CVEs published November 9, 2026
524 CVEs were published on November 9, 2026: 29 critical, 171 high. 4 early warnings were posted.
- Published
- 524
- Critical
- 29
- High
- 171
- Medium
- 261
- Low
- 32
- Unrated
- 31
- Now in CISA KEV
- 0
- Fix available
- 353
- Early warnings
- 4
Most affected products
- FFmpeg
- 121
- Red Hat Enterprise Linux · Red Hat Hardened Images
- 12
- Apache Software Foundation apache-airflow-core
- 11
- CompuGroup Medical Infantia · CompuGroup Medical Profim +2
- 8
- supertokens-core
- 8
- Apple iOS and iPadOS · Apple macOS +2
- 7
- ettercap
- 7
- zephyrproject zephyr
- 7
- Apache Software Foundation apache-airflow · Apache Software…
- 6
- FrodoBots EarthRover Mini+ firmware
- 6
Early warnings 4
- SZB-197290786fN-able takes N-central offline after researcher discloses 30+ alleged zero-daysN-able · N-central
- SZB-e0d31900bdWiz says attacker breached multiple Qubole customers' AWS accountsQubole · AWS IAM
- SZB-5ab74d9eedEthersphere's bee-js and Swarm Desktop releases reported to carry wallet-stealing malwarenpm · @ethersphere/bee-js
- SZB-ea46f00bd9Web3Auth flaw exploited to drain Keplr wallets, companies sayWeb3Auth · Keplr wallet Google and Apple sign-in
Critical 29
- CVE-2026-125384INDOTALENT WHMS before 10.20261109 Default Administrator Credentials via UserAdminSeedergo2ismail Asp.Net-Core-Inventory-Order-Management-System
- CVE-2026-125383INDOTALENT WHMS before 10.20261109 Hard-Coded JWT Signing Key Authentication Bypassgo2ismail Asp.Net-Core-Inventory-Order-Management-System
- CVE-2026-125370Kubero 3.0.0 through 3.1.1 Authentication Bypass via Hardcoded JWT Secretkubero-dev kubero
- CVE-2026-115934SQL injection leading to privilege escalationcraftcms/cms
- CVE-2026-125120Mongoose: sanitizeFilter not applied on countDocumentsAutomattic mongoose · mongoose
- CVE-2026-123815pyLoad: Tar extraction creates device nodes and FIFOs (member types not filtered; tarfile extractall without filter=)pyload · pyload-ng
- CVE-2026-123807Signal K Server: Unauthenticated path traversal in resources-provider v2 API leads to JWT secret disclosure, admin impersonation and…signalk-server · @signalk resources-provider +1
- CVE-2026-124001ION-DTN 2.2.1b-4.2.0 Integer Overflow Heap Corruption via DGRnasa-jpl ION-DTN
- CVE-2026-123800SuperTokens Core: App-scoped API key can overwrite the parent connection URI domain's credentials and take over sibling applicationssupertokens-core
- CVE-2026-123270CVE-2026-123270Redpanda Data Connect
- CVE-2026-119756Tasmota 16.0.0 Heap Out-of-Bounds Write via Device Groups UDParendst Tasmota
- CVE-2026-104989Pre-authentication remote code execution in Chaos V-Ray SwarmChaos Software V-Ray Swarm
- CVE-2026-110469Remote Code Execution via Unrestricted File Upload in WidzialniCMSFundacja Widzialni WidzialniCMS
- CVE-2026-110468Remote Code Execution via Unrestricted File Upload in WidzialniCMSFundacja Widzialni WidzialniCMS
- CVE-2026-124079rConfig Core 8.0.0 before 8.2.19 and rConfig Pro before 8.4.1 RCE via Unauthenticated Redis Queue PoisoningrConfig Core · rConfig Pro
- CVE-2026-118462AIS update mechanism executes unverified codeCompuGroup Medical Infantia · CompuGroup Medical Profim +2
- CVE-2026-115252Confection 0.4.0 - 0.4.7 - Unauthenticated RCE via Write Key OptionConfection WordPress Cable
- CVE-2026-118196Apache Allura: OAuth1 rebindingApache Software Foundation Apache Allura
- CVE-2026-124585Chengdu Feiyuxing Technology VW2100/VEC10GP Web Administration webserver add_expmac os command injectionChengdu Feiyuxing Technology VW2100 · Chengdu Feiyuxing Tec…
- CVE-2026-123870[Eclipse CSI - otterdog] Unauthenticated remote code execution via eval() on format-string-injected webhook body when…Eclipse Foundation otterdog
- CVE-2026-124580Chengdu Feiyuxing Technology VW2100/VEC10GP Weixin Auth Endpoint webserver handle_wechat_cn_wifi os command injectionChengdu Feiyuxing Technology VW2100 · Chengdu Feiyuxing Tec…
- CVE-2026-124577Intelbras SG 2404 PoE L2+ Web Management EXCU_SHELL improper authenticationIntelbras SG 2404 PoE L2+
- CVE-2026-123751WP Duplicate <= 1.1.11 - Unauthenticated Arbitrary File Upload via Authentication BypassWP Duplicate
- CVE-2026-115237Grand Job <= 1.2.1 - Unauthenticated Account Takeover via Empty Password Reset CodeGrand Job
- CVE-2026-115213EASY-JS-WPAPI <= 2.0 - Unauthenticated Administrator Password Disclosure and Authentication BypassEASY-JS-WPAPI Client HANDLE for the WordPress REST-API
Show all 29 entriesShow fewer entries
- CVE-2026-113364Buffer Overflow in the data receiving process in NEC Corporation WebSAM WinShare Ver 7.5.0 and earlier, Ver 7.6.0 and Ver 7.7.0 through…NEC WebSAM WinShare
- CVE-2026-113363Improper Input Validation in the network communication processing in NEC Corporation WebSAM WinShare Ver 7.2.0 through 7.5.0, Ver 7.6.0…NEC WebSAM WinShare
- CVE-2026-124560D-Link DIR-878 HNAP prog.cgi GetCAPTCHAsetting heap-based overflowD-Link DIR-878
- CVE-2026-119506WordPress Frontend Admin by DynamiApps plugin <= 3.30.1 - Privilege Escalation vulnerabilityFrontend Admin by DynamiApps
High 171
- CVE-2026-125406Ettercap through 0.8.4.1 Stack Buffer Underwrite via Telnet Dissector Backspace Handlingettercap
- CVE-2026-125405Ettercap through 0.8.4.1 Out-of-Bounds Read via HTTP NTLM Authentication Parsingettercap
- CVE-2026-125404Ettercap through 0.8.4.1 Stack Buffer Overflow via WPA CCMP Decryptionettercap
- CVE-2026-125403Ettercap through 0.8.4.1 Out-of-Bounds Read via sslw_remove_stsettercap
- CVE-2026-125402Ettercap through 0.8.4.1 Heap Out-of-Bounds Read via TLS SNI Parsingettercap
- CVE-2026-125401Ettercap through 0.8.4.1 Heap Buffer Overflow via Gadu-Gadu Dissectorettercap
- CVE-2026-125400Ettercap through 0.8.4.1 Use-After-Free via PCRE2 Filter Substitutionettercap
- CVE-2026-125399Fluxion before 6.39 OS Command Injection via Crafted SSIDFluxionNetwork fluxion
- CVE-2026-125398Instatic before 0.0.21 Authorization Bypass via Row Author Reassignment EndpointCoreBunch Instatic
- CVE-2026-125397NocoBase plugin-ai 2.1.0 through 2.2.41 Authorization Bypass via Sub-Agent Username Overridenocobase
- CVE-2026-125396Ghostscript before 10.08.0 -dSAFER Bypass via .putgstringcopy .forceput RecoveryArtifexSoftware ghostpdl
- CVE-2026-125393MailEnable Enterprise Premium before 10.62 Heap Overflow via IMAP X-FB-FETCHMailEnable Enterprise Premium
- CVE-2026-125391Webmin through 2.670 OS Command Injection via Samba User Account Optionswebmin
- CVE-2026-125390Group-Office before 6.8.181, 25.0.116, and 26.0.58 Local File Read via processUploadQueueIntermesh Group-Office
- CVE-2026-125388Group-Office before 6.8.181, 25.0.116, and 26.0.58 Missing Authorization in Forms Report DownloadIntermesh Group-Office
- CVE-2026-125385INDOTALENT WHMS before 10.20261109 Path Traversal via FileDocument/GetDocument and FileImage/GetImagego2ismail Asp.Net-Core-Inventory-Order-Management-System
- CVE-2026-125382Map-OS 5.0.0 to before 5.2.2 Privilege Escalation via /api/v1/usuariosRamonSilva20 mapos
- CVE-2026-125380DataRoom through 3.0.0 Incorrect Authorization via /dataRoom/dataset/run/testgcpaas DataRoom
- CVE-2026-125377Pig before 4.1.2 Missing Authorization Exposes OAuth2 Client Secrets via /clientpig-mesh pig
- CVE-2026-125368OmniAgent Bash Approval Gate Bypass via find -execdir in Safe-Command AllowlistYeQing17-2026 OmniAgent
- CVE-2026-125365DollarDollar through 4.4 Missing Authorization in /add_expense Balance Tamperingharung1993 dollardollar
- CVE-2026-125364frab through 0.9.1 Privilege Escalation via conference_users_attributes in UsersControllerfrab
- CVE-2026-125361Tencent BrowserSkill through 0.4.2 Missing Authentication in Local WebSocket TransportTencent BrowserSkill
- CVE-2026-125360Storyden through 1.26.16 Privilege Escalation via MANAGE_ROLES Role AssignmentSouthclaws storyden
- CVE-2026-125358Universal-modder before e88f687 Cross-Site WebSocket Command Execution via HostLinkrehan-remade universal-modder
Show all 171 entriesShow fewer entries
- CVE-2026-125119Mongoose: Connection-level sanitizeFilter not appliedAutomattic mongoose · mongoose
- CVE-2026-124035Unsafe reflection in Amazon Braket Schemas error mitigation validationamazon-braket-schemas
- CVE-2026-125117Mongoose walks into inherited properties when hydrating, setting, and merging, allowing overwrites of built-in functions (denial of…Automattic mongoose · mongoose
- CVE-2026-125114Novu: SSRF via conditions filter webhook bypasses validateUrlSsrf() protectionnovuhq novu
- CVE-2026-90591NXP ENET-QOS Ethernet driver re-arms RX descriptors with a clobbered DMA buffer address on packet dropzephyrproject zephyr
- CVE-2026-90586Xtensa MMU userspace: uninitialized thread page-table pointer leads to out-of-bounds supervisor-mode writeszephyrproject zephyr
- CVE-2026-125111Rack: Multipart parsing allows DoS via unbounded scan buffer growthrack
- CVE-2026-102643AsyncSSH: SFTPServer Chroot Escaperonf asyncssh
- CVE-2026-102289zizmor: Debug logging prints available GitHub credentials in cleartextzizmorcore zizmor · zizmor
- CVE-2026-73857ModSecurity v3 XML Request Body Processor Uninitialized Pointer Dereference Vulnerabilityowasp-modsecurity ModSecurity
- CVE-2026-114032Local privilege escalation via untrusted OpenSSL configurationIllumio Core Ven
- CVE-2026-114031Local privilege escalation via insecure folder permissionsIllumio Core Ven
- CVE-2026-125107Muhammara: NULL pointer dereference in LZWDecode filter when DecodeParms omits EarlyChange keyjulianhille MuhammaraJS · muhammara
- CVE-2026-63644bird-lg-go: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') and Exposure of Sensitive Information to an…xddxdd bird-lg-go
- CVE-2026-123818LMDeploy URL parser disagreement permits SSRF filter bypassInternLM lmdeploy · lmdeploy
- CVE-2026-123817AIOHTTP WebSocket frame reassembly permits excessive memory consumption from tiny readsaio-libs aiohttp
- CVE-2026-123816pyLoad: Authentication bypass in API key validation (check_apikey cache)pyload · pyload-ng
- CVE-2026-123813pyLoad: Privilege revocation and password change through the REST API do not invalidate the user's sessionpyload · pyload-ng
- CVE-2026-123811Dynatrace MCP Server: Unauthenticated HTTP MCP Tool Invocation in `@dynatrace-oss/dynatrace-mcp-server`dynatrace-oss dynatrace-mcp
- CVE-2026-63496augment-vir: Shell Command Injection in `grep()` via Unsanitized `searchPattern`electrovir augment-vir
- CVE-2026-119759TrailBase 0.28.2 < 0.35.10 IDOR via Record API File Columntrailbaseio trailbase
- CVE-2026-113970A use-after-free issue was addressed with improved memory management.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-113961An authorization issue was addressed with improved validation.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-84410apport: Local privilege escalation to root via ldd execution on an attacker-controlled ExecutablePath in automatic crash report processingCanonical apport
- CVE-2026-123805SIPSorcery: Unbounded SCTP SACK gap/duplicate counts cause out-of-bounds read that kills the data-channel receive thread (DoS)sipsorcery-org sipsorcery
- CVE-2026-125269FFmpeg through 9.0.2 Double Free via cbs_sei_delete_message in cbs_sei.cFFmpeg
- CVE-2026-125267FFmpeg before 8.1.3 and 9.x before 9.0.2 Heap Out-of-Bounds Write via APAC DecoderFFmpeg
- CVE-2026-125262FFmpeg through 9.0.2 Heap Buffer Overflow via LCEVC Enhancement DecodingFFmpeg
- CVE-2026-125260FFmpeg through 9.0.2 Heap Buffer Overflow in EXR Encoder RLE PathFFmpeg
- CVE-2026-125259FFmpeg through 9.0.2 Heap Buffer Overflow via ProRes prores_ks EncoderFFmpeg
- CVE-2026-125257FFmpeg through 9.0.2 Heap Overflow via Nellymoser Encoder Trellis SearchFFmpeg
- CVE-2026-125256FFmpeg through 9.0.2 Heap Buffer Overflow via RISC-V Vector diff_bytes RoutineFFmpeg
- CVE-2026-125251FFmpeg through 9.0.2 VVC Decoder Heap Out-of-Bounds Write via refs.cFFmpeg
- CVE-2026-125250FFmpeg through 9.0.2 GIF Encoder Heap Buffer Overflow via shrunk_buf RemapFFmpeg
- CVE-2026-125249FFmpeg 7.1 through 9.0.2 Heap Out-of-Bounds Write via Vulkan Slice Buffer SizingFFmpeg
- CVE-2026-125248FFmpeg 9.0 through 9.0.2 Integer Overflow via FFV1 Vulkan Encoder Remap BufferFFmpeg
- CVE-2026-125244FFmpeg before 8.1.3 and 9.x before 9.0.2 VVC Decoder Out-of-Bounds Write via sh_entry_pointsFFmpeg
- CVE-2026-125241FFmpeg through 9.0.2 Heap Buffer Overflow via FLIC Decoder check_pixel_ptrFFmpeg
- CVE-2026-125239FFmpeg through 9.0.2 Heap Buffer Overflow via HEVC DXVA Tile ParametersFFmpeg
- CVE-2026-125235FFmpeg through 9.0.2 Heap Overflow via QSV Encoder submit_frame()FFmpeg
- CVE-2026-125233FFmpeg through 9.0.2 Heap Buffer Overflow via DVB Subtitle EncoderFFmpeg
- CVE-2026-125229FFmpeg through 9.0.2 Out-of-Bounds Memory Access in Huffyuv/FFVHUFF Median PredictorFFmpeg
- CVE-2026-125227FFmpeg through 9.0.2 Heap Buffer Overflow via cbs_jpeg_write_scan Integer OverflowFFmpeg
- CVE-2026-125222FFmpeg through 9.0.2 Heap Buffer Overflow via hap_parse_frame_header()FFmpeg
- CVE-2026-125219FFmpeg through 9.0.2 Heap Buffer Overflow via HEVC VDPAU Tile ArraysFFmpeg
- CVE-2026-125218FFmpeg through 9.0.2 APNG Encoder Heap Buffer Overflow via encode_apng()FFmpeg
- CVE-2026-125214FFmpeg through 9.0.2 Heap Buffer Overflow in Blu-ray PCM DecoderFFmpeg
- CVE-2026-125213FFmpeg through 9.0.2 Heap Buffer Overflow via PSD Decoder RLE PathFFmpeg
- CVE-2026-125212FFmpeg through 9.0.2 Heap Buffer Overflow via VideoToolbox EncoderFFmpeg
- CVE-2026-125211FFmpeg through 9.0.2 Heap Corruption via libaribcaption ASS Error CleanupFFmpeg
- CVE-2026-125210FFmpeg through 9.0.2 Heap Overflow in libaribcaption Text Subtitle DecodingFFmpeg
- CVE-2026-125209FFmpeg before 8.1.3 and 9.x before 9.0.2 Heap Buffer Overflow via dvdsubenc.cFFmpeg
- CVE-2026-125208FFmpeg through 9.0.2 V4L2 M2M Encoder Out-of-Bounds Write in v4l2_buffers.cFFmpeg
- CVE-2026-125204FFmpeg through 9.0.2 Heap Buffer Overflow in libwebp Encoder Conditional ReplenishmentFFmpeg
- CVE-2026-125203FFmpeg before 8.1.3 and 9.x before 9.0.2 Heap Buffer Overflow in Cook Multichannel DecoderFFmpeg
- CVE-2026-125202FFmpeg through 9.0.2 Heap Buffer Overflow via HEVC VAAPI Tile ArraysFFmpeg
- CVE-2026-125201FFmpeg 7.0 before 8.1.3 and 9.x before 9.0.2 Heap Overflow via vulkan_av1.cFFmpeg
- CVE-2026-125196FFmpeg through 9.0.2 Heap Buffer Overflow via liboapv APV Encoder WrapperFFmpeg
- CVE-2026-125181FFmpeg through 9.0.2 FLIC Decoder Out-of-Bounds Write via FLI_BRUN Byte SwapFFmpeg
- CVE-2026-112314Krb5: mit krb5 gss-rpc client memory leak on xid mismatch retriesRed Hat Enterprise Linux · Red Hat Hardened Images
- CVE-2026-112321Krb5: mit krb5 kadmind unauthenticated memory leak dos via auth_gssapi_init error pathsRed Hat Enterprise Linux · Red Hat Hardened Images
- CVE-2026-112320Krb5: mit krb5 kadmind unauthenticated memory leak dos via gss-rpc auth flavor switchingRed Hat Enterprise Linux · Red Hat Hardened Images
- CVE-2026-12977Org.wildfly.core/wildfly-server: wildfly: rbac bypass in wildfly deployment-operation handlers leads to privilege escalationRed Hat Fuse · Red Hat JBoss Enterprise Application Plat… +1
- CVE-2026-123803SuperTokens Core: WebAuthn sign-in accepts a passkey across tenant boundariessupertokens-core
- CVE-2026-119079Krb5: mit krb5 kdc unauthenticated cpu dos via quadratic asn.1 sequence of decodingRed Hat Enterprise Linux · Red Hat Hardened Images
- CVE-2026-112323Krb5: mit krb5 kadmind unauthenticated memory exhaustion via failed auth_gssapi_init requestsRed Hat Enterprise Linux · Red Hat Hardened Images
- CVE-2026-112322Krb5: mit krb5 kadmind unauthenticated cpu dos via auth_gssapi client states cleanupRed Hat Enterprise Linux · Red Hat Hardened Images
- CVE-2026-123999ION-DTN 3.6.2-4.2.0 Heap Buffer Overflow via nm_mgr AMP Renderingnasa-jpl ION-DTN
- CVE-2026-70555rConfig Core 8.2.3 < 8.2.13 Cleartext Credential Exposure via APIrConfig
- CVE-2026-123802SuperTokens Core SAML: identity taken from an assertion that never passed the audience check, allowing sign-in as any IdP usersupertokens-core
- CVE-2026-123801SuperTokens Core: SAML callback accepts a replayed RelayState + SAMLResponse, minting a fresh authorization code on each replaysupertokens-core
- CVE-2026-120834WordPress WP2LEADS plugin <= 3.5.17 - Privilege Escalation vulnerabilityTobias WP2LEADS
- CVE-2026-121769WordPress WP w3all phpBB plugin <= 3.1.9 - SQL Injection vulnerabilityaxew3.com WP w3all phpBB
- CVE-2026-123799SuperTokens Core: Dashboard session tokens are never checked for expiry: `isValidUserSession` ignores the stored `expiry`, so a…supertokens-core
- CVE-2026-123798SuperTokens Core: SAML XML Signature Wrapping authentication bypass — any IdP user can authenticate as any other usersupertokens-core
- CVE-2026-123797SuperTokens Core: Unknown tenant path bypasses API key and public-tenant enforcementsupertokens-core
- CVE-2026-119755Tasmota 16.0.0 CSRF via Referer Header Validation Bypassarendst Tasmota
- CVE-2026-123367ThorVG: Heap buffer overflow (OOB write) in bundled jpgd JPEG decoderthorvg
- CVE-2026-19706Openshift/installer: openshift installer: unconditional csr approval during agent-based installation (abi) bootstrapAssisted Installer for Red Hat OpenShift Container Platf… +1
- CVE-2026-121576WordPress MCP Server for WordPress plugin <= 2.0.1 - Privilege Escalation vulnerabilityAtlasAiDev MCP Server for WordPress
- CVE-2026-122664WordPress Broadcast Live Video plugin <= 7.3.14 - Cross Site Scripting (XSS) vulnerabilityVideoWhisper.com Broadcast Live Video
- CVE-2026-123482WordPress JetFormBuilder plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetFormBuilder
- CVE-2026-115340Insecure Storage of Web Transfer Credentials in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-115339Unauthenticated XFT Memory Exhaustion in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-115341Unauthorized File Disclosure via Path Traversal in Thin Client Web Transfer in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-115338Insecure XFT Transport in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-103906Disabled TLS Certificate Validation Enables MITM Attacksam_automatic_machines am_club
- CVE-2026-124683Eclipse Langium versions 3.2.0 through 4.4.0 contain an inefficient algorithmic complexity issue (CWE-407) in the opt-in…Eclipse Foundation Eclipse Langium
- CVE-2025-10248XSS vulnerability in OpenText FilrOpenText Filr
- CVE-2026-124850SQL Injection in Database Migration via Stored Connector Identifiers in flowintelflowintel
- CVE-2026-104620PackageKit/ZYpp local privilege escalation using InstallFiles(SIMULATE)PackageKit
- CVE-2026-119474Privilege Escalation in HAVELSAN's Liman Render EngineHAVELSAN Liman Render Engine
- CVE-2026-95779An exposure of the appliance’s confidential certificate information vulnerability exists in HPE Morpheus manager software.Hewlett Packard Enterprise (HPE) HPE Morpheus Software
- CVE-2026-95778A remote code execution vulnerability exists in HPE Morpheus Software.Hewlett Packard Enterprise (HPE) HPE Morpheus Software
- CVE-2026-121843Privilege escalation in Firefox for iOSMozilla Firefox for iOS
- CVE-2026-121842Privilege escalation in the Reader View component in Firefox for iOSMozilla Firefox for iOS
- CVE-2026-16283Command Injection in Osbil Technology's Ltd's oPanelOsbil Technology Ltd.Osbil Technology oPanel
- CVE-2026-119610Gstreamer1-plugins-good: gstreamer1-plugins-good: out-of-bounds heap read in mtap16/mtap24 h.264 rtp depayloader via signed/unsigned…Red Hat Enterprise Linux
- CVE-2026-95648Privilege Escalation in C-Prot's C-Prot AppDefenseC-Prot AppDefense
- CVE-2026-94434OS Command Injection Leading to Root Code Execution in TÜBİTAK BİLGEM's Pardus Boot RepairTÜBİTAK BİLGEM Software Technologies Research Institute Par…
- CVE-2026-120854WordPress iubenda plugin <= 3.13.6 - Denial of Service Attack vulnerabilityiubenda
- CVE-2026-120856WordPress Invoice Gateway for WooCommerce – Invoice Payment Gateway plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerabilityRymera Web Invoice Gateway for WooCommerce – Invoice Paymen…
- CVE-2026-118791Insecure software update mechanismCompuGroup Medical Wingesfar
- CVE-2026-118790Multiple Hardcoded CredentialsCompuGroup Medical Wingesfar
- CVE-2026-118468AIS XML parsers allow external entity resolutionCompuGroup Medical Infantia · CompuGroup Medical Profim +2
- CVE-2026-118461AIS PersonnelService client performs unauthenticated doctor-specific operationsCompuGroup Medical Infantia · CompuGroup Medical Profim +2
- CVE-2026-118460AIS embedded private keys enable practitioner impersonationCompuGroup Medical Infantia · CompuGroup Medical Profim +2
- CVE-2026-118458AIS shared test login provider contains fixed administrative credentialsCompuGroup Medical Phronesis · CompuGroup Medical Venere
- CVE-2026-112172Unauthenticated SQL Execution in XDent/XMedical Synchronization InfrastructureCompuGroup Medical XDent · CompuGroup Medical XMedical
- CVE-2026-121629Gst-plugins-good: gst-plugins-good: local file disclosure via unvalidated file:// uris in adaptivedemux2 manifest handlingRed Hat Enterprise Linux
- CVE-2026-123460WordPress WordPress File Upload plugin <= 5.2.2 - Cross Site Scripting (XSS) vulnerabilityNickboss WordPress File Upload
- CVE-2026-121722WordPress Formidable Forms Signature Online Contract Automation plugin <= 2.0.5 - Broken Access Control vulnerabilityWP E-Signature Formidable Forms Signature Online Contract A…
- CVE-2026-122666WordPress Mang Board WP plugin <= 2.4.7 - Cross Site Scripting (XSS) vulnerabilityKitae Park Mang Board WP
- CVE-2026-123476WordPress Featured Image from URL plugin <= 6.1.4 - Cross Site Scripting (XSS) vulnerabilityfifu.app Featured Image from URL
- CVE-2026-121570WordPress RSVP and Event Management plugin <= 2.7.17 - Cross Site Scripting (XSS) vulnerabilityWP Chill RSVP and Event Management
- CVE-2026-123475WordPress MapSVG plugin <= 8.16.3 - Broken Access Control vulnerabilityPT Norther Lights Production MapSVG
- CVE-2026-121782WordPress If-So Dynamic Content Personalization plugin <= 1.10.3 - Cross Site Scripting (XSS) vulnerabilityIf-So Dynamic Content Personalization
- CVE-2026-120367Apache Axis2/Java: unbounded JSON request body bufferingApache Software Foundation org.apache.axis2:axis2-json
- CVE-2026-106466JWT Auth <= 3.0.2 - Unauthenticated Account Access Persistence via Insufficient Refresh Token RevocationJWT Auth
- CVE-2026-119483WordPress Form Maker by 10Web plugin <= 1.15.50 - Cross Site Scripting (XSS) vulnerabilityForm Maker by 10Web
- CVE-2026-119505WordPress Welcart e-Commerce plugin <= 2.12.6 - Cross Site Scripting (XSS) vulnerabilityWelcart e-Commerce
- CVE-2026-123463WordPress Checkout Files Upload for WooCommerce plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerabilityWP Wham Checkout Files Upload for WooCommerce
- CVE-2026-123484WordPress JetFormBuilder plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetFormBuilder
- CVE-2026-121764WordPress FV Flowplayer Video Player plugin <= 7.5.56.7212 - Cross Site Scripting (XSS) vulnerabilityFolioVision FV Flowplayer Video Player
- CVE-2026-119504WordPress Frontend Admin by DynamiApps plugin <= 3.30.1 - Cross Site Scripting (XSS) vulnerabilityFrontend Admin by DynamiApps
- CVE-2026-54863WordPress Review Schema plugin <= 3.1.4 - Cross Site Scripting (XSS) vulnerabilityMamunur Rashid Review Schema
- CVE-2026-123465WordPress myCred plugin <= 4.0.2 - Sensitive Data Exposure vulnerabilitymyCred
- CVE-2026-121780WordPress Flying Images plugin <= 2.4.15 - Cross Site Scripting (XSS) vulnerabilityGijo Varghese Flying Images
- CVE-2026-111403WordPress WP Inventory Manager plugin <= 2.5.9 - Cross Site Scripting (XSS) vulnerabilityWP Inventory Manager
- CVE-2026-121760WordPress weDocs plugin <= 2.6.1 - Broken Access Control vulnerabilityweDevs weDocs
- CVE-2026-92683Incomplete evaluation of multi-condition JWT where filter in @authentication in @neo4j/graphql@neo4j/graphql
- CVE-2026-111421Apache Airflow: Execution API: set_xcom skips the reserved-key check, so task-written XComs instantiate airflow. classes on the API serverApache Software Foundation apache-airflow-core
- CVE-2026-94249Missing Authorization in TÜBİTAK BİLGEM's LiderahenkTÜBİTAK BİLGEM Software Technologies Research Institute Lid…
- CVE-2026-123091Vigilant < 2.11.0 - 2FA Bypass via Third-Party Login FormsVigilant
- CVE-2026-123064WP BASE Booking of Appointments, Services and Events 6.5.0 - Subscriber+ Privilege EscalationWP BASE Booking of Appointments, Services and Events
- CVE-2026-121875Post Duplicator < 3.0.18 - Admin+ Privilege Escalation via Unvalidated Capability AssignmentPost Duplicator
- CVE-2026-121874Post Duplicator < 3.0.18 - Admin+ Arbitrary Option Update via Unvalidated Option NamePost Duplicator
- CVE-2026-118202Limit Login Attempts Reloaded < 3.4.1 - Two-Factor Authentication Bypass via Malformed X-Forwarded-For HeaderLimit Login Attempts Security
- CVE-2026-118201Limit Login Attempts Reloaded 3.0.0 - 3.4.0 - Two-Factor Authentication Bypass via XML-RPCLimit Login Attempts Security
- CVE-2026-115256Mail Debug for WooCommerce <= 1.3.0 - Unauthenticated Sent Email Disclosure Leading to Account TakeoverMail Debug for WooCommerce
- CVE-2026-115212mView <= 1.0.3 - Subscriber+ Arbitrary File UploadmView 豆瓣电影
- CVE-2026-115204AZEXO Store Locator <= 1.4 - Subscriber+ Arbitrary File Write via azt_items_importAZEXO Store Locator
- CVE-2026-113362Improper Access Control in the program installation folder in NEC Corporation WebSAM Winshare Ver 7.5.0 and earlier (excluding Ver 7.3.3)…NEC WebSAM WinShare
- CVE-2026-124563D-Link DIR-878 HNAP SetWanSettings buffer overflowD-Link DIR-878
- CVE-2026-124562D-Link DIR-878 HNAP SetWanSettings buffer overflowD-Link DIR-878
- CVE-2026-124561D-Link DIR-878 HNAP prog.cgi SetVLANSettings stack-based overflowD-Link DIR-878
Medium, low and unrated 324
- CVE-2026-125077SourceCodester Smart Attendance System with QR Code Scanner cross-site request forgerySourceCodester Smart Attendance System with QR Code Scanner
- CVE-2026-125076SourceCodester Smart Attendance System with QR Code Scanner JSON Endpoint attendance_handler.php missing authenticationSourceCodester Smart Attendance System with QR Code Scanner
- CVE-2026-125395Ampache before 8.4.0 Stored XSS via Song Lyrics ID3 Tagampache
- CVE-2026-125394FreeRDP before 3.33.0 Use-After-Free via Stale Brush Cache PointerFreeRDP
- CVE-2026-125392Webmin through 2.670 Stored XSS via BIND8 edit_recs.cgi ALL Viewwebmin
- CVE-2026-125389Group-Office before 6.8.181, 25.0.116, and 26.0.58 Stored XSS via filterXSS BypassIntermesh Group-Office
- CVE-2026-125387Faveo Helpdesk through 2.0.3 Cross-Department Ticket Tampering via TicketControllerfaveosuite faveo-helpdesk
- CVE-2026-125386langchain4j-aideepin through 3.32.0 IDOR via /character/message reference endpointsmoyangzhan langchain4j-aideepin
- CVE-2026-125381DataRoom through 3.0.0 SQL Injection via MyBatisService.generateSqlgcpaas DataRoom
- CVE-2026-125379Movim through 0.35.5 Authorization Bypass via Post::ajaxGetPost Cached Post Readmovim
- CVE-2026-125378PowerDNS-Admin before 2026.11.0 Missing Authorization via Template Apply EndpointPowerDNS-Admin
- CVE-2026-125376VanBlog through 0.54.0 Private Article Disclosure via Public Password EndpointMereithhh vanblog
- CVE-2026-125375MrDoc through 1.1.1 Missing Authorization via Project Document Sort Handlerszmister2016 MrDoc
- CVE-2026-125374Krayin CRM before 2.2.8 Broken Object Level Authorization via Lead Tag Attach/Detachkrayin laravel-crm
- CVE-2026-125373IETF Datatracker before 12.83.0 Cross-NomCom Authorization Bypass via Nomcom Viewsietf-tools datatracker
- CVE-2026-125372REBUILD before 4.5.3 Authorization Bypass via Feeds Details and Comments Endpointsgetrebuild rebuild
- CVE-2026-125371Tinyproxy through 1.11.3 Hostname ACL Allow-List Bypass via Suffix Matchtinyproxy
- CVE-2026-125369Bitpoll through 0.11.0 Unauthenticated Vote and Comment Disclosure via Unscoped Lookupsfsinfuhh Bitpoll
- CVE-2026-125367Pico through 4.1.2 SSRF in Feeds Service via run SSH Commandpicosh pico
- CVE-2026-125366Omnom through 0.9.0 SSRF via Add Feed /add_feed Routeasciimoo omnom
- CVE-2026-125363MikroDash before 0.8.79 SSRF via Personal Notification ChannelsSecOps-7 MikroDash
- CVE-2026-125362Seahub through 14.0.10 Predictable Share Link Passwords via Batch Endpointhaiwen seahub
- CVE-2026-125359Mediary Scout before 2026.11.05 SSRF via PanSou Search Source Settingfancydirty mediary-scout
- CVE-2026-125357Munin munin-httpd through 2.999.18 Path Traversal via Static File Handlermunin-monitoring munin
- CVE-2026-117477KUSANAGI provided by GMO Prime Strategy Co., Ltd.GMO Prime Strategy Co. KUSANAGI 7 Security Edition · GM… +13
Show all 324 entriesShow fewer entries
- CVE-2026-125075SourceCodester Smart Attendance System with QR Code Scanner Admin Account Creation create_admin.php getMessage missing authenticationSourceCodester Smart Attendance System with QR Code Scanner
- CVE-2026-125074SourceCodester Smart Attendance System with QR Code Scanner Password Reset reset_password.php password recoverySourceCodester Smart Attendance System with QR Code Scanner
- CVE-2026-125118Mongoose: Prototype pollution via Schema.prototype.virtual()Automattic mongoose · mongoose
- CVE-2026-124034Path traversal in Amazon Braket SDK local hybrid job input data downloadAWS amazon-braket-sdk
- CVE-2026-125116Mongoose: Discriminator key values matching inherited properties (e.g. __t: 'constructor') bypass schema casting and can poison collectionsAutomattic mongoose · mongoose
- CVE-2026-125115Novu: `validateUrlSsrf` permits CGNAT (100.64.0.0/10) destinations — affects Workflow HTTP request step + Webhook filter conditionnovuhq novu · @novu application-generic +1
- CVE-2026-125113XRootD: Path traversal in directory listing allows access to the parent directory via trailing ".." patternxrootd
- CVE-2026-125112djust: A template binding inherits a context safety grant it never earned (XSS)djust-org djust
- CVE-2026-90590Permanent loss of transmit capability in the NXP ENET QoS Ethernet driver after an Ethernet link dropzephyrproject zephyr
- CVE-2026-90589Memory-mapped thread stack is never unmapped when a thread is aborted by another thread, exhausting kernel virtual address spacezephyrproject zephyr
- CVE-2026-90588Out-of-bounds read in Zephyr HTTP client debug logging of response header fieldszephyrproject zephyr
- CVE-2026-90587NULL pointer dereference in the Zephyr USB host stack when a device reports zero configurationszephyrproject zephyr
- CVE-2026-90585Renesas RA SCI UART driver: unacknowledged receive-error interrupt causes a permanent interrupt storm and CPU lockupzephyrproject zephyr
- CVE-2026-125110Rack: Rack::Static header_rules bypass via dot-segment normalization mismatchrack
- CVE-2026-124999braindecode Hub Integration base.py EEGModuleMixin._from_pretrained path traversalbraindecode
- CVE-2026-125109Rack: Rack::Request#host_with_port (and #base_url / #url) return the raw invalid Host header — incomplete fix of CVE-2026-34835rack
- CVE-2026-125108Rack: Multipart boundary ambiguity guard in Rack::Multipart::Parser can be bypassed with a quoted boundary value, allowing WAF bypassrack
- CVE-2026-77473AsyncSSH: SFTP Recursive Copy Path Traversal via Unsanitized Server-Supplied Filenamesronf asyncssh
- CVE-2026-124996Turboderp-org ExLlamaV3 hash-MoE routing routing.cu routing_sel_norm_kernel out-of-boundsTurboderp-org ExLlamaV3
- CVE-2026-61812ModSecurity: HTML decoder missing entities, leading to evasionowasp-modsecurity ModSecurity
- CVE-2026-104259ModSecurity: removeComments Transformation Fails to Strip Adjacent Comments, Enabling WAF Rule Bypassowasp-modsecurity ModSecurity
- CVE-2026-125106Wagtail: Improper restriction handling on Page translation API endpointwagtail
- CVE-2026-125105Wagtail: Identification of documents by SHA1 hashwagtail
- CVE-2026-123820Wagtail: Improper restriction handling on descendant collections in Documents and Images APIwagtail
- CVE-2026-123819Wagtail: Improper permission handling when copying snippetswagtail
- CVE-2026-115864Monoceros versions before 0.30 for Perl allow a request declaring a large Content-Length to kill a worker by exhausting memoryMonoceros
- CVE-2026-123814pyLoad WindowsPhoneNotify addon: non-admin SETTINGS user triggers SSRF via unguarded http.client notification hostpyload · pyload-ng
- CVE-2026-124033Relative path traversal in the log export commands in AWS ParallelCluster CLIaws-parallelcluster
- CVE-2026-123812Dynatrace MCP Server: create_dynatrace_notebook missing the human-approval gatedynatrace-oss dynatrace-mcp · @dynatrace-oss/dynatrace-mcp-…
- CVE-2026-63634pympp: Gas Draining with paddingtempoxyz pympp
- CVE-2026-123810Dynatrace MCP Server: DQL injection via parameters not documented as DQLdynatrace-oss dynatrace-mcp · @dynatrace-oss/dynatrace-mcp-…
- CVE-2026-123809Dynatrace MCP Server: Workflow template injection via create_workflow_for_notificationdynatrace-oss dynatrace-mcp · @dynatrace-oss/dynatrace-mcp-…
- CVE-2026-63497titra: residual mass assignment via customfields in timeentry/create and project/task/createtitraio titra
- CVE-2026-124994Turboderp-org ExLlamaV3 NGramEmbedding ngram.cu ngram_dequant out-of-boundsTurboderp-org ExLlamaV3
- CVE-2026-123808Nuxt UI: UAuthForm / UForm SSR markup omits `method`, leaking credentials via GET if submitted before hydrationnuxt ui · @nuxt/ui
- CVE-2026-122056Openscap: one-byte heap buffer overflow in sds-compose may lead to denial-of-serviceRed Hat Enterprise Linux · Red Hat Hardened Images
- CVE-2026-124992nushell Data Conversion ser.rs escape_bytes control sequencenushell
- CVE-2026-113971This issue was addressed by restricting options offered on a locked device.Apple iOS and iPadOS
- CVE-2026-113969A logic issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-113968A logic issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-113965This issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-113964A logic issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-113963An authorization issue was addressed with improved state management.Apple iOS and iPadOS · Apple visionOS +1
- CVE-2026-113960This issue was addressed by removing the vulnerable code.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-56712Replicate Cog 0.23.1 SSRF via cog.File and cog.Path URL Inputsreplicate cog
- CVE-2026-123806python-tuf: Platform-dependent delegation path matchingtheupdateframework python-tuf · tuf
- CVE-2026-86692apport: Arbitrary file creation or overwrite via path traversal in base64-encoded problem report keysCanonical apport
- CVE-2026-119078Apache Commons Codec: Blake3 doFinalize is stateless; the documented KDF example derives identical keysApache Software Foundation commons-codec:commons-codec
- CVE-2026-124077Apache Commons Codec: NUL bytes in tree entry names cause Git/SWHID identifier collisions (GitIdentifiers class)Apache Software Foundation commons-codec:commons-codec · Ap…
- CVE-2026-124987mikefarah yq encoder_properties.go Encode escape outputmikefarah yq
- CVE-2026-87857Temporal Server workflow-history pagination token is not bound to the requested namespace and workflowTemporal Technologies go.temporal.io/server
- CVE-2026-124834iomad Password Field company_user.php store_temporary_password information disclosureiomad
- CVE-2026-125270FFmpeg through 9.0.2 Heap Out-of-Bounds Read in V4L2 M2M EncoderFFmpeg
- CVE-2026-125268FFmpeg through 9.0.2 Uninitialized Heap Memory Disclosure in CFHD DecoderFFmpeg
- CVE-2026-125266FFmpeg through 9.0.2 Uninitialized Stack Memory Disclosure via SANM Codec 23FFmpeg
- CVE-2026-125265FFmpeg through 9.0.2 Use-After-Free via NVDEC Stale Bitstream PointerFFmpeg
- CVE-2026-125264FFmpeg through 9.0.2 CPU Exhaustion via JPEG XL Parser TOC CountFFmpeg
- CVE-2026-125263FFmpeg 9.0 through 9.0.2 Memory Exhaustion via LCEVC Enhancement DimensionsFFmpeg
- CVE-2026-125261FFmpeg through 9.0.2 SGI Encoder Out-of-Bounds Read via sgienc.cFFmpeg
- CVE-2026-125258FFmpeg through 9.0.2 Division by Zero via dovi_configure_ext() in dovi_rpuenc.cFFmpeg
- CVE-2026-125255FFmpeg through 9.0.2 Use-After-Free in MJPEG Hardware-Accelerated DecodingFFmpeg
- CVE-2026-125254FFmpeg through 9.0.2 Division by Zero via VVC ff_vvc_slice_rpl()FFmpeg
- CVE-2026-125253FFmpeg through 9.0.2 VP9 CBS Superframe Integer Overflow Out-of-Bounds ReadFFmpeg
- CVE-2026-125252FFmpeg through 9.0.2 VAAPI Memory Leak via Abandoned Picture BuffersFFmpeg
- CVE-2026-125247FFmpeg through 9.0.2 Integer Overflow via dng_decode_tiles() in libavcodec/tiff.cFFmpeg
- CVE-2026-125246FFmpeg through 9.0.2 Assertion Failure DoS via cbs_jpeg_assemble_fragmentFFmpeg
- CVE-2026-125245FFmpeg through 9.0.2 Memory Leak in MJPEG Hwaccel SOF DecodingFFmpeg
- CVE-2026-125243FFmpeg through 9.0.2 Uninitialized Memory Disclosure via JPEG-LS DecoderFFmpeg
- CVE-2026-125242FFmpeg through 9.0.2 Memory Leak via VDPAU Hwaccel Bitstream Buffer TableFFmpeg
- CVE-2026-125240FFmpeg through 9.0.2 Resource Leak in libsvtjpegxs JPEG XS Decoder WrapperFFmpeg
- CVE-2026-125238FFmpeg through 9.0.2 Reachable Assertion in libxevd EVC Decoder WrapperFFmpeg
- CVE-2026-125237FFmpeg 8.1 through 9.0.2 Denial of Service via DPX Vulkan Hwaccel Error PathFFmpeg
- CVE-2026-125236FFmpeg through 9.0.2 VVC Decoder Memory Leak via alloc_frame()FFmpeg
- CVE-2026-125234FFmpeg through 9.0.2 WavPack Encoder Integer Overflow Infinite Loop via wavpack_encode_initFFmpeg
- CVE-2026-125232FFmpeg through 9.0.2 Division by Zero in B-frame Motion EstimationFFmpeg
- CVE-2026-125231FFmpeg 4.4 through 9.0.2 NULL Pointer Dereference via adx_decode_header()FFmpeg
- CVE-2026-125230FFmpeg through 9.0.2 Integer Overflow Division by Zero via pcm_rechunk FilterFFmpeg
- CVE-2026-125228FFmpeg before 8.1.3 and 9.x before 9.0.2 Out-of-Bounds Read in Vorbis EncoderFFmpeg
- CVE-2026-125226FFmpeg through 9.0.2 Excessive Memory Allocation via SBaGen DemuxerFFmpeg
- CVE-2026-125225FFmpeg through 9.0.2 NULL Pointer Dereference via aac_adtstoasc Bitstream FilterFFmpeg
- CVE-2026-125224FFmpeg through 9.0.2 Vorbis Parser CPU Exhaustion via Invalid ExtradataFFmpeg
- CVE-2026-125223FFmpeg 8.0 through 9.0.2 Memory Leak in VP9 Decoder via vp9_decode_frameFFmpeg
- CVE-2026-125221FFmpeg through 9.0.2 Uncontrolled Recursion in FLAC Parser score_header()FFmpeg
- CVE-2026-125220FFmpeg through 9.0.2 Mimic Decoder Deadlock via Frame Threading FailureFFmpeg
- CVE-2026-125217FFmpeg through 9.0.2 RoQ DPCM Encoder Uninitialized Heap Memory DisclosureFFmpeg
- CVE-2026-125216FFmpeg through 9.0.2 DPX Encoder NULL Pointer Dereference via encode_gbrp12()FFmpeg
- CVE-2026-125215FFmpeg 7.1 through 9.0.2 NULL Pointer Dereference via ff_dovi_rpu_generate()FFmpeg
- CVE-2026-125207FFmpeg through 9.0.2 Excessive Memory Allocation via Interplay ACM DecoderFFmpeg
- CVE-2026-125206FFmpeg through 9.0.2 Out-of-Bounds Read via prores_ks Interlaced Alpha EncodingFFmpeg
- CVE-2026-125205FFmpeg through 9.0.2 Memory Exhaustion via av1_frame_merge Bitstream FilterFFmpeg
- CVE-2026-125200FFmpeg through 9.0.2 Memory Leak via libx265 Dolby Vision RPU PayloadsFFmpeg
- CVE-2026-125199FFmpeg through 9.0.2 Memory Leak in VC-1 Decoder via vc1_decode_frame()FFmpeg
- CVE-2026-125198FFmpeg through 9.0.2 Memory Leak via MediaCodec JNI setBufferFFmpeg
- CVE-2026-125197FFmpeg through 9.0.2 Heap Out-of-Bounds Read via LCL/ZLIB Multithread DecodingFFmpeg
- CVE-2026-125195FFmpeg through 9.0.2 Uninitialized Memory Disclosure via ADPCM_MS Trellis EncodingFFmpeg
- CVE-2026-125194FFmpeg through 9.0.2 Out-of-Bounds Read via PCM DVD EncoderFFmpeg
- CVE-2026-125193FFmpeg through 9.0.2 Out-of-Bounds Read via bitpacked_decode_uyvy422()FFmpeg
- CVE-2026-125192FFmpeg through 9.0.2 Heap Memory Disclosure via DXA Decoder Uninitialized BufferFFmpeg
- CVE-2026-125191FFmpeg through 9.0.2 V4L2 M2M Decoder Deadlock via Reference Count LeakFFmpeg
- CVE-2026-125190FFmpeg through 9.0.2 Uninitialized Stack Memory Disclosure via MVC2 DecoderFFmpeg
- CVE-2026-125189FFmpeg 8.1 through 9.0.2 Denial of Service via lcevc_metadata Bitstream FilterFFmpeg
- CVE-2026-125188FFmpeg through 9.0.2 ProRes prores_aw Heap Out-of-Bounds Read in Interlaced EncodingFFmpeg
- CVE-2026-125187FFmpeg through 9.0.2 TTA Encoder Reachable Assertion via tta_encode_frame()FFmpeg
- CVE-2026-125186FFmpeg through 9.0.2 CPU Exhaustion via dts2pts Bitstream FilterFFmpeg
- CVE-2026-125185FFmpeg through 9.0.2 Division by Zero via AFGS1 Film Grain Scaling PointsFFmpeg
- CVE-2026-125184FFmpeg 6.1 through 9.0.2 Information Disclosure via CamStudio Decoder cscd.cFFmpeg
- CVE-2026-125183FFmpeg through 9.0.2 Denial of Service via HEVC PPS 3D Extension ParsingFFmpeg
- CVE-2026-125182FFmpeg through 9.0.2 Out-of-Bounds Read via Cook Decoder js_subband_startFFmpeg
- CVE-2026-125180FFmpeg 8.1 through 9.0.2 EXIF Parser Memory Exhaustion via Overlapping TagsFFmpeg
- CVE-2026-125179FFmpeg through 9.0.2 Heap Memory Disclosure via VQA Video DecoderFFmpeg
- CVE-2026-125178FFmpeg through 9.0.2 Out-of-Bounds Heap Read via TDSC Cursor DimensionsFFmpeg
- CVE-2026-125177FFmpeg through 9.0.2 Uninitialized Heap Memory Disclosure via MSCC/SRGC DecoderFFmpeg
- CVE-2026-125176FFmpeg through 9.0.2 Uninitialized Memory Read in Flash Screen Video 2 DecoderFFmpeg
- CVE-2026-125175FFmpeg through 9.0.2 Information Disclosure via Flash Screen Video DecoderFFmpeg
- CVE-2026-125174FFmpeg before 8.1.3 and 9.x before 9.0.2 NULL Pointer Dereference via ff_hap_set_chunk_count()FFmpeg
- CVE-2026-125173FFmpeg through 9.0.2 Memory Leak in libxevd EVC Decoder WrapperFFmpeg
- CVE-2026-125172FFmpeg through 9.0.2 Out-of-Bounds Read via libxevd EVC NAL LengthFFmpeg
- CVE-2026-125171FFmpeg through 9.0.2 Out-of-Bounds Read in Musepack SV7 Decoder via mpc7.cFFmpeg
- CVE-2026-125170FFmpeg through 9.0.2 Uninitialized Memory Disclosure via targa_decode_rle()FFmpeg
- CVE-2026-125104FFmpeg through 9.0.2 Memory Exhaustion DoS via APE Decoder apedec.cFFmpeg
- CVE-2026-125103FFmpeg through 9.0.2 Uninitialized Heap Disclosure via MLZ Decompressor in ALS DecoderFFmpeg
- CVE-2026-125102FFmpeg through 9.0.2 TAK Decoder Uninitialized Memory Disclosure via takdec.cFFmpeg
- CVE-2026-125101FFmpeg through 9.0.2 VMnc Decoder Uninitialized Heap Memory DisclosureFFmpeg
- CVE-2026-125100FFmpeg through 9.0.2 Integer Overflow in OpenEXR Decoder Tile CountFFmpeg
- CVE-2026-125099FFmpeg through 9.0.2 Uninitialized Memory Disclosure via GEM Raster DecoderFFmpeg
- CVE-2026-125098FFmpeg through 9.0.2 WebP Decoder Information Disclosure via Short ALPH ChunkFFmpeg
- CVE-2026-125097FFmpeg through 9.0.2 Uninitialized Heap Memory Disclosure via rawdec.c Raw Video DecoderFFmpeg
- CVE-2026-125096FFmpeg through 9.0.2 Uninitialized Memory Disclosure via Tiertex SEQ DecoderFFmpeg
- CVE-2026-125095FFmpeg through 9.0.2 C93 Decoder Uninitialized Stack Memory DisclosureFFmpeg
- CVE-2026-125073FFmpeg through 9.0.2 Infinite Loop Denial of Service via IMC/IAC DecoderFFmpeg
- CVE-2026-125072FFmpeg through 9.0.2 NULL Pointer Dereference in MPEG Audio DecoderFFmpeg
- CVE-2026-125071FFmpeg through 9.0.2 NULL Pointer Dereference in JV Video DecoderFFmpeg
- CVE-2026-125070FFmpeg through 9.0.2 NULL Pointer Dereference in EA TQI DecoderFFmpeg
- CVE-2026-125069FFmpeg through 9.0.2 NULL Pointer Dereference via Motion Pixels DecoderFFmpeg
- CVE-2026-125068FFmpeg through 9.0.2 NULL Pointer Dereference in Bink Video DecoderFFmpeg
- CVE-2026-125067FFmpeg through 9.0.2 VBLE Decoder NULL Pointer Dereference via vble_decode_frame()FFmpeg
- CVE-2026-125066FFmpeg through 9.0.2 NULL Pointer Dereference in CLJR Video DecoderFFmpeg
- CVE-2026-125065FFmpeg through 9.0.2 NULL Pointer Dereference via TGV Decoder eatgv.cFFmpeg
- CVE-2026-125064FFmpeg through 9.0.2 NULL Pointer Dereference in G.726 ADPCM DecoderFFmpeg
- CVE-2026-112319Krb5: mit krb5 kadmind authenticated memory exhaustion dos via unbounded rpc xdr allocationRed Hat Enterprise Linux · Red Hat Hardened Images
- CVE-2026-112318Krb5: mit krb5 kadmind authenticated dos exploiting dereference of null policy name pointersRed Hat Enterprise Linux · Red Hat Hardened Images
- CVE-2026-112316Krb5: mit krb5 kadmind authenticated memory leak dos in xdr_krb5_tl_data() decode failureRed Hat Enterprise Linux · Red Hat Hardened Images
- CVE-2026-112317Krb5: mit krb5 kdc unauthenticated memory leak dos in kdb keytab key decryption error pathRed Hat Enterprise Linux · Red Hat Hardened Images
- CVE-2026-112315Krb5: mit krb5 kadmind unauthenticated memory leak dos in rpcsec_gss buffer decode failureRed Hat Enterprise Linux · Red Hat Hardened Images
- CVE-2026-123804SuperTokens Core: A session created concurrently with account unlink survives the unlinksupertokens-core
- CVE-2026-124000ION-DTN 2.1.0-4.2.0 Heap Buffer Under-allocation DoS in amsdnasa-jpl ION-DTN
- CVE-2026-125041Gst-plugins-good: gst-plugins-good: qtdemux out-of-bounds heap read from invalid uncompressed video layoutRed Hat Enterprise Linux
- CVE-2026-125040Gst-plugins-base: gst-plugins-base: quadratic regex processing in srt/webvtt subtitle parser causes denial of serviceRed Hat Enterprise Linux
- CVE-2026-121573WordPress WP Activity Log plugin <= 5.6.7 - Cross Site Scripting (XSS) vulnerabilityMelapress WP Activity Log
- CVE-2026-84503Ansible-core: ansible-core: ansible.builtin.git invokes git without a `--` separator, allowing argument injection via a `-`-leading…Red Hat Migration Toolkit for Applications · Red Hat Mi… +12
- CVE-2026-125063Automation-controller: automation-controller: quadratic regex in schedule rrule validation allows an authenticated user to exhaust api web…Red Hat Ansible Automation Platform
- CVE-2026-60117receive_sharing_intent 1.4.1-1.9.0 Path Traversal via FileDirectoryKasemJaffer receive_sharing_intent
- CVE-2026-123796compose-lint: Incomplete fix for GHSA-jf3h-8jvx-vcrg: a run stopped at the finding limit quotes a secret from a CI-generated `.env`tmatens compose-lint · compose-lint +1
- CVE-2026-123373compose-lint: A committed symlink makes compose-lint quote a file from outside the project into its outputtmatens compose-lint · compose-lint +1
- CVE-2026-123372compose-lint: A pull request can make compose-lint quote a secret from a CI-generated `.env` into its findingstmatens compose-lint · compose-lint +1
- CVE-2026-123371compose-lint: A `.compose-lint.yml` symlinked outside the project is read, and a parse error quotes part of the targettmatens compose-lint · compose-lint +1
- CVE-2026-123370compose-lint: `fix --apply` can delete a line the user did not select, including a security settingtmatens compose-lint · compose-lint
- CVE-2026-123369compose-lint: Compose file text can issue GitHub Actions workflow commands through the compose-lint Actiontmatens compose-lint · tmatens/compose-lint +1
- CVE-2026-123368compose-lint: .env read through a symlink outside the project can expose the CI job's environmenttmatens compose-lint · compose-lint +1
- CVE-2026-123364OctoPrint: Stored XSS via saved connection parametersOctoPrint
- CVE-2026-121612WordPress WPBruiser {no- Captcha anti-Spam} plugin <= 3.6.2 - Broken Authentication vulnerabilityWPZOOM WPBruiser {no- Captcha anti-Spam}
- CVE-2026-115337Folder Permission Bypass in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-115336FTP Quota Accounting Bypass in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-112165Disabled TLS Certificate Validation Enables MITM Attackslaservideo lasergest
- CVE-2026-121690CVE-2026-121690FrodoBots EarthRover Mini+ firmware
- CVE-2026-121689CVE-2026-121689FrodoBots EarthRover Mini+ firmware
- CVE-2026-121688CVE-2026-121688FrodoBots EarthRover Mini+ firmware
- CVE-2026-121687CVE-2026-121687FrodoBots EarthRover Mini+ firmware
- CVE-2026-121686CVE-2026-121686FrodoBots EarthRover Mini+ firmware
- CVE-2026-121685CVE-2026-121685FrodoBots EarthRover Mini+ firmware
- CVE-2026-114594Time-of-check time-of-use (TOCTOU) race condition in Sandisk Dashboard InstallerSandisk Dashboard
- CVE-2026-112164Hardcoded AES Key Enables Credential Disclosurelaservideo lasergest
- CVE-2026-118492In Eclipse Langium versions 3.0.0 and later, the langium-sprotty package does not HTML-escape diagnostic messages before rendering them in…Eclipse Foundation Eclipse Langium
- CVE-2026-124959Nmaslib Hnswlib and Spotify Voyager HNSW Index Deserialization Heap Out-of-Bounds WriteSpotify Voyager · hnswlib
- CVE-2026-124916PrestaShop Performance Debug Configuration PHP Code InjectionPrestaShop
- CVE-2026-124249`http.cookiejar` applies expired `Set-Cookie` to cookie store before policy validationPython Software Foundation CPython
- CVE-2026-19552ssl.get_server_certificate(addr, ca_certs=...) verifies the chain but never the identityPython Software Foundation CPython
- CVE-2026-124636kevquirk PureBlog Page Editor content.php save_page path traversalkevquirk PureBlog
- CVE-2026-124635kevquirk PureBlog Admin Image Upload Endpoint upload-image.php unrestricted uploadkevquirk PureBlog
- CVE-2026-124625PipraPay Admin Panel pp-functions.php deleteData sql injectionPipraPay
- CVE-2026-121841Other issue in Firefox for iOSMozilla Firefox for iOS
- CVE-2026-119743pdfmake < 0.3.14 Shared Cache Access Policy Bypassbpampuch pdfmake
- CVE-2026-119274Infoblox NIOS version upto 9.1.0 contain a vulnerability related to improper input validation that allows a stored XSSInfoblox NIOS
- CVE-2026-124624PipraPay pp-token anti-CSRF pp-adapter.php hash_hmac hard-coded credentialsPipraPay
- CVE-2026-119613AshAi sends unrecognized tool errors verbatim to MCP clients and the model, disclosing internal detailsash-project ash_ai · ash_ai
- CVE-2026-121611Gstreamer1-plugins-bad-free: gst-plugins-bad: use of uninitialized gsth265hrdparams in gst_h265_parse_vps() multi-hrd workaround loopRed Hat Enterprise Linux
- CVE-2026-121601Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: out-of-bounds read in mxfdemux via unchecked delta_id and slice indexRed Hat Enterprise Linux
- CVE-2026-124623PipraPay ZIP Archive system-settings-import unrestricted uploadPipraPay
- CVE-2026-122673WordPress ShopEngine plugin <= 4.9.8 - Cross Site Scripting (XSS) vulnerabilityWpmet ShopEngine
- CVE-2026-112205Bruteforce Protection Bypass in WidzialniCMSFundacja Widzialni WidzialniCMS
- CVE-2026-112204Reflected XSS in WidzialniCMSFundacja Widzialni WidzialniCMS
- CVE-2026-124622olivier-ls PHP-FTS Storage.php open toctouolivier-ls PHP-FTS
- CVE-2026-112171SQL injection vulnerability in Magistra softwareGALENO SISTEMI MAGISTRA
- CVE-2026-112170Improper verification of downloaded upgradesGALENO SISTEMI MAGISTRA
- CVE-2026-112169Undocumented backdoor allows authentication bypass in Magistra softwareGALENO SISTEMI MAGISTRA
- CVE-2026-112168Multiple embedded secrets and weak algorithms in MagistraGALENO SISTEMI MAGISTRA
- CVE-2026-118798Multiple sensitive authentication data exposedCompuGroup Medical Wingesfar
- CVE-2026-118795AIS stores authorization state in locally modifiable databasesCompuGroup Medical Infantia · CompuGroup Medical Profim +1
- CVE-2026-118792Default ODBC credentialsCompuGroup Medical Wingesfar
- RUSTSEC-2026-0464`webhook_commands` was removed from crates.io for malicious codewebhook_commands
- RUSTSEC-2026-0465`electrumd` was removed from crates.io for malicious codeelectrumd
- RUSTSEC-2026-0469`env-test-guard` was removed from crates.io for malicious codeenv-test-guard
- RUSTSEC-2026-0470`gabby-types-sec` was removed from crates.io for malicious codegabby-types-sec
- CVE-2026-118467AIS products expose clinical and personal data via logs and telemetryCompuGroup Medical Infantia · CompuGroup Medical Profim +2
- CVE-2026-118465AIS products use vendor-wide hard-coded database credentialsCompuGroup Medical Infantia · CompuGroup Medical Profim +2
- CVE-2026-118464AIS shared cryptographic services use fixed cryptographic secretsCompuGroup Medical Infantia · CompuGroup Medical Profim +2
- CVE-2026-118459AIS PasswordSOS permits authentication without legitimate credentialsCompuGroup Medical Infantia · CompuGroup Medical Profim +2
- CVE-2026-118450Venere loads replaceable unsigned components from a writable installation locationCompuGroup Medical Venere
- CVE-2026-124684This issue can cause a heap-use-after-free when an embedder unloads a ReloadableString buffer while a previously returned raw character…Samsung Open Source Escargot
- CVE-2026-124621kongxin-github Java_Library_Management_System Swing UI Layer MainInterface.java Landing.sureadmin improper authorizationkongxin-github Java_Library_Management_System
- CVE-2026-122661WordPress Directorist plugin <= 8.10.7 - Cross Site Scripting (XSS) vulnerabilitywpWax Directorist
- CVE-2026-119515WordPress Radius Booking — Booking Calendar for Appointments & Services plugin <= 1.0.20 - Broken Access Control vulnerabilityMamunur Rashid Radius Booking — Booking Calendar for Appoin…
- CVE-2026-122665WordPress Mang Board WP plugin <= 2.4.7 - Cross Site Scripting (XSS) vulnerabilityKitae Park Mang Board WP
- CVE-2026-119524WordPress WP Customer Area plugin <= 8.4.3 - Cross Site Scripting (XSS) vulnerabilityAguila Technologies WP Customer Area
- CVE-2026-120855WordPress TI WooCommerce Wishlist plugin <= 2.14.0 - Cross Site Scripting (XSS) vulnerabilityTemplateInvaders TI WooCommerce Wishlist
- CVE-2026-120838WordPress All-in-One Video Gallery plugin <= 5.0.0 - Cross Site Scripting (XSS) vulnerabilityPlugins360 Labs All-in-One Video Gallery
- CVE-2026-113702iomad PDF Certificate lib.php local_iomad_pluginfile authorizationiomad
- CVE-2026-124591Bahleel CsvExporter.php fputcsv csv injectionBahleel
- CVE-2026-123779Apache Axis2/Java: exposeServiceMetadata not enforced on all metadata routesApache Software Foundation org.apache.axis2:axis2-transport…
- CVE-2026-123753Apache Axis2/Java: SSRF via WS-Addressing ReplyTo and FaultTo endpointsApache Software Foundation org.apache.axis2:axis2-kernel
- CVE-2026-123766Apache Axis2/Java: Cross-site scripting in the OpenAPI module's Swagger UI pageApache Software Foundation org.apache.axis2:axis2-openapi
- CVE-2026-123770Apache Axis2/Java: Unbounded multipart and form-encoded request bodiesApache Software Foundation org.apache.axis2:axis2-kernel
- CVE-2026-106008FraudLabs Pro SMS Verification 1.11.2 - 1.12.1 - Unauthenticated SMS Verification Bypass via wc_sms_action_verifiedFraudLabs Pro SMS Verification
- CVE-2026-120761Apache Axis2/Java: XML External Entity (XXE) injection via imported WSDL/XSD documentsApache Software Foundation org.apache.axis2:axis2-kernel
- CVE-2026-120832Apache Axis2/Java: SSRF via WSDL/XSD schema import resolutionApache Software Foundation org.apache.axis2:axis2-kernel
- CVE-2026-124590zhangbw409 library_manager_system UserController.java BookController.addBook improper authorizationzhangbw409 library_manager_system
- CVE-2026-82436Apache Storm Client: Deserialization of Untrusted Data from the State StoreApache Software Foundation org.apache.storm:storm-client
- CVE-2026-82440Apache Storm Nimbus: Submitter-Controlled Class Instantiation in Nimbus via a Fail-Open Scheduler Strategy AllowlistApache Software Foundation org.apache.storm:storm-client
- CVE-2026-124589lxtGH OMG-Seg MoE Shard Checkpoint Loader handle_moe_load_and_save.py load_state_dict_into_model path traversallxtGH OMG-Seg
- CVE-2026-119497WordPress Directorist plugin <= 8.10.6 - Cross Site Scripting (XSS) vulnerabilitywpWax Directorist
- CVE-2026-121763WordPress Hummingbird plugin <= 3.21.2 - Cross Site Scripting (XSS) vulnerabilityWPMU DEV Hummingbird
- CVE-2026-66675WordPress Motors plugin <= 1.4.128 - Cross Site Scripting (XSS) vulnerabilityStylemixThemes Motors
- CVE-2026-119514WordPress RepairBuddy plugin <= 4.1234 - Privilege Escalation vulnerabilityWebful Creations RepairBuddy
- CVE-2026-119503WordPress Welcart e-Commerce plugin <= 2.12.6 - Content Injection vulnerabilityWelcart e-Commerce
- CVE-2026-40913Apache Airflow: Import Errors API Leaks Unauthorized DAG Stack Traces via Incomplete Per-File RBAC EnforcementApache Software Foundation apache-airflow-core
- CVE-2026-50204Apache Airflow: Audit-log secrets masker redacts by key name only, persisting connection and Variable secrets in cleartextApache Software Foundation apache-airflow · Apache Software…
- CVE-2026-68982Apache Airflow: CeleryExecutor: forged callback workloads run on Celery workers without workload-token validationApache Software Foundation apache-airflow-core
- CVE-2026-76185Apache Airflow Task SDK: SecretCache: non-injective team cache key enables cross-team secret disclosure in multi-team modeApache Software Foundation apache-airflow-task-sdk
- CVE-2026-86829Apache Airflow: Deserialization of task-controlled XCom values in the Scheduler during dependency evaluationApache Software Foundation apache-airflow-core
- CVE-2026-82337Apache Airflow: DeadlineAlert fields bypass plugin-registration gate for scheduler-side deserializationApache Software Foundation apache-airflow-core
- CVE-2026-86468Apache Airflow: CLI argv masking misses Variable values and --conn-extra, persisting secrets in audit logsApache Software Foundation apache-airflow · Apache Software…
- CVE-2026-96285Apache Airflow: Scheduler: next_kwargs deserialized before the dict check, so resume data still invokes constructorsApache Software Foundation apache-airflow-core
- CVE-2026-113508Apache Airflow: Logout token revocation fails open; errors silently swallowedApache Software Foundation apache-airflow-core
- CVE-2026-124588huggingface finetrainers Model Index model.py resolve_component_cls code injectionhuggingface finetrainers
- CVE-2026-101031Apache Airflow: Shell command injection in the example_dag_decorator example Dag via an IPv6 zone identifierApache Software Foundation apache-airflow-core
- CVE-2026-124587elizaOS eliza HTTP Server api-base-owner.ts information disclosureelizaOS eliza
- CVE-2026-113504Apache Airflow: Secrets masker: pattern-based masking bounded at depth 5 returns deeply-nested registered secrets in cleartextApache Software Foundation apache-airflow · Apache Software…
- CVE-2026-107474Apache Airflow: Connections API: apprise connection "config" extra returned in cleartextApache Software Foundation apache-airflow · Apache Software…
- CVE-2026-111395Apache Airflow: Reserved serialization keys in Dag run conf crash the scheduler or are rebuilt as objects in the Triggerer via deadline…Apache Software Foundation apache-airflow-core
- CVE-2026-124637Stored Cross-Site Scripting (XSS) in Tankuam PlacesKompini Tankuam Places
- CVE-2026-124586Tencent RapidJSON diyfp.h GetCachedPowerByIndex out-of-boundsTencent RapidJSON
- CVE-2026-111452Apache Airflow: Secrets masker: camelCase key names (privateKey, connectionString, webhookUrl) not matched against the sensitive-field listApache Software Foundation apache-airflow · Apache Software…
- CVE-2026-111453Apache Airflow: API: asset queuedEvents DELETE checks Dag edit on a ?dag_id query value but deletes rows for every readable DagApache Software Foundation apache-airflow-core
- CVE-2026-111454Apache Airflow: API: asset endpoints return scheduled/producing/consuming Dag IDs the caller cannot readApache Software Foundation apache-airflow · Apache Software…
- CVE-2026-111455Apache Airflow: Connections API: async connection test authorizes create at enqueue but overwrites a later-created connection at commitApache Software Foundation apache-airflow-core
- CVE-2026-116337Uncontrolled resource consumption vulnerability in HTTP response handling of Qt Network impacts Qt FrameworkQt Framework
- CVE-2026-124584wummel patool Gzip Extraction fileutil.py extract_gzip symlinkwummel patool
- CVE-2026-92606TOCTOU Race Condition in TÜBİTAK BİLGEM's Pardus MyComputerTÜBİTAK BİLGEM Software Technologies Research Institute Par…
- CVE-2026-124582WebTorrent File Path torrent.js getFileModtimes path traversalWebTorrent
- CVE-2026-124581itsourcecode Airline Reservation System manage_flight.php sql injectionitsourcecode Airline Reservation System
- CVE-2026-113437Path Traversal vulnerability exists in SS1/ SS1 Cloud provided by DOS Co., Ltd.DOS Co. SS1 · Rococo Co. rocoeyes
- CVE-2026-109582Insecure storage of sensitive information issue exists in SS1 provided by DOS Co., Ltd.DOS Co. SS1
- CVE-2026-124579aaPanel BillionMail Relay Configuration API relay.go injectionaaPanel BillionMail
- CVE-2026-120386Effekseer improperly validates "effect" files.Effekseer
- CVE-2026-124578Pantum BP5100DW Web omDB.shtml missing authenticationPantum BP5100DW
- CVE-2026-124576BeikeShop Guest Order Lookup OrderRepo.php getOrderByNumber behavioral workflowBeikeShop
- CVE-2026-124575SiteServer SSCMS Admin-Login CAPTCHA LoginController.Submit.cs LoginController.Submit excessive authenticationSiteServer SSCMS
- CVE-2026-124574chenyme grok2api Video Job Retry video.go beginSelectionSession improper authorizationchenyme grok2api
- CVE-2026-124573logseq Local HTTP API server.cljs validate-auth-token missing authenticationlogseq
- CVE-2026-124572DataLinkDC dinky Catalogue Upload API CatalogueController.java CatalogueController.upload path traversalDataLinkDC dinky
- CVE-2026-81422Advanced Appointment Booking & Scheduling < 2.7 - Unauthenticated Arbitrary User RegistrationAdvanced Appointment Booking & Scheduling
- CVE-2026-123145WooCommerce Stripe Payment Gateway 10.9.0 - 11.0.1 - Customer Password Stored in Plaintext via Express CheckoutWooCommerce Stripe Payment Gateway
- CVE-2026-123131GemBooking < 1.7.1 - Staff+ Arbitrary Post Deletion and Site Settings Update via REST Context Check BypassGemBooking
- CVE-2026-123129Event Tickets Manager for WooCommerce 1.5.4 - 1.5.9 - Unauthenticated Site-wide Event Ticket Price ManipulationEvent Tickets Manager for WooCommerce
- CVE-2026-123128GemBooking < 1.7.1 - Unauthenticated Team Member Double-Booking via Cross-Object Race ConditionGemBooking
- CVE-2026-123088UniPAY Payment Gateway For WooCommerce < 2.4 - Unauthenticated Order Key and Customer PII DisclosureUniPAY Payment Gateway For WooCommerce
- CVE-2026-121759Fusion Page Builder < 1.7.1 - Contributor+ Arbitrary Post Trashing via IDORFusion Page Builder
- CVE-2026-120409All-in-One Video Gallery < 5.1.1 - Unauthenticated Password-Protected Video Disclosure via Player Page and Download HandlerAll-in-One Video Gallery
- CVE-2026-124571SourceCodester Simple CRUD using PHP and FPDF register.php sql injectionSourceCodester Simple CRUD using PHP and FPDF
- CVE-2026-124570SourceCodester Online Leave Management System Employee Avatar Upload Extension Master.php cross site scriptingSourceCodester Online Leave Management System
- CVE-2026-124569fushengqian fuintCatering CommissionCashServiceImpl.java updateCommissionCash access controlfushengqian fuintCatering
- CVE-2026-124568fushengqian fuintCatering Refund Agreement RefundServiceImpl.agreeRefund access controlfushengqian fuintCatering
- CVE-2026-124567fushengqian fuint ClientOrderController.java receipt state issuefushengqian fuint
- CVE-2026-124566fushengqian fuint Alipay Callback ClientPayController.java aliPayCallback behavioral workflowfushengqian fuint
- CVE-2026-124565fushengqian fuint Order Verification MerchantOrderController.java confirm access controlfushengqian fuint
- CVE-2026-124564D-Link DIR-878 HNAP prog.cgi GetListDirectory path traversalD-Link DIR-878
- CVE-2026-121825Open redirect in the Liberty ID-FF service provider single sign-on flowOpenAM
- CVE-2026-124558DataLinkDC Dinky sql-gateway Endpoint SqlGateway.java SqlGateway.onOpen server-side request forgeryDataLinkDC Dinky
- CVE-2026-124557OtterMind Chat2DB Class Generator DbMybatisGenerateServiceImpl.java DbMybatisGenerateServiceImpl.generateClass path traversalOtterMind Chat2DB
- CVE-2026-124556kekingcn kkFileView BaseUrlFilter.java BaseUrlFilter.getBaseUrl redirectkekingcn kkFileView
- CVE-2026-124555JeecgBoot Table Dictionary API getTableDictList JimuFormApiService.getTableDictList sql injectionJeecgBoot
- CVE-2026-124554JeecgBoot JimuBI getAllChartData sql injectionJeecgBoot
- CVE-2026-124509floci-io Floci S3 Destination Configuration DeliveryStreamDescription.java S3Destination.bucketName path traversalfloci-io Floci
- CVE-2026-124508floci-io Floci Artifact CodeBuildJsonHandler.java BuildspecParser.parseArtifacts path traversalfloci-io Floci
- CVE-2026-124507conductor-oss conductor PLANNER_CONTEXT_FETCH Task PlannerContextFetchTask.java WorkflowSystemTask.start server-side request forgeryconductor-oss conductor
- CVE-2026-124506Dianping CAT Report hourlyReport.tag Model.getDomain cross site scriptingDianping CAT
- CVE-2026-124505Dianping CAT Login/Logout Handler.java Handler.redirectDianping CAT
- CVE-2026-124504erupts erupt ReportService.java ReportService.queryBiData sql injectionerupts erupt
- CVE-2026-124502yungifez Skuul School Management System Delete GraduationController.php resetGraduation authorizationyungifez Skuul School Management System