# CVEs published 2026-11-11

666 CVEs were published on November 11, 2026: 50 critical, 312 high. 9 early warnings were posted. Days are UTC.
## Early warnings

- [SZB-7ade08c64f](https://cve.now/SZB-7ade08c64f): ConnectWise investigates active campaign abusing compromised ScreenConnect environments
- [SZB-9da0974403](https://cve.now/SZB-9da0974403): Notion says Fireworks AI breach exposed some Notion AI chat transcripts
- [SZB-95bc7c63c8](https://cve.now/SZB-95bc7c63c8): Zoom patches critical Windows privilege escalation flaw CVE-2026-108186
- [SZB-99d2395657](https://cve.now/SZB-99d2395657): Researchers link AntiFox AI pentesting platform to attacks on AWS credentials
- [SZB-56ead58d33](https://cve.now/SZB-56ead58d33): AllUnited cyberattack prompts 350+ Dutch sports clubs to report data breaches
- [SZB-d12fff21cb](https://cve.now/SZB-d12fff21cb): Claroc reports 35,000+ open Grok-built apps, some leaking data and passwords
- [SZB-2970bf6358](https://cve.now/SZB-2970bf6358): Fortinet patches nearly 100 vulnerabilities, per SecurityWeek
- [SZB-d875e13ba5](https://cve.now/SZB-d875e13ba5): eMudhra revokes eight more intermediate CAs after October key compromise
- [SZB-26834c9f14](https://cve.now/SZB-26834c9f14): CISA adds Cisco BroadWorks and Openwave flaws to KEV catalog over active exploitation

## CVEs

- [CVE-2026-126759](https://cve.now/CVE-2026-126759.md): H3C ICG2000 Unified Communication Gateway Web Management check.j missing authentication (CVSS 6.9, H3C ICG2000 Unified Communication Gateway)
- [CVE-2026-126758](https://cve.now/CVE-2026-126758.md): Moonshot AI Kimi Code WorkspaceDirsService local.toml reliance on untrusted inputs in a security decision (CVSS 4.8, Moonshot AI Kimi Code)
- [CVE-2026-126935](https://cve.now/CVE-2026-126935.md): Zipline before 4.8.0 maxViews Limit Bypass via Race Condition (CVSS 6.3, diced zipline)
- [CVE-2026-126934](https://cve.now/CVE-2026-126934.md): Zipline 4.3.2 before 4.8.0 Rate Limit Bypass via Spoofed X-Forwarded-For (CVSS 6.9, diced zipline)
- [CVE-2026-126933](https://cve.now/CVE-2026-126933.md): Zipline 4.0.0 before 4.8.0 Disabled Extensions Upload Filter Bypass via Extension Format Mismatch (CVSS 5.3, diced zipline)
- [CVE-2026-126932](https://cve.now/CVE-2026-126932.md): Zipline 4.6.2 before 4.8.0 Disabled MIME Type Policy Bypass via File Metadata Update (CVSS 5.3, diced zipline)
- [CVE-2026-126757](https://cve.now/CVE-2026-126757.md): Moonshot AI Kimi Code Web UI index-HU0LCM-X.js isOriginAllowed redirect (CVSS 5.3, Moonshot AI Kimi Code)
- [CVE-2026-126899](https://cve.now/CVE-2026-126899.md): Use after free in Elements in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute… (high (no CVSS), Google Chrome)
- [CVE-2026-126920](https://cve.now/CVE-2026-126920.md): Information leak in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML… (high (no CVSS), Google Chrome)
- [CVE-2026-126860](https://cve.now/CVE-2026-126860.md): Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to… (high (no CVSS), Google Chrome)
- [CVE-2026-126890](https://cve.now/CVE-2026-126890.md): Out of bounds read in Media in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside… (high (no CVSS), Google Chrome)
- [CVE-2026-126913](https://cve.now/CVE-2026-126913.md): Out of bounds read in Compositing in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer… (high (no CVSS), Google Chrome)
- [CVE-2026-126921](https://cve.now/CVE-2026-126921.md): Use after free in Accessibility in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the… (high (no CVSS), Google Chrome)
- [CVE-2026-126868](https://cve.now/CVE-2026-126868.md): Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the… (high (no CVSS), Google Chrome)
- [CVE-2026-126902](https://cve.now/CVE-2026-126902.md): Incorrect reference resolution in Browser in Google Chrome on on Mac prior to 157.0.8103.78 allowed a remote attacker who had compromised… (high (no CVSS), Google Chrome)
- [CVE-2026-126841](https://cve.now/CVE-2026-126841.md): Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to… (high (no CVSS), Google Chrome)
- [CVE-2026-126850](https://cve.now/CVE-2026-126850.md): Incorrect authorization in SiteIsolation in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker who had… (high (no CVSS), Google Chrome)
- [CVE-2026-126852](https://cve.now/CVE-2026-126852.md): Use after free in MediaStream in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the… (high (no CVSS), Google Chrome)
- [CVE-2026-126901](https://cve.now/CVE-2026-126901.md): Use after free in PDF in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a… (high (no CVSS), Google Chrome)
- [CVE-2026-126849](https://cve.now/CVE-2026-126849.md): Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the… (high (no CVSS), Google Chrome)
- [CVE-2026-126908](https://cve.now/CVE-2026-126908.md): Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the… (high (no CVSS), Google Chrome)
- [CVE-2026-126855](https://cve.now/CVE-2026-126855.md): Missing authorization in ImageCapture in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer… (high (no CVSS), Google Chrome)
- [CVE-2026-126893](https://cve.now/CVE-2026-126893.md): Out of bounds write in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox… (high (no CVSS), Google Chrome)
- [CVE-2026-126915](https://cve.now/CVE-2026-126915.md): Use of uninitialized variable in Skia in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker who had compromised… (high (no CVSS), Google Chrome)
- [CVE-2026-126906](https://cve.now/CVE-2026-126906.md): Race condition in Extensions in Google Chrome on on Mac prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer… (high (no CVSS), Google Chrome)
- [CVE-2026-126882](https://cve.now/CVE-2026-126882.md): Information leak in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to… (high (no CVSS), Google Chrome)
- [CVE-2026-126848](https://cve.now/CVE-2026-126848.md): Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process… (high (no CVSS), Google Chrome)
- [CVE-2026-126840](https://cve.now/CVE-2026-126840.md): Out of bounds write in Network in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the… (high (no CVSS), Google Chrome)
- [CVE-2026-126883](https://cve.now/CVE-2026-126883.md): Use after free in Core in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer… (high (no CVSS), Google Chrome)
- [CVE-2026-126857](https://cve.now/CVE-2026-126857.md): Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted… (high (no CVSS), Google Chrome)
- [CVE-2026-126897](https://cve.now/CVE-2026-126897.md): Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a… (high (no CVSS), Google Chrome)
- [CVE-2026-126892](https://cve.now/CVE-2026-126892.md): Use after free in MediaStream in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the… (high (no CVSS), Google Chrome)
- [CVE-2026-126854](https://cve.now/CVE-2026-126854.md): Incorrect authorization in Layout in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a… (high (no CVSS), Google Chrome)
- [CVE-2026-126843](https://cve.now/CVE-2026-126843.md): Type confusion in Turbolev in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox… (high (no CVSS), Google Chrome)
- [CVE-2026-126888](https://cve.now/CVE-2026-126888.md): Buffer overflow in Turbolev in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox… (high (no CVSS), Google Chrome)
- [CVE-2026-126877](https://cve.now/CVE-2026-126877.md): Use after free in Dawn in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to… (high (no CVSS), Google Chrome)
- [CVE-2026-126872](https://cve.now/CVE-2026-126872.md): Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to… (high (no CVSS), Google Chrome)
- [CVE-2026-126880](https://cve.now/CVE-2026-126880.md): Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a… (high (no CVSS), Google Chrome)
- [CVE-2026-126914](https://cve.now/CVE-2026-126914.md): Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted… (high (no CVSS), Google Chrome)
- [CVE-2026-126922](https://cve.now/CVE-2026-126922.md): Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to… (high (no CVSS), Google Chrome)
- [CVE-2026-126873](https://cve.now/CVE-2026-126873.md): Use after free in Extensions in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering… (high (no CVSS), Google Chrome)
- [CVE-2026-126905](https://cve.now/CVE-2026-126905.md): Incomplete cleanup in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside… (high (no CVSS), Google Chrome)
- [CVE-2026-126856](https://cve.now/CVE-2026-126856.md): Incomplete cleanup in Cache in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted… (high (no CVSS), Google Chrome)
- [CVE-2026-126917](https://cve.now/CVE-2026-126917.md): Memory corruption in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the… (high (no CVSS), Google Chrome)
- [CVE-2026-126861](https://cve.now/CVE-2026-126861.md): Use after free in Media in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside… (high (no CVSS), Google Chrome)
- [CVE-2026-126894](https://cve.now/CVE-2026-126894.md): Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to… (high (no CVSS), Google Chrome)
- [CVE-2026-126884](https://cve.now/CVE-2026-126884.md): Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox via a… (high (no CVSS), Google Chrome)
- [CVE-2026-126844](https://cve.now/CVE-2026-126844.md): Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process… (high (no CVSS), Google Chrome)
- [CVE-2026-126866](https://cve.now/CVE-2026-126866.md): Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to… (high (no CVSS), Google Chrome)
- [CVE-2026-126918](https://cve.now/CVE-2026-126918.md): Use after free in Layout in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox… (high (no CVSS), Google Chrome)
- [CVE-2026-126876](https://cve.now/CVE-2026-126876.md): Integer overflow in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox… (high (no CVSS), Google Chrome)
- [CVE-2026-126874](https://cve.now/CVE-2026-126874.md): Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a… (high (no CVSS), Google Chrome)
- [CVE-2026-126891](https://cve.now/CVE-2026-126891.md): Use after free in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to read memory inside the sandbox via a crafted… (high (no CVSS), Google Chrome)
- [CVE-2026-126858](https://cve.now/CVE-2026-126858.md): Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker to read memory outside the… (high (no CVSS), Google Chrome)
- [CVE-2026-126869](https://cve.now/CVE-2026-126869.md): Use after free in Frames in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox… (high (no CVSS), Google Chrome)
- [CVE-2026-126896](https://cve.now/CVE-2026-126896.md): Missing authorization in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to bypass web origin policy via a crafted… (high (no CVSS), Google Chrome)
- [CVE-2026-126863](https://cve.now/CVE-2026-126863.md): Use after free in HTML in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the… (high (no CVSS), Google Chrome)
- [CVE-2026-126867](https://cve.now/CVE-2026-126867.md): Use after free in Browser in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary… (high (no CVSS), Google Chrome)
- [CVE-2026-126881](https://cve.now/CVE-2026-126881.md): Improper initialization in Media in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code… (high (no CVSS), Google Chrome)
- [CVE-2026-126845](https://cve.now/CVE-2026-126845.md): Uninitialized resource in GPU in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process… (high (no CVSS), Google Chrome)
- [CVE-2026-126851](https://cve.now/CVE-2026-126851.md): Use after free in Accessibility in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the… (high (no CVSS), Google Chrome)
- [CVE-2026-126907](https://cve.now/CVE-2026-126907.md): Uninitialized resource in Media in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker who had compromised the… (high (no CVSS), Google Chrome)
- [CVE-2026-126904](https://cve.now/CVE-2026-126904.md): Use after free in Compositing in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process… (high (no CVSS), Google Chrome)
- [CVE-2026-126900](https://cve.now/CVE-2026-126900.md): Use after free in CSS in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a… (high (no CVSS), Google Chrome)
- [CVE-2026-126862](https://cve.now/CVE-2026-126862.md): Improper input validation in Core in Google Chrome on on Android prior to 157.0.8103.78 allowed a local attacker to bypass web origin… (high (no CVSS), Google Chrome)
- [CVE-2026-126875](https://cve.now/CVE-2026-126875.md): Missing authorization in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to bypass web origin policy via a crafted… (high (no CVSS), Google Chrome)
- [CVE-2026-126871](https://cve.now/CVE-2026-126871.md): Out of bounds read in Skia in Google Chrome on on Mac prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox… (high (no CVSS), Google Chrome)
- [CVE-2026-126898](https://cve.now/CVE-2026-126898.md): Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted… (high (no CVSS), Google Chrome)
- [CVE-2026-126842](https://cve.now/CVE-2026-126842.md): Use after free in ANGLE in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code outside… (high (no CVSS), Google Chrome)
- [CVE-2026-126910](https://cve.now/CVE-2026-126910.md): Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a… (high (no CVSS), Google Chrome)
- [CVE-2026-126903](https://cve.now/CVE-2026-126903.md): Improper state validation in ANGLE in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker to bypass web origin… (high (no CVSS), Google Chrome)
- [CVE-2026-126916](https://cve.now/CVE-2026-126916.md): Integer overflow in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via… (high (no CVSS), Google Chrome)
- [CVE-2026-126865](https://cve.now/CVE-2026-126865.md): Use after free in DOM in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a… (high (no CVSS), Google Chrome)
- [CVE-2026-126853](https://cve.now/CVE-2026-126853.md): Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process… (high (no CVSS), Google Chrome)
- [CVE-2026-126847](https://cve.now/CVE-2026-126847.md): Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a… (high (no CVSS), Google Chrome)
- [CVE-2026-126909](https://cve.now/CVE-2026-126909.md): Use after free in Passwords in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute… (high (no CVSS), Google Chrome)
- [CVE-2026-126878](https://cve.now/CVE-2026-126878.md): Information leak in Core in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to leak cross-origin data via a crafted HTML… (high (no CVSS), Google Chrome)
- [CVE-2026-126919](https://cve.now/CVE-2026-126919.md): Use after free in BrowserTag in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the… (high (no CVSS), Google Chrome)
- [CVE-2026-126912](https://cve.now/CVE-2026-126912.md): Buffer overflow in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code outside the sandbox… (high (no CVSS), Google Chrome)
- [CVE-2026-126870](https://cve.now/CVE-2026-126870.md): Uninitialized resource in ANGLE in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox via a… (high (no CVSS), Google Chrome)
- [CVE-2026-126887](https://cve.now/CVE-2026-126887.md): Use after free in Animation in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox… (high (no CVSS), Google Chrome)
- [CVE-2026-126886](https://cve.now/CVE-2026-126886.md): Use after free in Frames in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox… (high (no CVSS), Google Chrome)
- [CVE-2026-126859](https://cve.now/CVE-2026-126859.md): Link following in FileSystem in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute… (high (no CVSS), Google Chrome)
- [CVE-2026-126889](https://cve.now/CVE-2026-126889.md): Off-by-one error in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the… (high (no CVSS), Google Chrome)
- [CVE-2026-126864](https://cve.now/CVE-2026-126864.md): Use after free in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a… (high (no CVSS), Google Chrome)
- [CVE-2026-126911](https://cve.now/CVE-2026-126911.md): Use after free in Accessibility in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the… (critical (no CVSS), Google Chrome)
- [CVE-2026-126846](https://cve.now/CVE-2026-126846.md): Use after free in Skia in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code outside… (critical (no CVSS), Google Chrome)
- [CVE-2026-126879](https://cve.now/CVE-2026-126879.md): Use after free in Layout in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox… (critical (no CVSS), Google Chrome)
- [CVE-2026-126895](https://cve.now/CVE-2026-126895.md): Use after free in CSS in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a… (critical (no CVSS), Google Chrome)
- [CVE-2026-126885](https://cve.now/CVE-2026-126885.md): Use after free in ServiceWorker in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code outside the… (critical (no CVSS), Google Chrome)
- [CVE-2026-125637](https://cve.now/CVE-2026-125637.md): Konflux-ci: unvalidated hostname fields enable caddyfile config injection in the konflux ui proxy generator, allowing an unauthenticated… (CVSS 7.2, konflux-ci)
- [CVE-2026-68549](https://cve.now/CVE-2026-68549.md): ClickMigrate has Path Traversal in "revision -m" argument (CVSS 3.3, QueueForge ClickMigrate)
- [CVE-2026-68540](https://cve.now/CVE-2026-68540.md): fulgur: Quadratic style-list reprocessing during containing-block resolution for absolutely-positioned pseudo-elements causes denial of… (CVSS 7.5, fulgur-rs fulgur)
- [CVE-2026-68539](https://cve.now/CVE-2026-68539.md): fulgur: Unbounded string-set value accumulation causes memory/CPU exhaustion (denial of service) (CVSS 7.5, fulgur-rs fulgur)
- [CVE-2026-68538](https://cve.now/CVE-2026-68538.md): fulgur: Unbounded counters() expansion in generated content causes memory/CPU exhaustion (denial of service) (CVSS 7.5, fulgur-rs fulgur)
- [CVE-2026-68512](https://cve.now/CVE-2026-68512.md): Paaster: No rate limiting on account login, combined with a public username-enumeration/salt endpoint, enables offline credential-stuffing (CVSS 6.3, WardPearce paaster)
- [CVE-2026-111521](https://cve.now/CVE-2026-111521.md): Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.4.0.17, contain a Time-of-check Time-of-use (TOCTOU) Condition… (CVSS 7.0, Dell Display and Peripheral Manager)
- [CVE-2026-68511](https://cve.now/CVE-2026-68511.md): Paaster: TOCTOU race condition defeats the 'burn after reading' guarantee on view-once pastes (CVSS 6.3, WardPearce paaster)
- [CVE-2026-67449](https://cve.now/CVE-2026-67449.md): Portabase: Unauthenticated path traversal in TUS webhook overwrites AES-256-GCM master key (CVSS 9.8, portabase)
- [CVE-2026-65971](https://cve.now/CVE-2026-65971.md): Livewire PowerGrid: SQL Injection through the public \`sortDirection\` Livewire property in the \`naturalSort\` order-by path (CVSS 7.6, Power-Components livewire-powergrid)
- [CVE-2026-67547](https://cve.now/CVE-2026-67547.md): taOS: Authenticated Non-Admin Host Code Execution via Skill Runtime (CVSS 8.8, jaylfc taOS)
- [CVE-2026-67548](https://cve.now/CVE-2026-67548.md): taOS: Non-Admin Users Can Access System Settings and Update Actions (CVSS 8.3, jaylfc taOS)
- [CVE-2026-67546](https://cve.now/CVE-2026-67546.md): Heym: Command execution via POST /api/mcp/fetch-tools stdio transport: supplied command is spawned before MCP validation (CVSS 8.8, heymrun heym)
- [CVE-2026-67545](https://cve.now/CVE-2026-67545.md): Heym: Server-Side Request Forgery (SSRF) in HTTP Workflow Node (CVSS 7.4, heymrun heym)
- [CVE-2026-67544](https://cve.now/CVE-2026-67544.md): Heym: Playwright Custom Code Backend RCE via \`playwrightCode\` Field (CVSS 8.8, heymrun heym)
- [CVE-2026-67543](https://cve.now/CVE-2026-67543.md): Heym Unsandboxed skill code execution: skills run via a local backend subprocess without the Docker isolation that Python tools mandate (CVSS 8.8, heymrun heym)
- [CVE-2026-67542](https://cve.now/CVE-2026-67542.md): Heym: SSRF via POST /api/mcp/fetch-tools: any authenticated user reaches local/private URLs through the SSE and streamable-HTTP transports (CVSS 7.1, heymrun heym)
- [CVE-2026-67541](https://cve.now/CVE-2026-67541.md): Heym: Missing role gate in team-member management lets any member add/remove members, exposing team-shared credentials (CVSS 8.1, heymrun heym)
- [CVE-2026-67540](https://cve.now/CVE-2026-67540.md): Heym - Horizontal IDOR: get-by-id on workflow/node templates skips the visibility check the list path enforces (CVSS 6.5, heymrun heym)
- [CVE-2026-126229](https://cve.now/CVE-2026-126229.md): A authorization bypass through user-controlled key vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0… (CVSS 9.1, Fortinet FortiManager · Fortinet FortiAnalyzer)
- [CVE-2026-126262](https://cve.now/CVE-2026-126262.md): A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 8.0.0… (CVSS 9.3, Fortinet FortiAnalyzer · Fortinet FortiManager)
- [CVE-2026-121528](https://cve.now/CVE-2026-121528.md): A improper certificate validation vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2.0… (CVSS 7.7, Fortinet FortiOS)
- [CVE-2026-126259](https://cve.now/CVE-2026-126259.md): A missing authentication for critical function vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through… (CVSS 9.0, Fortinet FortiOS)
- [CVE-2026-126263](https://cve.now/CVE-2026-126263.md): A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiMail 8.0.0 through… (CVSS 9.4, Fortinet FortiMail)
- [CVE-2026-126255](https://cve.now/CVE-2026-126255.md): A path traversal: '../filedir' vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through… (CVSS 7.4, Fortinet FortiOS · Fortinet FortiPAM)
- [CVE-2026-126256](https://cve.now/CVE-2026-126256.md): A out-of-bounds read vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS… (CVSS 7.4, Fortinet FortiOS)
- [CVE-2026-121527](https://cve.now/CVE-2026-121527.md): A execution with unnecessary privileges vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.7, FortiClientEMS 7.4.0 through 7.4.1… (CVSS 6.3, Fortinet FortiClientEMS)
- [CVE-2026-126254](https://cve.now/CVE-2026-126254.md): A numeric truncation error vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through… (CVSS 9.6, Fortinet FortiOS)
- [CVE-2026-126258](https://cve.now/CVE-2026-126258.md): A stack-based buffer overflow vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.7 may allow an unauthenticated attacker with wad port… (CVSS 7.1, Fortinet FortiOS)
- [CVE-2026-126257](https://cve.now/CVE-2026-126257.md): A use of hard-coded password vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may… (CVSS 9.0, Fortinet FortiAuthenticator)
- [CVE-2026-121526](https://cve.now/CVE-2026-121526.md): A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator… (CVSS 5.8, Fortinet FortiAuthenticator)
- [CVE-2026-126253](https://cve.now/CVE-2026-126253.md): A authentication bypass by primary weakness vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS… (CVSS 9.3, Fortinet FortiOS)
- [CVE-2026-126252](https://cve.now/CVE-2026-126252.md): A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAuthenticator 8.0.0… (CVSS 8.3, Fortinet FortiAuthenticator)
- [CVE-2026-126251](https://cve.now/CVE-2026-126251.md): A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may… (CVSS 9.1, Fortinet FortiAuthenticator)
- [CVE-2026-126250](https://cve.now/CVE-2026-126250.md): A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may… (CVSS 8.2, Fortinet FortiAuthenticator)
- [CVE-2026-126248](https://cve.now/CVE-2026-126248.md): A insufficiently protected credentials vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through… (CVSS 7.5, Fortinet FortiAuthenticator)
- [CVE-2026-126246](https://cve.now/CVE-2026-126246.md): A null pointer dereference vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may… (CVSS 7.5, Fortinet FortiAuthenticator)
- [CVE-2026-126249](https://cve.now/CVE-2026-126249.md): A improper privilege management vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10… (CVSS 7.2, Fortinet FortiAuthenticator)
- [CVE-2026-126247](https://cve.now/CVE-2026-126247.md): A use of externally-controlled format string vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0… (CVSS 7.2, Fortinet FortiAuthenticator)
- [CVE-2026-126245](https://cve.now/CVE-2026-126245.md): A out-of-bounds write vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow… (CVSS 8.1, Fortinet FortiAuthenticator)
- [CVE-2026-126244](https://cve.now/CVE-2026-126244.md): A allocation of resources without limits or throttling vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3… (CVSS 7.5, Fortinet FortiAuthenticator)
- [CVE-2026-126236](https://cve.now/CVE-2026-126236.md): A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAnalyzer 8.0.0… (CVSS 7.2, Fortinet FortiManager · Fortinet FortiAnalyzer)
- [CVE-2026-126241](https://cve.now/CVE-2026-126241.md): A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAuthenticator 8.0.0… (CVSS 8.8, Fortinet FortiAuthenticator)
- [CVE-2026-126239](https://cve.now/CVE-2026-126239.md): A stack-based buffer overflow vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10… (CVSS 7.5, Fortinet FortiAuthenticator)
- [CVE-2026-126214](https://cve.now/CVE-2026-126214.md): A authentication bypass by spoofing vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7… (CVSS 7.2, Fortinet FortiManager · Fortinet FortiAnalyzer)
- [CVE-2026-126224](https://cve.now/CVE-2026-126224.md): A improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiAnalyzer 8.0.0… (CVSS 7.2, Fortinet FortiManager · Fortinet FortiAnalyzer)
- [CVE-2026-126216](https://cve.now/CVE-2026-126216.md): A improper privilege management vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through… (CVSS 3.8, Fortinet FortiManager)
- [CVE-2026-126228](https://cve.now/CVE-2026-126228.md): A out-of-bounds write vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0… (CVSS 7.2, Fortinet FortiManager · Fortinet FortiAnalyzer)
- [CVE-2026-126215](https://cve.now/CVE-2026-126215.md): A incorrect authorization vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer… (CVSS 8.2, Fortinet FortiManager · Fortinet FortiAnalyzer)
- [CVE-2026-126240](https://cve.now/CVE-2026-126240.md): A improper neutralization of special elements used in an ldap query ('ldap injection') vulnerability in Fortinet FortiAuthenticator 8.0.0… (CVSS 8.2, Fortinet FortiAuthenticator)
- [CVE-2026-126217](https://cve.now/CVE-2026-126217.md): A incorrect authorization vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer… (CVSS 8.7, Fortinet FortiManager · Fortinet FortiAnalyzer)
- [CVE-2026-126238](https://cve.now/CVE-2026-126238.md): A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may… (CVSS 8.6, Fortinet FortiAuthenticator)
- [CVE-2026-126225](https://cve.now/CVE-2026-126225.md): A missing authorization vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.7, FortiAnalyzer Cloud 8.0.0… (CVSS 7.1, Fortinet FortiManager · Fortinet FortiAnalyzer)
- [CVE-2026-126227](https://cve.now/CVE-2026-126227.md): A unintended proxy or intermediary ('confused deputy') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0… (CVSS 7.2, Fortinet FortiManager · Fortinet FortiAnalyzer)
- [CVE-2026-126220](https://cve.now/CVE-2026-126220.md): A improper neutralization of special elements in output used by a downstream component ('injection') vulnerability in Fortinet… (CVSS 7.2, Fortinet FortiManager)
- [CVE-2026-126219](https://cve.now/CVE-2026-126219.md): A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 8.0.0… (CVSS 7.2, Fortinet FortiManager · Fortinet FortiAnalyzer)
- [CVE-2026-126235](https://cve.now/CVE-2026-126235.md): A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 8.0.0 through… (CVSS 7.2, Fortinet FortiManager · Fortinet FortiAnalyzer)
- [CVE-2026-126221](https://cve.now/CVE-2026-126221.md): A improper neutralization of special elements in output used by a downstream component ('injection') vulnerability in Fortinet… (CVSS 7.2, Fortinet FortiManager · Fortinet FortiAnalyzer)
- [CVE-2026-126237](https://cve.now/CVE-2026-126237.md): A loop with unreachable exit condition ('infinite loop') vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3… (CVSS 7.5, Fortinet FortiAuthenticator)
- [CVE-2026-126234](https://cve.now/CVE-2026-126234.md): A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer Cloud… (CVSS 7.2, Fortinet FortiManager · Fortinet FortiAnalyzer)
- [CVE-2026-126243](https://cve.now/CVE-2026-126243.md): A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may… (CVSS 7.2, Fortinet FortiAuthenticator)
- [CVE-2026-126233](https://cve.now/CVE-2026-126233.md): A unrestricted upload of file with dangerous type vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through… (CVSS 7.2, Fortinet FortiManager · Fortinet FortiAnalyzer Cloud +1)
- [CVE-2026-126242](https://cve.now/CVE-2026-126242.md): A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may… (CVSS 7.4, Fortinet FortiAuthenticator)
- [CVE-2026-126222](https://cve.now/CVE-2026-126222.md): A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 8.0.0 through… (CVSS 7.2, Fortinet FortiManager · Fortinet FortiAnalyzer)
- [CVE-2026-126211](https://cve.now/CVE-2026-126211.md): A improper privilege management vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.1 through 7.6.7… (CVSS 7.2, Fortinet FortiManager · Fortinet FortiAnalyzer)
- [CVE-2026-126213](https://cve.now/CVE-2026-126213.md): A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 8.0.0… (CVSS 7.1, Fortinet FortiManager · Fortinet FortiAnalyzer)
- [CVE-2026-126218](https://cve.now/CVE-2026-126218.md): A authorization bypass through user-controlled key vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through… (CVSS 8.2, Fortinet FortiManager)
- [CVE-2026-126185](https://cve.now/CVE-2026-126185.md): A improper control of generation of code ('code injection') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer… (CVSS 7.2, Fortinet FortiManager · Fortinet FortiAnalyzer)
- [CVE-2026-126232](https://cve.now/CVE-2026-126232.md): A improper certificate validation vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7… (CVSS 7.5, Fortinet FortiManager · Fortinet FortiAnalyzer)
- [CVE-2026-126226](https://cve.now/CVE-2026-126226.md): A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAnalyzer… (CVSS 7.2, Fortinet FortiManager · Fortinet FortiAnalyzer)
- [CVE-2026-126230](https://cve.now/CVE-2026-126230.md): A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through… (CVSS 7.2, Fortinet FortiManager · Fortinet FortiAnalyzer)
- [CVE-2026-126231](https://cve.now/CVE-2026-126231.md): A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAnalyzer… (CVSS 7.2, Fortinet FortiManager · Fortinet FortiAnalyzer)
- [CVE-2026-126223](https://cve.now/CVE-2026-126223.md): A stack-based buffer overflow vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7… (CVSS 7.2, Fortinet FortiManager · Fortinet FortiAnalyzer)
- [CVE-2026-126184](https://cve.now/CVE-2026-126184.md): A authentication bypass by spoofing vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7… (CVSS 8.2, Fortinet FortiManager · Fortinet FortiAnalyzer)
- [CVE-2026-126212](https://cve.now/CVE-2026-126212.md): A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer… (CVSS 7.2, Fortinet FortiManager · Fortinet FortiAnalyzer)
- [CVE-2026-126183](https://cve.now/CVE-2026-126183.md): A authorization bypass through user-controlled key vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through… (CVSS 8.7, Fortinet FortiManager)
- [CVE-2026-126182](https://cve.now/CVE-2026-126182.md): A improper control of generation of code ('code injection') vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0… (CVSS 7.2, Fortinet FortiManager)
- [CVE-2026-126176](https://cve.now/CVE-2026-126176.md): A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7… (CVSS 8.1, Fortinet FortiManager · Fortinet FortiAnalyzer)
- [CVE-2026-126177](https://cve.now/CVE-2026-126177.md): A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7… (CVSS 8.1, Fortinet FortiManager · Fortinet FortiAnalyzer)
- [CVE-2026-126178](https://cve.now/CVE-2026-126178.md): A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer… (CVSS 7.2, Fortinet FortiManager · Fortinet FortiAnalyzer)
- [CVE-2026-126175](https://cve.now/CVE-2026-126175.md): A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0… (CVSS 8.8, Fortinet FortiManager · Fortinet FortiAnalyzer)
- [CVE-2026-126179](https://cve.now/CVE-2026-126179.md): A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAnalyzer… (CVSS 7.2, Fortinet FortiManager · Fortinet FortiAnalyzer)
- [CVE-2026-126169](https://cve.now/CVE-2026-126169.md): A improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiMail 8.0.0 through… (CVSS 7.2, Fortinet FortiMail)
- [CVE-2026-126166](https://cve.now/CVE-2026-126166.md): A improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiMail 8.0.0 through… (CVSS 7.2, Fortinet FortiMail)
- [CVE-2026-126170](https://cve.now/CVE-2026-126170.md): A improper encoding or escaping of output vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.2, FortiAnalyzer 7.6.0 through 7.6.7… (CVSS 9.8, Fortinet FortiManager · Fortinet FortiAnalyzer +1)
- [CVE-2026-126168](https://cve.now/CVE-2026-126168.md): A improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiMail 8.0.0 through… (CVSS 7.2, Fortinet FortiMail)
- [CVE-2026-126180](https://cve.now/CVE-2026-126180.md): A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1… (CVSS 8.4, Fortinet FortiManager)
- [CVE-2026-126171](https://cve.now/CVE-2026-126171.md): A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through… (CVSS 7.2, Fortinet FortiManager · Fortinet FortiAnalyzer)
- [CVE-2026-126167](https://cve.now/CVE-2026-126167.md): A improper neutralization of special elements used in a command ('command injection') vulnerability in Fortinet FortiMail 8.0.0 through… (CVSS 7.2, Fortinet FortiMail)
- [CVE-2026-126181](https://cve.now/CVE-2026-126181.md): A use of hard-coded credentials vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager… (CVSS 8.0, Fortinet FortiManager)
- [CVE-2026-126164](https://cve.now/CVE-2026-126164.md): A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiMail 8.0.0 through… (CVSS 9.4, Fortinet FortiMail)
- [CVE-2026-126163](https://cve.now/CVE-2026-126163.md): A use of externally-controlled format string vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1 may allow a remote unauthenticated… (CVSS 8.1, Fortinet FortiMail)
- [CVE-2026-126165](https://cve.now/CVE-2026-126165.md): A memory allocation with excessive size value vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6… (CVSS 7.5, Fortinet FortiMail)
- [CVE-2026-126161](https://cve.now/CVE-2026-126161.md): A uncontrolled resource consumption vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail… (CVSS 7.5, Fortinet FortiMail)
- [CVE-2026-126162](https://cve.now/CVE-2026-126162.md): A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6 may… (CVSS 8.7, Fortinet FortiMail)
- [CVE-2026-126160](https://cve.now/CVE-2026-126160.md): A improper authentication vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through… (CVSS 8.2, Fortinet FortiMail)
- [CVE-2026-126159](https://cve.now/CVE-2026-126159.md): A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6… (CVSS 7.5, Fortinet FortiMail)
- [CVE-2026-126147](https://cve.now/CVE-2026-126147.md): A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1… (CVSS 9.8, Fortinet FortiMail)
- [CVE-2026-126156](https://cve.now/CVE-2026-126156.md): A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6… (CVSS 9.1, Fortinet FortiMail)
- [CVE-2026-126152](https://cve.now/CVE-2026-126152.md): A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6… (CVSS 7.6, Fortinet FortiMail)
- [CVE-2026-126151](https://cve.now/CVE-2026-126151.md): A incorrect implementation of authentication algorithm vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through… (CVSS 7.5, Fortinet FortiMail)
- [CVE-2026-126154](https://cve.now/CVE-2026-126154.md): A out-of-bounds write vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through… (CVSS 7.5, Fortinet FortiMail)
- [CVE-2026-126153](https://cve.now/CVE-2026-126153.md): A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1… (CVSS 7.5, Fortinet FortiMail)
- [CVE-2026-126158](https://cve.now/CVE-2026-126158.md): A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0… (CVSS 7.2, Fortinet FortiMail)
- [CVE-2026-126155](https://cve.now/CVE-2026-126155.md): A incorrect authorization vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through… (CVSS 9.1, Fortinet FortiMail)
- [CVE-2026-126157](https://cve.now/CVE-2026-126157.md): A improper authentication vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through… (CVSS 9.1, Fortinet FortiMail)
- [CVE-2026-126149](https://cve.now/CVE-2026-126149.md): A integer overflow or wraparound vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0… (CVSS 7.5, Fortinet FortiMail)
- [CVE-2026-126150](https://cve.now/CVE-2026-126150.md): A weak password recovery mechanism for forgotten password vulnerability in Fortinet FortiMail 8.0.0, FortiMail 7.6.0 through 7.6.5… (CVSS 9.1, Fortinet FortiMail)
- [CVE-2026-126148](https://cve.now/CVE-2026-126148.md): A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0… (CVSS 9.8, Fortinet FortiMail)
- [CVE-2026-126146](https://cve.now/CVE-2026-126146.md): A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0… (CVSS 7.2, Fortinet FortiMail · Fortinet FortiRecorder)
- [CVE-2026-126144](https://cve.now/CVE-2026-126144.md): A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0… (CVSS 8.8, Fortinet FortiMail · Fortinet FortiRecorder +1)
- [CVE-2026-126145](https://cve.now/CVE-2026-126145.md): A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0… (CVSS 7.2, Fortinet FortiMail)
- [CVE-2026-126332](https://cve.now/CVE-2026-126332.md): Improper access control in the autofill vault search in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with only… (no CVSS, Devolutions Server)
- [CVE-2026-126326](https://cve.now/CVE-2026-126326.md): Improper access control in the administrative role assignment endpoint in Devolutions Server 2026.3.13.0 and earlier allows an… (no CVSS, Devolutions Server)
- [CVE-2026-126331](https://cve.now/CVE-2026-126331.md): Insertion of sensitive information into sent data in the user list endpoint in Devolutions Server 2026.3.13.0 and earlier allows an… (no CVSS, Devolutions Server)
- [CVE-2026-126328](https://cve.now/CVE-2026-126328.md): Insertion of sensitive information into sent data in the user endpoints in Devolutions Server 2026.3.13.0 and earlier allows an… (no CVSS, Devolutions Server)
- [CVE-2026-126327](https://cve.now/CVE-2026-126327.md): Improper access control in the connection history in Devolutions Server 2026.3.13.0 allows an authenticated user without the permission to… (no CVSS, Devolutions Server)
- [CVE-2026-81936](https://cve.now/CVE-2026-81936.md): Default OpenBMC Root Credential Reintroduced After Reset to Defaults in ThinkSystem v4 XCC3 (CVSS 6.8, Lenovo XClarity Controller)
- [CVE-2026-65952](https://cve.now/CVE-2026-65952.md): OS Command Injection in Lenovo XClarity OneCLI 5.5.0 Linux (CVSS 8.5, Lenovo OneCLI)
- [CVE-2026-65951](https://cve.now/CVE-2026-65951.md): Path Traversal (Tar Slip) in Lenovo XClarity OneCLI 5.5.0 Linux (CVSS 5.8, Lenovo OneCLI)
- [CVE-2026-65950](https://cve.now/CVE-2026-65950.md): Path Traversal (Zip Slip) in Lenovo XClarity OneCLI 5.5.0 Linux (CVSS 5.8, Lenovo OneCLI)
- [CVE-2026-65949](https://cve.now/CVE-2026-65949.md): Lenovo XClarity Integrator for WAC: Gateway-Administrator Remote Command Execution (CVSS 7.2, Lenovo XClarity Integrator for WAC)
- [CVE-2026-65982](https://cve.now/CVE-2026-65982.md): NULL-pointer dereference (DoS) in nginx-http-flv-module (CVSS 8.7, winshining nginx-http-flv-module)
- [CVE-2026-65973](https://cve.now/CVE-2026-65973.md): Laradocs: Command injection via unescaped Node.js binary path in KaTeX SSR (CVSS 6.4, PeteBishwhip laradocs)
- [CVE-2026-103980](https://cve.now/CVE-2026-103980.md): ideon: SSRF protection bypass via IPv6 transition addresses (NAT64 / 6to4 / IPv4-mapped) in link preview (CVSS 7.1, 3xpyth0n ideon)
- [CVE-2026-68507](https://cve.now/CVE-2026-68507.md): ideon: Unauthenticated /api/links/preview endpoint is an open SSRF relay, and its IP blocklist misses the 0.0.0.0/:: unspecified-address… (CVSS 6.9, 3xpyth0n ideon)
- [CVE-2026-65968](https://cve.now/CVE-2026-65968.md): ideon: Unauthenticated SSRF in /api/proxy/image via WHATWG bracketed/hex-mapped IPv6 bypass of isSafeUrl guard (CVSS 5.3, 3xpyth0n ideon)
- [CVE-2026-65965](https://cve.now/CVE-2026-65965.md): ideon: Read-only project viewers can wipe and rewrite the canvas and tamper with blocks/files via role-unchecked project endpoints (CVSS 8.7, 3xpyth0n ideon)
- [CVE-2026-126814](https://cve.now/CVE-2026-126814.md): blueprintUE Self-Hosted Edition before 4.3.6 Arbitrary Iframe Embedding via PeerTube Matcher (CVSS 4.8, blueprintue-self-hosted-edition)
- [CVE-2026-126813](https://cve.now/CVE-2026-126813.md): Roundcube Webmail before 1.6.21 and 1.7.6 IMAP Command Injection via \_uid (CVSS 7.4, Roundcube Webmail)
- [CVE-2026-126812](https://cve.now/CVE-2026-126812.md): blueprintUE Self-Hosted Edition before 4.3.7 Empty MariaDB Root Password via Docker Compose (CVSS 9.3, blueprintue-self-hosted-edition)
- [CVE-2026-126811](https://cve.now/CVE-2026-126811.md): BookStack before 26.09.3 Incorrect Authorization via Image and Drawio Endpoints (CVSS 5.3, BookStackApp BookStack)
- [CVE-2026-126810](https://cve.now/CVE-2026-126810.md): WWBN AVideo 29.1.0 through 29.7.1 Stored XSS via Channel RSS Feed (CVSS 5.1, WWBN AVideo)
- [CVE-2026-126809](https://cve.now/CVE-2026-126809.md): WWBN AVideo through 29.7.1 Missing Authorization via objects/import.json.php (CVSS 6.1, WWBN AVideo)
- [CVE-2026-126808](https://cve.now/CVE-2026-126808.md): WP ERP through 1.17.11 Incorrect Authorization via HRM Job-Info AJAX Handlers (CVSS 5.3, weDevs ERP)
- [CVE-2026-126807](https://cve.now/CVE-2026-126807.md): WuzAPI through 1.1.0 Cross-Tenant Information Disclosure via /chat/history (CVSS 5.3, asternic wuzapi)
- [CVE-2026-126806](https://cve.now/CVE-2026-126806.md): WWBN AVideo 14.3 through 29.7.1 Stored XSS via Video Source Tag (CVSS 9.3, WWBN AVideo)
- [CVE-2026-126805](https://cve.now/CVE-2026-126805.md): WWBN AVideo through 29.7.1 Privilege Escalation via Encoder video\_id\_hash (CVSS 8.6, WWBN AVideo)
- [CVE-2026-126804](https://cve.now/CVE-2026-126804.md): WWBN AVideo 12.4 through 29.7.1 Path Traversal File Deletion via deleteImage.json.php (CVSS 7.2, WWBN AVideo)
- [CVE-2026-126803](https://cve.now/CVE-2026-126803.md): Rote through 2.6.0 Privilege Escalation via Admin Settings API JWT Secret Exposure (CVSS 8.6, Rabithua Rote)
- [CVE-2026-126802](https://cve.now/CVE-2026-126802.md): NextScan 1.1.0 through 1.2.0 Hardcoded Credentials in ns-admin Agent and External APIs (CVSS 8.8, tongcheng-security-team NextScan)
- [CVE-2026-126801](https://cve.now/CVE-2026-126801.md): Rote 1.2.0 through 2.6.0 Account Takeover via OAuth Account Merge Endpoint (CVSS 8.7, Rabithua Rote)
- [CVE-2026-126800](https://cve.now/CVE-2026-126800.md): Hydro @hydrooj/ui-default before 4.59.1 Stored XSS via Markdown language- Class (CVSS 9.3, hydro-dev @hydrooj/ui-default)
- [CVE-2026-126799](https://cve.now/CVE-2026-126799.md): Gotenberg 8.31.0 before 8.38.0 SSRF via IPv6 Zone Identifiers in IsPublicIP (CVSS 6.9, gotenberg)
- [CVE-2026-126798](https://cve.now/CVE-2026-126798.md): NextScan 1.1.0 through 1.2.0 Stored XSS via URL Asset Detail View (CVSS 2.1, tongcheng-security-team NextScan)
- [CVE-2026-126797](https://cve.now/CVE-2026-126797.md): NextScan 1.1.0 through 1.2.0 Hardcoded JWT Key Authentication Bypass in ns-admin (CVSS 9.3, tongcheng-security-team NextScan)
- [CVE-2026-125926](https://cve.now/CVE-2026-125926.md): Server-side request forgery in the server registration and update API in mcp-gateway-registry (CVSS 8.5, AWS mcp-gateway-registry)
- [CVE-2026-65957](https://cve.now/CVE-2026-65957.md): Helio: Dashboard sideband CORS origin allowlist matches hostnames by prefix, admitting attacker-controlled origins in open mode (CVSS 6.9, gethelio helio)
- [CVE-2026-100307](https://cve.now/CVE-2026-100307.md): Missing authorization on the external management API in mcp-gateway-registry enables privilege escalation to registry administrator (CVSS 8.8, AWS mcp-gateway-registry)
- [CVE-2026-126815](https://cve.now/CVE-2026-126815.md): Pre-account hijacking via planted password (CVSS 8.1, XauenDevs Lagarto Chivato)
- [CVE-2026-0323](https://cve.now/CVE-2026-0323.md): Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability (CVSS 1.1, Palo Alto Networks Checkov by Prisma Cloud)
- [CVE-2026-0324](https://cve.now/CVE-2026-0324.md): GlobalProtect App: Incorrect Privilege Management Vulnerability in OPSWAT MetaDefender Endpoint Security SDK on Windows (CVSS 5.9, OPSWAT MetaDefender Endpoint Security SDK)
- [CVE-2026-0325](https://cve.now/CVE-2026-0325.md): PAN-OS: GlobalProtect Authorization Bypass Vulnerability (CVSS 1.3, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0326](https://cve.now/CVE-2026-0326.md): PAN-OS: Buffer Overflow Vulnerability in Protocol and Service Processing (CVSS 1.7, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0327](https://cve.now/CVE-2026-0327.md): PAN-OS: Privilege Escalation Vulnerability in GlobalProtect (CVSS 2.3, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-91151](https://cve.now/CVE-2026-91151.md): Cockpit: cockpit: local privilege escalation via insecure symlink handling in public key addition helper (CVSS 7.3, Red Hat Enterprise Linux · Red Hat OpenShift Dev Spaces)
- [CVE-2026-0328](https://cve.now/CVE-2026-0328.md): PAN-OS: User Impersonation through GlobalProtect Portal (CVSS 2.7, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0329](https://cve.now/CVE-2026-0329.md): PAN-OS: Buffer Overflow Vulnerability (CVSS 4.6, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0330](https://cve.now/CVE-2026-0330.md): PAN-OS: Authenticated Remote Code Execution (RCE) in Panorama (CVSS 6.1, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0331](https://cve.now/CVE-2026-0331.md): PAN-OS: Sensitive Information Disclosure Vulnerability (CVSS 6.6, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-126784](https://cve.now/CVE-2026-126784.md): Uncontrolled resource consumption via post\_notice (CVSS 4.3, XauenDevs Lagarto Chivato)
- [CVE-2026-122095](https://cve.now/CVE-2026-122095.md): AsiaInfo BSS Platform 9.2 before 9.2.38 has a stored cross-site scripting (XSS) vulnerability in the menu icon upload function. (CVSS 7.6, AsiaInfo BSS Platform)
- [CVE-2026-126781](https://cve.now/CVE-2026-126781.md): Webmin through 2.670 Users File Injection via acl/cert\_issue.cgi (CVSS 7.7, webmin)
- [CVE-2026-126780](https://cve.now/CVE-2026-126780.md): Webmin through 2.670 Privilege Escalation via acl/save\_group.cgi (CVSS 8.6, webmin)
- [CVE-2026-126779](https://cve.now/CVE-2026-126779.md): Spatie Browsershot 2.2.0 before 5.5.0 Local File Read via setHtml() (CVSS 8.7, spatie browsershot)
- [CVE-2026-126778](https://cve.now/CVE-2026-126778.md): Wallos 4.4.0 before 5.10.3 Stored XSS via sendnotifications.php (CVSS 5.1, ellite Wallos)
- [CVE-2026-126777](https://cve.now/CVE-2026-126777.md): Traccar 3.15 before 6.17.0 Authentication Bypass via Empty LDAP Password (CVSS 9.1, Traccar)
- [CVE-2026-126776](https://cve.now/CVE-2026-126776.md): SiYuan 3.7.0 before 3.8.10 Path Traversal File Write via MCP web\_fetch (CVSS 6.0, siyuan-note siyuan)
- [CVE-2026-126775](https://cve.now/CVE-2026-126775.md): Social-auth-core 4.7.0 before 7.0.0 Login CSRF via SAML RelayState (CVSS 2.3, python-social-auth social-auth-core)
- [CVE-2026-126774](https://cve.now/CVE-2026-126774.md): @tinacms/mdx before 2.4.2 Code Injection via MDX Serializer Rich-Text Values (CVSS 8.8, @tinacms/mdx)
- [CVE-2026-108472](https://cve.now/CVE-2026-108472.md): Xfsprogs: xfsprogs: local privilege escalation via command injection in xfs\_admin (CVSS 7.8, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-91150](https://cve.now/CVE-2026-91150.md): Cockpit: cockpit: denial of service via unbounded fragmented websocket messages (CVSS 7.5, Red Hat Enterprise Linux · Red Hat OpenShift Dev Spaces)
- [CVE-2026-126051](https://cve.now/CVE-2026-126051.md): Node.js is vulnerable to a remotely triggerable uncaught exception in TLS servers via deferred handshake callbacks (CVSS 7.5, nodejs node)
- [CVE-2026-123875](https://cve.now/CVE-2026-123875.md): Node.js is vulnerable to an HTTP/2 denial of service via a NULL pointer dereference when a respondWithFile() download is cancelled (CVSS 5.9, nodejs node)
- [CVE-2026-65967](https://cve.now/CVE-2026-65967.md): Fider: Server-Side Request Forgery (SSRF) via Webhook URL (CVSS 7.1, getfider fider)
- [CVE-2026-91873](https://cve.now/CVE-2026-91873.md): Dell OpenManage Ansible Modules, versions 2.1.2 through 10.0.3, contains an Improper Certificate Validation vulnerability in the… (CVSS 8.7, Dell OpenManage Ansible Modules)
- [CVE-2026-65840](https://cve.now/CVE-2026-65840.md): Fider: Cross-Tenant Authentication Bypass via Missing tenant\_id Filter in getVerificationByKey (CVSS 9.6, getfider fider)
- [CVE-2026-123874](https://cve.now/CVE-2026-123874.md): Node.js is vulnerable to an HTTP/2 use-after-free via respondWithFile() stream reset during a pending write (CVSS 7.5, nodejs node)
- [CVE-2026-123747](https://cve.now/CVE-2026-123747.md): Pappl-retrofit: directory traversal in the add-ppdfiles and delete-ppdfiles actions (CVSS 7.3, OpenPrinting pappl-retrofit · Red Hat Enterprise Linux)
- [CVE-2026-123872](https://cve.now/CVE-2026-123872.md): Node.js is vulnerable to a client certificate authentication bypass via TLS 1.2 renegotiation servername change (CVSS 8.1, nodejs node)
- [CVE-2026-65843](https://cve.now/CVE-2026-65843.md): sync-rpc: Arbitrary remote code execution vulnerability (CVSS 8.7, ForbesLindesay sync-rpc)
- [CVE-2026-91878](https://cve.now/CVE-2026-91878.md): Dell OpenManage Ansible Modules, versions 6.0.0 through 10.0.3, contains an Improper Neutralization of Special Elements in Output Used by… (CVSS 7.6, Dell OpenManage Ansible Modules)
- [CVE-2026-123877](https://cve.now/CVE-2026-123877.md): Node.js is vulnerable to a certificate validation bypass in https.Agent via cross-policy TLS session reuse (CVSS 6.8, nodejs node)
- [CVE-2026-119055](https://cve.now/CVE-2026-119055.md): CWE- 416: Use After Free vulnerability exists that could cause arbitrary code execution when a local attacker could trick the end user to… (CVSS 4.6, Schneider Electric EcoStruxure™ Power Build Rapsody)
- [CVE-2026-61637](https://cve.now/CVE-2026-61637.md): Icinga Web 2: Open redirect on login page, under certain circumstances (CVSS 3.5, icingaweb2)
- [CVE-2026-123871](https://cve.now/CVE-2026-123871.md): Node.js is vulnerable to proxy credential disclosure via ERR\_PROXY\_INVALID\_CONFIG error messages (CVSS 6.2, nodejs node)
- [CVE-2026-91877](https://cve.now/CVE-2026-91877.md): Dell OpenManage Ansible Modules, versions 2.0.2 through 10.0.3, contains an Improper Neutralization of Special Elements in Data Query… (CVSS 7.6, Dell OpenManage Ansible Modules)
- [CVE-2026-123868](https://cve.now/CVE-2026-123868.md): Node.js is vulnerable to an HTTP/2 memory exhaustion denial of service via unaccounted inbound DATA on an undrained stream (CVSS 5.9, nodejs node)
- [CVE-2026-65833](https://cve.now/CVE-2026-65833.md): iopress: buffer over-read in chunked HTTP parser (CVSS 6.9, senapati484 iopress)
- [CVE-2026-123867](https://cve.now/CVE-2026-123867.md): Node.js is vulnerable to a per-host mTLS authorization bypass via a CA-only SNI context failing open to the default CA (CVSS 4.2, nodejs node)
- [CVE-2026-91876](https://cve.now/CVE-2026-91876.md): Dell OpenManage Ansible Modules, versions 2.0.4 through 10.0.3, contains an Improper Restriction of XML External Entity Reference… (CVSS 5.5, Dell OpenManage Ansible Modules)
- [CVE-2026-123866](https://cve.now/CVE-2026-123866.md): Node.js is vulnerable to HTTP/2 response memory disclosure via a use-after-free during stream teardown (CVSS 7.5, nodejs node)
- [CVE-2026-58505](https://cve.now/CVE-2026-58505.md): geojson-vt: Uncontrolled Recursion in Nested GeoJSON GeometryCollection (CVSS 7.5, maplibre geojson-vt)
- [CVE-2026-123865](https://cve.now/CVE-2026-123865.md): Node.js is vulnerable to an HTTP/2 memory and file-descriptor leak via a protocol error during session shutdown (CVSS 7.5, nodejs node)
- [CVE-2026-91875](https://cve.now/CVE-2026-91875.md): Dell OpenManage Ansible Modules, versions 9.2.0 through 10.0.3, contains an Improper Certificate Validation vulnerability in the… (CVSS 8.7, Dell OpenManage Ansible Modules)
- [CVE-2026-123864](https://cve.now/CVE-2026-123864.md): Node.js is vulnerable to cross-connection memory disclosure via TLS write re-entrancy in the HTTPS request parser (CVSS 8.1, nodejs node)
- [CVE-2026-123863](https://cve.now/CVE-2026-123863.md): Node.js is vulnerable to a remote HTTP/2 denial of service via a reachable assertion in Http2Session teardown (CVSS 8.2, nodejs node)
- [CVE-2026-57500](https://cve.now/CVE-2026-57500.md): REVA: Access to internal metadata (CVSS 6.3, opencloud-eu reva)
- [CVE-2026-91874](https://cve.now/CVE-2026-91874.md): Dell OpenManage Ansible Modules, versions 5.0.0 through 10.0.3, contains an Improper Certificate Validation vulnerability in the… (CVSS 8.7, Dell OpenManage Ansible Modules)
- [CVE-2026-123862](https://cve.now/CVE-2026-123862.md): Node.js is vulnerable to a zlib denial of service via a stream destroy during a pending params() call (CVSS 2.9, nodejs node)
- [CVE-2026-123829](https://cve.now/CVE-2026-123829.md): Node.js is vulnerable to Permission Model file-name disclosure via recursive fs.watch (CVSS 2.5, nodejs node)
- [CVE-2026-126772](https://cve.now/CVE-2026-126772.md): OpsTree REMS through 1.0.0 Comment Author Spoofing via Incident Comment API (CVSS 5.3, OpsTree Solutions REMS)
- [CVE-2026-126771](https://cve.now/CVE-2026-126771.md): OpsTree REMS through 1.0.0 Stored XSS via Attachment Upload and Preview (CVSS 5.1, OpsTree Solutions REMS)
- [CVE-2026-126770](https://cve.now/CVE-2026-126770.md): OpsTree REMS through 1.0.0 SSRF via Database Test Connection (CVSS 5.3, OpsTree Solutions REMS)
- [CVE-2026-126769](https://cve.now/CVE-2026-126769.md): OpsTree REMS through 1.0.0 Missing Authentication via /api/v1/databases Governance API (CVSS 8.7, OpsTree Solutions REMS)
- [CVE-2026-126768](https://cve.now/CVE-2026-126768.md): OpsTree REMS through 1.0.0 Authentication Bypass via is\_local\_auth Flag (CVSS 9.3, OpsTree Solutions REMS)
- [CVE-2026-126767](https://cve.now/CVE-2026-126767.md): OpsTree REMS through 1.0.0 Prompt Injection via RCA Chat Assistant (CVSS 5.3, OpsTree Solutions REMS)
- [CVE-2026-126766](https://cve.now/CVE-2026-126766.md): OpsTree REMS through 1.0.0 Reporter Spoofing via /api/v1/incidents (CVSS 5.3, OpsTree Solutions REMS)
- [CVE-2026-76080](https://cve.now/CVE-2026-76080.md): Probo: Unauthenticated cross-tenant and hidden-item disclosure via Query.node in the public Trust Center API (CVSS 3.7, getprobo probo)
- [CVE-2026-123828](https://cve.now/CVE-2026-123828.md): Node.js is vulnerable to a heap buffer overflow in HTTP/2 session.altsvc() via a long origin (CVSS 5.9, nodejs node)
- [CVE-2026-76079](https://cve.now/CVE-2026-76079.md): Probo: Vertical privilege escalation (CVSS 7.2, getprobo probo)
- [CVE-2026-76078](https://cve.now/CVE-2026-76078.md): Probo: Broken access control in public e-signature API (CVSS 3.1, getprobo probo)
- [CVE-2026-91892](https://cve.now/CVE-2026-91892.md): Dell Terraform Provider for PowerFlex, versions prior to 1.9.0, contains a vulnerability that may permit the use of deprecated… (CVSS 3.7, Dell Terraform Provider for PowerFlex)
- [CVE-2026-63505](https://cve.now/CVE-2026-63505.md): Probo: Cross-tenant IDOR via unvalidated FK references (CVSS 4.9, getprobo probo)
- [CVE-2026-64861](https://cve.now/CVE-2026-64861.md): Probo: GraphQL Alias-Based Application Layer Denial of Service (DoS) (CVSS 4.3, getprobo probo)
- [CVE-2026-91891](https://cve.now/CVE-2026-91891.md): Dell Terraform Provider for PowerStore, versions prior to 1.3.1 , contains a vulnerability that may cause sensitive authentication data to… (CVSS 7.5, Dell Terraform Provider for PowerStore)
- [DRUPAL-CONTRIB-2026-334](https://cve.now/DRUPAL-CONTRIB-2026-334.md): This module enables you to manage user consent for external services, such as embedded videos. (no CVSS, drupal/cookies)
- [CVE-2026-91880](https://cve.now/CVE-2026-91880.md): Dell Terraform Provider for PowerFlex, versions 1.5.0 through 1.8.0, contains an Improper Certificate Validation vulnerability in the SSH… (CVSS 8.9, Dell Terraform Provider for PowerFlex)
- [CVE-2026-91879](https://cve.now/CVE-2026-91879.md): Dell Terraform for ObjectScale and Powerstore, versions prior to 1.1.1 (ObjectScale) and versions 1.2.1 through 1.3.0 (PowerStore)… (CVSS 8.8, Dell Terraform Provider for ObjectScale · Dell Terraform Pr…)
- [CVE-2026-68862](https://cve.now/CVE-2026-68862.md): Dell Terraform Provider for Dell PowerFlex contain(s) an OS Command Injection Vulnerability in the SDC host provisioning component. (CVSS 6.6, Terraform Provider for Dell PowerFlex)
- [CVE-2026-65820](https://cve.now/CVE-2026-65820.md): aeon: Privileged GitHub Actions workflow allowed fork-controlled code execution (CVSS 8.7, aeon-toolkit aeon)
- [CVE-2026-91890](https://cve.now/CVE-2026-91890.md): Dell Ansible Storage for Unity , versions prior to 1.2.13 contains an Improper Certificate Validation vulnerability in the… (CVSS 8.7, Dell Ansible Storage for Unity)
- [CVE-2026-64858](https://cve.now/CVE-2026-64858.md): vulnerability-operator: IDOR exposing vulnerability reports via unauthenticated Report Handler (CVSS 5.3, ckotzbauer vulnerability-operator)
- [CVE-2026-91872](https://cve.now/CVE-2026-91872.md): Dell Ansible Storage for PowerStore, versions prior to 3.9.0,contains an Insertion of Sensitive Information into Log File vulnerability in… (CVSS 5.5, Dell Ansible Storage for PowerStore)
- [CVE-2026-91871](https://cve.now/CVE-2026-91871.md): Dell Ansible Storage for PowerStore, versions prior to 3.9.0, contains an Improper Certificate Validation vulnerability in the API client… (CVSS 7.4, Dell Ansible Storage for PowerStore)
- [CVE-2026-91870](https://cve.now/CVE-2026-91870.md): Dell Ansible Storage for PowerFlex, versions prior to 3.2.0, contains an Improper Certificate Validation vulnerability in the API client… (CVSS 7.4, Dell Ansible Storage for PowerFlex)
- [CVE-2026-106152](https://cve.now/CVE-2026-106152.md): External Control of Configuration Setting in Telerik Report Server (CVSS 8.8, Progress Software Telerik Report Server)
- [CVE-2026-61619](https://cve.now/CVE-2026-61619.md): OWASP CRS: ReDoS in shared unix-shell-evasion regex-assembly include (12 RCE rules) - PCRE2 backtracking-limit exhaustion causes detection… (CVSS 8.8, coreruleset)
- [CVE-2026-106133](https://cve.now/CVE-2026-106133.md): Incorrect Authorization in Telerik Report Server Web Report Designer (CVSS 6.3, Progress Software Telerik Report Server)
- [CVE-2026-68485](https://cve.now/CVE-2026-68485.md): An authorization bypass in website-index.php in Revive Adserver 6.0.8 and earlier allows an authenticated manager restricted to one agency… (CVSS 4.3, Revive Adserver)
- [CVE-2026-68486](https://cve.now/CVE-2026-68486.md): An authorization bypass in campaign-zone linking in Revive Adserver 6.0.8 and earlier allows an authenticated manager, or a trafficker… (CVSS 5.4, Revive Adserver)
- [CVE-2026-108560](https://cve.now/CVE-2026-108560.md): A reflected cross-site scripting vulnerability in updates-history.php in Revive Adserver 6.0.8 and earlier allows an unauthenticated… (CVSS 6.1, Revive Adserver)
- [CVE-2026-108563](https://cve.now/CVE-2026-108563.md): Spreadsheet formula injection in conversion-tracking report exports in Revive Adserver 6.0.8 and earlier allows an unauthenticated… (CVSS 4.7, Revive Adserver)
- [CVE-2026-108558](https://cve.now/CVE-2026-108558.md): A reflected cross-site scripting vulnerability in the conversion-statistics pages of Revive Adserver 6.0.8 and earlier allows an… (CVSS 6.1, Revive Adserver)
- [CVE-2026-108565](https://cve.now/CVE-2026-108565.md): A reflected cross-site scripting vulnerability in the popup invocation options of Revive Adserver 6.0.8 and earlier allows an… (CVSS 4.7, Revive Adserver)
- [CVE-2026-107662](https://cve.now/CVE-2026-107662.md): Blind SQL injection in Revive Adserver 6.0.8 and earlier allows an authenticated manager restricted to one agency to extract arbitrary… (CVSS 8.8, Revive Adserver)
- [CVE-2026-107247](https://cve.now/CVE-2026-107247.md): An authorization bypass in Revive Adserver 6.0.0 through 6.0.8 allows an authenticated manager restricted to one agency to access or… (CVSS 8.1, Revive Adserver)
- [CVE-2026-108559](https://cve.now/CVE-2026-108559.md): A reflected cross-site scripting vulnerability in the iframe invocation options of Revive Adserver 6.0.8 and earlier allows an… (CVSS 6.1, Revive Adserver)
- [CVE-2026-108564](https://cve.now/CVE-2026-108564.md): A reflected cross-site scripting vulnerability in the invocation-tag generation interface of Revive Adserver 6.0.8 and earlier allows an… (CVSS 4.7, Revive Adserver)
- [CVE-2026-108561](https://cve.now/CVE-2026-108561.md): A stored cross-site scripting vulnerability in the report date-selection controls of Revive Adserver 6.0.8 and earlier allows an… (CVSS 6.1, Revive Adserver)
- [CVE-2026-77168](https://cve.now/CVE-2026-77168.md): A cross-site request forgery vulnerability in tracker-invocation.php in Revive Adserver 6.0.8 and earlier allows an attacker to modify a… (CVSS 4.3, Revive Adserver)
- [CVE-2026-82978](https://cve.now/CVE-2026-82978.md): An authorization bypass in channel-edit.php in Revive Adserver 6.0.8 and earlier allows an authenticated manager to create a delivery rule… (CVSS 4.3, Revive Adserver)
- [CVE-2026-108562](https://cve.now/CVE-2026-108562.md): A stored cross-site scripting vulnerability in maintenance-appendcode-check.php in Revive Adserver 6.0.8 and earlier allows an… (CVSS 5.4, Revive Adserver)
- [CVE-2026-86363](https://cve.now/CVE-2026-86363.md): Dell Live Optics Collector, versions prior to 27.3.13.330 contains a Generation of Predictable IV with CBC Mode vulnerability. (CVSS 5.5, Dell Live Optics Collector)
- [CVE-2026-106137](https://cve.now/CVE-2026-106137.md): ClassFactory Race Condition and Retained Assembly Memory in Telerik UI for ASP.NET MVC (CVSS 8.6, Progress Software Telerik UI for ASP.NET MVC)
- [CVE-2026-62971](https://cve.now/CVE-2026-62971.md): OWASP CRS: XML Attribute Value Bypass (CVSS 7.2, coreruleset)
- [CVE-2026-86364](https://cve.now/CVE-2026-86364.md): Dell Live Optics Collector, versions prior to 27.3.8.317 contains a Use of Insufficiently Random Values vulnerability. (CVSS 4.7, Dell Live Optics Collector)
- [CVE-2026-106156](https://cve.now/CVE-2026-106156.md): Uncontrolled Resource Consumption in Telerik UI for ASP.NET Core Server-side Aggregation (CVSS 8.6, Progress Software Telerik UI for ASP.NET Core)
- [CVE-2026-110697](https://cve.now/CVE-2026-110697.md): Quay: quay: sql like wildcard injection in robot listing leaks cross-tenant robot tokens (CVSS 9.9, Red Hat OpenShift Update Service · Red Hat Quay)
- [CVE-2026-124694](https://cve.now/CVE-2026-124694.md): Cross-Site Scripting in Kendo UI for jQuery PropertyGrid Values and Descriptions (CVSS 7.1, Progress Software Kendo UI for jQuery)
- [CVE-2026-119723](https://cve.now/CVE-2026-119723.md): When parsing request variables such as query-string and form parameters, HHVM did not check that appending a nested array succeeded before… (no CVSS, Facebook HHVM)
- [CVE-2026-121737](https://cve.now/CVE-2026-121737.md): When a remote, unauthenticated HTTP/1.1 client pipelined the start of a second request and then stopped reading, proxygen's… (no CVSS, Facebook proxygen)
- [CVE-2026-119237](https://cve.now/CVE-2026-119237.md): In proxygen's HTTP/3 session, when a HEADERS block referenced QPACK dynamic table entries that had not yet been received, header decoding… (no CVSS, Facebook proxygen)
- [CVE-2026-119236](https://cve.now/CVE-2026-119236.md): An mvfst QUIC server retained CRYPTO frame data received at an encryption level (Initial or Handshake) that the TLS handshake had already… (no CVSS, Facebook mvfst)
- [CVE-2026-119235](https://cve.now/CVE-2026-119235.md): proxygen's QPACK decoder enforced its size limit on a string literal in an encoder-stream instruction only after the entire literal had… (no CVSS, Facebook proxygen)
- [CVE-2026-119234](https://cve.now/CVE-2026-119234.md): mvfst did not adequately merge or compact out-of-order STREAM frame data, and a small received fragment could keep a much larger receive… (no CVSS, Facebook mvfst)
- [CVE-2026-119233](https://cve.now/CVE-2026-119233.md): proxygen's HTTP/3 codec buffered an incomplete non-DATA frame, such as a control-stream frame, a frame of an unknown or reserved type, or… (no CVSS, Facebook proxygen)
- [CVE-2026-124693](https://cve.now/CVE-2026-124693.md): Cross-Site Scripting in Kendo UI for jQuery PivotGrid Axis Chips (CVSS 7.1, Progress Software Kendo UI for jQuery)
- [CVE-2026-124692](https://cve.now/CVE-2026-124692.md): Cross-Site Scripting in Kendo UI for jQuery Grid and TreeList Column Reordering (CVSS 7.1, Progress Software Kendo UI for jQuery)
- [CVE-2026-124690](https://cve.now/CVE-2026-124690.md): Cross-Site Scripting During Kendo UI for jQuery Custom SVG Icon Sanitization (CVSS 7.1, Progress Software Kendo UI for jQuery)
- [CVE-2026-124689](https://cve.now/CVE-2026-124689.md): Cross-Site Scripting in Kendo UI for jQuery ActionSheet Header Labels (CVSS 7.1, Progress Software Kendo UI for jQuery)
- [CVE-2026-124688](https://cve.now/CVE-2026-124688.md): Cross-Site Scripting via the spriteCssClass Field in Kendo UI for jQuery (CVSS 7.1, Progress Software Kendo UI for jQuery)
- [CVE-2026-126722](https://cve.now/CVE-2026-126722.md): CVE-2026-126722 (no CVSS, Rooxis RXR-12)
- [CVE-2026-126723](https://cve.now/CVE-2026-126723.md): CVE-2026-126723 (no CVSS, Rooxis RXR-12)
- [CVE-2026-126724](https://cve.now/CVE-2026-126724.md): CVE-2026-126724 (no CVSS, Rooxis RXR-12)
- [CVE-2026-126720](https://cve.now/CVE-2026-126720.md): CVE-2026-126720 (no CVSS, Rooxis RXR-12)
- [CVE-2026-124687](https://cve.now/CVE-2026-124687.md): Cross-Site Scripting in DropDownButton and SplitButton Items in Kendo UI for jQuery (CVSS 7.1, Progress Software Kendo UI for jQuery)
- [CVE-2026-122043](https://cve.now/CVE-2026-122043.md): repmgr 4.0.0 through 5.5.0 is affected by an OS command injection vulnerability (CWE-78) in event notifications. (CVSS 6.0, EnterpriseDB repmgr)
- [CVE-2026-116633](https://cve.now/CVE-2026-116633.md): A potential vulnerability was reported in some Lenovo Tablets that could allow a third-party application to perform an arbitrary file… (CVSS 6.9, Lenovo Idea Tab Pro TB373FU · Lenovo Tab One TB305FU +11)
- [CVE-2026-119238](https://cve.now/CVE-2026-119238.md): A potential improper permissions vulnerability was reported in Lenovo XiangBangbang that could allow a local application to perform… (CVSS 4.8, Lenovo XiangBangbang Application)
- [CVE-2026-89061](https://cve.now/CVE-2026-89061.md): During an internal security assessment, a potential vulnerability was discovered in Lenovo PC Manager, distributed exclusively in the… (CVSS 8.5, Lenovo PC Manager)
- [CVE-2026-77882](https://cve.now/CVE-2026-77882.md): A deserialization of untrusted data vulnerability was discovered in Lenovo System Update that could allow a local authenticated user to… (CVSS 8.5, Lenovo System Update)
- [CVE-2026-77873](https://cve.now/CVE-2026-77873.md): An improper permissions vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute code… (CVSS 7.0, Lenovo System Update)
- [CVE-2026-100290](https://cve.now/CVE-2026-100290.md): Double free after allocation failure in regcomp and regexec (CVSS 3.7, The GNU C Library glibc)
- [CVE-2026-64855](https://cve.now/CVE-2026-64855.md): soapbar: verify\_envelope\_bsp accepts an unauthenticated embedded certificate (signature forgery / authentication bypass) (CVSS 8.2, hitoshyamamoto soapbar)
- [CVE-2026-115819](https://cve.now/CVE-2026-115819.md): One-byte buffer overflow in wide scanf %s and %\[ conversions (CVSS 4.8, The GNU C Library glibc)
- [CVE-2026-124686](https://cve.now/CVE-2026-124686.md): JavaScript Code Injection through kendo.init() in Kendo UI for jQuery (CVSS 5.4, Progress Software Kendo UI for jQuery)
- [CVE-2026-105440](https://cve.now/CVE-2026-105440.md): Switch Engine (EXOS) JSON-RPC Authorization Bypass Allows Read-Only Users to Disclose Sensitive Information (CVSS 8.3, Extreme Networks Switch Engine)
- [CVE-2026-110289](https://cve.now/CVE-2026-110289.md): Git Sync connections send credentials to unvalidated server URLs (CVSS 5.5, Grafana Enterprise · Grafana OSS)
- [CVE-2026-124746](https://cve.now/CVE-2026-124746.md): Busybox: out-of-bounds read in volume\_id\_get\_buffer() via an offset+length wraparound (CVSS 5.5, Red Hat Enterprise Linux · Red Hat Hardened Images)
- [CVE-2026-102589](https://cve.now/CVE-2026-102589.md): Cross-instance user impersonation through image renderer JWTs (CVSS 7.1, Grafana OSS · Grafana Enterprise)
- [CVE-2026-126325](https://cve.now/CVE-2026-126325.md): Critical Remote Code Execution (RCE) vulnerability reported in Windchill (CVSS 9.2, PTC Windchill · PTC FlexPLM)
- [CVE-2026-111024](https://cve.now/CVE-2026-111024.md): Folder permission bypass in the Git Sync repository files API (CVSS 7.1, Grafana Enterprise · Grafana OSS)
- [CVE-2026-123710](https://cve.now/CVE-2026-123710.md): Quay: red hat quay: unauthenticated registry signing-key takeover via service key rotation (CVSS 9.8, Red Hat Quay)
- [CVE-2026-111000](https://cve.now/CVE-2026-111000.md): Privilege escalation through folder move in the folders API (CVSS 7.1, Grafana Enterprise · Grafana OSS)
- [CVE-2026-107509](https://cve.now/CVE-2026-107509.md): Memory exhaustion denial of service in SQL Expressions (CVSS 6.5, Grafana OSS · Grafana Enterprise)
- [CVE-2026-110992](https://cve.now/CVE-2026-110992.md): Path traversal in Git Sync delete and move jobs (CVSS 6.5, Grafana OSS · Grafana Enterprise)
- [CVE-2026-82014](https://cve.now/CVE-2026-82014.md): Team preferences RBAC bypass through the set-home-dash endpoint (CVSS 4.3, Grafana Enterprise · Grafana OSS)
- [CVE-2026-14242](https://cve.now/CVE-2026-14242.md): Authorization bypass in the Git Sync provisioning jobs API (CVSS 6.5, Grafana OSS · Grafana Enterprise)
- [CVE-2026-13721](https://cve.now/CVE-2026-13721.md): Folder authorization bypass in the Git Sync provisioning files API (CVSS 6.5, Grafana Enterprise · Grafana OSS)
- [CVE-2026-89326](https://cve.now/CVE-2026-89326.md): Apache XML Graphics Batik: Check url protocol when loading document (no CVSS, Apache Software Foundation org.apache.xmlgraphics:batik-bri…)
- [CVE-2026-106023](https://cve.now/CVE-2026-106023.md): Apache HTTP Server: mod\_md NULL pointer dereference leads to child process crash (no CVSS, Apache Software Foundation Apache HTTP Server)
- [CVE-2026-109163](https://cve.now/CVE-2026-109163.md): Apache HTTP Server: mod\_vhost\_alias 1 byte stack buffer overwrite (after CVE-2026-63292) (low (no CVSS), Apache Software Foundation Apache HTTP Server)
- [CVE-2026-119618](https://cve.now/CVE-2026-119618.md): Apache HTTP Server: mod\_http2: heap corruption and RCE in assign\_headers (critical (no CVSS), Apache Software Foundation Apache HTTP Server)
- [CVE-2026-71395](https://cve.now/CVE-2026-71395.md): Apache XML Graphics FOP: CWE-502 unsafe deserialization in hyphenation loading (no CVSS, Apache Software Foundation org.apache.xmlgraphics:fop-core)
- [CVE-2026-44929](https://cve.now/CVE-2026-44929.md): SSRF Vulnerability in Apache Batik (no CVSS, Apache Software Foundation org.apache.xmlgraphics:batik-util)
- [CVE-2026-85632](https://cve.now/CVE-2026-85632.md): Unauthenticated Payment Status Manipulation in Sipay Electronic Money's WordPress (WooCommerce) (CVSS 9.1, Sipay Electronic Money and Payment Services WooCommerce Vir…)
- [CVE-2026-123040](https://cve.now/CVE-2026-123040.md): An attacker who gains the ability to execute arbitrary code on a system with TrueConf Server (Linux) versions from 4.7.2 up to, but not… (CVSS 8.5, TrueConf Server)
- [CVE-2026-125838](https://cve.now/CVE-2026-125838.md): WordPress Quality theme \<= 3.3 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8, webriti Quality)
- [CVE-2026-125839](https://cve.now/CVE-2026-125839.md): WordPress ElitePress theme \<= 3.2.1 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8, webriti ElitePress)
- [CVE-2026-125840](https://cve.now/CVE-2026-125840.md): WordPress Rambo theme \<= 3.0 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8, webriti Rambo)
- [CVE-2026-125841](https://cve.now/CVE-2026-125841.md): WordPress Heroic theme \<= 1.4.2 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8, webriti Heroic)
- [CVE-2026-125842](https://cve.now/CVE-2026-125842.md): WordPress Wallstreet Agency theme \<= 1.3.4 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8, webriti Wallstreet Agency)
- [CVE-2026-0470](https://cve.now/CVE-2026-0470.md): Null pointer dereference in AMD Embedded SPI Flash driver could allow a local user to potentially cause a loss of availability. (CVSS 6.8, AMD EPYC™ Embedded 3000 Series Processors · AMD Ryzen™ E… +3)
- [CVE-2026-125843](https://cve.now/CVE-2026-125843.md): WordPress Spasalon theme \<= 3.0 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8, webriti Spasalon)
- [CVE-2026-125844](https://cve.now/CVE-2026-125844.md): WordPress vice theme \<= 1.4 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8, webriti vice)
- [CVE-2026-125845](https://cve.now/CVE-2026-125845.md): WordPress vdequator theme \<= 1.2.7 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8, webriti vdequator)
- [CVE-2026-125846](https://cve.now/CVE-2026-125846.md): WordPress Mazino theme \<= 1.1 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8, webriti Mazino)
- [CVE-2026-49236](https://cve.now/CVE-2026-49236.md): Apache XML Graphics Batik: SVG color-profile xml:base bypasses Batik external resource same-origin checks (no CVSS, Apache Software Foundation org.apache.xmlgraphics:batik-bri…)
- [CVE-2026-125847](https://cve.now/CVE-2026-125847.md): WordPress vdperanto theme \<= 2.2 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8, webriti vdperanto)
- [CVE-2026-125848](https://cve.now/CVE-2026-125848.md): WordPress Leo theme \<= 1.7.4 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8, webriti Leo)
- [CVE-2026-125849](https://cve.now/CVE-2026-125849.md): WordPress Shk Corporate theme \<= 2.4.3 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8, webriti Shk Corporate)
- [CVE-2026-48479](https://cve.now/CVE-2026-48479.md): Use of uninitialized or invalid state in AMD Graphics Driver could allow a local attacker to write out of bounds, potentially resulting in… (CVSS 6.9, AMD Ryzen™ Embedded R1000 Series Processors · AMD Ryzen™… +2)
- [CVE-2026-40853](https://cve.now/CVE-2026-40853.md): Apache XML Graphics Batik: Cross-Site Scripting via Unencoded Font Metadata in Apache Batik SVGFont (no CVSS, Apache Software Foundation org.apache.xmlgraphics:batik-svg…)
- [CVE-2026-125850](https://cve.now/CVE-2026-125850.md): WordPress Appointment Dark theme \<= 1.3.4 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8, webriti Appointment Dark)
- [CVE-2026-125046](https://cve.now/CVE-2026-125046.md): WordPress Create plugin \<= 3.1.1 - Broken Access Control vulnerability (CVSS 5.3, John-Michael L'Allier Create)
- [CVE-2026-125708](https://cve.now/CVE-2026-125708.md): WordPress Element Pack Elementor Addons plugin \<= 10.0.4 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, BdThemes Element Pack Elementor Addons)
- [CVE-2026-125746](https://cve.now/CVE-2026-125746.md): WordPress Back In Stock Notifier for WooCommerce plugin \<= 7.5.2 - Content Injection vulnerability (CVSS 5.3, ProPluginsLab Back In Stock Notifier for WooCommerce)
- [CVE-2026-125454](https://cve.now/CVE-2026-125454.md): WordPress Passster plugin \<= 4.3.21 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, WP Chill Passster)
- [CVE-2026-125767](https://cve.now/CVE-2026-125767.md): WordPress Hubbub Lite plugin \<= 1.36.3.1 - Sensitive Data Exposure vulnerability (CVSS 5.3, NerdPress Hubbub Lite)
- [CVE-2026-125766](https://cve.now/CVE-2026-125766.md): WordPress WPZOOM Social Feed Widget & Block plugin \<= 2.4.1 - Sensitive Data Exposure vulnerability (CVSS 5.3, WPZOOM Social Feed Widget & Block)
- [CVE-2026-123374](https://cve.now/CVE-2026-123374.md): Apache Roller: Deserialization of untrusted data in weblog update ping responses (no CVSS, Apache Software Foundation Apache Roller)
- [CVE-2026-123480](https://cve.now/CVE-2026-123480.md): WordPress Display Eventbrite Events plugin \<= 6.9.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Fullworks Plugins Display Eventbrite Events)
- [CVE-2026-122300](https://cve.now/CVE-2026-122300.md): Apache Roller: Limited weblog members can remove or change published entries (no CVSS, Apache Software Foundation Apache Roller)
- [CVE-2026-125448](https://cve.now/CVE-2026-125448.md): WordPress Kali Forms plugin \<= 2.4.31 - Broken Access Control vulnerability (CVSS 5.3, Kaliforms Kali Forms)
- [CVE-2026-118414](https://cve.now/CVE-2026-118414.md): Apache Roller: Stored cross-site scripting through the weblog description (CVSS 5.4, Apache Software Foundation Apache Roller)
- [CVE-2026-118413](https://cve.now/CVE-2026-118413.md): Apache Roller: Stored cross-site scripting through imported blogroll links (CVSS 5.4, Apache Software Foundation Apache Roller)
- [CVE-2026-123481](https://cve.now/CVE-2026-123481.md): WordPress The Ultimate WordPress Toolkit – WP Extended plugin \<= 3.4.2 - Broken Access Control vulnerability (CVSS 4.3, The Ultimate WordPress Toolkit – WP Extended)
- [CVE-2026-118412](https://cve.now/CVE-2026-118412.md): Apache Roller: Disabled accounts can sign in through OpenID (CVSS 3.1, Apache Software Foundation Apache Roller)
- [CVE-2026-125763](https://cve.now/CVE-2026-125763.md): WordPress SureForms plugin \<= 2.13.0 - Broken Access Control vulnerability (CVSS 5.3, Brainstorm Force SureForms)
- [CVE-2026-118411](https://cve.now/CVE-2026-118411.md): Apache Roller: Cross-site request forgery through GET requests to administrative actions (CVSS 8.8, Apache Software Foundation Apache Roller)
- [CVE-2026-125743](https://cve.now/CVE-2026-125743.md): WordPress Elementor Addon Elements plugin \<= 1.5 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, WPVibes Elementor Addon Elements)
- [CVE-2026-118410](https://cve.now/CVE-2026-118410.md): Apache Roller: Unpublished entries remain readable through search after AtomPub unpublish (CVSS 3.7, Apache Software Foundation Apache Roller)
- [CVE-2026-118409](https://cve.now/CVE-2026-118409.md): Apache Roller: Commenter email addresses recoverable through public search (CVSS 5.3, Apache Software Foundation Apache Roller)
- [CVE-2026-125436](https://cve.now/CVE-2026-125436.md): WordPress The Post Grid plugin \<= 7.9.9 - Broken Access Control vulnerability (CVSS 4.3, Mamunur Rashid The Post Grid)
- [CVE-2026-118408](https://cve.now/CVE-2026-118408.md): Apache Roller: Unpublished entries of other weblogs readable through preview (CVSS 3.1, Apache Software Foundation Apache Roller)
- [CVE-2026-111824](https://cve.now/CVE-2026-111824.md): Apache Roller: Stored cross-site scripting through custom-theme resource URLs (no CVSS, Apache Software Foundation Apache Roller)
- [CVE-2026-125433](https://cve.now/CVE-2026-125433.md): WordPress Futurio Extra plugin \<= 2.0.25 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, FuturioWP Futurio Extra)
- [CVE-2026-108338](https://cve.now/CVE-2026-108338.md): Apache Roller: Stored cross-site scripting through AtomPub entry tags (no CVSS, Apache Software Foundation Apache Roller)
- [CVE-2026-105154](https://cve.now/CVE-2026-105154.md): Apache Roller: Cross-site request forgery in Planet administration lets an attacker make the server fetch arbitrary URLs (CVSS 6.1, Apache Software Foundation Apache Roller)
- [CVE-2026-124416](https://cve.now/CVE-2026-124416.md): WordPress WP Job Portal plugin \<= 2.7.2 - Broken Access Control vulnerability (CVSS 4.3, Ahmad WP Job Portal)
- [CVE-2026-105153](https://cve.now/CVE-2026-105153.md): Apache Roller: XML external entity processing in AtomPub entry parsing (CVSS 7.7, Apache Software Foundation Apache Roller)
- [CVE-2026-125778](https://cve.now/CVE-2026-125778.md): WordPress myCred plugin \<= 4.0.2 - Content Injection vulnerability (CVSS 4.3, myCred)
- [CVE-2026-105152](https://cve.now/CVE-2026-105152.md): Apache Roller: Weblog template access to wrapped objects exposes another user's password hash (CVSS 4.3, Apache Software Foundation Apache Roller)
- [CVE-2026-124263](https://cve.now/CVE-2026-124263.md): WordPress Locatoraid Store Locator plugin \<= 3.9.75 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 5.4, plainware Locatoraid Store Locator)
- [CVE-2026-118405](https://cve.now/CVE-2026-118405.md): Apache Roller: Exposure of other users' email addresses through the user search (CVSS 4.3, Apache Software Foundation Apache Roller)
- [CVE-2026-125431](https://cve.now/CVE-2026-125431.md): WordPress Food Menu – Restaurant Menu & Online Ordering for WooCommerce plugin \<= 6.0.7 - Broken Access Control vulnerability (CVSS 5.3, Mamunur Rashid Food Menu – Restaurant Menu & Online Orderin…)
- [CVE-2026-124261](https://cve.now/CVE-2026-124261.md): WordPress Taxi Booking Manager for WooCommerce plugin \<= 2.1.7 - Broken Access Control vulnerability (CVSS 5.3, Magepeople Taxi Booking Manager for WooCommerce)
- [CVE-2026-125776](https://cve.now/CVE-2026-125776.md): WordPress Profile Builder plugin \<= 4.0.6 - Broken Access Control vulnerability (CVSS 5.3, Cozmoslabs Profile Builder)
- [CVE-2026-124496](https://cve.now/CVE-2026-124496.md): Apache Storm: DRPC HTTP doAsUser bypasses the impersonation authorizer (low (no CVSS), Apache Software Foundation org.apache.storm:storm-server)
- [CVE-2026-125450](https://cve.now/CVE-2026-125450.md): WordPress SureRank plugin \<= 1.10.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Brainstorm Force SureRank)
- [CVE-2026-125762](https://cve.now/CVE-2026-125762.md): WordPress Premium Addons for Elementor plugin \<= 4.11.116 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, LeapWorx Premium Addons for Elementor)
- [CVE-2026-124495](https://cve.now/CVE-2026-124495.md): Apache Storm: Logviewer follows worker symlinks across topology ACLs (low (no CVSS), Apache Software Foundation org.apache.storm:storm-webapp)
- [CVE-2026-126537](https://cve.now/CVE-2026-126537.md): Ninja Forms - File Uploads \<= 3.3.36 - Unauthenticated Arbitrary File Deletion via 'files\[\].data.file\_path' Parameter via… (CVSS 9.1, SaturdayDrive Ninja Forms - File Uploads)
- [CVE-2026-125045](https://cve.now/CVE-2026-125045.md): WordPress Create plugin \<= 3.1.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, John-Michael L'Allier Create)
- [CVE-2026-94125](https://cve.now/CVE-2026-94125.md): Apache Storm: Supervisor page discloses worker placement of other users' topologies (low (no CVSS), Apache Software Foundation org.apache.storm:storm-server)
- [CVE-2026-124745](https://cve.now/CVE-2026-124745.md): Busybox: tar deferred hardlink target resolved through a deferred symlink escapes the extraction directory (CVSS 6.3, Red Hat Enterprise Linux · Red Hat Hardened Images)
- [CVE-2026-124744](https://cve.now/CVE-2026-124744.md): Busybox: cpio hardlink target not sanitized under feature\_path\_traversal\_protection (CVSS 6.3, Red Hat Enterprise Linux · Red Hat Hardened Images)
- [CVE-2026-126663](https://cve.now/CVE-2026-126663.md): Contao 4.0.0 before 5.3.54, 5.4.0 before 5.7.17, and 6.0.0 before 6.0.6 Path Traversal via Image Insert Tag (CVSS 5.3, Contao)
- [CVE-2026-126662](https://cve.now/CVE-2026-126662.md): Contao 4.0.0 before 5.3.54, 5.4.0 before 5.7.17, and 6.0.0 before 6.0.6 Filemount Bypass via Edit-Multiple (CVSS 7.1, Contao)
- [CVE-2026-126659](https://cve.now/CVE-2026-126659.md): BlueprintUE Self-Hosted Edition 1.0.0 before 4.3.5 Storage Exhaustion via Anonymous Blueprints (CVSS 8.7, blueprintue-self-hosted-edition)
- [CVE-2026-126658](https://cve.now/CVE-2026-126658.md): ByteStash 1.5.10 before 1.6.2 Insufficient Session Expiration via API Keys (CVSS 5.3, jordan-dalby ByteStash)
- [CVE-2026-122096](https://cve.now/CVE-2026-122096.md): Apache DataSketches Java: Uncontrolled resource consumption when deserializing crafted sketch images (low (no CVSS), Apache Software Foundation org.apache.datasketches:datasket…)
- [CVE-2026-112201](https://cve.now/CVE-2026-112201.md): Keycloak-services: keycloak-services: login-failure upsert trusts mysql/mariadb affected-row count (CVSS 4.8, keycloak-services · Red Hat Build of Keycloak +1)
- [CVE-2026-125446](https://cve.now/CVE-2026-125446.md): WordPress Edwiser Bridge plugin \<= 4.3.4 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8, WisdmLabs Edwiser Bridge)
- [CVE-2026-125445](https://cve.now/CVE-2026-125445.md): WordPress VOD Infomaniak plugin \<= 1.5.16 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, Infomaniak Network VOD Infomaniak)
- [CVE-2026-125782](https://cve.now/CVE-2026-125782.md): WordPress PowerPress Podcasting plugin \<= 11.18.2 - Broken Access Control vulnerability (CVSS 4.3, Blubrry Podcasting PowerPress Podcasting)
- [CVE-2026-125435](https://cve.now/CVE-2026-125435.md): WordPress PowerPack Addons for Elementor plugin \<= 3.1.3 - Sensitive Data Exposure vulnerability (CVSS 5.3, IdeaBox Creations PowerPack Addons for Elementor)
- [CVE-2026-124411](https://cve.now/CVE-2026-124411.md): WordPress SureCart plugin \<= 4.12.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Brainstorm Force SureCart)
- [CVE-2026-124417](https://cve.now/CVE-2026-124417.md): WordPress WP Job Portal plugin \<= 2.7.2 - Broken Access Control vulnerability (CVSS 4.3, Ahmad WP Job Portal)
- [CVE-2026-124269](https://cve.now/CVE-2026-124269.md): WordPress Happy Addons for Elementor plugin \<= 3.51.0 - Broken Access Control vulnerability (CVSS 4.3, weDevs Happy Addons for Elementor)
- [CVE-2026-124262](https://cve.now/CVE-2026-124262.md): WordPress Ad Inserter plugin \<= 2.8.19 - Content Injection vulnerability (CVSS 5.3, Igor Funa Ad Inserter)
- [CVE-2026-124421](https://cve.now/CVE-2026-124421.md): WordPress ZoloBlocks plugin \<= 2.8.2 - Broken Access Control vulnerability (CVSS 5.3, BdThemes ZoloBlocks)
- [CVE-2026-124255](https://cve.now/CVE-2026-124255.md): WordPress Events Made Easy plugin \<= 3.3.5 - Content Injection vulnerability (CVSS 5.3, Franky Events Made Easy)
- [CVE-2026-124753](https://cve.now/CVE-2026-124753.md): WordPress WP Job Portal plugin \<= 2.7.2 - Broken Access Control vulnerability (CVSS 4.3, Ahmad WP Job Portal)
- [CVE-2026-125680](https://cve.now/CVE-2026-125680.md): WordPress Bold Page Builder plugin \<= 5.9.11 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Bold Themes Bold Page Builder)
- [CVE-2026-125437](https://cve.now/CVE-2026-125437.md): WordPress Simply Schedule Appointments plugin \<= 1.6.13.0 - Broken Access Control vulnerability (CVSS 5.3, NSquared Simply Schedule Appointments)
- [CVE-2026-121028](https://cve.now/CVE-2026-121028.md): WordPress Strong Testimonials plugin \<= 3.3.17 - Content Injection vulnerability (CVSS 5.3, WP Chill Strong Testimonials)
- [CVE-2026-121574](https://cve.now/CVE-2026-121574.md): WordPress Passster plugin \<= 4.3.20 - Broken Access Control vulnerability (CVSS 5.3, WP Chill Passster)
- [CVE-2026-125761](https://cve.now/CVE-2026-125761.md): WordPress YITH WooCommerce Ajax Search plugin \<= 2.30.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, YITH WooCommerce Ajax Search)
- [CVE-2026-121770](https://cve.now/CVE-2026-121770.md): WordPress VISeek plugin \<= 1.0.5 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 5.4, VillaTheme VISeek)
- [CVE-2026-121014](https://cve.now/CVE-2026-121014.md): WordPress WP Job Portal plugin \<= 2.7.2 - Broken Access Control vulnerability (CVSS 5.3, Ahmad WP Job Portal)
- [CVE-2026-124408](https://cve.now/CVE-2026-124408.md): WordPress WPCafe plugin \<= 3.0.22 - Broken Access Control vulnerability (CVSS 5.4, Arraytics WPCafe)
- [CVE-2026-123473](https://cve.now/CVE-2026-123473.md): WordPress Happy Addons for Elementor plugin \<= 3.51.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, weDevs Happy Addons for Elementor)
- [CVE-2026-121773](https://cve.now/CVE-2026-121773.md): WordPress GenerateBlocks plugin \<= 2.5.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, GeneratePress GenerateBlocks)
- [CVE-2026-124752](https://cve.now/CVE-2026-124752.md): WordPress Element Pack Elementor Addons plugin \<= 10.0.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, BdThemes Element Pack Elementor Addons)
- [CVE-2026-125438](https://cve.now/CVE-2026-125438.md): WordPress RepairBuddy plugin \<= 4.1235 - Broken Access Control vulnerability (CVSS 5.3, Webful Creations RepairBuddy)
- [CVE-2026-125434](https://cve.now/CVE-2026-125434.md): WordPress RepairBuddy plugin \<= 4.1235 - Broken Access Control vulnerability (CVSS 5.4, Webful Creations RepairBuddy)
- [CVE-2026-125777](https://cve.now/CVE-2026-125777.md): WordPress Profile Builder plugin \<= 4.0.6 - Sensitive Data Exposure vulnerability (CVSS 5.3, Cozmoslabs Profile Builder)
- [CVE-2026-125439](https://cve.now/CVE-2026-125439.md): WordPress Kit (formerly ConvertKit) plugin \<= 3.5.0 - Broken Access Control vulnerability (CVSS 5.3, Kit)
- [CVE-2026-124413](https://cve.now/CVE-2026-124413.md): WordPress WP User Manager plugin \<= 2.10.4 - Broken Access Control vulnerability (CVSS 5.3, WP User Manager)
- [CVE-2026-125455](https://cve.now/CVE-2026-125455.md): WordPress Bold Page Builder plugin \<= 5.9.11 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Bold Themes Bold Page Builder)
- [CVE-2026-125451](https://cve.now/CVE-2026-125451.md): WordPress B Blocks plugin \<= 2.1.15 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, bPlugins B Blocks)
- [CVE-2026-115600](https://cve.now/CVE-2026-115600.md): WordPress Restrict User Access – Membership plugin with Force plugin \<= 2.8.3 - Broken Access Control vulnerability (CVSS 5.3, DEV Institute Restrict User Access – Membership Plugin with…)
- [CVE-2026-125784](https://cve.now/CVE-2026-125784.md): WordPress RestroPress plugin \<= 3.4.11 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8, Magnigenie RestroPress)
- [CVE-2026-122671](https://cve.now/CVE-2026-122671.md): WordPress e2pdf plugin \<= 1.32.65 - Broken Access Control vulnerability (CVSS 6.5, E2Pdf.com e2pdf)
- [CVE-2026-125781](https://cve.now/CVE-2026-125781.md): WordPress Event post plugin \<= 6.1.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, NOUS Ouvert Utile et Simple Event post)
- [CVE-2026-125444](https://cve.now/CVE-2026-125444.md): WordPress King Addons for Elementor plugin \<= 51.1.87 - Broken Access Control vulnerability (CVSS 5.3, King Addons for Elementor)
- [CVE-2026-124271](https://cve.now/CVE-2026-124271.md): WordPress Restrict User Access – Membership plugin with Force plugin \<= 2.8.3 - Broken Access Control vulnerability (CVSS 5.3, DEV Institute Restrict User Access – Membership Plugin with…)
- [CVE-2026-119097](https://cve.now/CVE-2026-119097.md): Author Image \<= 4.9.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display\_name' Parameter (CVSS 6.4, denis-de-bernardy Author Image)
- [CVE-2026-119615](https://cve.now/CVE-2026-119615.md): Reset Database \<= 1.1.3 - Authenticated (Subscriber+) Privilege Escalation to Missing Capability and Nonce Check in process\_reset() (CVSS 8.8, maltesesolutions Reset Database)
- [CVE-2026-103883](https://cve.now/CVE-2026-103883.md): 6Storage Rentals \<= 2.31.0 - Authenticated (Subscriber+) Authentication Bypass to Administrator Account Takeover via… (CVSS 8.8, sixstorage 6Storage Rentals)
- [CVE-2026-126627](https://cve.now/CVE-2026-126627.md): Apache XML Graphics FOP: Temporary files on Unix-like systems are readable by other local users (low (no CVSS), Apache Software Foundation org.apache.xmlgraphics:fop-core)
- [CVE-2026-124743](https://cve.now/CVE-2026-124743.md): Busybox: divide-by-zero and heap over-read in the volume\_id hfs+ prober (CVSS 5.5, Red Hat Enterprise Linux · Red Hat Hardened Images)
- [CVE-2026-124742](https://cve.now/CVE-2026-124742.md): Busybox: divide-by-zero in the volume\_id fat prober via a zero sectors\_per\_cluster value (CVSS 5.5, Red Hat Enterprise Linux · Red Hat Hardened Images)
- [CVE-2026-124740](https://cve.now/CVE-2026-124740.md): Busybox: use-after-free of requested\_ipv6 in udhcpc6 (CVSS 4.3, Red Hat Enterprise Linux · Red Hat Hardened Images)
- [CVE-2026-124738](https://cve.now/CVE-2026-124738.md): Busybox: httpd password rule bypass for pre-compressed .gz files via accept-encoding: gzip (CVSS 5.3, Red Hat Enterprise Linux · Red Hat Hardened Images)
- [CVE-2026-78287](https://cve.now/CVE-2026-78287.md): WordPress STAGGS plugin \<= 3.3.0 - Remote Code Execution (RCE) vulnerability (CVSS 10.0, STAGGS)
- [CVE-2026-124253](https://cve.now/CVE-2026-124253.md): WordPress Calculated Fields Form plugin \<= 5.5.2.8 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, codepeople Calculated Fields Form)
- [CVE-2026-123478](https://cve.now/CVE-2026-123478.md): WordPress AI Engine plugin \<= 3.9.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Meow Apps AI Engine)
- [CVE-2026-118965](https://cve.now/CVE-2026-118965.md): Path traversal in host label synchronization allows code execution on the central site from a remote site (CVSS 9.4, Checkmk)
- [CVE-2026-111792](https://cve.now/CVE-2026-111792.md): Apache XML Graphics Batik: Denial of Service via SVG Element Reference Resolution (no CVSS, Apache Software Foundation org.apache.xmlgraphics:batik-bri…)
- [CVE-2026-120495](https://cve.now/CVE-2026-120495.md): Arbitrary file write and code execution via crafted Synthetic Monitoring agent data (CVSS 9.4, Checkmk)
- [CVE-2026-121374](https://cve.now/CVE-2026-121374.md): Arbitrary file write and code execution via excluded node roles in Kubernetes special agent (CVSS 9.4, Checkmk)
- [CVE-2026-124741](https://cve.now/CVE-2026-124741.md): Busybox: stack buffer overflow in udhcpc6 send\_d6\_renew() and send\_d6\_release() (CVSS 7.6, Red Hat Enterprise Linux · Red Hat Hardened Images)
- [CVE-2026-124739](https://cve.now/CVE-2026-124739.md): Busybox: httpd stack buffer overflow via an "i:" rule in a subdirectory httpd.conf (CVSS 7.5, Red Hat Enterprise Linux · Red Hat Hardened Images)
- [CVE-2026-90993](https://cve.now/CVE-2026-90993.md): Apache XML Graphics Batik: Harden validation in SAXDocumentFactory (no CVSS, Apache Software Foundation org.apache.xmlgraphics:batik-dom)
- [CVE-2026-124256](https://cve.now/CVE-2026-124256.md): WordPress Delivery & Pickup Date Time for WooCommerce plugin \<= 1.3.90 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, CodeRockz Delivery &amp; Pickup Date Time for WooCommerce)
- [CVE-2026-124257](https://cve.now/CVE-2026-124257.md): WordPress BP Better Messages plugin \<= 3.2.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, wordplus BP Better Messages)
- [CVE-2026-124250](https://cve.now/CVE-2026-124250.md): WordPress GeoDirectory plugin \<= 2.8.202 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, AyeCode GeoDirectory)
- [CVE-2026-112174](https://cve.now/CVE-2026-112174.md): Privilege escalation in Enter’s Iperius Backup (CVSS 9.3, Enter Iperius Backup)
- [CVE-2026-124737](https://cve.now/CVE-2026-124737.md): Busybox: heap buffer overflow in the tftp client on fallback to the default block size (CVSS 7.5, Red Hat Enterprise Linux · Red Hat Hardened Images)
- [CVE-2026-126626](https://cve.now/CVE-2026-126626.md): Overly Restrictive Account Lockout Mechanism in hMailServer (CVSS 5.3, Progressive Robot hMailServer)
- [CVE-2026-126621](https://cve.now/CVE-2026-126621.md): Improper Certificate Validation in hMailServer (CVSS 7.5, Progressive Robot hMailServer)
- [CVE-2026-126619](https://cve.now/CVE-2026-126619.md): Misinterpretation of Input in hMailServer (CVSS 4.8, Progressive Robot hMailServer)
- [CVE-2026-126617](https://cve.now/CVE-2026-126617.md): Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in hMailServer (CVSS 8.8, Progressive Robot hMailServer)
- [CVE-2026-126618](https://cve.now/CVE-2026-126618.md): Improper Restriction of Excessive Authentication Attempts in hMailServer (CVSS 5.3, Progressive Robot hMailServer)
- [CVE-2026-126616](https://cve.now/CVE-2026-126616.md): Improper Restriction of Excessive Authentication Attempts in hMailServer (CVSS 5.3, Progressive Robot hMailServer)
- [CVE-2026-126615](https://cve.now/CVE-2026-126615.md): Authentication Bypass by Alternate Name in hMailServer (CVSS 5.3, Progressive Robot hMailServer)
- [CVE-2026-126614](https://cve.now/CVE-2026-126614.md): Improper Restriction of Excessive Authentication Attempts in hMailServer (CVSS 5.3, Progressive Robot hMailServer)
- [CVE-2026-126625](https://cve.now/CVE-2026-126625.md): Incorrect Default Permissions in hMailServer (CVSS 6.7, Progressive Robot hMailServer)
- [CVE-2026-126624](https://cve.now/CVE-2026-126624.md): Unverified Ownership in hMailServer (CVSS 7.3, Progressive Robot hMailServer)
- [CVE-2026-126623](https://cve.now/CVE-2026-126623.md): Inefficient Algorithmic Complexity in hMailServer (CVSS 7.5, Progressive Robot hMailServer)
- [CVE-2026-126622](https://cve.now/CVE-2026-126622.md): Incorrect Default Permissions in hMailServer (CVSS 7.3, Progressive Robot hMailServer)
- [CVE-2026-126613](https://cve.now/CVE-2026-126613.md): Allocation of Resources Without Limits or Throttling in hMailServer (CVSS 7.5, Progressive Robot hMailServer)
- [CVE-2026-126612](https://cve.now/CVE-2026-126612.md): Improper Link Resolution Before File Access ('Link Following') in hMailServer (CVSS 7.8, Progressive Robot hMailServer)
- [CVE-2026-126610](https://cve.now/CVE-2026-126610.md): Improper Certificate Validation in hMailServer (CVSS 7.4, Progressive Robot hMailServer)
- [CVE-2026-126611](https://cve.now/CVE-2026-126611.md): Improper Certificate Validation in hMailServer (CVSS 7.0, Progressive Robot hMailServer)
- [CVE-2026-126607](https://cve.now/CVE-2026-126607.md): Uncontrolled Search Path Element in hMailServer (CVSS 7.8, Progressive Robot hMailServer)
- [CVE-2026-126609](https://cve.now/CVE-2026-126609.md): Improper Certificate Validation in hMailServer (CVSS 7.5, Progressive Robot hMailServer)
- [CVE-2026-18769](https://cve.now/CVE-2026-18769.md): Insufficient IOCTL access control allows local relocation of arbitrary physical memory (CVSS 8.5, Beckhoff Automation TcRouter.sys for Windows on x64 · Be… +1)
- [CVE-2026-18768](https://cve.now/CVE-2026-18768.md): Insufficient IOCTL access control allows local access to arbitrary physical memory (CVSS 8.5, Beckhoff Automation TcRouter.sys for Windows on x64 · Be… +1)
- [CVE-2026-18767](https://cve.now/CVE-2026-18767.md): Insufficient IOCTL access control allows local access to I/O ports (CVSS 8.5, Beckhoff Automation TcRouter.sys for Windows on x64 · Be… +1)
- [CVE-2026-116468](https://cve.now/CVE-2026-116468.md): Keycloak-services: keycloak-services: delegated admin escalates to realm-admin via group move (CVSS 6.6, Red Hat Build of Keycloak · Red Hat Single Sign-On)
- [CVE-2025-59847](https://cve.now/CVE-2025-59847.md): HCL Domino Leap is vulnerable to Stored XSS through malicious application titles in Manage page dialogs, allowing an attacker to take over… (CVSS 6.8, HCL Software HCL Domino Leap)
- [CVE-2025-59848](https://cve.now/CVE-2025-59848.md): HCL Leap is vulnerable to Stored XSS through malicious application titles in the Manage page dialogs, allowing an attacker to take over a… (CVSS 6.8, HCL Software HCL Leap)
- [CVE-2026-12062](https://cve.now/CVE-2026-12062.md): Authenticated SQL Injection (CVSS 8.8, Zohocorp ADAudit Plus)
- [CVE-2026-92408](https://cve.now/CVE-2026-92408.md): WPS Bookings for WooCommerce \< 3.13.1 - Unauthenticated Price Manipulation via booking\_price (CVSS 5.3, WPS Bookings for WooCommerce)
- [CVE-2026-123668](https://cve.now/CVE-2026-123668.md): GetPaid 2.8.63 - 2.8.64 - Unauthenticated Payment Bypass via Fractional Item Quantity (CVSS 5.3, GetPaid)
- [CVE-2026-123659](https://cve.now/CVE-2026-123659.md): ProfilePress \< 4.17.6 - Unauthenticated Member Directory Role Restriction Bypass and User Meta Disclosure (CVSS 5.3, ProfilePress)
- [CVE-2026-119302](https://cve.now/CVE-2026-119302.md): NotificationX \< 3.3.7 - Unauthenticated Non-Public Content Disclosure and Arbitrary Shortcode Execution via Notification Preview (CVSS 6.5, NotificationX)
- [CVE-2026-119171](https://cve.now/CVE-2026-119171.md): Advanced Product Fields (Product Addons) for WooCommerce 1.6.22 - 1.7.3 - Unauthenticated Paid Option Surcharge Bypass via Add-to-Cart… (CVSS 5.3, Advanced Product Fields (Product Addons) for WooCommerce)
- [CVE-2026-76981](https://cve.now/CVE-2026-76981.md): Authenticated Second-Order SQL Injection (CVSS 8.8, Zohocorp ADAudit Plus)
- [CVE-2026-105948](https://cve.now/CVE-2026-105948.md): In affected versions of Octopus Server, incorrect validation of permissions assigned to a user that would allow them to edit their own… (CVSS 7.7, Octopus Deploy Octopus Server)
- [CVE-2026-111190](https://cve.now/CVE-2026-111190.md): ARForms \<= 7.2.4 - Unauthenticated Arbitrary File Upload to Remote Code Execution via X-FILENAME Header (CVSS 8.1, ARforms)
- [CVE-2026-12427](https://cve.now/CVE-2026-12427.md): ARforms \<= 7.2.4 - Unauthenticated Stored Cross-Site Scripting via 'description' Parameter (CVSS 7.2, ARforms)
- [CVE-2026-12424](https://cve.now/CVE-2026-12424.md): ARforms \<= 7.2.4 - Unauthenticated Stored Cross-Site Scripting via Referer Header (CVSS 7.2, ARforms)
- [CVE-2026-15785](https://cve.now/CVE-2026-15785.md): Joinchat \<= 6.3.1 - Reflected Cross-Site Scripting via '{HREF}' Dynamic Variable (CVSS 6.1, creapuntome Joinchat – Enhanced “click to chat”)
- [CVE-2026-93487](https://cve.now/CVE-2026-93487.md): In affected versions of Octopus Server, incorrect validation of the permissions assigned to a user that would allow them to create project… (CVSS 7.1, Octopus Deploy Octopus Server)
- [CVE-2026-96414](https://cve.now/CVE-2026-96414.md): In affected versions of Octopus Server, insufficient integrity protection of authentication cookies, combined with incorrect validation of… (CVSS 8.7, Octopus Deploy Octopus Server)
- [CVE-2026-88813](https://cve.now/CVE-2026-88813.md): YITH WooCommerce Gift Cards \<= 4.39.0 - Unauthenticated Gift Card Balance Inflation via Discounted Purchase (CVSS 5.3, YITH WooCommerce Gift Cards)
- [CVE-2026-123705](https://cve.now/CVE-2026-123705.md): Security For WooCommerce \<= 1.0.16 - Unauthenticated Server Configuration Information Disclosure (CVSS 5.3, Security For WooCommerce)
- [CVE-2026-123704](https://cve.now/CVE-2026-123704.md): Security For WooCommerce \<= 1.0.16 - Unauthenticated Administrator Email Address Disclosure (CVSS 5.3, Security For WooCommerce)
- [CVE-2026-123703](https://cve.now/CVE-2026-123703.md): Security For WooCommerce \<= 1.0.16 - Unauthenticated Arbitrary User Logout via usfw\_user\_force\_logout (CVSS 5.3, Security For WooCommerce)
- [CVE-2026-123702](https://cve.now/CVE-2026-123702.md): Security For WooCommerce \<= 1.0.16 - Unauthenticated wp-config Keys and Salts Reset and Denial of Service (CVSS 6.5, Security For WooCommerce)
- [CVE-2026-123701](https://cve.now/CVE-2026-123701.md): Security For WooCommerce \<= 1.0.16 - Unauthenticated Plugin Settings Reset (CVSS 5.3, Security For WooCommerce)
- [CVE-2026-123700](https://cve.now/CVE-2026-123700.md): Security For WooCommerce \<= 1.0.16 - Unauthenticated Mass Comment Deletion (CVSS 7.5, Security For WooCommerce)
- [CVE-2026-123699](https://cve.now/CVE-2026-123699.md): Security For WooCommerce \<= 1.0.16 - Unauthenticated Forced Plugin, Theme and Core Updates (CVSS 4.8, Security For WooCommerce)
- [CVE-2026-123698](https://cve.now/CVE-2026-123698.md): Security For WooCommerce \<= 1.0.16 - Unauthenticated Plugin Settings Disclosure via REST API (CVSS 5.3, Security For WooCommerce)
- [CVE-2026-123697](https://cve.now/CVE-2026-123697.md): Security For WooCommerce \<= 1.0.16 - Unauthenticated Two-Factor Code and Secret Disclosure (CVSS 7.5, Security For WooCommerce)
- [CVE-2026-123696](https://cve.now/CVE-2026-123696.md): Security For WooCommerce \<= 1.0.16 - Unauthenticated Two-Factor Authentication Reset (CVSS 7.5, Security For WooCommerce)
- [CVE-2026-123695](https://cve.now/CVE-2026-123695.md): Security For WooCommerce \<= 1.0.16 - Unauthenticated Privilege Escalation via REST API Options Update and User Token Disclosure (CVSS 9.8, Security For WooCommerce)
- [CVE-2026-123667](https://cve.now/CVE-2026-123667.md): Photo Engine \< 6.6.2 - Author+ Stored XSS via Keyword Names (CVSS 6.4, Photo Engine)
- [CVE-2026-123666](https://cve.now/CVE-2026-123666.md): Photo Engine \< 6.6.2 - Author+ Media Deletion via Collection Deletion (CVSS 4.9, Photo Engine)
- [CVE-2026-123661](https://cve.now/CVE-2026-123661.md): ProfilePress 4.16.13 - 4.17.3 - Subscriber+ Inactive Membership Plan Subscription via Plan-Change Checkout (CVSS 4.3, ProfilePress)
- [CVE-2026-123657](https://cve.now/CVE-2026-123657.md): ProfilePress \< 4.17.6 - Unauthenticated Inactive Membership Plan Enrollment via Negative Plan ID (CVSS 5.3, ProfilePress)
- [CVE-2026-123656](https://cve.now/CVE-2026-123656.md): ProfilePress \< 4.17.6 - Unauthenticated Restricted Content Disclosure via REST API (no CVSS, ProfilePress)
- [CVE-2026-123134](https://cve.now/CVE-2026-123134.md): Smoove Abandoned Cart Trigger for WooCommerce 4.0.0 - 4.3.5 - Unauthenticated Stored XSS (CVSS 8.8, Smoove abandoned cart trigger for WooCommerce)
- [CVE-2026-122087](https://cve.now/CVE-2026-122087.md): Event Tickets \< 5.30.3.1 - Unauthenticated Private Event Attendee Disclosure via post\_status Filter Bypass in Attendees REST API (CVSS 3.7, Event Tickets and Registration)
- [CVE-2026-122061](https://cve.now/CVE-2026-122061.md): Event Tickets \< 5.30.3.1 - Unauthenticated Attendee Name Disclosure via Single Attendee REST Endpoint (CVSS 5.3, Event Tickets and Registration)
- [CVE-2026-121998](https://cve.now/CVE-2026-121998.md): iChart \< 2.2.4 - Subscriber+ Arbitrary Post Read, Update and Deletion via IDOR (CVSS 8.8, iChart)
- [CVE-2026-121873](https://cve.now/CVE-2026-121873.md): Redirection for Contact Form 7 2.6.0 - 3.2.15 - Unauthenticated Forged Personal Data Request Creation (CVSS 5.3, Redirection for Contact Form)
- [CVE-2026-121870](https://cve.now/CVE-2026-121870.md): Simpler Checkout \< 1.5.4 - Subscriber+ Privilege Escalation via Forged Auto-Login Token (CVSS 7.5, Simpler Checkout)
- [CVE-2026-121863](https://cve.now/CVE-2026-121863.md): Knowledge Building \< 0.7.3 - Reflected XSS via Comment Reply Response (CVSS 7.1, Knowledge Building)
- [CVE-2026-121862](https://cve.now/CVE-2026-121862.md): Knowledge Building \< 0.7.3 - Unauthenticated Stored XSS via knbu\_new\_reply AJAX Action (CVSS 8.8, Knowledge Building)
- [CVE-2026-121497](https://cve.now/CVE-2026-121497.md): Askany \< 2.2.0 - Unauthenticated Arbitrary File Upload (CVSS 9.8, AskAny)
- [CVE-2026-121472](https://cve.now/CVE-2026-121472.md): AutomatorWP \< 6.0.8 - Zoom/AWeber Integration Connection Hijack via CSRF (CVSS 5.0, AutomatorWP)
- [CVE-2026-119531](https://cve.now/CVE-2026-119531.md): Live Composer \< 2.1.24 - Contributor+ Stored XSS via Module Area Shortcode (CVSS 6.8, Live Composer)
- [CVE-2026-119529](https://cve.now/CVE-2026-119529.md): Gravity Forms \< 3.2.2 - Unauthenticated LFI via Chunked File Upload (CVSS 5.9, Gravity Forms)
- [CVE-2026-119303](https://cve.now/CVE-2026-119303.md): NotificationX \< 3.3.7 - Unauthenticated Settings Update and Email Sending via send-rating REST Route (CVSS 5.3, NotificationX)
- [CVE-2026-119035](https://cve.now/CVE-2026-119035.md): Schema & Structured Data for WP & AMP \< 1.70 - Contributor+ Stored XSS via JSON-LD Pretty Print (CVSS 6.4, Schema & Structured Data for WP & AMP)
- [CVE-2026-119034](https://cve.now/CVE-2026-119034.md): Schema & Structured Data for WP & AMP \< 1.70 - Unauthenticated Non-Public Comment Disclosure via Review Filter (CVSS 5.3, Schema & Structured Data for WP & AMP)
- [CVE-2026-119033](https://cve.now/CVE-2026-119033.md): Schema & Structured Data for WP & AMP \< 1.70 - Contributor+ Structured Data Modification of Other Users' Posts via IDOR (CVSS 2.2, Schema & Structured Data for WP & AMP)
- [CVE-2026-119032](https://cve.now/CVE-2026-119032.md): Schema & Structured Data for WP & AMP \< 1.70 - Authenticated Arbitrary Post Modification via Backup Import (CVSS 5.3, Schema & Structured Data for WP & AMP)
- [CVE-2026-118439](https://cve.now/CVE-2026-118439.md): Limit Login Attempts Reloaded \< 3.4.2 - Admin+ SSRF via App Setup Code (CVSS 4.1, Limit Login Attempts Security)
- [CVE-2026-118420](https://cve.now/CVE-2026-118420.md): WP Directory Kit \< 1.6.3 - Listing Admin+ SQL Injection via 'main\_field' Parameter (CVSS 6.8, WP Directory Kit)
- [CVE-2026-118418](https://cve.now/CVE-2026-118418.md): WP Directory Kit \< 1.6.3 - Unauthenticated User Data and Contact Message Disclosure (CVSS 5.3, WP Directory Kit)
- [CVE-2026-118241](https://cve.now/CVE-2026-118241.md): Smush \< 4.3.6 - Author+ Optimization and Restoration of Others' Attachments via IDOR (CVSS 2.7, Smush)
- [CVE-2026-118041](https://cve.now/CVE-2026-118041.md): Contest Gallery \< 34.0.3 - Author+ Arbitrary File Upload via Ecommerce Sale File Replacement (CVSS 8.8, Contest Gallery)
- [CVE-2026-117524](https://cve.now/CVE-2026-117524.md): Dynific Addons for Elementor 1.3 - Contributor+ Arbitrary Post Content Disclosure via dynific\_template Shortcode (CVSS 2.7, Dynific Addons for Elementor)
- [CVE-2026-117523](https://cve.now/CVE-2026-117523.md): Dynific Addons for Elementor \< 1.3.1 - Subscriber+ Module Settings Update via aep\_module AJAX Action (CVSS 4.3, Dynific Addons for Elementor)
- [CVE-2026-117522](https://cve.now/CVE-2026-117522.md): Dynific Addons for Elementor \< 1.3.1 - Author+ Stored XSS via Post Title in Post Image Widget (CVSS 6.8, Dynific Addons for Elementor)
- [CVE-2026-117521](https://cve.now/CVE-2026-117521.md): Dynific Addons for Elementor \< 1.3.1 - Author+ Stored XSS via Display Name in Post Author Widget (CVSS 6.8, Dynific Addons for Elementor)
- [CVE-2026-115735](https://cve.now/CVE-2026-115735.md): Somatic Framework \<= 1.8.14 - Subscriber+ Arbitrary File Deletion (CVSS 9.6, Somatic Framework)
- [CVE-2026-115734](https://cve.now/CVE-2026-115734.md): Pay With a Tweet \<= 1.0.5 - Subscriber+ Arbitrary File Deletion via Button Download Path (CVSS 9.6, Pay with a tweet)
- [CVE-2026-115733](https://cve.now/CVE-2026-115733.md): PrintAura WooCommerce API \<= 4.0.2 - Unauthenticated WooCommerce REST API Authentication Bypass (CVSS 9.1, Printaura-Woocommerce)
- [CVE-2026-111597](https://cve.now/CVE-2026-111597.md): Forminator Forms 1.58.0 - 1.58.3 - Unauthenticated Disclosure of Post-Payment Redirect URL and Thank-You Message via Unpaid Stripe… (CVSS 5.3, Forminator Forms)
- [CVE-2026-111579](https://cve.now/CVE-2026-111579.md): Forminator Forms 1.58.0 - 1.58.3 - Unauthenticated Privilege Escalation via Paid Registration Form When Stripe Gateway Unavailable (CVSS 8.1, Forminator Forms)
- [CVE-2026-110949](https://cve.now/CVE-2026-110949.md): Download Manager (Free & Pro) - Unauthenticated Missing Authorization via Password Validation (CVSS 3.7, Download Manager)
- [CVE-2026-110948](https://cve.now/CVE-2026-110948.md): Download Manager (Free & Pro) - Unauthenticated Protected File Download via Media Preview Download Key (CVSS 3.7, Download Manager)
- [CVE-2026-110016](https://cve.now/CVE-2026-110016.md): Data Tables Generator by Supsystic \< 1.15.8 - Unauthenticated Table Content Disclosure via IDOR (CVSS 5.3, Data Tables Generator by Supsystic)
- [CVE-2026-109873](https://cve.now/CVE-2026-109873.md): User Registration & Membership \< 5.3.2 - Unauthenticated Payment Before Login Bypass via Omitted Membership Field (CVSS 5.3, User Registration & Membership)
- [CVE-2026-109871](https://cve.now/CVE-2026-109871.md): User Registration & Membership \< 5.3.2 - Subscriber+ Payment Bypass via Membership Renewal (CVSS 4.3, User Registration & Membership)
- [CVE-2026-109870](https://cve.now/CVE-2026-109870.md): User Registration & Membership 5.2.8 - 5.3.1 - Unauthenticated Privilege Escalation via Coupon-Based Payment Bypass (CVSS 8.1, User Registration & Membership)
- [CVE-2026-106468](https://cve.now/CVE-2026-106468.md): Code Snippets \< 4.1.0 - Admin+ Network-Scoped Snippet Injection via Snippet Import (CVSS 3.8, Code Snippets)
- [CVE-2026-104718](https://cve.now/CVE-2026-104718.md): Elementor \< 4.3.6 - Contributor+ Stored XSS via Element ID (CVSS 6.8, Elementor Website Builder)
- [CVE-2025-15714](https://cve.now/CVE-2025-15714.md): Live Composer \< 2.1.24 - Admin+ Stored XSS via Button (CVSS 3.5, Live Composer)
- [CVE-2025-15713](https://cve.now/CVE-2025-15713.md): Live Composer \< 2.1.24 - Admin+ Stored XSS via Icon (CVSS 3.5, Live Composer)
- [CVE-2025-15712](https://cve.now/CVE-2025-15712.md): Live Composer \< 2.1.24 - Admin+ Stored XSS via Staff (CVSS 3.5, Live Composer)
- [CVE-2025-15711](https://cve.now/CVE-2025-15711.md): Live Composer \< 2.1.24 - Admin+ Stored XSS via Social (CVSS 3.5, Live Composer)
- [CVE-2026-116081](https://cve.now/CVE-2026-116081.md): Sleipnir Mobile for iPhone / iPad and Sleipnir Mobile for iPhone / iPad Black Edition provided by Fenrir Inc. (CVSS 4.2, Fenrir Sleipnir Mobile for iPhone / iPad)
- [CVE-2026-118368](https://cve.now/CVE-2026-118368.md): Akaunting 3.3.0 - Stored XSS through imported item names (CVSS 7.0, Akaunting)
- [CVE-2026-59191](https://cve.now/CVE-2026-59191.md): TwigView: FileLoader is vulnerable to arbitrary file read (CVSS 6.9, cakephp twig-view)
- [CVE-2026-59192](https://cve.now/CVE-2026-59192.md): TwigView: Deserialization of Untrusted Data (CVSS 6.9, cakephp twig-view)
- [CVE-2026-61810](https://cve.now/CVE-2026-61810.md): libspdm: SPDM (DSP0274) FINISH transcript under-specifies the new 1.4 OpaqueData fields (CVSS 6.0, DMTF libspdm)
- [CVE-2026-64686](https://cve.now/CVE-2026-64686.md): OpenSearch Dashboards: SSRF in fetchDataSourceMetaData — missing endpoint validation (CVSS 5.0, opensearch-project OpenSearch-Dashboards)
- [CVE-2026-64678](https://cve.now/CVE-2026-64678.md): Nitrite: Unfiltered Java Deserialization in Legacy v1 Database Migration Path (CVSS 9.8, nitrite-java)
- [CVE-2026-64682](https://cve.now/CVE-2026-64682.md): AstroBlocks: Admin session tokens can be forged due to a hard-coded fallback JWT secret and a mismatched environment variable name (CVSS 9.8, NauelG astro-blocks)
- [CVE-2026-64669](https://cve.now/CVE-2026-64669.md): pam\_usb: deny\_remote bypassed by compressed IPv6 addresses in pusb\_tmux\_has\_remote\_clients (CVSS 7.4, mcdope pam\_usb)
- [CVE-2026-64667](https://cve.now/CVE-2026-64667.md): pam\_usb: Heap out-of-bounds read in pusb\_get\_tty\_from\_display\_server cmdline scan (CVSS 4.4, mcdope pam\_usb)
- [CVE-2026-64666](https://cve.now/CVE-2026-64666.md): pam\_usb: getenv() in pusb\_local\_login bypasses XRDP deny via env-var unset (CVSS 7.1, mcdope pam\_usb)
- [CVE-2026-64668](https://cve.now/CVE-2026-64668.md): pam\_usb: deny\_remote bypassed by zone-indexed IPv6 addresses (fe80::1%eth0) in pusb\_tmux\_has\_remote\_clients (CVSS 7.4, mcdope pam\_usb)
- [CVE-2026-64670](https://cve.now/CVE-2026-64670.md): Stored XSS in @waline/client via the unsanitized markdown preview of a comment's raw body on edit (CVSS 9.3, walinejs waline)
- [CVE-2026-64671](https://cve.now/CVE-2026-64671.md): Stored XSS in the @waline/client UserList widget via an unescaped commenter link field (CVSS 7.2, walinejs waline)
- [CVE-2026-97054](https://cve.now/CVE-2026-97054.md): HTTP/1 server crash due to MaxBytesReader header race in net/http (no CVSS, Go standard library net/http · stdlib)
- [CVE-2026-97033](https://cve.now/CVE-2026-97033.md): Unexpected code execution via --sysroot, -target, -isysroot, -Wl,-syslibroot, and -x cgo flags in cmd/go (no CVSS, Go toolchain cmd/go · toolchain)
- [CVE-2026-97034](https://cve.now/CVE-2026-97034.md): Arbitrary command execution via GCC spec files in cgo linker search directories in cmd/go (no CVSS, Go toolchain cmd/go · toolchain)
- [CVE-2026-97035](https://cve.now/CVE-2026-97035.md): Unexpected code execution and arbitrary file write via Clang -gen- and GCC -gnat flags in cgo in cmd/go (no CVSS, Go toolchain cmd/go · toolchain)
- [CVE-2026-97036](https://cve.now/CVE-2026-97036.md): Arbitrary code execution during build on darwin via "-l to\_library" in cgo in cmd/go (no CVSS, Go toolchain cmd/go · toolchain)
- [CVE-2026-97037](https://cve.now/CVE-2026-97037.md): Linker script injection via split -Wl, flags and Darwin or symbol linker flags in cgo in cmd/go (no CVSS, Go toolchain cmd/go · toolchain)
- [CVE-2026-97038](https://cve.now/CVE-2026-97038.md): Arbitrary code execution via crafted .syso files and cgo linker input files in cmd/go (no CVSS, Go toolchain cmd/go · toolchain)
- [CVE-2026-97039](https://cve.now/CVE-2026-97039.md): Flag sanitization bypass via "#cgo pkg-config:" directives in cmd/go (no CVSS, Go toolchain cmd/go · toolchain)
- [CVE-2026-97040](https://cve.now/CVE-2026-97040.md): Cgo directive injection via .syso files disguised as Go object files in cmd/go and cmd/link (no CVSS, Go toolchain cmd/go · Go toolchain cmd/link +1)
- [CVE-2026-97041](https://cve.now/CVE-2026-97041.md): Host linker flag injection via //go:cgo\_ directives in cmd/compile and cmd/link (no CVSS, Go toolchain cmd/compile · Go toolchain cmd/link +1)
- [CVE-2026-97042](https://cve.now/CVE-2026-97042.md): Linker flag injection via cgo\_import\_dynamic and PE DLL names in cmd/cgo, cmd/compile, and cmd/link (no CVSS, Go toolchain cmd/cgo · Go toolchain cmd/compile +2)
- [CVE-2026-97043](https://cve.now/CVE-2026-97043.md): Unexpected code execution via escaped quotes in //go:cgo\_ldflag in cmd/go and cmd/compile (no CVSS, Go toolchain cmd/go · Go toolchain cmd/compile +1)
- [CVE-2026-116645](https://cve.now/CVE-2026-116645.md): LimeSurvey Community Edition 7.8.0 - SQL injection via Archive Attributes (CVSS 7.1, LimeSurvey Community Edition)
- [CVE-2026-63660](https://cve.now/CVE-2026-63660.md): node-fontnik: integer-overflow heap out-of-bounds write in RenderSDF (CVSS 8.1, mapbox node-fontnik)
- [CVE-2026-126571](https://cve.now/CVE-2026-126571.md): Padloc 4.0.0 before 4.3.1 Email MFA Code Brute Force via retrieveMFAToken (CVSS 6.3, padloc)
- [CVE-2026-126570](https://cve.now/CVE-2026-126570.md): Padloc 4.0.0 before 4.3.1 Prototype Pollution via SCIM PATCH setPath() (CVSS 7.0, padloc)
- [CVE-2026-126569](https://cve.now/CVE-2026-126569.md): Mbin 1.2.1 before 1.11.1 Stored XSS via Markdown Image Nested in Link (CVSS 5.1, MbinOrg mbin)
- [CVE-2026-126567](https://cve.now/CVE-2026-126567.md): Semantic MediaWiki 3.0.0 before 7.4.1 Stored XSS via Special:Ask Debug Output (CVSS 5.1, SemanticMediaWiki)
- [CVE-2026-126566](https://cve.now/CVE-2026-126566.md): Semantic MediaWiki 7.3.1 before 7.4.1 Incorrect Authorization via Edit Protection Annotations (CVSS 7.1, SemanticMediaWiki)
- [CVE-2026-126565](https://cve.now/CVE-2026-126565.md): Semantic MediaWiki 3.0.0 before 7.4.1 DoS via Exponential Concept Expansion (CVSS 5.3, SemanticMediaWiki)
- [CVE-2026-126564](https://cve.now/CVE-2026-126564.md): Semantic MediaWiki 2.5.0 before 7.4.1 Stored XSS via Special:Browse Factbox Title (CVSS 5.1, SemanticMediaWiki)
- [CVE-2026-126563](https://cve.now/CVE-2026-126563.md): Semantic MediaWiki 2.4.0 before 7.4.1 Reflected XSS via Special:Ask Date Format (CVSS 5.3, SemanticMediaWiki)
- [CVE-2026-126562](https://cve.now/CVE-2026-126562.md): Semantic MediaWiki 3.0.0 before 7.4.1 Uncontrolled Recursion via ElasticStore ConceptDescriptionInterpreter (CVSS 5.3, SemanticMediaWiki)
- [CVE-2026-126561](https://cve.now/CVE-2026-126561.md): Semantic MediaWiki 2.5.0 before 7.4.1 Missing Authorization via Is edit protected Annotation (CVSS 7.1, SemanticMediaWiki)
- [CVE-2026-126560](https://cve.now/CVE-2026-126560.md): Semantic MediaWiki 3.0.0 before 7.4.1 Stored XSS via data-search Attributes (CVSS 5.1, SemanticMediaWiki)
- [CVE-2026-126559](https://cve.now/CVE-2026-126559.md): Semantic MediaWiki 4.2.0 before 7.4.1 Stored XSS via Special:FacetedSearch (CVSS 4.8, SemanticMediaWiki)
- [CVE-2026-63194](https://cve.now/CVE-2026-63194.md): Bahmni-Core: Path traversal may lead to arbitrary file write in the admin CSV import (CVSS 8.7, bahmni-core)
- [CVE-2026-63192](https://cve.now/CVE-2026-63192.md): Bahmni-Core: Exfiltration of patient data stored in Bahmni through SQL injection through boolean blind and error based exfil (CVSS 7.1, bahmni-core)
- [CVE-2026-126546](https://cve.now/CVE-2026-126546.md): Viber for iOS through 29.4.0.24 Denial of Service via Malformed GIF (CVSS 5.3, Rakuten Viber Viber for iOS)
- [CVE-2026-126545](https://cve.now/CVE-2026-126545.md): WWBN AVideo through 29.7.1 Missing Authorization via get\_api\_tags API (CVSS 5.3, WWBN AVideo)
- [CVE-2026-126544](https://cve.now/CVE-2026-126544.md): WWBN AVideo 6.5 through 29.7.1 Email Verification Bypass via User::verifyCode() (CVSS 5.3, WWBN AVideo)
- [CVE-2026-126543](https://cve.now/CVE-2026-126543.md): WWBN AVideo through 29.7.1 Wallet Credit Manipulation via PayPalYPT ipnV2.php (CVSS 8.7, WWBN AVideo)
- [CVE-2026-126542](https://cve.now/CVE-2026-126542.md): WWBN AVideo 6.5 through 29.7.1 Authentication Bypass via Hybridauth Social Login (CVSS 9.3, WWBN AVideo)
- [CVE-2026-126541](https://cve.now/CVE-2026-126541.md): WWBN AVideo through 29.7.1 Missing Authorization via Live Restream Endpoints (CVSS 8.6, WWBN AVideo)
- [CVE-2026-126539](https://cve.now/CVE-2026-126539.md): Directus before 12.1.0 Authorization Bypass via Public WebSocket REST Interface (CVSS 9.2, directus)
- [CVE-2026-126499](https://cve.now/CVE-2026-126499.md): Jellyfin before 12.0 Path Traversal via Library VirtualFolders Endpoints (CVSS 8.3, jellyfin)
- [CVE-2026-126498](https://cve.now/CVE-2026-126498.md): WriteFreely before 0.17.3 Stored XSS via Unsanitized Post Slug (CVSS 5.1, Musing Studio WriteFreely)
- [CVE-2026-126497](https://cve.now/CVE-2026-126497.md): LibreCAD through 2.2.1.6 Heap Out-of-Bounds Write via dwgReader18::parseDataPage (CVSS 8.5, LibreCAD)
- [CVE-2026-126496](https://cve.now/CVE-2026-126496.md): 1Panel-dev CordysCRM before 1.9.6 Authorization Bypass via /account/contact/get/{id} (CVSS 5.3, 1Panel-dev CordysCRM)
- [CVE-2026-126495](https://cve.now/CVE-2026-126495.md): MQTTX through 1.13.3 Stored XSS via Topic Tree and JSON Tree Tooltips (CVSS 5.3, emqx MQTTX)
- [GHSA-6856-87HX-P5X7](https://cve.now/GHSA-6856-87HX-P5X7.md): Microsoft Security Advisory CVE-2026-105544 - .NET Elevation of Privilege Vulnerability (medium (no CVSS), Microsoft.TestPlatform.CLI)
- [CVE-2026-117373](https://cve.now/CVE-2026-117373.md): Janus WebRTC Server 1.2.3 through 1.4.0 is vulnerable to Directory Traversal. (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2026-11-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.