CVEs published November 4, 2026
371 CVEs were published on November 4, 2026: 42 critical, 154 high. 1 is now in CISA KEV. 5 early warnings were posted.
- Published
- 371
- Critical
- 42
- High
- 154
- Medium
- 146
- Low
- 25
- Unrated
- 4
- Now in CISA KEV
- 1
- Fix available
- 268
- Early warnings
- 5
Most affected products
- FreeRDP
- 15
- Apache Software Foundation Apache OpenOffice
- 12
- Shenzhen Shine Industrial Co. VitaFit
- 12
- IBM Db2 Genius Hub
- 11
- IBM MQ
- 11
- zephyrproject zephyr
- 8
- nvm-sh nvm
- 7
- Sonatype Nexus Repository
- 7
- Apache Software Foundation org.apache.zookeeper:zookeeper
- 5
- SEPPmail AG SEPPmail Secure Email Gateway
- 5
Early warnings 5
- SZB-4f5cab3822Zyxel patches zero-day exploited to hack nearly 1,000 GS1900 switchesZyxel · GS1900
- SZB-6be53914c8SonicWall says it will not patch two end-of-life GMS flaws, one rated CVSS 9.1SonicWall · Global Management System (GMS)
- SZB-f4b7ff866cPlerdy SEO Tracker reportedly used in APT29-linked iOS and Android watering hole campaignPlerdy SEO Tracker
- SZB-b785d96740Cyberattack reportedly wipes Beget cloud data and disrupts hundreds of sitesBeget · cloud hosting infrastructure
- SZB-76a2041c5eGoogle patches critical Android flaw CVE-2026-58868 allowing remote code executionGoogle · Android
Critical 42
- CVE-2026-122051Edimax BR-6208AC mp command injectionEdimax BR-6208AC
- CVE-2026-115770Pocket ID: Email verification token remains valid after address change, enabling arbitrary verified-email spoofingpocket-id · github.com/pocket-id/pocket-id/backend
- CVE-2026-54384VitaFit Cloud API Authentication Bypass via POST /front/login/sns/Shenzhen Shine Industrial Co. VitaFit
- CVE-2026-52848GLPI: MFA bypassglpi-project glpi
- CVE-2026-54378VitaFit Cloud API Broken Access Control via S3 Token EndpointShenzhen Shine Industrial Co. VitaFit
- CVE-2026-57566Readest: Unauthenticated SSRF / open request proxy in /api/opds/proxyreadest
- CVE-2026-102894GPUStack: SAML callback trusts an unverified SAMLResponse, allowing authentication bypass and account takeovergpustack
- CVE-2026-102895GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated…gpustack
- CVE-2026-97693Yuxi sandbox isolation failure allows cross-tenant access and internal service compromisexerrors Yuxi
- CVE-2026-82418IBM Watson Speech Services Cartridge is vulnerable to a Use After Free condition in cryptography wheels OpenSSLIBM Watson Speech Services Cartridge
- CVE-2026-122013Comfast CF-WR632AX Multipart webmgnt path traversalComfast CF-WR632AX
- CVE-2025-71457vtenext 25.02 before 25.02.1 Unverified Password Change via hub/rpwd.phpvtenext
- CVE-2026-122220WPO365 LOGIN before 45.2 SAML Replay Protection BypassWPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION
- CVE-2026-113373Nexus Repository 3 - Disabled or Locked Single Sign-On Users Can Sign In AgainSonatype Nexus Repository
- CVE-2026-121933Linksys E5350 Setup Wizard apply.cgi save_settings missing authenticationLinksys E5350
- CVE-2026-113780ESF-IDF: Unvalidated Stack Pointer at the ESP-TEE Privilege-Switch Boundaryespressif esp-idf
- CVE-2026-107846bitcoinjs-lib: Undetected merkle node duplication in block root computation validates a forged transaction listbitcoinjs-lib
- CVE-2026-121932Linksys E5350 apply.cgi system os command injectionLinksys E5350
- CVE-2026-121931Linksys WRT54GL Traceroute Diagnostic Function apply.cgi system os command injectionLinksys WRT54GL
- CVE-2026-121930Linksys WRT54GL Ping Diagnostic apply.cgi system os command injectionLinksys WRT54GL
- CVE-2026-122120In Yealink Plug-in Softwares before 2.35.219.0, there is an unauthorized file write vulnerability under specific scenarios, which may be…Yealink Plug-in Softwares
- CVE-2026-121953FreeRDP before 3.32.2 Use-After-Free via rdpgfx Dynamic Virtual Channel CloseFreeRDP
- CVE-2026-121952FreeRDP before 3.32.2 Proxy Out-of-Bounds Write via Bitmap Cache v2 CapabilityFreeRDP
- CVE-2026-121639WatchGuard AuthPoint Gateway Improper Authentication Allows Unauthenticated Denial of ServiceWatchGuard AuthPoint Authentication Gateway
- CVE-2026-121638WatchGuard AuthPoint Gateway Improper Certificate Validation Allows Man-in-the-Middle AttacksWatchGuard AuthPoint Authentication Gateway
Show all 42 entriesShow fewer entries
- CVE-2026-121640WatchGuard AuthPoint Gateway Capture-replay Allows Unauthorized Administrative ActionsWatchGuard AuthPoint Authentication Gateway
- CVE-2026-122006The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment processing occurs, can allow server read and write…rubyonrails Active Storage
- CVE-2026-121939Databasement before 1.10.9 Account Takeover via OIDC Email Auto-LinkingDavid-Crty Databasement
- CVE-2026-119481WordPress JetFormBuilder plugin <= 3.6.7.1 - Privilege Escalation vulnerabilityCrocoblock JetFormBuilder
- CVE-2026-65555WordPress Uncanny Toolkit for LearnDash plugin <= 3.8.2 - Privilege Escalation vulnerabilityUncanny Owl Uncanny Toolkit for LearnDash
- CVE-2026-114425Forged LFT metadata permits arbitrary file read and deletionSEPPmail AG SEPPmail Secure Email Gateway
- CVE-2026-114424Code execution through double evaluation in address replacement rulesSEPPmail AG SEPPmail Secure Email Gateway
- CVE-2026-121802@better-auth/expo before 1.7.16 allows certain account-takeover outcomes (e.g., unauthenticated changes of any account's email address)…better-auth Better Auth
- CVE-2026-121615Linksys E5600 Login mesh_login.cgi improper authenticationLinksys E5600
- CVE-2026-121609Qihoo 360 Whole Home Router M5 Boot Script mpt start hard-coded credentialsQihoo 360 Whole Home Router M5
- CVE-2026-121607Qihoo 360 D603-2/D600-2/D606-6/D706 iscm testspeed_command os command injectionQihoo 360 D603-2 · Qihoo 360 D600-2 +2
- CVE-2026-121606Qihoo 360 D621-2/D603-2/D600-2/D619/D606-6/D706 Firmware Signature Verification iscm verify_sign signature verificationQihoo 360 D621-2 · Qihoo 360 D603-2 +4
- CVE-2026-121600TOTOLINK A950RG MAC Filter cstecgi.cgi setMacFilterRules stack-based overflowTOTOLINK A950RG
- CVE-2026-121599TOTOLINK A950RG Multi-SSID Configuration cstecgi.cgi delWiFiMultipleConfig stack-based overflowTOTOLINK A950RG
- CVE-2026-121598TOTOLINK A950RG Basic Wireless Configuration cstecgi.cgi strcpy stack-based overflowTOTOLINK A950RG
- CVE-2026-121597TOTOLINK A950RG Easy Setup Wizard cstecgi.cgi setAppEasyWizardConfig stack-based overflowTOTOLINK A950RG
- CVE-2026-39430On HP Poly EagleEye Cube USB 1.3.1-001267 devices, the administrator authentication flow is broken: session management and access controls…
High 154
- CVE-2026-122299Dulwich before 1.2.20 Commit Parser Tree Header Misinterpretationjelmer dulwich
- CVE-2026-77372VeraCrypt: Heap overflow and out-of-bounds read in Serializable deserialization (elevated Core service input path)VeraCrypt
- CVE-2026-62662Pocket ID: Client credentials grant allows any OIDC client to obtain tokens for arbitrary audiencespocket-id · github.com/pocket-id/pocket-id/backend
- CVE-2026-108387radare2: Remote code execution when loading Pebble/SMD binaryradareorg radare2
- CVE-2026-47678GLPI: Blind Time based SQLI in dropdownsglpi-project glpi
- CVE-2026-54383VitaFit Cloud API Excessive Data Exposure via relation/search EndpointShenzhen Shine Industrial Co. VitaFit
- CVE-2026-57152GLPI: Unallowed notifications sendingglpi-project glpi
- CVE-2026-54381VitaFit Cloud API Storage Bucket Unauthenticated Access Information DisclosureShenzhen Shine Industrial Co. VitaFit
- CVE-2026-76892tsParticles: Malformed JSON requests can terminate the @tsparticles/mcp-server HTTP processtsparticles · @tsparticles mcp-server +1
- CVE-2026-76826tsParticles: Generated release notes can execute shell commands in the stable publish workflowtsparticles
- CVE-2026-63655tsParticles: Unbounded HTTP Request Body Buffering in @tsparticles/mcp-server Leads to Remote DoStsparticles · @tsparticles mcp-server +1
- CVE-2026-54376VitaFit Android < 2.8.1.0 Custom URI Scheme Token HijackingShenzhen Shine Industrial Co. VitaFit
- CVE-2026-54375VitaFit Android < 2.8.1.0 Long-Lived Session Token ExposureShenzhen Shine Industrial Co. VitaFit
- CVE-2026-54374VitaFit Android < 2.8.1.0 Hardcoded Credentials DisclosureShenzhen Shine Industrial Co. VitaFit
- CVE-2026-54372VitaFit Android < 2.8.1.0 Insecure TLS Certificate ValidationShenzhen Shine Industrial Co. VitaFit
- CVE-2026-122266Improper isolation of shared resources in aws-network-policy-agent in Amazon EKSaws-network-policy-agent · AWS amazon-vpc-cni-k8s
- CVE-2026-57567Readest: Unscoped Tauri IPC download_file/upload_file allow arbitrary local file write and read from the webviewreadest
- CVE-2026-55367h2o: heap exhaustion using capsulesh2o
- CVE-2026-55368h2o: buffer overflow when using the %{error}x log directiveh2o
- CVE-2026-103002GPUStack: Missing authorization on several cluster and resource endpoints allows cross-user access and cluster takeovergpustack
- CVE-2026-17493IBM Watson Speech Services Cartridge is vulnerable to a D.O.S. in Unpacker.IBM Watson Speech Services Cartridge
- CVE-2026-104203Traccar: Authentication bypass via path parameters exposes protected device mediatraccar
- CVE-2026-115758SumatraPDF: TLS hostname validation disabled in `HttpGet()`sumatrapdfreader sumatrapdf
- CVE-2026-102664ProxySQL: Uninitialized heap read in MySQL compressed packet decompression via zlib pathsysown proxysql
- CVE-2026-102340Telepresence: Traffic Manager gRPC has no auth — any pod claims arbitrary namespace and intercepts services, receiving victim environment…telepresenceio telepresence · github.com/telepresenceio/tel…
Show all 154 entriesShow fewer entries
- CVE-2026-122224WebVirtCloud through commit bb920b0 Missing Authorization in REST API Migrate and Create Endpointsretspen webvirtcloud
- CVE-2026-122135Mistral Vibe before 3.0.3 RCE via Repository-Configured gpg.programmistralai mistral-vibe
- CVE-2026-122134Mistral Vibe before 2.25.7 Code Execution via Git Filter Driversmistralai mistral-vibe
- CVE-2026-122133Mistral Vibe before 2.25.5 on Windows Untrusted Search Path RCE via git.exemistralai mistral-vibe
- CVE-2026-122130CESNET ipfixcol2 2.3.0 before 2.9.0 Buffer Overflow via Forwarder Output PluginCESNET ipfixcol2
- CVE-2026-122127CESNET ipfixcol2 2.7.1 before 2.9.0 Heap Buffer Overflow via TCP LZ4 DecoderCESNET ipfixcol2
- CVE-2026-122126reSIProcate reTurn client through 1.14.0 Heap Buffer Overflow via TurnTcpSocketresiprocate
- CVE-2026-121969netrek-client-cow through 3.3.3 Stack Buffer Overflow via handleSMessagequozl netrek-client-cow
- CVE-2026-121968Netrek-client-cow through 3.3.3 Out-of-Bounds Read via SP_S_MESSAGE Packetsquozl netrek-client-cow
- CVE-2025-71456vtenext before 25.02.2 SQL Injection via fieldname in Fax EditViewvtenext
- CVE-2026-102339Telepresence: Tunnel endpoint accepts caller-supplied session ID with no ownership proof — active client sessions hijackabletelepresenceio telepresence · github.com/telepresenceio/tel…
- CVE-2026-10859IBM MQ XMS .NET client is affected by an arbitrary code execution vulnerabilityIBM MQ
- CVE-2026-11376IBM MQ is affected by a denial of service vulnerabilityIBM MQ
- CVE-2026-11724IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerabilityIBM MQ
- CVE-2026-12356IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerabilityIBM MQ
- CVE-2026-13271IBM MQ Managed File Transfer is affected by a denial of service vulnerabilityIBM MQ
- CVE-2026-13284IBM MQ Managed File Transfer is vulnerable to XML external entity injectionIBM MQ
- CVE-2026-13289IBM MQ Managed File Transfer is vulnerable to XML external entity injectionIBM MQ
- CVE-2026-13292IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerabilityIBM MQ
- CVE-2026-18142IBM MQ is affected by a denial of service vulnerabilityIBM MQ
- CVE-2026-113370Nexus Repository 3 - SQL Injection in Reindex Search by Pattern TaskSonatype Nexus Repository
- CVE-2026-113371Nexus Repository 3 - Insufficiently Protected Credentials in Repository Signing PassphraseSonatype Nexus Repository
- CVE-2026-113372Nexus Repository 3 - Insufficiently Protected Credentials in YUM Repository Signing KeySonatype Nexus Repository
- CVE-2026-113374Nexus Repository 3 - Privilege Escalation via Rut Auth Capability CreationSonatype Nexus Repository
- CVE-2026-122192Guest access to Firecracker process memory after a failed memory discardAWS firecracker
- CVE-2026-97705Moleculer: Unauthenticated Denial of Service via negative length field in the TCP transporter packet parsermoleculerjs moleculer · moleculer
- CVE-2026-113783ESP-IDF: Stack-based memory corruption in lwIP DNS/SNTP handling for multi-IP DNS responsesespressif esp-idf
- CVE-2026-113782ESP-IDF: Stack-Based Out-of-Bounds Write in Thread Border Router ND6 Option Parsingespressif esp-idf
- CVE-2026-82033DeepSeek Harness Unauthenticated RPC Command Executiondeepseek-ai deepseek-harness
- CVE-2026-122148In Yealink MeetingBoard Pro before 331.320.0.64, the Web management module has a front-end validation bypass vulnerability.Yealink MeetingBoard Pro
- CVE-2026-82029Invoice Ninja < 5.13.28 Broken Access Control via Vendor Portalinvoiceninja
- CVE-2026-122118In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8-digit numeric PSK with insufficient…Yealink AVHub · Yealink UVC86 +6
- CVE-2026-57853DataGerry < 3.3.0 SSTI via DocAPI Template RenderingDataGerry
- CVE-2026-121971Symfony: ScopingHttpClient Sends the Credentials of Its Default Scope to Other Origins Through Network-Path Referencessensiolabs symfony/http-client
- CVE-2026-119749GetPaid WordPress Plugin < 2.8.63 Negative Quantity Payment BypassAyeCode Payment forms, Buy now buttons, and Invoicing Syste…
- CVE-2026-119747GetPaid WordPress Plugin < 2.8.63 Incorrect Authorization via REST APIAyeCode Payment forms, Buy now buttons, and Invoicing Syste…
- CVE-2026-76506Cisco Unified Computing System Central Remote Code Execution VulnerabilityCisco Unified Computing System Central Software
- CVE-2026-106554jackson-dataformat-cbor: quadratic-time TagList growth on unbounded stacked tags (CPU/GC DoS, PoC)com.fasterxml.jackson.dataformat:jackson-dataformat-cbor ·…
- CVE-2026-109518APT RCE via hard link reuseDebian APT · Ubuntu APT
- CVE-2026-119746ProSoft ICX35 Login Lockout Bypass via Client-Side CookiesProSoft Technology X35-HWC-A · ProSoft Technology ICX35-HWC…
- CVE-2026-121966Traefik before 2.11.60 and 3.7.16 ForwardAuth NTLM/Negotiate Identity Leaktraefik
- CVE-2026-121964FreeRDP before 3.32.2 Heap Buffer Overflow via rpc_client_recv_fragmentFreeRDP
- CVE-2026-121963FreeRDP before 3.32.2 Use-After-Free via Dynamic rdpsnd Channel CloseFreeRDP
- CVE-2026-121962FreeRDP before 3.32.2 Heap Buffer Overflow via Early User Authorization ReadFreeRDP
- CVE-2026-121961FreeRDP before 3.32.2 Use-After-Free via DRDYNVC Tracker RaceFreeRDP
- CVE-2026-121960FreeRDP before 3.32.2 Unauthenticated Denial of Service via CredSSP TSRequestFreeRDP
- CVE-2026-121959FreeRDP before 3.32.2 Infinite Loop via Truncated WebSocket FrameFreeRDP
- CVE-2026-121958FreeRDP through 3.32.1 Heap Out-of-Bounds Write via RDPGFX HashTable_GetKeysFreeRDP
- CVE-2026-121957FreeRDP before 3.32.2 Use-After-Free via RDPGFX ResetGraphics RaceFreeRDP
- CVE-2026-121956FreeRDP before 3.32.2 Double Free in WinPR Kerberos retrieveSomeTgtFreeRDP
- CVE-2026-121955FreeRDP before 3.32.2 Use-After-Free in Smartcard Emulation ReleaseContextFreeRDP
- CVE-2026-121954FreeRDP before 3.32.2 Heap Out-of-Bounds Write in Planar CodecFreeRDP
- CVE-2026-121951FreeRDP 3.0.0 before 3.32.2 Denial of Service via Slow-Path Input EventFreeRDP
- CVE-2026-121950FreeRDP before 3.32.2 Heap Overflow via RDPGFX CREATE_SURFACE Integer WrapFreeRDP
- CVE-2026-92704SharpEmu: Cross-site request forgery in the debugger frontend leads to arbitrary process executionsharpemu
- CVE-2026-122032SPIP before 4.4.29 Authenticated SQL Injection via where ParameterSPIP
- CVE-2026-122007Oqtane Framework before 10.3.0 Broken Access Control via SettingControlleroqtane.framework
- CVE-2026-121637WatchGuard AuthPoint Gateway Improper HMAC Validation in LDAP Authentication Callback Allows Forged Authentication ResultsWatchGuard AuthPoint Authentication Gateway
- CVE-2026-121009SQL::Abstract versions from 1.90_01 before 2.000001_04 for Perl skip the injection_guard check for function names given with -funcSQL-Abstract
- CVE-2026-121007SQL::Abstract versions from 1.90_01 before 2.000001_04 for Perl allow SQL injection via the where values of a nested statement in an…SQL-Abstract
- CVE-2026-118391Unbounded query cache growth from interpolated JSON paths and splice lists in Ectoelixir-ecto ecto · ecto
- CVE-2026-121147Security Misconfiguration Vulnerability in Tata Motors iRA and iRA.ev mobile applicationTata Motors iRA · Tata Motors iRA.ev
- CVE-2026-121620CoopCycle coopcycle-web 5.6.0 before 6.20.0 Missing Zelty Webhook Signature Verificationcoopcycle-web
- CVE-2026-121145Insecure Configuration Vulnerability in Tata Motors iRA and iRA.ev mobile applicationTata Motors iRA · Tata Motors iRA.ev
- CVE-2026-121945CoopCycle coopcycle-web before 6.20.1 IDOR via Incident Resource and Action Endpointcoopcycle-web
- CVE-2026-121941libmt32emu before 2.8.4 Heap Buffer Overflow via MidiStreamParserImpl::parseSysexmunt libmt32emu
- CVE-2026-121940Stonewuu ai-fusion-video before 1.3.0 IDOR via Project, Asset and Script ControllersStonewuu ai-fusion-video
- CVE-2026-121144Hardcoded Credentials Vulnerability in Tata Motors iRA and iRA.ev mobile applicationTata Motors iRA · Tata Motors iRA.ev
- CVE-2026-118513Symfony: X.509 Authentication Impersonation via DN Value Injection (incomplete fix for CVE-2026-45063)sensiolabs symfony/security-http
- CVE-2026-119468WordPress Noptin plugin <= 4.4.2 - Cross Site Scripting (XSS) vulnerabilityNoptin Newsletter Team Noptin
- CVE-2026-104799Mobile builder <= 1.4.2 - Authenticated (Subscriber+) Privilege Escalation to wcfm-profile-settings REST Route 'key'/'data' Parametersrnlab Mobile builder
- CVE-2026-97397Remove Google Fonts <= 1.7 - Unauthenticated Stored Cross-Site Scripting via Comment Field via Regex-Mangled Output Buffereasywpstuff Remove Google Fonts – Disable, Block, or Replac…
- CVE-2026-90634Apache OpenOffice: Out-of-bounds write when importing encrypted PDF filesApache Software Foundation Apache OpenOffice
- CVE-2026-90629Apache OpenOffice: Out of bounds memory access during WMF importApache Software Foundation Apache OpenOffice
- CVE-2026-90628Apache OpenOffice: Stack overflow in CFF hint handlingApache Software Foundation Apache OpenOffice
- CVE-2026-90626Apache OpenOffice: Out-of-bounds write when importing encrypted PDF filesApache Software Foundation Apache OpenOffice
- CVE-2026-90624Apache OpenOffice: PDF File Parsing Heap based Buffer-Overflow-Remote Code Execution VulnerabilityApache Software Foundation Apache OpenOffice
- CVE-2026-59268Apache OpenOffice: Heap out-of-bounds write in WW8 PLCF readerApache Software Foundation Apache OpenOffice
- CVE-2026-59264Apache OpenOffice: Uncontrolled search path element vulnerability in Windows installerApache Software Foundation Apache OpenOffice
- CVE-2026-100302Apache ZooKeeper: Denial of service through unbounded memory allocation in multiRead request handlingApache Software Foundation org.apache.zookeeper:zookeeper
- CVE-2026-115448Apache ZooKeeper: Unbounded recursion in snapshot serialization allows a client to render the server unrecoverableApache Software Foundation org.apache.zookeeper:zookeeper
- CVE-2026-100300Apache ZooKeeper: Unauthenticated persistent denial of service via unvalidated quota-node data and paths crashing the transaction-apply…Apache Software Foundation org.apache.zookeeper:zookeeper
- CVE-2026-100252Apache ZooKeeper: SASL authorization bypass on the client port through a client-supplied authorization IDApache Software Foundation org.apache.zookeeper:zookeeper
- CVE-2026-103582Apache ActiveMQ NMS OpenWire Client Library: Unbounded/Unvalidated Length Fields in Apache.NMS.OpenWire Unmarshalling (DoS)Apache Software Foundation Apache.NMS.ActiveMQ
- CVE-2026-111822Apache ActiveMQ, Apache ActiveMQ Runtime Config: ActiveMQ retains write access after live ACL revocationApache Software Foundation org.apache.activemq:apache-activ…
- CVE-2026-111821Apache ActiveMQ, Apache ActiveMQ KahaDB: Oversized client identifier strings poison the KahaDB journalApache Software Foundation org.apache.activemq:apache-activ…
- CVE-2026-120422Insecure HTTP configuration retrieval in Sogou Input Method allows arbitrary code executionSogou Input Method
- CVE-2026-111038Multiple vulnerabilities in Coupa’s Total Spend Management PlatformCoupa Total Spend Management Platform
- CVE-2026-111036Multiple vulnerabilities in Coupa’s Total Spend Management PlatformCoupa Total Spend Management Platform
- CVE-2026-115498Slim Jetpack <= 2.7.0.1 - Unauthenticated Stored Cross-Site Scripting via Contact Form 'Website' Fieldwingerspeed Slim Jetpack
- CVE-2026-120554Import and export users and customers <= 2.5.11 - Authenticated (Custom+) Privilege Escalation via Non-Atomic Cron Settings Savecarazo Import and export users and customers
- CVE-2026-110935Path traversal in plug-in deploymentPhoenix Contact PLCnext Engineer
- CVE-2026-110022Signed plug-in validation bypassPhoenix Contact PLCnext Engineer
- CVE-2026-94460IRISPowerscan Insecure default privilege assignment for installation accountI.R.I.S S.A. IRISPowerscan
- CVE-2026-94459IRISPowerscan Default accounts with predictable credentialsI.R.I.S S.A. IRISPowerscan
- CVE-2026-114421Empty initial password permits GINA account takeoverSEPPmail AG SEPPmail Secure Email Gateway
- CVE-2026-114426Pre-authentication upload parsing permits resource exhaustionSEPPmail AG SEPPmail Secure Email Gateway
- CVE-2026-57666WordPress WP Customer Area plugin <= 8.4.1 - Cross Site Scripting (XSS) vulnerabilityAguila Technologies WP Customer Area
- CVE-2026-119366WordPress wpDiscuz plugin <= 7.6.73 - Cross Site Scripting (XSS) vulnerabilityAdvancedCoding wpDiscuz
- CVE-2026-62007WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.26 - Cross Site Scripting (XSS) vulnerabilityUnlimited Elements For Elementor
- CVE-2026-54861WordPress WP Customer Area plugin <= 8.4.1 - Cross Site Scripting (XSS) vulnerabilityAguila Technologies WP Customer Area
- CVE-2026-62126WordPress SAML SP Single Sign On plugin <= 6.1.0 - Denial of Service Attack vulnerabilityminiOrange SAML SP Single Sign On
- CVE-2026-57639WordPress WP Booking System plugin <= 2.1.0.6 - Cross Site Scripting (XSS) vulnerabilityRoland Murg WP Booking System
- CVE-2026-119477WordPress WP Photo Album Plus plugin <= 9.3.05.003 - Cross Site Scripting (XSS) vulnerabilityJacob N. Breetvelt WP Photo Album Plus
- CVE-2026-56065WordPress Doofinder for WooCommerce plugin <= 2.17.2 - Sensitive Data Exposure vulnerabilityDoofinder for WooCommerce
- CVE-2026-54851WordPress Contact Form by WPForms plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerabilityAwesomemotive Contact Form by WPForms
- CVE-2026-62000WordPress WCFM Marketplace plugin <= 3.8.2 - Broken Access Control vulnerabilityWC Lovers WCFM Marketplace
- CVE-2026-121818About Time Technologies｜Herowatch Go - Security MisconfigurationAbout Time Technologies Herowatch Go
- CVE-2026-121817About Time Technologies｜Herowatch Go Server - Insecure Direct Object ReferenceAbout Time Technologies Herowatch Go Server
- CVE-2026-121816About Time Technologies｜Herowatch Mini - Missing AuthenticationAbout Time Technologies Herowatch Mini
- CVE-2026-87041Inverted memory-permission check in the RTIO syscall verifier allows a user-mode thread to read and write arbitrary kernel memoryzephyrproject zephyr
- CVE-2026-87040Bluetooth LE Controller accepts received PDUs whose length field exceeds the configured maximum receive length, causing out-of-bounds read…zephyrproject zephyr
- CVE-2026-87039I2S configure syscall handler passes an unvalidated user-supplied kernel object pointer to driverszephyrproject zephyr
- CVE-2026-87038Time-of-check/time-of-use double fetch in the Zephyr i3c_transfer() syscall handler allows kernel-mode control-flow hijack from user modezephyrproject zephyr
- CVE-2026-16511Unvalidated user pointers in RTIO syscall verifiers allow a user-mode thread to write kernel memoryzephyrproject zephyr
- CVE-2026-118422Stape Conversion Tracking 2.3.0 - 2.3.10 - Unauthenticated SSRF and Same-Origin XSS via Proxy Sub-PathStape Conversion Tracking
- CVE-2026-108041SEOPress < 10.4 - Authenticated Stored XSS via Analytics Tracking SettingsSEOPress
- CVE-2026-105413Form Maker by 10Web < 1.15.51 - Unauthenticated Stored XSS via Submission Field ValuesForm Maker by 10Web
- CVE-2026-77690Command injection vulnerabilityZohocorp ManageEngine Key Manager Plus
- CVE-2026-77779Improper access control vulnerabilityZohocorp ManageEngine Key Manager Plus
- CVE-2025-11229Privilege Escalation via Client Credentials Grant Type in WSO2 Identity ServerWSO2 Identity Server · WSO2 Identity Application Management…
- CVE-2026-11749A vulnerability has been identified in armeria-saml prior to 1.41.1, where bearer assertions are not enforced for one-time use, allowing…LY Armeria
- CVE-2026-80335Out-of-bounds Write in BootloaderUnisoc (Shanghai) Technologies Co. Bootloader
- CVE-2026-79405Improper Input Validation in Modem FirmwareUnisoc (Shanghai) Technologies Co. Modem
- CVE-2026-121617Linksys E5600 Header upload_fw.cgi init_multipart out-of-bounds writeLinksys E5600
- CVE-2026-84729Out-of-bounds write in certain ASUS Router firmware allow an unauthenticated nearby attacker to write data beyond the intended buffer or…ASUS Router firmware
- CVE-2026-84730Stack-based buffer overflow in certain ASUS Router firmware allows an unauthenticated nearby attacker to execute arbitrary commands with…ASUS Router firmware
- CVE-2026-112116An exposed IOCTL with insufficient access control in ASUS System Control Interface allows a local, low-privileged user to read and write…ASUS System Control Interface
- CVE-2026-39431On HP Poly EagleEye Cube USB 1.3.1-001267 devices, one of the API functions available on a management service accessible via USB allows…
Medium, low and unrated 175
- CVE-2026-122050Campcodes Complete Sales and Inventory System with Credit Management login.php sql injectionCampcodes Complete Sales and Inventory System with Credit M…
- CVE-2026-122049Campcodes Bitcoin Wallet System ForgotPasswordController.php random_int excessive authenticationCampcodes Bitcoin Wallet System
- CVE-2026-122048Campcodes Division Regional Athletic Meet Game Result Matrix System check-user.php sql injectionCampcodes Division Regional Athletic Meet Game Result Matri…
- CVE-2026-102337Webmin: SSRF exploit in Upload and Download and File Manager moduleswebmin
- CVE-2026-97702Open edX: Support "manage_course_team" REST API omits the `require_support_permission` gate its sibling support views enforceopenedx-platform
- CVE-2026-62365Wazuh: Heap Buffer Overflow in DecodeWinevt() join_data Accumulation via Crafted EventChannel XMLwazuh
- CVE-2026-122047Campcodes Complete Advance Loan Management System banner.php move_uploaded_file unrestricted uploadCampcodes Complete Advance Loan Management System
- CVE-2026-122038krupalshah EmployeeRecruitmentSystem Requirement Board Update reqformprocessing.php mysql_query sql injectionkrupalshah EmployeeRecruitmentSystem
- CVE-2026-53631GLPI: Unauthorized visibility expansion of knowbase items, reminders and RSS feedsglpi-project glpi
- CVE-2026-54382VitaFit Cloud API AWS IAM Misconfiguration via Cognito S3 AccessShenzhen Shine Industrial Co. VitaFit
- CVE-2026-86041ezBookkeeping: Source-IP allowlist (MCP & API token) is bypassable via a spoofed `X-Forwarded-For` headermayswind ezbookkeeping · github.com/mayswind/ezbookkeeping
- CVE-2026-122028NST Labs Tech Nstbrowser Local Agent API info information disclosureNST Labs Tech Nstbrowser
- CVE-2026-54380VitaFit Cloud API Stored XSS via SVG File UploadShenzhen Shine Industrial Co. VitaFit
- CVE-2026-76893tsParticles: A single anonymous MCP session can monopolize HTTP mode and deny new clientstsparticles · @tsparticles mcp-server +1
- CVE-2026-54377VitaFit Cloud API IDOR via profile_id EndpointsShenzhen Shine Industrial Co. VitaFit
- CVE-2026-122020NST Labs Tech Nstbrowser Local Agent Management Service stopAll stopAllBrowsers denial of serviceNST Labs Tech Nstbrowser
- CVE-2026-102280Sandboxie-Plus: Sandbox containment bypasssandboxie-plus Sandboxie
- CVE-2026-54373VitaFit Android < 2.8.1.0 Cleartext Traffic via Missing Network Security ConfigShenzhen Shine Industrial Co. VitaFit
- CVE-2026-57562Readest: Subscription/entitlement hijack: /api/stripe/check binds any paid Checkout Session to the callerreadest
- CVE-2026-57565Readest: Cross-tenant object write via unsanitized fileName in /api/storage/upload (object-key path traversal)readest
- CVE-2026-1220196amTech 6valley Social Login Flow existing-account-check existingAccountCheck authorization6amTech 6valley
- CVE-2026-115473Mongoose: Heap OOB reads and null-byte bypass in mg_path_is_sane (util.c)cesanta mongoose
- CVE-2026-121746nvm use --save and nvm install --save write through a symlinked .nvmrc, overwriting any file the user can writenvm-sh nvm
- CVE-2026-58128Alan: Health Insurance for Android 1.450.0 Path Traversal via ShareReceiverActivityAlan Health Alan: Health Insurance
- CVE-2026-121749nvm passes the version pattern to grep without -e, letting a .nvmrc inject grep options and read local filesnvm-sh nvm
Show all 175 entriesShow fewer entries
- CVE-2026-121747nvm prints the contents of any readable file through a symlinked .nvmrcnvm-sh nvm
- CVE-2026-122016yangzongzhuan RuoYi-Vue Permission Service SysPermissionService.java SysPermissionService.getMenuPermission privileges managementyangzongzhuan RuoYi-Vue
- CVE-2026-121748nvm use --delete-prefix lets a project .npmrc choose which file npm rewrites or makes world-writablenvm-sh nvm
- CVE-2026-121750nvm install --offline installs a cached tarball that previously failed checksum verificationnvm-sh nvm
- CVE-2026-121745nvm exposes NVM_AUTH_HEADER to other local users on the curl/wget command linenvm-sh nvm
- CVE-2026-121751nvm evaluates a malicious mirror's index.tab version strings as shell arithmetic via stored LTS aliasesnvm-sh nvm
- CVE-2026-122015NPC-Worldwide npcpy MLX Provider response.py get_mlx_response input validationNPC-Worldwide npcpy
- CVE-2026-122235Jan 0.8.5 before 0.8.8 Workspace Guard Bypass via Dangling Symlinkjanhq jan
- CVE-2026-122234jsondiffpatch before 0.7.7 XSS via Array-Move Destination in HTML Formattersbenjamine jsondiffpatch
- CVE-2026-122233FrankenPHP before 1.13.4 Cross-Request Response Header Leak in Worker Modefrankenphp
- CVE-2026-16725IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in LangSmithIBM Watson Speech Services Cartridge
- CVE-2026-19319IBM Watson Speech Services Cartridge is vulnerable to an Out-of-bounds Read in OnnxIBM Watson Speech Services Cartridge
- CVE-2026-122014NPC-Worldwide npcpy sft.py load_sft_model code injectionNPC-Worldwide npcpy
- CVE-2026-105702Multiple vulnerabilities that affects IBM Db2 Genius HubIBM Db2 Genius Hub
- CVE-2026-105991Multiple vulnerabilities that affects IBM Db2 Genius HubIBM Db2 Genius Hub
- CVE-2026-108536Multiple vulnerabilities that affects IBM Db2 Genius HubIBM Db2 Genius Hub
- CVE-2026-108588Multiple vulnerabilities that affects IBM Db2 Genius HubIBM Db2 Genius Hub
- CVE-2026-108767Multiple vulnerabilities that affects IBM Db2 Genius HubIBM Db2 Genius Hub
- CVE-2026-108838Multiple vulnerabilities that affects IBM Db2 Genius HubIBM Db2 Genius Hub
- CVE-2026-108910Multiple vulnerabilities that affects IBM Db2 Genius HubIBM Db2 Genius Hub
- CVE-2026-110281Multiple vulnerabilities that affects IBM Db2 Genius HubIBM Db2 Genius Hub
- CVE-2026-110282Multiple vulnerabilities that affects IBM Db2 Genius HubIBM Db2 Genius Hub
- CVE-2026-110283Multiple vulnerabilities that affects IBM Db2 Genius HubIBM Db2 Genius Hub
- CVE-2026-116376Multiple vulnerabilities that affects IBM Db2 Genius HubIBM Db2 Genius Hub
- CVE-2026-115762draw.io: Prototype pollution in GraphML (mxGraphMlCodec)jgraph drawio
- CVE-2026-97373draw.io: Incomplete SSRF blocklist in `ProxyServlet` / `Utils.sanitizeUrl`: RFC 6598 CGNAT range `100.64.0.0/10` is not blocked ->…jgraph drawio
- CVE-2026-122140Trawl 1.5.0 before 1.10.0 SSRF via IPv4-mapped IPv6 MCP Policy Bypassgermondai trawl
- CVE-2026-122139blueprintUE Self-Hosted Edition before 4.3.3 Account Enumeration via Password Resetblueprintue-self-hosted-edition
- CVE-2026-122138BlueprintUE Self-Hosted Edition 4.2.0 before 4.3.4 Login Rate Limit Bypassblueprintue-self-hosted-edition
- CVE-2026-122137Powerlevel10k before 1.20.19 Insecure Temporary Directory via gitstatus Installerromkatv powerlevel10k · romkatv gitstatus
- CVE-2026-122136Powerlevel10k before 1.20.19 Symlink Following via Instant Prompt Temporary Fileromkatv powerlevel10k
- CVE-2026-122132go-chi chi 5.2.2 through 5.5.0 Open Redirect via RedirectSlashes Middlewarego-chi chi · github.com/go-chi/chi +4
- CVE-2026-122131Joi 17.13.6 before 17.13.9 and 18.2.5 before 18.3.1 Prototype Replacement via proto Language Keyhapijs joi · joi +1
- CVE-2026-122129CESNET ipfixcol2 2.7.1 before 2.9.0 Memory Exhaustion via TCP LZ4 DecoderCESNET ipfixcol2
- CVE-2025-71455vtenext before 25.02.2 Session Identifier Disclosure via Touch Web Servicevtenext
- CVE-2025-71454vtenext before 25.02.2 CSRF Protection Bypass via HTTP Method Tamperingvtenext
- CVE-2025-71453vtenext before 25.02.2 Reflected XSS via widgetInfoList in HomeWidgetBlockListvtenext
- CVE-2026-122009DataLinkDC Dinky flink_web Proxy Endpoint FlinkWebURITemplateProxyServlet.java FlinkWebURITemplateProxyServlet.getNewTargetUri server-side…DataLinkDC Dinky
- CVE-2026-12538IBM MQ Appliance is affected by an improper validation vulnerabilityIBM MQ Appliance
- CVE-2026-12550IBM MQ is affected by a denial of service vulnerabilityIBM MQ
- CVE-2026-14252IBM MQ is affected by a pasword disclosure vulnerability in the runmqccred utilityIBM MQ
- CVE-2026-113368Nexus Repository 3 - Group Repository Member Authorization BypassSonatype Nexus Repository
- CVE-2026-113369Nexus Repository 3 - Stored Cross-Site Scripting in OCI Attestations TabSonatype Nexus Repository
- CVE-2026-76806Solidtime: Path Traversal in Toggl ZIP Data Importer - arbitrary directory creation + filesystem existence oraclesolidtime-io solidtime
- CVE-2026-115474Zulip: Saving a draft DM to a user bypasses can_access_all_users_group permissionzulip
- CVE-2026-115574Zulip: Custom profile fields can be read by logged-out visitors in organization with web-public channelszulip
- CVE-2026-97701Zulip: Missing content-length limit on POST /messages/render allows denial-of-service via oversized requestszulip
- CVE-2026-63183OmniAuth: Host Header Injection Vulnerabilityomniauth
- CVE-2026-102345Zammad: Stored XSS in ticket article rendering in the new Vue-based interfacezammad
- CVE-2026-121929EmpireSoft EmpireCMS index.php cross site scriptingEmpireSoft EmpireCMS
- CVE-2026-122124On Yealink UVC40 E2 devices before 319.410.0.71, an attacker with short-term physical access can steal Wi‑Fi credentials via the USB…Yealink UVC40 E2
- CVE-2026-121928InfiniFlow RAGFlow Images API file_utils.py cross site scriptingInfiniFlow RAGFlow
- CVE-2026-122116Certain Yealink terminal devices before 2026-04-21 contain an improper access control vulnerability in the Wi-Fi 802.1X PEAP network…Yealink T3XW Series Phones · Yealink T4X Series Phones +11
- CVE-2026-121927InfiniFlow RAGFlow Seafile Connector seafile_connector.py _account_get server-side request forgeryInfiniFlow RAGFlow
- CVE-2026-122054BIG-HKSCS decoding hang on crafted inputThe GNU C Library glibc
- CVE-2026-121926yezhihao jt808-server Web Management API WebMvcConfig.addInterceptors missing authenticationyezhihao jt808-server
- CVE-2026-119748GetPaid WordPress Plugin < 2.8.63 Authorization Bypass via maybe_use_invoiceAyeCode Payment forms, Buy now buttons, and Invoicing Syste…
- CVE-2026-20241Cisco Identity Services Engine Authorization Bypass VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-76419Cisco Unified Communications Manager Cross-Site Scripting VulnerabilityCisco Unified Communications Manager
- CVE-2026-121967Coder before 2.29.22, 2.34.13, 2.35.10, 2.36.8, 2.37.5, and 2.38.1 AI Gateway Path Traversalcoder
- CVE-2026-121965Parse Server before 8.6.113 and 9.10.6-alpha.5 Prototype Pollution via Dot Notation Keyparse-community parse-server
- CVE-2026-91163Warpgate: Kubernetes listener discloses internal error text to an unauthenticated callerwarp-tech warpgate
- CVE-2026-91168Warpgate: Kubernetes authorization correlation can be reused by a recreated same-name accountwarp-tech warpgate
- CVE-2026-120421Reflected XSS via client window id in URL client window modeEclipse Foundation Eclipse Mojarra
- CVE-2026-100408Git for Windows: git-credential-wincred Erase Path Heap Overflowgit-for-windows git
- CVE-2026-100407Git for Windows: git-credential-wincred OAuth Store Heap Overflowgit-for-windows git
- CVE-2026-122008Oqtane Framework before 10.3.0 SSRF via File Upload From URLoqtane.framework
- CVE-2026-121008SQL::Abstract::Tree versions before 2.000001_04 for Perl allow cross-site scripting via unescaped SQL text and bind values in the html…SQL-Abstract
- CVE-2026-114627Web::Simple versions before 0.036 for Perl do not escape values interpolated into double-quoted strings in HTML::Tags outputWeb-Simple
- CVE-2026-121632Data::MuForm versions through 0.05 for Perl render attribute values and option labels into HTML without escapingData-MuForm
- CVE-2026-119776frr: ospf6d fails to enforce all OSPFv3 packets use IPv6 link-local addressesfrrouting
- CVE-2026-119745Sender WordPress Plugin < 2.11.3 Broken Access Control via admin_post_sender_debug_downloadSender – Newsletter, SMS and Email Marketing Automation for…
- CVE-2026-121993wePOS before 2.0.3 Missing Authorization via payment/process Endpointwedevs wePOS – Point Of Sale (POS) for WooCommerce & Dokan
- CVE-2026-121970Pay with Vipps and MobilePay for WooCommerce before 6.4.1 Webhook Signature Forgerywphostingdev Pay with Vipps and MobilePay for WooCommerce
- CVE-2026-121373Symfony: HtmlSanitizer MetaRefreshAttributeSanitizer Matches Only a Narrow Subset of the Browser Refresh Grammar (Incomplete Fix for…sensiolabs symfony/html-sanitizer
- CVE-2026-121146Information Disclosure Vulnerability in Tata Motors iRA and iRA.ev mobile applicationTata Motors iRA · Tata Motors iRA.ev
- CVE-2026-118516Symfony: Host Placeholders Can Match the Start of the Path in Compiled URL Matchers, Bypassing Path-Based Access Controlsensiolabs symfony/routing
- CVE-2026-121946zbateson mail-mime-parser before 3.0.9 and 4.x before 4.0.6 CRLF Header Injection via Message Builderszbateson mail-mime-parser
- CVE-2026-121944sngrep through 1.9.0 Infinite Loop DoS via Crafted NFLOG TLVirontec sngrep
- CVE-2026-121943Irontec sngrep through 1.9.0 Out-of-Bounds Stack Read via sip_check_packetirontec sngrep
- CVE-2026-121942ZBar through 0.23.95 Out-of-Bounds Read via _zbar_sq_decode() in sqcode.cmchehab zbar
- CVE-2026-121938langchain4j-aideepin before 3.31.0 IDOR via GET /character/{uuid}moyangzhan langchain4j-aideepin
- CVE-2026-121937loonflow before r3.2.3 IDOR via ticket_flow_history Endpointblackholll loonflow
- CVE-2026-121936easyVoice before 0.0.23 SSRF via openaiBaseUrl in TTS APIcosin2077 easyVoice
- CVE-2026-107479Integer truncation vulnerability in QTextCodec conversion functions impacts Qt FrameworkQt
- RUSTSEC-2026-0456Panic on an HEVC tile layout that does not match the active SPSheifer-hevc-dec
- RUSTSEC-2026-0458Memory exhaustion when parsing a crafted `iloc` boxheifer-isobmff
- RUSTSEC-2026-0460Panic on chroma QP offsets enabled with an empty offset listheifer-hevc-dec
- CVE-2026-121925Buffer overflow in SAML authentication post-back URL handling in libsnowflakeclient and Snowflake PHP PDO DriverSnowflake PHP PDO Driver · Snowflake Libsnowflakeclient
- CVE-2026-114456Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client driverssnowflake-connector-python · github.com/snowflakedb/gosn… +9
- CVE-2026-59267Apache OpenOffice: Heap Buffer Overflow in DXF LWPOLYLINE import could cause memory corruptionApache Software Foundation Apache OpenOffice
- CVE-2026-90632Apache OpenOffice: Local file inclusion via GStreamer pluginApache Software Foundation Apache OpenOffice
- CVE-2026-90631Apache OpenOffice: Remote document loaded without prompt, possibiy leaking environment variablesApache Software Foundation Apache OpenOffice
- CVE-2026-90627Apache OpenOffice: Local file inclusion via SQL provider and flat file database referencesApache Software Foundation Apache OpenOffice
- CVE-2026-59263Apache OpenOffice: Carefully crafted documents could display different data when opened with different programs, instead of being reported…Apache Software Foundation Apache OpenOffice
- CVE-2026-100235Apache ZooKeeper: ACL enforcement bypass allows unauthorized operations to commit after an ACL revocationApache Software Foundation org.apache.zookeeper:zookeeper
- CVE-2026-108500Apache ActiveMQ: LDAPAuthorizationMap allows authorization bypass via DN injectionApache Software Foundation Apache ActiveMQ
- CVE-2026-102704arbitrary read/write via grant copyXen
- CVE-2026-102703arbitrary read/write via grant copyXen
- CVE-2026-108946Apache ActiveMQ, ActiveMQ Broker: The broker does not verify user provided connection id matches connectionApache Software Foundation org.apache.activemq:apache-activ…
- CVE-2026-108949Apache ActiveMQ, ActiveMQ Broker: Repeated rejected temporary destination consumer requests can lead to broker OOMApache Software Foundation org.apache.activemq:activemq-bro…
- CVE-2026-111040Multiple vulnerabilities in Coupa’s Total Spend Management PlatformCoupa Total Spend Management Platform
- CVE-2026-111037Multiple vulnerabilities in Coupa’s Total Spend Management PlatformCoupa Total Spend Management Platform
- CVE-2026-93900Simple CAPTCHA with Cloudflare Turnstile <= 1.44.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributeselliotvs Simple CAPTCHA with Cloudflare Turnstile
- CVE-2026-110021Missing GSDX SignatureValue verificationPhoenix Contact PLCnext Engineer
- CVE-2026-95649IRISPowerscan Insufficient restriction of untrusted scripts allows arbitrary code executionI.R.I.S S.A. IRISPowerscan
- CVE-2026-114420LDAP wildcard injection exposes GINA recipient accountsSEPPmail AG SEPPmail Secure Email Gateway
- CVE-2026-19731Path Traversal in TÜBİTAK BİLGEM's İmzagerTÜBİTAK BİLGEM Software Technologies Research Institute İmz…
- CVE-2026-19721XXE in TÜBİTAK BİLGEM's İmzagerTÜBİTAK BİLGEM Software Technologies Research Institute İmz…
- CVE-2026-57775WordPress Simple Cloudflare Turnstile plugin <= 1.44.1 - Broken Authentication vulnerabilityRelyWP Simple Cloudflare Turnstile
- CVE-2026-110944Resource exhaustion vulnerability in HTTP request handling impacts Qt HTTP Server (QHttpServer)Qt Framework
- CVE-2026-87044Memory leak in the Mbed TLS crypto shim on failed cipher/AEAD operations leads to remotely triggered crypto denial of servicezephyrproject zephyr
- CVE-2026-87043sys_rand_get() silently returns an unwritten buffer when the entropy device is not readyzephyrproject zephyr
- CVE-2026-85036Bluetooth Classic AVDTP session reuse re-initializes a queued work item, corrupting the system work queuezephyrproject zephyr
- CVE-2026-118983VikWidgetsLoader < 1.12.3 - Contributor+ Stored XSS via Speakers and Cookies Policy BlocksVikWidgetsLoader
- CVE-2026-118783All-in-One Video Gallery < 5.0.0 - Contributor+ Stored XSS via Shortcode AttributeAll-in-One Video Gallery
- CVE-2026-118637Simple Download Monitor < 4.1.3 - Contributor+ Private Download Item Title and Description Disclosure via [sdm_show_download_info] ShortcodeSimple Download Monitor
- CVE-2026-118523EventPrime < 4.3.6.1 - Unauthenticated Pending Post Disclosure via Public Post Status OverrideEventPrime
- CVE-2026-118407Premium Packages < 7.3.1 - Subscriber+ Guest Order TakeoverPremium Packages
- CVE-2026-118404Premium Packages < 7.3.1 - Unauthenticated Cross-User Saved Cart Disclosure via IDORPremium Packages
- CVE-2026-118403Premium Packages < 7.3.1 - Unauthenticated Guest Order Status DisclosurePremium Packages
- CVE-2026-115426WPvivid Backup & Migration < 0.9.138 - Admin+ Path Traversal via Local Backup Directory SettingWPvivid — Backup, Migration & Staging
- CVE-2026-115262Duplicator < 5.1.0 - Subscriber+ SQLi via Charset and Collation Rewriter During RestoreDuplicator · duplicator-pro
- CVE-2026-115257WP Roster < 2.36 - Unauthenticated Roster Data ModificationWP Roster
- CVE-2026-115250Text Typing < 2.2.2 - Contributor+ Stored XSSText Typing
- CVE-2026-115243WPvivid Backup & Migration 0.9.117 - 0.9.136 - Admin+ Arbitrary File Upload via wpvivid_upload_import_filesWPvivid — Backup, Migration & Staging
- CVE-2026-115242WPvivid Backup & Migration < 0.9.137 - Admin+ Path Traversal via Staging Site PathWPvivid — Backup, Migration & Staging
- CVE-2026-115241WPvivid Backup & Migration < 0.9.137 - Admin+ Arbitrary Database Table Deletion via Snapshot IDWPvivid — Backup, Migration & Staging
- CVE-2026-114431Enable Media Replace < 4.2.3 - Author+ Stored XSS via SVG UploadEnable Media Replace
- CVE-2026-112244Duplicator 5.0.0 - 5.0.6 - Unauthenticated Full Path Disclosure via Installer Entry PointsDuplicator · duplicator-pro
- CVE-2026-112243Duplicator < 5.1.0 - Reflected XSS via 'logname' ParameterDuplicator · duplicator-pro
- CVE-2026-111962WP Remote Users Sync < 2.2.0 - Unauthenticated Sensitive Data Disclosure via Public User Export FileWP Remote Users Sync
- CVE-2026-111740Post Duplicator < 3.0.17 - Contributor+ Draft and Private Post Title DisclosurePost Duplicator
- CVE-2026-110964Essential Real Estate 4.4.3 - 5.3.4 - Subscriber+ Arbitrary Media Attachment Deletion via IDOREssential Real Estate
- CVE-2026-110692PowerPack Addons for Elementor 2.10.0 - 3.1.2 - Contributor+ SSRF via Charts Widget CSV ImportPowerPack Addons for Elementor: Widgets, Form Styler and Te…
- CVE-2026-108068FV Flowplayer Video Player 7.4.44.727 - 7.5.55.7212 - Contributor+ Bulk Video Record Disclosure and Modification via Migration WizardFV Flowplayer Video Player
- CVE-2026-108067FV Flowplayer Video Player < 7.5.56.7212 - Contributor+ Arbitrary Video and Meta Record Deletion, Video Modification and Meta Disclosure…FV Flowplayer Video Player
- CVE-2026-106649Kali Forms < 2.4.29 - Author+ Stored XSS via Button Click ActionKali Forms — Contact Form & Drag-and-Drop Builder
- CVE-2026-106000Booking Package < 1.7.34 - Unauthenticated Payment BypassBooking Package
- CVE-2026-105191WP ERP < 1.17.11 - Subscriber+ Sensitive Data Disclosure via Audit LogERP: Complete HR, Accounting & CRM Suite Built for WooComme…
- CVE-2026-104719CookieYes < 3.5.8 - Contributor+ Stored XSS via Cookie Category ScriptsCookieYes
- CVE-2026-101166Mollie Payments for WooCommerce < 8.2.0 - Unauthenticated Unpublished Product Purchase via mollie_paypal_create_orderMollie Payments for WooCommerce
- CVE-2026-101165Mollie Payments for WooCommerce < 8.2.0 - Unauthenticated Payment Surcharge Bypass via update_surcharge_order_payMollie Payments for WooCommerce
- CVE-2026-11753A vulnerability has been identified in armeria-saml versions prior to 1.41.1, where attacker-controlled RelayState is reflected into the…LY Armeria
- CVE-2026-105296Multiple Akeeba products lack the anti-CSRF check on some actions.Akeeba Backup for Joomla! · Akeeba Backup for WordPress +2
- CVE-2026-121618Linksys E5600 Factory Quality Control fqc.cgi information disclosureLinksys E5600
- CVE-2026-121616Linksys E5600 JSON Request mesh_login.cgi strcpy out-of-bounds writeLinksys E5600
- CVE-2026-110464Missing authorization in ASUS Armoury Crate allows a local attacker to write content into a specific file or registry location with Local…ASUS Armoury Crate
- CVE-2026-121610funadmin Frontend List Endpoint index selectList sql injectionfunadmin
- CVE-2026-121608Qihoo 360 D603-2/D600-2/D606-6 Timezone Push iscm on_push_message os command injectionQihoo 360 D603-2 · Qihoo 360 D600-2 +1