CVEs published October 12, 2026
683 CVEs were published on October 12, 2026: 54 critical, 261 high. Browse them by severity, product and exploitation status.
- Published
- 683
- Critical
- 54
- High
- 261
- Medium
- 337
- Low
- 31
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 457
Most affected products
- frappe erpnext
- 66
- Progress Software MarkLogic Server
- 31
- ImageMagick
- 26
- open-webui
- 19
- FreeRDP
- 18
- frappe
- 17
- Samsung Mobile Devices
- 13
- Thelia
- 13
- jishenghua jshERP
- 11
- surrealdb
- 11
Critical 54
- CVE-2026-96119IBM i is Affected By An Improper Control of Code Generation Vulnerability in HTTP Server Administration GUIIBM i
- CVE-2026-82101DataStage on Cloud Pak for Data Path TraversalIBM DataStage on Cloud Pak for Data
- CVE-2026-82103DataStage on Cloud Pak for Data Information DisclosureIBM DataStage on Cloud Pak for Data
- CVE-2026-82110DataStage on Cloud Pak for Data Path TraversalIBM DataStage on Cloud Pak for Data
- CVE-2026-109573phpMyFAQ before 4.1.9 SQL Injection via api/autocomplete Search Endpointthorsten phpMyFAQ
- CVE-2026-44828Qexo initialization endpoint can reset setup state and expose stored credentialsQexo
- CVE-2026-90920Maximo AI Service Code InjectionIBM Maximo AI Service
- CVE-2026-109569sandboxed.sh through 1.3.0 Container Escape via nsenter Missing Root NamespaceTh0rgal sandboxed.sh
- CVE-2026-109566Rapyd Admin 9.0.0 before 9.20.0 Hard-Coded Super-Admin Credentials via AuthSeederzofe rapyd-admin
- CVE-2025-71429GPT-SoVITS through 20250606v2pro OS Command Injection via UVR5 vr.pyRVC-Boss GPT-SoVITS
- CVE-2020-37279easy-pdf-merge 0.1.0 through 0.2.6 OS Command Injection via merge functionkaruppiah7890 easy-pdf-merge
- CVE-2026-53997Netherman Portal del Hermano Account Takeover via Password Reset OracleNetHerman Portal del Hermano
- CVE-2026-108929Netcore NR268 DDNS DDNSset.cgi execvp argument injectionNetcore NR268
- CVE-2026-92120Apache Allura: Oauth1 Replay AttackApache Software Foundation Apache Allura
- CVE-2026-92119Apache Allura: REST API Mass AssignmentApache Software Foundation Apache Allura
- CVE-2026-92116Apache Allura: OAuth1 missing callback validationApache Software Foundation Apache Allura
- CVE-2026-109423NetEase Cloud Music TLS Certificate Validation BypassNetEase Cloud Music for Windows
- CVE-2026-109422NetEase Cloud Music RCE via os.navigateExternal IPCNetEase Cloud Music for Windows
- CVE-2026-109575In HAProxy Data Plane API 2.2.0 through 3.4.3 (and corresponding Enterprise Edition releases), Server.ConfigureAPI() has process-global authHAProxy Data Plane API EE · HAProxy Data Plane API CE
- CVE-2026-96012IBM Db2 Mirror for i Privilege EscalationIBM Db2 Mirror for i
- CVE-2026-108362Privasys attested TLS accepted evidence from any unrevoked TEE platform (diversion attack)Privasys ra-tls-clients
- CVE-2026-57118PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpointsMervinPraison PraisonAI · MervinPraison praisonaiagents +1
- CVE-2026-87744Io.quarkus:quarkus-hibernate-orm-rest-data-panache: missing authorization in quarkus rest data panache via dropped security annotationsRed Hat build of Quarkus 3.27.6.redhat · Red Hat build o… +1
- CVE-2026-108918Edimax BR-6208AC formWlanMP command injectionEdimax BR-6208AC
- CVE-2026-77366obsidian-tc tokens can access arbitrary configured vaultsThe-40-Thieves obsidian-tc · obsidian-tc
Show all 54 entriesShow fewer entries
- CVE-2026-108917Edimax BR-6208AC formAutoFWupgrade command injectionEdimax BR-6208AC
- CVE-2026-108915Edimax BR-6208AC formWlanMP buffer overflowEdimax BR-6208AC
- CVE-2026-84286OOB Read/Write via Negative Array Index in exllamav3_ext Kernel TableTurboderp-org ExLlamaV3
- CVE-2026-108914Edimax BR-6208AC formWlSiteSurvey buffer overflowEdimax BR-6208AC
- CVE-2026-108907Netcore NR268 CGI Execution user_ok improper authenticationNetcore NR268
- CVE-2026-109373ZITADEL 3.0.0 before 4.19.2 Account Takeover via Unsigned Login V2 Session Cookiezitadel
- CVE-2026-109372ZITADEL 3.0.0 before 4.19.2 Account Takeover via SAML Identity-Provider Confusionzitadel
- CVE-2026-109357LibreNMS before 26.9.0 LDAP Filter Injection Authentication Bypass via Authorization Headerlibrenms
- CVE-2026-109321Grav Login OAuth Plugin before 1.4.3 Predictable Local Credentials Authentication Bypassgetgrav grav-plugin-login-oauth
- CVE-2026-109238Crawl4AI 0.7.0 before 0.9.4 SSRF via link_preview_config URL Seederunclecode crawl4ai
- CVE-2026-85956Improper privilege management in Progress MarkLogic Server backup and restore operationsProgress Software MarkLogic Server
- CVE-2026-85955Improper privilege management in Progress MarkLogic Server xdmp:eval-inProgress Software MarkLogic Server
- CVE-2026-85948Improper privilege management in Progress MarkLogic Server Management APIProgress Software MarkLogic Server
- CVE-2026-85947Improper privilege management in Progress MarkLogic Server forest operationsProgress Software MarkLogic Server
- CVE-2026-9191Insufficient isolation of user-supplied code in Progress MarkLogic ServerProgress Software MarkLogic Server
- CVE-2026-109399SWUpdate through 2026.05.1 CMS Signature Verification Bypass via Embedded Intermediatessbabic swupdate
- CVE-2026-109394Thirty bees through 1.7.0 Account Takeover via PasswordController Guest Checkoutthirty bees
- CVE-2026-109391Square Squash through commit e73f280 Unauthenticated YAML Deserialization via Symbolication APISquare Squash
- CVE-2026-92681@neo4j/graphql: schema-level and type-level @authentication not enforced on top-level @cypher fields@neo4j/graphql
- CVE-2026-109390AnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbitrary code via a heap-based buffer overflow, as demonstrated on AnyDesk
- CVE-2026-108896Linksys E1700 setLinksysIpv6 os command injectionLinksys E1700
- CVE-2026-108895Linksys E1700 setDMZ os command injectionLinksys E1700
- CVE-2026-108894Linksys E1700 Static Route addStaticRoute os command injectionLinksys E1700
- CVE-2026-108893Linksys E1700 setVlan stack-based overflowLinksys E1700
- CVE-2026-108892Linksys E1700 Mac Filter ssid1MACFilter stack-based overflowLinksys E1700
- CVE-2026-85499Apache SkyWalking BanyanDB: Canopy does not enforce readonly-role restrictions on the /monitoring/* proxyApache Software Foundation Apache SkyWalking BanyanDB
- CVE-2026-93582Authentication Bypass via Spoofed Remote-User Header in HTTP Basic AuthenticationOTRS GmbH (former OTRS AG) OTRS · OTRS GmbH (former OTRS AG…
- CVE-2026-78357Insufficient Session Revocation for JWT AuthenticationOTRS GmbH (former OTRS AG) OTRS
- CVE-2026-108804TRENDnet TEW-751DR/TEW-752DRU/TEW733GR Web Management Backend pigwidgeon.cgi fwrite os command injectionTRENDnet TEW-751DR · TRENDnet TEW-752DRU +1
High 261
- CVE-2026-93886IBM i is Affected By An Improper Neutralization of Input Vulnerability in HTTP Server Administration GUIIBM i
- CVE-2026-75095IBM Aspera Enterprise Webapps Denial of ServiceIBM Aspera Enterprise WebApps
- CVE-2026-75782IBM Aspera Enterprise Webapps Untrusted Search PathIBM Aspera Enterprise WebApps
- CVE-2026-93891Security Vulnerability identified in IBM TRIRIGA - XXEIBM TRIRIGA Application Platform
- CVE-2026-93892Security Vulnerability identified in IBM TRIRIGA - Information Disclosure in Admin ConsoleIBM TRIRIGA Application Platform
- CVE-2026-102627Security Vulnerability identified in IBM TRIRIGA - Zip SlipIBM TRIRIGA Application Platform
- CVE-2026-17475IBM Planning Analytics Local is affected by security vulnerabilitiesIBM Planning Analytics
- CVE-2026-19620IBM Planning Analytics Local is affected by security vulnerabilitiesIBM Planning Analytics
- CVE-2026-19622IBM Planning Analytics Local is affected by security vulnerabilitiesIBM Planning Analytics
- CVE-2026-75061IBM Planning Analytics Local is affected by security vulnerabilitiesIBM Planning Analytics
- CVE-2026-19627IBM Planning Analytics Local is affected by security vulnerabilitiesIBM Planning Analytics
- CVE-2026-85457IBM Planning Analytics Local is affected by security vulnerabilitiesIBM Planning Analytics
- CVE-2026-82096DataStage on Cloud Pak for Data Command InjectionIBM DataStage on Cloud Pak for Data
- CVE-2026-82108DataStage on Cloud Pak for Data Code InjectionIBM DataStage on Cloud Pak for Data
- CVE-2026-84418DataStage on Cloud Pak for Data Improper Certificate ValidationIBM DataStage on Cloud Pak for Data
- CVE-2026-109674Frappe ERPNext before 16.6.0 SQL Injection via Missing Input Validationfrappe erpnext
- CVE-2026-109673Frappe ERPNext before 16.12.0 Stored XSS via Crafted Record Namesfrappe erpnext
- CVE-2026-109672Frappe ERPNext before 15.118.0 Missing Authorization Exposes Financial Datafrappe erpnext
- CVE-2026-109671Frappe ERPNext before 15.113.0 Stored XSS via Profile Field in Portal Pagesfrappe erpnext
- CVE-2026-109667Frappe ERPNext before 15.111.0 Privilege Escalation via Unauthorized Record Creationfrappe erpnext
- CVE-2026-109666Frappe ERPNext before 15.110.0 Missing Authorization in Inventory Record Endpointsfrappe erpnext
- CVE-2026-109663Frappe ERPNext before 15.113.0 SQL Injection via Unvalidated Endpoint Parametersfrappe erpnext
- CVE-2026-109661Frappe ERPNext before 15.116.0 Missing Authorization Exposes Financial Datafrappe erpnext
- CVE-2026-109660Frappe ERPNext before 15.112.0 Missing Authorization in Production Record Endpointsfrappe erpnext
- CVE-2026-109659Frappe ERPNext before 15.113.0 Missing Authorization Exposes Financial Datafrappe erpnext
Show all 261 entriesShow fewer entries
- CVE-2026-109658Frappe ERPNext before 15.115.0 Missing Authorization on Endpointsfrappe erpnext
- CVE-2026-109656Frappe ERPNext before 15.118.2 Unauthorized Item Master Data Accessfrappe erpnext
- CVE-2026-109655Frappe ERPNext before 15.115.0 Missing Authorization in Inventory Endpointsfrappe erpnext
- CVE-2026-109653Frappe ERPNext before 15.119.0 Stored XSS Leading to Account Takeoverfrappe erpnext
- CVE-2026-109652Frappe ERPNext before 15.119.1 Server-Side Template Injection via Message Fieldsfrappe erpnext
- CVE-2026-109650Frappe ERPNext before 15.112.0 Missing Authorization Exposes Personal Datafrappe erpnext
- CVE-2026-109649Frappe ERPNext before 15.102.0 SQL Injection via Unvalidated Endpoint Requestsfrappe erpnext
- CVE-2026-109648Frappe ERPNext before 15.106.0 SQL Injection via Missing Input Validationfrappe erpnext
- CVE-2026-109647Frappe ERPNext before 15.106.0 SQL Injection via Missing Validationfrappe erpnext
- CVE-2026-109646Frappe ERPNext before 15.106.0 SQL Injection via Missing Validationfrappe erpnext
- CVE-2026-109645Frappe ERPNext before 15.119.0 Unauthorized Record Creation via Missing Authorizationfrappe erpnext
- CVE-2026-109644Frappe ERPNext before 15.119.0 Unauthorized Access to Valuation Datafrappe erpnext
- CVE-2026-109643Frappe ERPNext before 15.111.0 Missing Authorization Exposes Project Datafrappe erpnext
- CVE-2026-109640Frappe ERPNext before 16.22.0 Missing Authorization Allows Unauthorized Record Modificationfrappe erpnext
- CVE-2026-109639Frappe ERPNext before 15.102.0 SQL Injection via Unvalidated Endpoint Requestsfrappe erpnext
- CVE-2026-109638Frappe ERPNext before 15.110.0 SQL Injection via Missing Input Validationfrappe erpnext
- CVE-2026-109637Frappe ERPNext before 16.14.0 Missing Authorization Allows Master Data Modificationfrappe erpnext
- CVE-2026-109636Frappe ERPNext before 15.115.0 Missing Authorization Exposes Financial Datafrappe erpnext
- CVE-2026-109633Frappe ERPNext before 15.119.1 Stored XSS via Public Booking Pagefrappe erpnext
- CVE-2026-109632Frappe ERPNext before 15.121.0 Missing Authorization on Certain Endpointsfrappe erpnext
- CVE-2026-109631Frappe ERPNext before 15.119.1 SQL Injection via Missing Validationfrappe erpnext
- CVE-2026-109628Frappe ERPNext before 15.121.0 Unauthorized Status Modification via Missing Authorizationfrappe erpnext
- CVE-2026-109627Frappe ERPNext before 15.120.0 Missing Authorization Exposes Financial Datafrappe erpnext
- CVE-2026-109626Frappe ERPNext before 16.34.2 SQL Injection via Multiple Endpointsfrappe erpnext
- CVE-2026-109625Frappe ERPNext before 15.121.3 Missing Authorization Exposes Financial Datafrappe erpnext
- CVE-2026-109624Frappe ERPNext before 15.120.0 Missing Authorization Exposes Personal Datafrappe erpnext
- CVE-2026-109621Frappe ERPNext before 15.120.0 Unauthorized Party Record Access via Permission Bypassfrappe erpnext
- CVE-2026-109617Frappe ERPNext before 15.121.0 Missing Authorization in Record Creation Endpointsfrappe erpnext
- CVE-2026-109616Frappe ERPNext before 15.121.3 Missing Authorization Allows Unauthorized Data Modificationfrappe erpnext
- CVE-2026-109615Frappe ERPNext before 15.121.0 Missing Authorization in Document Creation Endpointsfrappe erpnext
- CVE-2026-109614Frappe ERPNext before 16.34.0 Missing Authorization Exposes Financial Datafrappe erpnext
- CVE-2026-109613Frappe ERPNext before 15.121.0 Missing Authorization Allows Unauthorized Status Modificationfrappe erpnext
- CVE-2026-109612Frappe ERPNext before 15.120.0 Stored XSS via Report Viewfrappe erpnext
- CVE-2026-109610Frappe ERPNext before 15.119.1 Missing Authorization Allows Unauthorized Document Modificationfrappe erpnext
- CVE-2026-109609Frappe ERPNext before 15.119.1 SQL Injection via Missing Input Validationfrappe erpnext
- CVE-2026-109608Frappe ERPNext before 15.121.0 SQL Injection via Unvalidated Endpoint Inputfrappe erpnext
- CVE-2026-109604ERPNext before 15.112.0 Stored XSS via Tool View Record Namesfrappe erpnext
- CVE-2026-109601Frappe Framework before v16.30.0 Arbitrary File Read via Outgoing Email HTMLfrappe
- CVE-2026-109572Open WebUI 0.8.6 before 0.11.4 Privilege Escalation via Terminal Proxyopen-webui
- CVE-2025-71432Frappe ERPNext before 15.83.0 Reflected XSS Leading to Account Takeoverfrappe erpnext
- CVE-2024-58390Frappe before 15.41.0 Privilege Escalation via Document Actionfrappe
- CVE-2023-54412Frappe before 13.46.3 Improper Access Control for Email Templatesfrappe
- CVE-2023-54411Frappe before 13.32.0 Weak Authentication via Print View Keyfrappe
- CVE-2026-90911Maximo AI Service Denial of ServiceIBM Maximo AI Service
- CVE-2026-90912Maximo AI Service Denial of ServiceIBM Maximo AI Service
- CVE-2026-90921Maximo AI Service Denial of ServiceIBM Maximo AI Service
- CVE-2026-92876IBM Maximo Application Suite - IoT Component Denial of ServiceIBM Maximo Application Suite - IoT Component
- CVE-2026-49483Code for IBMi: Uses IBM i components with blind check allowing arbitrary code executioncodefori vscode-ibmi
- CVE-2026-84312Nginx UI: Casdoor SSO callback uses a constant `state` parameter (login CSRF)0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-84360Nginx UI: OTP secure-session step-up can be bypassed via MCP configuration tools0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-84316Nginx UI: nginx config directive denylist (ValidateConfigFile) is bypassable via same-line ";" separation → authenticated directive injection (RCE on the official image)0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-84319Nginx UI: MCP configuration tools bypass restricted directive validation and allow secondary authenticated users to execute NJS in Nginx worker context0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-18513IBM Maximo Application Suite - Location Service for Esri Component Improper Privilege ManagementIBM Maximo Application Suite - Location Service for Esri Co…
- CVE-2026-18517IBM Maximo Application Suite - Location Service for Esri Component Improper Access ControlIBM Maximo Application Suite - Location Service for Esri Co…
- CVE-2026-18529IBM Maximo Application Suite - Location Service for Esri Component Code ExecutionIBM Maximo Application Suite - Location Service for Esri Co…
- CVE-2026-18537IBM Maximo Application Suite - Location Service for Esri Component Code ExecutionIBM Maximo Application Suite - Location Service for Esri Co…
- CVE-2026-75881IBM Maximo Application Suite - IoT Component Denial of ServiceIBM Maximo Application Suite - IoT Component
- CVE-2026-78673Maximo AI Service Improper Input ValidationIBM Maximo AI Service
- CVE-2026-105052IBM Maximo Application Suite Information DisclosureIBM Maximo Application Suite
- CVE-2026-84317Nginx UI: MCP nginx_config_add skips config directive validation → authenticated nginx directive injection (RCE on the official image)0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-109568Shaark 1.2.13 through 1.2.44 Missing Authorization via API Update and Delete RoutesMarceauKa Shaark
- CVE-2026-109567Rapyd Admin from 9.0.0 before 9.20.0 Privilege Escalation via UsersEdit Componentzofe rapyd-admin
- CVE-2026-109563N3.js before 2.11.1 ReDoS via N3Lexer Numeric-Literal Regexrdfjs N3.js
- CVE-2026-109560Continue CLI through 1.5.47 Bash Permission Rule Bypass via Command Chainingcontinuedev continue
- CVE-2026-109559EdgeEver Desktop 1.6.26 through 1.112.0 Navigation Allowlist Bypass via will-navigatetianma-if EdgeEver
- CVE-2026-109558EdgeEver 1.6.0 through 1.112.0 Stored XSS via TemplatesPane Template Previewtianma-if EdgeEver
- CVE-2026-109557EdgeEver through 1.112.0 Stored XSS via setMemoDragPreview Drag Previewtianma-if EdgeEver
- CVE-2026-109556EdgeEver Desktop 1.92.0 through 1.112.0 Local Program Execution via ACP IPCtianma-if EdgeEver
- CVE-2026-109380modern-tar 0.3.5 through 0.8.5 Memory Exhaustion via Malformed Octal Size Fieldayuhito modern-tar
- CVE-2021-48012fast-toml through 0.5.4 Prototype Pollution via __proto__ Keys in Parsed TOMLGin-Quin fast-toml
- CVE-2021-48011Servor 1.0.0 through 4.0.2 Unauthenticated Path Traversal via URL-Encoded Dot Segmentslukejacksonn servor
- CVE-2020-37280cbor-sync through 1.0.4 Memory Exhaustion via Unchecked CBOR Array LengthsPelionIoT cbor-sync
- CVE-2026-96261IBM Power Systems Firmware Buffer OverflowIBM PowerVM Hypervisor
- CVE-2026-96262IBM Power Systems Firmware Buffer OverflowIBM PowerVM Hypervisor
- CVE-2026-96263IBM Power Systems Firmware Buffer OverflowIBM PowerVM Hypervisor
- CVE-2026-96264IBM Power Systems Firmware Buffer OverflowIBM PowerVM Hypervisor
- CVE-2026-96265IBM Power Systems Firmware Improper Memory Buffer RestrictionIBM PowerVM Hypervisor
- CVE-2026-96266IBM Power Systems Firmware Buffer OverflowIBM PowerVM Hypervisor
- CVE-2026-84313Nginx UI: TOTP / passkey enrolment requires no re-authentication, enabling persistent account takeover0xJacky nginx-ui · Nginx-UI +1
- CVE-2026-84314Nginx UI: Account Takeover via Missing `RequireSecureSession` on User Management Endpoint0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-109427Telegram-Stremio 5.1.0 Broken Object Authorization via Stream IDsweebzone Telegram-Stremio
- CVE-2026-109426Telegram-Stremio 5.1.0 Insecure Session Storage via encode_stringweebzone Telegram-Stremio
- CVE-2026-84318Nginx UI: MCP `nginx_config_add` Bypasses Directive Validation — Authenticated RCE0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-84315Nginx UI OTP secure-session step-up is missing on sensitive mutation routes0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-41510OWASP Coraza WAF: Silent argument drop at ArgumentLimit allows bypass of ARGS-targeted rules via parameter floodingcorazawaf coraza · github.com/corazawaf/coraza/v3 +2
- CVE-2026-95837containerd CRI plugin: Checkpoint restore bypasses destination security contextcontainerd · github.com/containerd/containerd/v2 +1
- CVE-2026-109424NetEase Cloud Music Weak Encryption via eapi/xeapiNetEase Cloud Music for Windows
- CVE-2026-108361Privasys Intra-handshake attested TLS implementation is vulnerable to TOCTOU AttacksPrivasys ra-tls-clients
- CVE-2026-65954PHPCSUtils: Remote code execution via eval() in AbstractArrayDeclarationSniff::getActualArrayKey()PHPCSStandards PHPCSUtils · phpcsstandards/phpcsutils
- CVE-2026-83535Openstack-network-exporter: basic-auth uses plaintext password storage and non-constant-time comparisonRed Hat OpenStack Platform
- CVE-2026-57143PraisonAI: Server-Side Request Forgery (SSRF) in SearxNG / search_web tools via attacker-controlled searxng_url parameterMervinPraison praisonaiagents · praisonaiagents
- CVE-2026-18166IBM® Db2® is vulnerable to arbitrary library loading via the CREATE WRAPPER command, allowing a privileged database user to read sensitive files from the host filesystemIBM Db2
- CVE-2026-105464IBM® Db2® is vulnerable to a local attacker with DBADM authorization gaining elevated privileges due to improper privilege managementIBM Db2
- CVE-2026-104355Temporal Server applies inbound namespace replication from a connected peer cluster to local namespacesTemporal Technologies Temporal Server
- CVE-2026-105465IBM® Db2® is vulnerable to privilege escalation when db2ssh is enabled with the db2 instanceIBM Db2
- CVE-2026-59976ConvertX: Path Traversal vulnerability leading to Arbitrary File WriteC4illin ConvertX
- CVE-2026-59977ConvertX: Cross-Site Request Forgery (CSRF) leading to Unauthorized Data DestructionC4illin ConvertX
- CVE-2026-77363obsidian-tc Streamable HTTP transport permits cross-origin loopback vault accessThe-40-Thieves obsidian-tc · obsidian-tc
- CVE-2026-108479WordPress Patreon WordPress plugin <= 1.9.17 - Cross Site Request Forgery (CSRF) vulnerabilityPatreon WordPress
- CVE-2026-108481WordPress Patreon WordPress plugin <= 1.10.0 - Cross Site Request Forgery (CSRF) vulnerabilityPatreon WordPress
- CVE-2026-85975Cleartext transmission in Progress MarkLogic Server Amazon S3 connectionsProgress Software MarkLogic Server
- CVE-2026-85974Improper TLS hostname verification in Progress MarkLogic ServerProgress Software MarkLogic Server
- CVE-2026-85973Cleartext transmission in Progress MarkLogic Server cluster join operationsProgress Software MarkLogic Server
- CVE-2026-85972Improper Kerberos server verification in Progress MarkLogic ServerProgress Software MarkLogic Server
- CVE-2026-85971Incorrect log file permissions in Progress MarkLogic ServerProgress Software MarkLogic Server
- CVE-2026-85970Improper XML external entity restriction in Progress MarkLogic ServerProgress Software MarkLogic Server
- CVE-2026-85969Out-of-bounds write in Progress MarkLogic ServerProgress Software MarkLogic Server
- CVE-2026-85968Out-of-bounds read in Progress MarkLogic ServerProgress Software MarkLogic Server
- CVE-2026-75888Openshift/console: openshift/console: authenticated ssrf via helm chart url fetchRed Hat OpenShift Container Platform
- CVE-2026-85966Exposure of sensitive information in Progress MarkLogic ServerProgress Software MarkLogic Server
- CVE-2026-85965Use-after-free in Progress MarkLogic Server JavaScript engine integrationProgress Software MarkLogic Server
- CVE-2026-85964Path traversal in Progress MarkLogic Server Query ConsoleProgress Software MarkLogic Server
- CVE-2026-85963Server-side request forgery and hard-coded key in Progress MarkLogic Server OpsDirectorProgress Software MarkLogic Server
- CVE-2026-85962Improper authentication in Progress MarkLogic Server SAML processingProgress Software MarkLogic Server
- CVE-2026-85961Sensitive information exposure in Progress MarkLogic Server Azure deploymentsProgress Software MarkLogic Server
- CVE-2026-85960Cross-site request forgery in Progress MarkLogic Server Query ConsoleProgress Software MarkLogic Server
- CVE-2026-85959Insufficient authentication logging in Progress MarkLogic ServerProgress Software MarkLogic Server
- CVE-2026-109371ZITADEL 3.0.0 before 4.18.0 Unauthenticated Username Change via Login V1zitadel
- CVE-2026-109363Zebra 6.4.0 before 6.4.2 Denial of Service via Malformed v6 TransactionZcashFoundation zebra
- CVE-2026-109361MONAI 1.2.0 before 1.6.1 Insecure Deserialization RCE via nnUNetV2Runner postprocessing_file PathProject-MONAI MONAI
- CVE-2026-109360MONAI 0.4.0 before 1.6.1 RCE via SENet Pretrained Weights Over Plaintext HTTPProject-MONAI MONAI
- CVE-2026-109359Contrast 1.8.0 before 1.24.1 Mesh CA Key Cross-Manifest Exposure via Peer Recoveryedgelesssys contrast
- CVE-2026-109358Edgeless Systems Contrast 1.8.0 before 1.24.1 World-Writable Containerd Config Privilege Escalationedgelesssys contrast
- CVE-2026-109353LibreNMS before 26.9.0 SQL Injection via notification_id in notifications.inc.phplibrenms
- CVE-2026-109351Gitoxide gix-pack before 0.75.0 Denial of Service via Pack Header Object CountGitoxideLabs gix-pack
- CVE-2026-109350Gitoxide gix-pack before 0.75.0 Denial of Service via OFS_DELTA Base DistanceGitoxideLabs gix-pack
- CVE-2026-109349gix-pack before 0.75.0 Reachable Assertion DoS via Pack Version 3 HeaderGitoxideLabs gix-pack
- CVE-2026-109347Adminer before 6.1.1 RCE via UTF-8 BOM SQLite ATTACH Bypassvrana adminer
- CVE-2026-109346better-auth 1.3.8-beta.3 before 1.7.0-rc.3 Device Authorization Phishing via /devicebetter-auth
- CVE-2026-109343SurrealDB before 3.3.0 Cross-Tenant Access via USE Statementsurrealdb
- CVE-2026-109341SurrealDB before 3.3.0 Field Permission Bypass via PATCH copy/move/test Operationssurrealdb
- CVE-2026-109338SurrealDB before 3.3.0 Denial of Service via Headers Non-ASCII Valuessurrealdb
- CVE-2026-109335SurrealDB 3.0.0 before 3.3.0 Information Disclosure via COMPUTED Fieldssurrealdb
- CVE-2026-109334SurrealDB before 3.3.0 Cross-Tenant Access via Surreal-NS/Surreal-DB Headers and RPC usesurrealdb
- CVE-2026-109333SurrealDB 3.0.0 before 3.3.0 Cross-Tenant Record Read via RETURN FETCHsurrealdb
- CVE-2026-109331Network-AI 5.14.0 before 5.15.2 Deny Pattern Bypass via ClaudeHookBridge extractFullTargetJovancoding Network-AI
- CVE-2026-109329Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 Cross-Organization Access Control Bypass via members_assignment.phpadmidio
- CVE-2026-109326Grav before 2.1.7 Information Disclosure via Nested .git Directoriesgetgrav grav
- CVE-2026-109325Grav from 2.0.22 before 2.1.7 Clockwork Profiler Authentication Bypass via Proxygetgrav grav
- CVE-2026-109324Grav before 2.1.7 Memory Exhaustion via Oversized Image Transformsgetgrav grav
- CVE-2026-109318Grav Git Sync 1.0.2 through 3.4.12 Command Injection via Commit Authortrilbymedia grav-plugin-git-sync
- CVE-2026-109317Grav API Plugin before 1.0.36 Privilege Escalation via Scalar Access Grantsgetgrav grav-plugin-api
- CVE-2026-109315Grav 2.0.22 before 2.1.7 Clockwork Debugger Token Disclosure via Twig Sandboxgetgrav grav
- CVE-2026-109314Grav Login Plugin 1.2.0 before 3.9.9 Password Reset Token Disclosure via Reset Pagegetgrav grav-plugin-login
- CVE-2026-109313Grav Login Plugin 2.7.0 before 3.9.9 2FA Bypass via Remember-Me Cookiegetgrav grav-plugin-login
- CVE-2026-109312Grav Login Plugin 2.7.0 before 3.9.9 2FA Bypass via Profile Update Formgetgrav grav-plugin-login
- CVE-2026-109311vLLM before 0.29.0 Heap Overflow DoS via IAMF Audio Transcription Uploadvllm-project vllm
- CVE-2026-109310SiYuan v3.1.12 before v3.8.6 Denial of Service via getDynamicIcon Templatesiyuan-note siyuan
- CVE-2026-109308Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14 RCE via actionCacheUpdates Behavior Injectioncraftcms cms
- CVE-2026-109305Craft CMS 5.10.2 before 5.10.14 Twig Sandbox Bypass RCE via has some/has everycraftcms cms
- CVE-2026-109301Parse Server before 8.6.95 and 9.0.0 before 9.10.2-alpha.3 Denial of Service via File Pointer Without URLparse-community parse-server · parse
- CVE-2026-109299Open WebUI 0.9.0 before 0.11.4 Denial of Service via Recurrence Rule Validationopen-webui
- CVE-2026-109298Open WebUI 0.11.0 before 0.11.4 Memory Exhaustion via Knowledge Search Regexopen-webui
- CVE-2026-109297Open WebUI 0.11.0 before 0.11.4 Denial of Service via Automation Recurrence Rulesopen-webui
- CVE-2026-109294Open WebUI 0.6.42 before 0.11.4 Memory Exhaustion via Compressed Remote Imageopen-webui
- CVE-2026-109293Open WebUI 0.11.0 before 0.11.4 Tool Source Disclosure via Tool Export Endpointopen-webui
- CVE-2026-109292Open WebUI 0.6.27 before 0.11.4 Session Token Disclosure via OAuth-Mode Connectionsopen-webui
- CVE-2026-109291Open WebUI 0.6.33 before 0.11.4 Stored XSS via Citation embed_urlopen-webui
- CVE-2026-109290Open WebUI 0.11.1 before 0.11.4 Stored XSS via DOCX Previewopen-webui
- CVE-2026-109288Open WebUI before 0.11.4 Stored XSS via javascript: URLs in Markdown Linksopen-webui
- CVE-2026-109286Open WebUI 0.7.0 before 0.11.4 Session Token Theft via SyncStatsModalopen-webui
- CVE-2026-109257FreeRDP before 3.32.0 Double Free via NSCodec plane growth failureFreeRDP
- CVE-2026-109250FreeRDP 3.0.0 before 3.32.0 Heap Buffer Overflow via PKCS#11 collect_keys()FreeRDP
- CVE-2026-109246FreeRDP before 3.32.0 Shadow Server Divide-by-Zero via Frame Acknowledge PDUFreeRDP
- CVE-2026-109245FreeRDP 3.0.0 before 3.32.0 Improper Certificate Validation in freerdp_http_requestFreeRDP
- CVE-2026-109242FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 Uninitialized Heap Disclosure via Progressive Codec Tile UpgradeFreeRDP
- CVE-2026-109237Crawl4AI 0.9.0 before 0.9.4 Untrusted Config Gate Bypass Leaks Environment Variablesunclecode crawl4ai
- CVE-2026-85958Improper OAuth token validation in Progress MarkLogic ServerProgress Software MarkLogic Server
- CVE-2026-85957Improper XML external entity restriction in Progress MarkLogic Server SAML processingProgress Software MarkLogic Server
- CVE-2026-108906Netcore NR268 filter_arp_put_file.cgi filter_arp_put_file_cgi out-of-boundsNetcore NR268
- CVE-2026-85954Improper privilege management in Progress MarkLogic Server higher-order XQuery functionsProgress Software MarkLogic Server
- CVE-2026-85953Path traversal and privilege management flaws in Progress MarkLogic Server InfoStudioProgress Software MarkLogic Server
- CVE-2026-85952Server-side request forgery in Progress MarkLogic Server Linux cloud deploymentsProgress Software MarkLogic Server
- CVE-2026-85951Server-side request forgery in Progress MarkLogic Server Azure deploymentsProgress Software MarkLogic Server
- CVE-2026-103060Path traversal in rebar3 via unvalidated dependency app nameserlang rebar3
- CVE-2026-85950Improper privilege management in Progress MarkLogic Server REST extensionsProgress Software MarkLogic Server
- CVE-2026-96612Path traversal in Hex via unvalidated dependency app nameshexpm hex
- CVE-2026-85949Sensitive information exposure in Progress MarkLogic Server trace logsProgress Software MarkLogic Server
- CVE-2026-105668Hex release-age cooldown is lifted package-wide when the locked release is retiredhexpm hex
- CVE-2026-109398Gumlet php-image-resize before 3.0.1 Denial of Service via Decompression Bombsgumlet php-image-resize
- CVE-2026-109397Thelia before 3.1.2 and 3.2.x before 3.2.1 File Upload RCE via Filename Trailing SpaceThelia
- CVE-2026-92682@neo4j/graphql: authorization relationship and connection filters invert the "none" quantifier@neo4j/graphql
- CVE-2026-107248CVE-2026-107248Thelia
- CVE-2026-103535CVE-2026-103535Thelia
- CVE-2026-103522CVE-2026-103522Thelia
- CVE-2026-103521CVE-2026-103521Thelia
- CVE-2026-108094Mutter: mutter: client-triggered use-after-free in wayland color-management icc image description pathRed Hat Enterprise Linux
- CVE-2026-92877The JAXB factory methods historically relied solely on `FEATURE_SECURE_PROCESSING` to prevent XML External Entity (XXE) resolution.Eclipse Foundation jaxb-ri
- CVE-2026-109229SGLang through 0.5.21 Decompression Bomb DoS via NanoNemotronVLImageProcessorsgl-project sglang
- CVE-2026-109228SGLang through 0.5.21 Resource Budget Bypass via GLM-V Video Parameterssgl-project sglang
- CVE-2026-109227SGLang through 0.5.21 Memory Exhaustion DoS via Qwen-VL Video Preprocessingsgl-project sglang
- CVE-2026-109226SGLang through 0.5.21 Audio Decompression Amplification via load_audiosgl-project sglang
- CVE-2026-109225SGLang through 0.5.21 Memory Exhaustion DoS via /v1/audio/transcriptions Uploadsgl-project sglang
- CVE-2026-12613Insecure Deserialization Leading to Remote Code Execution in Ministry of Justice's UYAP Document EditorMinistry of Justice General Directorate of Information Tech…
- CVE-2026-18390Command Injection in Ministry of Justice's UYAP Document EditorMinistry of Justice General Directorate of Information Tech…
- CVE-2026-109205LogicalDOC Community Edition through 9.3 Unauthenticated Upload Disk Exhaustion via UploadServletLogicalDOC Community Edition
- CVE-2026-109203LogicalDOC Community Edition through 9.3 Missing Authorization via ConvertPdf ServletLogicalDOC Community Edition
- CVE-2026-109202LogicalDOC Community Edition through 9.3 Missing Authorization via zip-export ServletLogicalDOC Community Edition
- CVE-2026-109201LogicalDOC Community Edition through 9.3 Missing Authorization in DocumentServiceLogicalDOC Community Edition
- CVE-2026-109199LogicalDOC Community Edition through 9.3 Code Injection via Velocity sendAsEmail TemplateLogicalDOC Community Edition
- CVE-2026-109170LogicalDOC Community Edition through 9.3 HQL Injection via documents.xml indexed ParameterLogicalDOC Community Edition
- CVE-2026-109169LogicalDOC Community Edition through 9.3 SQL Injection via tags.xml firstLetterLogicalDOC Community Edition
- CVE-2026-109187jshERP through 3.6 Information Disclosure via /platformConfig/getInfoByKeyjishenghua jshERP
- CVE-2026-109186jshERP through 3.6 Mass Assignment via PUT /user/updatejishenghua jshERP
- CVE-2026-109185jshERP through 3.6 Privilege Escalation via PUT /user/updateUserjishenghua jshERP
- CVE-2026-109174MoguBlog through 6.2 Credential Disclosure via /oauth/getSystemConfigmoxi624 MoguBlog
- CVE-2026-109168lamp-cloud through 5.10.1 IDOR via /anyone/appendix/listFileByBizIddromara lamp-cloud
- CVE-2026-109166lamp-cloud through 5.10.1 IDOR via /anyone/file/findUrlByIddromara lamp-cloud
- CVE-2026-109164TDuck survey form through 6.0 Authorization Bypass via User-Controlled Submission IDs in POST /user/form/data/delete/{formKey}TDuckCloud tduck-survey-form
- CVE-2026-93695Arbitrary file write through remote file identifiers in Progress ShareFile Storage Zones Controller FileCopyServiceProgress ShareFile Storage Zones Controller
- CVE-2026-52903YAML safe_load production fallback to unsafe_load enables RCE via deserializationManageIQ · Red Hat CloudForms
- CVE-2026-108953mac-shell-mcp before 2.0.0 OS Command Injection via execute_command Argumentscfdude mac-shell-mcp
- CVE-2026-108951LavaLite CMS through 10.1.2 Authorization Bypass via User Update APIlavalite cms
- CVE-2026-105412SQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5Dassault Systèmes Tuleap Enterprise Edition
- CVE-2026-105411Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5Dassault Systèmes Tuleap Enterprise Edition
- CVE-2026-105410Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5Dassault Systèmes Tuleap Enterprise Edition
- CVE-2026-105409Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5Dassault Systèmes Tuleap Enterprise Edition
- CVE-2026-105408Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5Dassault Systèmes Tuleap Enterprise Edition
- CVE-2026-105407OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5Dassault Systèmes Tuleap Enterprise Edition
- CVE-2026-103903MikroTik RouterOS WinBox split-principal authentication bypass allows privilege escalationMikroTik RouterOS
- CVE-2026-103902DigiDoc improper signature verificationlibdigidocpp · DigiDoc4 +2
- CVE-2026-1907SQL Injection in Clustering Communication (Hybrid Mode)Kong Enterprise Gateway · Kong Gateway
- CVE-2026-78355Path Traversal in SendSupportBundle allows File Deletion Outside the Intended DirectoryOTRS GmbH (former OTRS AG) OTRS · OTRS GmbH (former OTRS AG…
- CVE-2026-98385sched/cache: Decouple sched_cache_group from mm to fix UAFLinux
- CVE-2026-109080SQL injection in Night Shift bulk license plate search allows cross-organization data accessFlock Night Shift
- CVE-2026-21139Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers to manipulate the coSamsung Mobile Samsung Continuity Service for windows
- CVE-2026-21125Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to pSamsung Mobile Devices
- CVE-2026-21124Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackersSamsung Mobile Devices
- CVE-2026-21122Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code.Samsung Mobile Devices
- CVE-2026-21120Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system priviSamsung Mobile Devices
- CVE-2026-21114Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code.Samsung Mobile Devices
- CVE-2026-87690Metasploit Framework ios_image_gather Path Traversal Leading to Arbitrary File Write and Code ExecutionRapid7 Metasploit Framework
- CVE-2026-108985ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-bounds write related to lib/libnfs-zdr.c with libnfs_zdr_bytes(), libnfs_zsahlberg libnfs
- CVE-2026-108982VeraCrypt 1.26.29 (FUSE-T build) on macOS sometimes allows unintended access to decrypted data.IDRIX VeraCrypt
- CVE-2026-108980Blinko through 1.8.8 allows directory traversal, overwriting startup files as root, via installPlugin.Blinko
- CVE-2026-66086Stack-based Buffer Overflow in ModemUnisoc (Shanghai) Technologies Co. Modem
Medium, low and unrated 368
- CVE-2026-108941Linketic CityGaussian Sidecar Parsing common.py parse_cfg_args code injectionLinketic CityGaussian
- CVE-2026-108940EricLBuehler Mistral.rs handlers.rs calibration_apply path traversalEricLBuehler Mistral.rs
- CVE-2026-17484IBM i is Information DisclosureIBM i
- CVE-2026-17487IBM i is Information DisclosureIBM i
- CVE-2026-18318IBM i Information DisclosureIBM i
- CVE-2026-18343IBM i is Affected By An Improper Privilege Management VulnerabilityIBM i
- CVE-2026-81858IBM i is Affected By A Denial of Service Vulnerability in Host ServersIBM i
- CVE-2026-19938Use-after-free of an ATT PDU buffer when signing an outgoing Bluetooth ATT Signed Write Command failszephyrproject zephyr
- CVE-2026-19937Bluetooth Mesh Access layer permanently leaks delayable-message contexts, disabling all model responseszephyrproject zephyr
- CVE-2026-19936Bluetooth Mesh delayable message queue: unsynchronized list access leads to NULL pointer dereferencezephyrproject zephyr
- CVE-2026-108939EricLBuehler mistral.rs media_source.rs is_global_ip server-side request forgeryEricLBuehler mistral.rs
- CVE-2026-108938code-projects Matrimonial System matrimony.sql file accesscode-projects Matrimonial System
- CVE-2026-75076IBM Aspera Enterprise Webapps Information DisclosureIBM Aspera Enterprise WebApps
- CVE-2026-75621IBM Aspera Enterprise Webapps Execution with Unnecessary PrivilegesIBM Aspera Enterprise WebApps
- CVE-2026-92832IBM Aspera Enterprise Webapps Information DisclosureIBM Aspera Enterprise WebApps
- CVE-2026-108937code-projects Online Ticket Reservation System medallion.sql file information disclosurecode-projects Online Ticket Reservation System
- CVE-2026-18541IBM Planning Analytics Local is affected by security vulnerabilitiesIBM Planning Analytics
- CVE-2026-75063IBM Planning Analytics Local is affected by security vulnerabilitiesIBM Planning Analytics
- CVE-2026-108936Edimax BR-6208AC QoS Page formQoS cross site scriptingEdimax BR-6208AC
- CVE-2026-109675Frappe Suite before commit 2697564 Broken Access Control in Mail Mailbox and Quota APIsfrappe suite
- CVE-2026-109670Frappe ERPNext before 15.110.0 Stored XSS via Item Record Namefrappe erpnext
- CVE-2026-109669Frappe ERPNext before 15.110.0 Missing Authorization Allows Unauthorized Status Modificationfrappe erpnext
- CVE-2026-109668Frappe ERPNext before 15.110.0 Missing Authorization in Party Record Endpointsfrappe erpnext
- CVE-2026-109665Frappe ERPNext before 15.108.0 Missing Authorization Allows Master Record Deactivationfrappe erpnext
- CVE-2026-109664Frappe ERPNext before 15.112.0 Missing Authorization Allows Arbitrary Record Modificationfrappe erpnext
Show all 368 entriesShow fewer entries
- CVE-2026-109662Frappe ERPNext before 15.112.0 Stored XSS via Public Portal Formfrappe erpnext
- CVE-2026-109657Frappe ERPNext 16.x before 16.27.0 Stored XSS via Unescaped Record Namefrappe erpnext
- CVE-2026-109654Frappe ERPNext before 15.119.0 Missing Authorization in Transactional Email Endpointsfrappe erpnext
- CVE-2026-109651Frappe ERPNext before 15.112.0 Server-Side Request Forgery via Configuration Fieldfrappe erpnext
- CVE-2026-109642Frappe ERPNext before 15.110.0 Missing Authorization in Certain Endpointsfrappe erpnext
- CVE-2026-109641Frappe ERPNext before 15.110.0 Missing Authorization in Record Creation Endpointsfrappe erpnext
- CVE-2026-109635Frappe ERPNext before 15.105.0 Missing Authorization in Document Creation Endpointsfrappe erpnext
- CVE-2026-109634Frappe ERPNext before 15.121.0 SQL Injection via Unvalidated Endpointsfrappe erpnext
- CVE-2026-109630Frappe ERPNext before 15.121.0 Missing Authorization in Endpointsfrappe erpnext
- CVE-2026-109629Frappe ERPNext before 15.121.3 Missing Authorization in Transactional Email Endpointfrappe erpnext
- CVE-2026-109623Frappe ERPNext before 15.121.1 Unauthorized Document Modification via Missing Authorizationfrappe erpnext
- CVE-2026-109622Frappe ERPNext before 15.121.0 Unauthorized Document Modification via Missing Authorizationfrappe erpnext
- CVE-2026-109611Frappe ERPNext before 15.121.0 Missing Authorization in Certain Endpointsfrappe erpnext
- CVE-2026-109603Frappe Framework before 16.17.0 Authenticated SSRF and LFI via pdfkitfrappe
- CVE-2026-109602Frappe before v16.31.0 Stored XSS via Dashboard Chart Filtersfrappe
- CVE-2026-109600Frappe before 16.31.0 Improper Access Control in Document Follow Notificationsfrappe
- CVE-2026-109599Frappe before 15.113.3 Missing Authorization Allows Unauthorized Record Modificationfrappe
- CVE-2026-109598Frappe before 16.33.0 Broken Authorization via send_sms Endpointfrappe
- CVE-2026-109597Hugo v0.60.0 before v0.167.0 Stored XSS via Table of Contents Heading IDsgohugoio hugo
- CVE-2026-109596Hugo from v0.162.0 before v0.167.0 Symlink File Disclosure via Nested Mount Ancestorgohugoio hugo
- CVE-2026-109595Hugo v0.84.0 before v0.167.0 Path Traversal via js.Build ESBuild Resolvergohugoio hugo
- CVE-2026-109574Hugo before v0.167.0 Path Traversal via css.Sass Import Fallbackgohugoio hugo
- CVE-2025-71431Frappe before 15.86.0 LDAP Injection via Unsanitized Endpoint Parametersfrappe
- CVE-2025-71430Frappe before 15.91.1 Stored XSS via Leaderboard User Namesfrappe
- CVE-2024-58391Frappe before 15.4.0 XSS via Printview Parametersfrappe
- CVE-2023-54410Frappe before 13.22.0 Improper Authorization via Document Renamefrappe
- CVE-2023-54409Frappe before 13.46.1 XSS via html2text Weak Sanitizationfrappe
- CVE-2023-54408Frappe before 14.31.0 HTML Injection via Weak Escapingfrappe
- CVE-2023-54407Frappe 14.x before 14.45.0 Information Disclosure via Error Log Tracebacksfrappe
- CVE-2023-54406Frappe before 14.59.0 Safe Execution Flag Bypass in Server Scriptsfrappe
- CVE-2026-108935Edimax BR-6208AC Port Forwarding formPortFw cross site scriptingEdimax BR-6208AC
- CVE-2026-108934Edimax BR-6208AC HTTP Blocking formUrlb cross site scriptingEdimax BR-6208AC
- CVE-2026-102596Nango: Production flow RBAC bypass on private flow-read routesNangoHQ nango
- CVE-2026-54459FileRise: Missing CSRF enforcement for file creation and share-link creationerror311 FileRise
- CVE-2026-104140QGIS: Stored XSS in WFS3 getFeatures HTML page via unescaped feature attribute valuesQGIS
- CVE-2026-108933Edimax BR-6208AC formFilter cross site scriptingEdimax BR-6208AC
- CVE-2026-49484Code for IBM i: Temporary files are visible to all userscodefori vscode-ibmi
- CVE-2026-53922odhcpd: pre-auth remote DoS via size_t underflow in dhcpv6_ia_handle_IAs (stack BOF, canary-terminated)openwrt odhcpd · openwrt
- CVE-2026-108932Netcore NR268 DHCP Hostname filter_hosts_dump.cgi eval cross site scriptingNetcore NR268
- CVE-2026-41210Moonlight Qt: Remote heap buffer overflow in Moonlight Qt H.264 SPS fixup path via crafted seq_parameter_set_idmoonlight-stream moonlight-qt
- CVE-2026-103658GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in its read-only dictionarGNU Aspell
- CVE-2026-102539Super Productivity: SuperSync E2EE setup uploads and stores all user operations in plaintext before password is setsuper-productivity
- CVE-2026-18533IBM Maximo Application Suite - Location Service for Esri Component Code ExecutionIBM Maximo Application Suite - Location Service for Esri Co…
- CVE-2026-108931Netcore NR268 DHCP dhcp_dynamicip_show.cgi eval cross site scriptingNetcore NR268
- CVE-2026-109571Fire-Boltt BSW013 firmware through V0.0.8 Unauthenticated Heart Rate Disclosure via BLEFire-Boltt BSW013
- CVE-2026-109570Fire-Boltt BSW013 through V0.0.8 Unauthenticated BLE Notification InjectionFire-Boltt BSW013
- CVE-2026-109565Rapyd Admin 9.4.0 before 9.20.0 Stored XSS via select-list Componentzofe rapyd-admin
- CVE-2026-109564LearnHouse before 1.4.0 Missing Authorization via Playground Duplicate EndpointLearnHouse
- CVE-2026-109562SnapOtter 1.15.10 through 2.2.0 Missing Authorization via Upload and Preview APIsnapotter-hq SnapOtter
- CVE-2026-109561goose from 1.28.0 before 1.44.0 Manual Approval Bypass via Read-Only Tool Annotationsaaif-goose goose
- CVE-2026-109379Cockpit CMS 2.14.1 Account Enumeration via Timing Discrepancy in /auth/checkcockpit-hq cockpit
- CVE-2026-109378SPIP before 4.4.18 SSRF via HTTP Redirects in recuperer_urlSPIP
- CVE-2026-109377ERPNext 9.0.0 through 16.50.0 Missing Authorization in Batch Lookup MethodsFrappe ERPNext
- CVE-2026-109376ERPNext 15.55.0 through 16.50.0 Incorrect Authorization via get_timesheet_htmlFrappe ERPNext
- CVE-2026-109375Vercel deepsec before 1.1.17 Arbitrary File Write via Symlink in Sandbox Tarball ExtractionVercel deepsec
- CVE-2024-58389HoloViz Panel from 1.2.2 before 1.9.0 Open Redirect via next ParameterHoloViz Panel
- CVE-2022-51020Flower before 2.2.0 CSRF via Worker and Task Control API Endpointsmher flower
- CVE-2026-16678IBM Power Systems Firmware Denial of ServiceIBM Virtualization Management Interface
- CVE-2026-84321Nginx UI: Standalone short tokens survive administrative revocation in cache and authenticate again after account re-enable0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-108930Netcore NR268 DDNS ddns_wan_list_show.cgi ddns_wan_list_show information disclosureNetcore NR268
- CVE-2026-84320Nginx UI: Auto backup name allows path traversal outside validated storage path0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-108928itsourcecode Online Admission System sum.php sql injectionitsourcecode Online Admission System
- CVE-2026-97691Convex: Unauthorized data accessget-convex convex-backend
- CVE-2026-106495Backstage: Improper access control in backend action invocationbackstage · @backstage backend-defaults +1
- CVE-2026-41508OWASP Coraza WAF: Truncated multipart body bypasses MULTIPART_STRICT_ERROR (rule 200003) via silent io.ErrUnexpectedEOF handlingcorazawaf coraza · github.com/corazawaf/coraza/v3 +2
- CVE-2026-108927itsourcecode Baptism Information Management System pbaptism.php sql injectionitsourcecode Baptism Information Management System
- CVE-2026-41504OWASP Coraza WAF: Native audit-log format allows CRLF injection and log forgery via request body and header fieldscorazawaf coraza · github.com/corazawaf/coraza/v3 +2
- CVE-2026-104774OWASP Coraza WAF: jsDecode Off-by-One in Octal Escape Handling Enables WAF Bypasscorazawaf coraza · github.com/corazawaf/coraza/v3 +2
- CVE-2026-109425Tink-go 2.8.0 Keyset Validation Bypass via NewHandleWithNoSecretstink-crypto tink-go
- CVE-2026-95838containerd: Unpack DoS via repeated opaque whiteoutscontainerd · github.com/containerd/containerd/v2 +1
- CVE-2026-108926itsourcecode Baptism Information Management System ebaptism.php sql injectionitsourcecode Baptism Information Management System
- CVE-2026-108924getkirby Kirby Dynamic Option Generation OptionsQuery.php resolve authorizationgetkirby Kirby
- CVE-2026-104364IBM® Db2® Denial of ServiceIBM Db2
- CVE-2026-104332IBM® Db2® Denial of ServiceIBM Db2
- CVE-2026-1089231024-lab smart-admin Support Config Query queryByKey access control1024-lab smart-admin
- CVE-2025-27895DB2 Recovery Expert for Linux, UNIX and Windows Cross-Site ScriptingIBM DB2 Recovery Expert for Linux, UNIX and Windows
- CVE-2025-27896IBM Db2 Recovery Expert for Linux, Unix and Windows Cross-Site ScriptingIBM DB2 Recovery Expert for Linux, UNIX and Windows
- CVE-2025-27897IBM Db2 Recovery Expert for Linux, Unix and Windows Cross-Site ScriptingIBM DB2 Recovery Expert for Linux, UNIX and Windows
- CVE-2025-27902IBM Db2 Recovery Expert for Linux, Unix and Windows Information DisclosureIBM DB2 Recovery Expert for Linux, UNIX and Windows
- CVE-2026-108922KusalkaSilva Learning-Management-System upload_save.php getimagesize unrestricted uploadKusalkaSilva Learning-Management-System
- CVE-2026-83536Openstack-network-exporter: http.server has no readheadertimeout / readtimeout (slowloris)Red Hat OpenStack Platform
- CVE-2026-85471Quay: quay: webhook notification ssrf -- hostname-string blocklist trivially bypassablemirror registry for Red Hat OpenShift · Red Hat Quay
- CVE-2026-102663OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve SearchOpenListTeam OpenList · github.com/OpenListTeam/OpenList… +2
- CVE-2026-108921KusalkaSilva Learning-Management-System State-Changing Endpoints remove_announcements.php mysql_query missing authenticationKusalkaSilva Learning-Management-System
- CVE-2026-89140Temporal Server internal completion callbacks are not bound to their namespace, allowing cross-namespace changes to Scheduler V2 schedule stateTemporal Technologies Temporal Server
- CVE-2026-105466IBM® Db2® is vulnerable to a denial of service when inserting into a table with XML columns under specific conditionsIBM Db2
- CVE-2026-78404IBM® Db2® is vulnerable to local privilege escalation via the db2pd utilityIBM Db2
- CVE-2026-107226AsyncHttpClient: Cookies received over plaintext HTTP can plant, overwrite or delete Secure cookies set over HTTPSAsyncHttpClient async-http-client · org.asynchttpclient:asy…
- CVE-2026-104102copyparty FTP: upload outside defined volumes (limited path traversal)9001 copyparty · copyparty
- CVE-2026-108920SourceCodester Drug Recommendation System Admin Record Tables user_record.php cross site scriptingSourceCodester Drug Recommendation System
- CVE-2026-103061Path traversal in Gleam via unvalidated package application namesGleam
- CVE-2026-108919SourceCodester Drug Recommendation System Student Registration add_student.php cross site scriptingSourceCodester Drug Recommendation System
- CVE-2026-77364obsidian-tc fail-open default ACL exposes Obsidian control-directory secretsThe-40-Thieves obsidian-tc · obsidian-tc
- CVE-2026-61994WordPress WP-Members plugin <= 3.5.7 - Broken Access Control vulnerabilityRocketGeek WP-Members
- CVE-2026-42689WordPress Events Manager plugin <= 7.4.7 - Race Condition vulnerabilityPixelite Events Manager
- CVE-2026-109448psqlODBC SQLBindParameter heap memory corruption when binding more than 32767 parametersPostgreSQL psqlODBC
- CVE-2026-103080WordPress Salevo plugin <= 1.3.0 - Broken Access Control vulnerabilityVillaTheme Salevo
- CVE-2026-108916Edimax BR-6208AC formAccept command injectionEdimax BR-6208AC
- CVE-2026-6232Out-of-bounds write in LR11xx TransceiverSemtech LR1110 Transceiver · Semtech LR1110 Modem-e +3
- CVE-2026-108482WordPress Premium Addons for Elementor plugin <= 4.11.110 - Cross Site Scripting (XSS) vulnerabilityLeapWorx Premium Addons for Elementor
- CVE-2026-107862WordPress Quiz And Survey Master plugin <= 11.2.7 - Cross Site Scripting (XSS) vulnerabilityExpressTech Quiz And Survey Master
- CVE-2026-108486WordPress Forminator plugin <= 1.58.0 - Broken Access Control vulnerabilityWPMU DEV Forminator
- CVE-2026-107418WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerabilityArraytics Booktics
- CVE-2026-108478WordPress Element Pack Elementor Addons plugin <= 8.8.8 - Cross Site Scripting (XSS) vulnerabilityBdThemes Element Pack Elementor Addons
- CVE-2026-108475WordPress Broadcast Live Video plugin <= 7.3.6 - Broken Access Control vulnerabilityVideoWhisper.com Broadcast Live Video
- CVE-2026-108476WordPress Paid Videochat Turnkey Site plugin <= 7.5.13 - Broken Access Control vulnerabilityVideoWhisper.com Paid Videochat Turnkey Site
- CVE-2026-85976HTTP response splitting in Progress MarkLogic Server Query ConsoleProgress Software MarkLogic Server
- CVE-2026-108909Netcore NR268 CGI Endpoint cross-site request forgeryNetcore NR268
- CVE-2026-105274hex_core decompresses registry and Erlang term API responses without size limitserlang rebar3 · hexpm hex_core +2
- CVE-2026-85967Cross-site scripting in Progress MarkLogic ServerProgress Software MarkLogic Server
- CVE-2026-108477WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerabilityArraytics Booktics
- CVE-2026-108908Netcore NR268 Web UI l7_call_board_user_set.cgi eval cross site scriptingNetcore NR268
- CVE-2026-94451Quarkus-hibernate-orm-rest-data-panache: quarkus-hibernate-orm-rest-data-panache: information disclosure and dos via unvalidated sort parameter in rest data panacheRed Hat build of Quarkus 3.27.6.redhat · Red Hat build o… +1
- CVE-2026-109374ZITADEL 3.0.0 before 4.19.2 Privilege Escalation via OIDC Token Exchange Impersonationzitadel
- CVE-2026-109366Zebra before 6.4.0 Gossiped Block Drop via Forged Coinbase scriptSig HeightZcashFoundation zebra
- CVE-2026-109365Zebra before 6.4.0 Denial of Service via Same-Hash Forged Block BodiesZcashFoundation zebra
- CVE-2026-109364Zebra 2.3.0 before 6.4.0 Peer Ban Bypass via Exact-IP KeyingZcashFoundation zebra
- CVE-2026-109362Heym v0.0.5 before v0.0.113 Broken Access Control via Workflow Execution Tokensheymrun heym
- CVE-2026-109356LibreNMS before 26.9.0 Missing Authorization in Port Purge via PortsControllerlibrenms
- CVE-2026-109355LibreNMS before 26.9.0 Stored XSS via Tools Oxidized Node Listlibrenms
- CVE-2026-109354LibreNMS before 26.9.0 Path Traversal via NFSen channel Parameterlibrenms
- CVE-2026-109352LibreNMS before 26.9.0 Stored XSS via wireless sensor descriptionlibrenms
- CVE-2026-109348Gitoxide gix-mailmap before 0.35.0 CPU Denial of Service via .mailmap ParsingGitoxideLabs gix-mailmap
- CVE-2026-109345DOMPurify before 3.4.16 XSS via IN_PLACE Returned Rawtext Rootcure53 DOMPurify · dompurify
- CVE-2026-109344DOMPurify from 3.4.13 before 3.4.16 DOM XSS via IN_PLACE afterSanitize Hookscure53 DOMPurify · dompurify
- CVE-2026-109342SurrealDB 3.0.0 before 3.3.0 Missing Authentication in revoke RPC Methodsurrealdb
- CVE-2026-109340SurrealDB 3.1.0 before 3.3.0 Authorization Bypass via REFERENCE ON DELETE CASCADEsurrealdb
- CVE-2026-109339SurrealDB 3.1.0 before 3.3.0 Memory Exhaustion via Surrealism Module Output Bufferingsurrealdb
- CVE-2026-109337SurrealDB before 3.3.0 Field Permission Bypass via LIVE SELECT WHERE Clausesurrealdb
- CVE-2026-109336SurrealDB before 3.3.0 Field Permission Bypass via LIVE SELECT $before/$aftersurrealdb
- CVE-2026-109332Network-AI before 5.15.2 CORS Origin Validation Error in MCP SSE TransportJovancoding Network-AI
- CVE-2026-109330Network-AI 5.0.0 before 5.15.2 Cross-Site WebSocket Hijacking via DashboardServerJovancoding Network-AI
- CVE-2026-109328Admidio 5.0.0 before 5.0.15 Unauthenticated Stored XSS via Registration Nameadmidio
- CVE-2026-109327Admidio 4.0.12 through 4.3.17 and 5.0.0 before 5.0.15 Reflected XSS via system/redirect.phpadmidio
- CVE-2026-109323Grav Star Ratings 2.0.1 through 2.0.3 Missing Server-Side vote_access Authorizationgetgrav grav-plugin-star-ratings
- CVE-2026-109322Grav Guestbook before 0.5.2 Stored XSS via AJAX Pagination and Admin Viewsgetgrav grav-plugin-guestbook
- CVE-2026-109320Grav API Plugin before 1.0.36 Disabled Account Session Access Bypassgetgrav grav-plugin-api
- CVE-2026-109319Grav Guestbook Plugin 0.5.0 and 0.5.1 Missing Authorization and CSRF in Moderationgetgrav grav-plugin-guestbook
- CVE-2026-109316Grav Data Manager 1.4.0 through 1.4.5 Unauthenticated File Deletion via Admingetgrav grav-plugin-data-manager
- CVE-2026-109309SiYuan v3.7.0 before v3.8.6 Arbitrary File Read via Plugin ResponseFile.Pathsiyuan-note siyuan
- CVE-2026-109307Craft CMS 5.0.0 before 5.10.14 DOM XSS via returnUrl in 2FA Verificationcraftcms cms
- CVE-2026-109306Craft CMS 5.0.0 before 5.10.14 Missing Authorization via app/switch-to-licensed-editioncraftcms cms
- CVE-2026-109304Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14 Arbitrary File Read via Twig create() DOMDocumentcraftcms cms
- CVE-2026-109303Parse Server before 8.6.93 and 9.0.0 before 9.10.1-alpha.13 protectedFields Bypass via Relation Count Queryparse-community parse-server · parse
- CVE-2026-109302Parse Server 8.2.2 before 8.6.94 and 9.0.0 before 9.10.1-alpha.14 GraphQL Schema Disclosure via Persisted Queriesparse-community parse-server · parse
- CVE-2026-109300Open WebUI 0.6.31 before 0.11.4 Stored XSS via Tool-Call Embedsopen-webui
- CVE-2026-109296Open WebUI before 0.11.4 Missing Authorization via Backend Index on Model Routesopen-webui
- CVE-2026-109295Open WebUI 0.11.0 before 0.11.4 ReDoS via grep_knowledge_files Event Loopopen-webui
- CVE-2026-109289Open WebUI 0.8.8 before 0.11.4 Improper Session Revocation via Terminal WebSocketopen-webui
- CVE-2026-109287Open WebUI 0.9.6 before 0.11.4 Information Disclosure via Unscoped Directory IDopen-webui
- CVE-2026-109285Open WebUI 0.6.0 before 0.11.4 Improper Access Control via Stale File Metadataopen-webui
- CVE-2026-109284Open WebUI 0.11.0 before 0.11.4 Improper Authorization via Chat Fork Endpointopen-webui
- CVE-2026-109283Open WebUI 0.11.1 before 0.11.4 Authorization Bypass via OAuth Token Exchangeopen-webui
- CVE-2026-109282ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Undefined Behavior in INFO, JSON and YAML EncodersImageMagick
- CVE-2026-109281ImageMagick 7.1.0-21 before 7.1.2-32 Heap Buffer Over-Read via -fx OptionImageMagick
- CVE-2026-109280ImageMagick 7.1.0-20 before 7.1.2-32 Use After Free via -fx OptionImageMagick
- CVE-2026-109279ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Heap Buffer Overflow via Concurrent Security Policy AccessImageMagick
- CVE-2026-109278ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in Wavelet-Denoise OperationImageMagick
- CVE-2026-109277ImageMagick before 7.1.2-32 Policy Bypass via -script OperationImageMagick
- CVE-2026-109276ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Temporary File Leak in JNG DecoderImageMagick
- CVE-2026-109275ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Code Injection via MVG DecoderImageMagick
- CVE-2026-109274ImageMagick before 7.1.2-32 TOCTOU Symlink Race Path Policy Bypass via magick scriptImageMagick
- CVE-2026-109273ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Information Disclosure in PostScript DecoderImageMagick
- CVE-2026-109272ImageMagick 7.1.1-31 before 7.1.2-32 Null Pointer Dereference in PostScript DecoderImageMagick
- CVE-2026-109271ImageMagick 7.1.2-30 before 7.1.2-32 Use After Free in WBINFO DecoderImageMagick
- CVE-2026-109270ImageMagick before 7.1.2-32 Memory Leak via -process OptionImageMagick
- CVE-2026-109269ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Information Disclosure via JPEG DecoderImageMagick
- CVE-2026-109268ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Use After Free in PDF Writer via JPEG2000ImageMagick
- CVE-2026-109267ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Stack Overflow in MSL DecoderImageMagick
- CVE-2026-109266ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 XML Injection via CIP EncoderImageMagick
- CVE-2026-109265ImageMagick 7.1.1-7 before 7.1.2-32 Heap Buffer Over-Read via XMP ProfileImageMagick
- CVE-2026-109264ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Stack Overflow in MVG DecoderImageMagick
- CVE-2026-109263ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in YUV EncoderImageMagick
- CVE-2026-109262ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in SVG EncoderImageMagick
- CVE-2026-109261ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in GIF EncoderImageMagick
- CVE-2026-109260ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in PNG EncoderImageMagick
- CVE-2026-109259ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Information Disclosure in TGA DecoderImageMagick
- CVE-2026-109258ImageMagick 7.1.0-20 before 7.1.2-32 Invalid Memory Free in FX OperationImageMagick
- CVE-2026-109256FreeRDP 3.10.0 through 3.32.2 Heap Buffer Overflow in WinPR PNG ConversionFreeRDP
- CVE-2026-109255FreeRDP 3.0.0 before 3.32.0 heap buffer overflow via license_check_stream_lengthFreeRDP
- CVE-2026-109254FreeRDP 2.1.0 before 3.32.0 Use-After-Free via rdpsnd Disconnect PathFreeRDP
- CVE-2026-109253FreeRDP 3.9.0 before 3.32.0 RDPEAR NDR Scalar Out-of-Bounds ReadFreeRDP
- CVE-2026-109252FreeRDP from 3.9.0 before 3.32.0 RDPEAR NULL Pointer Dereference via KERB_RPC_INTERNAL_NAMEFreeRDP
- CVE-2026-109251FreeRDP before 3.32.0 Out-of-Bounds Write via MS-RDPEGT Video GeometryFreeRDP
- CVE-2026-109249FreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via Remote Assistance File ParsingFreeRDP
- CVE-2026-109248FreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via WinPR Clipboard cFileNameFreeRDP
- CVE-2026-109247FreeRDP before 3.32.0 Path Traversal via Clipboard cFileNameFreeRDP
- CVE-2026-109244FreeRDP 2.0.0 before 3.32.0 Insecure Private Key Permissions in winpr-makecertFreeRDP
- CVE-2026-109243FreeRDP 3.0.0 before 3.32.0 Insecure Permissions on Soft-Smartcard Private Key FileFreeRDP
- CVE-2026-109241FreeRDP before 3.32.0 NULL Dereference in Video Redirection ChannelFreeRDP
- CVE-2026-109240FreeRDP 3.11.0 before 3.32.1 Reachable Assertion DoS via urb_isoch_transferFreeRDP
- CVE-2026-109239Crawl4AI before 0.9.4 Blind SSRF via RobotsParser.can_fetch robots.txt Fetchunclecode crawl4ai
- CVE-2026-81856Terminal escape sequence injection in Hex via unneutralized server-supplied outputhexpm hex
- CVE-2026-108901Shenzhen HCC Technology MPOS M6 PLUS Display QR Code Rendering ui layerShenzhen HCC Technology MPOS M6 PLUS
- CVE-2026-108900Exponent CMS XML-RPC xmlrpc.php userLogin sql injectionExponent CMS
- CVE-2026-105280Hex writes unverified package tarballs to standard output in mix hex.package fetchhexpm hex
- CVE-2026-96618Hex exhausts memory and disk on oversized or compressed responses from an untrusted mirrorhexpm hex
- CVE-2026-109195Quay: repository auto-prune policy uuid idor in quay apiRed Hat Quay
- CVE-2026-109194Quay: build trigger uuid idor in quay apiRed Hat Quay
- CVE-2026-103503Hex trusts its bundled CA certificates when cacerts_path is sethexpm hex
- CVE-2026-109396Thelia before 3.1.2 and 3.2.x before 3.2.1 CSV Formula Injection via ExportsThelia
- CVE-2026-109393QloApps through 1.7.0 Insecure Direct Object Reference in Back-Office AJAX HandlersWebkul QloApps
- CVE-2026-109392Pimcore through 2026.3.1 Stored XSS via ExternalImage Field Version PreviewPimcore
- CVE-2026-108899tobychui zoraxy Path Exception Matcher authProviders.go handleBasicAuth improper authorizationtobychui zoraxy
- CVE-2026-108898Netis WF2409E Wireless Settings cross site scriptingNetis WF2409E
- CVE-2026-103537CVE-2026-103537Thelia
- CVE-2026-103529CVE-2026-103529Thelia
- CVE-2026-103528CVE-2026-103528Thelia
- CVE-2026-103527CVE-2026-103527Thelia
- CVE-2026-103526CVE-2026-103526Thelia
- CVE-2026-103524CVE-2026-103524Thelia
- CVE-2026-103523CVE-2026-103523Thelia
- CVE-2026-108897Smart Media4U Technology SHAREit App WebView JS Bridge syncInvoke routineSmart Media4U Technology SHAREit App
- CVE-2026-109206LogicalDOC Community Edition through 9.3 Username Enumeration via AvatarServletLogicalDOC Community Edition
- CVE-2026-109204LogicalDOC Community Edition through 9.3 Forced Password Reset via Unbound PswRecovery TicketLogicalDOC Community Edition
- CVE-2026-109200LogicalDOC Community Edition through 9.3 SSRF via XMLConverter xml-stylesheet hrefLogicalDOC Community Edition
- CVE-2026-103502hex_core's default HTTP adapter doesn't verify TLS certificates on OTP 24 and 25hexpm hex_core · hex_core
- CVE-2026-108890BlackBeltTechnology pi-agent-dashboard Terminal terminal-handler.ts terminalManager.spawn improper authorizationBlackBeltTechnology pi-agent-dashboard
- CVE-2026-109188jshERP through 3.6 Missing Authorization in Master Data Add and Import Endpointsjishenghua jshERP
- CVE-2026-109184jshERP through 3.6 Data Scope Bypass via /account/findAccountInOutListjishenghua jshERP
- CVE-2026-109183jshERP through 3.6 Approval Bypass via addDepotHeadAndDetail Status Parameterjishenghua jshERP
- CVE-2026-109182jshERP through 3.6 Incorrect Authorization via /supplier/exportExceljishenghua jshERP
- CVE-2026-109181jshERP through 3.6 Authorization Bypass via purchaseStatus in /depotHead/listjishenghua jshERP
- CVE-2026-109180jshERP through 3.6 Authorization Bypass via User-Controlled Warehouse IDsjishenghua jshERP
- CVE-2026-109179jshERP through 3.6 Missing Authorization via /log/list and /log/infojishenghua jshERP
- CVE-2026-109178jshERP through 3.6 Missing Authorization via /log Audit Endpointsjishenghua jshERP
- CVE-2026-109177MoguBlog through 6.2 Broken Access Control via networkDisk moveFile and editmoxi624 MoguBlog
- CVE-2026-109176MoguBlog through 6.2 IDOR Allows Deleting Other Administrators' Network-Disk Filesmoxi624 MoguBlog
- CVE-2026-109175MoguBlog through 6.2 Broken Access Control via /networkDisk/getFileListmoxi624 MoguBlog
- CVE-2026-109173yshop-crm through 2.1.3 Missing Authorization via invoice check endpointguchengwuyue yshop-crm
- CVE-2026-109172yshop-crm through 2.1.3 Missing Authorization via contract-receivables check endpointguchengwuyue yshop-crm
- CVE-2026-109171yshop-crm through 2.1.3 Missing Authorization via /admin-api/crm/contract/checkguchengwuyue yshop-crm
- CVE-2026-109167TDuck survey form through 6.0 Authorization Bypass via User-Controlled Theme ID in POST /user/form/theme/saveTDuckCloud tduck-survey-form
- CVE-2026-109165TDuck survey form through 6.0 Authorization Bypass via User-Controlled Form Key in POST /user/form/item/batch/createTDuckCloud tduck-survey-form
- CVE-2026-105081ImageMagick before 7.1.2-33 Policy Bypass via Symlink in IsRightsAuthorizedByNameImageMagick
- CVE-2026-108889Yungengxin Cloud Billing IOCTL Process Termination LWBilling64.sys sub_14000443C exposed ioctl with insufficient access controlYungengxin Cloud Billing
- CVE-2026-93694Untrusted request routing and forged acknowledgements permit copy-workflow manipulation in Progress ShareFile Storage Zones ControllerProgress ShareFile Storage Zones Controller
- CVE-2026-93693Unauthenticated queue manipulation through connector SSRF and response injection in Progress ShareFile Storage Zones ControllerProgress ShareFile Storage Zones Controller
- CVE-2026-108836Ollama Pull API name.go IsValid server-side request forgeryOllama
- CVE-2026-108835Yungengxin Yun Jia Security Guard kgameprotect.sys sub_14000885C privileges managementYungengxin Yun Jia Security Guard
- CVE-2026-108834Cairo-dock Glx-Dock Query Parameter ww_page.php cross site scriptingCairo-dock Glx-Dock
- CVE-2026-108952RT-Thread through 5.3.0 Memory Corruption via USB CDC VCOM Driverrt-thread
- CVE-2026-108950Open Source Social Network (OSSN) through 10.1 Missing Authorization via Album Photo Routesopensource-socialnetwork
- CVE-2026-108831meetecho janus-gateway Admin API admin.js hard-coded credentialsmeetecho janus-gateway
- CVE-2026-108830meetecho janus-gateway VideoRoom janus_videoroom.c race conditionmeetecho janus-gateway
- CVE-2026-108829Zen Cart Module Configuration modules.php sql injectionZen Cart
- CVE-2026-105283Internal error terms inspected into AshTypescript RPC error responsesash-project ash_typescript · ash_typescript
- CVE-2026-108828Zen Cart Admin Panel configuration.php eval sql injectionZen Cart
- CVE-2026-108827Zen Cart Administrative Module Management general.php zen_call_function code injectionZen Cart
- CVE-2026-108826Zen Cart PayPal IPN paypaldp.php zen_db_perform sql injectionZen Cart
- CVE-2026-108825yangzongzhuan RuoYi authDataScope checkRoleAllowed privileges managementyangzongzhuan RuoYi
- CVE-2026-108824DataEase Utils.java Utils.buildCalcField sql injectionDataEase
- CVE-2026-108822Kamailio sipt ss7_parser.c isup_get_calling_party buffer overflowKamailio
- CVE-2026-108821Tencent WeKnora SQL Validator inject.go validateSubquery sql injectionTencent WeKnora
- CVE-2026-108820agno-agi agno Delegation Feature _default_tools.py member_agent.run unnecessary privilegesagno-agi agno
- CVE-2026-108819agno-agi agno Agent Orchestration Layer exec dynamically-managed code resourcesagno-agi agno
- CVE-2026-107864WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerabilityIgor Funa Ad Inserter
- CVE-2026-107865WordPress JetMenu plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetMenu
- CVE-2026-108818agno-agi agno auth.py get_authentication_dependency missing authenticationagno-agi agno
- CVE-2026-107866WordPress JetElements For Elementor plugin <= 2.9.2.3 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetElements For Elementor
- CVE-2026-108817agno-agi agno CodingTools coding.py agno.CodingTools.run_shell os command injectionagno-agi agno
- CVE-2026-108816agno-agi agno PythonTools python.py run_python_code code injectionagno-agi agno
- CVE-2026-107423WordPress WP User Manager plugin <= 2.9.22 - Broken Access Control vulnerabilityWP User Manager
- CVE-2026-107869WordPress Flexible Subscriptions plugin <= 1.8.4 - Broken Access Control vulnerabilityWP Desk Flexible Subscriptions
- CVE-2026-107863WordPress Products Restricted Users for WooCommerce plugin <= 0.7 - Broken Access Control vulnerabilityCodection Products Restricted Users for WooCommerce
- CVE-2026-108168WordPress Custom Query Blocks plugin <= 5.6.0 - Cross Site Scripting (XSS) vulnerabilityDLX Plugins Custom Query Blocks
- CVE-2023-25996WordPress Booster Elite for WooCommerce plugin < 8.4.0 - Authenticated Arbitrary WordPress Option Disclosure vulnerabilityPluggabl LLC. Booster Elite for WooCommerce
- CVE-2026-108815idcCMS member_deal.php cross site scriptingidcCMS
- CVE-2026-108814SEMCMS SEMCMS_Banner.php sql injectionSEMCMS
- CVE-2026-107432WordPress Event post plugin <= 6.1.1 - Broken Access Control vulnerabilityNOUS Ouvert Utile et Simple Event post
- CVE-2026-103356WordPress TMDS plugin <= 1.0.15 - Broken Access Control vulnerabilityVillaTheme TMDS
- CVE-2026-107430WordPress VideoWhisper Site Manager for ChatGPT, Claude, Codex plugin <= 1.2.10 - Broken Access Control vulnerabilityVideoWhisper.com VideoWhisper Site Manager for ChatGPT, Cla…
- CVE-2026-108813SEMCMS SEMCMS_Download.php sql injectionSEMCMS
- CVE-2026-107429WordPress Paid Videochat Turnkey Site plugin <= 7.5.12 - Other vulnerability Type vulnerabilityVideoWhisper.com Paid Videochat Turnkey Site
- CVE-2026-107427WordPress Event post plugin <= 6.1.1 - Insecure Direct Object References (IDOR) vulnerabilityNOUS Ouvert Utile et Simple Event post
- CVE-2026-106605WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin <= 2.3.22 - Other vulnerability Type vulnerabilityWP Desk Flexible Quantity – Measurement Price Calculator fo…
- CVE-2026-108812SEMCMS SEMCMS_User.php user improper authorizationSEMCMS
- CVE-2026-108811WMCMS index.php information disclosureWMCMS
- CVE-2026-108810tsi-coop tsi-dpdp-cms JSON Schema Validation information disclosuretsi-coop tsi-dpdp-cms
- CVE-2026-93581Insufficient Neutralization of Formula Elements in CSV ExportsOTRS GmbH (former OTRS AG) OTRS · OTRS GmbH (former OTRS AG…
- CVE-2026-78359Duplicate Identity / Identity Shadowing across CustomerUser backendsOTRS GmbH (former OTRS AG) OTRS · OTRS GmbH (former OTRS AG…
- CVE-2026-78358Cross-Site Request Forgery in Administrative ActionsOTRS GmbH (former OTRS AG) OTRS · OTRS GmbH (former OTRS AG…
- CVE-2026-78356Unauthenticated Disclosure of Agent Frontend ConfigurationOTRS GmbH (former OTRS AG) OTRS
- CVE-2026-48212Stored XSS in external pagesOTRS GmbH (former OTRS AG) OTRS
- CVE-2026-48211Cross-Site Request Forgery in Import/Export Admin consoleOTRS GmbH (former OTRS AG) OTRS · OTRS GmbH (former OTRS AG…
- CVE-2026-108809Eleveo Call Recording Software logout session expirationEleveo Call Recording Software
- CVE-2026-108808Eleveo Call Recording Software JWT Token logout get request method with sensitive query stringsEleveo Call Recording Software
- CVE-2026-109082Keycloak-services: keycloak-services: ciba confidential-only contract not enforced for public clientsRed Hat Build of Keycloak · Red Hat Single Sign-On
- CVE-2026-108807krupalshah EmployeeRecruitmentSystem Registration adminregister.php mysql_query sql injectionkrupalshah EmployeeRecruitmentSystem
- CVE-2026-108806krupalshah EmployeeRecruitmentSystem Forgot Password authprocessing.php mysql_query sql injectionkrupalshah EmployeeRecruitmentSystem
- CVE-2026-107791WP Comment Cleaner 6.1 - 7.1 - Subscriber+ Bulk Comment Deletion via nav_delete_all_commentWP Comment Cleaner
- CVE-2025-15703WP Job Openings < 4.0.0 - Admin+ Stored XSSHireZoot
- CVE-2026-84166Hotel Booking <= 3.8 - Booking Order Creation, Deletion, and Modification via CSRFHotel Booking
- CVE-2026-84167Hotel Booking <= 3.8 - Subscriber+ Booking Order PII Disclosure via IDORHotel Booking
- CVE-2026-108805krupalshah EmployeeRecruitmentSystem Login loginprocessing.php mysql_query sql injectionkrupalshah EmployeeRecruitmentSystem
- CVE-2026-108803y_project RuoYi Disable API add changeStatus session expirationy_project RuoYi
- CVE-2026-107203Foreman: domain and subnet interface api skips host search filtersRed Hat Satellite
- CVE-2026-107193Foreman: api filter lookup ignores a search-limited filter permissionRed Hat Satellite
- CVE-2026-108802y_project RuoYi Dictionary Data Drawer Preview add renderDrawer cross site scriptingy_project RuoYi
- CVE-2026-21138Insufficient verification of data authenticity in Smart Switch prior to version 3.7.73 allows physical attackers to install arbitrary applicSamsung Mobile Smart Switch
- CVE-2026-21137Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege.Samsung Mobile Smart Switch
- CVE-2026-21136Improper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to invoke application restore process.Samsung Mobile Smart Switch
- CVE-2026-21135Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information.Samsung Mobile Samsung Internet
- CVE-2026-21134Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive information.Samsung Mobile Samsung Flow
- CVE-2026-21133Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data.Samsung Mobile Samsung Flow
- CVE-2026-21132Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary script.Samsung Mobile Samsung Internet
- CVE-2026-21131Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung FSamsung Mobile Samsung Flow
- CVE-2026-21130Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arSamsung Mobile Samsung Checkout
- CVE-2026-21129Improper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch Samsung Mobile Samsung Checkout
- CVE-2026-21128Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch arbitSamsung Mobile Samsung Checkout
- CVE-2026-21127Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers to access sensitive dSamsung Mobile Samsung Account
- CVE-2026-21126Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackersSamsung Mobile Devices
- CVE-2026-21123Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to accesSamsung Mobile Devices
- CVE-2026-21121Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs.Samsung Mobile Devices
- CVE-2026-21119Out-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so prior to SMR Oct-2026 Release 1 allows local attackers to read and write out-oSamsung Mobile Devices
- CVE-2026-21118Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage.Samsung Mobile Devices
- CVE-2026-21117Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive information.Samsung Mobile Devices
- CVE-2026-21116Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.Samsung Mobile Devices
- CVE-2026-21115Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.Samsung Mobile Devices
- CVE-2026-108801prasathmani TinyFileManager tinyfilemanager.php move_uploaded_file unrestricted uploadprasathmani TinyFileManager
- CVE-2026-108800yangzongzhuan RuoYi cross-site request forgeryyangzongzhuan RuoYi
- CVE-2026-108799jackq XCMS Password Recovery Mail Endpoint PublicController.class.php sendFindPwdMail sql injectionjackq XCMS
- CVE-2026-108798ZKTeco BioTime hard-coded keyZKTeco BioTime
- CVE-2026-108797ZKTeco BioTime Employee REST API employees authorizationZKTeco BioTime
- CVE-2026-108796ZKTeco BioTime Biometric Data Endpoint finger_data authorizationZKTeco BioTime
- CVE-2026-108795ZKTeco BioTime System Settings API systemSettings access controlZKTeco BioTime
- CVE-2026-108794ZKTeco BioTime Database Migration Functionality db_migrate_setting sql injectionZKTeco BioTime
- CVE-2026-107437Plaintext Database Password Exposure in GV-E-Map Server V18.2.0AGeoVision GV-E-map Server
- CVE-2026-108791westboy CicadasCMS Template Management input TemplateController.input path traversalwestboy CicadasCMS
- CVE-2026-108790westboy CicadasCMS Backend Template Editor save TemplateController.save path traversalwestboy CicadasCMS
- CVE-2026-108981ngx_cache_purge before 3.0.4 can allow file deletion via a symlink attack in certain situations where nginx and a served application (e.g., denji ngx_cache_purge
- CVE-2026-108789deepseek-ai deepseek-harness dsh-workflow-worker-thread agent behavioral workflowdeepseek-ai deepseek-harness
- CVE-2026-108788deepseek-ai deepseek-harness Sandbox spawn sandboxdeepseek-ai deepseek-harness
- CVE-2026-108787houtini-ai voice-analyser-mcp collect_corpus crawler.ts fetch server-side request forgeryhoutini-ai voice-analyser-mcp
- CVE-2026-108786houtini-ai seo-crawler-mcp Crawler CrawlOrchestrator.ts run_seo_audit server-side request forgeryhoutini-ai seo-crawler-mcp
- CVE-2026-66085Information Disclosure in ModemUnisoc (Shanghai) Technologies Co. Modem
- CVE-2026-87765Improper Input Validation in Kernel APsys DVFSUnisoc (Shanghai) Technologies Co. kernel
- CVE-2026-108785macrozheng mall JwtAuthenticationTokenFilter refreshToken JwtTokenUtil.refreshHeadToken session expirationmacrozheng mall
- CVE-2026-108784macrozheng mall Payment Endpoint AlipayServiceImpl.java AlipayServiceImpl.pay logic errormacrozheng mall
- CVE-2026-108783PRVTPRO Amnezia-Web-Panel Backup Download app.py default credentialsPRVTPRO Amnezia-Web-Panel
- CVE-2026-108782erzhongxmu JEEWMS Autocomplete CommonServiceImpl.java CommonServiceImpl.getAutoList sql injectionerzhongxmu JEEWMS
- CVE-2026-108781erzhongxmu JEEWMS PDA WmToMoveGoodsController.java WmToMoveGoodsController.list sql injectionerzhongxmu JEEWMS
- CVE-2026-108779erzhongxmu JEEWMS WmSttInGoodsController.java WmSttInGoodsController.list sql injectionerzhongxmu JEEWMS