CVEs published October 28, 2026
636 CVEs were published on October 28, 2026: 41 critical, 239 high. 1 is now in CISA KEV.
- Published
- 636
- Critical
- 41
- High
- 239
- Medium
- 241
- Low
- 21
- Unrated
- 94
- Now in CISA KEV
- 1
- Fix available
- 392
Most affected products
- Linux
- 117
- Dell PowerProtect Data Domain
- 23
- Jenkins Project Jenkins
- 15
- n8n-io n8n
- 15
- DALIBO PostgreSQL Anonymizer
- 12
- Alpine iLX-F511
- 11
- Dell PowerProtect Data Domain Management Center
- 11
- Acronis Cyber Protect
- 10
- labstack echo · github.com/labstack/echo/v5 +1
- 10
- MIME-tools
- 10
Critical 41
- CVE-2026-118579D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoorD-Link DIR-505
- CVE-2026-61567AVideo-Encoder: unauthenticated command execution through streamer login trustWWBN AVideo-Encoder
- CVE-2026-61564AVideo-Encoder: unauthenticated installer PHP code injectionWWBN AVideo-Encoder
- CVE-2026-118690Signal K Server before 2.33.0 Missing Authentication via /skServer/ziplogssignalk-server
- CVE-2026-117574Ai-gateway-payload-processing: ai-gateway-payload-processing: tenant/credential selection from client-controlled url path with no…Red Hat OpenShift AI
- CVE-2026-63190FearlessCMS: Unauthenticated debug scripts expose filesystem operations and XSSfearlessgeekmedia FearlessCMS
- CVE-2026-118264Echo: Rejected WebSocket upgrades can bypass Echo route-level access controlslabstack echo · github.com/labstack/echo/v4 +1
- CVE-2026-116531HTTP::Body versions before 1.23_01 for Perl lose track of chunk boundaries in chunked request bodies when a read ends inside a chunkHTTP-Body
- CVE-2026-116135HTTP::Body versions before 1.23_01 for Perl drop mixed-case percent escapes from urlencoded form fields instead of decoding themHTTP-Body
- CVE-2026-111496Apache Kafka: Kafka Streams StreamThread hang from integer overflow in stream-time punctuationApache Software Foundation org.apache.kafka:kafka-streams
- CVE-2026-111115Apache Kafka: Broker OutOfMemoryError via tagged-field allocation amplification in flexible protocol request parsingApache Software Foundation org.apache.kafka:kafka
- CVE-2026-111108Apache Kafka: Broker OutOfMemoryError via array allocation amplification in code-generated protocol readersApache Software Foundation org.apache.kafka:kafka
- CVE-2026-110985Apache Kafka: Broker silently skips JWT signature verification for SASL/OAUTHBEARER when the JWKS endpoint URL is not configuredApache Software Foundation org.apache.kafka:kafka
- CVE-2026-103409Session Smart Router: An attacker obtains administrative privileges when an unauthenticated internal endpoint is accessedJuniper Networks Session Smart Router
- CVE-2026-103406Session Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management.Juniper Networks Session Smart Conductor
- CVE-2026-44179XWiki Pro Macros: excerpt-include title and content injection executes codexwikisas xwiki-pro-macros · com.xwiki.pro:xwiki-pro-macros
- CVE-2026-115968WordPress Ultimate Member plugin <= 2.13.1 - PHP Object Injection vulnerabilityUltimate Member
- CVE-2026-105420Path Traversal in Wing WFTP Server leading to Remote Code ExecutionWing Soft Technology Wing FTP Server
- CVE-2026-111411WordPress FunnelKit Automations plugin <= 3.8.5.2 - SQL Injection vulnerabilityAman FunnelKit Automations
- CVE-2026-115607WordPress DXP ToolKit plugin <= 2.0.1 - SQL Injection vulnerabilityCrowd Favorite DXP ToolKit
- CVE-2026-115904Topluyo Desktop for Linux has an OS Command Injection issuetopluyo App
- CVE-2026-67074HCL BigFix AEX is affected by multiple security vulnerabilities.HCL Software BigFix AEX
- CVE-2026-114278Unauthenticated Command Injection via kubeconfig Username in che-machine-execEclipse Foundation Eclipse Che
- CVE-2026-99154scsi: libiscsi: Reject a negative task index from parse_pdu_ittLinux
- CVE-2026-99153scsi: libiscsi: Validate the ITT reflected in a Reject PDULinux
Show all 41 entriesShow fewer entries
- CVE-2026-103792Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1Dell PowerProtect Data Domain Management Center
- CVE-2026-103799Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…Dell PowerProtect Data Domain Management Center
- CVE-2026-112197Missing Authentication for Critical Function in Tactis' NoviGest Desktop AppTactis NoviGest Desktop App
- CVE-2026-103780Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-86384Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-14571SQL injection (SQLi) in the user authentication module of Futurum SoftwareFuturum Software User Authentication Module
- CVE-2026-86397Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…Dell PowerProtect Data Domain
- CVE-2026-86400Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…Dell PowerProtect Data Domain
- CVE-2026-90717Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…Dell PowerProtect Data Domain Management Center
- CVE-2026-109218Contact Manager <= 9.1.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename Blacklist Bypasskleor Contact Manager
- CVE-2026-103688Checkout Files Upload for WooCommerce < 2.4.0 - Unauthenticated Arbitrary File UploadCheckout Files Upload for WooCommerce
- CVE-2026-104383Code injection in EagleCloud Aquila on-premises versionEagleCloud Aquila
- CVE-2026-84999Pie Register Premium <= 3.8.4.0 - Unauthenticated Arbitrary File Upload via piereg_file_upload AJAX HandlerPie Register Premium
- CVE-2026-118375llama.cpp b8841 before b11865 Stack-based Buffer Overflow via ggml-rpc RDMA rdma_recv()ggml-org llama.cpp
- CVE-2026-106013Jupiter X Core <= 4.61.0 - Unauthenticated Authentication Bypass via Twitter/X Social Login oauth_verifier Parameterartbees Jupiter X Core
- CVE-2026-110879jackson-databind: PolymorphicTypeValidator bypass via generic type arguments and array element types allows arbitrary class instantiation…com.fasterxml.jackson.core:jackson-databind · FasterXML too…
High 239
- CVE-2026-85749MailWatch: IDOR lets any authenticated user release or delete another tenant's quarantined mailMailWatch
- CVE-2026-61569AVideo-Encoder: pre-authentication streamer-login SQL injectionWWBN AVideo-Encoder
- CVE-2026-54453OpenCATS: Authenticated Remote Code Execution via SettingsUI (manageProfessional)OpenCATS
- CVE-2026-61571AVideo-Encoder: missing authentication on control and status endpointsWWBN AVideo-Encoder
- CVE-2026-116641The DB Tools trust certificates issued by recoverable eMudhra intermediate CAsMongoDB Database Tools
- CVE-2026-61572AVideo-Encoder: unauthenticated full-response server-side request forgeryWWBN AVideo-Encoder
- CVE-2026-54455OpenCATS: Authenticated SQL injection in activity DataGrid date filtersOpenCATS
- CVE-2026-93851Path traversal in Mattermost Agents plugin mention reminder allows plugin replacement via crafted postMattermost
- CVE-2026-61546AnkiMCP: DNS rebinding reaches unauthenticated local AnkiMCP HTTP toolsankimcp anki-mcp-server-addon
- CVE-2026-118804Bricks Broken Access Control via query_result EndpointBricks Builder
- CVE-2026-118803Bricks Theme Unauthenticated Dynamic Data Tag Injection via query_resultBricks Theme
- CVE-2026-118755Volmarg Personal Management System through 2.1.0 OS Command Injection via Storage Folder PathVolmarg personal-management-system
- CVE-2026-118753FreeImage through 3.18.0 and danoli3 fork before 3.19.25 Heap Buffer Overflow via GIF_PLAYBACK Compositingdanoli3 FreeImage · FreeImage
- CVE-2026-118752FreeImage through 3.18.0 and danoli3 fork before 3.19.22 Heap Buffer Overflow via IFF/LBM PBM RLE Decoderdanoli3 FreeImage · FreeImage
- CVE-2026-118694python-markdown2 through 2.5.5 Denial of Service via Unclosed Inline Link Destinationstrentm python-markdown2
- CVE-2026-118692CherryTree through 1.7.2 OS Command Injection via Custom Web Link Actiongiuspen cherrytree
- CVE-2026-118689OvenMediaEngine through 0.21.0 OVT Relay DoS via Oversized payload_lengthOvenMediaLabs OvenMediaEngine
- CVE-2026-118682ClashMi through 1.0.32.1801 Disabled TLS Certificate Validation Enables Update MITMKaringX clashmi
- CVE-2026-118669OAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different clientoauthlib
- CVE-2026-118668LangGraph JavaScript custom authentication may permit cross-user Store accesslangchain-ai langgraph-api · langgraph-api
- CVE-2026-118665GraphQL Tools: Per-request connection parameters persist into later users' WebSocket authenticationsardatan graphql-tools · @graphql-tools executor-legacy-ws +1
- CVE-2026-118664decode-uri-component: Denial of service via quadratic replacement of percent-encoded runsSamVerschueren decode-uri-component · decode-uri-component
- CVE-2026-118660Happy DOM: SSRF via iframe and link stylesheet when parsing untrusted HTMLcapricorn86 happy-dom · happy-dom
- CVE-2026-118659@happy-dom/server-renderer: ServerRendererServer Target-Origin Bypass SSRF / Open Proxycapricorn86 happy-dom
- CVE-2026-76418Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of…Cisco Secure Firewall Adaptive Security Appliance (ASA) Sof…
Show all 239 entriesShow fewer entries
- CVE-2026-13451Kserve: kserve: server-side request forgery via malicious storageuriRed Hat OpenShift AI
- GHSA-4MFG-R38W-W8FGmcp-sanitizer: URL sanitizer allows localhost/IPv6 loopback SSRF bypass via explicit port or bracketed IPv6mcp-sanitizer
- GHSA-7W82-6F9J-V9JPmcp-sanitizer: File Path Sanitizer Permits Arbitrary User-Home Absolute Pathsmcp-sanitizer
- CVE-2026-61542Gearboy advisory / Gearsystem body: Unauthenticated network exposure of MCP HTTP toolsdrhelius Gearboy
- CVE-2026-118650Echo: middleware.Static: `%2F`-encoded path bypasses route/group middleware guarding a statically-served pathlabstack echo · github.com/labstack/echo/v5 +1
- CVE-2026-78674Remote Code Execution via BPMN System REST APIs in Multiple WSO2 Products Permits Arbitrary Command ExecutionWSO2 Enterprise Integrator · WSO2 Business Process Server
- CVE-2026-6647Incomplete OAuth Token Revocation via Case Mismatch in WSO2 Identity Server Allows Continued Access After Lifecycle EventsWSO2 Identity Server · WSO2 Carbon OAuth
- CVE-2025-14260Server Side Request Forgery in Multiple WSO2 Products Allows Access to Internal and External ResourcesWSO2 API Manager · WSO2 Identity Server as Key Manager +5
- CVE-2026-109411Samba: access control bypass via vfs_ceph_rgw case-insensitive openSamba · Red Hat Enterprise Linux +1
- CVE-2026-118262Echo: WebSocket proxy can retain connections and handlers after client disconnectlabstack echo · github.com/labstack/echo/v4 +1
- CVE-2026-118688Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 Sandbox Escape via Symlink Renamebytecodealliance wasmtime · wasmtime-wasi
- CVE-2026-118687Coder before 2.29.21, 2.34.12, 2.35.9, 2.36.7, and 2.37.4 Missing Audience Validation in GCP Instance-Identity Authenticationcoder
- CVE-2026-118686EspoCRM before 9.3.11 and 10.0.8 Unauthenticated Denial of Service via Password-Redaction Regexespocrm
- CVE-2026-118684MONAI before 1.6.1 Missing Integrity Verification via check_hash in DownloadsProject-MONAI MONAI
- CVE-2026-118683MONAI 1.2.0 before 1.6.1 Code Execution via bundle configs/logging.confProject-MONAI MONAI
- CVE-2026-118678n8n before 2.41.4 and 2.42.1 Prototype Pollution DoS via Workflow History Compactionn8n-io n8n
- CVE-2026-118649n8n before 2.43.5 and 2.44.1 Authorization Bypass via Crafted Workflow ID in Data Tablesn8n-io n8n
- CVE-2026-118648n8n before 1.123.85, 2.43.5, and 2.44.1 Stored XSS via Webhook Responses Missing Sandbox Policyn8n-io n8n
- CVE-2026-118646n8n before 1.123.85, 2.43.5, and 2.44.1 ReDoS via Read/Write Files Noden8n-io n8n
- CVE-2026-118645n8n before 1.123.85, 2.43.5, and 2.44.1 Filter Injection via Quick Base Node Where Parametern8n-io n8n
- CVE-2026-118261Echo: Decompress permits unbounded gzip expansion in v4labstack echo · github.com/labstack/echo/v4
- CVE-2026-118260Echo: BodyDump captures request and response bodies without size limits in v4labstack echo · github.com/labstack/echo/v4
- CVE-2026-118633A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as root in Sophos UTM (all versions)…Sophos SG UTM
- CVE-2026-118257Vue I18n: escapeParameter does not prevent XSS through srcdoc in translation messagesintlify vue-i18n · vue-i18n +5
- CVE-2026-118255Highcharts Grid: javascript: URL in credits.href runs script on clickhighcharts · @highcharts dashboards +3
- CVE-2026-118254Highcharts Grid: pagination language options are parsed as HTMLhighcharts · @highcharts grid-lite +3
- CVE-2026-118253Highcharts Dashboards: fullscreen labels are parsed as HTMLhighcharts · @highcharts dashboards +1
- CVE-2026-118252Highcharts Dashboards: sidebar component labels are parsed as HTMLhighcharts · @highcharts dashboards +1
- CVE-2026-118251Highcharts: javascript: URL in credits.href runs script on clickhighcharts
- CVE-2026-118250Highcharts: dotted series.keys paths write to Object.prototypehighcharts
- CVE-2026-118249Highcharts: series column construction writes to Object.prototypehighcharts
- CVE-2026-118246Highcharts Core: `breadcrumbs.style` keys become SVG event-handler attributeshighcharts
- CVE-2026-118245Highcharts Dashboards: `chartConstructor` is an unchecked lookup into the Highcharts namespacehighcharts · @highcharts dashboards +1
- CVE-2026-118244Highcharts Core: AST `DOMParser` fallback assigns unsanitized markup to `innerHTML` during printhighcharts
- CVE-2026-116273MIME::Parser versions before 5.521 for Perl set no limit on the number of message parts by default, allowing memory exhaustionMIME-tools
- CVE-2026-116271MIME::Parser::FileUnder versions before 5.521 for Perl reuse a pre-created output directory and follow symlinks in it, letting local users…MIME-tools
- CVE-2026-116270MIME::Words versions before 5.521 for Perl allow memory exhaustion via repeated "=?" sequences in decode_mimewordsMIME-tools
- CVE-2026-116268MIME::Field::ParamVal versions before 5.521 for Perl allow CPU exhaustion via unclosed comments in header parametersMIME-tools
- CVE-2026-116267MIME::Parser versions before 5.521 for Perl allow memory exhaustion via indented error messages from a truncated, deeply nested messageMIME-tools
- CVE-2026-118242Highcharts Grid: custom icon definition objects written with raw `setAttribute` on `<path>`highcharts · @highcharts grid-lite +3
- CVE-2026-84725Openjdk-orb: incomplete fix for cve-2026-15560,unauthed class loading via iiop in eapRed Hat JBoss Enterprise Application Platform
- CVE-2026-116797Highcharts Grid Pro: cell-renderer `attributes` map written with raw `setAttribute`highcharts · @highcharts grid-pro +3
- CVE-2026-116796Highcharts Core: `javascript:` URL in an `xlink:href` attribute survives text filtering and reaches exported chartshighcharts
- CVE-2026-117501HTTP::Body versions before 1.24_01 for Perl allow memory exhaustion via unbounded buffering of chunked request bodiesHTTP-Body
- CVE-2026-117500HTTP::Body versions before 1.24_01 for Perl allow CPU exhaustion via regex backtracking on the filename of a multipart uploadHTTP-Body
- CVE-2026-116285HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodiesHTTP-Body
- CVE-2026-116134HTTP::Body versions before 1.23_01 for Perl allow memory exhaustion via an unbounded multipart part header blockHTTP-Body
- CVE-2026-116133HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic rescanning of a multipart body with a missing or malformed…HTTP-Body
- CVE-2026-116132HTTP::Body versions before 1.23_01 for Perl leave the temporary file of an incomplete multipart upload on diskHTTP-Body
- CVE-2026-116795RE2JS: Quadratic-time denial of service in re2js lookbehind matchingle0pard re2js · re2js
- CVE-2026-116794russh: Agent server never calls `Agent::confirm`, so keys added with the confirm constraint (`ssh-add -c`) sign without confirmationEugeny russh · russh
- CVE-2026-82961Unvalidated pin index in GPIO syscall handlers allows out-of-bounds kernel writes from user modezephyrproject zephyr
- CVE-2026-118619Ultralytics Google Drive Download Path Traversal Remote Code Execution VulnerabilityUltralytics
- CVE-2026-118618Ultralytics parse_model Code Injection Remote Code Execution VulnerabilityUltralytics
- CVE-2026-118617Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution VulnerabilityUltralytics
- CVE-2026-118616Ultralytics parse_model Code Injection Remote Code Execution VulnerabilityUltralytics
- CVE-2026-118615Ultralytics torch_safe_load Command Injection Remote Code Execution VulnerabilityUltralytics
- CVE-2026-118614Ultralytics check_det_dataset Code Injection Remote Code Execution VulnerabilityUltralytics
- CVE-2026-118613Ultralytics torch_load Deserialization of Untrusted Data Remote Code Execution VulnerabilityUltralytics
- CVE-2026-118610Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution VulnerabilityAlpine iLX-F511
- CVE-2026-103506SSO settings authorization bypassGrafana Enterprise · Grafana OSS
- CVE-2026-118606Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution VulnerabilityAlpine iLX-F511
- CVE-2026-118605Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Execution VulnerabilityAlpine iLX-F511
- CVE-2026-118603Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityAlpine iLX-F511
- CVE-2026-118602Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation VulnerabilityAlpine iLX-F511
- CVE-2026-88967Azure Monitor access token disclosure via SSRFGrafana Enterprise · Grafana OSS
- CVE-2026-100105Alerting contact point authorization bypass via schema downgradeGrafana Enterprise · Grafana OSS
- CVE-2026-117624Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not consistently enforce the restriction on deserializing objects of types marked…Jenkins Project Jenkins
- CVE-2026-117620Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers with Overall/Read permission to trigger warnings in the "Manage Old…Jenkins Project Jenkins
- CVE-2026-117619Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows requests authenticated using HTTP Basic authentication, including with an API…Jenkins Project Jenkins
- CVE-2026-117618In Jenkins 2.587 and earlier, LTS 2.580.1 and earlier, the HTTP endpoint for creating the first user account does not check whether the…Jenkins Project Jenkins
- CVE-2026-117617Jenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic links in the path of an extracted file only before creating its…Jenkins Project Jenkins
- CVE-2026-117616Jenkins 2.587 and earlier, LTS 2.580.1 and earlier provides an HTTP endpoint that loads agents by name without validating the name…Jenkins Project Jenkins
- CVE-2026-117614Jenkins 2.587 and earlier, LTS 2.580.1 and earlier converts the launch commands in older agent configurations into launchers provided by…Jenkins Project Jenkins
- CVE-2026-117612Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not apply its deserialization filter to classes referenced by the `resolves-to`…Jenkins Project Jenkins
- CVE-2026-116593Apache Kafka: Kafka Connect configuration provider values exposed via validation REST API endpointApache Software Foundation org.apache.kafka:connect-runtime
- CVE-2026-115644Apache Kafka: Connect Admin REST API Authentication Bypass via Unapplied REST ExtensionsApache Software Foundation org.apache.kafka:connect-runtime
- CVE-2026-111551Apache Kafka: Denial of service in Kafka Streams and client deserializers via unbounded memory allocationApache Software Foundation org.apache.kafka:kafka-streams ·…
- CVE-2026-106079Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG…Juniper Networks Session Smart Router · Juniper Networks Se…
- CVE-2026-103411Session Smart Router: A malicious DHCP server causes information disclosure and a service crash during DHCP option parsingJuniper Networks Session Smart Router
- CVE-2026-103410Session Smart Router: Integer overflow causes denial of service during TLS certificate inspectionJuniper Networks Session Smart Router
- CVE-2026-103408Session Smart Router: An attacker-controlled input causes remote code execution when parsing DHCP optionsJuniper Networks Session Smart Router
- CVE-2026-103407Session Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI…Juniper Networks Session Smart Router · Juniper Networks Se…
- CVE-2026-103403Session Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting…Juniper Networks Session Smart Router · Juniper Networks Se…
- CVE-2026-103402Session Smart Router and Session Smart Conductor: Lack of integrity verification in cache files causes arbitrary code execution and…Juniper Networks Session Smart Router · Juniper Networks Se…
- CVE-2026-103401Session Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as rootJuniper Networks Session Smart Router · Juniper Networks Se…
- CVE-2026-93523X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Writex.org xorg-x11-server · x.org xwayland
- CVE-2026-118510Laravel MongoDB `whereDoesntHave` misses deny records for numeric string IDsLaravel MongoDB
- CVE-2026-93522X.Org Server Glamor CopyArea Heap Buffer Overflowx.org xorg-x11-server · x.org xwayland
- CVE-2026-116778FOG: Authenticated low-privileged API user can modify Storage Nodes and reach root command executionfogproject
- CVE-2026-116776USB Test: Heap-based Buffer Overflow in getSectorSize via untrusted DISK_GEOMETRY.BytesPerSector leads to RCE/DoSn-romanovich usb-test
- CVE-2026-56828Shopper: read-only team permissions allow administrator creation and permission escalationshopperlabs shopper · shopper/framework
- CVE-2026-47235SimulationCraft: Heap-Based Buffer Overflow / Out-of-Bounds Write in SimulationCraft's gem_id Arraysimulationcraft simc
- CVE-2026-93521X.Org Server RandR ChangeProviderProperty Heap Buffer Overflowx.org xorg-x11-server · x.org xwayland
- CVE-2026-59979YosemiteCrew: Missing organization authorization on service and PMS library/template routesYosemiteCrew Yosemite-Crew
- CVE-2026-112357GFI KerioConnect KOFF < 10.0.9p2 Privilege EscalationGFI USA GFI KerioConnect
- CVE-2026-93520X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Writex.org xorg-x11-server · x.org xwayland
- CVE-2026-93519X.Org Server XFixes Pointer Barrier Event List Buffer Overflowx.org xorg-x11-server · x.orgg xwayland
- CVE-2026-93518X.Org Server XKB ResizeKeyType Numeric Truncationx.org xorg-x11-server · x.org xwayland
- CVE-2026-115603WordPress Advanced Ads – Tracking plugin < 4.0.0 - SQL Injection vulnerabilityAdvanced Ads – Tracking
- CVE-2026-116390WordPress Filter Everything — WordPress & WooCommerce Filters plugin <= 1.9.7 - PHP Object Injection vulnerabilitystepasyuk Filter Everything — WordPress & WooComme…
- CVE-2026-116389WordPress Phoenix Media Rename plugin <= 3.13.5 - PHP Object Injection vulnerabilitycrossi72 Phoenix Media Rename
- CVE-2026-115590WordPress Dokan plugin <= 5.3.1 - PHP Object Injection vulnerabilityweDevs Dokan
- CVE-2026-116078HTTP/2 request bodies made of 1-byte DATA frames amplify memory use in Banditmtrudel bandit · bandit
- CVE-2026-52729Xibo: IDOR (Broken Object-Level Authorization) on PUT/DELETE /action/{id} Allows Arbitrary Layout Action Modification and Deletionxibosignage xibo-cms
- CVE-2026-93517X.Org Server GLX RenderLarge Heap Buffer Overflowx.orgg xorg-x11-server · x.org xwayland
- CVE-2026-59185identrail: Cross-tenant GitHub installation binding without ownership verificationidentrail
- CVE-2026-59179OpenHop: Path Traversal in Flow ID File Operationsnaorsabag openhop · @openhop/server
- CVE-2026-59177ESPHome Device Builder allows unauthenticated dashboard access via the HA add-on ingress site bound to all interfacesesphome device-builder · esphome-device-builder
- CVE-2026-59176Functype: MCP set_functype_version Package Alias RCE via Unsanitized pnpm install + Dynamic Importjordanburke functype · functype-mcp-server
- CVE-2026-59172Joker linter executed project-local .jokerd/linter.* files during lintingcandid82 joker
- CVE-2026-59164NORA missing cross-user token-management authorizationgetnora-io nora
- CVE-2026-116391WordPress GS Logo Slider plugin <= 3.8.9 - PHP Object Injection vulnerabilityGS Plugins GS Logo Slider
- CVE-2026-116392WordPress Accordion plugin <= 2.3.25 - PHP Object Injection vulnerabilityPickPlugins Accordion
- CVE-2026-116393WordPress Optima Express + MarketBoost IDX Plugin plugin <= 8.7.8 - Broken Access Control vulnerabilityiHomefinder Optima Express
- CVE-2026-111850WordPress BuddyPress plugin <= 14.5.2 - SQL Injection vulnerabilityBuddyPress
- CVE-2026-115612WordPress SliceWP plugin <= 1.2.13 - Cross Site Scripting (XSS) vulnerabilityiova.mihai SliceWP
- CVE-2026-115591WordPress Contact Form by Supsystic plugin <= 1.10.5 - Sensitive Data Exposure vulnerabilityContact Form by Supsystic
- CVE-2026-115593WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.24 - Cross Site Scripting (XSS) vulnerabilityUnlimited Elements For Elementor
- CVE-2026-115596WordPress eCommerce Product Catalog plugin <= 3.6.4 - Cross Site Scripting (XSS) vulnerabilityimpleCode eCommerce Product Catalog
- CVE-2026-115606WordPress DXP ToolKit plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerabilityCrowd Favorite DXP ToolKit
- CVE-2026-115609WordPress GetPaid plugin <= 2.8.62 - Cross Site Scripting (XSS) vulnerabilityStiofan GetPaid
- CVE-2026-118037Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadSpreadProcessing and RadSpreadStreamProcessingProgress Software Telerik Document Processing Libraries
- CVE-2026-118036Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadPdfProcessing and AI Document Summarization and Question…Progress Software Telerik Document Processing Libraries
- CVE-2026-118035Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadWordsProcessingProgress Software Telerik Document Processing Libraries
- CVE-2026-118040Improper Signature and Certificate Validation in Telerik Document Processing Libraries RadPdfProcessingProgress Software Telerik Document Processing Libraries
- CVE-2026-118039XML External Entity Reference in Telerik Document Processing Libraries SVG Image ProcessingProgress Software Telerik Document Processing Libraries
- CVE-2026-118038Path Traversal in Telerik Document Processing Libraries AI Agent ToolsProgress Software Telerik Document Processing Libraries
- CVE-2026-67073HCL BigFix AEX is affected by multiple security vulnerabilities.HCL Software BigFix AEX
- CVE-2026-102790Joomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12icagenda.com iCagenda extension for Joomla
- CVE-2026-118485Axel Download Accelerator Path Traversal via URL Filename DecodingAxel Download Accelerator Axel
- CVE-2026-118477KaliFast Project Management Platform ei_git_repo_url OS Command InjectionEISGE Kalifast
- CVE-2026-6064Norton, Avast, and AVG local privilege escalation via link following in Data ShredderGen Digital Norton Antivirus · Gen Digital Avast Antivir… +1
- CVE-2026-99216Drivers: hv: Don't reset VMBus connection state on error/exit pathsLinux
- CVE-2026-99213vsock: treat TCP_CLOSING as once-establishedLinux
- CVE-2026-99212net/rds: don't let the rdma_cm destroy an id RDS still owns on route failureLinux
- CVE-2026-99203pipe: preserve existing fasync readers on writer setup failureLinux
- CVE-2026-99185firewire: core: fix race condition in split transaction handlingLinux
- CVE-2026-99180unicode: free the map after a grace periodLinux
- CVE-2026-99177KVM: SEV: Fix page dirtying in sev_gmem_post_populate()Linux
- CVE-2026-99173eventfs: Free the eventfs_inode after an rcu grace period tooLinux
- CVE-2026-99170namespace: a mount that copy_tree() leaves out can't take over a lockLinux
- CVE-2026-99167net/sched: fix use-after-free in __tcf_action_put()Linux
- CVE-2026-99164spi: imx: fix slab corruption from undersized DMA bounce buffersLinux
- CVE-2026-99163tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fieldsLinux
- CVE-2026-99156scsi: st: Fix use-after-free race between st_remove() and st_open()Linux
- CVE-2026-99152scsi: libiscsi: Validate the task named by a management responseLinux
- CVE-2026-99148drm/amdgpu: keep the eviction fence until the last handle is closedLinux
- CVE-2026-99143tracing: Keep the predicate limit separate from program capacityLinux
- CVE-2026-99142tracing: Check operator stack capacity before pushingLinux
- CVE-2026-99136dm-crypt: fix a tiny race condition in crypt_dec_pendingLinux
- CVE-2026-99131xfs: fix capability check in xfsLinux
- CVE-2026-99123vsock/virtio: validate packet source for connected socketsLinux
- CVE-2026-99122vsock/vmci: validate packet source for connected socketsLinux
- CVE-2026-99117net: bridge: mcast: don't truncate the port group walk on teardownLinux
- CVE-2026-99116net: psp: do not inherit the Rx association on cloneLinux
- CVE-2026-99112net/sched: cls_flower: validate mask pointer after nla_next()Linux
- CVE-2026-99110smb: client: fix heap overflow in cifs_do_set_acl()Linux
- CVE-2026-99109smb: client: reject SetEA requests that do not fit the request bufferLinux
- CVE-2026-99107ntfs: fix incorrect MFT record pointer passed to ntfs_attr_record_resizeLinux
- CVE-2026-110541Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-110540Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…Dell PowerProtect Data Domain Management Center
- CVE-2026-103779Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-112198Improper Restriction of XML External Entity Reference in Tactis' NoviGest Desktop AppTactis NoviGest Desktop App
- CVE-2026-87102Sensitive information disclosure and manipulation due to improper token validation.Acronis Cyber Protect
- CVE-2025-30414Local privilege escalation due to improper authentication.Acronis Cyber Protect Cloud Agent · Acronis Cyber Protect
- CVE-2026-87103Sensitive information disclosure and manipulation due to improper token validation.Acronis Cyber Protect
- CVE-2026-86377Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-86378Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-86379Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1Dell PowerProtect Data Domain Management Center
- CVE-2026-86380Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-86385Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, contain an Improper Check for Dropped Privileges vulnerability.Dell PowerProtect Data Domain
- CVE-2026-86389Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-86393Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-86394Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…Dell PowerProtect Data Domain
- CVE-2026-86395Dell PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.Dell PowerProtect Data Domain Virtual Edition
- CVE-2026-86396Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…Dell PowerProtect Data Domain
- CVE-2026-86398Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…Dell PowerProtect Data Domain
- CVE-2026-86399Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…Dell PowerProtect Data Domain
- CVE-2026-92797Memberpress <= 1.14.1 - Cross-Site Request Forgery via 'user_email' ParameterMemberpress
- CVE-2026-63286Database backups are vulnerable to offline attacks.Axis Communications AB AXIS Camera Station Pro · Axis Commu…
- CVE-2026-111111Prime Slider <= 4.7.2 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Content_Guard Regex Quote-Escapebdthemes Prime Slider – Hero Slider, Carousel, WooCommerce…
- CVE-2026-109384The Innovative Form Builder <= 1.5.1 - Authenticated (Custom+) Arbitrary File Upload via 'allowedFileExtensions' Configuration + Public…melograno The Innovative Form Builder – IvyForms
- CVE-2026-111120VikRentCar Car Rental Management System <= 1.4.8 - Cross-Site Request Forgery to Remote Code Execution via 'condtext_update_tmpl' AJAX Taske4jvikwp VikRentCar Car Rental Management System
- CVE-2026-110662MxChat <= 3.2.25 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'feedback' Parameter via mxchat_save_ratingMxChat – AI Chatbot & Content Generation for WordPress
- CVE-2026-109381Event Booking Manager for WooCommerce <= 5.7.8 - Authenticated (Shop Manager+) Privilege Escalation to 'page' Parametermagepeopleteam Event Booking Manager for WooCommerce – Sell…
- CVE-2026-111577GoSMTP < 1.2.5 - Plugin Activator+ Privilege Escalation via SMTP SettingsGoSMTP
- CVE-2026-111021Persian WooCommerce SMS 7.2.0 - 7.3.1 - Reflected XSS via 'pwsms_mobiles' Parameterافزونه پیامک ووکامرس | Persian WooCommerce SMS
- CVE-2026-105972WooCommerce Menu Cart < 3.2.1 - Unauthenticated Stored XSS via Cart Item Variation AttributeMenu Cart for WooCommerce
- CVE-2026-15323Product Designer for WooCommerce WordPress | Lumise <= 2.1.2 - Unauthenticated Arbitrary File Read via 'design.stages[*].image' Parameter in Cart JSON UploadKing-Theme Product Designer for WooCommerce WordPress | Lum…
- CVE-2026-104384Insufficiently protected credentials in EagleCloud Aquila on-premises versionEagleCloud Aquila
- CVE-2026-1928Rank Math SEO <= 1.0.276 - Authenticated (Contributor+) PHP Object Injection to Remote Code Executionrankmath Rank Math SEO – AI SEO Tools to Dominate SEO Ranki…
- CVE-2026-116613Animated Text Block <= 1.2.6 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'id' Shortcode Attributebplugins Animated Text Block – Add Typing and Looping Text…
- CVE-2026-111255affiliate-toolkit <= 3.9.2 - Authenticated (Contributor+) Arbitrary File Upload via 'atkp_product_largeimageurl' Parametercservit affiliate-toolkit – Multi-Network Affiliate & Amazo…
- CVE-2026-111314affiliate-toolkit <= 3.9.2 - Unauthenticated Stored Cross-Site Scripting via 'atkp_product_producturl' Parametercservit affiliate-toolkit – Multi-Network Affiliate & Amazo…
- CVE-2026-97019AMP for WP <= 1.1.17 - Unauthenticated Stored Cross-Site Scripting via 'headline-*' Shortcode Attributemohammed_kaludi AMP for WP – Accelerated Mobile Pages
- CVE-2026-109999AI Marketing Expert <= 1.2.8 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'name' Parameternalam-1 AI Marketing Expert — AI Email Marketing, AI Conten…
- CVE-2026-118378Tabularis before 0.28.0 SQL Injection via MCP describe_table table_nameTabularisDB tabularis
- CVE-2026-118377mews/pos through 2.0.0 Missing Hash Verification in 3D Pay and 3D Host Callbacksmewebstudio pos
- CVE-2026-118374LibreSSL ocspcheck through 4.4.0 Memory Exhaustion via Unbounded OCSP HTTP ResponseOpenBSD LibreSSL
- CVE-2026-118370libexpat through 2.9.0 Integer Overflow in storeAtts via attIndex and nPrefixeslibexpat
- CVE-2026-117610libexpat through 2.9.0 NULL Pointer Dereference via External Entity Subparserlibexpat
- CVE-2026-117609rtl_433 through 25.12 Stack-Based Buffer Overflow via Proflame 2 Decodermerbanan rtl_433
- CVE-2026-117607Xerte Online Toolkits through 3.15.5 RCE via Language Pack Importthexerteproject xerteonlinetoolkits
- CVE-2015-20129CrushFTP before 7.3.0 Cross-Site Request Forgery via /WebInterface/function/CrushFTP
- CVE-2014-125138C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, Cart Engine through 3.0.0 Unrestricted File Upload via Image FieldsC97net qEngine CMS · C97net Kemana Directory +1
- CVE-2014-125137C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, Cart Engine through 3.0.0 Local File Inclusion via admin/task.phpC97net qEngine CMS · C97net Kemana Directory +1
- CVE-2014-125136C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, Cart Engine through 3.0.0 Database Backup Exposure via /admin/backupC97net qEngine CMS · C97net Kemana Directory +1
- CVE-2013-20008Linksys WAG200G through 1.01.06 Admin Password Change Without Current PasswordLinksys WAG200G
- CVE-2013-20007Linksys WAG200G through 1.01.06 OS Command Injection via timer_interval in setup.cgiLinksys WAG200G
- CVE-2026-110747jackson-dataformat-protobuf: integer overflow in ProtobufParser._readStringKey() allows OutOfMemoryError from an 8-byte payloadcom.fasterxml.jackson.dataformat:jackson-dataformat-protobu…
- CVE-2026-104895jackson-dataformat-smile: unbounded eager byte[] allocation for raw binary in the async parser allows OutOfMemoryError denial of servicecom.fasterxml.jackson.dataformat:jackson-dataformat-smile ·…
- CVE-2026-106971An integer overflow in the MessagePack\BufferUnpacker component of rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a…
- CVE-2026-106972Uncontrolled recursion in MessagePack\BufferUnpacker::unpack() in rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a…
Medium, low and unrated 356
- CVE-2026-118589nschloe meshio VTK Reader _vtk_42.py memory allocationnschloe meshio
- CVE-2026-118586dfm feedfinder2 feedfinder2.py find_feeds server-side request forgerydfm feedfinder2
- CVE-2026-118585configuroweb inventariobasico Add Product addlist.php cross site scriptingconfiguroweb inventariobasico
- CVE-2026-86983A remote attacker may be able to terminate a process that passes attacker-controlled input to the P-384 VOPRF API without bounding its…Apple swift-crypto
- CVE-2026-118578maotoumao MusicFreeDesktop Request Forwarder information disclosuremaotoumao MusicFreeDesktop
- CVE-2026-82411Objects API: Cross-object-type authorization bypass on the object history-detail endpointmaykinmedia open-object
- CVE-2026-55561InvoicePlane: Guest user IDOR in quote approval and rejectionInvoicePlane
- CVE-2026-75520Domoticz: Missing authorization and path traversal in the udevices Lua parser handlerdomoticz
- CVE-2026-118577maotoumao MusicFreeDesktop Request Forwarder server-side request forgerymaotoumao MusicFreeDesktop
- CVE-2026-118538a2ui-project a2ui Renderer root.js Root.renderComponentTree dynamically-determined object attributesa2ui-project a2ui
- CVE-2026-61575AVideo-Encoder vulnerable to stored DOM cross-site scripting through queue titlesWWBN AVideo-Encoder
- CVE-2026-61573AVideo-Encoder: reflected cross-site scripting in the login interfaceWWBN AVideo-Encoder
- CVE-2026-118537a2ui Image Player/Video Player/Audio Player Image.js input validationa2ui
- CVE-2026-57448Blombooru: administrator image-proxy server-side request forgerymrblomblo blombooru
- CVE-2026-118757PiWeb Disable payment method / Partial payment for WooCommerce before 1.1.10.9 Missing Authorization via update_feesPI Websolution PiWeb Disable payment method / Partial payme…
- CVE-2026-118756gopass before 1.17.0 Path Traversal via fs Storage Prune and IsDirgopasspw gopass
- CVE-2026-118754Dolibarr ERP CRM before 24.0.2 Missing Authorization via public recruitment view.phpDolibarr ERP/CRM
- CVE-2026-118693CherryTree through 1.7.2 Local File Disclosure via Embedded-File Filename Pathgiuspen cherrytree
- CVE-2026-118691xianyu-auto-reply-fix through 2.0.7 Unauthenticated Message Sending via /send-messageGuDong2003 xianyu-auto-reply-fix
- CVE-2026-118667LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requestslangchain-ai langgraph · langchain-ai langgraph-sdk +2
- CVE-2026-118666GraphQL Tools: Shared legacy executor routes one subscription's results to a different callerardatan graphql-tools · @graphql-tools executor-legacy-ws +1
- CVE-2026-118663@hono/node-server: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static pathshonojs node-server · @hono/node-server
- CVE-2026-118662Vite: `server.fs.deny` bypassed with queriesvitejs vite · vite
- CVE-2026-118661Happy DOM: Cookie scope forgery: no DNS-label boundary on Domain= matching , attacker origin sets victim cookiescapricorn86 happy-dom · happy-dom
- CVE-2026-118658Echo: Arbitrary Scheme Injection in WWWRedirect/NonWWWRedirect Middlewares via X-Forwarded-Protolabstack echo · github.com/labstack/echo/v5 +1
Show all 356 entriesShow fewer entries
- CVE-2026-118657Echo: HTTPS Redirect and HSTS Bypass via Unconditional Trust of Forwarded Scheme Headerslabstack echo · github.com/labstack/echo/v5 +1
- CVE-2026-118656Echo: Open Redirect via Control-Character Prefix Defeating sanitizeURIlabstack echo · github.com/labstack/echo/v5 +1
- CVE-2026-118655Echo: Static Middleware Double-Unescape Path Traversallabstack echo · github.com/labstack/echo/v5 +1
- CVE-2026-118654Echo static file middleware route protection bypass via encoded dot-dot traversallabstack echo · github.com/labstack/echo/v5 +1
- GHSA-473Q-M89C-GHF8MySqlConnector: Account password disclosed to a man-in-the-middle in zero-configuration TLS mode (clear-text password sent before certificatMySqlConnector
- CVE-2026-54162Ember: Unneutralised terminal escape/control sequences from Caddy logs injected into the operator's TUIalexandre-daubois ember · github.com/alexandre-daubois/ember
- CVE-2026-61529Endatix: Blind second-order SSRF via anonymous form-submission file URLs (`SubmissionFileExtractor`)endatix
- CVE-2026-118653Echo: Rate Limiter Bypass via Spoofed X-Forwarded-For Header in Default Configurationlabstack echo · github.com/labstack/echo/v5 +1
- CVE-2026-118652Echo: Reflected Cross-Site Scripting (XSS) via unsanitized JSONP callback in Context.JSONP / Context.JSONPBloblabstack echo · github.com/labstack/echo/v5 +1
- CVE-2026-115415Secret masking bypass in the environment tool in Strands Agents Toolsamazon strands-agents-tools
- CVE-2026-118651Echo: Reverse Proxy Forwards Attacker-Supplied X-Real-IP to Upstream by Defaultlabstack echo · github.com/labstack/echo/v5 +1
- CVE-2026-118266Echo: CSRF Protection Bypass via MethodOverride Rewriting POST to Safe Methodlabstack echo · github.com/labstack/echo/v5 +1
- CVE-2026-3583Improper Token Revocation via OAuth2 Scope Enforcement in Multiple WSO2 Products [Disrupted Authentication Flows]WSO2 API Manager · WSO2 Traffic Manager +6
- CVE-2026-11854Cross-Site Scripting via Authentication Endpoint Error Message in Multiple WSO2 ProductsWSO2 API Manager · WSO2 API Control Plane +1
- CVE-2026-118265Echo: X-Real-IP extractor trusts the header value instead of the sending peerlabstack echo · github.com/labstack/echo/v5
- CVE-2026-118263Echo: BodyDump can discard BodyLimit overflow errors for unknown-length requestslabstack echo · github.com/labstack/echo/v5
- CVE-2026-118685ToolJet 3.20.2-lts before 3.20.242-lts Signup Bypass via SignupDisableGuardToolJet
- CVE-2026-118681go-chi chi before 5.5.0 Authentication Bypass via SupressNotFound Middlewarego-chi chi
- CVE-2026-118680SiYuan 3.8.7 through 3.8.8 Path Traversal via GLOBALROOT Aliassiyuan-note siyuan
- CVE-2026-118679n8n before 1.123.83, 2.41.4, and 2.42.1 Slack Token Exfiltration via Slack Triggern8n-io n8n
- CVE-2026-118677n8n before 2.41.4 and 2.42.1 Local Gateway Deep-Link Silent Re-pairing to Attacker Instancen8n-io n8n
- CVE-2026-118676n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypassn8n-io n8n
- CVE-2026-118675n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Guard Bypass via Execute Sub-workflown8n-io n8n
- CVE-2026-118647n8n before 1.123.85, 2.43.5, and 2.44.1 SeaTable Trigger API Token Exposure via Execution Datan8n-io n8n
- CVE-2026-118644n8n before 2.41.5 and 2.42.2 Credential Theft via Error-Workflow Context Inheritancen8n-io n8n
- CVE-2026-118643n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Exposure via Node Execution Error Datan8n-io n8n
- CVE-2026-118642n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass via Inline Sub-Workflowsn8n-io n8n
- CVE-2026-118641n8n before 1.123.85, 2.43.5, and 2.44.1 OData $filter Injection via Outlook and SharePoint Nodesn8n-io n8n
- CVE-2026-118640n8n before 1.123.85, 2.43.5, and 2.44.1 Chat Hub Authorization Bypassn8n-io n8n
- CVE-2026-118259opentelemetry-java: Quadratic CPU consumption in W3C tracestate parsingopen-telemetry opentelemetry-java · io.opentelemetry:opente…
- CVE-2026-118258i18next-http-backend: Query-parameter injection through & and = in lng when loadPath/addPath puts {{lng}} in the query stringi18next-http-backend
- CVE-2026-118256Vue I18n: `escapeParameter` does not escape named values when the same call also passes a listintlify vue-i18n · vue-i18n +4
- CVE-2026-106484Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0 allowed a local attacker to perform arbitrarGoogle chrome-devtools-mcp
- CVE-2026-118248Highcharts Dashboards: editableOptions.propertyPath writes to Object.prototypehighcharts · @highcharts dashboards
- CVE-2026-118247Highcharts Dashboards / Grid Pro: `DataTable.setCell` and column writers treat `proto` as an existing column.highcharts · @highcharts dashboards +3
- CVE-2026-116272MIME::Field::ParamVal versions before 5.521 for Perl do not flag a duplicate boundary parameter whose name contains a nested commentMIME-tools
- CVE-2026-118243Highcharts Dashboards: `proto` data table id writes sync listeners to `Object.prototype`highcharts · @highcharts/dashboards
- CVE-2026-116269MIME::Field::ParamVal versions before 5.521 for Perl turn an RFC 2231 filename with a hyphenated language tag into an empty recommended…MIME-tools
- CVE-2026-116266MIME::Head versions from 5.518 before 5.521 for Perl decode a partly encoded multipart boundary without flagging the parse as ambiguousMIME-tools
- CVE-2026-116265MIME::Field::ParamVal versions before 5.521 for Perl do not flag an ambiguous multipart boundary written as RFC 2231 continuationsMIME-tools
- CVE-2026-110183PostgreSQL Anonymizer: statistics can expose some of the original data after statistic maskingDALIBO PostgreSQL Anonymizer
- CVE-2026-110182PostgreSQL Anonymizer: anon.partial() and anon.partial_email() can reveal the whole dataDALIBO PostgreSQL Anonymizer
- CVE-2026-110181PostgreSQL Anonymizer: Function declared with SQL-standard syntax leak anonymized dataDALIBO PostgreSQL Anonymizer
- CVE-2026-116264MIME::Field::ParamVal versions before 5.521 for Perl allow one invalid Content-Type parameter to hide the parameters after it, including…MIME-tools
- CVE-2026-105620PostgreSQL Anonymizer: A masked role reads the authentic data of masked tables through a masking rule with a sub-queryDALIBO PostgreSQL Anonymizer
- CVE-2026-105619PostgreSQL Anonymizer: Masking rules of the tables are not applied through security_invoker viewsDALIBO PostgreSQL Anonymizer
- CVE-2026-105618PostgreSQL Anonymizer: Masked partitions and child tables are not masked when they are queried through their parentDALIBO PostgreSQL Anonymizer
- CVE-2026-105617PostgreSQL Anonymizer: Cached plans bypass transparent dynamic masking after a role change or a new masking ruleDALIBO PostgreSQL Anonymizer
- CVE-2026-105616PostgreSQL Anonymizer: The secret salt and shift of anon are readable by any role in pg_roles or pg_db_role_settingDALIBO PostgreSQL Anonymizer
- CVE-2026-105615PostgreSQL Anonymizer: Masked roles can read the statistics of masked columns in pg_statsDALIBO PostgreSQL Anonymizer
- CVE-2026-105614PostgreSQL Anonymizer: Unbounded image-decode memory allocation (DoS) in anon.image_blur()DALIBO PostgreSQL Anonymizer
- CVE-2026-105613PostgreSQL Anonymizer: Unbounded memory allocation (DoS) in range-based dummy functionsDALIBO PostgreSQL Anonymizer
- CVE-2026-105612PostgreSQL Anonymizer: Data-modifying CTEs bypass the read-only restriction of masked rolesDALIBO PostgreSQL Anonymizer
- CVE-2026-79656OAuth and OIDC tokens written unredacted to server logs by the Generic OAuth, Google and GitLab connectorsGrafana OSS · Grafana Enterprise
- CVE-2026-58458Don't Starve Together Memory Corruption via world_gen_dataKlei Entertainment Don't Starve Together
- CVE-2026-116131HTTP::Body versions before 1.23_01 for Perl allow memory and temporary file exhaustion via an unlimited number of form fields and…HTTP-Body
- CVE-2026-82962Out-of-bounds write in Zephyr Ethernet L2 when adding the link-layer header to a forwarded packetzephyrproject zephyr
- CVE-2026-118581NoSQL injection via mismatched BSON size prefix in raw document splice to the wire protocolMongoDB Java Driver
- CVE-2026-118611Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution VulnerabilityAlpine iLX-F511
- CVE-2026-118609Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution VulnerabilityAlpine iLX-F511
- CVE-2026-118608Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process_test Out-Of-Bounds Read Information Disclosure VulnerabilityAlpine iLX-F511
- CVE-2026-118607Alpine iLX-F511 diagapp Command Injection VulnerabilityAlpine iLX-F511
- CVE-2026-88858Server-side expression parser denial of serviceGrafana OSS · Grafana Enterprise
- CVE-2026-118604Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution VulnerabilityAlpine iLX-F511
- CVE-2026-118601Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution VulnerabilityAlpine iLX-F511
- CVE-2026-117626Jenkins 2.587 and earlier, LTS 2.580.1 and earlier improperly identifies file paths attempting path traversal in the file browser for…Jenkins Project Jenkins
- CVE-2026-117625A missing permission check in Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers with Overall/Read permission to obtain…Jenkins Project Jenkins
- CVE-2026-117623Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not escape the text shown in the tooltips of breadcrumb bar overflow menu entries…Jenkins Project Jenkins
- CVE-2026-117622Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows agents to send exceptions implementing the Stapler HttpResponse interface to the…Jenkins Project Jenkins
- CVE-2026-117621Jenkins 2.587 and earlier, LTS 2.580.1 and earlier computes on the agent the URL of the link shown in the workspace browser for each file…Jenkins Project Jenkins
- CVE-2026-117615Jenkins 2.587 and earlier, LTS 2.580.1 and earlier follows symbolic links when copying the directory of an item being renamed, allowing…Jenkins Project Jenkins
- CVE-2026-117613Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not restrict item types in collections after deserialization, allowing attackers…Jenkins Project Jenkins
- CVE-2026-114349Apache Kafka: Denial of service via unbounded memory allocation when decoding compressed record batchesApache Software Foundation org.apache.kafka:kafka_2.11 ·… +1
- CVE-2026-112375Apache Kafka: Unauthorized principal can read arbitrary broker files via IncrementalAlterConfigsApache Software Foundation org.apache.kafka:kafka
- CVE-2026-111073Apache Kafka: PushTelemetry (KIP-714) metrics payloads are decompressed without a size limit, allowing a broker out-of-memory denial of…Apache Software Foundation org.apache.kafka:kafka
- CVE-2026-110952Apache Kafka: Broker does not enforce JWT issuer and audience validation for SASL/OAUTHBEARER by defaultApache Software Foundation org.apache.kafka:kafka
- CVE-2026-83525Apache Kafka: Incorrect boolean operator in FetchSnapshot RPC handler allows authenticated network clients to crash the KRaft controller…Apache Software Foundation org.apache.kafka:kafka-raft
- CVE-2026-103405Session Smart Router and Session Smart Conductor: Unsanitized input causes HTTP response splittingJuniper Networks Session Smart Router · Juniper Networks Se…
- CVE-2026-103404Session Smart Conductor: Insecure file permissions cause unauthorized access to sensitive routing credentialsJuniper Networks Session Smart Conductor
- CVE-2026-103400Session Smart Router and Session Smart Conductor: Crafted directory names cause arbitrary filesystem unmounting during service cleanupJuniper Networks Session Smart Router · Juniper Networks Se…
- CVE-2026-103394Session Smart Router: An incomplete operator causes the use of incorrect encryption keys during security policy updates.Juniper Networks Session Smart Router
- CVE-2026-103393Session Smart Router: An attacker can cause an out-of-bounds read during VRRP packet processingJuniper Networks Session Smart Router
- CVE-2026-103392Session Smart Router: A SACK option causes out-of-bounds memory access and TCP payload corruption when TCP sequence stitching is enabledJuniper Networks Session Smart Router
- CVE-2026-93536X.Org Server GestureBuildSprite Use-After-Freex.org xorg-x11-server · x.org xwayland
- CVE-2026-103391Session Smart Router: An attacker-controlled TCP option causes an out-of-bounds write when using the TCP proxy featureJuniper Networks Session Smart Router
- CVE-2026-103390Session Smart Router and Session Smart Conductor: A malformed HTTP URI causes a service crash during HTTP application identificationJuniper Networks Session Smart Router · Juniper Networks Se…
- CVE-2026-93524X.Org Server XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Readx.org xorg-x11-server · x.org xwayland
- CVE-2026-50542Xibo: IDOR (Broken Object-Level Authorization) on GET /layout/status/{id} Allows Arbitrary Layout Metadata Disclosurexibosignage xibo-cms
- CVE-2026-118029Unverified ownership of the default Athena query result location in AWS SDK for pandasaws-sdk-pandas
- CVE-2026-50543Xibo: Missing Authorization on POST /displaygroup/criteria/{displayGroupId} Allows Arbitrary Scheduling Criteria Injection to Player Devicesxibosignage xibo-cms
- CVE-2026-50539Xibo: Missing Object-Level Authorization on /notification/export/{id} Allows Authenticated Users to Download Arbitrary Attachmentsxibosignage xibo-cms
- CVE-2026-112356GFI KerioConnect < 10.0.9p2 XSS via Link Auto-FormatterGFI USA GFI KerioConnect
- CVE-2026-67187Ninja Forms WordPress Plugin < 3.15.4 Server-Side Validation Bypass via List FieldsSaturday Drive Ninja Forms
- CVE-2026-115402OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local users to cause a denial of service (system crash) via a race condition…OpenVPN ovpn-dco-win
- CVE-2026-50541Xibo: IDOR (Broken Object-Level Authorization) on GET /dataset/export/csv/{id} Allows Arbitrary Dataset Exportxibosignage xibo-cms
- CVE-2026-59959SAIL: WebP decoder division by zero through malformed animated canvas metadataHappySeaFox sail
- CVE-2026-93516.Org Server XInput Passive Grab Use-After-Freex.org xorg-x11-server · x.org xwayland
- CVE-2026-116404WordPress Redux Framework plugin <= 4.5.16 - Broken Access Control vulnerabilityDavid Anderson Redux Framework
- CVE-2026-115957WordPress WP Discussion Board plugin <= 2.6.0 - Cross Site Scripting (XSS) vulnerabilityWP Discussion Board
- CVE-2026-55369Waline login accepts a non-string email as a match-all MongoDB querywalinejs waline · @waline/vercel
- CVE-2026-93515.Org Server Present Extension Use-After-FreeX.org xorg-x11-server · x.org xwayland
- CVE-2026-21830HCL BigFix AEX is affected by multiple security vulnerabilities.HCL Software BigFix AEX
- CVE-2026-67077HCL BigFix AEX is affected by multiple security vulnerabilities.HCL Software BigFix AEX
- CVE-2026-67079HCL BigFix AEX is affected by multiple security vulnerabilities.HCL Software BigFix AEX
- CVE-2026-67080HCL BigFix AEX is affected by multiple security vulnerabilities.HCL Software BigFix AEX
- RUSTSEC-2026-0415Unbounded memory use on large request bodiesjuniper_hyper
- RUSTSEC-2026-0416Stack overflow on deeply nested GraphQL documentsjuniper
- RUSTSEC-2026-0417Excessive CPU and memory use on crafted GraphQL documentsjuniper
- RUSTSEC-2026-0418libz-sys build script leaks environment variables in the build directorylibz-sys
- RUSTSEC-2026-0433Quadratic parsing of nested image wikilinks with `ENABLE_WIKILINKS`pulldown-cmark
- RUSTSEC-2026-0436Panic and unbounded allocation (OOM) in the CFB/OLE2 parser on malformed inputcalamine
- CVE-2026-81472Dell iDRAC Service Module (iSM) for Windows, Dell iDRAC Service Module (iSM) for Linux, and Dell iDRAC Service Module (iSM) for ESXi, versioDell iDRAC Service Module for Windows · Dell iDRAC Servi… +1
- CVE-2026-102799Joomla Extension - icagenda.com - CSV formula injection in the registrations export in iCagenda 3.5.0 to 4.0.16icagenda.com iCagenda extension for Joomla
- CVE-2026-116855WordPress My auctions allegro plugin <= 4.0.3 - Broken Access Control vulnerabilitywphocus My auctions allegro
- CVE-2026-115223Smart Popup by Supsystic < 2.0.2 - Admin+ SSTI via Popup Text BlockSmart Popup by Supsystic
- CVE-2026-110508Essential Addons for Elementor 6.7.3 - 6.8.6 - Unauthenticated Registration Approval Bypass via OTP VerificationEssential Addons for Elementor
- CVE-2026-106648Royal Elementor Addons < 1.7.1070 - Unauthenticated Arbitrary Email Recipient Injection via Form Field ID ShortcodesRoyal Elementor Addons
- CVE-2026-103330Sadad QA Payment 1.28 - Unauthenticated Arbitrary Order Payment Confirmation via Signature BypassSadad QA Payment
- CVE-2026-103313BitPay Gateway for WooCommerce <= 4.1.3 - Unauthenticated Payment Bypass via Payment Return HandlerBitPay Gateway for WooCommerce
- CVE-2026-99215power: supply: core: prevent unregistering a power supply while a callback runsLinux
- CVE-2026-99214drm/vc4: hdmi: Move packet RAM enable to PM runtimeLinux
- CVE-2026-99211netlink: reset skb headers before unicast and multicast filteringLinux
- CVE-2026-99210accel/rocket: clear rdev on device init failureLinux
- CVE-2026-99209drm/xe: skip eviction of a BO with no resourceLinux
- CVE-2026-99208drm/xe/oa: Zero OA buffer at allocationLinux
- CVE-2026-99207scsi: target: Disable interrupts while holding delayed_cmd_lockLinux
- CVE-2026-99206scsi: target: iscsi: Fix race in discovery auth updatesLinux
- CVE-2026-99205sched/core: Call wakeup_preempt() for queued tasks during class changeLinux
- CVE-2026-99204ocfs2/dlm: Protect the recovery list during debugfs readsLinux
- CVE-2026-99202scsi: libsas: Fix SMP IO deadlock during HA resumeLinux
- CVE-2026-99201netlink: avoid hashing the network namespace pointerLinux
- CVE-2026-99200net: hisilicon: hisi_femac: Move setting of netops to fix crashLinux
- CVE-2026-99199net: hisilicon: hip04_eth: Move setting of netops to fix crashLinux
- CVE-2026-99198net: ethernet: actions: Move setting of netops to fix crashLinux
- CVE-2026-99197net: mv643xx: move setting of netops to fix crashLinux
- CVE-2026-99196net: au1000: move setting of netops to fix crashLinux
- CVE-2026-99195net: ethoc: move setting of netops to fix crashLinux
- CVE-2026-99194net: ethernet: aeroflex: move setting of netops to fix crashLinux
- CVE-2026-99193net: ti: icssm-prueth: Move setting of netops to fix crashLinux
- CVE-2026-99192net: bcmgenet: unshare the skb before writing the control blockLinux
- CVE-2026-99191calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()Linux
- CVE-2026-99190gpiolib: fix memory leak in gpiod_set_array_value_complex() on error pathsLinux
- CVE-2026-99189gpio: mxc: fix race between chained IRQ handler install and probe completionLinux
- CVE-2026-99188net: stmmac: dwmac1000: clear the RGMII status interruptLinux
- CVE-2026-99187perf: Fix perf_pmu_migrate_context() leaving events behindLinux
- CVE-2026-99186x86/insn-eval: Fix shadowed segment index in get_seg_reg_override_idx()Linux
- CVE-2026-99184accel/rocket: search every core slot when a core is removedLinux
- CVE-2026-99183accel/rocket: search every core slot when looking up a schedulerLinux
- CVE-2026-99182ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH captureLinux
- CVE-2026-99181autofs: ignore notification errors from a replaced pipeLinux
- CVE-2026-99179watch_queue: Fix note pool publication race in watch_queue_set_size()Linux
- CVE-2026-99178x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI contextLinux
- CVE-2026-99176KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-EntryLinux
- CVE-2026-99175fsnotify: prevent mark additions during connector teardownLinux
- CVE-2026-99174ext4: free the sbi after a grace periodLinux
- CVE-2026-99172ipc: drop the mqueue mount with kern_unmount() on setup failureLinux
- CVE-2026-99171ntfs3: free the sbi after a grace periodLinux
- CVE-2026-99169futex: Fix mm reuse handling for FUT_OFF_MMSHAREDLinux
- CVE-2026-99168mshv_vtl: Check per-CPU register page before mmapLinux
- CVE-2026-99166net: rds: fix uninitialized trans dereference in CM event handlerLinux
- CVE-2026-99165sctp: revalidate output stream after association connect waitLinux
- CVE-2026-99162gpio: shared: fix use-after-free bug when adding shared proxiesLinux
- CVE-2026-99161i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()Linux
- CVE-2026-99160ring-buffer: Do not show buffer_meta for CPUs without a bufferLinux
- CVE-2026-99159ring-buffer: Fix the sub-buffer array base in rb_meta_subbuf_idx()Linux
- CVE-2026-99158ring-buffer: Fix false warning in ring_buffer_map_get_reader()Linux
- CVE-2026-99157scsi: bsg: Pass reply_len to bsg_setup_queue() to fit UFS ARPMB repliesLinux
- CVE-2026-99155scsi: xen/scsifront: Check for a NULL shadow entry on a backend responseLinux
- CVE-2026-99151drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functionsLinux
- CVE-2026-99150drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gprLinux
- CVE-2026-99149drm/amdgpu: fix GEM object leak on ENOMEM in userptr ioctlLinux
- CVE-2026-99147drm/exec: don't immediately add prelocked obj to array of locked objsLinux
- CVE-2026-99146drm/i915/dmc: Add sanity check for DMC load addressLinux
- CVE-2026-99145drm/xe: Don't transfer shrinker pages for pinned bos on purgeable state changeLinux
- CVE-2026-99144sched_ext: Fix use-after-free of a destroyed user DSQ by a deferred reenqueueLinux
- CVE-2026-99141tracing: Fix crash in print_graph_function_event()Linux
- CVE-2026-99140tracing: Fix hist trigger timestamps for buffered eventsLinux
- CVE-2026-99139tcp: fix use-after-free in do_tcp_getsockopt(TCP_CONGESTION)Linux
- CVE-2026-99138tcp: fix use-after-free in do_tcp_getsockopt(TCP_CC_INFO)Linux
- CVE-2026-99137cifs: don't update i_size in cifs_do_truncate without a cached handleLinux
- CVE-2026-99135dm-integrity: fix infinite loop on discard with large tag sizeLinux
- CVE-2026-99134mac802154: fix data race and NULL deref on local->assoc_devLinux
- CVE-2026-99133net/iucv: fix the recvmsg window updateLinux
- CVE-2026-99132xfs: don't hold buffer locks across sync transaction commit in xfs_sync_sb_bufLinux
- CVE-2026-99130io_uring/cancel: don't spin on local work the task can't runLinux
- CVE-2026-99129selinux: fix BPF token permission checksLinux
- CVE-2026-99128sctp: validate chunk length in the inqueue parserLinux
- CVE-2026-99127page_pool: keep frag_offset aligned for odd-sized requestsLinux
- CVE-2026-99126s390/ctcm: Prevent XID null dereferenceLinux
- CVE-2026-99125s390/pai: Handle multiple PMU stop callback invocationsLinux
- CVE-2026-99124s390/pci: Fix leak of uninitialized kernel data in SCLP reportLinux
- CVE-2026-99121ipv4: avoid divide by zero in fib_rebalanceLinux
- CVE-2026-99120KVM: x86/mmu: Cope with the SS bit being set in #NPF exit codesLinux
- CVE-2026-99119drm/amdgpu/userq: actually validate userq BOsLinux
- CVE-2026-99118drm/i915/dmc: Harden DMC firmware payload parsingLinux
- CVE-2026-99115ksmbd: fill in FileSysIdentifier in FS_POSIX_INFORMATIONLinux
- CVE-2026-99114ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATIONLinux
- CVE-2026-99113ksmbd: zero the FS_OBJECT_ID_INFORMATION buffer before filling it inLinux
- CVE-2026-99111smb: client: fix data corruption with concurrent writes and O_TRUNCLinux
- CVE-2026-99108ntfs: fix FITRIM range alignmentLinux
- CVE-2026-99106drm/amdgpu: free the userptr ranges when a CS fails after parser_bosLinux
- CVE-2026-99105sched_ext: Fix stall when a task enqueued with SCX_ENQ_LAST lands back on its CPU's local DSQLinux
- CVE-2026-99104sched_ext: Fix the bypass dispatch claim for schedulers bypassed by an ancestorLinux
- CVE-2026-99103workqueue: Fix unbound pool lifetime for pending pwqsLinux
- CVE-2026-99102ntfs: take invalidate_lock in ntfs_setattr_size()Linux
- CVE-2026-99101ntfs: move attribute payload before shrinking its recordLinux
- CVE-2026-101272Incorrect session validation for API-created shredder exportspretix
- CVE-2026-101274When pretix is used as the identity provider in a Single-Sign-On (SSO) setup for customer accounts, the system did not properly validate…pretix
- CVE-2026-101273Giftcard enumerationpretix
- CVE-2026-87879Sensitive information disclosure due to improper token validation.Acronis Cyber Protect
- CVE-2026-87878Linux binaries have executable stack attribute enabled.Acronis Cyber Protect
- CVE-2026-87100Protection mechanism failure due to missing binary hardening in Linux executables.Acronis Cyber Protect
- CVE-2026-87099Cross-site scripting (XSS) vulnerability due to improper input validation.Acronis Cyber Protect
- CVE-2026-87098Sensitive information disclosure due to improper authorization.Acronis Cyber Protect
- CVE-2026-87880Sensitive information disclosure due to missing SSL certificate verification affecting one component.Acronis Cyber Protect
- CVE-2026-87101Sensitive information disclosure due to improper token validation.Acronis Cyber Protect
- CVE-2026-87097Sensitive information disclosure due to insufficiently protected credentials.Acronis Cyber Protect
- CVE-2026-86383Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026…Dell PowerProtect Data Domain
- CVE-2026-86386Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…Dell PowerProtect Data Domain Management Center
- CVE-2026-86388Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…Dell PowerProtect Data Domain
- CVE-2026-92665Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-105457Authenticated Arbitrary Local File Read via Path Traversal in HAVELSAN's Liman MYSHAVELSAN Liman MYS
- CVE-2026-86390Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…Dell PowerProtect Data Domain
- CVE-2026-86391Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1Dell PowerProtect Data Domain Management Center
- CVE-2026-86392Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-86401Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…Dell PowerProtect Data Domain Management Center
- CVE-2026-16020Stored XSS Fazile BACAK's DefterAsist Financial Advisor PlatformFazile BACAK DefterAsist Financial Advisor Platform
- CVE-2026-90719Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…Dell PowerProtect Data Domain Management Center
- CVE-2026-90720Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-90721Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-90723Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…Dell PowerProtect Data Domain Management Center
- CVE-2026-90724Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…Dell PowerProtect Data Domain Management Center
- CVE-2026-118435Out-of-bounds write vulnerability in Samsung Open Source escargot allows Buffer Manipulation.Samsung Open Source escargot
- CVE-2026-85655Enable Media Replace <= 4.2.2 - Missing Authorization to Authenticated (Author+) Post Content Modification via Media Replacement Workflowshortpixel Enable Media Replace
- CVE-2026-101935Echo Knowledge Base <= 17.214.0 - Reflected Cross-Site Scripting via 'new_kb_config' Parameterechoplugins Echo Knowledge Base – Documentation, FAQs, Chat…
- CVE-2026-109975Cozy Blocks <= 2.2.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon.view' Block Attributecozythemes Cozy Blocks – Website Builder & Business Growth…
- CVE-2026-76005WP Inventory Manager <= 2.5.5 - Authenticated (Contributor+) SQL Injection via 'sort_order' Shortcode Attributechuck1982 WP Inventory Manager
- CVE-2026-118169Hustle <= 7.8.14.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'cta_label' Parameterwpmudev Hustle – Email Marketing, Lead Generation, Optins,…
- CVE-2026-104743Tainacan <= 1.3.0 - Authenticated (Editor+) Path Traversal to Arbitrary File Read via 'tmp_file' Parameter via Mass AssignmentTainacan
- CVE-2026-76780BeyondSEO <= 1.3.6 - Missing Authorization to Authenticated (Contributor+) Limited Privilege Escalationrankingcoach BeyondSEO – AI SEO to Improve Rankings, Listin…
- CVE-2026-110185Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More <= 1.31.0 - Unauthenticated Local File Inclusion via 'webhook' and 'body' Parametersbitpressadmin Bit Flows: AI Agent Automation & Integrations…
- CVE-2026-116750VikRentCar Car Rental Management System <= 1.4.10 - Authenticated (Contributor+) SQL Injection via 'catid' Block Attributee4jvikwp VikRentCar Car Rental Management System
- CVE-2026-109370Document Embedder <= 2.4.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via 'documentSource.doc' Block Attributebplugins Document Embedder – let visitors read files withou…
- CVE-2026-77871Post Snippets <= 4.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributessaadiqbal Post Snippets – Custom WordPress Code Snippets Cu…
- CVE-2026-107710Hustle <= 7.8.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Module Content Titlewpmudev Hustle – Email Marketing, Lead Generation, Optins,…
- CVE-2026-109988Product Addons for Woocommerce <= 3.1.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'type' Field Parameteracowebs Product Addons for Woocommerce – Product Options wi…
- CVE-2026-2839Advanced Custom Fields: Extended <= 0.9.2.7 - Missing Authorization to Unauthenticated Data Exposure via Multiple AJAX Endpointshwk-fr Advanced Custom Fields: Extended
- CVE-2026-116761CMB2 <= 2.13.4 - Unauthenticated Stored Cross-Site Scripting via Grouped WYSIWYG Field via Front-End Formjtsternberg CMB2
- CVE-2026-108366easy.jobs <= 2.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon' Block Attributewpdevteam easy.jobs – AI powered Job Listing, Job Board, Ca…
- CVE-2026-110071Mang Board <= 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' Shortcode Attributekitae-park Mang Board
- CVE-2026-111213Travelly <= 2.3.6 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Duplication via 'post' Parametermagepeopleteam Travelly – Tour & Travel Booking Manager for…
- CVE-2026-116610Clean Login <= 1.20.1 - Missing Authorization to Authenticated (Contributor+) Arbitrary Clean-Login Option Update via 'save_post' Hookhornero Clean Login
- CVE-2026-116749VikRentCar Car Rental Management System <= 1.4.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'className' Block Attributee4jvikwp VikRentCar Car Rental Management System
- CVE-2026-92098Webheadcoder Multi-Step Forms for Contact Form 7 <= 4.7 - Reflected Cross-Site Scripting via 'l10n_print_after' Parameterwebheadllc Webheadcoder Multi-Step Forms for Contact Form
- CVE-2026-109980Related Posts for WordPress <= 3.0.0 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'rp4wp_view' Parameterbarrykooij Related Posts for WordPress
- CVE-2026-104729Avada (Fusion) Builder <= 3.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tab_index' and 'empty_notice' Shortcode Attributesthemefusion Avada (Fusion) Builder
- CVE-2026-118164If-So Dynamic Content <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'repeater' Parameterifso If-So Dynamic Content – Elementor & All Page Builders…
- CVE-2026-100175Postie <= 1.9.87 - Unauthenticated Stored Cross-Site Scripting via Email Body URL Autolinkwayneallen-1 Postie
- CVE-2026-77188Waitlist Woocommerce ( Back in stock notifier ) <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'type' Shortcode Attributexootix Waitlist Woocommerce
- CVE-2026-110020Rich Showcase for Google Reviews <= 7.1.6 - Missing Authorization to Authenticated (Contributor+) Site Secret Disclosure via 'grw_auth_code' Site Secret Disclosure via grw-builder Admin Pagewidgetpack Rich Showcase for Google Reviews
- CVE-2026-109979Related Posts for WordPress <= 3.0.0 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'rp4wp_create_link' Parameterbarrykooij Related Posts for WordPress
- CVE-2026-104740If-So Dynamic Content <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'conversion' Shortcode Attributeifso If-So Dynamic Content – Elementor & All Page Builders…
- CVE-2026-111372AI ChatBot for WooCommerce <= 5.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via qcld_rag_manual_sync AJAX Actionquantumcloud AI ChatBot for WooCommerce – WoowBot
- CVE-2026-109978Cozy Blocks <= 2.2.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'productRating.iconColor' Block Attributecozythemes Cozy Blocks – Website Builder & Business Growth…
- CVE-2026-76058PayPal Brasil para WooCommerce <= 1.7.8 - Missing Authorization to Unauthenticated Payment Gateway Modification via 'bcdc_activation_update' Actionodefranca PayPal Brasil para WooCommerce
- CVE-2026-109972s2Member <= 261011 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'date_format' Shortcode Attributeclavaque s2Member – Excellent for All Kinds of Memberships,…
- CVE-2026-111068DesignSetGo <= 2.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tagName' Block Attributejustinnealey DesignSetGo
- CVE-2026-109590Travelly <= 2.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width', 'height', and 'zoom' Shortcode Attributesmagepeopleteam Travelly – Tour & Travel Booking Manager for…
- CVE-2026-109385UiChemy <= 5.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slot Link URLposimyththemes UiChemy – Convert Figma, Prompts and AI Buil…
- CVE-2026-103996If-So Dynamic Content <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via ifso-redirect Shortcode 'url' Attributeifso If-So Dynamic Content – Elementor & All Page Builders…
- CVE-2026-103370Awesome Support <= 6.4.1 - Authenticated (Custom+) Stored Cross-Site Scripting via Ticket Attachment MIME Confusionawesomesupport Awesome Support – WordPress HelpDesk & Suppo…
- CVE-2026-116609WP Visitor Statistics (Real Time Traffic) <= 8.8 - Authenticated (Contributor+) SQL Injection via 'from' Shortcode Attributeosamaesh WP Visitor Statistics
- CVE-2026-115281Recipe Card Blocks 3.5.0 - 3.6.3 - Contributor+ SQLi via 'recipeId' AttributeRecipe Card Blocks Lite
- CVE-2026-115255WP Roster < 2.35 - Unauthenticated Roster Member DeletionWP Roster
- CVE-2026-115225Smart Popup by Supsystic < 2.0.2 - Unauthenticated SSRF via MailChimp Groups LookupCustomer Engagement System
- CVE-2026-115224Smart Popup by Supsystic < 2.0.2 - Admin+ SQLi via Popup Page/Category BindingCustomer Engagement System
- CVE-2026-113813PayPlug for WooCommerce 2.8.0 - 3.1.0 - Unauthenticated Arbitrary Order Deletion, Modification and DisclosurePayPlug for WooCommerce
- CVE-2026-113494GeoDirectory < 2.8.195 - Contributor+ Non-Public Listing Disclosure via gd_post_content ShortcodeGeoDirectory
- CVE-2026-113488GeoDirectory < 2.8.196 - Contributor+ Stored XSS via gd_post_badge 'cta' AttributeGeoDirectory
- CVE-2026-113487GeoDirectory < 2.8.196 - Contributor+ Stored XSS via gd_post_badge 'link' AttributeGeoDirectory
- CVE-2026-113486Media Library Assistant < 3.42 - Trashed Attachment Deletion via CSRFMedia Library Assistant
- CVE-2026-113485Media Library Assistant < 3.42 - Bulk Attachment Deletion via CSRFMedia Library Assistant
- CVE-2026-111967MP3 Audio Player by Sonaar 5.9 - 5.15 - Contributor+ Stored XSS via Shortcode AttributeMP3 Audio Player
- CVE-2026-111961Royal MCP < 1.5.10 - Contributor+ Private and Draft Content Disclosure and publish_posts Bypass via elementor_clone_pageRoyal MCP
- CVE-2026-111960Royal MCP 1.4.38 - 1.5.9 - Subscriber+ Non-Public Post Disclosure via wp_search AbilityRoyal MCP
- CVE-2026-111032Welcart e-Commerce < 2.12.6 - Author+ Arbitrary Product SKU Update and Disclosure via item_sku_ajaxWelcart e-Commerce
- CVE-2026-111031Welcart e-Commerce < 2.12.6 - Unauthenticated Open Redirect via 'usces_referer' ParameterWelcart e-Commerce
- CVE-2026-111027Welcart e-Commerce < 2.12.6 - Editor+ SQLi via 'log_id' ParameterWelcart e-Commerce
- CVE-2026-110691WPOrLogin < 3.1.0 - Unauthenticated Hide Login Slug UpdateWPOrLogin
- CVE-2026-110524Copy Anything to Clipboard < 5.5.5 - Contributor+ Stored XSS via 'success-text' Shortcode AttributeCopy Anything to Clipboard for WordPress
- CVE-2026-110509Essential Addons for Elementor < 6.8.7 - Unauthenticated Private Post Meta Disclosure via load_more AJAX HandlerEssential Addons for Elementor
- CVE-2026-110507Page Builder by SiteOrigin < 2.38.0 - Contributor+ Sensitive Data Disclosure via Post Loop Widget Query ArgumentsPage Builder by SiteOrigin
- CVE-2026-110506Page Builder by SiteOrigin < 2.38.0 - Contributor+ Stored XSS via panels_info.classPage Builder by SiteOrigin
- CVE-2026-110292PayPlug for WooCommerce 2.9.0 - 3.1.0 - Unauthenticated Order Key Disclosure and Order Cancellation via payplug_create_intentPayPlug for WooCommerce
- CVE-2026-107100Royal Elementor Addons 1.3.81 - 1.7.1069 - Unauthenticated Non-Public Post Content Disclosure via wpr_get_page_contentRoyal Addons for Elementor
- CVE-2026-107098Royal Elementor Addons 1.7.1037 - 1.7.1069 - Contributor+ Stored XSS via Google Maps Widget Height SettingRoyal Addons for Elementor
- CVE-2026-107097Royal Elementor Addons 1.3.71 - 1.7.1069 - Unauthenticated Mailchimp Audience Injection via mailchimp_subscribeRoyal Addons for Elementor
- CVE-2026-106647Royal Elementor Addons 1.3.68 - 1.7.1069 - Author+ Form Submission Interception via Widget ID CollisionRoyal Addons for Elementor
- CVE-2026-106003Court Reservation < 1.12.4 - Unauthenticated Reservation Type Addition and DeletionCourt Reservation
- CVE-2026-106002Court Reservation < 1.12.4 - Unauthenticated Arbitrary Challenge DeletionCourt Reservation
- CVE-2026-105997Booking Package < 1.7.33 - Unauthenticated Verification Email Sending to Arbitrary RecipientBooking Package
- CVE-2026-104694Thrive Automator < 11.2 - Editor+ Blind SQLi via 'additional' ParameterThrive Automator
- CVE-2026-103382Casso Auto-confirm Bank Transfer < 4.2.0 - Unauthenticated WooCommerce Order Payment ConfirmationCasso Flow
- CVE-2026-103372Payconiq for WooCommerce <= 1.0.4 - Unauthenticated Order Key DisclosurePayconiq
- CVE-2026-103331UniPAY Payment Gateway For WooCommerce < 2.4 - Unauthenticated Order Payment Forgery via Empty IPN SecretUniPAY Payment Gateway For WooCommerce
- CVE-2026-109236Customer Email Verification for WooCommerce <= 2.8.2 - Unauthenticated Authentication Bypass via Predictable Email-Verification Token to 'cusomer_email_verify' Parameterzorem Customer Email Verification for WooCommerce
- CVE-2026-115522Cross-Application Artifact Namespace Isolation in Google Agent Development Kit (ADK) for PythonGoogle Agent Development Kit (ADK) for Python
- CVE-2026-99100wifi: p54: validate firmware record lengthsLinux
- CVE-2026-118276a2ui-project a2ui Parser expression_parser.ts formatString resource consumptiona2ui-project a2ui
- CVE-2026-111727Appointment Booking Calendar <= 1.4.05 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'vs_text_submitbtn' Parametercodepeople Appointment Booking Calendar
- CVE-2026-118275a2ui-project a2ui Resolver data-context.ts DataContext.resolveSignal resource consumptiona2ui-project a2ui
- CVE-2026-118384GNU mtools before 4.0.50 has an out-of-bounds write in parse_vses in vfat.c.GNU mtools
- CVE-2026-118274a2ui-project a2ui Binder generic-binder.ts resource consumptiona2ui-project a2ui
- CVE-2026-118273a2ui-project a2ui data-model.ts DataModel.set resource consumptiona2ui-project a2ui
- CVE-2026-107745AI Engine <= 3.8.4 - Authenticated (Subscriber+) Limited Media File Deletion via 'metadata' Parametertigroumeow AI Engine – MCP Server & AI Chatbot for WordPres…
- CVE-2026-109209All-in-One Video Gallery <= 4.9.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'embedcode' Post Meta via XML-RPCplugins360 All-in-One Video Gallery – Video Player & Galler…
- CVE-2026-109974All-in-One Video Gallery <= 4.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'more_link' Shortcode Attributeplugins360 All-in-One Video Gallery – Video Player & Galler…
- CVE-2026-107625Ultimate Member <= 2.14.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'user_url' Profile Fieldultimatemember Ultimate Member – User Profile, Registration…
- CVE-2026-115624GROWI contains a missing authorization check vulnerability in its collaborative editing feature.GROWI
- CVE-2026-109848GROWI contains an authorization bypass vulnerability in its tag update API and the page update API due to improper use of a…GROWI
- CVE-2026-105272GROWI contains an authorization bypass vulnerability in its page viewing and commenting functionality due to improper use of a…GROWI
- CVE-2026-118376WeKnora before 0.8.2 SSRF Guard Bypass via NAT64 IPv6 AddressesTencent WeKnora
- CVE-2026-118373LibreSSL ocspcheck through 4.4.0 Cleartext Transmission of OCSP Requests via url2host()OpenBSD LibreSSL
- CVE-2026-118372LibreSSL ocspcheck through 4.4.0 CRLF Injection via AIA OCSP URL PathOpenBSD LibreSSL
- CVE-2026-118371LibreSSL through 4.4.0 CRLF Injection via OCSP_sendreq_new() Request LineOpenBSD LibreSSL
- CVE-2026-117608Assimp through 6.0.5 Heap Out-of-Bounds Read via MD2 Importer Integer Overflowassimp
- CVE-2026-117606NexoPOS through 6.3.0 Missing Authorization via Cash Register Session ActionsBlair2004 NexoPOS
- CVE-2026-117605nopCommerce before 5.00.0 Missing Authorization via Admin ProductController Add Popup HandlersnopSolutions nopCommerce
- CVE-2013-20009Linksys WAG200G through 1.01.06 Stored XSS via policy_name ParameterLinksys WAG200G
- CVE-2026-118272a2ui-project a2ui Error data-context.ts DataContext.dispatchExpressionError information exposurea2ui-project a2ui
- CVE-2026-118271a2ui-project a2ui data-context Resolver data-context.ts resource consumptiona2ui-project a2ui