CVEs published October 26, 2026
768 CVEs were published on October 26, 2026: 41 critical, 257 high. Browse them by severity, product and exploitation status.
- Published
- 768
- Critical
- 41
- High
- 257
- Medium
- 418
- Low
- 37
- Unrated
- 15
- Now in CISA KEV
- 0
- Fix available
- 583
Most affected products
- Apple macOS
- 142
- Apple iOS and iPadOS · Apple macOS +1
- 44
- Apple iOS and iPadOS · Apple macOS +3
- 44
- Apple iOS and iPadOS · Apple macOS
- 20
- Apple Safari · Apple iOS and iPadOS +2
- 19
- Apple iOS and iPadOS
- 17
- Apple iOS and iPadOS · Apple macOS +2
- 15
- Openpanel-dev openpanel
- 14
- Linux
- 12
- mtrudel bandit · bandit
- 11
Critical 41
- CVE-2026-116747Kener 3.0.0 before 4.1.10 Authentication Bypass via Hardcoded Fallback JWT Secretrajnandan1 kener
- CVE-2026-116508TOTOLINK A950RG Device-Information CGI infostat.cgi sub_402340 stack-based overflowTOTOLINK A950RG
- CVE-2026-116506TOTOLINK A950RG firewall.so apmib_set command injectionTOTOLINK A950RG
- CVE-2026-116505TOTOLINK A950RG device-information udhcpd.leases getDeviceInfo command injectionTOTOLINK A950RG
- CVE-2026-112552An out-of-bounds write issue was addressed with improved bounds checking.Apple macOS
- CVE-2026-84539An out-of-bounds write issue was addressed with improved bounds checking.Apple macOS
- CVE-2026-112514A use-after-free issue was addressed with improved memory management.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-112521A buffer overflow was addressed with improved bounds checking.Apple macOS
- CVE-2026-112690This issue was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-84633A path traversal issue was addressed with improved path validation.Apple macOS
- CVE-2026-112478An out-of-bounds read issue was addressed by removing the vulnerable code.Apple macOS
- CVE-2026-112497This issue was addressed with improved permissions checking.Apple macOS
- CVE-2026-112526A buffer overflow was addressed with improved bounds checking.Apple macOS
- CVE-2026-112443The issue was addressed with improved memory handling.Apple macOS
- CVE-2026-113897This issue was addressed by removing the vulnerable code.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-116504TOTOLINK A950RG Cloud Upgrade upgrade.so setCloudUpgradeFW command injectionTOTOLINK A950RG
- CVE-2026-110720Consul-k8s vulnerable to a cross-namespace authorization bypass in component ACL binding rulesHashiCorp Tooling
- CVE-2026-10757BUG-000187511 - ArcGIS Server has a security vulnerability.Esri ArcGIS Server
- CVE-2026-102649Burrito: Unauthenticated webhooks trigger unauthorized Terraform plans when webhookSecret is unsetpadok-team burrito
- CVE-2026-115905zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File…zip-rs zip2 · zip
- CVE-2026-112346OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCEOpenHands Software Agent SDK
- CVE-2026-77055Improper Privilege Assignment in boneIOboneIO black_debian_images
- CVE-2026-93328Missing Authorization in MCP Toolbox for Databases allows Arbitrary File Read and WriteGoogle Cloud MCP Toolbox for Databases
- CVE-2026-65184Avocent ACS8000 wsserver command injectionVertiv Avocent ACS8000
- CVE-2026-115693Custom cacerts or cacertfile do not restrict trust to the pinned CA in hackneybenoitc hackney · hackney
Show all 41 entriesShow fewer entries
- CVE-2026-107656An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 tFortinet FortiSandbox
- CVE-2026-59107Shared SSH Authentication Key in vSolution Matrix File SharingWolfVision Cynap Pro, Cynap Core Pro · WolfVision Cynap, Cy…
- CVE-2026-59106Unauthenticated RCE Vulnerability in WolfProt interface implementationWolfVision Cynap Pure (Next Gen), Cynap Bridge · WolfVis… +2
- CVE-2026-116485danmu_api before 1.21.7 Authentication Bypass via Default Token in Env Endpointshuangxd- danmu_api
- CVE-2026-116214MacCMS v10 before 2026.1000.4054 Account Takeover via Unbound Password Recovery Codemaccmspro maccms10 · magicblack maccms10
- CVE-2026-115188An unrestricted file upload vulnerability exists in the campaign import feature of Mautic 7.mautic/core
- CVE-2026-110475Improper Authentication Vulnerability in CreditNirvana Collections PlatformCreditNirvana Collections Platform
- CVE-2026-116237Oray Pugongying X5 Pro Dnsmasq crlf injectionOray Pugongying X5 Pro
- CVE-2026-116235Oray Pugongying X5 Pro L2TP Authentication crlf injectionOray Pugongying X5 Pro
- CVE-2026-116234Oray Pugongying X5 Pro IPsec Policy ipsec.conf crlf injectionOray Pugongying X5 Pro
- CVE-2026-116233Oray Pugongying X5 Pro Dnsmasq crlf injectionOray Pugongying X5 Pro
- CVE-2026-116232Oray Pugongying X5 Pro SNMP snmp_set crlf injectionOray Pugongying X5 Pro
- CVE-2026-116231Oray Pugongying X5 Pro Ser2net crlf injectionOray Pugongying X5 Pro
- CVE-2026-116116Yoosee GM8135S Camera Secure Boot signature verificationYoosee GM8135S Camera
- CVE-2026-107092NexoPOS v6.2.4 is vulnerable to Directory Traversal via the api/update endpoint.
- CVE-2026-31158SQL Injection vulnerability in CRM SOFTTRADE Infotech (aka softtradeindia) 1.0 allows a remote attacker to execute arbitrary code via the Lo
High 257
- CVE-2026-111422Apache Airflow SSH provider: SSHRemoteJobOperator: `environment` values are executed as shell on the remote hostApache Software Foundation Apache Airflow SSH provider
- CVE-2026-116827YesWiki before 4.7.0 SSRF via copyUrlToLocalFile in Bazar CSV Importyeswiki
- CVE-2026-116826YesWiki before 4.7.0 Authenticated SSRF via Page Duplication API downloadFileyeswiki
- CVE-2026-116825YesWiki from 4.6.2 before 4.7.0 HTTP Signature Replay via ActivityPub Inboxyeswiki
- CVE-2026-116821YesWiki before 4.7.0 Read-ACL Bypass via SQL LIKE Wildcards in Usernamesyeswiki
- CVE-2026-116819OpenPanel before 3.0.0 Credential Disclosure via notification.rules QueryOpenpanel-dev openpanel
- CVE-2026-116818OpenPanel before 3.0.0 Unauthenticated ClickHouse SQL Injection via /live/visitors WebSocketOpenpanel-dev openpanel
- CVE-2026-116814OpenPanel before 3.0.0 Sensitive Information Exposure via Application LogsOpenpanel-dev openpanel
- CVE-2026-116813OpenPanel before 3.0.0 ClickHouse SQL Injection via conversion.service.tsOpenpanel-dev openpanel
- CVE-2026-116812OpenPanel before 3.0.0 ClickHouse SQL Injection via cohort.preview profile filterOpenpanel-dev openpanel
- CVE-2026-116811OpenPanel before 3.0.0 Sandbox Escape RCE via Webhook JavaScript TemplateOpenpanel-dev openpanel
- CVE-2026-116808OpenPanel before 3.0.0 ClickHouse SQL Injection via profile.valuesOpenpanel-dev openpanel
- CVE-2026-116807OpenPanel before 3.0.0 ClickHouse SQL Injection via event.events tRPC QueryOpenpanel-dev openpanel
- CVE-2026-116591compress zstd: Panic on two-block framesklauspost compress · github.com/klauspost/compress/zstd +1
- CVE-2026-116748Transmission 4.0.0 before 4.1.3 Permissive CORS Leaks RPC Anti-CSRF Tokentransmission
- CVE-2026-116741Speex through 1.2.1 Out-of-Bounds Write via speex_bits_read_whole_bytesxiph speex
- CVE-2026-116740libcss through 0.9.2 NULL Pointer Dereference via Media-Query Parsernetsurf-browser libcss
- CVE-2026-116738VMime through 0.9.2 Stack-Based Buffer Overflow via uuencode Decoderkisli vmime
- CVE-2026-116724FLTK through 1.4.5 Heap Buffer Overflow via Fl_BMP_Image Integer Overflowfltk
- CVE-2026-116723FLTK through 1.4.5 Stack Buffer Overflow via Fl_BMP_Image colors_used Fieldfltk
- CVE-2026-116589Datadog dd-trace-py: IAST instrumentation can lead to application DOSDataDog dd-trace-py · ddtrace
- CVE-2026-116588Datadog dd-trace-py: ReDOS in URL query string obfuscationDataDog dd-trace-py · ddtrace
- CVE-2026-116587Go JOSE: DoS when parsing JWKs that contain RSA keysgo-jose · github.com/go-jose/go-jose/v4 +1
- CVE-2026-116584Seroval `fromJSON`/`fromCrossJSON` denial of service via unvalidated array node lengthlxsmnsyc seroval · seroval
- CVE-2026-84627A buffer overflow was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +1
Show all 257 entriesShow fewer entries
- CVE-2026-65327A logic issue was addressed with improved checks.Apple macOS
- CVE-2026-112529An out-of-bounds read was addressed with improved bounds checking.Apple macOS
- CVE-2026-86972A buffer overflow was addressed with improved size validation.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-113912An out-of-bounds access issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-112495An out-of-bounds read was addressed with improved bounds checking.Apple macOS
- CVE-2026-86964A null pointer dereference was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-112456An out-of-bounds write issue was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS
- CVE-2026-112513This issue was addressed with improved validation of symlinks.Apple macOS
- CVE-2026-112682An input validation issue was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-112417An integer overflow was addressed with improved input validation.Apple visionOS
- CVE-2026-112505An out-of-bounds write issue was addressed with improved bounds checking.Apple macOS
- CVE-2026-113949A type confusion issue was addressed with improved state management.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-86929An out-of-bounds write issue was addressed with improved bounds checking.Apple macOS
- CVE-2026-112437A logic issue was addressed with improved checks.Apple macOS
- CVE-2026-112525An out-of-bounds read was addressed with improved bounds checking.Apple macOS
- CVE-2026-86991A buffer overflow was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-65385An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple visionOS +1
- CVE-2026-86968An access issue was addressed with improved access control.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-112476An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-112548A use after free issue was addressed with improved memory management.Apple macOS
- CVE-2026-112677An authorization issue was addressed with improved access control.Apple macOS
- CVE-2026-65350A use-after-free issue was addressed with improved memory management.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-112620A denial-of-service issue was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-112508An out-of-bounds read was addressed with improved bounds checking.Apple macOS
- CVE-2026-112621An out-of-bounds write issue was addressed with improved bounds checking.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-112676This issue was addressed with additional entitlement checks.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-86945This issue was addressed with improved checks.Apple macOS
- CVE-2026-112637A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-112565An integer overflow was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-112532The issue was addressed with improved memory handling.Apple macOS
- CVE-2026-86969An out-of-bounds write was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS
- CVE-2026-112498An access issue was addressed with additional sandbox restrictions.Apple macOS
- CVE-2026-112477A race condition was addressed with improved locking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-86986A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-65384An out-of-bounds read issue was addressed with improved input validation.Apple macOS
- CVE-2026-113909A memory corruption issue was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-112524A use-after-free issue was addressed with improved memory management.Apple macOS
- CVE-2026-112461An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-112553An out-of-bounds write issue was addressed with improved bounds checking.Apple macOS
- CVE-2026-112683An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-112545A parsing issue in the handling of directory paths was addressed with improved path validation.Apple macOS
- CVE-2026-112457A double free issue was addressed with improved memory management.Apple macOS
- CVE-2026-112640A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-112569An access issue was addressed with additional sandbox restrictions.Apple macOS
- CVE-2026-116581Seroval: fromJSON deserializer trusts sequence doneAt (unauthenticated event-loop DoS)lxsmnsyc seroval · seroval
- CVE-2026-112482An out-of-bounds write issue was addressed with improved bounds checking.Apple macOS
- CVE-2026-113944An out-of-bounds read was addressed with improved bounds checking.Apple macOS
- CVE-2026-112466An out-of-bounds read was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-84545A use after free issue was addressed with improved memory management.Apple macOS
- CVE-2026-112470An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-112562A parsing issue in the handling of directory paths was addressed with improved path validation.Apple macOS
- CVE-2026-112427An authentication issue was addressed with improved state management.Apple macOS
- CVE-2026-112519An integer overflow was addressed with improved input validation.Apple macOS
- CVE-2026-112688A memory corruption issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS
- CVE-2026-84494An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-112671A resource exhaustion issue was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-112626A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-113934The issue was addressed with improved memory handling.Apple macOS
- CVE-2026-112651A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-86974A type confusion issue was addressed with improved checks.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-112485The issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-112606A type confusion issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-112493A downgrade issue was addressed with additional version checks.Apple macOS
- CVE-2026-112539A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2026-112610An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS
- CVE-2026-112515An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-112542A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2026-112554An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS
- CVE-2026-86958The issue was addressed with improved memory handling.Apple macOS
- CVE-2026-112502A buffer overflow was addressed with improved bounds checking.Apple macOS
- CVE-2026-112410A double free issue was addressed with improved memory management.Apple macOS
- CVE-2026-112555A validation issue was addressed with improved input sanitization.Apple macOS
- CVE-2026-112543A race condition was addressed with additional validation.Apple macOS
- CVE-2026-112451An out-of-bounds read was addressed with improved bounds checking.Apple macOS
- CVE-2026-112492A race condition was addressed with additional validation.Apple macOS
- CVE-2026-112607An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS
- CVE-2026-112484This issue was addressed with improved file handling.Apple macOS
- CVE-2026-113942An out-of-bounds read was addressed with improved bounds checking.Apple macOS
- CVE-2026-112670An out-of-bounds write issue was addressed with improved input validation.Apple macOS
- CVE-2026-84495A use-after-free issue was addressed with improved memory management.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-112689An out-of-bounds write issue was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-86943The issue was addressed with improved memory handling.Apple macOS
- CVE-2026-112534This issue was addressed with improved access restrictions.Apple macOS
- CVE-2026-112430An authentication issue was addressed with improved validation of user attributes.Apple macOS
- CVE-2026-112464An out-of-bounds write issue was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-112517A use after free issue was addressed with improved memory management.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-113900A race condition was addressed with improved state handling.Apple macOS
- CVE-2026-112487A path handling issue was addressed with improved validation.Apple macOS
- CVE-2026-113941An out-of-bounds read was addressed with improved bounds checking.Apple macOS
- CVE-2026-112595This issue was addressed with improved authentication.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-112469An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-112486An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-65363The issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS
- CVE-2026-86936A logic issue was addressed with improved checks.Apple macOS
- CVE-2026-112453A path handling issue was addressed with improved validation.Apple macOS
- CVE-2026-112541A parsing issue in the handling of directory paths was addressed with improved path validation.Apple macOS
- CVE-2026-112668A logic issue was addressed with improved checks.Apple macOS
- CVE-2026-112473An authorization issue was addressed with improved state management.Apple macOS
- CVE-2026-112536An out-of-bounds write issue was addressed with improved bounds checking.Apple macOS
- CVE-2026-112424An out-of-bounds read was addressed with improved bounds checking.Apple macOS
- CVE-2026-86916A use after free issue was addressed with improved memory management.Apple iOS and iPadOS · Apple macOS
- CVE-2026-112625An integer underflow was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS
- CVE-2026-112449An integer overflow was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-112507An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS
- CVE-2026-116580Seroval: Deserialization invokes attacker-chosen callables: AsyncIteratorFactoryInstance calls source.on(listener) without type checklxsmnsyc seroval · seroval
- CVE-2026-112696An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-112679A use-after-free issue was addressed with improved memory management.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-112546An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-112638A heap buffer overflow was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-112454The issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-113947This issue was addressed with improved access restrictions.Apple macOS
- CVE-2026-112655A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-112593An out-of-bounds write issue was addressed with improved bounds checking.Apple macOS
- CVE-2026-112622An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS
- CVE-2026-86946A use-after-free issue was addressed with improved memory management.Apple macOS
- CVE-2026-112474A use-after-free issue was addressed with improved memory management.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-112531A use after free issue was addressed with improved memory management.Apple macOS
- CVE-2026-112570An access issue was addressed with additional sandbox restrictions.Apple macOS
- CVE-2026-112659A type confusion issue was addressed with improved memory handling.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-112434A logic issue was addressed with improved checks.Apple macOS
- CVE-2026-86992The issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-112619An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-112530A logic issue was addressed with improved checks.Apple macOS
- CVE-2026-86896A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2026-112567This issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS +3
- CVE-2025-13833Insecure TLS Fingerprint Validation in ForeScout SecureConnector Configuration Enables Remote Code ExecutionForescout Technologies SecureConnector
- CVE-2026-112459A race condition was addressed with improved state handling.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-84604A stack buffer overflow was addressed through improved input validation.Apple macOS
- CVE-2026-112623A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-112438A logic issue was addressed with improved state management.Apple macOS
- CVE-2026-64759An integer overflow was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS
- CVE-2026-113946An out-of-bounds write issue was addressed with improved bounds checking.Apple macOS
- CVE-2026-112654A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-112480A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2026-65373A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2026-112510An out-of-bounds write issue was addressed with improved bounds checking.Apple macOS
- CVE-2026-112639A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-112697A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-116576systeminformation: Windows command injection in services() through Unicode quotation markssebhildebrandt systeminformation · systeminformation
- CVE-2026-65629Weak PBKDF2 parameters for password-encrypted private-key export in josepotatosalad jose · jose
- CVE-2026-57187Asterisk: Heap-use-after-free in Asterisk PJSIP TCP/SDP handling when TCP connection closes during SDP processingasterisk · certified-asterisk
- CVE-2026-115924Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphsdanielgatis rembg · rembg
- CVE-2026-116634OmniRoute 3.8.50 before 3.8.52 Missing Authentication via /api/sync/tokenscheaper-inference OmniRoute
- CVE-2026-33521BUG-000186514 - ArcGIS Server has a security vulnerability.Esri ArcGIS Server
- CVE-2026-105626Consul vulnerable to a denial of service in HTTP APIsHashiCorp Consul
- CVE-2026-105608Consul vulnerable to an authorization bypass in service mesh registrationHashiCorp Consul
- CVE-2026-70379Unauthorized Access to vSolution Matrix RTSPWolfVision Cynap Pro, Cynap Core Pro
- CVE-2026-105765Consul vulnerable to an authorization bypass in the agent's service mesh leaf certificate APIHashiCorp Consul
- CVE-2026-115915vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCEvllm-project vllm · vllm
- CVE-2026-72758Routinator may exit on malformed rangesNLnet Labs Routinator
- CVE-2026-72756Routinator exits on malformed rsync URIsNLnet Labs Routinator
- CVE-2026-72754Routinator exits when parsing an incorrect or very large CRL fileNLnet Labs Routinator
- CVE-2026-72753Routinator incorrectly handles delta updatesNLnet Labs Routinator
- CVE-2026-115912vLLM: Public multimodal SHM handle forgery reaches worker-side `pickle.loads()` with insecure serialization disabledvllm-project vllm · vllm
- CVE-2026-116612A flaw was found in GStreamer Editing Services (gst-editing-services).GStreamer project gst-editing-services
- CVE-2026-115418SQL injection in the database-query custom resource handlers in Amazon Web Services (AWS) Cloud Development Kit (CDK)…aws-cdk/aws-redshift-alpha
- CVE-2026-115909zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During Extractionzip-rs zip2 · zip
- CVE-2026-115908zip: Arbitrary file write outside the extraction directory, because ZipArchive::extract validates symlink targets lexically. (The defense against CVE-2025-29787 was broken in v7.2.0)zip-rs zip2 · zip
- CVE-2026-115907zip: legacy Shrink/Reduce/Implode decoder: denial of service from attacker-controlled ZIP64 uncompressed sizezip-rs zip2 · zip
- CVE-2026-71456Use of hard-coded cryptographic key vulnerability in Johnson Controls Kantech Entrapass allows Padding Oracle Crypto Attack.Johnson Controls Kantech Entrapass
- CVE-2026-81038Bluetooth OTS server discloses uninitialized stack memory in failed Calculate Checksum responseszephyrproject zephyr
- CVE-2026-112344Syncplify Server! 6.0.0 < 8.8.0 Symbolic Link Jail EscapeSyncplify Server!
- CVE-2026-112343Syncplify Server! < 8.8.0 Permission Override Bypass via Path CasingSyncplify Server!
- CVE-2026-115748Apache Vysper: Authorization bypassApache Software Foundation Apache Vysper
- CVE-2026-115721Apache Vysper: Unbounded allocationApache Software Foundation Apache Vysper
- CVE-2026-116543Open5GS 1.3.0 through 2.8.0 Heap Out-of-Bounds Write via SBI Multipart Parseropen5gs
- CVE-2026-116541netty-tcnative before 2.0.84.Final Denial of Service via BIO Write Overcountnetty-tcnative · netty-tcnative-boringssl-static
- CVE-2026-116540netty-tcnative 2.0.66.Final before 2.0.84.Final Use-After-Free in Session Ticket Callbacknetty-tcnative
- CVE-2026-116539Netty netty-tcnative before 2.0.84.Final Heap Buffer Overflow via OpenSSL BIOnetty-tcnative · netty-tcnative-boringssl-static
- CVE-2026-116489Timescale pgvectorscale before 0.9.1 Type Confusion via Unqualified DiskANN Operator Classestimescale pgvectorscale
- CVE-2026-85297Bucket Squatting in Cloud Run MCP leads to Service Account TakeoverGoogle Cloud Cloud Run MCP
- CVE-2026-99099x86/CPU/AMD: Fix AMD TLBI Erratum #1718Linux
- CVE-2026-99094Bluetooth: btintel_pcie: fix TX descriptor bounds checkLinux
- CVE-2026-90885Apache Camel: Camel-Saxon XML External Entity Processing - XQueryBuilder Parsed a Message Body That Was Already a javax.xml.transform.Source With Saxon's Default Parser Settings, so an External Entity Declared in That Body Was ResolvedApache Software Foundation Apache Camel
- CVE-2026-77059TOCTOU Race Condition in boneIOboneIO
- CVE-2026-77056Use of Default Credentials in boneIOboneIO black_debian_images
- CVE-2026-77053Missing Authentication in Default Configuration in boneIOboneIO
- CVE-2026-77052Missing Authentication for Node-RED in boneIOboneIO
- CVE-2026-112345TTLock Android App < 9.8.260718 Hardcoded BLE Pairing Key ExposureSciener TTLock
- CVE-2026-115930MongoDB Shell (mongosh) bundled with Node.js trusts certificates issued by recoverable eMudhra intermediate CAsMongoDB mongosh
- CVE-2026-97200Unbounded response body buffering and decompression in hackneybenoitc hackney · hackney
- CVE-2026-108529SETTINGS and stream-0 WINDOW_UPDATE frames trigger quadratic work over blocked streams in Banditmtrudel bandit · bandit
- CVE-2026-110499Client-chosen HPACK encoder table size is applied uncapped, growing per-connection state with every response in Banditmtrudel bandit · bandit
- CVE-2026-109584HTTP/2 cookie crumb join expands a small HPACK header block into an unbounded allocation in Banditmtrudel bandit · bandit
- CVE-2026-111103HTTP/2 StreamError recovery rolls back connection state and bypasses per-connection limits in Banditmtrudel bandit · bandit
- CVE-2026-111101HTTP/1.1 chunked request bodies made of 1-byte chunks amplify memory use in Banditmtrudel bandit · bandit
- CVE-2026-113436Quadratic bignum parsing of Content-Length and Host port values in Banditmtrudel bandit · bandit
- CVE-2026-114213WebSocket 1-byte continuation frames bypass `max_fragmented_message_size` in Banditmtrudel bandit · bandit
- CVE-2026-115269HTTP/2 WINDOW_UPDATE and SETTINGS frames reset the request body read timeout in Banditmtrudel bandit · bandit
- CVE-2026-108525HTTP/2 inbound flow control is not enforced, letting a client queue unbounded DATA in stream processes in Banditmtrudel bandit · bandit
- CVE-2026-116488NXP MCUXpresso SDK USB Middleware before 2.13.0 Heap Overflow via Host Class DriversNXP mcuxsdk-middleware-usb
- CVE-2026-116219Dolibarr ERP CRM before 24.0.0 OS Command Injection via mysqldump Parameterdolibarr
- CVE-2026-116218Dolibarr ERP CRM 19.0.0 before 23.0.4 SQL Injection via bankaccounts API type fielddolibarr
- CVE-2026-116210Webasyst Framework through 4.4.0 Photos App CSRF via Backend ActionsWebasyst Framework
- CVE-2026-115193A stored Cross-Site Scripting (XSS) vulnerability exists in the contact detail view of Mautic 7.mautic/core
- CVE-2026-115192An SQL Injection vulnerability exists in the dashboard widget data API endpoint (/api/data/{type}).mautic/core
- CVE-2026-115191A SQL injection vulnerability exists in a contact lookup AJAX endpoint of the Mautic administration interface (/s/ajax).mautic/core
- CVE-2026-115190An insecure deserialization (PHP object injection) vulnerability exists in Mautic's handling of segment filters and custom field properties.mautic/core
- CVE-2026-115189A server-side template injection vulnerability exists in the Twig theme rendering sandbox of Mautic.mautic/core
- CVE-2026-116492Frappe CRM before 1.89.1 Missing Authorization via Phone Lookup APIfrappe crm
- CVE-2026-110474Hardcoded API Key Vulnerability in CreditNirvana Agentic AI Call Centre applicationCreditNirvana Agentic AI Call Centre
- CVE-2026-94380Host Header Injection in HAVELSAN's Liman MYSHAVELSAN Liman MYS
- CVE-2026-116469MISP Guard Case-Sensitive Policy Bypass Allows Unauthorized Feed Data Forwardingmisp-guard
- CVE-2026-115608WordPress JetEngine plugin <= 3.9.0 - SQL Injection vulnerabilityCrocoblock JetEngine
- CVE-2026-115948WordPress Media LIbrary Assistant plugin <= 3.42 - SQL Injection vulnerabilityDavid Lingren Media LIbrary Assistant
- CVE-2026-116236Oray Pugongying X5 Pro PPPoE WAN Setting upload_files plugin_init unrestricted uploadOray Pugongying X5 Pro
- CVE-2026-82947Multiple Out-of-Bounds Reads in Frame ProcessingRT-Labs AB SOEM
- CVE-2026-82944Buffer Overflow in CoE SDO Upload Multi-Segment Data TransfersRT-Labs AB SOEM
- CVE-2026-111841WordPress FunnelKit Automations plugin <= 3.8.5.2 - Cross Site Request Forgery (CSRF) vulnerabilityAman FunnelKit Automations
- CVE-2026-116372MISP mispguard: Feed responses with 2xx status codes other than 200 bypass filtering rulesmisp-guard
- CVE-2026-70388Memory Corruption via Integer Underflow in Message Length ValidationRT-Labs AB SOEM
- CVE-2026-96581An upsert on the primary key in Ash ignores attribute multitenancy, so one tenant can read, overwrite and take over another tenant's recordsash-project ash · ash
- CVE-2026-107900V-SFT provided by FUJI ELECTRIC CO., LTD.FUJI ELECTRIC CO., LTD. / Hakko Electronics Co. V-SFT
- CVE-2026-107899V-SFT provided by FUJI ELECTRIC CO., LTD.FUJI ELECTRIC CO., LTD. / Hakko Electronics Co. V-SFT
- CVE-2026-107898V-SFT provided by FUJI ELECTRIC CO., LTD.FUJI ELECTRIC CO., LTD. / Hakko Electronics Co. V-SFT
- CVE-2026-107897V-SFT provided by FUJI ELECTRIC CO., LTD.FUJI ELECTRIC CO., LTD. / Hakko Electronics Co. V-SFT
- CVE-2026-107896V-SFT provided by FUJI ELECTRIC CO., LTD.FUJI ELECTRIC CO., LTD. / Hakko Electronics Co. V-SFT
- CVE-2026-107895V-SFT provided by FUJI ELECTRIC CO., LTD.FUJI ELECTRIC CO., LTD. / Hakko Electronics Co. V-SFT
- CVE-2026-107894V-SFT provided by FUJI ELECTRIC CO., LTD.FUJI ELECTRIC CO., LTD. / Hakko Electronics Co. V-SFT
- CVE-2026-113345Electronic delivery item Inspection Support System provided by Japan's Ministry of Land, Infrastructure, Transport and Tourism contains an iMinistry of Land, Infrastructure, Transport and Tourism, Ja…
- CVE-2026-104591libosmocore through 1.14.1 contains a buffer overflow in osmo_iuup_compute_payload_crc() in src/gsm/iuup.c.
- CVE-2026-104593osmo-msc through 1.15.0 contains a stack-based buffer overflow in decode_mme_name() in src/libmsc/sgs_iface.c.
- CVE-2026-104594libosmocore through 1.14.1 contains out-of-bounds reads in the IPA CCM identity-tag parsers in src/gsm/ipa.c.
- CVE-2026-104596libosmocore through 1.14.1 contains out-of-bounds reads in the GSM 04.80 supplementary-service component parsers in src/gsm/gsm0480.c.
- CVE-2026-104597libosmocore through 1.14.1 contains an out-of-bounds read in iuup_rx_initialization() in src/gsm/iuup.c.
- CVE-2026-104598libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c.
- CVE-2026-106677Homestay3 homestay-backend 0.0.1-SNAPSHOT contains an IDOR in ChatServiceImpl.
- CVE-2026-106781An issue in WCH CH340/CH341 USB-to-Serial Windows Driver setup package CH341SER.EXE version 4.0 allows a local attacker to escalate…
- CVE-2026-107090An issue in Maltego Technologies GmbH Maltego Windows Installer 4.13.0 allows a local attacker to execute arbitrary code via the Maltego…
- CVE-2026-107091An issue in HUION Inspiroy Frego S (L310) Windows Driver 20.0.1.118 allows a local attacker to execute arbitrary code via the HUION driver i
- CVE-2026-116638The Windows Recovery Environment (WinRE) in Windows 10 and 11 may allow an attacker to bypass firmware security controls, including…
- CVE-2026-36698Xovis AG APS-R-POE, APS-R-POE-PP, APS-R, APS-R-POE-USB, and APS-B 2.10.1.1 and earlier contains an OS command injection vulnerability in…
Medium, low and unrated 470
- CVE-2026-116604SourceCodester Online Food Ordering System delete_admin.php missing authenticationSourceCodester Online Food Ordering System
- CVE-2026-116603SourceCodester Online Food Ordering System add_food.php unrestricted uploadSourceCodester Online Food Ordering System
- CVE-2026-116828YesWiki before 4.7.0 SQL Injection via despam.php INTERVAL operandyeswiki
- CVE-2026-116824YesWiki before 4.7.0 Stored XSS via Referer Header in referrers_sites Handleryeswiki
- CVE-2026-116823YesWiki before 4.7.0 Reflected XSS via BazarField $_REQUEST Fallbackyeswiki
- CVE-2026-116822YesWiki before 4.7.0 Template Traversal via BazarListeAction template Parameteryeswiki
- CVE-2026-116820YesWiki from 4.6.0 before 4.7.0 SQL Query Disclosure via showreq Parameteryeswiki
- CVE-2026-116817OpenPanel before 3.0.0 Missing Authentication on Worker Bull BoardOpenpanel-dev openpanel
- CVE-2026-116815OpenPanel before 3.0.0 Improper ClickHouse Escaping in sankey.service.tsOpenpanel-dev openpanel
- CVE-2026-116810OpenPanel before 3.0.0 Missing Authorization via reference.getChartReferencesOpenpanel-dev openpanel
- CVE-2026-116809OpenPanel before 3.0.0 Missing Authorization in event.bots tRPC ProcedureOpenpanel-dev openpanel
- CVE-2026-116806OpenPanel before 3.0.0 Privilege Escalation via onboarding.project tRPC MutationOpenpanel-dev openpanel
- CVE-2026-116805OpenPanel before 3.0.0 Information Disclosure of Ingestion Secret Hashes via client.listOpenpanel-dev openpanel
- CVE-2026-116804DOMPurify from 3.4.4 before 3.4.17 SAFE_FOR_TEMPLATES Bypass via Shadow Root Contentcure53 DOMPurify · dompurify
- CVE-2026-116803DOMPurify before 3.4.17 DOM XSS via IN_PLACE Hook-Detached Subtreescure53 DOMPurify · dompurify
- CVE-2026-116802DOMPurify before 3.4.17 XSS via SMIL attributeName Guard Bypass in XHTML Modecure53 DOMPurify · dompurify
- CVE-2026-116801Parse Server 9.0.0 before 9.10.5-alpha.6 ACL Bypass via $relatedTo Queryparse-community parse-server
- CVE-2026-116800WWBN AVideo before 29.5.0 Local PHP File Inclusion via Accept-Language HeaderWWBN AVideo
- CVE-2026-116602SourceCodester Online Food Ordering System delete.php unlink path traversalSourceCodester Online Food Ordering System
- CVE-2026-116556Argilla TextField.vue cross site scriptingArgilla
- CVE-2026-116555Argilla Sandbox.vue cross site scriptingArgilla
- CVE-2026-2270StatefulSet and ControllerRevision write permissions allow cross-namespace pod creationKubernetes
- CVE-2026-76654Subpath symlinking on Windows nodes permits NTLM coercionKubernetes
- CVE-2026-116554Argilla Settings SettingsInfo.vue Dataset.from_disk cross site scriptingArgilla
- CVE-2026-116515itsourcecode Online Book Store book.php sql injectionitsourcecode Online Book Store
Show all 470 entriesShow fewer entries
- CVE-2026-116746QloApps 1.6.0 through 1.7.0 Unauthorized Hotel Review Submission via qlohotelreviewqloapps
- CVE-2026-116745QloApps through 1.7.0 Guest Order Disclosure via id_cart in Order Confirmationqloapps
- CVE-2026-116744ntop nDPI through 6.0 Out-of-Bounds Read in SoftEther Dissectorntop nDPI
- CVE-2026-116743libyal libmsiecf through 20260525 Double Free via libmsiecf_url_values_read_datalibyal libmsiecf
- CVE-2026-116742HTSlib through 1.24 Heap Out-of-Bounds Write via Truncated .gzi Index Countsamtools htslib
- CVE-2026-116739VMime through 0.9.2 Uninitialized Stack Memory Disclosure via uuencode Decoderkisli vmime
- CVE-2026-116737libphdi through 20260902 Heap Out-of-Bounds Read via Extent Data File Pathlibyal libphdi
- CVE-2026-116736libpff through 20260926 Heap Out-of-Bounds Read via libpff_table_read_values_arraylibyal libpff
- CVE-2026-116735libpff through 20260926 Heap Out-of-Bounds Read via libpff_table_read_6c_record_entrieslibyal libpff
- CVE-2026-116734flatcc through 0.6.4 Out-of-Bounds Read via verifier check_headerdvidelabs flatcc
- CVE-2026-116733flatcc through 0.6.4 Out-of-Bounds Read via __flatcc_json_parser_numberdvidelabs flatcc
- CVE-2026-116732libdwarf through 2.3.3 Heap Out-of-Bounds Read via dwarf_debug_addr_tabledavea42 libdwarf
- CVE-2026-116731Furnace through 0.6.8.3 Out-of-Bounds Write via FamiTracker GROOVES Block Importtildearrow furnace
- CVE-2026-116730Furnace through 0.6.8.3 Out-of-Bounds Read via FamiTracker Module Importtildearrow furnace
- CVE-2026-116729libfvde through 20260923 Heap Out-of-Bounds Read via libfvde_encrypted_metadata_read_type_0x001alibyal libfvde
- CVE-2026-116728libfvde through 20260923 Heap Out-of-Bounds Read via libfvde_encrypted_metadata_read_type_0x0024libyal libfvde
- CVE-2026-116727gbsplay through 0.0.103 Heap Out-of-Bounds Read via vgm_open in gbs.cmmitch gbsplay
- CVE-2026-116726gbsplay through 0.0.103 Heap Out-of-Bounds Read via gbr_open GBR Titlemmitch gbsplay
- CVE-2026-116725gbsplay through 0.0.103 Out-of-Bounds Read via mapper_map ROM Bank Indexmmitch gbsplay
- CVE-2026-116590snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWritexerial snappy-java · org.xerial.snappy:snappy-java
- CVE-2026-116514itsourcecode Airline Reservation System book_flight.php cross site scriptingitsourcecode Airline Reservation System
- CVE-2026-116507TOTOLINK A950RG global.so getLanguageCfg information disclosureTOTOLINK A950RG
- CVE-2026-116586Go JOSE: Panics in JSON parsinggo-jose · github.com/go-jose/go-jose/v4 +1
- CVE-2026-116585Go JOSE: Panic during CBC-HMAC processinggo-jose · github.com/go-jose/go-jose/v4 +1
- CVE-2026-116583Seroval: Code injection through a typed array's own constructor propertylxsmnsyc seroval · seroval
- CVE-2026-116582Seroval: Script injection through RegExp sources in serialized outputlxsmnsyc seroval · seroval
- CVE-2026-86925An authorization issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-113945An out-of-bounds read was addressed with improved bounds checking.Apple macOS
- CVE-2026-112483A path handling issue was addressed with improved validation.Apple macOS
- CVE-2026-113904A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-112616An authorization issue was addressed with improved access control.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-112568A logic issue was addressed with improved checks.Apple macOS
- CVE-2026-112704An information leakage was addressed with additional validation.Apple macOS
- CVE-2026-112544An out-of-bounds write issue was addressed with improved bounds checking.Apple macOS
- CVE-2026-113908A privacy issue was addressed by removing sensitive data.Apple iOS and iPadOS
- CVE-2026-112533An authorization issue was addressed with improved state management.Apple macOS
- CVE-2026-86987An authorization issue was addressed with improved entitlement checks.Apple iOS and iPadOS
- CVE-2026-112708A race condition was addressed with improved locking.Apple macOS
- CVE-2026-112421A race condition was addressed with improved handling of symbolic links.Apple macOS
- CVE-2026-43736An authorization issue was addressed with improved state management.Apple macOS
- CVE-2026-112698The issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS
- CVE-2026-113898A logging issue was addressed with improved data redaction.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-113899The issue was addressed with improved checks.Apple macOS
- CVE-2026-112699An out-of-bounds read was addressed with improved bounds checking.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-84493An authentication issue was addressed with improved state management.Apple iOS and iPadOS
- CVE-2026-112660An authorization issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-84610A file quarantine bypass was addressed with additional checks.Apple macOS
- CVE-2026-84542An access issue was addressed with improved access restrictions.Apple macOS
- CVE-2026-86990An access issue was addressed with improved access restrictions.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-65392A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2026-113948A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2026-112441This issue was addressed by removing the vulnerable code.Apple macOS
- CVE-2026-112504A parsing issue in the handling of directory paths was addressed with improved path validation.Apple macOS
- CVE-2026-112695A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-112416An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-112512A path handling issue was addressed with improved validation.Apple macOS
- CVE-2026-112705An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-113952A logic issue was addressed with improved checks.Apple Safari · Apple iOS and iPadOS +1
- CVE-2026-86877A path traversal issue was addressed with improved path validation.Apple macOS
- CVE-2026-112617An information disclosure issue was addressed with improved logic.Apple macOS
- CVE-2026-112494A file quarantine bypass was addressed with additional checks.Apple macOS
- CVE-2026-112601An integer overflow was addressed with improved input validation.Apple macOS
- CVE-2026-113913An input validation issue was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-86973An out-of-bounds read was addressed with improved bounds checking.Apple Safari · Apple iOS and iPadOS +1
- CVE-2026-112656An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-64750An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS
- CVE-2026-86978This issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-112523This issue was addressed with improved handling of symlinks.Apple macOS
- CVE-2026-112535A race condition was addressed with improved handling of symbolic links.Apple macOS
- CVE-2026-86939A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2026-112630An uninitialized memory issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS
- CVE-2026-86942An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-84528A logging issue was addressed with improved data redaction.Apple macOS
- CVE-2026-112558A permissions issue was addressed with additional sandbox restrictions.Apple macOS
- CVE-2026-86954An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-84590An out-of-bounds write issue was addressed with improved bounds checking.Apple macOS
- CVE-2026-86923An information disclosure issue was addressed with improved privacy controls.Apple macOS
- CVE-2026-113943An out-of-bounds write issue was addressed with improved bounds checking.Apple macOS
- CVE-2026-113914An authorization issue was addressed with improved state management.Apple iOS and iPadOS
- CVE-2026-112647An access issue was addressed with additional sandbox restrictions.Apple macOS
- CVE-2026-84498The issue was addressed with improved memory handling.Apple macOS
- CVE-2026-64789This issue was addressed with improved validation of file attributes.Apple macOS
- CVE-2026-112684This issue was addressed through improved state management.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-112692This issue was addressed with additional entitlement checks.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2026-112446This issue was addressed with additional entitlement checks.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-113938An out-of-bounds read was addressed with improved bounds checking.Apple macOS
- CVE-2026-113939An out-of-bounds write issue was addressed with improved bounds checking.Apple macOS
- CVE-2026-112447An authorization issue was addressed with improved state management.Apple macOS
- CVE-2026-112693A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-112685An authorization issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-112646An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple visionOS
- CVE-2026-113903A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-112611An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS
- CVE-2026-113915A race condition was addressed with additional validation.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-112596An integer overflow was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-112627An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-113935An out-of-bounds read was addressed with improved bounds checking.Apple macOS
- CVE-2026-112559An authorization issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-112666A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +3
- CVE-2026-112518An issue with signature validation was addressed with improved checks.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-112563An out-of-bounds write issue was addressed with improved bounds checking.Apple macOS · Apple tvOS +1
- CVE-2026-112471A buffer overflow was addressed with improved bounds checking.Apple macOS
- CVE-2026-112488A buffer overflow issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-112522An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS
- CVE-2026-112467This issue was addressed with improved checks.Apple macOS
- CVE-2026-112575The issue was addressed with improved handling of secure input state.Apple macOS
- CVE-2026-113936An out-of-bounds read was addressed with improved bounds checking.Apple macOS
- CVE-2026-112624This issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-112673A type confusion issue was addressed with improved state handling.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-84496An out-of-bounds write issue was addressed with improved bounds checking.Apple macOS
- CVE-2026-112665An information disclosure issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-112632An uninitialized memory issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-112425An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-112560An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-112537This issue was addressed with improved data protection.Apple macOS
- CVE-2026-112608An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-65397An authorization issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-112599A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-112576A memory integrity issue was addressed with improved handling of copy-on-write pages.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-112628This issue was addressed with improved data access restriction.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-112501A race condition was addressed with improved state handling.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-112444This issue was addressed with improved checks.Apple macOS
- CVE-2026-112556A race condition was addressed with additional validation.Apple macOS
- CVE-2026-112413An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-112686A race condition was addressed with improved locking.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-112669A race condition was addressed with improved state handling.Apple Safari · Apple iOS and iPadOS +3
- CVE-2026-112540An integer overflow was addressed with improved input validation.Apple macOS
- CVE-2026-112429An out-of-bounds read was addressed with improved bounds checking.Apple macOS
- CVE-2026-86937A logic issue was addressed with improved state management.Apple macOS
- CVE-2026-112612A path handling issue was addressed with improved validation.Apple iOS and iPadOS
- CVE-2026-112491An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-112604An out-of-bounds read was addressed with improved bounds checking.Apple macOS
- CVE-2026-112468An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-112653A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-86920An authorization issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-113940An out-of-bounds read was addressed with improved bounds checking.Apple macOS
- CVE-2026-112652A logic issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-113901A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-112428A logic issue was addressed with improved checks.Apple macOS
- CVE-2026-112701An authorization issue was addressed with improved state management.Apple iOS and iPadOS
- CVE-2026-84634A race condition was addressed with additional validation.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-112516A use-after-free issue was addressed with improved memory management.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-112687This issue was addressed by removing the vulnerable code.Apple iOS and iPadOS · Apple tvOS
- CVE-2026-112557The issue was addressed with improved checks.Apple macOS
- CVE-2026-112691An out-of-bounds write issue was addressed with improved input validation.Apple iOS and iPadOS · Apple visionOS +1
- CVE-2026-112500A logic issue was addressed with improved restrictions.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-112629An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-112432A logging issue was addressed with improved data redaction.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-112577A privacy issue was addressed by moving sensitive data.Apple macOS
- CVE-2026-112609This issue was addressed with improved checks.Apple iOS and iPadOS
- CVE-2026-112561An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-112633An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS
- CVE-2026-86941A file quarantine bypass was addressed with additional checks.Apple macOS
- CVE-2026-84614A logic issue was addressed with improved checks.Apple iOS and iPadOS
- CVE-2026-112672The issue was addressed with improved checks.Apple macOS
- CVE-2026-113937An out-of-bounds read was addressed with improved bounds checking.Apple macOS
- CVE-2026-113896A race condition was addressed with additional validation.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-112442A race condition was addressed with additional validation.Apple macOS
- CVE-2026-112550A type confusion issue was addressed with improved memory handling.Apple macOS
- CVE-2026-112415An out-of-bounds write was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-112680An out-of-bounds read was addressed with improved bounds checking.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-112511A path handling issue was addressed with improved logic.Apple macOS
- CVE-2026-112706A permissions issue was addressed with additional restrictions.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2026-86931A privacy issue was addressed with improved memory management.Apple macOS
- CVE-2026-112614An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS
- CVE-2026-113906A null pointer dereference was addressed with improved validation.Apple iOS and iPadOS
- CVE-2026-86989An authorization issue was addressed with improved state management.Apple iOS and iPadOS
- CVE-2026-86966This issue was addressed with improved handling of symlinks.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-113910A memory initialization issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-86970An out-of-bounds read was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-112481An out-of-bounds read was addressed with improved bounds checking.Apple macOS
- CVE-2026-84594A logic issue was addressed with improved state management.Apple iOS and iPadOS
- CVE-2026-84605An authorization issue was addressed with improved state management.Apple iOS and iPadOS
- CVE-2026-112675This issue was addressed with additional entitlement checks.Apple macOS
- CVE-2026-112634An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-112423An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-112566A null pointer dereference was addressed with improved validation.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-86985This issue was addressed with improved input validation.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-65368A logic issue was addressed with improved validation.Apple macOS
- CVE-2026-112618An access issue was addressed with improved access restrictions.Apple iOS and iPadOS · Apple visionOS
- CVE-2026-112462A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2026-112658This issue was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS
- CVE-2026-112571A memory initialization issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-86880This issue was addressed with additional entitlement checks.Apple iOS and iPadOS
- CVE-2026-112475An out-of-bounds read was addressed with improved bounds checking.Apple macOS
- CVE-2026-86984A file access issue existed with certain home folder files.Apple macOS
- CVE-2026-84595An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-86971An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-86988The issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-112479An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS
- CVE-2026-112615A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-113907A buffer overflow issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-112642An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-113950An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-112707A privacy issue was addressed by moving sensitive data to a protected location.Apple iOS and iPadOS
- CVE-2026-112455An authorization issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-112547A type confusion issue was addressed with improved checks.Apple iOS and iPadOS
- CVE-2026-112681This issue was addressed with additional entitlement checks.Apple iOS and iPadOS
- CVE-2026-112551An authorization issue was addressed with improved state management.Apple macOS
- CVE-2026-112414A stack overflow was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-112678A permissions issue was addressed with additional restrictions.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-84599The issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-112506A permissions issue was addressed with improved validation.Apple macOS
- CVE-2026-116579Autobahn Python: permessage-brotli inflates a whole frame before maxMessagePayloadSize is checked (incomplete fix of GHSA-hxp9-w8x3-p566)crossbario autobahn-python · autobahn
- CVE-2026-116578Tornado: Open redirect in RedirectHandler via protocol-relative URLstornadoweb tornado · tornado
- CVE-2026-116577Tornado: Quadratic CPU usage when parsing HTTP headers with line foldingtornadoweb tornado · tornado
- CVE-2026-116502turboderp-org ExLlamaV2 GPTQ Index q_matrix.cu make_sequential out-of-bounds writeturboderp-org ExLlamaV2
- CVE-2026-116575Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)mem0ai mem0 · mem0ai
- CVE-2026-116671Infinite loop in Xpdf due to missing validation in JPEG 2000 decoderXpdf
- CVE-2026-116482subhajitkhan online-clinic-management-system patientregistration.php cross site scriptingsubhajitkhan online-clinic-management-system
- CVE-2026-70382Stored Cross-Site Scripting in Web InterfaceWolfVision Cynap Pro, Cynap Core Pro, Cynap Receiver, Cy… +2
- CVE-2026-65630Timing side-channel in pure-Erlang X25519 scalar multiplication leaks the private key in josepotatosalad jose · jose
- CVE-2026-65632ECDSA signature length is not validated in jose, allowing signature malleabilitypotatosalad jose · jose
- CVE-2026-65631erlang-jose RSA JWK parsing attempts to factor an attacker-controlled modulus, enabling CPU-exhaustion denial of servicepotatosalad jose · jose
- CVE-2026-65628Infinite recursion (CPU denial-of-service) in JOSE.JWK.shared_secret/2 on mismatched key typespotatosalad jose · jose
- CVE-2026-65627Decompression bomb via unbounded zlib:inflate in jose_jwe_zip:uncompress/2potatosalad jose · jose
- CVE-2026-57184Asterisk: Out-of-Bounds Read in Q.931 Information Element Parser (H.323 Addon)asterisk · certified-asterisk
- CVE-2026-65626Bleichenbacher padding oracle in RSAES-PKCS1-v1_5 decryption in josepotatosalad jose · jose
- CVE-2026-65625Attacker-controlled AES-GCM authentication tag length allows tag forgery in josepotatosalad jose · jose
- CVE-2026-70381Unauthorized Access to Internal Web ResourcesWolfVision Cynap Pro, Cynap Core Pro, Cynap Receiver, Cy… +2
- CVE-2026-57193Asterisk: LDAP Filter Injection in res_config_ldap via SIP Username (Unauthenticated Information Disclosure)asterisk · certified-asterisk
- CVE-2026-70380Resource Exhaustion in MICE ServiceWolfVision Cynap Pro, Cynap Core Pro, Cynap Pure, Cynap… +2
- CVE-2026-116479a2aproject a2a-java JSON-RPC Error getMessage information exposurea2aproject a2a-java
- CVE-2026-115533CVE-2026-115533Hugging Face LeRobot
- CVE-2026-115927Tornado: Event loop blocking and excess memory use from chunked bodies with many small chunkstornadoweb tornado · tornado
- CVE-2026-116478a2aproject a2a-go Push Notification agentexec.go CreateExecutor information exposurea2aproject a2a-go
- CVE-2026-57196Asterisk: Reflected XSS in Phone Provisioning HTTP Error Pagesasterisk · certified-asterisk
- CVE-2026-116477a2aproject a2a-dotnet Parser A2AJsonRpcProcessor.cs A2AJsonRpcProcessor.ProcessRequestAsync information exposurea2aproject a2a-dotnet
- CVE-2014-125135OctoPrint Flask Secret Key hard-coded keyOctoPrint
- CVE-2026-116476a2aproject a2a-dotnet TaskProjection TaskProjection.ApplyStatus race conditiona2aproject a2a-dotnet
- CVE-2026-116631External protocol handler (tel:) address bar spoofMozilla Firefox for iOS
- CVE-2026-116632Facetime protocol handler enabled spoofingMozilla Firefox for iOS
- CVE-2026-116471BKWLD Decoy Authorization Policy Policy.php privileges managementBKWLD Decoy
- CVE-2026-116467ggml-org llama.cpp Mirostat Sampler llama-sampler.cpp assertionggml-org llama.cpp
- CVE-2026-115804Consul vulnerable to an authorization bypass in health check registrationHashiCorp Consul
- CVE-2026-50096BUG-000187164 - ArcGIS Server has a security vulnerability.Esri ArcGIS Server
- CVE-2026-50095BUG-000187165 - ArcGIS Server has a security vulnerability.Esri ArcGIS Server
- CVE-2026-33522BUG-000182936 - ArcGIS Server has a security vulnerability.Esri ArcGIS Server
- CVE-2026-33520BUG-000185167 - ArcGIS Server has a security vulnerability.Esri ArcGIS Server
- CVE-2026-116463FastStone Image Viewer Box-Average Downsampler FUN_0062d96c out-of-boundsFastStone Image Viewer
- CVE-2026-115923Backstage catalog rules can be bypassed for URL locations using encoded path segmentsbackstage · @backstage/plugin-catalog-backend
- CVE-2026-116461Omega Solution Restro POS sale-invoice logic errorOmega Solution Restro POS
- CVE-2026-115922ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIsonnx
- CVE-2026-116408WordPress Gallery PhotoBlocks plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerabilityWP Chill Gallery PhotoBlocks
- CVE-2026-111404WordPress Photo Reviews for WooCommerce plugin <= 1.2.31 - Race Condition vulnerabilityVillaTheme Photo Reviews for WooCommerce
- CVE-2026-115921ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required Attributeonnx
- CVE-2026-112839WordPress Customer Coupons for WooCommerce plugin <= 1.3.14 - Broken Access Control vulnerabilityVillaTheme Customer Coupons for WooCommerce
- CVE-2026-115966WordPress Typing Text – Give your texts many typing effects plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerabilitybPlugins Typing Text – Give your texts many typing effects
- CVE-2026-116400WordPress Button Block plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerabilitybPlugins Button Block
- CVE-2026-116398WordPress Content Slider Block plugin <= 3.2.1 - Cross Site Scripting (XSS) vulnerabilitybPlugins Content Slider Block
- CVE-2026-115920ONNX: Out-of-bounds read in ConvTranspose shape inference via undersized weight rankonnx
- CVE-2026-115919ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check)onnx
- CVE-2026-115918vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargsvllm-project vllm · vllm
- CVE-2026-115917vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP servervllm-project vllm · vllm
- CVE-2026-81509nforwardauth: Unvalidated r parameter allows post-authentication open redirectnosduco nforwardauth
- CVE-2026-115916vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)vllm-project vllm · vllm
- CVE-2026-116385Bdtask Garage 24 Garage Management Software Profile edit_profile cross site scriptingBdtask Garage 24 Garage Management Software
- CVE-2026-115914vLLM DeepSeek-OCR image processing vulnerable to denial of servicevllm-project vllm · vllm
- CVE-2026-72757Routinator HTTP server becomes unavailable with many unclosed connectionsNLnet Labs Routinator
- CVE-2026-72755Routinator stores TA certificate in cache without validationNLnet Labs Routinator
- CVE-2026-72752Routinator exits when requesting the output repeatedlyNLnet Labs Routinator
- CVE-2026-116384Bdtask Garage 24 Garage Management Software Backend improper authorizationBdtask Garage 24 Garage Management Software
- CVE-2026-115913vLLM: Phi-4 multimodal audio encoder materializes and retains full attention matrices: a single max-length audio OOM-crashes the vLLM enginevllm-project vllm · vllm
- CVE-2026-115911vLLM: DoS via unbounded chat_template Jinja2 rendering exhausts the renderer thread poolvllm-project vllm · vllm
- CVE-2026-116395WordPress LightBox Block plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerabilitybPlugins LightBox Block
- CVE-2013-10077OctoPrint API Key settings.py getSettings information disclosureOctoPrint
- CVE-2026-115598WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerabilityThimPress LearnPress
- CVE-2026-115910Python Social Auth: OpenID Connect nonce is not bound to the browser session, so a stolen authorization code logs the attacker in as the…python-social-auth social-core · social-auth-core
- CVE-2026-114710WordPress Gallery PhotoBlocks plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerabilityWP Chill Gallery PhotoBlocks
- CVE-2026-115597WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerabilityThimPress LearnPress
- CVE-2026-116388WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerabilityTMS Amelia
- CVE-2026-116396WordPress Amelia plugin <= 2.4.12 - Cross Site Scripting (XSS) vulnerabilityTMS Amelia
- CVE-2026-116403WordPress Easy Digital Downloads plugin <= 3.7.1 - Race Condition vulnerabilityAwesomemotive Easy Digital Downloads
- CVE-2026-115906zip: AES Entry HMAC Authentication Bypass on Premature EOFzip-rs zip2 · zip
- CVE-2026-116371Akuvox Akubela HyPanel PS51 login improper authenticationAkuvox Akubela HyPanel PS51
- CVE-2026-71455Cleartext storage of sensitive information in memory vulnerability in Johnson Controls Kantech Entrapass allows Retrieve Embedded…Johnson Controls Kantech Entrapass
- CVE-2026-116596CVE-2026-116596Pyrus Sync
- CVE-2026-1163702K Games Sid Meier's Civilization VI Lua sandbox loadstring type confusion2K Games Sid Meier's Civilization VI
- CVE-2026-82390Cross-session AES key confusion in the Espressif ESP32 hardware crypto driverzephyrproject zephyr
- CVE-2026-82389Bluetooth Classic HFP AG wipes an object still linked in the SDP request list on connect failure, causing a NULL dereferencezephyrproject zephyr
- CVE-2026-82388Use of a released HFP HF object after a failed RFCOMM connect in the Bluetooth Classic hostzephyrproject zephyr
- CVE-2026-19742IPv6 stable and temporary interface identifiers derived from a non-cryptographic PRNG secret keyzephyrproject zephyr
- CVE-2026-81039Bluetooth Host connection reservation leak when multiple connectable advertising sets share an identityzephyrproject zephyr
- CVE-2026-116369Sunwood-ai-labs github-kanban-mcp-server issue-handlers.ts handleListIssues os command injectionSunwood-ai-labs github-kanban-mcp-server
- CVE-2026-116394WordPress WpEvently plugin <= 5.7.9 - Content Injection vulnerabilityMagepeople WpEvently
- CVE-2026-93846Team admin can escalate a team member's permissions via the team member roles endpointMattermost
- CVE-2026-115680Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow DHCPv6 Option-Walk Over-Reads and Unintended Data RetransmissionKeil MDK-Middleware
- CVE-2026-115679Arm Keil MDK-Middleware 8.3.0 may allow out-of-bounds reads and writes to the FTP Server RX BufferKeil MDK-Middleware
- CVE-2026-116368DeepSeek Harness Browser Auth browser-auth.ts improper authorizationDeepSeek Harness
- CVE-2026-115678Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow pre-authentication out-of-bounds read in SNMP processingKeil MDK-Middleware
- CVE-2026-116367DeepSeek Harness sandbox.ts createContextDeepSeek Harness
- CVE-2026-116544Open5GS 2.6.1 through 2.8.0 Out-of-Bounds Read via parse_scheme_outputopen5gs
- CVE-2026-116542Netty netty-tcnative before 2.0.84.Final SNI Hostname Spoofing via Modified UTF-8 Decodingnetty-tcnative · netty-tcnative-boringssl-static
- CVE-2026-116538HtmlSanitizer before 9.2.1039 XSS via SanitizeDom Body and HTML Attributesmganss HtmlSanitizer
- CVE-2026-99098dm-integrity: fix buffer overflow in inline mode with large tag sizeLinux
- CVE-2026-99097tee: shm: reject zero-sized allocations in tee_dyn_shm_alloc_helper()Linux
- CVE-2026-99096io_uring/register: don't exempt disabled rings from task restrictionsLinux
- CVE-2026-99095drm/vc4: drain the hangcheck timer and works on V3D unbindLinux
- CVE-2026-99093mm: don't schedule deferred kernel page table freeing while bootingLinux
- CVE-2026-99092riscv: patch: fix handling of bpf-jit execmem addressesLinux
- CVE-2026-99091Bluetooth: MGMT: Fix status of pending commands flushed on power offLinux
- CVE-2026-99090drm/amdgpu: serialize vblank counter reads against GPU resetLinux
- CVE-2026-99089ASoC: samsung: i2s: enable op_clk in probe to balance runtime PMLinux
- CVE-2026-99088net: openvswitch: validate transport header presence in set_ipv6_addrLinux
- CVE-2026-77062Clickjacking in boneIOboneIO
- CVE-2026-94386Apache Camel: Camel-OAuth Cross-Scope Token Reuse via an Under-Keyed JVM-Global Client Credentials Token CacheApache Software Foundation Apache Camel
- CVE-2026-77061Missing Authentication for Critical Function in boneIOboneIO
- CVE-2026-77060Incorrect Permission Assignment for Critical Resource in boneIOboneIO black_debian_images
- CVE-2026-77058Cross-Site Request Forgery (CSRF) in boneIOboneIO
- CVE-2026-77057Improper Restriction of Excessive Authentication Attempts in boneIOboneIO
- CVE-2026-77054Cleartext Storage of Sensitive Information in boneIOboneIO
- CVE-2026-116340iFlytek astron-agent Console Knowledge-List Endpoint FileInfoV2Service.java FileInfoV2Service.listKnowledgeByPage authorizationiFlytek astron-agent
- CVE-2026-3322Privilege escalation via request replaying in Lobster_proLobster DATA Lobster_pro
- CVE-2026-110748Apache SIS: CWE-22: improper limitation of paths to GML, GeoTIFF, NADCON or NTv2 filesApache Software Foundation org.apache.sis:sis-metadata
- CVE-2026-92171Infinispan-operator: infinispan operator: sensitive information disclosure due pod args storeRed Hat Data Grid
- CVE-2026-116497Gssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemonRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-116339iFlytek astron-agent DDL Whitelist exec_ddl.py incomplete blacklistiFlytek astron-agent
- CVE-2026-93848Mattermost OpenID discovery endpoint request bypasses outbound connection filtering, allowing SSRF by a System AdministratorMattermost
- CVE-2026-93850Unbounded memory consumption during PDF text extractionMattermost
- CVE-2026-93849Mattermost allows authenticated users to trigger excessive memory allocation via crafted msgpack binary WebSocket framesMattermost
- CVE-2026-110733Apache SIS: SQL injection via unvalidated ORDER BY sort expression in the SQL feature storeApache Software Foundation Apache SIS
- CVE-2026-93847Improper post type validation on scheduled post endpointsMattermost
- CVE-2026-116284Kameleo Local API user-info information disclosureKameleo
- CVE-2026-116516Insufficient length validation when parsing Zoom chat transcriptionsMattermost
- CVE-2026-113440HTTP/1.1 and HTTP/2 redirects resend basic_auth and cookie to a different scheme or port in hackneybenoitc hackney · hackney
- CVE-2026-115700SSRF allowlist bypass via percent-encoded bracketed IPv6 or trailing-dot IP literal in hackneybenoitc hackney · hackney
- CVE-2026-112880CRLF injection in Proxy-Authorization header built from proxy_auth_fun in hackneybenoitc hackney · hackney
- CVE-2026-116283Kameleo Local API profiles information disclosureKameleo
- CVE-2026-111590SSRF in Harbor webhook delivery allows ProjectAdmin to reach internal servicesHarbor
- CVE-2026-110314WebSocket frames keep reaching the WebSock after a server-initiated close in Banditmtrudel bandit · bandit
- CVE-2026-114216Chunk extensions accept bare LF and CR, enabling request smuggling in Banditmtrudel bandit · bandit
- CVE-2026-116282Kameleo Cookie Controller w.cs CookieController.ListCookies information disclosureKameleo
- CVE-2026-116487NXP MCUXpresso SDK USB Middleware before 2.13.0 RNDIS Out-of-Bounds ReadNXP mcuxsdk-middleware-usb
- CVE-2026-116486Objenesis before 3.6 Type Confusion via Class Name Instantiator Cacheeasymock objenesis
- CVE-2026-116217RosarioSIS before 12.9.2 Reflected XSS via menu_id in MenuReports.phpfrancoisjacquet rosariosis
- CVE-2026-116216MacCMS v10 through 2026.1000.4056 Comment Impersonation via user_id Mass Assignmentmaccmspro maccms10 · magicblack maccms10
- CVE-2026-116215MacCMS v10 through 2026.1000.4056 Race Condition via Card Redemptionmaccmspro maccms10 · magicblack maccms10
- CVE-2026-116213Webasyst Framework through 4.4.0 Arbitrary File Read via waArchiveTar SymlinksWebasyst Framework
- CVE-2026-116212Webasyst Framework through 4.4.0 Stored XSS via Photos Album URLWebasyst Framework
- CVE-2026-116281Kameleo Profile Controller t.cs ListProfiles information disclosureKameleo
- CVE-2026-107157Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt FrameworkQt
- CVE-2026-115196An Open Redirect vulnerability exists in the public form submission endpoint (/form/submit) of Mautic.mautic/core
- CVE-2026-115195A broken access control vulnerability exists in the Mautic Stats API (/api/stats/{table}).mautic/core
- CVE-2026-115194A path traversal vulnerability exists in the Mautic Asset API.mautic/core
- CVE-2026-116280Kameleo Proxy Validation f.cs InternalController.TestProxy server-side request forgeryKameleo
- CVE-2026-116275AllenAI AllenNLP Registrable Configuration Machinery registrable.py Registrable.resolve_class_name code injectionAllenAI AllenNLP
- CVE-2026-116274JIZHICMS Front-end Order OrderController.php pay improper authorizationJIZHICMS
- CVE-2026-115720Frappe Builder before 1.36.1 SSRF Guard Bypass via HTTP Redirectfrappe builder
- CVE-2026-116263HaschekSolutions PictShare File Upload core.php architect race conditionHaschekSolutions PictShare
- RUSTSEC-2026-0412Arbitrary code execution when rerunning tests from a portable recordingcargo-nextest
- RUSTSEC-2026-0413Use-after-free of caller-owned server name in client connection constructorsrustls-ffi
- CVE-2026-105947Arbitrary File Read in Innotim Software's Logsign SIEMInnotim Software, Telecommunications, and Consulting Co. Lo…
- CVE-2026-116262libimobiledevice Web Inspector webinspector.c webinspector_receive_with_timeout heap-based overflowlibimobiledevice
- CVE-2026-115717Frappe Builder before 1.36.1 SSRF via convert_to_webpfrappe builder
- CVE-2026-115718Frappe Builder 1.33.0 before 1.36.0 Missing Authorization via improve_promptfrappe builder
- CVE-2026-96432Null pointer dereference vulnerability in QNetworkAccessManager impacts Qtqt
- CVE-2026-116261libimobiledevice AFC File afc.c afc_file_open out-of-boundslibimobiledevice
- CVE-2026-116260libimobiledevice AFC Service afc.c service_receive double freelibimobiledevice
- CVE-2026-116259libimobiledevice Device Info afc.c afc_get_device_info_key memory corruptionlibimobiledevice
- CVE-2026-116258libimobiledevice AFC afc.c heap-based overflowlibimobiledevice
- CVE-2026-89209A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.4), Mendix SAML (Mendix 11 compatible) (All…Siemens Mendix SAML
- CVE-2026-114708WordPress JetSmartFilters plugin <= 3.8.6.1 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetSmartFilters
- CVE-2026-115595WordPress Contact Form by Supsystic plugin <= 1.10.7 - Broken Access Control vulnerabilityContact Form by Supsystic
- CVE-2026-115959WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerabilityWPExperts APIExperts Square for WooCommerce
- CVE-2026-115960WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerabilityWPExperts APIExperts Square for WooCommerce
- CVE-2026-115955WordPress Advanced Post Block - Post Grid for WordPress block editor plugin <= 2.5.1 - Cross Site Scripting (XSS) vulnerabilitybPlugins Advanced Post Block - Post Grid for WordPress bloc…
- CVE-2026-115956WordPress Panorama Viewer – 360 Degree Image + Video Viewer plugin <= 1.8.3 - Cross Site Scripting (XSS) vulnerabilitybPlugins Panorama Viewer – 360 Degree Image + Video Viewer
- CVE-2026-115961WordPress B Slider plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerabilitybPlugins B Slider
- CVE-2026-116257BillaBear Installation InstallController.php processInstall missing authenticationBillaBear
- CVE-2026-114707WordPress JetElements For Elementor plugin <= 2.9.2.5 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetElements For Elementor
- CVE-2026-115594WordPress Media LIbrary Assistant plugin <= 3.42 - Sensitive Data Exposure vulnerabilityDavid Lingren Media LIbrary Assistant
- CVE-2026-115953WordPress Geo Mashup plugin <= 1.13.22 - Cross Site Scripting (XSS) vulnerabilityDylan Kuhn Geo Mashup
- CVE-2026-115954WordPress Geo Mashup plugin <= 1.13.22 - Broken Access Control vulnerabilityDylan Kuhn Geo Mashup
- CVE-2026-115950WordPress Better Post & Filter Widgets for Elementor plugin <= 1.9.1 - Cross Site Scripting (XSS) vulnerabilityWP Smart Widgets Better Post & Filter Widgets for Elementor
- CVE-2026-115951WordPress Lazy Load for Videos plugin <= 2.18.11 - Cross Site Scripting (XSS) vulnerabilityKevin Weber Lazy Load for Videos
- CVE-2026-116256geesondog RhaPHP Mp Module Media Proxy Show.php image server-side request forgerygeesondog RhaPHP
- CVE-2026-114709WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerabilityIgor Funa Ad Inserter
- CVE-2026-115949WordPress Better Post & Filter Widgets for Elementor plugin <= 1.9.1 - Broken Access Control vulnerabilityWP Smart Widgets Better Post & Filter Widgets for Elementor
- CVE-2026-115614WordPress Booking and Rental Manager plugin <= 2.8.2 - Broken Access Control vulnerabilityMagepeople Booking and Rental Manager
- CVE-2026-97255WordPress Royal Elementor Addons plugin <= 1.7.1069 - Insecure Direct Object References (IDOR) vulnerabilityWProyal Royal Elementor Addons
- CVE-2026-97254WordPress Royal Elementor Addons plugin <= 1.7.1069 - Cross Site Scripting (XSS) vulnerabilityWProyal Royal Elementor Addons
- CVE-2026-97295WordPress Media LIbrary Assistant plugin <= 3.42 - Cross Site Request Forgery (CSRF) vulnerabilityDavid Lingren Media LIbrary Assistant
- CVE-2026-112865WordPress Royal Elementor Addons plugin <= 1.7.1069 - Cross Site Scripting (XSS) vulnerabilityWProyal Royal Elementor Addons
- CVE-2026-116255PGYER codefever URI Sanitizer doc.php _detail path traversalPGYER codefever
- CVE-2026-110377WordPress Bopo – WooCommerce Product Bundle Builder plugin <= 1.2.3 - Broken Access Control vulnerabilityVillaTheme Bopo – WooCommerce Product Bundle Builder
- CVE-2026-115602WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.8.0.1 - Cross Site Scripting (XSS) vulnerabilityLiquid Web / StellarWP Gutenberg Blocks by Kadence Blocks
- CVE-2026-115613WordPress Image Gallery block – Create and display photo gallery/photo album. plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerabilitybPlugins Image Gallery block – Create and display photo gal…
- CVE-2026-115958WordPress WP Discussion Board plugin <= 2.6.0 - Broken Access Control vulnerabilityWP Discussion Board
- CVE-2026-4316Reflected Cross-Site Scripting in software IsMyGym by Zuinq StudioZuinq Studio IsMyGym
- CVE-2026-116254rathena FluxCP PayPal IPN PaymentNotifyRequest.php verifyiprange origin validationrathena FluxCP
- CVE-2026-112250Cleartext Storage of Windows Service Account Password in BRAIN2 Setup Log FilesBizerba SE & Co. KG BRAIN2
- CVE-2026-116253DedeCMS Advertisement Rendering ad_js.php _RunMagicQuotes code injectionDedeCMS
- CVE-2026-103377Reflected cross-site scripting in the video library of the Regional Parliament of Castile-La ManchaVideo library of the Regional Parliament of Castile-La Manc…
- CVE-2026-113438Pleasanter provided fails to properly verify passwords in LDAP authentication when processing specially crafted requests under certain confiImplem Pleasanter
- CVE-2026-82946Null Pointer Dereference in Mailbox Error HandlingRT-Labs AB SOEM
- CVE-2026-82945Memory Corruption via FMMU Configuration Table OverflowRT-Labs AB SOEM
- CVE-2026-95628Apache Camel: Camel-Docling Custom CLI Argument Path Validation Does Not Reject Absolute Paths (Incomplete Fix of CVE-2026-40047)Apache Software Foundation org.apache.camel:camel-docling
- CVE-2026-110376WordPress DEPART plugin <= 1.0.10 - Broken Access Control vulnerabilityVillaTheme DEPART
- CVE-2026-112828WordPress AI Engine plugin <= 3.8.6 - Broken Access Control vulnerabilityMeow Apps AI Engine
- CVE-2026-95629Apache Camel: Camel-Docling Unvalidated Output Path Header Enables Writing Conversion Output to an Arbitrary DirectoryApache Software Foundation org.apache.camel:camel-docling
- CVE-2026-95663Apache Camel: Camel-Keycloak Security Policy Accepts Expired Access Tokens Because Cached Token Introspection Results Are Not Bounded by…Apache Software Foundation org.apache.camel:camel-keycloak
- CVE-2026-82943Out-of-Bounds Read via Unchecked Length ValuesRT-Labs AB SOEM
- CVE-2026-95664Apache Camel: Camel-AWS2-S3 Producer Evaluates Untrusted S3 Object Keys From the CamelAwsS3Key Header as Simple ExpressionsApache Software Foundation Apache Camel
- CVE-2026-101259Apache Camel: Camel-CoAP Information Disclosure via Unmuted Consumer ExceptionsApache Software Foundation org.apache.camel:camel-coap
- CVE-2026-115425Multiple cross-site scripting (XSS) in OPNsenseOPNsense firewall
- CVE-2026-116230Ndemic Creations Plague Inc Evolved Workshop Scenario Loader deserializationNdemic Creations Plague Inc Evolved
- CVE-2026-116229ffxiv-teamcraft FFXIV Teamcraft Renderer-Process IPC Bridge preload.ts clipboard.readText cross site scriptingffxiv-teamcraft FFXIV Teamcraft
- CVE-2026-103300Eurobank WooCommerce Payment Gateway <= 2.1.1 - Unauthenticated Order Payment Forgery via Unverified CallbackEurobank WooCommerce Payment Gateway
- CVE-2026-111974GiveWP < 4.19.0.1 - Unauthenticated Donation Amount Restriction Bypass via CurrencyGiveWP
- CVE-2026-116228777genius agent-teams-ai Local HTTP Service HttpServer.ts doStart missing authentication777genius agent-teams-ai
- CVE-2026-116227Edimax BR-6208AC Virtual Server cross site scriptingEdimax BR-6208AC
- CVE-2026-116224fr0tt benotes Bookmark Metadata Endpoint PostController.php getUrlInfo server-side request forgeryfr0tt benotes
- CVE-2026-116223icret EasyImage del.php privileges managementicret EasyImage
- CVE-2026-103299nexi Alpha Bank for WooCommerce <= 2.2.0 - Unauthenticated Payment Confirmation Forgery via Empty Shared SecretPayment Gateway
- CVE-2026-103319OPay Payment Gateway for WooCommerce <= 2.5.5 - Unauthenticated Payment Confirmation Forgery via Empty Default Secret KeyOPay Payment Gateway for WooCommerce
- CVE-2026-103381Mintpay <= 2.2.3 - Unauthenticated Order Payment Completion and Cancellation via Callback ForgeryMintpay for WooCommerce
- CVE-2026-103306iKhokha Payment Gateway < 3.0.4 - Unauthenticated Order Payment Forgery via CallbackOnline Payments with iK Pay Gateway
- CVE-2026-103298CCAvenue Payment Gateway for WooCommerce <= 3.1 - Unauthenticated Order Payment Completion via Webhook ForgeryCCAvenue Payment Gateway for WooCommerce
- CVE-2026-116124GNOME libgsf OLE2 gsf-infile-msole.c ole_info_read_metabat heap-based overflowGNOME libgsf
- CVE-2026-116123NocoDB signup validatePassword excessive authenticationNocoDB
- CVE-2026-116122NocoDB Sign-in Endpoint AuthService.validateUser information disclosureNocoDB
- CVE-2026-116121NocoDB Registration users.service.ts race conditionNocoDB
- CVE-2026-116120NocoDB PublicApiLimiterGuard signup UserRefreshToken.deleteAllUserToken allocation of resourcesNocoDB
- CVE-2026-116119NocoDB Password-Reset Flow users.service.ts race conditionNocoDB
- CVE-2026-116118Z.ai Zcode Sed Command Filter os command injectionZ.ai Zcode
- CVE-2026-116117halo-dev halo View Name Resolver DefaultViewNameResolver.java path traversalhalo-dev halo
- CVE-2026-116115Yoosee GM8135S Camera WiFi Configuration wpa_supplicantX.conf initializationYoosee GM8135S Camera
- CVE-2026-116114Yoosee GM8135S Camera Live UDP H.264 Video Stream npc cleartext transmissionYoosee GM8135S Camera
- CVE-2026-116113GouGuOA Api.php chunkUpload unrestricted uploadGouGuOA
- CVE-2026-116112HashenUdara edoc-doctor-appointment-system add-new.php sql injectionHashenUdara edoc-doctor-appointment-system
- CVE-2026-1161112K Games Civilization V Lua Sandbox loadstring type confusion2K Games Civilization V
- CVE-2026-116110GiantappMan LiveWallPaper SignalR Hub UploadFile missing authenticationGiantappMan LiveWallPaper
- CVE-2026-116109continuedev Continue MCP Server Transport ConfigHandler.ts MCPManagerSingleton.setConnections os command injectioncontinuedev Continue
- CVE-2026-116108openbq-org OpenBB Local API Server api_settings.py access controlopenbq-org OpenBB
- CVE-2026-116107Datafeedr Product Sets Plugin AJAX Handlers ajax.php dfrps_ajax_delete_saved_search authorizationDatafeedr Product Sets Plugin
- CVE-2026-116106HeyCyan App FileProvider access controlHeyCyan App
- CVE-2026-116105HeyCyan App Network Security Configuration AndroidManifest.xml cleartext transmissionHeyCyan App
- CVE-2026-116104Sony Neural Network Libraries NNP Converter utils.py func_set_nnabla_version_decorate code injectionSony Neural Network Libraries
- CVE-2026-116103Sony Neural Network Libraries Encode Param encode_decode_param.py load_param_in_txt code injectionSony Neural Network Libraries
- CVE-2026-116102QuantGeekDev docker-mcp docker_executor.py _build_windows_command os command injectionQuantGeekDev docker-mcp
- CVE-2026-116101itsourcecode Online Cake Ordering System deletetransac.php sql injectionitsourcecode Online Cake Ordering System
- CVE-2026-116100gougucms User Level Level.php add cross site scriptinggougucms
- CVE-2026-104592libosmocore through 1.14.1 contains an out-of-bounds read in the CBSP WRITE-REPLACE decoder in src/gsm/cbsp.c.
- CVE-2026-106676qiujie mall-server 0.0.1-SNAPSHOT contains an integer overflow in CartServiceImpl that allows an authenticated user to wrap a cart…
- CVE-2026-107080OpenJPEG 2.4.0 through 2.5.4, and git master through commit 8314119b, contains an out-of-bounds read and write in…