CVEs published November 6, 2026
466 CVEs were published on November 6, 2026: 46 critical, 150 high. 1 is now in CISA KEV. 4 early warnings were posted.
- Published
- 466
- Critical
- 46
- High
- 150
- Medium
- 211
- Low
- 43
- Unrated
- 16
- Now in CISA KEV
- 1
- Fix available
- 307
- Early warnings
- 4
Most affected products
- JetBrains IntelliJ IDEA
- 30
- HCL Software HCL AION
- 21
- JetBrains Datalore
- 17
- JetBrains YouTrack
- 16
- chartbrew
- 11
- freescout-help-desk freescout
- 11
- Red Hat build of Keycloak · Red Hat Single Sign-On
- 9
- github.com/canonical/lxd
- 8
- JetBrains Hub
- 7
- SonicWall SonicOS
- 7
Early warnings 4
- SZB-659381b7e7CISA adds SonicWall SonicOS SSLVPN flaw CVE-2026-19868 to KEV catalogSonicWall · GMS 9.5.2
- SZB-b323ce2f22OpenAI says its GPT-6 Cyber model found 81 unknown Firefox flawsMozilla · Firefox
- SZB-25aea6b559QNAP says hackers are exploiting Plex2Shell vulnerability chain on NAS devicesQNAP · Plex Media Server
- SZB-0f0221e743Microsoft Paint RCE flaw CVE-2026-83844 fixed via Store update, not Windows UpdateMicrosoft · Windows Paint
Critical 46
- CVE-2026-109469Entra Device Registration Elevation of Privilege VulnerabilityMicrosoft Entra Device Registration
- CVE-2026-59104UgCS server HCI authentication bypass with empty credentialsSPH Engineering UgCS
- CVE-2026-68935Chartbrew: SSRF to Internal Network via User-Controlled allowPrivateHost Flag on API Connectionschartbrew
- CVE-2026-86005Chartbrew: Unauthenticated BullMQ Admin Dashboard Exposure in Chartbrewchartbrew
- CVE-2026-85295Chartbrew: Full account takeover via JWTs accepted under default CB_SECRETchartbrew
- CVE-2026-54349Chartbrew SQL injection in dashboard filter substitutionchartbrew
- CVE-2026-102530JupyterLab Desktop: Cross-Site Scripting (XSS) leading to Remote Code Execution on Connect URLjupyterlab-desktop
- CVE-2026-86044JupyterLab Desktop: One-Click Jupyter Server Token Leak leading to Remote Code Executionjupyterlab-desktop
- CVE-2026-634392FAuth: Reverse Proxy Guard Trusts Client-Supplied Headers Without Proxy VerificationBubka 2FAuth
- CVE-2026-634382FAuth: Reverse Proxy Guard Auto-Creates Users With Admin Promotion From Unauthenticated Header ValueBubka 2FAuth
- CVE-2026-58490Tracecat: Unsigned SAML response accepted in Docker Compose SAML deployments due to empty signing defaultsTracecatHQ tracecat
- GHSA-47W9-6R3F-938GLXD has restricted project bypass leading to arbitrary command executiongithub.com/canonical/lxd
- GHSA-PJFF-C2WC-F6JMLXD has arbitrary file write on client due to trusted image hashgithub.com/canonical/lxd
- GHSA-FMC8-P6Q7-75CCLXD has argument injection in backup compression algorithm leading to AFW and ACEgithub.com/canonical/lxd
- GHSA-VGHH-5RFX-XHQ8LXD has arbitrary file read+write on host via rootfs/ symlink in malicious imagegithub.com/canonical/lxd
- CVE-2026-124040CivetWeb through 1.16 HTTP/2 Use-After-Free via Stale Pseudo-Header Statecivetweb
- GHSA-JPF8-86F3-WP38LXD has arbitrary file read+write on host via templates/ symlink in malicious imagegithub.com/canonical/lxd
- GHSA-9J25-MM2H-2F76LXD has arbitrary file write on host via `exec-output` symlink in crafted imagegithub.com/canonical/lxd
- CVE-2026-119923Heap-based Buffer Overflow in Babelfish for PostgreSQL TDS Prelogin ParserAWS babelfish-for-postgresql · Amazon Aurora PostgreSQL wit…
- CVE-2026-84473CVE-2026-84473Kiteworks ownCloud
- CVE-2026-71495Wanderer: SSRF Vulnerability in /api/v1/trail/download - Unvalidated URL Leads to Internal Network Accessopen-wanderer wanderer
- CVE-2026-122193OS command injection in the example SSM documents in Trusted Remote Execution (REX)AWS trusted-remote-execution
- CVE-2026-123832In JetBrains CLion before 2026.2 code execution was possible in Safe Mode via JSON compilation databaseJetBrains CLion
- CVE-2026-123831In JetBrains CLion before 2026.2, 2026.1.4 code execution was possible in Safe Mode via Meson project settingsJetBrains CLion
- CVE-2026-90436Apache Axis 1.x (EOL): unauthenticated remote class instantiation via SOAP fault exceptionNameApache Software Foundation axis:axis · Apache Software F… +1
Show all 46 entriesShow fewer entries
- CVE-2026-123488Craft CMS 4.0.0 before 4.18.9 SQL Injection via Element Search Endpointcraftcms cms
- CVE-2026-59105Universal sysadmin credential vulnerability in JumisJumis Pro SIA Jumis
- CVE-2026-76168Apache James: ManageSieve file implementation cross-user path traversalApache Software Foundation Apache James
- CVE-2026-74756Apache James: WebAdmin exposed without authentication on official Docker defaultApache Software Foundation Apache James
- CVE-2026-76171Apache James: SSRF filter bypass in the JMAP PushSubscription web-push clientApache Software Foundation Apache James
- CVE-2026-107622BuddyForms <= 2.10.5 - Unauthenticated Privilege Escalation to Form-Type Confusion via 'bf_post_type' Parameterthemekraft BuddyForms
- CVE-2026-114630ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.8 - Unauthenticated Arbitrary File Deletion via 'ticket_attachment_path'…elextensions ELEX WordPress HelpDesk & Customer Ticketing S…
- CVE-2026-123294In JetBrains Hub before 2026.2.52556 privilege escalation was possible by changing email authentication details during the verification flowJetBrains Hub
- CVE-2026-123279In JetBrains Datalore before 2026.4 code execution was possible in a notebook's computation by view-only collaboratorsJetBrains Datalore
- CVE-2026-119516WordPress Radius Booking — Booking Calendar for Appointments & Services plugin <= 1.0.20 - PHP Object Injection vulnerabilityMamunur Rashid Radius Booking — Booking Calendar for Appoin…
- CVE-2026-120844WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.3 - Privilege Escalation vulnerabilityminiOrange OAuth Single Sign On – SSO
- CVE-2026-118423WP Libre Form 1.5.0.1 - Unauthenticated RCE via Arbitrary File UploadWP Libre Form
- CVE-2026-88800MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Unauthenticated Arbitrary Role DeletionMDJM Event Management · Mobile Events Manager
- CVE-2026-83493Distributed-workloads: github actions pinned by mutable tag/branch, including third-party snyk/actions/setup@masterRed Hat OpenShift AI
- CVE-2026-113615GS JWT Authentication <= 1.0.0 - Unauthenticated Privilege Escalation via SQLiGS JWT Authentication for WP REST API
- CVE-2026-116533Static Snapshot <= 0.2.1 - Unauthenticated RCE via 'name' ParameterStatic Snapshot
- CVE-2026-115230WHIZZ <= 1.1.8 - Unauthenticated Arbitrary User Password ResetWHIZZ
- CVE-2026-113584Real Estate Website Builder <= 1.4.3 - Unauthenticated Account Takeover via User Email Updateplacester
- CVE-2026-110955Wurdey <= 1.0.0 - Unauthenticated Administrator Authentication BypassWurdey
- CVE-2026-63774Subnet Solutions PowerSYSTEM Center SQL InjectionSubnet Solutions PowerSYSTEM Center
- CVE-2026-63017Subnet Solutions PowerSYSTEM Center Incorrect AuthorizationSubnet Solutions PowerSYSTEM Center
High 150
- CVE-2026-50240Pipelines-as-code: openshift-pipelines-operator-rh: pipelines-as-code: repository users can trigger namespace edit-equivalent execution…pipelines-as-code · Builds for Red Hat OpenShift +4
- CVE-2026-68933Chartbrew: Unauthenticated Brute Force of Password-Protected Dashboards Due to Missing Rate Limit and Plaintext Password Storagechartbrew
- CVE-2026-85736Chartbrew: Arbitrary file deletion as root via data connection SSL/SSH pathschartbrew
- CVE-2026-85726Chartbrew: Blind NoSQL injection via date variable in embedded chartchartbrew
- CVE-2026-85712Chartbrew: Cross-tenant project takeover via body.team_id in /project routeschartbrew
- CVE-2026-85708Chartbrew: Private chart data disclosure via forgeable CB_SECRET share tokenschartbrew
- CVE-2026-54589Chartbrew: SSRF guard bypass via IPv6 NAT64/DNS64 addresses in API Data Connection outbound policy (validateOutboundUrl)chartbrew
- CVE-2026-71397Unbounded request body accumulation on streaming RPCs causes memory exhaustion in grpc_serverelixir-grpc grpc_server · grpc_server
- CVE-2026-124078plist.js before 5.0.1 Uncontrolled Resource Consumption via Binary ParserTooTallNate plist.js
- CVE-2026-102657esm.sh: web.NewHandler allows arbitrary file read via encoded dot-segment path traversalesm-dev esm.sh · github.com/esm-dev/esm.sh/web
- CVE-2026-102344Lavish: DNS rebinding allows any website to read arbitrary local files and inject prompts into the AI agent via the unauthenticated local…kunchenguid lavish-axi
- CVE-2026-65960Tetragon: Unauthenticated Tetragon gRPC admin API accessible from hostNetwork podscilium tetragon
- CVE-2026-123974pytorch/serve: Local privilege escalation through insecure temporary pathPyTorch TorchServe
- GHSA-7MR3-28H5-M5VXLXD has project restriction bypass for custom volume copy across projectsgithub.com/canonical/lxd
- GHSA-QX75-2P3R-PWM5LXD has project restriction bypass in instance copy across projectsgithub.com/canonical/lxd
- CVE-2026-33050GeoNode: OS command injection via uploaded file layer namegeonode
- CVE-2026-124027ChatWiki before 2.10.0 Unauthenticated Document Disclosure via getLibRawFileOnePagezhimaAi chatwiki
- CVE-2026-19868An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate…SonicWall SonicOS
- CVE-2026-123998Hisense VIDAA Smart TV MQTT Broker Authentication BypassHisense VIDAA
- CVE-2026-123997Hisense VIDAA Smart TV Unauthenticated DoS via SetAVTransportURIHisense VIDAA
- CVE-2026-82308A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS SSL-VPN service, which could potentially…SonicWall SonicOS
- CVE-2026-123993Hisense VIDAA Smart TV Unauthenticated WebDriver Remote AccessHisense VIDAA
- CVE-2026-107154A session validation vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially…SonicWall SonicOS
- CVE-2026-107155A permissive cross-domain policy vulnerability has been identified in the SonicOS management interface, which in specific conditions could…SonicWall SonicOS
- CVE-2026-119924Out-of-Bounds Read in Babelfish for PostgreSQL TDS RPC Procedure-Name ParserAWS babelfish-for-postgresql · Amazon Aurora PostgreSQL wit…
Show all 150 entriesShow fewer entries
- CVE-2026-90975CVE-2026-90975Realtek RtUsbA64.sys
- CVE-2026-123356GROBID: Unauthenticated `/api/modelTraining` Endpoint Allows Unbounded Thread Pool Creation (DoS)grobidOrg grobid
- CVE-2026-100081xen-netback: defer xenvif_mcast_addr_list_free()Linux
- CVE-2020-9709Adobe Photoshop versions Photoshop CC 2019, and Photoshop 2020 have a security bypass vulnerability.Adobe Photoshop
- CVE-2019-16447Adobe Illustrator CC versions 23.1 and earlier have a binary planting vulnerability.Adobe Illustrator CC
- CVE-2026-62346Wanderer: Stored XSS via waypoint.name and waypoint.icon in Elevation Profile innerHTMLopen-wanderer wanderer
- CVE-2026-62345Stored XSS via Unsanitized waypoint.icon in Map Marker (insertAdjacentHTML)open-wanderer wanderer
- CVE-2026-62344Wanderer: Unauthenticated Access to Private Trails and Comments via ActivityPub Endpointsopen-wanderer wanderer
- CVE-2026-89017Skyline DataMiner BrokerGateway Embedded API Key Authentication BypassSkyline Communications DataMiner
- CVE-2026-119758ERPNext OCR 1.1.1 Path Traversal and SSRF via read_documentMonogramm erpnext_ocr
- CVE-2026-102650Nuxt Content: Unauthenticated SQLite Function DoS via Content Query APInuxt content · @nuxt/content
- CVE-2026-102359Kroki: TikZ Secure Mode Local File Read via LaTeX File I/O Primitivesyuzutech kroki
- CVE-2026-118670OHIF Viewers: DOM-Based Cross Site Scripting (XSS) through MIME type of documentOHIF Viewers · @ohif/extension-dicom-pdf
- CVE-2026-85742FreeScout: Conditional stored admin XSS via failed-job detailsfreescout-help-desk freescout
- CVE-2026-103985FreeScout: a restricted agent can lift their own admin-imposed "see only assigned conversations" restriction via profile savefreescout-help-desk freescout
- CVE-2026-123962In FreedomBox before 26.15, unprivileged user accounts can read/write files for which they lack permissions by setting the authorized_keys…Debian FreedomBox
- CVE-2026-85743FreeScout: Server-side request forgery via incomplete outbound host validation and unguarded download sinksfreescout-help-desk freescout
- CVE-2026-62856FreeScout: Cross-User Notification Data Disclosure via LIKE Wildcard Injection in Polycast Channel Queryfreescout-help-desk freescout
- CVE-2026-62854FreeScout: Stored XSS in mailbox signature via same-origin JS uploadfreescout-help-desk freescout
- CVE-2026-104656Cross-site Scripting in Progress Telerik Fiddler EverywhereProgress Software Progress® Telerik® Fiddler® Everywhere
- CVE-2026-104657Missing Integrity Verification in Progress Software Fiddler Download & Setup SkillProgress Software Fiddler Download & Setup Skill
- CVE-2026-118515Symfony: The Serializer Builds UploadedFile Objects From Request Data, Letting a Client Point an Upload at Any Server Filesensiolabs symfony/serializer
- CVE-2026-123859SQL Injection via unescaped DataFrame column names in Snowflake Connector for Python and Snowflake Connector for Python (Universal Core)snowflake-connector-python
- CVE-2026-123855In JetBrains Toolbox App before 3.6.1 command injection was possible via enterprise configuration URLsJetBrains Toolbox App
- CVE-2026-123853In JetBrains IntelliJ IDEA before 2026.3, 2026.2.2 code execution was possible in Safe Mode via project-controlled JVM options of the…JetBrains IntelliJ IDEA
- CVE-2026-123852In JetBrains Junie GitHub Action before 1.8.0 code execution with workflow credentials was possible via fork updatesJetBrains Junie GitHub Action
- CVE-2026-123849In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in untrusted projects via the Terraform File WatchersJetBrains IntelliJ IDEA
- CVE-2026-123848In JetBrains IntelliJ IDEA before 2026.3 host name verification was missing for server TLS certificatesJetBrains IntelliJ IDEA
- CVE-2026-123842In JetBrains IntelliJ IDEA before 2026.3 arbitrary file write was possible via symlinks when extracting plugin archivesJetBrains IntelliJ IDEA
- CVE-2026-123841In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via symlinks in an imported settings archiveJetBrains IntelliJ IDEA
- CVE-2026-123838In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in Safe Mode via UI Designer form fileJetBrains IntelliJ IDEA
- CVE-2026-123837In JetBrains IntelliJ IDEA before 2026.3, 2026.2.1 command injection was possible in untrusted projects via Tomcat run configurations on WSLJetBrains IntelliJ IDEA
- CVE-2026-123836In JetBrains Datalore before 2026.4 workspace collaborators could obtain the owner's SSH private key via Git backupJetBrains Datalore
- CVE-2026-123834In JetBrains Datalore before 2026.4 improper scope validation in database tasks allowed using another workspace's service accountJetBrains Datalore
- CVE-2026-121623Symfony: DataUriNormalizer Opens Data URIs With a Non-Lowercase Scheme as Local Files, Letting a Client Read Any Server Filesensiolabs symfony/serializer
- CVE-2026-80301Avast sandbox escape via unpreserved COM pathway through Task SchedulerGen Digital Avast Antivirus, Avast One, Avast Premium Se… +1
- CVE-2026-80302Avast sandbox escape via arbitrary file write in virtualized environmentGen Digital Avast Antivirus, Avast One, Avast Premium Se… +1
- CVE-2026-58141Dify < 1.15.0 SSRF Protection Bypass via Remote-Files Endpointslanggenius dify
- CVE-2026-123792Symfony: Exponential and Quadratic Parse Times in the YAML Parser Let a Single Document Hold a Processsensiolabs symfony/yaml
- CVE-2026-123623Grida through 0.0.24 Missing Authorization in Forms File-Preview APIgridaco grida
- CVE-2026-123786Agenta before 0.122.5 SSRF via Workflow Revision URL Leaks Secret TokenAgenta-AI agenta
- CVE-2026-123784Fluxbox through 1.3.7 OS Command Injection via Style Background Valuesfluxbox
- CVE-2026-123783Skyvern through 1.0.56 Script Sandbox Bypass via types.CodeType BytecodeSkyvern-AI skyvern
- CVE-2026-123621Usermin through 2.570 Path Traversal File Write via detachall.cgiwebmin usermin
- CVE-2026-123620Usermin through 2.570 OS Command Injection via Read Mail IMAP Folder Deletionwebmin usermin
- CVE-2026-123618ABP Framework before 10.7.1 Authentication Bypass via External Login Providerabpframework abp
- CVE-2026-123491Craft CMS 4.0.0 before 4.18.9 Unauthenticated SQL Injection via GraphQL Eager-Load Selectcraftcms cms
- CVE-2026-123490Craft CMS before 5.11.2 Privilege Escalation via getOwners() Sandbox Bypasscraftcms cms
- CVE-2026-123489Craft CMS 4.0.0 before 4.18.9 Blind SQL Injection via getNext/getPrev Criteriacraftcms cms
- CVE-2026-123487Parse Server 9.0.0 before 9.10.7-alpha.1 ReDoS via Email Validation Regexparse-community parse-server
- CVE-2026-123485Ground Station 0.6.0 before 0.8.20 Credential Disclosure via get-orbital-sourcessgoudelis ground-station
- CVE-2026-112341Wazuh before 4.14.9 SQL Injection via WazuhDBBackend _substitute_paramswazuh
- CVE-2026-112340Wazuh 4.9.0 before 4.14.9 Authorization Header Override via /api/requestwazuh-dashboard-plugins
- CVE-2026-112339Wazuh 3.9.0 before 4.14.9 Missing TLS Hostname Verification in fluent-forward Modulewazuh
- CVE-2026-112338Wazuh from 4.3.0 before 4.14.9 SSRF via GitHub Module Link Paginationwazuh
- CVE-2026-112336Wazuh Manager 3.0.0 before 4.14.9 Memory Leak DoS via JSON Decoderwazuh
- CVE-2026-53980Charmbracelet Wish 2.0.5 Path Traversal via git Middlewarecharmbracelet wish
- CVE-2026-119170Regression in FIPS enforcement of hash algorithms affecting only Python 3.14.10Python Software Foundation CPython
- CVE-2026-87045NULL pointer dereference in the Zephyr HTTP/2 server when a header block is completed by a CONTINUATION framezephyrproject zephyr
- CVE-2026-106019Insertion of sensitive information into log file vulnerability in Johnson Controls C-CURE 9000, Victor allows Use of Known Operating…Johnson Controls C-CURE 9000, Victor
- CVE-2026-64894Inclusion of functionality from untrusted control sphere vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows…Johnson Controls EasyIO Neo IOManager and Tools Installer
- CVE-2026-106022Cleartext storage of sensitive information in memory vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows…Johnson Controls EasyIO Neo IOManager and Tools Installer
- CVE-2026-106020Improper neutralization of input used for LLM prompting vulnerability in Johnson Controls EasyIO Neo IO Manager and Tools Installer allows…Johnson Controls EasyIO Neo IO Manager and Tools Installer
- CVE-2026-115431WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.6 - Broken Access Control vulnerabilityWP Swings Upsell Order Bump Offer for WooCommerce
- CVE-2026-109883WordPress Elementor Website Builder plugin <= 4.3.5 - Cross Site Scripting (XSS) vulnerabilityElementor Website Builder
- CVE-2026-109884WordPress Elementor Website Builder plugin <= 4.3.5 - Cross Site Scripting (XSS) vulnerabilityElementor Website Builder
- CVE-2026-85111Apache James: Denial of service upon MIME parsingApache Software Foundation Apache James · Apache Software F…
- CVE-2026-85108Apache James MIME4J: Denial of service due to Allocation of Resources Without Limits or ThrottlingApache Software Foundation org.apache.james:apache-mime4j-c…
- CVE-2026-123655Moodle: missing access checks on h5p content filesmoodle
- CVE-2026-49939Apache James: Negative IMAP ACL administer authorization bypass through JMAP protocolApache Software Foundation Apache James
- CVE-2026-92895Live2DWebCanvas <= 2.2.1 - Unauthenticated Arbitrary File Upload via 'modelApi' Parameterjiangweifang Live2DWebCanvas
- CVE-2026-116624Advanced Members for ACF <= 1.3.0 - Authenticated (Subscriber+) Privilege Escalation via Account Change-Password Formdanbilabs Advanced Members for ACF
- CVE-2026-104010WPSyncSheets For Contact Form 7 <= 1.8.0 - Unauthenticated PHP Object Injection to Remote Code Execution via Untrusted CF7 Submission…creativewerkdesigns WPSyncSheets For Contact Form 7 – CF7 G…
- CVE-2026-103479Pubjet | پابجت <= 5.4.8 - Authenticated (Subscriber+) Privilege Escalation to 'check-token' AJAX ActionPubjet | پابجت
- CVE-2026-115701Cowboy HTTP/1.1 Unbounded Buffering of Pipelined Data During Request Handling Enables Memory Exhaustionninenines cowboy · cowboy
- CVE-2026-113431Unbounded decoded HTTP/2 header-list size in cowlib cow_http2_machine enables HPACK amplification memory exhaustionninenines cowlib · cowlib
- CVE-2026-123327In JetBrains YouTrack before 2026.2.19562 missing authorization in the saved query endpoint allowed disclosure of issue descriptionsJetBrains YouTrack
- CVE-2026-123326In JetBrains YouTrack before 2026.2.19197 incorrect authorisation in the scripts debugger allowed workflow script disclosure and suspensionJetBrains YouTrack
- CVE-2026-123325In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 inclusion of untrusted remote code was possible via the plugin…JetBrains YouTrack
- CVE-2026-123324In JetBrains YouTrack before 2026.2.19562 information disclosure via shared mailbox message history was possibleJetBrains YouTrack
- CVE-2026-123323In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 improper URL validation in the app widget host allowed apps to send…JetBrains YouTrack
- CVE-2026-123321In JetBrains WebStorm before 2026.3, 2026.2.3 code execution via Grunt and Gulp task loading was possible in untrusted projectsJetBrains WebStorm
- CVE-2026-123317In JetBrains Ktor before 3.6.1 session forgery was possible via tampered encrypted session cookiesJetBrains Ktor
- CVE-2026-123315In JetBrains Junie CLI before 26.8.24 command execution was possible via the Allow Similar Commands optionJetBrains Junie CLI
- CVE-2026-123306In JetBrains IntelliJ IDEA before 2026.3 improper checks allowed server certificates to be added to the trust store during headless runsJetBrains IntelliJ IDEA
- CVE-2026-123305In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via unpacking Dev Container archives from a remote hostJetBrains IntelliJ IDEA
- CVE-2026-123304In JetBrains IntelliJ IDEA before 2026.3 code execution in untrusted projects via a configured ShellCheck pathJetBrains IntelliJ IDEA
- CVE-2026-123302In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4, 2026.1.5.1, 2025.3.6.2 code execution was possible in untrusted projects via script…JetBrains IntelliJ IDEA
- CVE-2026-123301In JetBrains IntelliJ IDEA before 2026.3 dOM-based XSS in the OpenAPI preview error view was possibleJetBrains IntelliJ IDEA
- CVE-2026-123296In JetBrains Hub before 2026.2.52519 privilege escalation via forged email verification was possibleJetBrains Hub
- CVE-2026-123295In JetBrains Hub before 2026.2.52519 enforced two-factor authentication could be disabled via the profile update endpointJetBrains Hub
- CVE-2026-123293In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 code execution was possible in untrusted projects via the Terraform tool path settingJetBrains IntelliJ IDEA
- CVE-2026-123282In JetBrains Datalore before 2026.4 missing expiration validation of account tokens allowed a new authenticated sessionJetBrains Datalore
- CVE-2026-123281In JetBrains Datalore before 2026.4 notebook code could execute commands in the sidecar container via the mount brokerJetBrains Datalore
- CVE-2026-123280In JetBrains Datalore before 2026.2.4 unauthenticated users could execute code via published interactive reportsJetBrains Datalore
- CVE-2026-123276In JetBrains CLion before 2026.3, 2026.2.4.1 code execution was possible in Safe Mode via a crafted GDB server debug profileJetBrains CLion
- CVE-2026-33379Dashboard snapshot permission bypassGrafana OSS · Grafana Enterprise
- CVE-2026-116592undici vulnerable to cache poisoning and cross-user disclosure via intermediate redirect hopsundici
- CVE-2026-110776MDTF <= 1.4.1 - Unauthenticated Stored Cross-Site Scripting via 'vars' Parameterrealmag777 MDTF – Meta Data and Taxonomies Filter
- CVE-2026-87964Product Feed Manager for WooCommerce <= 8.0.26 - Authenticated (Shop Manager+) PHP Code Injection via eval() via 'feedConfigCustom2'…wahid0003 Product Feed Manager for WooCommerce – CTX Feed –…
- CVE-2026-123087SQL injection in Atmira’s SIRECAtmira SIREC
- CVE-2026-110291Graphina <= 3.1.13 - Unauthenticated Stored Cross-Site Scripting via Tree Chart Widget Settingsiqonicdesign Graphina – Charts and Graphs For Elementor
- CVE-2026-19877Brute-forceable image-share link password in INFINITT ULiteINFINITT Healthcare INFINITT ULite
- CVE-2026-39744WordPress WCFM Membership plugin <= 2.12.0 - Cross Site Scripting (XSS) vulnerabilityWC Lovers WCFM Membership
- CVE-2026-119488WordPress Pie Register plugin <= 3.8.4.15 - Cross Site Scripting (XSS) vulnerabilityShamim Rajani Pie Register
- CVE-2026-119499WordPress FloristPress plugin <= 7.8.4 - Sensitive Data Exposure vulnerabilityBAKKBONE Australia FloristPress
- CVE-2026-121006HTTP::Body versions before 1.24_02 for Perl parse the trailer in quadratic timeHTTP-Body
- CVE-2026-121824A vulnerability has been identified in armeria versions prior to 1.43.0, where processing malformed Thrift messages can cause excessive…LY Armeria
- CVE-2026-121823A vulnerability has been identified in armeria versions prior to 1.43.0, where inconsistent request path normalization can allow…LY Armeria
- CVE-2026-121820A vulnerability has been identified in armeria-saml versions prior to 1.43.0, where the HTTP-Redirect binding decoder decompresses…LY Armeria
- CVE-2026-88801MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Subscriber+ Stored XSS via Role CreationMDJM Event Management · Mobile Events Manager
- CVE-2026-88799MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Subscriber+ Account Takeover via IDORMDJM Event Management · Mobile Events Manager
- CVE-2026-115673Anti-Spam by CleanTalk < 6.91 - Unauthenticated Stored XSS via Comment Author EmailAnti-Spam, Spam FireWall by CleanTalk
- CVE-2026-110813Advanced Custom Fields (ACF®) < 6.8.11 - Unauthenticated Stored XSS via HTML Attribute Name InjectionAdvanced Custom Fields
- CVE-2026-87784Cool Media Filter <= 1.0.1 - Subscriber+ Privilege Escalation via role_permissionCool Media Filter
- CVE-2026-86606iubenda < 3.13.7 - Unauthenticated Stored XSS via Cookie Block HTML Parseriubenda | All-in-one Compliance for GDPR / CCPA Cookie Cons…
- CVE-2026-120408All-in-One Video Gallery < 5.1.0 - Subscriber+ Stored XSS via 'image' Post MetaAll-in-One Video Gallery
- CVE-2026-118045Ever Accounting < 2.3.3 - Accounting Manager+ Arbitrary File Deletion via CSV ImportEver Accounting
- CVE-2026-110532Mail Mage <= 0.0.25 - Unauthenticated SQLi via 'ewp_unsubscribe' ParameterMail Mage
- CVE-2026-110525MCB Stats <= 1.0.0 - Unauthenticated Stored XSS via User-AgentMCB
- CVE-2026-119432Foxit Workspace Stored XSS in shared artifactsFoxit Software Foxit Workspace
- CVE-2026-119431Server-Side Request Forgery in Foxit Workspace File UploadFoxit Software Foxit Workspace
- CVE-2026-119433Server-Side Request Forgery in Foxit Workspace PDF ExportFoxit Software Foxit Workspace
- CVE-2026-77299Regexp2: Unbounded memory amplification via large `{m}` quantifier on a zero-width subexpressiondlclark regexp2
- CVE-2025-71458FTS3 Web Monitoring 3.12.0 through 3.13.2 and 3.14.0 SQL Injection via /linkinfocern-fts fts-monitoring
Medium, low and unrated 270
- CVE-2026-71881Cross-site scripting in Integrated Publishing ToolkitGBIF Integrated Publishing Toolkit
- CVE-2026-118786NXP MCUXpresso SDK rpmsg-lite TZM Example before 26.06.01-lts Secure Memory Disclosure via NSC Veneer FunctionsNXP MCUXpresso SDK
- CVE-2026-118785NXP MCUXpresso SDK TrustZone-M Examples before 26.06.01-lts Secure Memory Disclosure via NSC Veneer FunctionsNXP MCUXpresso SDK
- CVE-2026-27356WordPress MC4WP plugin <= 4.14.1 - Broken Access Control vulnerabilityibericode MC4WP
- CVE-2026-120845WordPress Smush Image Compression and Optimization plugin <= 4.3.5 - Cross Site Scripting (XSS) vulnerabilityWPMU DEV Smush Image Compression and Optimization
- CVE-2026-123471WordPress myCred plugin <= 4.0.2 - Content Injection vulnerabilitymyCred
- CVE-2026-120851WordPress PublishPress Revisions plugin <= 4.2.0 - Broken Access Control vulnerabilityPublishPress Revisions
- CVE-2026-119519WordPress Royal Elementor Addons plugin <= 1.7.1068 - Broken Access Control vulnerabilityWProyal Royal Elementor Addons
- CVE-2026-122670WordPress Polylang plugin <= 3.9 - Broken Access Control vulnerabilityWP SYNTEX Polylang
- CVE-2026-123791OpenBMB Internet of Agents Agent Registry milvus_utils.py _primary_field_query data query logic injectionOpenBMB Internet of Agents
- CVE-2026-103022Urwid: handle_short_request() crashes on non-ASCII POST body (UnicodeEncodeError DoS)urwid
- CVE-2026-94619FileGator: Missing authorization in POST /upload allows cross-user read and deletion of temporary filesfilegator · filegator/filegator
- CVE-2026-94618FileGator: Missing authorization in GET /batchdownload allows cross-user retrieval of another user's archivefilegator · filegator/filegator
- CVE-2026-119800Ryot: Cross-tenant collection read via `collectionContents`IgnisDa ryot
- CVE-2026-77442Ryot: `createOrUpdateUserIntegration` trusts a client-supplied `integrationId` with no ownership check, letting any user hijack/overwrite…IgnisDa ryot
- CVE-2026-104267Botan: scrypt V-buffer heap overflow on 32-bit from constructor-accepted parametersrandombit botan
- CVE-2026-48057Botan: directoryName nameConstraint bypass via multi-AVA RDN flattening in matches_dnrandombit botan
- CVE-2026-47738liboqs: Uninitialized function-pointer dereference in OQS_KEM_encaps_derand for NTRU KEMsopen-quantum-safe liboqs
- CVE-2026-44519liboqs: Missing value barrier in FO implicit rejection path (FrodoKEM, NTRU, and others)open-quantum-safe liboqs
- CVE-2026-104254liboqs: Heap out-of-bounds read in LMS/HSS signature verification via unvalidated signature length (hss_verify_inc.c:215)open-quantum-safe liboqs
- CVE-2026-69128Chartbrew: AI orchestrator run_query SQL blocklist bypass enables arbitrary file read on connected PostgreSQL (quoted-identifier +…chartbrew
- CVE-2026-123788chenyme grok2api STT Billing voice_ws_handler.go behavioral workflowchenyme grok2api
- CVE-2026-123787nexmoe VidBee Local HTTP Service local-api.ts information disclosurenexmoe VidBee
- CVE-2026-71863SecureDrop: Onion Service client auth credentials copied to Monitor Serverfreedomofpress securedrop
- CVE-2026-102610fast-agent: `fast-agent serve` binds HTTP to 0.0.0.0 with no authentication by default; with --shell this is unauthenticated remote…evalstate fast-agent · fast-agent-mcp
Show all 270 entriesShow fewer entries
- CVE-2025-55002JupyterLab Desktop: TCC Bypass via Misconfigured Node Fusesjupyterlab-desktop
- CVE-2025-54991JupyterLab Desktop: TCC Bypass via Insecure Entitlements (macOS)jupyterlab-desktop
- CVE-2026-85737Velociraptor: Low-priv analyst reads arbitrary server files via ungated sql() VQL pluginVelocidex velociraptor · www.velocidex.com/golang/velocirap…
- CVE-2026-634402FAuth: Authenticated SSRF via DNS rebinding in the otpauth image= icon fetch (validate-then-fetch TOCTOU)Bubka 2FAuth
- CVE-2026-634412FAuth: SSRF guard misses IPv6 NAT64 prefixes, allowing image fetch to reach internal/metadata targetsBubka 2FAuth
- CVE-2026-634372FAuth: Missing Authorization on Share Recipients Endpoint Allows Cross-User Account EnumerationBubka 2FAuth
- CVE-2026-59171JSON-java: JSONTokener Unbounded Numeric String Resource-Exhaustion DoSstleary JSON-java · org.json:json
- CVE-2026-63663CloudBeaver: Path Traversal in updateResultsDataBatch Allows Unauthorized Server File Stream Accesscloudbeaver
- CVE-2026-63664CloudBeaver: Authorization Bypass (BFLA) - Data Export Restriction Bypasscloudbeaver
- CVE-2026-55449CloudBeaver: Path Traversal in Resource Manager getProjectPath allows directory enumeration outside shared-projects sandboxcloudbeaver
- CVE-2026-55649GeoNode has Stored XSS in Documents metadata abstract fieldgeonode
- CVE-2026-46429GeoNode: Unrestricted File Uploadgeonode
- CVE-2026-109683UPnP Newline Injection Vulnerability in TP-Link Archer BE805TP-Link Systems Archer BE805
- CVE-2026-124039Gitleaks through 8.30.1 World-Readable Report Files via --report-pathgitleaks
- CVE-2026-124031GPAC through 26.07.0 Type Confusion via drawable_get_aspect_2d_mpeg4gpac
- CVE-2026-124030GPAC through 26.07.0 Type Confusion via gf_sg_command_apply XMT Field-Replacegpac
- CVE-2026-124029Kopia through 0.23.1 Path Traversal in Snapshot Restore via Directory Entry Nameskopia
- CVE-2026-124028mistral.rs before 0.9.5 Tool Call Injection via mistralrs-core Output ParsersEricLBuehler mistral.rs
- CVE-2026-124026Bar Assistant 6.0.0-rc1 before 6.11.0 Incorrect Authorization via Cocktail Copykarlomikus bar-assistant
- CVE-2026-124025Faveo Helpdesk through 2.0.3 Cross-Department Ticket Disclosure via /ticket/printfaveosuite faveo-helpdesk
- CVE-2026-19703A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions could potentially…SonicWall SonicOS
- CVE-2026-77709A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in…SonicWall SonicOS
- CVE-2026-77708A pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in…SonicWall SonicOS
- CVE-2026-123996Hisense VIDAA Smart TV UPnP/DLNA Missing AuthenticationHisense VIDAA
- CVE-2026-123995Hisense VIDAA Smart TV SSRF via SetAVTransportURI CurrentURIHisense VIDAA
- CVE-2026-123994Hisense VIDAA Smart TV DIAL Service Unauthenticated AccessHisense VIDAA
- CVE-2026-123357GROBID is vulnerable to OS command injection through crafted PDF filenamesgrobidOrg grobid
- CVE-2026-122113CVE-2026-122113Realtek RtUsbA64.sys
- CVE-2026-108262DDEV incomplete tar symlink traversal fix allows host file overwrite - Incomplete fix of CVE-2026-32885ddev · github.com/ddev/ddev
- CVE-2026-100082xen-blkback: Avoid UAF when reading I/O statisticsLinux
- CVE-2026-100080xen-netback: Fix UAF when reading statistics dataLinux
- CVE-2026-123976EDFbrowser before 2.16 Out-of-Bounds Write via check_edf_file() Annotation SignalsTeunis van Beelen EDFbrowser
- CVE-2026-75598Gradle Shadow: Zip Slip path traversal in ShadowCopyAction — no independent entry-name sanitizationGradleUp shadow · com.gradleup.shadow:com.gradleup.shadow.g…
- CVE-2026-123973SharePoint Products CopyMove before 2026-11-06 allows traversal.SharePoint Products CopyMove for SharePoint
- CVE-2026-102356Kroki Mermaid companion SSRF via flowchart image URLsyuzutech kroki
- CVE-2026-123876Podman: containers-common: containers-common: default seccomp af_vsock/netlink_audit deny rules bypassable via 32-bit truncationRed Hat Enterprise Linux · Red Hat Hardened Images +1
- CVE-2026-123824Symfony: XXE (Local File Read) in Config XmlUtils::parse() via validateOnParse = truesensiolabs symfony/config
- CVE-2026-123748chenyme grok2api WebSocket Proxy voice_ws_handler.go proxyVoiceWebSocket resource consumptionchenyme grok2api
- CVE-2026-103984FreeScout: Incomplete fix for CVE-2026-40570: load_customer_info exposes cross-visibility customer PIIfreescout-help-desk freescout
- CVE-2026-85744FreeScout: Conversation Merge Cross-Mailbox Authorization Bypassfreescout-help-desk freescout
- CVE-2026-62850FreeScout: Administrative tools.php endpoint is accessible to low-privileged users, enabling filesystem enumeration and unthrottled…freescout-help-desk freescout
- CVE-2026-62852FreeScout: Missing Authorization and Exposure of Sensitive Information to an Unauthorized Actor and Authorization Bypass Through…freescout-help-desk freescout
- CVE-2026-62855FreeScout: Path Traversal in App Logs Viewer Exposes Arbitrary Local Filesfreescout-help-desk freescout
- CVE-2026-106128Prototype Pollution in Progress Software Kendo UI for VueProgress Software @progress/kendo-vue-common
- CVE-2026-62851FreeScout: Cross-mailbox conversation existence / internal-id disclosure via the search-by-number (`#`) shortcut (missing mailbox…freescout-help-desk freescout
- CVE-2026-106127Prototype Pollution in Progress Software KendoReactProgress Software @progress/kendo-react-common
- CVE-2026-106144Prototype Pollution in Progress Software Kendo UI for AngularProgress Software @progress/kendo-angular-common · Progress…
- CVE-2026-106143Cross-Site Scripting in Progress Software Kendo UI for VueProgress Software @progress/kendo-vue-editor
- CVE-2026-106142Cross-Site Scripting in Progress Software KendoReactProgress Software @progress/kendo-react-editor
- CVE-2026-106141Cross-Site Scripting in Progress Software Kendo UI for AngularProgress Software @progress/kendo-angular-editor
- CVE-2026-106136Cross-Site Scripting in Progress Software KendoReactProgress Software @progress/kendo-react-conversational-ui
- CVE-2026-106134Cross-Site Scripting in Progress Software KendoReactProgress Software @progress/kendo-react-layout
- CVE-2026-106135Cross-Site Scripting in Progress Software Kendo UI for AngularProgress Software @progress/kendo-angular-conversational-ui
- CVE-2026-122053Symfony: ObjectNormalizer Dotted-Key Property-Path Traversal Bypasses #[Ignore] on Nested Objectssensiolabs symfony/serializer
- CVE-2026-123858In JetBrains PhpStorm before 2026.3 project files could be automatically uploaded to a deployment server from untrusted projectsJetBrains PhpStorm
- CVE-2026-123857In JetBrains PhpStorm before 2026.3 xXE was possible in untrusted projects via PHPMD ruleset autodetectionJetBrains PhpStorm
- CVE-2026-123856In JetBrains Toolbox App before 3.6.1 nTLM hash disclosure was possible via SVG tool icons from a Remote Development serverJetBrains Toolbox App
- CVE-2026-123854In JetBrains PyCharm before 2026.3 code execution was possible in Safe Mode via a crafted Jupyter notebook widget moduleJetBrains PyCharm
- CVE-2026-123851In JetBrains Junie GitHub Action before 1.6.4 prompt injection protection could be bypassed via HTML-encoded charactersJetBrains Junie GitHub Action
- CVE-2026-123850In JetBrains YouTrack before 2026.2.19422 cSS injection was possible in Mermaid diagrams via configuration directivesJetBrains YouTrack
- CVE-2026-123847In JetBrains IntelliJ IDEA before 2026.3 command execution was possible via control characters in terminal command completionJetBrains IntelliJ IDEA
- CVE-2026-123846In JetBrains IntelliJ IDEA before 2026.3 blind SSRF was possible via remote references in JSON Schema validationJetBrains IntelliJ IDEA
- CVE-2026-123845In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via JSON Schema references in untrusted projectsJetBrains IntelliJ IDEA
- CVE-2026-123844In JetBrains IntelliJ IDEA before 2026.3 sSRF was possible via custom plugin repositoriesJetBrains IntelliJ IDEA
- CVE-2026-123843In JetBrains IntelliJ IDEA before 2026.3 untrusted projects could trigger changes to GPG agent configurationJetBrains IntelliJ IDEA
- CVE-2026-123840In JetBrains IntelliJ IDEA before 2026.3 hTML injection was possible in Remote Development editor tabsJetBrains IntelliJ IDEA
- CVE-2026-123839In JetBrains IntelliJ IDEA before 2026.3 opening arbitrary URLs without confirmation was possible via the Remote Development port…JetBrains IntelliJ IDEA
- CVE-2026-123835In JetBrains Datalore before 2026.4 code execution was possible in another user's computation via an init script upload race conditionJetBrains Datalore
- CVE-2026-123833In JetBrains IntelliJ IDEA before 2026.3 database connections could be established in untrusted projectsJetBrains IntelliJ IDEA
- CVE-2026-49951RAGFlow < 0.27.0 SSRF via set_api_key base_url Parameterinfiniflow ragflow
- CVE-2026-111573Privilege escalation via unprotected Windows agent data folderCheckmk
- CVE-2026-80303Avast WFP stream parser integer underflow causes system crashGen Digital Avast Antivirus, Avast One, Avast Premium Se… +1
- CVE-2026-12067AvastSvc denial of service via unhandled JsonCpp exceptions in native message handlersGen Digital Avast Antivirus, Avast One, Avast Premium Se… +1
- CVE-2026-66986HCL AION is affected by multiple security vulnerabilities.HCL Software HCL AION
- CVE-2026-123677xxyopen/201206030 novel Book Chapter Read BookServiceImpl.java getBookChapter authorizationxxyopen novel · 201206030 novel
- CVE-2026-66987HCL AION is affected by multiple security vulnerabilities.HCL Software HCL AION
- CVE-2026-66982HCL AION is affected by multiple security vulnerabilities.HCL Software HCL AION
- CVE-2026-66984HCL AION is affected by multiple security vulnerabilities.HCL Software HCL AION
- CVE-2026-123676xxyopen/201206030 novel Book Content Service BookServiceImpl.java BookServiceImpl.getBookContentAbout improper authorizationxxyopen novel · 201206030 novel
- CVE-2026-66981HCL AION is affected by multiple security vulnerabilities.HCL Software HCL AION
- CVE-2026-21834HCL AION is affected by multiple security vulnerabilities.HCL Software HCL AION
- CVE-2026-123675OpenBMB Internet of Agents Code Executor Tool code_executor.py execute_code code injectionOpenBMB Internet of Agents
- CVE-2026-121880RStudio Server / Posit Workbench localhost port-proxy does not enforce per-session port ownershipPosit Software, PBC Posit Workbench · Posit Software, PBC R…
- CVE-2026-121881Posit Workbench code-server session-state RPC (get_last_seen) SQL injectionPosit Software, PBC Posit Workbench
- CVE-2026-123785Fluxbox through 1.3.7 Infinite Loop via Menu::updateMenu() Style Geometryfluxbox
- CVE-2026-123782ChatWiki before 2.10.0 Cross-Tenant IDOR via SaveFormField and UpdateFormRequiredzhimaAi chatwiki
- CVE-2026-123624ChatWiki before 2.10.0 Cross-Tenant Fast Command Modification via saveFastCommandzhimaAi chatwiki
- CVE-2026-123622Usermin through 2.570 XSS via mailbox detach.cgi type Parameterwebmin usermin
- CVE-2026-123619Lektor through 3.3.14 and 3.4.0b15 Path Traversal via Admin API Drive-Letter Pathslektor
- CVE-2026-123617Openwhyd before 1.65.1 NoSQL Injection via POST /api/useropenwhyd
- CVE-2026-123492SiYuan before 3.8.9 Nil Pointer Dereference DoS via MCP resources/readsiyuan-note siyuan
- CVE-2026-123486WWBN AVideo 29.0 through 29.4.0 Race Condition in PayPal IPN Deduplication via ipn.phpWWBN AVideo
- CVE-2026-112337Wazuh 3.7.0 before 4.14.9 SSRF via Azure Graph nextLink Paginationwazuh
- CVE-2026-112335Wazuh Agent 1.0.0 before 4.14.9 Stack Buffer Overflow via read_snortfullwazuh
- CVE-2026-112334Wazuh 1.0.0 before 4.14.9 Out-of-Bounds Write in wazuh-execd via ar.confwazuh
- CVE-2026-123665kubescape Output printresults.go GetWriter permissionkubescape
- CVE-2026-123339Symfony: Inline Fragments Let Untrusted Forwarded Headers Set the Host, Scheme and Port of the URLs Generated for the Main Requestsensiolabs symfony/http-kernel
- CVE-2026-123664nasa-gcn gcn.nasa.gov Email Notification email improper authorizationnasa-gcn gcn.nasa.gov
- CVE-2026-113618Improper Server Certificate Validation in ZSIRep Client LibraryKAMSOFT ZSIRep Client Library
- CVE-2026-118514Symfony: HEAD Requests Bypass the methods Option of security.access_control Rules and Firewallssymfony/http-foundation
- CVE-2026-21850HCL AION is affected by multiple security vulnerabilities.HCL Software HCL AION
- CVE-2026-5345HCL AION is affected by multiple security vulnerabilities.HCL Software HCL AION
- CVE-2026-21849HCL AION is affected by multiple security vulnerabilities.HCL Software HCL AION
- CVE-2026-35107HCL AION is affected by multiple security vulnerabilities.HCL Software HCL AION
- CVE-2026-35106HCL AION is affected by multiple security vulnerabilities.HCL Software HCL AION
- CVE-2026-35105HCL AION is affected by multiple security vulnerabilities.HCL Software HCL AION
- CVE-2026-35104HCL AION is affected by multiple security vulnerabilities.HCL Software HCL AION
- CVE-2026-35103HCL AION is affected by multiple security vulnerabilities.HCL Software HCL AION
- CVE-2026-35102HCL AION is affected by multiple security vulnerabilities.HCL Software HCL AION
- CVE-2026-35109HCL AION is affected by multiple security vulnerabilities.HCL Software HCL AION
- CVE-2026-123653esengine DeepSeek-Reasonix doc.go discoverDocs llm prompting inputesengine DeepSeek-Reasonix
- CVE-2026-35110HCL AION is affected by multiple security vulnerabilities.HCL Software HCL AION
- CVE-2026-35112HCL AION is affected by multiple security vulnerabilities.HCL Software HCL AION
- CVE-2026-35113HCL AION is affected by multiple security vulnerabilities.HCL Software HCL AION
- CVE-2026-35111HCL AION is affected by multiple security vulnerabilities.HCL Software HCL AION
- CVE-2026-35114HCL AION is affected by multiple security vulnerabilities.HCL Software HCL AION
- CVE-2026-35115HCL AION is affected by multiple security vulnerabilities.HCL Software AION
- CVE-2026-92080Path Traversal Leading to Arbitrary Mount in TÜBİTAK BİLGEM's pardus-boot-repairTÜBİTAK BİLGEM Software Technologies Research Institute par…
- CVE-2026-115952WordPress Forminator plugin <= 1.58.3 - Cross Site Scripting (XSS) vulnerabilityWPMU DEV Forminator
- CVE-2026-105422Path Traversal in TÜBİTAK BİLGEM's pardus-boot-repairTÜBİTAK BİLGEM Software Technologies Research Institute par…
- CVE-2026-123746Symfony: Programmatic Logins Skip the checkPostAuth() Method of User Checkerssensiolabs symfony/security-http
- RUSTSEC-2026-0443Hidden file disclosure through Windows short namesactix-files
- RUSTSEC-2026-0445Degraded secret zeroization capabilitiesvodozemac
- RUSTSEC-2026-0446Request smuggling through malformed chunked request trailersactix-http
- RUSTSEC-2026-0447Compressed request bodies can exhaust memory before extractor limits applyactix-web
- RUSTSEC-2026-0448Unbounded decompression can exhaust memory and CPU resourcesactix-http
- RUSTSEC-2026-0451Degraded secret zeroization capabilitiesvodozemac
- RUSTSEC-2026-0455Large-window Brotli bodies bypass decompression memory limitsactix-http
- RUSTSEC-2026-0466`build_dep` was removed from crates.io for malicious codebuild_dep
- RUSTSEC-2026-0467`top_level_crate` was removed from crates.io for malicious codetop_level_crate
- RUSTSEC-2026-0468`shinchina` was removed from crates.io for malicious codeshinchina
- RUSTSEC-2026-0471`sec-gemini` was removed from crates.io for malicious codesec-gemini
- RUSTSEC-2026-0472`shinchina-test` was removed from crates.io for malicious codeshinchina-test
- CVE-2025-66621Apache James: SASL OAUTHBEARER do not validate aud in JWT payload if misconfigredApache Software Foundation Apache James
- CVE-2026-103908AMP for WP <= 1.1.18 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Author Biographical Infomohammed_kaludi AMP for WP – Accelerated Mobile Pages
- CVE-2026-120035RSS Aggregator by Feedzy <= 5.2.13 - Unauthenticated Stored Cross-Site Scripting via Feed Item Titlethemeisle RSS Aggregator by Feedzy – Feed to Post, Autoblog…
- CVE-2026-107658BuddyForms <= 2.10.5 - Unauthenticated Stored Cross-Site Scripting via 'bf_post_type' Parameter via Post-Type Confusionthemekraft BuddyForms
- CVE-2026-119178Smart Cookie Kit <= 2.3.2 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Bundled Simple HTML DOM Noise Restorationshark986 Smart Cookie Kit
- CVE-2026-116545All-in-One Video Gallery <= 5.0.0 - Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting via 'track' Post Meta 'label' Fieldplugins360 All-in-One Video Gallery – Video Player & Galler…
- CVE-2026-119211AAA Autoload Optimizer <= 1.7.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'option_page' Parameter via 'all' Hookprogressplanner AAA Autoload Optimizer
- CVE-2026-116551WP Customer Area <= 8.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Parameteraguilatechnologies WP Customer Area
- CVE-2026-89101Everest Forms <= 3.6.2 - Insecure Direct Object Reference to Authenticated (Custom+) Arbitrary Entry/Form Disclosure and Deletion via MCP…wpeverest Everest Forms – Contact Form, Payment Form, Quiz,…
- CVE-2026-84161Authenticated remote denial of service through unbounded zlib decompression in storeAnalysisStatisticsEricsson CodeChecker
- CVE-2026-84164Stored XSS in the static HTML report export, because json.dumps does not escape the markup characterEricsson CodeChecker
- CVE-2026-123337In JetBrains YouTrack before 2026.2.19656 users without update permission could change issue visibilityJetBrains YouTrack
- CVE-2026-123336In JetBrains YouTrack before 2026.2.19728 the attachment size limit could be bypassed via AI assistant thread conversionJetBrains YouTrack
- CVE-2026-123335In JetBrains YouTrack before 2026.2.19562, 2026.1.14137, 2025.3.169041 missing authorization allowed attaching tags to any issue via the…JetBrains YouTrack
- CVE-2026-123334In JetBrains YouTrack before 2026.2.19562 project admins of a related project could delete VCS integrations owned by another projectJetBrains YouTrack
- CVE-2026-123333In JetBrains YouTrack before 2026.2.19562 sprint creation allowed moving issues from inaccessible projects between sprintsJetBrains YouTrack
- CVE-2026-123332In JetBrains YouTrack before 2026.2.19562 missing authorization allowed Project Admin to manage VCS hosting server configurationsJetBrains YouTrack
- CVE-2026-123331In JetBrains YouTrack before 2026.2.19197 article editors could change visibility of restricted child articlesJetBrains YouTrack
- CVE-2026-123330In JetBrains YouTrack before 2026.2.19562 missing authorization allowed users with read-only access to change issue visibility settingsJetBrains YouTrack
- CVE-2026-123329In JetBrains YouTrack before 2026.2.19562 missing authorization in TeamCity integration allowed disclosure of other projects' actionsJetBrains YouTrack
- CVE-2026-123328In JetBrains YouTrack before 2026.2.19656 app permission bypass allowed privilege escalation via project tabJetBrains YouTrack
- CVE-2026-123322In JetBrains WebStorm before 2026.3, 2026.2.4 code execution was possible in untrusted projects via the Angular CLI schematics loaderJetBrains WebStorm
- CVE-2026-123320In JetBrains Toolbox App before 3.9 insufficient warning in the login dialog allowed connecting to a malicious serverJetBrains Toolbox App
- CVE-2026-123319In JetBrains Ktor before 3.6.1 missing Domain attribute validation in client cookie storage allowed cookie injectionJetBrains Ktor
- CVE-2026-123318In JetBrains Ktor before 3.6.1 hTTP request smuggling was possible in the CIO engineJetBrains Ktor
- CVE-2026-123316In JetBrains Junie CLI before 26.6.29 sensitive environment variables were exposed in session event logsJetBrains Junie CLI
- CVE-2026-123314In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 xXE attack was possible via an XML response to an HTTP Client requestJetBrains IntelliJ IDEA
- CVE-2026-123313In JetBrains IntelliJ IDEA before 2026.3 improper checks could enable disabled plugins via external dependency settingsJetBrains IntelliJ IDEA
- CVE-2026-123312In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 sSRF was possible via annotations.xml files during indexingJetBrains IntelliJ IDEA
- CVE-2026-123311In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 command execution via a hidden run control in the Markdown preview was possibleJetBrains IntelliJ IDEA
- CVE-2026-123310In JetBrains IntelliJ IDEA before 2026.3 kotlin scripts could trigger dependency downloads from arbitrary repositories in untrusted projectsJetBrains IntelliJ IDEA
- CVE-2026-123309In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 stored XSS was possible on the built-in web server via Markdown previewJetBrains IntelliJ IDEA
- CVE-2026-123308In JetBrains IntelliJ IDEA before 2026.3 code execution via the document import was possible in untrusted projectsJetBrains IntelliJ IDEA
- CVE-2026-123307In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 unauthenticated connection to an arbitrary host via run configurations was possibleJetBrains IntelliJ IDEA
- CVE-2026-123300In JetBrains Hub before 2026.2.52519 missing authorisation allowed users with read-only access to modify auth module group mappingsJetBrains Hub
- CVE-2026-123299In JetBrains Hub before 2026.2.52519 information disclosure via user search queries was possibleJetBrains Hub
- CVE-2026-123298In JetBrains Hub before 2026.2.52556 sMTP command injection via email verification was possibleJetBrains Hub
- CVE-2026-123297In JetBrains Hub before 2026.2.52519 two-factor authentication bypass was possible via the password reset flowJetBrains Hub
- CVE-2026-123292In JetBrains Datalore before 2026.4 aPI tokens and sessions of removed or banned users remained validJetBrains Datalore
- CVE-2026-123291In JetBrains Datalore before 2026.4 improper owner validation allowed reading another workspace's issues and runs notebookJetBrains Datalore
- CVE-2026-123290In JetBrains Datalore before 2026.4 hidden notebook code was exposed to unauthenticated users via the public interactive report content…JetBrains Datalore
- CVE-2026-123289In JetBrains Datalore before 2026.4 improper authorisation allowed notebook viewers to modify filesJetBrains Datalore
- CVE-2026-123288In JetBrains Datalore before 2026.4 stored XSS in notebook charts was possible via Vega editor linkJetBrains Datalore
- CVE-2026-123287In JetBrains Datalore before 2026.4 private notebook files could be downloaded without authentication via published interactive reportsJetBrains Datalore
- CVE-2026-123286In JetBrains Datalore before 2026.4 improper authorisation allowed read the notebook owner's file storage session tokenJetBrains Datalore
- CVE-2026-123285In JetBrains Datalore before 2026.3 command execution was possible in the database task container via JVM options injectionJetBrains Datalore
- CVE-2026-123284In JetBrains Datalore before 2026.4 improper authorisation on workspace moves allowed view-only collaborators to modify shared contentJetBrains Datalore
- CVE-2026-123283In JetBrains Datalore before 2026.4 account takeover was possible via SSO sign-in to a pre-registered accountJetBrains Datalore
- CVE-2026-123278In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via the unauthenticated JDBC worker RMI endpointJetBrains IntelliJ IDEA
- CVE-2026-123277In JetBrains CLion before 2026.3, 2026.2.4.1 missing authentication allowed local users to obtain the debug session environment on LinuxJetBrains CLion
- CVE-2026-84155Session Token Remains Valid After Logout in Multi-Worker DeploymentsEricsson CodeChecker
- CVE-2026-66294XML injection in Saxy via unescaped CDATA section terminatorqcam saxy · saxy
- CVE-2026-66295Processing instruction target and content emitted unescaped in Saxy encoder allows XML injectionqcam saxy · saxy
- CVE-2026-66293XML comment injection in Saxy encoder via unescaped double hyphenqcam saxy · saxy
- CVE-2026-116630undici vulnerable to cross-user information disclosure via cross-origin redirect revalidationundici
- CVE-2026-120415undici vulnerable to cross-origin credential disclosure via array-of-tuples headers bypassing redirect strippingundici
- CVE-2026-120423undici vulnerable to Subresource Integrity bypass via whitespace in integrity metadataundici
- CVE-2026-120222undici vulnerable to Denial of Service via unhandled exception in cache-interceptor response replayundici
- CVE-2026-120474undici vulnerable to cross-user cache disclosure via same-origin redirectundici
- CVE-2026-115831VOD Infomaniak <= 1.5.15 - Missing Authorization to Authenticated (Subscriber+) Unauthorized Video Importation via vodimportvideo AJAX…infomaniak-dev VOD Infomaniak
- CVE-2026-97642Wp Parsidate <= 6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'theme' Block Attributeman4toman Parsi Date | بسته فارسی ساز وردپرس و ووکامرس پارس…
- CVE-2026-120659Redirection for Contact Form 7 <= 3.2.14 - Missing Authorization to Unauthenticated Arbitrary Post Meta Modification and Arbitrary File…themeisle Redirection for Contact Form
- CVE-2026-109977YaySMTP <= 2.7.8 - Authenticated (Administrator+) SQL Injection via 'params[searchKey]' Parameteryaycommerce YaySMTP – WP Mail SMTP with Email Logs, Trackin…
- CVE-2026-109994Eventin <= 4.1.29 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via 'id' Parameterarraytics Eventin – Events Calendar, Tickets, Registration,…
- CVE-2026-120550WP User Manager <= 2.10.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' User Metawpusermanager WP User Manager – Registration Form, Login Fo…
- CVE-2026-103682Jolokia special agent exposes password in process listCheckmk
- CVE-2026-103674NetApp ONTAP special agent exposes password in process listCheckmk
- CVE-2026-123660Vulnerability-Lookup: memory amplification through webhook payload template format specifiersvulnerability-lookup
- CVE-2026-122222Permalink Manager Lite <= 2.6.1 - Authenticated (Author+) Stored Cross-Site Scripting via Post Slugmbis Permalink Manager Lite
- CVE-2026-121794Travelly <= 2.3.11 - Missing Authorization to Authenticated (Contributor+) Payment Gateway Credential Disclosure via edit_form_top Handler…magepeopleteam Travelly – Tour & Travel Booking Manager for…
- CVE-2026-118189Posts Table with Search & Sort <= 1.4.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'date_format' Shortcode Attributebarn2media Posts Table with Search & Sort
- CVE-2026-120671UsersWP <= 1.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'badge' Shortcode Attributestiofansisland UsersWP – Front-end login form, User Registr…
- CVE-2026-19876Reflected XSS in INFINITT ULite login error page (pre-auth)INFINITT Healthcare INFINITT ULite
- CVE-2026-108018BigFix Mobile is affected by sensitive information disclosureHCLSoftware BigFix MCM & Mobile
- CVE-2026-119472WordPress Redux Framework plugin <= 4.5.16 - Cross Site Scripting (XSS) vulnerabilityDavid Anderson Redux Framework
- CVE-2026-65022BigFix Mobile is affected by a Cross-site scripting vulnerabilityHCLSoftware BigFix MCM & Mobile
- CVE-2026-121822A vulnerability has been identified in armeria versions 0.80.0 through 1.42.0, where attackers who control file names can cause stored…LY Armeria
- CVE-2026-121821A vulnerability has been identified in armeria versions 0.84.0 through 1.42.0, where any-origin CORS policies do not enforce configured…LY Armeria
- CVE-2026-121819A vulnerability has been identified in armeria-xds versions 1.40.0 through 1.42.0, where DataSourcePolicy checks filename containment…LY Armeria
- CVE-2026-121636Quick Event Manager 9.9.5 - 9.18 - Unauthenticated PayPal IPN Verification Bypass via the 'debug' ParameterQuick Event Manager
- CVE-2026-121633Order Tracking < 3.6.0 - Unauthenticated Payment Confirmation Forgery via PayPal IPN ListenerOrder Tracking
- CVE-2026-118166MC4WP: Mailchimp for WordPress < 4.15.0 - Unauthenticated Arbitrary Shortcode Execution via Dynamic Content TagMC4WP: Mailchimp for WordPress
- CVE-2026-120749Dbus: dbus-daemon: dbus-daemon aborts (reply_serial != 0) when a broadcast from the driver cannot be delivered to a monitored busRed Hat Enterprise Linux · Red Hat Hardened Images
- CVE-2026-83494Training-operator: pytorchjob validateupdate casts oldjob from newobj, bypassing managedby immutability (asvs v5.1.3; upstream bug)Red Hat OpenShift AI
- CVE-2026-9797Keycloak: keycloak: privilege escalation via client authentication manipulation by an authenticated administratorRed Hat Build of Keycloak
- CVE-2026-73473Gstreamer1-plugins-good: gstreamer: missing subindex entry count validation in avidemux leading to denial of serviceGStreamer gst-plugins-good
- CVE-2026-73472Gstreamer1-plugins-good: gstreamer: integer overflow in avidemux superindex/subindex parsing leading to out-of-bounds readGStreamer gst-plugins-good
- CVE-2026-73471Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux nikon metadata tag parsingGStreamer gst-plugins-good
- CVE-2026-97848Keycloak-services: keycloak-services: protocol mapper with jsontype=json bypasses token sanitizationRed Hat build of Keycloak · Red Hat Single Sign-On
- CVE-2026-97367Keycloak-services: keycloak-services: dcr azp and sid claim substitution allows account rest session takeoverRed Hat build of Keycloak · Red Hat Single Sign-On
- CVE-2026-96547Keycloak-services: keycloak-services: dcr registration-time claim-path gap allows forging realm_access.rolesRed Hat build of Keycloak · Red Hat Single Sign-On
- CVE-2026-96460Keycloak-services: keycloak-services: indefinite access token renewal via standard token exchange v2Red Hat build of Keycloak · Red Hat Single Sign-On
- CVE-2026-92856Keycloak-services: keycloak-services: saml broker ignores proxyrestriction delegation constraintsRed Hat build of Keycloak · Red Hat Single Sign-On
- CVE-2026-19688Keycloak-services: keycloak-services: admin api missing audience checkRed Hat build of Keycloak · Red Hat Single Sign-On
- CVE-2026-96447Keycloak-services: keycloak-services: stateless token preferred_username fallback enables identity rebindingRed Hat build of Keycloak · Red Hat Single Sign-On
- CVE-2026-118239AutomatorWP < 6.0.7 - Unauthenticated Zoom/AWeber Integration Connection Hijack via OAuth CallbackAutomatorWP
- CVE-2026-118188PublishPress Revisions 3.9.0 - 4.2.0 - Subscriber+ Unpublished Content DisclosurePublishPress Revisions: Duplicate Posts, Submit, Approve an…
- CVE-2026-118187PublishPress Revisions < 4.3.1 - Contributor+ Unpublished Content Disclosure via IDORPublishPress Revisions: Duplicate Posts, Submit, Approve an…
- CVE-2026-118186PublishPress Revisions 3.6.0 - 4.2.0 - Contributor+ Unapproved Content Publishing via Revision WorkflowPublishPress Revisions: Duplicate Posts, Submit, Approve an…
- CVE-2026-118167MC4WP: Mailchimp for WordPress < 4.15.0 - Unauthenticated Subscription Audience OverrideMC4WP: Mailchimp for WordPress
- CVE-2026-92396Blocks for ShopEngine < 2.4.4 - Contributor+ Stored XSS via gutenova_store_cssShopEngine Gutenberg WooCommerce Builder Blocks Addon
- CVE-2026-12967WCFM Membership < 2.12.1 - Subscriber+ Payment Verification BypassWCFM Membership
- CVE-2026-119259All-in-One Video Gallery < 5.1.0 - Unauthenticated Views and Duration Post Meta WriteAll-in-One Video Gallery
- CVE-2026-118639Surfer < 1.8.1.759 - Contributor+ Privilege Escalation via Editor API Key DisclosureSurfer
- CVE-2026-114427GutenKit 2.5.0 - 2.5.4 - Author+ Stored XSS via Page Settings Custom CSSGutenKit
- CVE-2026-109081Keycloak-services: keycloak-services: injection of roles into realm default-roles via dcr endpointRed Hat build of Keycloak · Red Hat Single Sign-On
- CVE-2026-107124Keycloak-services: keycloak-services: oidc logout endpoint session fixation via id_token_hint leading to account takeoverRed Hat build of Keycloak · Red Hat Single Sign-On
- CVE-2026-121837Quarkus-rest-data-panache: quarkus-rest-data-panache: getter-level @securefield ignored for filter and sortRed Hat Exploit Intelligence · Red Hat build of Quarkus
- CVE-2026-123037Ansible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902)Red Hat Migration Toolkit for Applications · Red Hat Mig… +9
- CVE-2026-114366Information disclosure vulnerability in authentication handling of QWebSocket impacts Qt FrameworkQt Framework
- CVE-2026-89142Out-of-bounds Write in Wi-Fi NPUAiroha Technology EN7529, AN7552, AN7581, AN7583
- CVE-2026-123269libyal libvmdk Descriptor File libvmdk_descriptor_file.c libvmdk_descriptor_file_read_header out-of-boundslibyal libvmdk