CVEs published November 11, 2026
666 CVEs were published on November 11, 2026: 50 critical, 312 high. 9 early warnings were posted.
- Published
- 666
- Critical
- 50
- High
- 312
- Medium
- 225
- Low
- 36
- Unrated
- 43
- Now in CISA KEV
- 0
- Fix available
- 346
- Early warnings
- 9
Most affected products
- Google Chrome
- 83
- Fortinet FortiManager · Fortinet FortiAnalyzer
- 30
- Fortinet FortiMail
- 25
- Fortinet FortiAuthenticator
- 18
- Progressive Robot hMailServer
- 18
- Apache Software Foundation Apache Roller
- 15
- nodejs node
- 15
- Revive Adserver
- 14
- Security For WooCommerce
- 11
- Red Hat Enterprise Linux · Red Hat Hardened Images
- 10
Early warnings 9
- SZB-7ade08c64fConnectWise investigates active campaign abusing compromised ScreenConnect environmentsConnectWise · ScreenConnect
- SZB-9da0974403Notion says Fireworks AI breach exposed some Notion AI chat transcriptsNotion · Insights
- SZB-95bc7c63c8Zoom patches critical Windows privilege escalation flaw CVE-2026-108186Zoom Workplace for Windows
- SZB-99d2395657Researchers link AntiFox AI pentesting platform to attacks on AWS credentialsAntiFox AI pentesting platform
- SZB-56ead58d33AllUnited cyberattack prompts 350+ Dutch sports clubs to report data breachesAllUnited membership administration system
- SZB-d12fff21cbClaroc reports 35,000+ open Grok-built apps, some leaking data and passwordsSpaceXSI · Grok Build
- SZB-2970bf6358Fortinet patches nearly 100 vulnerabilities, per SecurityWeekFortinet · FortiManager
- SZB-d875e13ba5eMudhra revokes eight more intermediate CAs after October key compromiseeMudhra
- SZB-26834c9f14CISA adds Cisco BroadWorks and Openwave flaws to KEV catalog over active exploitationCisco · BroadWorks
Critical 50
- CVE-2026-126911Use after free in Accessibility in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the…Google Chrome
- CVE-2026-126846Use after free in Skia in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code outside…Google Chrome
- CVE-2026-126879Use after free in Layout in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox…Google Chrome
- CVE-2026-126895Use after free in CSS in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a…Google Chrome
- CVE-2026-126885Use after free in ServiceWorker in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code outside the…Google Chrome
- CVE-2026-67449Portabase: Unauthenticated path traversal in TUS webhook overwrites AES-256-GCM master keyportabase
- CVE-2026-126229A authorization bypass through user-controlled key vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0…Fortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2026-126262A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 8.0.0…Fortinet FortiAnalyzer · Fortinet FortiManager
- CVE-2026-126259A missing authentication for critical function vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through…Fortinet FortiOS
- CVE-2026-126263A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiMail 8.0.0 through…Fortinet FortiMail
- CVE-2026-126254A numeric truncation error vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through…Fortinet FortiOS
- CVE-2026-126257A use of hard-coded password vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may…Fortinet FortiAuthenticator
- CVE-2026-126253A authentication bypass by primary weakness vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS…Fortinet FortiOS
- CVE-2026-126251A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may…Fortinet FortiAuthenticator
- CVE-2026-126170A improper encoding or escaping of output vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.2, FortiAnalyzer 7.6.0 through 7.6.7…Fortinet FortiManager · Fortinet FortiAnalyzer +1
- CVE-2026-126164A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiMail 8.0.0 through…Fortinet FortiMail
- CVE-2026-126147A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1…Fortinet FortiMail
- CVE-2026-126156A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6…Fortinet FortiMail
- CVE-2026-126155A incorrect authorization vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through…Fortinet FortiMail
- CVE-2026-126157A improper authentication vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through…Fortinet FortiMail
- CVE-2026-126150A weak password recovery mechanism for forgotten password vulnerability in Fortinet FortiMail 8.0.0, FortiMail 7.6.0 through 7.6.5…Fortinet FortiMail
- CVE-2026-126148A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0…Fortinet FortiMail
- CVE-2026-126812blueprintUE Self-Hosted Edition before 4.3.7 Empty MariaDB Root Password via Docker Composeblueprintue-self-hosted-edition
- CVE-2026-126806WWBN AVideo 14.3 through 29.7.1 Stored XSS via Video Source TagWWBN AVideo
- CVE-2026-126800Hydro @hydrooj/ui-default before 4.59.1 Stored XSS via Markdown language- Classhydro-dev @hydrooj/ui-default
Show all 50 entriesShow fewer entries
- CVE-2026-126797NextScan 1.1.0 through 1.2.0 Hardcoded JWT Key Authentication Bypass in ns-admintongcheng-security-team NextScan
- CVE-2026-126777Traccar 3.15 before 6.17.0 Authentication Bypass via Empty LDAP PasswordTraccar
- CVE-2026-65840Fider: Cross-Tenant Authentication Bypass via Missing tenant_id Filter in getVerificationByKeygetfider fider
- CVE-2026-126768OpsTree REMS through 1.0.0 Authentication Bypass via is_local_auth FlagOpsTree Solutions REMS
- CVE-2026-110697Quay: quay: sql like wildcard injection in robot listing leaks cross-tenant robot tokensRed Hat OpenShift Update Service · Red Hat Quay
- CVE-2026-126325Critical Remote Code Execution (RCE) vulnerability reported in WindchillPTC Windchill · PTC FlexPLM
- CVE-2026-123710Quay: red hat quay: unauthenticated registry signing-key takeover via service key rotationRed Hat Quay
- CVE-2026-119618Apache HTTP Server: mod_http2: heap corruption and RCE in assign_headersApache Software Foundation Apache HTTP Server
- CVE-2026-85632Unauthenticated Payment Status Manipulation in Sipay Electronic Money's WordPress (WooCommerce)Sipay Electronic Money and Payment Services WooCommerce Vir…
- CVE-2026-126537Ninja Forms - File Uploads <= 3.3.36 - Unauthenticated Arbitrary File Deletion via 'files[].data.file_path' Parameter via…SaturdayDrive Ninja Forms - File Uploads
- CVE-2026-78287WordPress STAGGS plugin <= 3.3.0 - Remote Code Execution (RCE) vulnerabilitySTAGGS
- CVE-2026-118965Path traversal in host label synchronization allows code execution on the central site from a remote siteCheckmk
- CVE-2026-120495Arbitrary file write and code execution via crafted Synthetic Monitoring agent dataCheckmk
- CVE-2026-121374Arbitrary file write and code execution via excluded node roles in Kubernetes special agentCheckmk
- CVE-2026-112174Privilege escalation in Enter’s Iperius BackupEnter Iperius Backup
- CVE-2026-123695Security For WooCommerce <= 1.0.16 - Unauthenticated Privilege Escalation via REST API Options Update and User Token DisclosureSecurity For WooCommerce
- CVE-2026-121497Askany < 2.2.0 - Unauthenticated Arbitrary File UploadAskAny
- CVE-2026-115735Somatic Framework <= 1.8.14 - Subscriber+ Arbitrary File DeletionSomatic Framework
- CVE-2026-115734Pay With a Tweet <= 1.0.5 - Subscriber+ Arbitrary File Deletion via Button Download PathPay with a tweet
- CVE-2026-115733PrintAura WooCommerce API <= 4.0.2 - Unauthenticated WooCommerce REST API Authentication BypassPrintaura-Woocommerce
- CVE-2026-64678Nitrite: Unfiltered Java Deserialization in Legacy v1 Database Migration Pathnitrite-java
- CVE-2026-64682AstroBlocks: Admin session tokens can be forged due to a hard-coded fallback JWT secret and a mismatched environment variable nameNauelG astro-blocks
- CVE-2026-64670Stored XSS in @waline/client via the unsanitized markdown preview of a comment's raw body on editwalinejs waline
- CVE-2026-126542WWBN AVideo 6.5 through 29.7.1 Authentication Bypass via Hybridauth Social LoginWWBN AVideo
- CVE-2026-126539Directus before 12.1.0 Authorization Bypass via Public WebSocket REST Interfacedirectus
High 312
- CVE-2026-126899Use after free in Elements in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute…Google Chrome
- CVE-2026-126920Information leak in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML…Google Chrome
- CVE-2026-126860Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to…Google Chrome
- CVE-2026-126890Out of bounds read in Media in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside…Google Chrome
- CVE-2026-126913Out of bounds read in Compositing in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer…Google Chrome
- CVE-2026-126921Use after free in Accessibility in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the…Google Chrome
- CVE-2026-126868Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the…Google Chrome
- CVE-2026-126902Incorrect reference resolution in Browser in Google Chrome on on Mac prior to 157.0.8103.78 allowed a remote attacker who had compromised…Google Chrome
- CVE-2026-126841Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-126850Incorrect authorization in SiteIsolation in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker who had…Google Chrome
- CVE-2026-126852Use after free in MediaStream in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the…Google Chrome
- CVE-2026-126901Use after free in PDF in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a…Google Chrome
- CVE-2026-126849Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the…Google Chrome
- CVE-2026-126908Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the…Google Chrome
- CVE-2026-126855Missing authorization in ImageCapture in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer…Google Chrome
- CVE-2026-126893Out of bounds write in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox…Google Chrome
- CVE-2026-126915Use of uninitialized variable in Skia in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker who had compromised…Google Chrome
- CVE-2026-126906Race condition in Extensions in Google Chrome on on Mac prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer…Google Chrome
- CVE-2026-126882Information leak in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-126848Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process…Google Chrome
- CVE-2026-126840Out of bounds write in Network in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the…Google Chrome
- CVE-2026-126883Use after free in Core in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer…Google Chrome
- CVE-2026-126857Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted…Google Chrome
- CVE-2026-126897Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a…Google Chrome
- CVE-2026-126892Use after free in MediaStream in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the…Google Chrome
Show all 312 entriesShow fewer entries
- CVE-2026-126854Incorrect authorization in Layout in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a…Google Chrome
- CVE-2026-126843Type confusion in Turbolev in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox…Google Chrome
- CVE-2026-126888Buffer overflow in Turbolev in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox…Google Chrome
- CVE-2026-126877Use after free in Dawn in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-126872Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to…Google Chrome
- CVE-2026-126880Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a…Google Chrome
- CVE-2026-126914Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted…Google Chrome
- CVE-2026-126922Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-126873Use after free in Extensions in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering…Google Chrome
- CVE-2026-126905Incomplete cleanup in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside…Google Chrome
- CVE-2026-126856Incomplete cleanup in Cache in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted…Google Chrome
- CVE-2026-126917Memory corruption in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the…Google Chrome
- CVE-2026-126861Use after free in Media in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside…Google Chrome
- CVE-2026-126894Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-126884Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox via a…Google Chrome
- CVE-2026-126844Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process…Google Chrome
- CVE-2026-126866Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to…Google Chrome
- CVE-2026-126918Use after free in Layout in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox…Google Chrome
- CVE-2026-126876Integer overflow in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox…Google Chrome
- CVE-2026-126874Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a…Google Chrome
- CVE-2026-126891Use after free in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to read memory inside the sandbox via a crafted…Google Chrome
- CVE-2026-126858Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker to read memory outside the…Google Chrome
- CVE-2026-126869Use after free in Frames in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox…Google Chrome
- CVE-2026-126896Missing authorization in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to bypass web origin policy via a crafted…Google Chrome
- CVE-2026-126863Use after free in HTML in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the…Google Chrome
- CVE-2026-126867Use after free in Browser in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary…Google Chrome
- CVE-2026-126881Improper initialization in Media in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code…Google Chrome
- CVE-2026-126845Uninitialized resource in GPU in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process…Google Chrome
- CVE-2026-126851Use after free in Accessibility in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the…Google Chrome
- CVE-2026-126907Uninitialized resource in Media in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker who had compromised the…Google Chrome
- CVE-2026-126904Use after free in Compositing in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process…Google Chrome
- CVE-2026-126900Use after free in CSS in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a…Google Chrome
- CVE-2026-126862Improper input validation in Core in Google Chrome on on Android prior to 157.0.8103.78 allowed a local attacker to bypass web origin…Google Chrome
- CVE-2026-126875Missing authorization in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to bypass web origin policy via a crafted…Google Chrome
- CVE-2026-126871Out of bounds read in Skia in Google Chrome on on Mac prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox…Google Chrome
- CVE-2026-126898Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted…Google Chrome
- CVE-2026-126842Use after free in ANGLE in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code outside…Google Chrome
- CVE-2026-126910Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a…Google Chrome
- CVE-2026-126903Improper state validation in ANGLE in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker to bypass web origin…Google Chrome
- CVE-2026-126916Integer overflow in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via…Google Chrome
- CVE-2026-126865Use after free in DOM in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a…Google Chrome
- CVE-2026-126853Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process…Google Chrome
- CVE-2026-126847Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a…Google Chrome
- CVE-2026-126909Use after free in Passwords in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute…Google Chrome
- CVE-2026-126878Information leak in Core in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to leak cross-origin data via a crafted HTML…Google Chrome
- CVE-2026-126919Use after free in BrowserTag in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the…Google Chrome
- CVE-2026-126912Buffer overflow in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code outside the sandbox…Google Chrome
- CVE-2026-126870Uninitialized resource in ANGLE in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox via a…Google Chrome
- CVE-2026-126887Use after free in Animation in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox…Google Chrome
- CVE-2026-126886Use after free in Frames in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox…Google Chrome
- CVE-2026-126859Link following in FileSystem in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute…Google Chrome
- CVE-2026-126889Off-by-one error in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the…Google Chrome
- CVE-2026-126864Use after free in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a…Google Chrome
- CVE-2026-125637Konflux-ci: unvalidated hostname fields enable caddyfile config injection in the konflux ui proxy generator, allowing an unauthenticated…konflux-ci
- CVE-2026-68540fulgur: Quadratic style-list reprocessing during containing-block resolution for absolutely-positioned pseudo-elements causes denial of…fulgur-rs fulgur
- CVE-2026-68539fulgur: Unbounded string-set value accumulation causes memory/CPU exhaustion (denial of service)fulgur-rs fulgur
- CVE-2026-68538fulgur: Unbounded counters() expansion in generated content causes memory/CPU exhaustion (denial of service)fulgur-rs fulgur
- CVE-2026-111521Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.4.0.17, contain a Time-of-check Time-of-use (TOCTOU) Condition…Dell Display and Peripheral Manager
- CVE-2026-65971Livewire PowerGrid: SQL Injection through the public `sortDirection` Livewire property in the `naturalSort` order-by pathPower-Components livewire-powergrid
- CVE-2026-67547taOS: Authenticated Non-Admin Host Code Execution via Skill Runtimejaylfc taOS
- CVE-2026-67548taOS: Non-Admin Users Can Access System Settings and Update Actionsjaylfc taOS
- CVE-2026-67546Heym: Command execution via POST /api/mcp/fetch-tools stdio transport: supplied command is spawned before MCP validationheymrun heym
- CVE-2026-67545Heym: Server-Side Request Forgery (SSRF) in HTTP Workflow Nodeheymrun heym
- CVE-2026-67544Heym: Playwright Custom Code Backend RCE via `playwrightCode` Fieldheymrun heym
- CVE-2026-67543Heym Unsandboxed skill code execution: skills run via a local backend subprocess without the Docker isolation that Python tools mandateheymrun heym
- CVE-2026-67542Heym: SSRF via POST /api/mcp/fetch-tools: any authenticated user reaches local/private URLs through the SSE and streamable-HTTP transportsheymrun heym
- CVE-2026-67541Heym: Missing role gate in team-member management lets any member add/remove members, exposing team-shared credentialsheymrun heym
- CVE-2026-121528A improper certificate validation vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2.0…Fortinet FortiOS
- CVE-2026-126255A path traversal: '../filedir' vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through…Fortinet FortiOS · Fortinet FortiPAM
- CVE-2026-126256A out-of-bounds read vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS…Fortinet FortiOS
- CVE-2026-126258A stack-based buffer overflow vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.7 may allow an unauthenticated attacker with wad port…Fortinet FortiOS
- CVE-2026-126252A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAuthenticator 8.0.0…Fortinet FortiAuthenticator
- CVE-2026-126250A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may…Fortinet FortiAuthenticator
- CVE-2026-126248A insufficiently protected credentials vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through…Fortinet FortiAuthenticator
- CVE-2026-126246A null pointer dereference vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may…Fortinet FortiAuthenticator
- CVE-2026-126249A improper privilege management vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10…Fortinet FortiAuthenticator
- CVE-2026-126247A use of externally-controlled format string vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0…Fortinet FortiAuthenticator
- CVE-2026-126245A out-of-bounds write vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow…Fortinet FortiAuthenticator
- CVE-2026-126244A allocation of resources without limits or throttling vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3…Fortinet FortiAuthenticator
- CVE-2026-126236A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAnalyzer 8.0.0…Fortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2026-126241A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAuthenticator 8.0.0…Fortinet FortiAuthenticator
- CVE-2026-126239A stack-based buffer overflow vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10…Fortinet FortiAuthenticator
- CVE-2026-126214A authentication bypass by spoofing vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7…Fortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2026-126224A improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiAnalyzer 8.0.0…Fortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2026-126228A out-of-bounds write vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0…Fortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2026-126215A incorrect authorization vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer…Fortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2026-126240A improper neutralization of special elements used in an ldap query ('ldap injection') vulnerability in Fortinet FortiAuthenticator 8.0.0…Fortinet FortiAuthenticator
- CVE-2026-126217A incorrect authorization vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer…Fortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2026-126238A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may…Fortinet FortiAuthenticator
- CVE-2026-126225A missing authorization vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.7, FortiAnalyzer Cloud 8.0.0…Fortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2026-126227A unintended proxy or intermediary ('confused deputy') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0…Fortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2026-126220A improper neutralization of special elements in output used by a downstream component ('injection') vulnerability in Fortinet…Fortinet FortiManager
- CVE-2026-126219A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 8.0.0…Fortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2026-126235A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 8.0.0 through…Fortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2026-126221A improper neutralization of special elements in output used by a downstream component ('injection') vulnerability in Fortinet…Fortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2026-126237A loop with unreachable exit condition ('infinite loop') vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3…Fortinet FortiAuthenticator
- CVE-2026-126234A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer Cloud…Fortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2026-126243A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may…Fortinet FortiAuthenticator
- CVE-2026-126233A unrestricted upload of file with dangerous type vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through…Fortinet FortiManager · Fortinet FortiAnalyzer Cloud +1
- CVE-2026-126242A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may…Fortinet FortiAuthenticator
- CVE-2026-126222A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 8.0.0 through…Fortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2026-126211A improper privilege management vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.1 through 7.6.7…Fortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2026-126213A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 8.0.0…Fortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2026-126218A authorization bypass through user-controlled key vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through…Fortinet FortiManager
- CVE-2026-126185A improper control of generation of code ('code injection') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer…Fortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2026-126232A improper certificate validation vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7…Fortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2026-126226A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAnalyzer…Fortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2026-126230A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through…Fortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2026-126231A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAnalyzer…Fortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2026-126223A stack-based buffer overflow vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7…Fortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2026-126184A authentication bypass by spoofing vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7…Fortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2026-126212A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer…Fortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2026-126183A authorization bypass through user-controlled key vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through…Fortinet FortiManager
- CVE-2026-126182A improper control of generation of code ('code injection') vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0…Fortinet FortiManager
- CVE-2026-126176A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7…Fortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2026-126177A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7…Fortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2026-126178A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer…Fortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2026-126175A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0…Fortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2026-126179A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAnalyzer…Fortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2026-126169A improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiMail 8.0.0 through…Fortinet FortiMail
- CVE-2026-126166A improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiMail 8.0.0 through…Fortinet FortiMail
- CVE-2026-126168A improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiMail 8.0.0 through…Fortinet FortiMail
- CVE-2026-126180A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1…Fortinet FortiManager
- CVE-2026-126171A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through…Fortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2026-126167A improper neutralization of special elements used in a command ('command injection') vulnerability in Fortinet FortiMail 8.0.0 through…Fortinet FortiMail
- CVE-2026-126181A use of hard-coded credentials vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager…Fortinet FortiManager
- CVE-2026-126163A use of externally-controlled format string vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1 may allow a remote unauthenticated…Fortinet FortiMail
- CVE-2026-126165A memory allocation with excessive size value vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6…Fortinet FortiMail
- CVE-2026-126161A uncontrolled resource consumption vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail…Fortinet FortiMail
- CVE-2026-126162A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6 may…Fortinet FortiMail
- CVE-2026-126160A improper authentication vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through…Fortinet FortiMail
- CVE-2026-126159A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6…Fortinet FortiMail
- CVE-2026-126152A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6…Fortinet FortiMail
- CVE-2026-126151A incorrect implementation of authentication algorithm vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through…Fortinet FortiMail
- CVE-2026-126154A out-of-bounds write vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through…Fortinet FortiMail
- CVE-2026-126153A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1…Fortinet FortiMail
- CVE-2026-126158A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0…Fortinet FortiMail
- CVE-2026-126149A integer overflow or wraparound vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0…Fortinet FortiMail
- CVE-2026-126146A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0…Fortinet FortiMail · Fortinet FortiRecorder
- CVE-2026-126144A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0…Fortinet FortiMail · Fortinet FortiRecorder +1
- CVE-2026-126145A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0…Fortinet FortiMail
- CVE-2026-65952OS Command Injection in Lenovo XClarity OneCLI 5.5.0 LinuxLenovo OneCLI
- CVE-2026-65949Lenovo XClarity Integrator for WAC: Gateway-Administrator Remote Command ExecutionLenovo XClarity Integrator for WAC
- CVE-2026-65982NULL-pointer dereference (DoS) in nginx-http-flv-modulewinshining nginx-http-flv-module
- CVE-2026-103980ideon: SSRF protection bypass via IPv6 transition addresses (NAT64 / 6to4 / IPv4-mapped) in link preview3xpyth0n ideon
- CVE-2026-65965ideon: Read-only project viewers can wipe and rewrite the canvas and tamper with blocks/files via role-unchecked project endpoints3xpyth0n ideon
- CVE-2026-126813Roundcube Webmail before 1.6.21 and 1.7.6 IMAP Command Injection via _uidRoundcube Webmail
- CVE-2026-126805WWBN AVideo through 29.7.1 Privilege Escalation via Encoder video_id_hashWWBN AVideo
- CVE-2026-126804WWBN AVideo 12.4 through 29.7.1 Path Traversal File Deletion via deleteImage.json.phpWWBN AVideo
- CVE-2026-126803Rote through 2.6.0 Privilege Escalation via Admin Settings API JWT Secret ExposureRabithua Rote
- CVE-2026-126802NextScan 1.1.0 through 1.2.0 Hardcoded Credentials in ns-admin Agent and External APIstongcheng-security-team NextScan
- CVE-2026-126801Rote 1.2.0 through 2.6.0 Account Takeover via OAuth Account Merge EndpointRabithua Rote
- CVE-2026-125926Server-side request forgery in the server registration and update API in mcp-gateway-registryAWS mcp-gateway-registry
- CVE-2026-100307Missing authorization on the external management API in mcp-gateway-registry enables privilege escalation to registry administratorAWS mcp-gateway-registry
- CVE-2026-126815Pre-account hijacking via planted passwordXauenDevs Lagarto Chivato
- CVE-2026-91151Cockpit: cockpit: local privilege escalation via insecure symlink handling in public key addition helperRed Hat Enterprise Linux · Red Hat OpenShift Dev Spaces
- CVE-2026-122095AsiaInfo BSS Platform 9.2 before 9.2.38 has a stored cross-site scripting (XSS) vulnerability in the menu icon upload function.AsiaInfo BSS Platform
- CVE-2026-126781Webmin through 2.670 Users File Injection via acl/cert_issue.cgiwebmin
- CVE-2026-126780Webmin through 2.670 Privilege Escalation via acl/save_group.cgiwebmin
- CVE-2026-126779Spatie Browsershot 2.2.0 before 5.5.0 Local File Read via setHtml()spatie browsershot
- CVE-2026-126774@tinacms/mdx before 2.4.2 Code Injection via MDX Serializer Rich-Text Values@tinacms/mdx
- CVE-2026-108472Xfsprogs: xfsprogs: local privilege escalation via command injection in xfs_adminRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-91150Cockpit: cockpit: denial of service via unbounded fragmented websocket messagesRed Hat Enterprise Linux · Red Hat OpenShift Dev Spaces
- CVE-2026-126051Node.js is vulnerable to a remotely triggerable uncaught exception in TLS servers via deferred handshake callbacksnodejs node
- CVE-2026-65967Fider: Server-Side Request Forgery (SSRF) via Webhook URLgetfider fider
- CVE-2026-91873Dell OpenManage Ansible Modules, versions 2.1.2 through 10.0.3, contains an Improper Certificate Validation vulnerability in the…Dell OpenManage Ansible Modules
- CVE-2026-123874Node.js is vulnerable to an HTTP/2 use-after-free via respondWithFile() stream reset during a pending writenodejs node
- CVE-2026-123747Pappl-retrofit: directory traversal in the add-ppdfiles and delete-ppdfiles actionsOpenPrinting pappl-retrofit · Red Hat Enterprise Linux
- CVE-2026-123872Node.js is vulnerable to a client certificate authentication bypass via TLS 1.2 renegotiation servername changenodejs node
- CVE-2026-65843sync-rpc: Arbitrary remote code execution vulnerabilityForbesLindesay sync-rpc
- CVE-2026-91878Dell OpenManage Ansible Modules, versions 6.0.0 through 10.0.3, contains an Improper Neutralization of Special Elements in Output Used by…Dell OpenManage Ansible Modules
- CVE-2026-91877Dell OpenManage Ansible Modules, versions 2.0.2 through 10.0.3, contains an Improper Neutralization of Special Elements in Data Query…Dell OpenManage Ansible Modules
- CVE-2026-123866Node.js is vulnerable to HTTP/2 response memory disclosure via a use-after-free during stream teardownnodejs node
- CVE-2026-58505geojson-vt: Uncontrolled Recursion in Nested GeoJSON GeometryCollectionmaplibre geojson-vt
- CVE-2026-123865Node.js is vulnerable to an HTTP/2 memory and file-descriptor leak via a protocol error during session shutdownnodejs node
- CVE-2026-91875Dell OpenManage Ansible Modules, versions 9.2.0 through 10.0.3, contains an Improper Certificate Validation vulnerability in the…Dell OpenManage Ansible Modules
- CVE-2026-123864Node.js is vulnerable to cross-connection memory disclosure via TLS write re-entrancy in the HTTPS request parsernodejs node
- CVE-2026-123863Node.js is vulnerable to a remote HTTP/2 denial of service via a reachable assertion in Http2Session teardownnodejs node
- CVE-2026-91874Dell OpenManage Ansible Modules, versions 5.0.0 through 10.0.3, contains an Improper Certificate Validation vulnerability in the…Dell OpenManage Ansible Modules
- CVE-2026-126769OpsTree REMS through 1.0.0 Missing Authentication via /api/v1/databases Governance APIOpsTree Solutions REMS
- CVE-2026-76079Probo: Vertical privilege escalationgetprobo probo
- CVE-2026-91891Dell Terraform Provider for PowerStore, versions prior to 1.3.1 , contains a vulnerability that may cause sensitive authentication data to…Dell Terraform Provider for PowerStore
- CVE-2026-91880Dell Terraform Provider for PowerFlex, versions 1.5.0 through 1.8.0, contains an Improper Certificate Validation vulnerability in the SSH…Dell Terraform Provider for PowerFlex
- CVE-2026-91879Dell Terraform for ObjectScale and Powerstore, versions prior to 1.1.1 (ObjectScale) and versions 1.2.1 through 1.3.0 (PowerStore)…Dell Terraform Provider for ObjectScale · Dell Terraform Pr…
- CVE-2026-65820aeon: Privileged GitHub Actions workflow allowed fork-controlled code executionaeon-toolkit aeon
- CVE-2026-91890Dell Ansible Storage for Unity , versions prior to 1.2.13 contains an Improper Certificate Validation vulnerability in the…Dell Ansible Storage for Unity
- CVE-2026-91871Dell Ansible Storage for PowerStore, versions prior to 3.9.0, contains an Improper Certificate Validation vulnerability in the API client…Dell Ansible Storage for PowerStore
- CVE-2026-91870Dell Ansible Storage for PowerFlex, versions prior to 3.2.0, contains an Improper Certificate Validation vulnerability in the API client…Dell Ansible Storage for PowerFlex
- CVE-2026-106152External Control of Configuration Setting in Telerik Report ServerProgress Software Telerik Report Server
- CVE-2026-61619OWASP CRS: ReDoS in shared unix-shell-evasion regex-assembly include (12 RCE rules) - PCRE2 backtracking-limit exhaustion causes detection…coreruleset
- CVE-2026-107662Blind SQL injection in Revive Adserver 6.0.8 and earlier allows an authenticated manager restricted to one agency to extract arbitrary…Revive Adserver
- CVE-2026-107247An authorization bypass in Revive Adserver 6.0.0 through 6.0.8 allows an authenticated manager restricted to one agency to access or…Revive Adserver
- CVE-2026-106137ClassFactory Race Condition and Retained Assembly Memory in Telerik UI for ASP.NET MVCProgress Software Telerik UI for ASP.NET MVC
- CVE-2026-62971OWASP CRS: XML Attribute Value Bypasscoreruleset
- CVE-2026-106156Uncontrolled Resource Consumption in Telerik UI for ASP.NET Core Server-side AggregationProgress Software Telerik UI for ASP.NET Core
- CVE-2026-124694Cross-Site Scripting in Kendo UI for jQuery PropertyGrid Values and DescriptionsProgress Software Kendo UI for jQuery
- CVE-2026-124693Cross-Site Scripting in Kendo UI for jQuery PivotGrid Axis ChipsProgress Software Kendo UI for jQuery
- CVE-2026-124692Cross-Site Scripting in Kendo UI for jQuery Grid and TreeList Column ReorderingProgress Software Kendo UI for jQuery
- CVE-2026-124690Cross-Site Scripting During Kendo UI for jQuery Custom SVG Icon SanitizationProgress Software Kendo UI for jQuery
- CVE-2026-124689Cross-Site Scripting in Kendo UI for jQuery ActionSheet Header LabelsProgress Software Kendo UI for jQuery
- CVE-2026-124688Cross-Site Scripting via the spriteCssClass Field in Kendo UI for jQueryProgress Software Kendo UI for jQuery
- CVE-2026-124687Cross-Site Scripting in DropDownButton and SplitButton Items in Kendo UI for jQueryProgress Software Kendo UI for jQuery
- CVE-2026-89061During an internal security assessment, a potential vulnerability was discovered in Lenovo PC Manager, distributed exclusively in the…Lenovo PC Manager
- CVE-2026-77882A deserialization of untrusted data vulnerability was discovered in Lenovo System Update that could allow a local authenticated user to…Lenovo System Update
- CVE-2026-77873An improper permissions vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute code…Lenovo System Update
- CVE-2026-64855soapbar: verify_envelope_bsp accepts an unauthenticated embedded certificate (signature forgery / authentication bypass)hitoshyamamoto soapbar
- CVE-2026-105440Switch Engine (EXOS) JSON-RPC Authorization Bypass Allows Read-Only Users to Disclose Sensitive InformationExtreme Networks Switch Engine
- CVE-2026-102589Cross-instance user impersonation through image renderer JWTsGrafana OSS · Grafana Enterprise
- CVE-2026-111024Folder permission bypass in the Git Sync repository files APIGrafana Enterprise · Grafana OSS
- CVE-2026-111000Privilege escalation through folder move in the folders APIGrafana Enterprise · Grafana OSS
- CVE-2026-123040An attacker who gains the ability to execute arbitrary code on a system with TrueConf Server (Linux) versions from 4.7.2 up to, but not…TrueConf Server
- CVE-2026-125838WordPress Quality theme <= 3.3 - Cross Site Request Forgery (CSRF) vulnerabilitywebriti Quality
- CVE-2026-125839WordPress ElitePress theme <= 3.2.1 - Cross Site Request Forgery (CSRF) vulnerabilitywebriti ElitePress
- CVE-2026-125840WordPress Rambo theme <= 3.0 - Cross Site Request Forgery (CSRF) vulnerabilitywebriti Rambo
- CVE-2026-125841WordPress Heroic theme <= 1.4.2 - Cross Site Request Forgery (CSRF) vulnerabilitywebriti Heroic
- CVE-2026-125842WordPress Wallstreet Agency theme <= 1.3.4 - Cross Site Request Forgery (CSRF) vulnerabilitywebriti Wallstreet Agency
- CVE-2026-125843WordPress Spasalon theme <= 3.0 - Cross Site Request Forgery (CSRF) vulnerabilitywebriti Spasalon
- CVE-2026-125844WordPress vice theme <= 1.4 - Cross Site Request Forgery (CSRF) vulnerabilitywebriti vice
- CVE-2026-125845WordPress vdequator theme <= 1.2.7 - Cross Site Request Forgery (CSRF) vulnerabilitywebriti vdequator
- CVE-2026-125846WordPress Mazino theme <= 1.1 - Cross Site Request Forgery (CSRF) vulnerabilitywebriti Mazino
- CVE-2026-125847WordPress vdperanto theme <= 2.2 - Cross Site Request Forgery (CSRF) vulnerabilitywebriti vdperanto
- CVE-2026-125848WordPress Leo theme <= 1.7.4 - Cross Site Request Forgery (CSRF) vulnerabilitywebriti Leo
- CVE-2026-125849WordPress Shk Corporate theme <= 2.4.3 - Cross Site Request Forgery (CSRF) vulnerabilitywebriti Shk Corporate
- CVE-2026-125850WordPress Appointment Dark theme <= 1.3.4 - Cross Site Request Forgery (CSRF) vulnerabilitywebriti Appointment Dark
- CVE-2026-118411Apache Roller: Cross-site request forgery through GET requests to administrative actionsApache Software Foundation Apache Roller
- CVE-2026-105153Apache Roller: XML external entity processing in AtomPub entry parsingApache Software Foundation Apache Roller
- CVE-2026-126662Contao 4.0.0 before 5.3.54, 5.4.0 before 5.7.17, and 6.0.0 before 6.0.6 Filemount Bypass via Edit-MultipleContao
- CVE-2026-126659BlueprintUE Self-Hosted Edition 1.0.0 before 4.3.5 Storage Exhaustion via Anonymous Blueprintsblueprintue-self-hosted-edition
- CVE-2026-125446WordPress Edwiser Bridge plugin <= 4.3.4 - Cross Site Request Forgery (CSRF) vulnerabilityWisdmLabs Edwiser Bridge
- CVE-2026-125784WordPress RestroPress plugin <= 3.4.11 - Cross Site Request Forgery (CSRF) vulnerabilityMagnigenie RestroPress
- CVE-2026-119615Reset Database <= 1.1.3 - Authenticated (Subscriber+) Privilege Escalation to Missing Capability and Nonce Check in process_reset()maltesesolutions Reset Database
- CVE-2026-1038836Storage Rentals <= 2.31.0 - Authenticated (Subscriber+) Authentication Bypass to Administrator Account Takeover via…sixstorage 6Storage Rentals
- CVE-2026-124253WordPress Calculated Fields Form plugin <= 5.5.2.8 - Cross Site Scripting (XSS) vulnerabilitycodepeople Calculated Fields Form
- CVE-2026-123478WordPress AI Engine plugin <= 3.9.1 - Cross Site Scripting (XSS) vulnerabilityMeow Apps AI Engine
- CVE-2026-124741Busybox: stack buffer overflow in udhcpc6 send_d6_renew() and send_d6_release()Red Hat Enterprise Linux · Red Hat Hardened Images
- CVE-2026-124739Busybox: httpd stack buffer overflow via an "i:" rule in a subdirectory httpd.confRed Hat Enterprise Linux · Red Hat Hardened Images
- CVE-2026-124250WordPress GeoDirectory plugin <= 2.8.202 - Cross Site Scripting (XSS) vulnerabilityAyeCode GeoDirectory
- CVE-2026-124737Busybox: heap buffer overflow in the tftp client on fallback to the default block sizeRed Hat Enterprise Linux · Red Hat Hardened Images
- CVE-2026-126621Improper Certificate Validation in hMailServerProgressive Robot hMailServer
- CVE-2026-126617Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in hMailServerProgressive Robot hMailServer
- CVE-2026-126624Unverified Ownership in hMailServerProgressive Robot hMailServer
- CVE-2026-126623Inefficient Algorithmic Complexity in hMailServerProgressive Robot hMailServer
- CVE-2026-126622Incorrect Default Permissions in hMailServerProgressive Robot hMailServer
- CVE-2026-126613Allocation of Resources Without Limits or Throttling in hMailServerProgressive Robot hMailServer
- CVE-2026-126612Improper Link Resolution Before File Access ('Link Following') in hMailServerProgressive Robot hMailServer
- CVE-2026-126610Improper Certificate Validation in hMailServerProgressive Robot hMailServer
- CVE-2026-126611Improper Certificate Validation in hMailServerProgressive Robot hMailServer
- CVE-2026-126607Uncontrolled Search Path Element in hMailServerProgressive Robot hMailServer
- CVE-2026-126609Improper Certificate Validation in hMailServerProgressive Robot hMailServer
- CVE-2026-18769Insufficient IOCTL access control allows local relocation of arbitrary physical memoryBeckhoff Automation TcRouter.sys for Windows on x64 · Be… +1
- CVE-2026-18768Insufficient IOCTL access control allows local access to arbitrary physical memoryBeckhoff Automation TcRouter.sys for Windows on x64 · Be… +1
- CVE-2026-18767Insufficient IOCTL access control allows local access to I/O portsBeckhoff Automation TcRouter.sys for Windows on x64 · Be… +1
- CVE-2026-12062Authenticated SQL InjectionZohocorp ADAudit Plus
- CVE-2026-76981Authenticated Second-Order SQL InjectionZohocorp ADAudit Plus
- CVE-2026-105948In affected versions of Octopus Server, incorrect validation of permissions assigned to a user that would allow them to edit their own…Octopus Deploy Octopus Server
- CVE-2026-111190ARForms <= 7.2.4 - Unauthenticated Arbitrary File Upload to Remote Code Execution via X-FILENAME HeaderARforms
- CVE-2026-12427ARforms <= 7.2.4 - Unauthenticated Stored Cross-Site Scripting via 'description' ParameterARforms
- CVE-2026-12424ARforms <= 7.2.4 - Unauthenticated Stored Cross-Site Scripting via Referer HeaderARforms
- CVE-2026-93487In affected versions of Octopus Server, incorrect validation of the permissions assigned to a user that would allow them to create project…Octopus Deploy Octopus Server
- CVE-2026-96414In affected versions of Octopus Server, insufficient integrity protection of authentication cookies, combined with incorrect validation of…Octopus Deploy Octopus Server
- CVE-2026-123700Security For WooCommerce <= 1.0.16 - Unauthenticated Mass Comment DeletionSecurity For WooCommerce
- CVE-2026-123697Security For WooCommerce <= 1.0.16 - Unauthenticated Two-Factor Code and Secret DisclosureSecurity For WooCommerce
- CVE-2026-123696Security For WooCommerce <= 1.0.16 - Unauthenticated Two-Factor Authentication ResetSecurity For WooCommerce
- CVE-2026-123134Smoove Abandoned Cart Trigger for WooCommerce 4.0.0 - 4.3.5 - Unauthenticated Stored XSSSmoove abandoned cart trigger for WooCommerce
- CVE-2026-121998iChart < 2.2.4 - Subscriber+ Arbitrary Post Read, Update and Deletion via IDORiChart
- CVE-2026-121870Simpler Checkout < 1.5.4 - Subscriber+ Privilege Escalation via Forged Auto-Login TokenSimpler Checkout
- CVE-2026-121863Knowledge Building < 0.7.3 - Reflected XSS via Comment Reply ResponseKnowledge Building
- CVE-2026-121862Knowledge Building < 0.7.3 - Unauthenticated Stored XSS via knbu_new_reply AJAX ActionKnowledge Building
- CVE-2026-118041Contest Gallery < 34.0.3 - Author+ Arbitrary File Upload via Ecommerce Sale File ReplacementContest Gallery
- CVE-2026-111579Forminator Forms 1.58.0 - 1.58.3 - Unauthenticated Privilege Escalation via Paid Registration Form When Stripe Gateway UnavailableForminator Forms
- CVE-2026-109870User Registration & Membership 5.2.8 - 5.3.1 - Unauthenticated Privilege Escalation via Coupon-Based Payment BypassUser Registration & Membership
- CVE-2026-118368Akaunting 3.3.0 - Stored XSS through imported item namesAkaunting
- CVE-2026-64669pam_usb: deny_remote bypassed by compressed IPv6 addresses in pusb_tmux_has_remote_clientsmcdope pam_usb
- CVE-2026-64666pam_usb: getenv() in pusb_local_login bypasses XRDP deny via env-var unsetmcdope pam_usb
- CVE-2026-64668pam_usb: deny_remote bypassed by zone-indexed IPv6 addresses (fe80::1%eth0) in pusb_tmux_has_remote_clientsmcdope pam_usb
- CVE-2026-64671Stored XSS in the @waline/client UserList widget via an unescaped commenter link fieldwalinejs waline
- CVE-2026-116645LimeSurvey Community Edition 7.8.0 - SQL injection via Archive AttributesLimeSurvey Community Edition
- CVE-2026-63660node-fontnik: integer-overflow heap out-of-bounds write in RenderSDFmapbox node-fontnik
- CVE-2026-126570Padloc 4.0.0 before 4.3.1 Prototype Pollution via SCIM PATCH setPath()padloc
- CVE-2026-126566Semantic MediaWiki 7.3.1 before 7.4.1 Incorrect Authorization via Edit Protection AnnotationsSemanticMediaWiki
- CVE-2026-126561Semantic MediaWiki 2.5.0 before 7.4.1 Missing Authorization via Is edit protected AnnotationSemanticMediaWiki
- CVE-2026-63194Bahmni-Core: Path traversal may lead to arbitrary file write in the admin CSV importbahmni-core
- CVE-2026-63192Bahmni-Core: Exfiltration of patient data stored in Bahmni through SQL injection through boolean blind and error based exfilbahmni-core
- CVE-2026-126543WWBN AVideo through 29.7.1 Wallet Credit Manipulation via PayPalYPT ipnV2.phpWWBN AVideo
- CVE-2026-126541WWBN AVideo through 29.7.1 Missing Authorization via Live Restream EndpointsWWBN AVideo
- CVE-2026-126499Jellyfin before 12.0 Path Traversal via Library VirtualFolders Endpointsjellyfin
- CVE-2026-126497LibreCAD through 2.2.1.6 Heap Out-of-Bounds Write via dwgReader18::parseDataPageLibreCAD
Medium, low and unrated 304
- CVE-2026-126759H3C ICG2000 Unified Communication Gateway Web Management check.j missing authenticationH3C ICG2000 Unified Communication Gateway
- CVE-2026-126758Moonshot AI Kimi Code WorkspaceDirsService local.toml reliance on untrusted inputs in a security decisionMoonshot AI Kimi Code
- CVE-2026-126935Zipline before 4.8.0 maxViews Limit Bypass via Race Conditiondiced zipline
- CVE-2026-126934Zipline 4.3.2 before 4.8.0 Rate Limit Bypass via Spoofed X-Forwarded-Fordiced zipline
- CVE-2026-126933Zipline 4.0.0 before 4.8.0 Disabled Extensions Upload Filter Bypass via Extension Format Mismatchdiced zipline
- CVE-2026-126932Zipline 4.6.2 before 4.8.0 Disabled MIME Type Policy Bypass via File Metadata Updatediced zipline
- CVE-2026-126757Moonshot AI Kimi Code Web UI index-HU0LCM-X.js isOriginAllowed redirectMoonshot AI Kimi Code
- CVE-2026-68549ClickMigrate has Path Traversal in "revision -m" argumentQueueForge ClickMigrate
- CVE-2026-68512Paaster: No rate limiting on account login, combined with a public username-enumeration/salt endpoint, enables offline credential-stuffingWardPearce paaster
- CVE-2026-68511Paaster: TOCTOU race condition defeats the 'burn after reading' guarantee on view-once pastesWardPearce paaster
- CVE-2026-67540Heym - Horizontal IDOR: get-by-id on workflow/node templates skips the visibility check the list path enforcesheymrun heym
- CVE-2026-121527A execution with unnecessary privileges vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.7, FortiClientEMS 7.4.0 through 7.4.1…Fortinet FortiClientEMS
- CVE-2026-121526A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator…Fortinet FortiAuthenticator
- CVE-2026-126216A improper privilege management vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through…Fortinet FortiManager
- CVE-2026-126332Improper access control in the autofill vault search in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with only…Devolutions Server
- CVE-2026-126326Improper access control in the administrative role assignment endpoint in Devolutions Server 2026.3.13.0 and earlier allows an…Devolutions Server
- CVE-2026-126331Insertion of sensitive information into sent data in the user list endpoint in Devolutions Server 2026.3.13.0 and earlier allows an…Devolutions Server
- CVE-2026-126328Insertion of sensitive information into sent data in the user endpoints in Devolutions Server 2026.3.13.0 and earlier allows an…Devolutions Server
- CVE-2026-126327Improper access control in the connection history in Devolutions Server 2026.3.13.0 allows an authenticated user without the permission to…Devolutions Server
- CVE-2026-81936Default OpenBMC Root Credential Reintroduced After Reset to Defaults in ThinkSystem v4 XCC3Lenovo XClarity Controller
- CVE-2026-65951Path Traversal (Tar Slip) in Lenovo XClarity OneCLI 5.5.0 LinuxLenovo OneCLI
- CVE-2026-65950Path Traversal (Zip Slip) in Lenovo XClarity OneCLI 5.5.0 LinuxLenovo OneCLI
- CVE-2026-65973Laradocs: Command injection via unescaped Node.js binary path in KaTeX SSRPeteBishwhip laradocs
- CVE-2026-68507ideon: Unauthenticated /api/links/preview endpoint is an open SSRF relay, and its IP blocklist misses the 0.0.0.0/:: unspecified-address…3xpyth0n ideon
- CVE-2026-65968ideon: Unauthenticated SSRF in /api/proxy/image via WHATWG bracketed/hex-mapped IPv6 bypass of isSafeUrl guard3xpyth0n ideon
Show all 304 entriesShow fewer entries
- CVE-2026-126814blueprintUE Self-Hosted Edition before 4.3.6 Arbitrary Iframe Embedding via PeerTube Matcherblueprintue-self-hosted-edition
- CVE-2026-126811BookStack before 26.09.3 Incorrect Authorization via Image and Drawio EndpointsBookStackApp BookStack
- CVE-2026-126810WWBN AVideo 29.1.0 through 29.7.1 Stored XSS via Channel RSS FeedWWBN AVideo
- CVE-2026-126809WWBN AVideo through 29.7.1 Missing Authorization via objects/import.json.phpWWBN AVideo
- CVE-2026-126808WP ERP through 1.17.11 Incorrect Authorization via HRM Job-Info AJAX HandlersweDevs ERP
- CVE-2026-126807WuzAPI through 1.1.0 Cross-Tenant Information Disclosure via /chat/historyasternic wuzapi
- CVE-2026-126799Gotenberg 8.31.0 before 8.38.0 SSRF via IPv6 Zone Identifiers in IsPublicIPgotenberg
- CVE-2026-126798NextScan 1.1.0 through 1.2.0 Stored XSS via URL Asset Detail Viewtongcheng-security-team NextScan
- CVE-2026-65957Helio: Dashboard sideband CORS origin allowlist matches hostnames by prefix, admitting attacker-controlled origins in open modegethelio helio
- CVE-2026-0323Checkov by Prisma Cloud: Server-Side Request Forgery VulnerabilityPalo Alto Networks Checkov by Prisma Cloud
- CVE-2026-0324GlobalProtect App: Incorrect Privilege Management Vulnerability in OPSWAT MetaDefender Endpoint Security SDK on WindowsOPSWAT MetaDefender Endpoint Security SDK
- CVE-2026-0325PAN-OS: GlobalProtect Authorization Bypass VulnerabilityPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0326PAN-OS: Buffer Overflow Vulnerability in Protocol and Service ProcessingPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0327PAN-OS: Privilege Escalation Vulnerability in GlobalProtectPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0328PAN-OS: User Impersonation through GlobalProtect PortalPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0329PAN-OS: Buffer Overflow VulnerabilityPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0330PAN-OS: Authenticated Remote Code Execution (RCE) in PanoramaPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0331PAN-OS: Sensitive Information Disclosure VulnerabilityPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-126784Uncontrolled resource consumption via post_noticeXauenDevs Lagarto Chivato
- CVE-2026-126778Wallos 4.4.0 before 5.10.3 Stored XSS via sendnotifications.phpellite Wallos
- CVE-2026-126776SiYuan 3.7.0 before 3.8.10 Path Traversal File Write via MCP web_fetchsiyuan-note siyuan
- CVE-2026-126775Social-auth-core 4.7.0 before 7.0.0 Login CSRF via SAML RelayStatepython-social-auth social-auth-core
- CVE-2026-123875Node.js is vulnerable to an HTTP/2 denial of service via a NULL pointer dereference when a respondWithFile() download is cancellednodejs node
- CVE-2026-123877Node.js is vulnerable to a certificate validation bypass in https.Agent via cross-policy TLS session reusenodejs node
- CVE-2026-119055CWE- 416: Use After Free vulnerability exists that could cause arbitrary code execution when a local attacker could trick the end user to…Schneider Electric EcoStruxure™ Power Build Rapsody
- CVE-2026-61637Icinga Web 2: Open redirect on login page, under certain circumstancesicingaweb2
- CVE-2026-123871Node.js is vulnerable to proxy credential disclosure via ERR_PROXY_INVALID_CONFIG error messagesnodejs node
- CVE-2026-123868Node.js is vulnerable to an HTTP/2 memory exhaustion denial of service via unaccounted inbound DATA on an undrained streamnodejs node
- CVE-2026-65833iopress: buffer over-read in chunked HTTP parsersenapati484 iopress
- CVE-2026-123867Node.js is vulnerable to a per-host mTLS authorization bypass via a CA-only SNI context failing open to the default CAnodejs node
- CVE-2026-91876Dell OpenManage Ansible Modules, versions 2.0.4 through 10.0.3, contains an Improper Restriction of XML External Entity Reference…Dell OpenManage Ansible Modules
- CVE-2026-57500REVA: Access to internal metadataopencloud-eu reva
- CVE-2026-123862Node.js is vulnerable to a zlib denial of service via a stream destroy during a pending params() callnodejs node
- CVE-2026-123829Node.js is vulnerable to Permission Model file-name disclosure via recursive fs.watchnodejs node
- CVE-2026-126772OpsTree REMS through 1.0.0 Comment Author Spoofing via Incident Comment APIOpsTree Solutions REMS
- CVE-2026-126771OpsTree REMS through 1.0.0 Stored XSS via Attachment Upload and PreviewOpsTree Solutions REMS
- CVE-2026-126770OpsTree REMS through 1.0.0 SSRF via Database Test ConnectionOpsTree Solutions REMS
- CVE-2026-126767OpsTree REMS through 1.0.0 Prompt Injection via RCA Chat AssistantOpsTree Solutions REMS
- CVE-2026-126766OpsTree REMS through 1.0.0 Reporter Spoofing via /api/v1/incidentsOpsTree Solutions REMS
- CVE-2026-76080Probo: Unauthenticated cross-tenant and hidden-item disclosure via Query.node in the public Trust Center APIgetprobo probo
- CVE-2026-123828Node.js is vulnerable to a heap buffer overflow in HTTP/2 session.altsvc() via a long originnodejs node
- CVE-2026-76078Probo: Broken access control in public e-signature APIgetprobo probo
- CVE-2026-91892Dell Terraform Provider for PowerFlex, versions prior to 1.9.0, contains a vulnerability that may permit the use of deprecated…Dell Terraform Provider for PowerFlex
- CVE-2026-63505Probo: Cross-tenant IDOR via unvalidated FK referencesgetprobo probo
- CVE-2026-64861Probo: GraphQL Alias-Based Application Layer Denial of Service (DoS)getprobo probo
- DRUPAL-CONTRIB-2026-334This module enables you to manage user consent for external services, such as embedded videos.drupal/cookies
- CVE-2026-68862Dell Terraform Provider for Dell PowerFlex contain(s) an OS Command Injection Vulnerability in the SDC host provisioning component.Terraform Provider for Dell PowerFlex
- CVE-2026-64858vulnerability-operator: IDOR exposing vulnerability reports via unauthenticated Report Handlerckotzbauer vulnerability-operator
- CVE-2026-91872Dell Ansible Storage for PowerStore, versions prior to 3.9.0,contains an Insertion of Sensitive Information into Log File vulnerability in…Dell Ansible Storage for PowerStore
- CVE-2026-106133Incorrect Authorization in Telerik Report Server Web Report DesignerProgress Software Telerik Report Server
- CVE-2026-68485An authorization bypass in website-index.php in Revive Adserver 6.0.8 and earlier allows an authenticated manager restricted to one agency…Revive Adserver
- CVE-2026-68486An authorization bypass in campaign-zone linking in Revive Adserver 6.0.8 and earlier allows an authenticated manager, or a trafficker…Revive Adserver
- CVE-2026-108560A reflected cross-site scripting vulnerability in updates-history.php in Revive Adserver 6.0.8 and earlier allows an unauthenticated…Revive Adserver
- CVE-2026-108563Spreadsheet formula injection in conversion-tracking report exports in Revive Adserver 6.0.8 and earlier allows an unauthenticated…Revive Adserver
- CVE-2026-108558A reflected cross-site scripting vulnerability in the conversion-statistics pages of Revive Adserver 6.0.8 and earlier allows an…Revive Adserver
- CVE-2026-108565A reflected cross-site scripting vulnerability in the popup invocation options of Revive Adserver 6.0.8 and earlier allows an…Revive Adserver
- CVE-2026-108559A reflected cross-site scripting vulnerability in the iframe invocation options of Revive Adserver 6.0.8 and earlier allows an…Revive Adserver
- CVE-2026-108564A reflected cross-site scripting vulnerability in the invocation-tag generation interface of Revive Adserver 6.0.8 and earlier allows an…Revive Adserver
- CVE-2026-108561A stored cross-site scripting vulnerability in the report date-selection controls of Revive Adserver 6.0.8 and earlier allows an…Revive Adserver
- CVE-2026-77168A cross-site request forgery vulnerability in tracker-invocation.php in Revive Adserver 6.0.8 and earlier allows an attacker to modify a…Revive Adserver
- CVE-2026-82978An authorization bypass in channel-edit.php in Revive Adserver 6.0.8 and earlier allows an authenticated manager to create a delivery rule…Revive Adserver
- CVE-2026-108562A stored cross-site scripting vulnerability in maintenance-appendcode-check.php in Revive Adserver 6.0.8 and earlier allows an…Revive Adserver
- CVE-2026-86363Dell Live Optics Collector, versions prior to 27.3.13.330 contains a Generation of Predictable IV with CBC Mode vulnerability.Dell Live Optics Collector
- CVE-2026-86364Dell Live Optics Collector, versions prior to 27.3.8.317 contains a Use of Insufficiently Random Values vulnerability.Dell Live Optics Collector
- CVE-2026-119723When parsing request variables such as query-string and form parameters, HHVM did not check that appending a nested array succeeded before…Facebook HHVM
- CVE-2026-121737When a remote, unauthenticated HTTP/1.1 client pipelined the start of a second request and then stopped reading, proxygen's…Facebook proxygen
- CVE-2026-119237In proxygen's HTTP/3 session, when a HEADERS block referenced QPACK dynamic table entries that had not yet been received, header decoding…Facebook proxygen
- CVE-2026-119236An mvfst QUIC server retained CRYPTO frame data received at an encryption level (Initial or Handshake) that the TLS handshake had already…Facebook mvfst
- CVE-2026-119235proxygen's QPACK decoder enforced its size limit on a string literal in an encoder-stream instruction only after the entire literal had…Facebook proxygen
- CVE-2026-119234mvfst did not adequately merge or compact out-of-order STREAM frame data, and a small received fragment could keep a much larger receive…Facebook mvfst
- CVE-2026-119233proxygen's HTTP/3 codec buffered an incomplete non-DATA frame, such as a control-stream frame, a frame of an unknown or reserved type, or…Facebook proxygen
- CVE-2026-126722CVE-2026-126722Rooxis RXR-12
- CVE-2026-126723CVE-2026-126723Rooxis RXR-12
- CVE-2026-126724CVE-2026-126724Rooxis RXR-12
- CVE-2026-126720CVE-2026-126720Rooxis RXR-12
- CVE-2026-122043repmgr 4.0.0 through 5.5.0 is affected by an OS command injection vulnerability (CWE-78) in event notifications.EnterpriseDB repmgr
- CVE-2026-116633A potential vulnerability was reported in some Lenovo Tablets that could allow a third-party application to perform an arbitrary file…Lenovo Idea Tab Pro TB373FU · Lenovo Tab One TB305FU +11
- CVE-2026-119238A potential improper permissions vulnerability was reported in Lenovo XiangBangbang that could allow a local application to perform…Lenovo XiangBangbang Application
- CVE-2026-100290Double free after allocation failure in regcomp and regexecThe GNU C Library glibc
- CVE-2026-115819One-byte buffer overflow in wide scanf %s and %[ conversionsThe GNU C Library glibc
- CVE-2026-124686JavaScript Code Injection through kendo.init() in Kendo UI for jQueryProgress Software Kendo UI for jQuery
- CVE-2026-110289Git Sync connections send credentials to unvalidated server URLsGrafana Enterprise · Grafana OSS
- CVE-2026-124746Busybox: out-of-bounds read in volume_id_get_buffer() via an offset+length wraparoundRed Hat Enterprise Linux · Red Hat Hardened Images
- CVE-2026-107509Memory exhaustion denial of service in SQL ExpressionsGrafana OSS · Grafana Enterprise
- CVE-2026-110992Path traversal in Git Sync delete and move jobsGrafana OSS · Grafana Enterprise
- CVE-2026-82014Team preferences RBAC bypass through the set-home-dash endpointGrafana Enterprise · Grafana OSS
- CVE-2026-14242Authorization bypass in the Git Sync provisioning jobs APIGrafana OSS · Grafana Enterprise
- CVE-2026-13721Folder authorization bypass in the Git Sync provisioning files APIGrafana Enterprise · Grafana OSS
- CVE-2026-89326Apache XML Graphics Batik: Check url protocol when loading documentApache Software Foundation org.apache.xmlgraphics:batik-bri…
- CVE-2026-106023Apache HTTP Server: mod_md NULL pointer dereference leads to child process crashApache Software Foundation Apache HTTP Server
- CVE-2026-109163Apache HTTP Server: mod_vhost_alias 1 byte stack buffer overwrite (after CVE-2026-63292)Apache Software Foundation Apache HTTP Server
- CVE-2026-71395Apache XML Graphics FOP: CWE-502 unsafe deserialization in hyphenation loadingApache Software Foundation org.apache.xmlgraphics:fop-core
- CVE-2026-44929SSRF Vulnerability in Apache BatikApache Software Foundation org.apache.xmlgraphics:batik-util
- CVE-2026-0470Null pointer dereference in AMD Embedded SPI Flash driver could allow a local user to potentially cause a loss of availability.AMD EPYC™ Embedded 3000 Series Processors · AMD Ryzen™ E… +3
- CVE-2026-49236Apache XML Graphics Batik: SVG color-profile xml:base bypasses Batik external resource same-origin checksApache Software Foundation org.apache.xmlgraphics:batik-bri…
- CVE-2026-48479Use of uninitialized or invalid state in AMD Graphics Driver could allow a local attacker to write out of bounds, potentially resulting in…AMD Ryzen™ Embedded R1000 Series Processors · AMD Ryzen™… +2
- CVE-2026-40853Apache XML Graphics Batik: Cross-Site Scripting via Unencoded Font Metadata in Apache Batik SVGFontApache Software Foundation org.apache.xmlgraphics:batik-svg…
- CVE-2026-125046WordPress Create plugin <= 3.1.1 - Broken Access Control vulnerabilityJohn-Michael L'Allier Create
- CVE-2026-125708WordPress Element Pack Elementor Addons plugin <= 10.0.4 - Cross Site Scripting (XSS) vulnerabilityBdThemes Element Pack Elementor Addons
- CVE-2026-125746WordPress Back In Stock Notifier for WooCommerce plugin <= 7.5.2 - Content Injection vulnerabilityProPluginsLab Back In Stock Notifier for WooCommerce
- CVE-2026-125454WordPress Passster plugin <= 4.3.21 - Cross Site Scripting (XSS) vulnerabilityWP Chill Passster
- CVE-2026-125767WordPress Hubbub Lite plugin <= 1.36.3.1 - Sensitive Data Exposure vulnerabilityNerdPress Hubbub Lite
- CVE-2026-125766WordPress WPZOOM Social Feed Widget & Block plugin <= 2.4.1 - Sensitive Data Exposure vulnerabilityWPZOOM Social Feed Widget & Block
- CVE-2026-123374Apache Roller: Deserialization of untrusted data in weblog update ping responsesApache Software Foundation Apache Roller
- CVE-2026-123480WordPress Display Eventbrite Events plugin <= 6.9.1 - Cross Site Scripting (XSS) vulnerabilityFullworks Plugins Display Eventbrite Events
- CVE-2026-122300Apache Roller: Limited weblog members can remove or change published entriesApache Software Foundation Apache Roller
- CVE-2026-125448WordPress Kali Forms plugin <= 2.4.31 - Broken Access Control vulnerabilityKaliforms Kali Forms
- CVE-2026-118414Apache Roller: Stored cross-site scripting through the weblog descriptionApache Software Foundation Apache Roller
- CVE-2026-118413Apache Roller: Stored cross-site scripting through imported blogroll linksApache Software Foundation Apache Roller
- CVE-2026-123481WordPress The Ultimate WordPress Toolkit – WP Extended plugin <= 3.4.2 - Broken Access Control vulnerabilityThe Ultimate WordPress Toolkit – WP Extended
- CVE-2026-118412Apache Roller: Disabled accounts can sign in through OpenIDApache Software Foundation Apache Roller
- CVE-2026-125763WordPress SureForms plugin <= 2.13.0 - Broken Access Control vulnerabilityBrainstorm Force SureForms
- CVE-2026-125743WordPress Elementor Addon Elements plugin <= 1.5 - Cross Site Scripting (XSS) vulnerabilityWPVibes Elementor Addon Elements
- CVE-2026-118410Apache Roller: Unpublished entries remain readable through search after AtomPub unpublishApache Software Foundation Apache Roller
- CVE-2026-118409Apache Roller: Commenter email addresses recoverable through public searchApache Software Foundation Apache Roller
- CVE-2026-125436WordPress The Post Grid plugin <= 7.9.9 - Broken Access Control vulnerabilityMamunur Rashid The Post Grid
- CVE-2026-118408Apache Roller: Unpublished entries of other weblogs readable through previewApache Software Foundation Apache Roller
- CVE-2026-111824Apache Roller: Stored cross-site scripting through custom-theme resource URLsApache Software Foundation Apache Roller
- CVE-2026-125433WordPress Futurio Extra plugin <= 2.0.25 - Cross Site Scripting (XSS) vulnerabilityFuturioWP Futurio Extra
- CVE-2026-108338Apache Roller: Stored cross-site scripting through AtomPub entry tagsApache Software Foundation Apache Roller
- CVE-2026-105154Apache Roller: Cross-site request forgery in Planet administration lets an attacker make the server fetch arbitrary URLsApache Software Foundation Apache Roller
- CVE-2026-124416WordPress WP Job Portal plugin <= 2.7.2 - Broken Access Control vulnerabilityAhmad WP Job Portal
- CVE-2026-125778WordPress myCred plugin <= 4.0.2 - Content Injection vulnerabilitymyCred
- CVE-2026-105152Apache Roller: Weblog template access to wrapped objects exposes another user's password hashApache Software Foundation Apache Roller
- CVE-2026-124263WordPress Locatoraid Store Locator plugin <= 3.9.75 - Cross Site Request Forgery (CSRF) vulnerabilityplainware Locatoraid Store Locator
- CVE-2026-118405Apache Roller: Exposure of other users' email addresses through the user searchApache Software Foundation Apache Roller
- CVE-2026-125431WordPress Food Menu – Restaurant Menu & Online Ordering for WooCommerce plugin <= 6.0.7 - Broken Access Control vulnerabilityMamunur Rashid Food Menu – Restaurant Menu & Online Orderin…
- CVE-2026-124261WordPress Taxi Booking Manager for WooCommerce plugin <= 2.1.7 - Broken Access Control vulnerabilityMagepeople Taxi Booking Manager for WooCommerce
- CVE-2026-125776WordPress Profile Builder plugin <= 4.0.6 - Broken Access Control vulnerabilityCozmoslabs Profile Builder
- CVE-2026-124496Apache Storm: DRPC HTTP doAsUser bypasses the impersonation authorizerApache Software Foundation org.apache.storm:storm-server
- CVE-2026-125450WordPress SureRank plugin <= 1.10.3 - Cross Site Scripting (XSS) vulnerabilityBrainstorm Force SureRank
- CVE-2026-125762WordPress Premium Addons for Elementor plugin <= 4.11.116 - Cross Site Scripting (XSS) vulnerabilityLeapWorx Premium Addons for Elementor
- CVE-2026-124495Apache Storm: Logviewer follows worker symlinks across topology ACLsApache Software Foundation org.apache.storm:storm-webapp
- CVE-2026-125045WordPress Create plugin <= 3.1.1 - Cross Site Scripting (XSS) vulnerabilityJohn-Michael L'Allier Create
- CVE-2026-94125Apache Storm: Supervisor page discloses worker placement of other users' topologiesApache Software Foundation org.apache.storm:storm-server
- CVE-2026-124745Busybox: tar deferred hardlink target resolved through a deferred symlink escapes the extraction directoryRed Hat Enterprise Linux · Red Hat Hardened Images
- CVE-2026-124744Busybox: cpio hardlink target not sanitized under feature_path_traversal_protectionRed Hat Enterprise Linux · Red Hat Hardened Images
- CVE-2026-126663Contao 4.0.0 before 5.3.54, 5.4.0 before 5.7.17, and 6.0.0 before 6.0.6 Path Traversal via Image Insert TagContao
- CVE-2026-126658ByteStash 1.5.10 before 1.6.2 Insufficient Session Expiration via API Keysjordan-dalby ByteStash
- CVE-2026-122096Apache DataSketches Java: Uncontrolled resource consumption when deserializing crafted sketch imagesApache Software Foundation org.apache.datasketches:datasket…
- CVE-2026-112201Keycloak-services: keycloak-services: login-failure upsert trusts mysql/mariadb affected-row countkeycloak-services · Red Hat Build of Keycloak +1
- CVE-2026-125445WordPress VOD Infomaniak plugin <= 1.5.16 - Cross Site Request Forgery (CSRF) vulnerabilityInfomaniak Network VOD Infomaniak
- CVE-2026-125782WordPress PowerPress Podcasting plugin <= 11.18.2 - Broken Access Control vulnerabilityBlubrry Podcasting PowerPress Podcasting
- CVE-2026-125435WordPress PowerPack Addons for Elementor plugin <= 3.1.3 - Sensitive Data Exposure vulnerabilityIdeaBox Creations PowerPack Addons for Elementor
- CVE-2026-124411WordPress SureCart plugin <= 4.12.1 - Cross Site Scripting (XSS) vulnerabilityBrainstorm Force SureCart
- CVE-2026-124417WordPress WP Job Portal plugin <= 2.7.2 - Broken Access Control vulnerabilityAhmad WP Job Portal
- CVE-2026-124269WordPress Happy Addons for Elementor plugin <= 3.51.0 - Broken Access Control vulnerabilityweDevs Happy Addons for Elementor
- CVE-2026-124262WordPress Ad Inserter plugin <= 2.8.19 - Content Injection vulnerabilityIgor Funa Ad Inserter
- CVE-2026-124421WordPress ZoloBlocks plugin <= 2.8.2 - Broken Access Control vulnerabilityBdThemes ZoloBlocks
- CVE-2026-124255WordPress Events Made Easy plugin <= 3.3.5 - Content Injection vulnerabilityFranky Events Made Easy
- CVE-2026-124753WordPress WP Job Portal plugin <= 2.7.2 - Broken Access Control vulnerabilityAhmad WP Job Portal
- CVE-2026-125680WordPress Bold Page Builder plugin <= 5.9.11 - Cross Site Scripting (XSS) vulnerabilityBold Themes Bold Page Builder
- CVE-2026-125437WordPress Simply Schedule Appointments plugin <= 1.6.13.0 - Broken Access Control vulnerabilityNSquared Simply Schedule Appointments
- CVE-2026-121028WordPress Strong Testimonials plugin <= 3.3.17 - Content Injection vulnerabilityWP Chill Strong Testimonials
- CVE-2026-121574WordPress Passster plugin <= 4.3.20 - Broken Access Control vulnerabilityWP Chill Passster
- CVE-2026-125761WordPress YITH WooCommerce Ajax Search plugin <= 2.30.0 - Cross Site Scripting (XSS) vulnerabilityYITH WooCommerce Ajax Search
- CVE-2026-121770WordPress VISeek plugin <= 1.0.5 - Cross Site Request Forgery (CSRF) vulnerabilityVillaTheme VISeek
- CVE-2026-121014WordPress WP Job Portal plugin <= 2.7.2 - Broken Access Control vulnerabilityAhmad WP Job Portal
- CVE-2026-124408WordPress WPCafe plugin <= 3.0.22 - Broken Access Control vulnerabilityArraytics WPCafe
- CVE-2026-123473WordPress Happy Addons for Elementor plugin <= 3.51.0 - Cross Site Scripting (XSS) vulnerabilityweDevs Happy Addons for Elementor
- CVE-2026-121773WordPress GenerateBlocks plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerabilityGeneratePress GenerateBlocks
- CVE-2026-124752WordPress Element Pack Elementor Addons plugin <= 10.0.3 - Cross Site Scripting (XSS) vulnerabilityBdThemes Element Pack Elementor Addons
- CVE-2026-125438WordPress RepairBuddy plugin <= 4.1235 - Broken Access Control vulnerabilityWebful Creations RepairBuddy
- CVE-2026-125434WordPress RepairBuddy plugin <= 4.1235 - Broken Access Control vulnerabilityWebful Creations RepairBuddy
- CVE-2026-125777WordPress Profile Builder plugin <= 4.0.6 - Sensitive Data Exposure vulnerabilityCozmoslabs Profile Builder
- CVE-2026-125439WordPress Kit (formerly ConvertKit) plugin <= 3.5.0 - Broken Access Control vulnerabilityKit
- CVE-2026-124413WordPress WP User Manager plugin <= 2.10.4 - Broken Access Control vulnerabilityWP User Manager
- CVE-2026-125455WordPress Bold Page Builder plugin <= 5.9.11 - Cross Site Scripting (XSS) vulnerabilityBold Themes Bold Page Builder
- CVE-2026-125451WordPress B Blocks plugin <= 2.1.15 - Cross Site Scripting (XSS) vulnerabilitybPlugins B Blocks
- CVE-2026-115600WordPress Restrict User Access – Membership plugin with Force plugin <= 2.8.3 - Broken Access Control vulnerabilityDEV Institute Restrict User Access – Membership Plugin with…
- CVE-2026-122671WordPress e2pdf plugin <= 1.32.65 - Broken Access Control vulnerabilityE2Pdf.com e2pdf
- CVE-2026-125781WordPress Event post plugin <= 6.1.2 - Cross Site Scripting (XSS) vulnerabilityNOUS Ouvert Utile et Simple Event post
- CVE-2026-125444WordPress King Addons for Elementor plugin <= 51.1.87 - Broken Access Control vulnerabilityKing Addons for Elementor
- CVE-2026-124271WordPress Restrict User Access – Membership plugin with Force plugin <= 2.8.3 - Broken Access Control vulnerabilityDEV Institute Restrict User Access – Membership Plugin with…
- CVE-2026-119097Author Image <= 4.9.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Parameterdenis-de-bernardy Author Image
- CVE-2026-126627Apache XML Graphics FOP: Temporary files on Unix-like systems are readable by other local usersApache Software Foundation org.apache.xmlgraphics:fop-core
- CVE-2026-124743Busybox: divide-by-zero and heap over-read in the volume_id hfs+ proberRed Hat Enterprise Linux · Red Hat Hardened Images
- CVE-2026-124742Busybox: divide-by-zero in the volume_id fat prober via a zero sectors_per_cluster valueRed Hat Enterprise Linux · Red Hat Hardened Images
- CVE-2026-124740Busybox: use-after-free of requested_ipv6 in udhcpc6Red Hat Enterprise Linux · Red Hat Hardened Images
- CVE-2026-124738Busybox: httpd password rule bypass for pre-compressed .gz files via accept-encoding: gzipRed Hat Enterprise Linux · Red Hat Hardened Images
- CVE-2026-111792Apache XML Graphics Batik: Denial of Service via SVG Element Reference ResolutionApache Software Foundation org.apache.xmlgraphics:batik-bri…
- CVE-2026-90993Apache XML Graphics Batik: Harden validation in SAXDocumentFactoryApache Software Foundation org.apache.xmlgraphics:batik-dom
- CVE-2026-124256WordPress Delivery & Pickup Date Time for WooCommerce plugin <= 1.3.90 - Cross Site Scripting (XSS) vulnerabilityCodeRockz Delivery & Pickup Date Time for WooCommerce
- CVE-2026-124257WordPress BP Better Messages plugin <= 3.2.1 - Cross Site Scripting (XSS) vulnerabilitywordplus BP Better Messages
- CVE-2026-126626Overly Restrictive Account Lockout Mechanism in hMailServerProgressive Robot hMailServer
- CVE-2026-126619Misinterpretation of Input in hMailServerProgressive Robot hMailServer
- CVE-2026-126618Improper Restriction of Excessive Authentication Attempts in hMailServerProgressive Robot hMailServer
- CVE-2026-126616Improper Restriction of Excessive Authentication Attempts in hMailServerProgressive Robot hMailServer
- CVE-2026-126615Authentication Bypass by Alternate Name in hMailServerProgressive Robot hMailServer
- CVE-2026-126614Improper Restriction of Excessive Authentication Attempts in hMailServerProgressive Robot hMailServer
- CVE-2026-126625Incorrect Default Permissions in hMailServerProgressive Robot hMailServer
- CVE-2026-116468Keycloak-services: keycloak-services: delegated admin escalates to realm-admin via group moveRed Hat Build of Keycloak · Red Hat Single Sign-On
- CVE-2025-59847HCL Domino Leap is vulnerable to Stored XSS through malicious application titles in Manage page dialogs, allowing an attacker to take over…HCL Software HCL Domino Leap
- CVE-2025-59848HCL Leap is vulnerable to Stored XSS through malicious application titles in the Manage page dialogs, allowing an attacker to take over a…HCL Software HCL Leap
- CVE-2026-92408WPS Bookings for WooCommerce < 3.13.1 - Unauthenticated Price Manipulation via booking_priceWPS Bookings for WooCommerce
- CVE-2026-123668GetPaid 2.8.63 - 2.8.64 - Unauthenticated Payment Bypass via Fractional Item QuantityGetPaid
- CVE-2026-123659ProfilePress < 4.17.6 - Unauthenticated Member Directory Role Restriction Bypass and User Meta DisclosureProfilePress
- CVE-2026-119302NotificationX < 3.3.7 - Unauthenticated Non-Public Content Disclosure and Arbitrary Shortcode Execution via Notification PreviewNotificationX
- CVE-2026-119171Advanced Product Fields (Product Addons) for WooCommerce 1.6.22 - 1.7.3 - Unauthenticated Paid Option Surcharge Bypass via Add-to-Cart…Advanced Product Fields (Product Addons) for WooCommerce
- CVE-2026-15785Joinchat <= 6.3.1 - Reflected Cross-Site Scripting via '{HREF}' Dynamic Variablecreapuntome Joinchat – Enhanced “click to chat”
- CVE-2026-88813YITH WooCommerce Gift Cards <= 4.39.0 - Unauthenticated Gift Card Balance Inflation via Discounted PurchaseYITH WooCommerce Gift Cards
- CVE-2026-123705Security For WooCommerce <= 1.0.16 - Unauthenticated Server Configuration Information DisclosureSecurity For WooCommerce
- CVE-2026-123704Security For WooCommerce <= 1.0.16 - Unauthenticated Administrator Email Address DisclosureSecurity For WooCommerce
- CVE-2026-123703Security For WooCommerce <= 1.0.16 - Unauthenticated Arbitrary User Logout via usfw_user_force_logoutSecurity For WooCommerce
- CVE-2026-123702Security For WooCommerce <= 1.0.16 - Unauthenticated wp-config Keys and Salts Reset and Denial of ServiceSecurity For WooCommerce
- CVE-2026-123701Security For WooCommerce <= 1.0.16 - Unauthenticated Plugin Settings ResetSecurity For WooCommerce
- CVE-2026-123699Security For WooCommerce <= 1.0.16 - Unauthenticated Forced Plugin, Theme and Core UpdatesSecurity For WooCommerce
- CVE-2026-123698Security For WooCommerce <= 1.0.16 - Unauthenticated Plugin Settings Disclosure via REST APISecurity For WooCommerce
- CVE-2026-123667Photo Engine < 6.6.2 - Author+ Stored XSS via Keyword NamesPhoto Engine
- CVE-2026-123666Photo Engine < 6.6.2 - Author+ Media Deletion via Collection DeletionPhoto Engine
- CVE-2026-123661ProfilePress 4.16.13 - 4.17.3 - Subscriber+ Inactive Membership Plan Subscription via Plan-Change CheckoutProfilePress
- CVE-2026-123657ProfilePress < 4.17.6 - Unauthenticated Inactive Membership Plan Enrollment via Negative Plan IDProfilePress
- CVE-2026-123656ProfilePress < 4.17.6 - Unauthenticated Restricted Content Disclosure via REST APIProfilePress
- CVE-2026-122087Event Tickets < 5.30.3.1 - Unauthenticated Private Event Attendee Disclosure via post_status Filter Bypass in Attendees REST APIEvent Tickets and Registration
- CVE-2026-122061Event Tickets < 5.30.3.1 - Unauthenticated Attendee Name Disclosure via Single Attendee REST EndpointEvent Tickets and Registration
- CVE-2026-121873Redirection for Contact Form 7 2.6.0 - 3.2.15 - Unauthenticated Forged Personal Data Request CreationRedirection for Contact Form
- CVE-2026-121472AutomatorWP < 6.0.8 - Zoom/AWeber Integration Connection Hijack via CSRFAutomatorWP
- CVE-2026-119531Live Composer < 2.1.24 - Contributor+ Stored XSS via Module Area ShortcodeLive Composer
- CVE-2026-119529Gravity Forms < 3.2.2 - Unauthenticated LFI via Chunked File UploadGravity Forms
- CVE-2026-119303NotificationX < 3.3.7 - Unauthenticated Settings Update and Email Sending via send-rating REST RouteNotificationX
- CVE-2026-119035Schema & Structured Data for WP & AMP < 1.70 - Contributor+ Stored XSS via JSON-LD Pretty PrintSchema & Structured Data for WP & AMP
- CVE-2026-119034Schema & Structured Data for WP & AMP < 1.70 - Unauthenticated Non-Public Comment Disclosure via Review FilterSchema & Structured Data for WP & AMP
- CVE-2026-119033Schema & Structured Data for WP & AMP < 1.70 - Contributor+ Structured Data Modification of Other Users' Posts via IDORSchema & Structured Data for WP & AMP
- CVE-2026-119032Schema & Structured Data for WP & AMP < 1.70 - Authenticated Arbitrary Post Modification via Backup ImportSchema & Structured Data for WP & AMP
- CVE-2026-118439Limit Login Attempts Reloaded < 3.4.2 - Admin+ SSRF via App Setup CodeLimit Login Attempts Security
- CVE-2026-118420WP Directory Kit < 1.6.3 - Listing Admin+ SQL Injection via 'main_field' ParameterWP Directory Kit
- CVE-2026-118418WP Directory Kit < 1.6.3 - Unauthenticated User Data and Contact Message DisclosureWP Directory Kit
- CVE-2026-118241Smush < 4.3.6 - Author+ Optimization and Restoration of Others' Attachments via IDORSmush
- CVE-2026-117524Dynific Addons for Elementor 1.3 - Contributor+ Arbitrary Post Content Disclosure via dynific_template ShortcodeDynific Addons for Elementor
- CVE-2026-117523Dynific Addons for Elementor < 1.3.1 - Subscriber+ Module Settings Update via aep_module AJAX ActionDynific Addons for Elementor
- CVE-2026-117522Dynific Addons for Elementor < 1.3.1 - Author+ Stored XSS via Post Title in Post Image WidgetDynific Addons for Elementor
- CVE-2026-117521Dynific Addons for Elementor < 1.3.1 - Author+ Stored XSS via Display Name in Post Author WidgetDynific Addons for Elementor
- CVE-2026-111597Forminator Forms 1.58.0 - 1.58.3 - Unauthenticated Disclosure of Post-Payment Redirect URL and Thank-You Message via Unpaid Stripe…Forminator Forms
- CVE-2026-110949Download Manager (Free & Pro) - Unauthenticated Missing Authorization via Password ValidationDownload Manager
- CVE-2026-110948Download Manager (Free & Pro) - Unauthenticated Protected File Download via Media Preview Download KeyDownload Manager
- CVE-2026-110016Data Tables Generator by Supsystic < 1.15.8 - Unauthenticated Table Content Disclosure via IDORData Tables Generator by Supsystic
- CVE-2026-109873User Registration & Membership < 5.3.2 - Unauthenticated Payment Before Login Bypass via Omitted Membership FieldUser Registration & Membership
- CVE-2026-109871User Registration & Membership < 5.3.2 - Subscriber+ Payment Bypass via Membership RenewalUser Registration & Membership
- CVE-2026-106468Code Snippets < 4.1.0 - Admin+ Network-Scoped Snippet Injection via Snippet ImportCode Snippets
- CVE-2026-104718Elementor < 4.3.6 - Contributor+ Stored XSS via Element IDElementor Website Builder
- CVE-2025-15714Live Composer < 2.1.24 - Admin+ Stored XSS via ButtonLive Composer
- CVE-2025-15713Live Composer < 2.1.24 - Admin+ Stored XSS via IconLive Composer
- CVE-2025-15712Live Composer < 2.1.24 - Admin+ Stored XSS via StaffLive Composer
- CVE-2025-15711Live Composer < 2.1.24 - Admin+ Stored XSS via SocialLive Composer
- CVE-2026-116081Sleipnir Mobile for iPhone / iPad and Sleipnir Mobile for iPhone / iPad Black Edition provided by Fenrir Inc.Fenrir Sleipnir Mobile for iPhone / iPad
- CVE-2026-59191TwigView: FileLoader is vulnerable to arbitrary file readcakephp twig-view
- CVE-2026-59192TwigView: Deserialization of Untrusted Datacakephp twig-view
- CVE-2026-61810libspdm: SPDM (DSP0274) FINISH transcript under-specifies the new 1.4 OpaqueData fieldsDMTF libspdm
- CVE-2026-64686OpenSearch Dashboards: SSRF in fetchDataSourceMetaData — missing endpoint validationopensearch-project OpenSearch-Dashboards
- CVE-2026-64667pam_usb: Heap out-of-bounds read in pusb_get_tty_from_display_server cmdline scanmcdope pam_usb
- CVE-2026-97054HTTP/1 server crash due to MaxBytesReader header race in net/httpGo standard library net/http · stdlib
- CVE-2026-97033Unexpected code execution via --sysroot, -target, -isysroot, -Wl,-syslibroot, and -x cgo flags in cmd/goGo toolchain cmd/go · toolchain
- CVE-2026-97034Arbitrary command execution via GCC spec files in cgo linker search directories in cmd/goGo toolchain cmd/go · toolchain
- CVE-2026-97035Unexpected code execution and arbitrary file write via Clang -gen- and GCC -gnat flags in cgo in cmd/goGo toolchain cmd/go · toolchain
- CVE-2026-97036Arbitrary code execution during build on darwin via "-l to_library" in cgo in cmd/goGo toolchain cmd/go · toolchain
- CVE-2026-97037Linker script injection via split -Wl, flags and Darwin or symbol linker flags in cgo in cmd/goGo toolchain cmd/go · toolchain
- CVE-2026-97038Arbitrary code execution via crafted .syso files and cgo linker input files in cmd/goGo toolchain cmd/go · toolchain
- CVE-2026-97039Flag sanitization bypass via "#cgo pkg-config:" directives in cmd/goGo toolchain cmd/go · toolchain
- CVE-2026-97040Cgo directive injection via .syso files disguised as Go object files in cmd/go and cmd/linkGo toolchain cmd/go · Go toolchain cmd/link +1
- CVE-2026-97041Host linker flag injection via //go:cgo_ directives in cmd/compile and cmd/linkGo toolchain cmd/compile · Go toolchain cmd/link +1
- CVE-2026-97042Linker flag injection via cgo_import_dynamic and PE DLL names in cmd/cgo, cmd/compile, and cmd/linkGo toolchain cmd/cgo · Go toolchain cmd/compile +2
- CVE-2026-97043Unexpected code execution via escaped quotes in //go:cgo_ldflag in cmd/go and cmd/compileGo toolchain cmd/go · Go toolchain cmd/compile +1
- CVE-2026-126571Padloc 4.0.0 before 4.3.1 Email MFA Code Brute Force via retrieveMFATokenpadloc
- CVE-2026-126569Mbin 1.2.1 before 1.11.1 Stored XSS via Markdown Image Nested in LinkMbinOrg mbin
- CVE-2026-126567Semantic MediaWiki 3.0.0 before 7.4.1 Stored XSS via Special:Ask Debug OutputSemanticMediaWiki
- CVE-2026-126565Semantic MediaWiki 3.0.0 before 7.4.1 DoS via Exponential Concept ExpansionSemanticMediaWiki
- CVE-2026-126564Semantic MediaWiki 2.5.0 before 7.4.1 Stored XSS via Special:Browse Factbox TitleSemanticMediaWiki
- CVE-2026-126563Semantic MediaWiki 2.4.0 before 7.4.1 Reflected XSS via Special:Ask Date FormatSemanticMediaWiki
- CVE-2026-126562Semantic MediaWiki 3.0.0 before 7.4.1 Uncontrolled Recursion via ElasticStore ConceptDescriptionInterpreterSemanticMediaWiki
- CVE-2026-126560Semantic MediaWiki 3.0.0 before 7.4.1 Stored XSS via data-search AttributesSemanticMediaWiki
- CVE-2026-126559Semantic MediaWiki 4.2.0 before 7.4.1 Stored XSS via Special:FacetedSearchSemanticMediaWiki
- CVE-2026-126546Viber for iOS through 29.4.0.24 Denial of Service via Malformed GIFRakuten Viber Viber for iOS
- CVE-2026-126545WWBN AVideo through 29.7.1 Missing Authorization via get_api_tags APIWWBN AVideo
- CVE-2026-126544WWBN AVideo 6.5 through 29.7.1 Email Verification Bypass via User::verifyCode()WWBN AVideo
- CVE-2026-126498WriteFreely before 0.17.3 Stored XSS via Unsanitized Post SlugMusing Studio WriteFreely
- CVE-2026-1264961Panel-dev CordysCRM before 1.9.6 Authorization Bypass via /account/contact/get/{id}1Panel-dev CordysCRM
- CVE-2026-126495MQTTX through 1.13.3 Stored XSS via Topic Tree and JSON Tree Tooltipsemqx MQTTX
- GHSA-6856-87HX-P5X7Microsoft Security Advisory CVE-2026-105544 - .NET Elevation of Privilege VulnerabilityMicrosoft.TestPlatform.CLI
- CVE-2026-117373Janus WebRTC Server 1.2.3 through 1.4.0 is vulnerable to Directory Traversal.