Site Scripting (XSS) vulnerabilityUpSolution Core
- CVE-2026-96761WordPress Welcart e-Commerce plugin <= 2.12.3 - Cross Site Scripting (XSS) vulnerabilityWelcart e-Commerce
- CVE-2026-96671WordPress Featured Image from URL plugin <= 6.0.7 - Cross Site Request Forgery (CSRF) vulnerabilityfifu.app Featured Image from URL
- CVE-2026-96329WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerabilitytagDiv Opt-In Builder
- CVE-2026-95609WordPress Media LIbrary Assistant plugin <= 3.41 - Cross Site Scripting (XSS) vulnerabilityDavid Lingren Media LIbrary Assistant
- CVE-2026-95599WordPress Taskbuilder plugin <= 6.0.5 - SQL Injection vulnerabilityTaskbuilder
- CVE-2026-95598WordPress Search in Place plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerabilitycodepeople Search in Place
- CVE-2026-95596WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 3.4.1 - Cross Site Scripting (XSS) vulnerabilityMamunur Rashid ShopBuilder – Elementor WooCommerce Builder…
- CVE-2026-95591WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.14 - Cross Site Scripting (XSS) vulnerabilitye4jvikwp VikBooking Hotel Booking Engine & PMS
- CVE-2026-94568WordPress Pay with Vipps for WooCommerce plugin <= 6.2.0 - PHP Object Injection vulnerabilityWP Hosting AS Pay with Vipps for WooCommerce
- CVE-2026-95607WordPress WPLMS theme <= 4.973 - SQL Injection vulnerabilityVibeThemes WPLMS
- CVE-2026-95608WordPress HUSKY plugin <= 1.4.3.2 - Cross Site Scripting (XSS) vulnerabilityPluginUs.Net HUSKY
- CVE-2026-95610WordPress UpSolution Core plugin <= 9.3 - SQL Injection vulnerabilityUpSolution Core
- CVE-2026-96461WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerabilityTMS Amelia
- CVE-2026-96333WordPress GiveWP plugin <= 4.16.8.1 - Payment Bypass vulnerabilityLiquid Web / StellarWP GiveWP
- CVE-2026-96553WordPress FiboSearch plugin <= 1.34.1 - Cross Site Scripting (XSS) vulnerabilityDamian Góra FiboSearch
- CVE-2026-96336WordPress Forminator plugin <= 1.57.2 - Payment Bypass vulnerabilityWPMU DEV Forminator
- CVE-2026-71884Packet CTR reports a full success length after the counter is exhaustedLegion of the Bouncy Castle BC-LTS-JAVA
- CVE-2026-78025Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnDell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-78024Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability.Dell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-78023Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled KeyDell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-78020Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability.Dell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-78019Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Functionality from Untrusted ControDell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-76779Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Excessive AuthenticationDell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-104635Uncontrolled recursion in elixir-protobuf/protobuf JSON decoding of self-referential messageselixir-protobuf protobuf · protobuf
- CVE-2026-98383bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCALLinux
- CVE-2026-98382bpf: Reject dev-bound-only programs on other devicesLinux
- CVE-2026-98381veth: manage XDP program pointers during channel resizeLinux
- CVE-2026-98378bpf: Skip unsettled links in link iteratorLinux
- CVE-2026-98376bpf: Use array_map_meta_equal for percpu array inner map replacementLinux
- CVE-2026-19575Type confusion in the device_deinit system call allows user-mode threads to execute arbitrary kernel codezephyrproject zephyr
- CVE-2026-19569Integer overflow in dynamic kernel object allocation allows user-mode threads to corrupt the kernel heapzephyrproject zephyr
- CVE-2026-19574ARM64 MMU can assign an in-use ASID to a new memory domain, breaking user-mode memory isolationzephyrproject zephyr
- CVE-2026-19570Out-of-bounds write in LE Audio Broadcast Sink when copying BASE subgroup metadata into the BASS receive statezephyrproject zephyr
- CVE-2026-106155Stored Cross-site Scripting (XSS) in Telerik Report Server Web Report ViewersProgress Software Telerik Report Server
- CVE-2026-106145Privilege Escalation in Telerik Report Server Service-Agent HubProgress Software Telerik Report Server
- CVE-2026-97076WordPress WP Rocket plugin < 3.23.5 - Denial of Service Attack vulnerabilityWP Media WP Rocket
- CVE-2026-81929Ocean Pro Demos <= 1.5.4 and Ocean eComm Treasure Box <= 1.8.0 - Unauthenticated Stored Cross-Site Scripting via 'content' ParameterOceanWP Ocean Pro Demos · OceanWP Ocean eComm Treasure Box
- CVE-2026-93548FooSales < 1.43.3 - Subscriber+ Privilege Escalation via User ImpersonationFooSales
- CVE-2025-15700AWP Classifieds < 4.4.9 - Admin+ Arbitrary File Upload via ZIP ImportAWP Classifieds
- CVE-2026-107914Backdrop CMS 1.34 before 1.34.5 and 1.35 before 1.35.1 doesn't sufficiently protect configuration exports when delivering a compressed archibackdropcms Backdrop
- CVE-2026-107911Type confusion in FalkorDB GRAPH.QUERY via the --bolt argumentFalkorDB
- CVE-2026-107909Pre-authentication heap out-of-bounds write in FalkorDB Bolt WebSocket frame handling via unbounded payload lengthFalkorDB
- CVE-2026-7826Heap out-of-bounds read in FalkorDB BufferSerializerIOv2_ReadBuffer via crafted RDBFalkorDB
- CVE-2025-61560A race condition vulnerability in the SessionManager of CNCF: Cloud Native Computing Foundation Argo CD v3.0.6 allows attackers to bypass ra
- CVE-2026-75345OpENer v2.3.0 / commit 76b95cf contains an out-of-bounds read in the unconnected explicit messaging path.
- CVE-2026-75346An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master through commit 76b95cf in the server-side CIP SetAttribut
- CVE-2026-75347EIPStackGroup OpENer v2.3 and master up to commit 76b95cf contain an expired pointer dereference vulnerability in the EtherNet/IP Common Pac
- CVE-2026-75348An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master up to commit 76b95cf in the EtherNet/IP TCP SendRRData Co
- CVE-2026-75349EIPStackGroup OpENer v2.3.0/master up to commit 76b95cf contains an out-of-bounds read vulnerability in Connection Manager request parsing.
- CVE-2026-75350EIPStackGroup OpENer v2.3 / master commit 76b95cf contains a buffer overflow in the GetAttributeList() implementation for the EtherNet/IP Ge
- CVE-2026-75351OpENer v2.3/commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser.
- CVE-2026-75352OpENer v2.3/commit 76b95cf, contains an integer underflow in the server-side EtherNet/IP ForwardOpen connection-path parser.
- CVE-2026-75353OpENer v2.3/ commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser.
- CVE-2026-78795An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a remote attacker to
Medium, low and unrated 129
- CVE-2026-108258Shiny for Python - Path traversal in bookmark restoreposit-dev py-shiny · shiny
- CVE-2026-107857Mindwtr: Cloud token and WebDAV password stored in plaintext on mobiledongdongbh Mindwtr
- CVE-2026-107856CiviForm: Trusted-Intermediary IDOR discloses any citizen's name and emailciviform
- CVE-2026-107854Jexactyl: Free-billing order endpoint renews and unsuspends arbitrary servers by ID (missing ownership check)Jexactyl
- CVE-2026-107851Contao: Improper access control in the table access votercontao · contao/core-bundle
- CVE-2026-107850Contao: Improper access control in the preview links modulecontao · contao/core-bundle
- CVE-2026-107848Contao: Cross-site request forgery in custom backend actionscontao · contao/core-bundle
- CVE-2026-107844Contao: Path traversal in the images controllercontao · contao/core-bundle
- CVE-2026-107843Contao: The registration module re-sends activation mails on any unauthenticated POST, with no throttle and no captcha checkcontao · contao/core-bundle
- CVE-2026-107842Contao: Protected page content is disclosed to anonymous visitors after contao.search.index_protected is disabledcontao · contao/core-bundle
- CVE-2026-107841pacioli: A submit consent marker licensed cancellation of caller-named pre-existing documentsjohn-broadway pacioli · pacioli-guard
- CVE-2026-108096Improper authorization in query resolvers for SQL-backed models in AWS Amplify API Categoryaws-amplify/graphql-index-transformer · aws-amplify/grap… +1
- CVE-2026-107835OWASP Coraza WAF: Cookie Parser Confusioncorazawaf coraza · github.com/corazawaf/coraza/v3 +2
- CVE-2026-107820x64dbg-MCP Server vulnerable to pre-authentication denial of service through Content-Length integer overflowduty1g x64dbg-mcp-server
- CVE-2026-107834OWASP Coraza WAF: Resource exhaustion via deferred file handle accumulation in multipart body processorcorazawaf coraza · github.com/corazawaf/coraza/v3 +2
- CVE-2026-107833OWASP Coraza WAF: Unbounded recursion in JSON response body processor causes CPU exhaustioncorazawaf coraza · github.com/corazawaf/coraza/v3 +2
- CVE-2026-107825OWASP Coraza WAF: ProcessURI silently drops QUERY_STRING and ARGS_GET on URI parse failure — defense-in-depth bypass for non-net/http integrationscorazawaf coraza · github.com/corazawaf/coraza/v3 +2
- CVE-2026-107822MariaDB: database privilege escalation via user / role name collision in the acl cacheMariaDB server · mariadb +2
- CVE-2026-107819MariaDB Connector/C: libmariadb allowed cleartext password leakage on TLS hostname verification failureMariaDB server
- CVE-2026-107817MariaDB: mysql_json plugin OOB readsMariaDB server · mariadb +2
- CVE-2026-107816MariaDB: `qc_info` plugin can do OOB reads if query contains \0MariaDB server · mariadb +2
- CVE-2026-42695WordPress FV Flowplayer Video Player plugin <= 7.5.54.7212 - Cross Site Scripting (XSS) vulnerabilityFolioVision FV Flowplayer Video Player
- CVE-2026-108119Busybox: busybox: tar extraction-root escape via deferred symlink/hardlink creation bypasses cve-2026-26158 fixRed Hat Hardened Images · Red Hat Enterprise Linux
- CVE-2026-108093Gimp: gimp: denial of service via null pointer dereference in xcf simulation parasite loadingRed Hat Enterprise Linux
- CVE-2026-75597pyLoad: Unauthenticated access to /web/<path:filename> bypasses authentication on sensitive templates and leaks internal error details via exception attribute typopyload · pyload-ng
Show all 129 entriesShow fewer entries
- CVE-2026-48484pyLoad: Lack of Input Size Validation Leads to Denial of Service (DoS) and Process Terminationpyload · pyload-ng
- CVE-2026-108156LobsterAI 2026.5.27 through 2026.9.23 Arbitrary Directory Deletion via Skill _meta.jsonnetease-youdao LobsterAI
- CVE-2016-20098Moderator Toolbox before 4.0.14 Stored XSS via Removal Reasons Configurationtoolbox-team reddit-moderator-toolbox
- CVE-2026-107783Insertion of sensitive information into log file in AWS Tools for PowerShellaws-tools-for-powershell
- CVE-2026-104083SmarterMail < Build 9777 Stored Mutation XSS via MathML Foreign ContentSmartertools Smartermail
- CVE-2026-108112ruoyi-ai 3.0.0 through 3.1.0 Missing Authorization via Workflow Delete Endpointageerle ruoyi-ai
- CVE-2026-108111ruoyi-ai 3.0.0 through 3.1.0 Missing Authorization via /workflow/searchageerle ruoyi-ai
- CVE-2026-108124WordPress Post Author Authenticated SQLiwp-post-author
- CVE-2026-107804Nginx UI: Bundled reverse proxy can bypass IP allowlists and enable shared login lockout0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-33272Red Lion Controls N-Tron 700 Series Authentication Bypass Using an Alternate Path or ChannelRed Lion Controls 700 Series
- CVE-2026-108104Xerial snappy-java 1.1.7.4 before 1.1.10.10 Double Release of Pooled Buffers in SnappyFramedInputStreamxerial snappy-java
- CVE-2026-104115Stack buffer overflow in illumos reparsed nfs-basic plugin allows local users to crash the daemonillumos-gate · OmniOS
- CVE-2026-32645Red Lion Controls N-Tron 700 Series Use of Hard-Coded CredentialsRed Lion Controls 700 Series
- CVE-2026-104114NULL pointer dereference in illumos nwamd door handler allows local users to crash the daemonillumos-gate · OmniOS
- CVE-2026-104112Missing release of passed file descriptors in illumos nscd allows local users to exhaust kernel memoryillumos-gate · OmniOS
- CVE-2026-104116Missing authorization in illumos zonestatd allows local users to disrupt zonestat and enumerate running zonesillumos-gate · OmniOS
- CVE-2026-104113Double free in OmniOS and SmartOS ipmgmtd allows local users to crash the daemonOmniOS
- CVE-2026-104117Missing authorization in illumos ipmgmtd allows local users to change persistent IPMP group membershipillumos-gate · OmniOS
- CVE-2026-102916Reachable assertion in illumos bhyve REP string instruction emulation allows guest to panic hostillumos-gate · OmniOS
- CVE-2026-108103Open5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Dropped DL Traffic Threshold IEopen5gs
- CVE-2026-108102Open5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Volume Measurement IEopen5gs
- CVE-2026-101022Grid Protection Alliance openPDC and openHistorian Server-Side Request Forgery (SSRF)Grid Protection Alliance openPDC · Grid Protection Alliance…
- CVE-2026-85479Grid Protection Alliance openPDC and openHistorian Missing Authentication for Critical FunctionGrid Protection Alliance openPDC · Grid Protection Alliance…
- CVE-2026-107803ProcessMaker has SQL injection in the tasks endpoint through the order_by parameterprocessmaker
- CVE-2026-108063Libhangul: null pointer dereference in hanja_new() when looking up a malformed hanja dictionary entryRed Hat Enterprise Linux
- CVE-2026-92085Stored XSS in TMT Machine's Talassoft Industrial Management SoftwareTMT Machinery Industry and Trade Co. Talassoft Industrial M…
- CVE-2026-107785Crux Agent silently fails SKA preshared key rotation when SHA-512 peering is negotiatedSirius Computer Crux Agent
- CVE-2026-103220The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing raster image datcanva affinity
- CVE-2026-101130The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing arrays of stringcanva affinity
- CVE-2026-101094The Affinity by Canva application before 3.3.1 (October 2026 release) did not correctly handle incomplete UTF-8 character sequences when parcanva affinity
- CVE-2026-96396The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not safely calculate the size of an image buffer when gecanva affinity
- CVE-2026-96395The Affinity by Canva app for macOS before 3.3.1 (October 2026 release) did not perform adequate bounds checking when generating QuickLook tcanva affinity
- CVE-2026-96394The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not validate image dimensions against the size of the picanva affinity
- CVE-2026-96393The Affinity by Canva app before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing Affinity document files,canva affinity
- CVE-2026-62028WordPress Before After Image Comparison – Image comparison for WP plugin <= 1.1.21 - Broken Access Control vulnerabilitybPlugins Before After Image Comparison – Image comparison f…
- CVE-2026-106601WordPress Jetpack plugin <= 16.2 - Broken Authentication vulnerabilityAutomattic Jetpack
- CVE-2026-106602WordPress Jetpack plugin <= 16.2 - Broken Authentication vulnerabilityAutomattic Jetpack
- CVE-2026-105877WordPress QA Analytics plugin <= 5.3.0.0 - Sensitive Data Exposure vulnerabilityQuarkA QA Analytics
- CVE-2026-104079Envira Gallery Lite < 1.16.2 Missing Authorization via Gallery Conversion REST EndpointSyed Balkhi Envira Gallery
- CVE-2026-62029WordPress WPFunnels plugin <= 3.13.3 - Cross Site Scripting (XSS) vulnerabilityWPFunnels Team WPFunnels
- CVE-2026-62036WordPress All Bootstrap Blocks plugin <= 1.3.31 - Sensitive Data Exposure vulnerabilityAREOI All Bootstrap Blocks
- CVE-2026-39779WordPress Asgaros Forum plugin <= 3.4.0 - Broken Access Control vulnerabilityAsgaros Forum
- CVE-2026-62039WordPress Html5 Audio Player plugin <= 2.8.8 - Cross Site Scripting (XSS) vulnerabilitybPlugins Html5 Audio Player
- CVE-2026-62040WordPress Restrict User Access – Membership Plugin with Force plugin <= 2.8.1 - Broken Access Control vulnerabilityDEV Institute Restrict User Access – Membership Plugin with…
- CVE-2026-62041WordPress WP Event Manager plugin <= 3.4.1 - Broken Access Control vulnerabilityAshok Dudhat WP Event Manager
- CVE-2026-62042WordPress Scripts n Styles plugin <= 3.5.8 - Broken Access Control vulnerabilityunFocus Projects Scripts n Styles
- CVE-2026-107419WordPress AI Translation for Polylang plugin <= 1.6.2 - Broken Access Control vulnerabilityCool Plugins AI Translation for Polylang
- CVE-2026-103329Super Payments < 1.43.1 - Unauthenticated Payment Confirmation Forgery via Webhook SignatureSuper Payments
- CVE-2026-86851Livees Checkout 6.8 - 7.0.2 - Unauthenticated Order Status Change, Order Note Injection & Order Key DisclosureLivees Checkout
- CVE-2026-87846Shipping for Nova Poshta 1.18.7 - 1.19.8 - Unauthenticated Order Shipment Record DeletionShipping for Nova Poshta
- CVE-2026-85348GDPR Data Request Form 1.5 - 1.7.1 - DPO Email Update via CSRFGDPR Data Request Form
- CVE-2026-89235Testimonials by BestWebSoft 1.0.5 - 1.0.8 - Unauthenticated SQLi via 'offset' ParameterTestimonials by BestWebSoft
- CVE-2026-79650Apache CXF: OIDC RP Open RedirectApache Software Foundation Apache CXF
- CVE-2026-96334WordPress User Registration plugin <= 5.2.7 - Broken Access Control vulnerabilityThemeGrill User Registration
- CVE-2026-95589WordPress Deposits and Partial Payments for WooCommerce plugin <= 4.0.1 - Broken Access Control vulnerabilityMagepeople Deposits and Partial Payments for WooCommerce
- CVE-2026-94667WordPress JetReviews plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetReviews
- CVE-2026-94665WordPress Classified Listing plugin <= 6.1.2 - Cross Site Scripting (XSS) vulnerabilityMamunur Rashid Classified Listing
- CVE-2026-95597WordPress 워드프레스 결제 심플페이 plugin <= 5.5.17 - Settings Change vulnerabilitycodemstory 워드프레스 결제 심플페이
- CVE-2026-96337WordPress ProfilePress plugin <= 4.17.3 - Broken Access Control vulnerabilityproperfraction ProfilePress
- CVE-2026-96518WordPress ProfilePress plugin <= 4.17.3 - Broken Access Control vulnerabilityproperfraction ProfilePress
- CVE-2026-96539WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerabilityUltimate Member
- CVE-2026-78341Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Authorization vulnerability.Dell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-78340Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Limitation of a Pathname to a RestricteDell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-78339Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical ResDell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-78027Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability.Dell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-78026Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled KeyDell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-62049WordPress JetBlocks For Elementor plugin <= 1.5.2.1 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetBlocks For Elementor
- CVE-2026-78022Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Not Failing Securely ('Failing Open') vulnerabiliDell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-107655Cups: null pointer dereference via embedded job ticket comments allows remote denial of serviceRed Hat Hardened Images · Red Hat Enterprise Linux
- CVE-2026-78021Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Generation of Error Message Containing Sensitive Dell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-78018Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure DeDell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-78017Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Check for Unusual or Exceptional ConditDell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-78016Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Validation of Specified Type of Input vDell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-78015Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use of Less Trusted Source vulnerability.Dell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-78013Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure DeDell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-76769Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authorization vulnerability.Dell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-84224Kirki < 6.3.2 - Editor+ Blind SSRF via Remote Template URLKirki
- CVE-2026-84220Kirki < 6.3.2 - Unauthenticated Arbitrary Shortcode Execution via Comments CollectionKirki
- CVE-2026-97075WordPress WP Rocket plugin < 3.23.5 - Broken Access Control vulnerabilityWP Media WP Rocket
- CVE-2026-4264Reflected Cross-Site Scripting in BeeTienda eCommerce platformBeeTienda eCommerce Platform
- CVE-2025-14123Redux Framework <= 4.5.11 – Authenticated (Subscriber+) Privilege Escalation via Users Extensiondavidanderson Redux Framework
- CVE-2026-98384bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy()Linux
- CVE-2026-98380net/sched: reject IDR error pointers when deleting actionsLinux
- CVE-2026-98379netfilter: ip6t_rpfilter: reject routes without inet6_devLinux
- CVE-2026-98377vlan: require the MAC header to be present in __vlan_insert_inner_tag()Linux
- CVE-2026-19571Race condition in ITE IT8xxx2 SHI host-command backend lets a second SPI request write an unvalidated length into the in-flight request…zephyrproject zephyr
- CVE-2026-98375xen/netfront: drop RX packets with a short Ethernet headerLinux
- CVE-2026-101028Ash.count, Ash.exists and Ash.aggregate skip related resources' read policies in filters and sortsash-project ash · ash
- CVE-2026-106097Code Snippets < 3.10.0 - Admin+ SQLi in Migration Importers Leading to Network-Wide Credential Disclosure (Multisite)Code Snippets
- CVE-2026-106095Code Snippets < 3.10.0 - Admin+ Network-Scoped Snippet Activation and Deactivation via update_code_snippetCode Snippets
- CVE-2026-87841UnitechPay <= 1.0.6.3 - Unauthenticated Order Payment Bypass via Unsigned WebhookUnitechPay
- CVE-2026-88931Social Web Suite <= 4.1.12 - Unauthenticated Arbitrary Plugin Settings UpdateSocial Web Suite
- CVE-2026-86850SKU Error Fixer for WooCommerce <= 1.0 - Unauthenticated Orphaned Product Variation DeletionSKU Error Fixer for WooCommerce
- CVE-2026-92990SendPress <= 1.26.1.20 - Unauthenticated Newsletter Sending Log Disclosure via Hardcoded TokenSendPress Newsletters
- CVE-2026-92989SendPress Newsletters <= 1.26.1.20 - Subscriber+ Mailing List Sync and Newsletter QueueingSendPress Newsletters
- CVE-2026-87109Ops Manager Sensitive MFA Enrollment Information Exposure in User ListingsMongoDB Ops Manager
- CVE-2026-87108Ops Manager Improper Authorization in Daily Host Monitoring RetrievalMongoDB Ops Manager
- CVE-2026-87110Ops Manager Uncontrolled Resource Consumption in Monitoring EndpointsMongoDB Ops Manager
- CVE-2026-107889Keycloak-services: keycloak-services: stored xss on login page via kcsanitize bypassRed Hat build of Keycloak · Red Hat Single Sign-On
- CVE-2026-107890OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests.OpenPrinting CUPS
- CVE-2026-107888OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a job marked job-held-on-create refers to a temOpenPrinting CUPS
- CVE-2026-107886OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management.OpenPrinting CUPS
- CVE-2026-107885OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs().OpenPrinting CUPS
- CVE-2026-79363Cloudron 9.1.7 and 9.2 contain a stored cross-site scripting (XSS) vulnerability in the Branding Footer feature.