CVEs published November 12, 2026
387 CVEs were published on November 12, 2026: 30 critical, 176 high. 14 early warnings were posted.
- Published
- 387
- Critical
- 30
- High
- 176
- Medium
- 146
- Low
- 28
- Unrated
- 7
- Now in CISA KEV
- 0
- Fix available
- 264
- Early warnings
- 14
Most affected products
- PostgreSQL
- 52
- Synology DiskStation Manager
- 27
- Copeland XWEB EVO
- 14
- bacnet-stack
- 12
- OriginLab Origin Viewer
- 12
- Red Hat Satellite 6.16 for RHEL · Red Hat Satellite 6.17… +1
- 7
- Alinto sogo
- 6
- flavorjones loofah · loofah
- 6
- sporkmonger addressable · addressable
- 6
- Zohocorp DDI Central
- 6
Early warnings 14
- SZB-498d5eb864SCKit malware reported in ScreenConnect attacks targeting MSPsScreenConnect
- SZB-53b611532fTSMC says no intrusion found after employee data was offered for saleTSMC
- SZB-f45d3069b4Siemens reports Node2Shell Brotli flaw (CVE-2026-111497) in Desigo CC and Gridscale XSiemens · Desigo CC family; Gridscale X DSA and X PSS®E
- SZB-9d96703e23Island reports 186 lookalike AI domains serving ClickFix lures and Net Guard malwareChrome Web Store
- SZB-14f7eea4a0Citrix patches critical NetScaler and Secure Access Client flaws, including authentication bypassCitrix · NetScaler
- SZB-33a311bb79Apache patches critical HTTP Server RCE flaw CVE-2026-119618Apache · HTTP Server (mod_http2)
- SZB-92e20603fcApify reports unauthorized access to internal systems and rotates API tokensApify platform
- SZB-082f439dadSiemens RUGGEDCOM APE1808 affected by PHP2Shell flaws CVE-2026-109618 and CVE-2026-109619Check Point security gateways
- SZB-34b40f857bGoogle Cloud warns three AMD Turin CPU flaws could leak data across VMsAMD · EPYC Turin (Zen 5) processors
- SZB-e8aac6829dN-able investigates new N-central exploits claimed to give root RCEN-able · N-central
- SZB-c5bb586913PTC patches critical Windchill and FlexPLM RCE flaw CVE-2026-126325PTC · Windchill, FlexPLM
- SZB-03e2ca31f9Red Hat reports critical Quay flaw CVE-2026-123710 enabling signing-key takeoverRed Hat · Quay
- SZB-0ddeb66320Node.js fixes 16 vulnerabilities, including HTTP/2 crash and memory-leak flawsNode.js
- SZB-b1fc427f51Aikido Security reports attacker used 4,837 hijacked GitHub accounts to plant CI secret stealerGitHub
Critical 30
- CVE-2026-127275Linksys EA8100 JNAP API ui_server.lua SetUnsecuredWiFiWarning missing authenticationLinksys EA8100
- CVE-2026-120868Memory overflow in Packet Processing can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler…Citrix NetScaler ADC · Citrix NetScaler Gateway
- CVE-2026-107360Red Hat Satellite allow-list bypass in safemode jailRed Hat Satellite 6.16 for RHEL · Red Hat Satellite 6.17… +1
- CVE-2026-124012Dixell/Copeland XWEB EVO Hardcoded Administrator Daily Password Authentication BypassCopeland XWEB EVO
- CVE-2026-124010Dixell/Copeland XWEB EVO Unauthenticated Command Injection via xwconsole.cgiCopeland XWEB EVO
- CVE-2026-124007Dixell/Copeland XWEB EVO Pre-Auth OS Command Injection via Password FieldCopeland XWEB EVO
- CVE-2026-124006Dixell/Copeland XWEB EVO Predictable Root Password GenerationCopeland XWEB EVO
- CVE-2026-124005Dixell/Copeland XWEB EVO Predictable Administrator Password GenerationCopeland XWEB EVO
- CVE-2026-124004Dixell/Copeland XWEB EVO Hardcoded Administrator Backdoor PasswordCopeland XWEB EVO
- CVE-2026-68548Algernon: Case-insensitive filesystem lets unauthenticated requests bypass /admin,/repo,/data permission-prefix gatexyproto algernon
- CVE-2026-124002Dixell/Copeland XWEB EVO Pre-Auth OS Command Injection via UsernameCopeland XWEB EVO
- CVE-2026-117551jDownloads extension for Joomla remote code execution via frontend thumbnail uploadjdownloads.com jDownloads extension for Joomla
- CVE-2026-127063DataComm RMM+ auth bypass via default API secretDataComm RMM+
- CVE-2026-126837Attacker able to redirect a client's database traffic to a host they control via special characters in an SRV target, bypassing the SRV…MongoDB Node.js Driver
- CVE-2026-127131SOGo before 5.12.13 Missing Rate Limiting on TOTP VerificationAlinto sogo
- CVE-2026-127111SOGo before 5.12.13 Unauthenticated Password Recovery Brute ForceAlinto sogo
- CVE-2026-120869An unauthenticated attacker can bypass authentication controls to access restricted resources on the Citrix NetScaler Console applianceCitrix NetScaler Console
- CVE-2026-19422Authentication BypassZohocorp DDI Central
- CVE-2026-127046MISP Modules Website Exposes External Tool API Keys in /external_tools/list Responsemisp-modules
- CVE-2026-127016MISP Modules Website: Missing Authorization on External Tool Management Endpointsmisp-modules
- CVE-2026-90908Azul Payara JMX/RMI Remote Authentication Bypass Leading to Remote Code Execution via GenericAdminAuthenticatorAzul Payara Payara Server · Azul Payara Payara Micro
- CVE-2026-110003Azul Payara Administration REST Interface Authentication Bypass via X-GlassFish-authToken Header Leading to Remote Code ExecutionAzul Payara Payara Server
- CVE-2026-12591Privilege EscalationZohocorp M365 Manager Plus
- CVE-2026-12507Authenticated remote code executionZohocorp AssetExplorer · Zohocorp ServiceDesk Plus +1
- CVE-2026-8333TimePictra Stored Cross-site ScriptingMicrochip TimePictra
Show all 30 entriesShow fewer entries
- CVE-2026-124815Clockinator Lite < 1.1.0 - Unauthenticated SQLi via Record Deletion ActionsClockinator Lite
- CVE-2026-124814Ultimate Addons for Elementor Forms < 1.0.8 - Unauthenticated Arbitrary File Upload via 'type' ParameterUltimate Addons for Elementor Forms
- CVE-2026-110959Descope < 1.2.0 - Unauthenticated Account TakeoverDescope
- CVE-2026-76954An improper neutralization of special elements used in an SQL command vulnerability in the Auth API in Synology DiskStation Manager (DSM)…Synology DiskStation Manager
- CVE-2026-126785rmalright TR-VISION HOME IOCTL WFanManager.sys sub_11504 default permissionrmalright TR-VISION HOME
High 176
- CVE-2026-128067Pillow: Heap buffer overflow saving TIFF with libtiff when tags override image sizepython-pillow Pillow · pillow
- CVE-2026-128066Pillow: Memory DoS in TIFF and EXIF IFD parsing via overlapping tag datapython-pillow Pillow · pillow
- CVE-2026-126366msgpack-java JRuby decoder allocates from declared header counts with no cap: 5-byte message forces multi-GiB OOMmsgpack-ruby · msgpack
- CVE-2026-126823Atlas SQL JDBC driver loads a native library it did not write: NativeLoader tolerates a pre-existing libmongosqltranslate.so in a shared…MongoDB Atlas SQL JDBC Driver
- CVE-2026-127211MultiVendorX WordPress Plugin < 5.0.22 Broken Access Control via stores REST RouteMultiVendorX – WooCommerce Multivendor Marketplace AI Power…
- CVE-2026-126793Privilege escalation in Aurora PostgreSQL dialect detection in AWS Advanced Go Wrapperaws-advanced-go-wrapper
- CVE-2026-127208datamodel-code-generator < 0.84.0 Code Injection via x-python-type Annotationdatamodel-code-generator
- CVE-2026-106018Authentication bypass using an alternate path or channel vulnerability in Johnson Controls EasyIO FW allows Authentication Bypass.Johnson Controls EasyIO FW
- CVE-2026-86322Foreman: authorization flaw in the foreman::controller::useraware#find_user handling used by api::v2::personalaccesstokenscontrollerRed Hat Satellite 6.16 for RHEL · Red Hat Satellite 6.17… +1
- CVE-2026-124015Dixell/Copeland XWEB EVO Authentication Bypass via users.luaCopeland XWEB EVO
- CVE-2026-124014Dixell/Copeland XWEB EVO Unauthenticated Configuration Write via config.luaCopeland XWEB EVO
- CVE-2026-47711BACnet Stack: Stack buffer overflow in Loop internal ReadProperty path via Life_Safety_Zone.accepted-modes on the default BACnet/IP serverbacnet-stack
- CVE-2026-111456Candlepin: consumer certificate can register systems in another organizationRed Hat Satellite 6.16 for RHEL · Red Hat Satellite 6.17… +1
- CVE-2026-107443Foreman: foreman: api host template render discloses secrets to view_hosts users (incomplete cve-2026-96659 fix)Red Hat Satellite 6.16 for RHEL · Red Hat Satellite 6.17… +1
- CVE-2026-107152Rubygem-smart_proxy_dynflow: dynflow console authorizes any client certificate the capsule ca signedRed Hat Satellite 6.16 for RHEL · Red Hat Satellite 6.17… +1
- CVE-2026-124013Dixell/Copeland XWEB EVO OS Command Injection via api.luaCopeland XWEB EVO
- CVE-2026-47710BACnet Stack: Loop reference to long Structured View description causes stack-buffer-overflowbacnet-stack
- CVE-2026-47259BACnet Stack: Stack-based buffer overflow in Notification Class RemoveListElement recipient-list decodingbacnet-stack
- CVE-2026-47258BACnet Stack: Stack-based buffer overflow in Notification Class AddListElement recipient-list decodingbacnet-stack
- CVE-2026-47257BACnet Stack: ReinitializeDevice ENDRESTORE can delete existing objects on an empty restore file and still return successbacnet-stack
- CVE-2026-47217BACnet Stack: Channel member self-reference causes uncontrolled recursion and stack overflow in default BACnet/IP serverbacnet-stack
- CVE-2026-46674BACnet Stack: Out-of-Bounds Read in AtomicWriteFile Record Decoder via Unbounded returnedRecordCountbacnet-stack
- CVE-2026-45341BACnet Stack: NULL pointer dereference in bacnet_device_object_reference_decode() when WriteProperty updates Structured View…bacnet-stack
- CVE-2026-45265Atomic-Read-File RecordCount Stack-Based Out-of-Bounds Write in bacnet-stackbacnet-stack
- CVE-2026-52786BACnet Stack: malicious ReadPropertyMultiple-ACK with excessive properties causes global-buffer-overflow in ProcessRPMData()bacnet-stack
Show all 176 entriesShow fewer entries
- CVE-2026-124009Dixell/Copeland XWEB EVO OS Command Injection via backup.luaCopeland XWEB EVO
- CVE-2026-124008Dixell/Copeland XWEB EVO OS Command Injection via devices.luaCopeland XWEB EVO
- CVE-2026-124003Dixell/Copeland XWEB Setuid Lua CGI Root Command InjectionCopeland XWEB EVO
- CVE-2025-0043Incorrect directory permissions within AMD Vivado™ Lab Solutions could allow a local user-privileged attacker to escalate their…AMD Vivado Software
- CVE-2024-21954Improper exception handling in IOMMU could allow an invalidate command to be sent to PCIe devices that do not support Address Translation…AMD EPYC™ 7003 Series Processors · AMD EPYC™ 9004 Series… +2
- CVE-2026-18379Yggdrasil-worker-package-manager: yggdrasil-worker-package-manager: path traversal via unsanitized repo name in addrepo/removerepoRed Hat Enterprise Linux
- CVE-2026-117544jDownloads extension for Joomla remote file access via IDOR in other_file_idjdownloads.com jDownloads extension for Joomla
- CVE-2026-120467AcyMailing extension for Joomla and WordPress subscription tampering in mailing list componentDatasolution AcyMailing extension for Joomla and WordPress
- CVE-2026-120466Joomla / WordPress Extension - acymailing.com - Missing authorization on subscription changes in AcyMailing 1.0.0 - 11.1.1Datasolution AcyMailing extension for Joomla and WordPress
- CVE-2026-117550Joomla Extension - jdownloads.com - Publishing of files without approval in jDownloads < 4.1.8jdownloads.com jDownloads extension for Joomla
- CVE-2026-117543Joomla Extension - jdownloads.com - SSRF via external download URL field jDownloads < 4.1.8jdownloads.com jDownloads extension for Joomla
- CVE-2026-118495Joomla / WordPress Extension - acymailing.com - Exposure of sensitive information to an unauthorized actor in AcyMailing 6.0.0 - 11.1.1Datasolution AcyMailing extension for Joomla and WordPress
- CVE-2026-127204WooCommerce PayPal Pro Payment Gateway < 4.1.1 Payment Bypass via pp_capture_orderwp.insider Payment Gateway for PayPal Pro, PayPal Checkout…
- CVE-2026-106475Elasticsearch data source resource proxy allows arbitrary methods and paths with the data source's credentialsGrafana Elasticsearch Datasource · Grafana OSS +1
- CVE-2026-126197pgEdge Postgres MCP Server SQL injection through custom pl-do tool parameterspgedge-postgres-mcp
- CVE-2026-119275Akaunting 3.3.0 - Stored XSS through imported invoice numbersAkaunting
- CVE-2026-126196pgEdge Postgres MCP Server read-only mode can be bypassed by SQL statement smuggling through query_databasepgedge-postgres-mcp
- CVE-2026-124702URL Redirection to Untrusted Site in Progress Telerik UI for WPFProgress Software Telerik UI for WPF
- CVE-2026-124700URL Redirection to Untrusted Site in Progress Telerik UI for WinFormsProgress Software Telerik UI for WinForms
- CVE-2026-106146Uncaught Exceptions in Telerik UI for ASP.NET MVC Filter ProcessingProgress Software Telerik UI for ASP.NET MVC
- CVE-2026-106154Uncontrolled Recursion in Telerik UI for ASP.NET Core FilterParserProgress Software Telerik UI for ASP.NET Core
- CVE-2026-124698Cross-Site Scripting in Kendo UI for jQuery Chart Shared TooltipProgress Software Kendo UI for jQuery
- CVE-2026-124697Cross-Site Scripting in Kendo UI for jQuery Chart Shared TooltipProgress Software Kendo UI for jQuery
- CVE-2026-124696Cross-Site Scripting in Kendo UI for jQuery Spreadsheet Sheet NamesProgress Software Kendo UI for jQuery
- CVE-2026-82977The Plesk GoAccess statistics integration in Plesk Obsidian for Linux, versions 18.0.77 to 18.0.81.7, 18.0.82 to 18.0.82.2, allows…WebPros Plesk
- CVE-2026-126191Soup Sieve: Exponential ReDoS in selector compilation via \9-run in CSS_ESCAPES/IDENTIFIERfacelessuser soupsieve
- CVE-2026-121876Sandboxed-containers: kernel: systemd-gpt-auto-generator: guest data leakage in confidential computing (sandboxed containers)Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-126190Soup Sieve: Polynomial-time denial of service in the descendant combinatorfacelessuser soupsieve · soupsieve
- CVE-2026-124695Cross-Site Scripting in Kendo UI for jQuery Form Item HintsProgress Software Kendo UI for jQuery
- CVE-2026-124691Cross-Site Scripting in Kendo UI for jQuery Gantt Parent DropdownProgress Software Kendo UI for jQuery
- CVE-2026-127030Freeradius: stack buffer overflow via unchecked eap-fast sessionticket lengthRed Hat Enterprise Linux
- CVE-2026-127029Freeradius: stack-based buffer overflow via unbounded eap-sim identity lengthRed Hat Enterprise Linux
- CVE-2026-127141SOGo before 5.12.13 Denial of Service via Auxiliary IMAP Account Greeting WaitAlinto sogo
- CVE-2026-127121SOGo before 5.12.13 S/MIME Certificate Spoofing via UIxMailViewAlinto sogo
- CVE-2026-126329Docker Sandboxes privilege escalation through untrusted state directoriesDocker Sandboxes
- CVE-2026-91007Arbitrary supervisor-mode function pointer injection via charger_set_prop() syscall in the charger driver APIzephyrproject zephyr
- CVE-2026-6467PostgreSQL code execution as superuser in extension scriptsPostgreSQL
- CVE-2026-6460PostgreSQL remote code execution in type handling during DDLPostgreSQL
- CVE-2026-18447PostgreSQL arbitrary code execution via SQL function type confusionPostgreSQL
- CVE-2026-14661PostgreSQL dblink and subscriptions can append to arbitrary filesPostgreSQL
- CVE-2026-120153PostgreSQL remote code execution in extension script substitutionsPostgreSQL
- CVE-2026-120151PostgreSQL remote code execution in plpgsql record assignmentPostgreSQL
- CVE-2026-120150PostgreSQL expanded-record domain-check use-after-free executes arbitrary codePostgreSQL
- CVE-2026-120149PostgreSQL FDW batch-insert mismatch executes arbitrary codePostgreSQL
- CVE-2026-120148PostgreSQL extended-statistics pseudo-type confusion executes arbitrary codePostgreSQL
- CVE-2026-120147PostgreSQL dblink reentrant disconnect use-after-free executes arbitrary codePostgreSQL
- CVE-2026-120145PostgreSQL logical replication can write to subscriber system catalogs, executing arbitrary codePostgreSQL
- CVE-2026-120144PostgreSQL arbitrary code execution in type-cache invalidationPostgreSQL
- CVE-2026-120143PostgreSQL code execution via use-after-free in trigger functionsPostgreSQL
- CVE-2026-120142PostgreSQL arbitrary code execution in anonymous RECORD typesPostgreSQL
- CVE-2026-120141PostgreSQL arbitrary code execution in set-returning functionsPostgreSQL
- CVE-2026-120139PostgreSQL code execution via integer overflow in tuple sizingPostgreSQL
- CVE-2026-116336PostgreSQL arbitrary code execution in REINDEX CONCURRENTLYPostgreSQL
- CVE-2026-116335PostgreSQL code execution in operator commutator and negator linksPostgreSQL
- CVE-2026-116332PostgreSQL code execution via use-after-free in portal setupPostgreSQL
- CVE-2026-116331PostgreSQL code execution in min/max aggregate optimizationPostgreSQL
- CVE-2026-116330PostgreSQL pg_dump tar restore.sql fails to block psql command injectionPostgreSQL
- CVE-2026-116329PostgreSQL statistics import type confusion executes arbitrary codePostgreSQL
- CVE-2026-116328PostgreSQL generation memory context integer wraparound executes arbitrary codePostgreSQL
- CVE-2026-116326PostgreSQL plperl tied-object exceptions follow stale sigjmp_bufPostgreSQL
- CVE-2026-116325PostgreSQL reindexdb index name quoting allows SQL injectionPostgreSQL
- CVE-2026-116323PostgreSQL pltcl reentrant result conversion use-after-free executes arbitrary codePostgreSQL
- CVE-2026-116320PostgreSQL code execution via use-after-free in plperlPostgreSQL
- CVE-2026-116319PostgreSQL use-after-free leads to code execution in plperlPostgreSQL
- CVE-2026-116318PostgreSQL SQL injection in pg_dump not-null constraint namesPostgreSQL
- CVE-2026-116317PostgreSQL code execution via ts_rank_cd() heap overflowPostgreSQL
- CVE-2026-116316PostgreSQL arbitrary SQL execution via pg_temp type plantingPostgreSQL
- CVE-2026-116315PostgreSQL arbitrary code execution in tsvector_delete()PostgreSQL
- CVE-2026-116314PostgreSQL arbitrary code execution in pg_restorePostgreSQL
- CVE-2026-116313PostgreSQL code execution in vacuumdb via untrusted search pathPostgreSQL
- CVE-2026-116309PostgreSQL type confusion enables code execution in plperlPostgreSQL
- CVE-2026-116307PostgreSQL authenticated remote code execution in plperlPostgreSQL
- CVE-2026-116306PostgreSQL arbitrary code execution in composite-type field assignmentPostgreSQL
- CVE-2026-116304PostgreSQL arbitrary code execution in parallel RECORD type handlingPostgreSQL
- CVE-2026-123039Check Point local privilege escalation to root in DynamicCLI daemoncheckpoint Quantum Security Gateway · checkpoint Quantum Se…
- CVE-2026-107484Input Validation Vulnerability in Gaia Portal backend handlers allows privilege escalation by an authenticated usercheckpoint Quantum Security Gateway · checkpoint Quantum Se…
- CVE-2026-92083Pardus Image Writer Local Privilege Escalation via Polkit Misconfiguration in TÜBİTAK BİLGEM's pardus-image-writerTÜBİTAK BİLGEM Yazılım Teknolojileri Araştırma Enstitüsü pa…
- CVE-2026-124628In affected versions of Octopus Server, incorrect validation of changes a user made to their own LDAP identity allowed them to edit that…Octopus Deploy Octopus Server
- CVE-2026-124627In affected versions of Octopus Server, incorrect validation of the external identity linked to a newly registered user could result in…Octopus Deploy Octopus Server
- CVE-2026-116835In affected versions of Octopus Server, insufficient validation of custom claims on OIDC accounts allowed a user with permission to edit…Octopus Deploy Octopus Server
- CVE-2026-125285TIBCO Platform’s Self-Hosted Control Plane - Authentication Bypass VulnerabilityTIBCO Platform’s Self-Hosted Control Plane
- CVE-2026-75869Authenticated command injectionZohocorp DDI Central
- CVE-2026-127056PapaParse before 5.7.1 Quadratic-Time Parsing DoS via indexOf Scanmholt PapaParse
- CVE-2026-111552Multi-Factor Authentication Bypass in Hyper Technology's Hyper E-Commerce InfrastructureHyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure
- CVE-2026-75868Broken Access ControlZohocorp DDI Central
- CVE-2026-110951Password Reset via Unverified Email Leading to Account Takeover in Hyper Technology's Hyper E-Commerce InfrastructureHyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure
- CVE-2026-75867Broken Access ControlZohocorp DDI Central
- CVE-2026-127050Backup Migration before 2.1.8 Path Traversal via PclZip Restore Fallbackinisev Backup Migration
- CVE-2026-75864Broken Access ControlZohocorp DDI Central
- CVE-2026-19421Authenticated InjectionZohocorp DDI Central
- CVE-2026-124705URL Redirection to Untrusted Site in Progress Telerik UI for .NET MAUIProgress Software Telerik UI for .NET MAUI
- CVE-2026-127036ibi WebFOCUS - OS Command Injection Vulnerabilityibi WebFOCUS
- CVE-2026-13764Masterstudy - Education WordPress Theme <= 4.8.151 - Missing Authorization to Authenticated (Subscriber+) Privilege EscalationStylemixThemes Masterstudy - Education WordPress Theme
- CVE-2026-16135VibeBP <= 1.9.9.8.1 - Authenticated (Subscriber+) Privilege Escalation in set_email_notification_settings()VibeThemes VibeBP
- CVE-2026-15309CourseCure Courses <= 1.5.1 - Authenticated (Subscriber+) Privilege Escalation to 'ajax_save_settings' EndpointWishList Member CourseCure Courses
- CVE-2026-124704Deserialization of Untrusted Data in Progress Telerik UI for WPFProgress Software Telerik UI for WPF
- CVE-2026-124703Improper Control of Generation of Code in Progress Telerik UI for WPFProgress Software Telerik UI for WPF
- CVE-2026-124701Deserialization of Untrusted Data in Progress Telerik UI for WinFormsProgress Software Telerik UI for WinForms
- CVE-2026-124699Improper Control of Generation of Code in Progress Telerik UI for WinFormsProgress Software Telerik UI for WinForms
- CVE-2026-106140Deserialization of Untrusted Data in Telerik Reporting Report DesignersProgress Software Telerik Reporting
- CVE-2026-76173SQL Injection in WhatsApp for Dolibarr by Sgestion / EasySoftSgestion / EasySoft WhatsApp for Dolibarr
- CVE-2026-47832OpenStack Application Credentials Logged in Cleartext to BOSH Debug LogsCloudFoundry Foundation bosh-openstack-cpi-release
- CVE-2026-125836WordPress Simple JWT Login plugin <= 3.6.8 - Cross Site Request Forgery (CSRF) vulnerabilityNicu Micle Simple JWT Login
- CVE-2026-118855Akaunting 3.3.0 - Stored XSS in invoice edit form through imported statusAkaunting
- CVE-2026-87772Unauthenticated Polkit Privilege Escalation in TÜBİTAK BİLGEM's Pardus AboutTÜBİTAK BİLGEM Software Technologies Research Institute Par…
- CVE-2026-8331TimePictra ermote code execution via file uploadMicrochip TimePictra
- CVE-2026-8332TimePictra root password hardcoded in installation filesMicrochip TimePictra
- CVE-2026-118597Akaunting 3.3.0 - Stored XSS in custom invoice payment termsAkaunting
- CVE-2026-76792User Verification 2.0.38 - 2.0.48 - Unauthenticated Account Takeover via Unthrottled OTP Login VerificationUser Verification by PickPlugins
- CVE-2026-124647TI WooCommerce Wishlist < 2.0.7 - Unauthenticated SQLi via tinv_wishlistkey CookieTI WooCommerce Wishlist
- CVE-2026-123092WP Remote Users Sync < 2.3.0 - Privilege Escalation to Administrator via 'meta' Sync ActionWP Remote Users Sync
- CVE-2026-123044ContentPen < 1.1.1 - Unauthenticated Stored XSS via API Key DisclosureContentPen
- CVE-2026-122003Abilities Bridge < 1.4.2 - Administrator Account Creation via CSRFAbilities Bridge
- CVE-2026-119040Defender Security < 6.4.1 - 2FA Bypass via Unthrottled OTP VerificationDefender Security
- CVE-2026-101107An OS command Injection issue exists in Air Terminal 6 provided by SoftBank Corp.SoftBank Air Terminal
- CVE-2026-111435Relative path traversal vulnerability in openEuler iSulad on Linux.openEuler iSulad
- CVE-2026-111433UNIX symbolic link (symlink) following vulnerability in openEuler iSulad on Linux.openEuler iSulad
- CVE-2026-85101An authentication bypass using an alternate path or channel vulnerability in the rsync in Synology DiskStation Manager (DSM) before…Synology DiskStation Manager
- CVE-2026-75785An improper neutralization of special elements used in an OS command vulnerability in the VPN API in Synology DiskStation Manager (DSM)…Synology DiskStation Manager
- CVE-2026-18633An access of uninitialized pointer vulnerability in the nfsd in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1…Synology DiskStation Manager
- CVE-2026-81584An improper neutralization of special elements used in an SQL command vulnerability in the User API in Synology DiskStation Manager (DSM)…Synology DiskStation Manager
- CVE-2026-19048An improper link resolution before file access vulnerability in the thumb in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and…Synology DiskStation Manager
- CVE-2026-18596An authentication bypass using an alternate path or channel vulnerability in the OTP in Synology DiskStation Manager (DSM) before…Synology DiskStation Manager
- CVE-2026-74857A missing critical step in authentication vulnerability in the Auth API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and…Synology DiskStation Manager
- CVE-2026-18792An improper limitation of a pathname to a restricted directory vulnerability in the Sharing API in Synology DiskStation Manager (DSM)…Synology DiskStation Manager
- CVE-2026-13672An authorization bypass through user-controlled key vulnerability in the SSOAuth in Synology DiskStation Manager (DSM) before…Synology DiskStation Manager
- CVE-2026-117687Movable Type provided by Six Apart Ltd.Six Apart Movable Type
- CVE-2026-114556MailEnable Save Directory Traversal Arbitrary File Creation VulnerabilityMailEnable
- CVE-2026-114558OriginLab Origin Viewer OPJU File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityOriginLab Origin Viewer
- CVE-2026-114568OriginLab Origin Viewer OPJ File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityOriginLab Origin Viewer
- CVE-2026-114567OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityOriginLab Origin Viewer
- CVE-2026-114566OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution VulnerabilityOriginLab Origin Viewer
- CVE-2026-114565OriginLab Origin Viewer OGG File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityOriginLab Origin Viewer
- CVE-2026-114564OriginLab Origin Viewer OGG File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityOriginLab Origin Viewer
- CVE-2026-114563OriginLab Origin Viewer OGWU File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityOriginLab Origin Viewer
- CVE-2026-114562OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityOriginLab Origin Viewer
- CVE-2026-114561OriginLab Origin Viewer OPJU File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityOriginLab Origin Viewer
- CVE-2026-114560OriginLab Origin Viewer OPJ File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityOriginLab Origin Viewer
- CVE-2026-114559OriginLab Origin Viewer OGG File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityOriginLab Origin Viewer
- CVE-2026-114569OriginLab Origin Viewer OGWU File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityOriginLab Origin Viewer
- CVE-2026-122044Philips Hue Bridge Pro Protection Mechanism Failure Authentication Bypass VulnerabilityPhilips Hue Bridge Pro
- CVE-2026-118632Philips Hue Bridge Pro SQL Injection Remote Code Execution VulnerabilityPhilips Hue Bridge Pro
- CVE-2026-121753Ashlar-Vellum Cobalt XE File Parsing Use-After-Free Remote Code Execution VulnerabilityAshlar-Vellum Cobalt
- CVE-2026-121752Ashlar-Vellum Cobalt LI File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityAshlar-Vellum Cobalt
- CVE-2026-121744Ashlar-Vellum Cobalt XE File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityAshlar-Vellum Cobalt
- CVE-2026-121743Ashlar-Vellum Cobalt AR File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityAshlar-Vellum Cobalt
- CVE-2026-121742Ashlar-Vellum Cobalt XE File Parsing Use-After-Free Remote Code Execution VulnerabilityAshlar-Vellum Cobalt
- CVE-2026-13269Quest NetVault Backup StnzCreateKey Numeric Truncation Error Denial-of-Service VulnerabilityQuest NetVault Backup
- CVE-2026-13270Quest NetVault Backup nvpmgr Integer Underflow Denial-of-Service VulnerabilityQuest NetVault Backup
- CVE-2026-121741Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution VulnerabilityTrimble SketchUp
- CVE-2025-10935libilbm ILBM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerabilitylibilbm
Medium, low and unrated 181
- CVE-2026-126839Deserialization allow-list bypass via anonymous-type misdetection in BSON object deserializationMongoDB C# Driver
- CVE-2026-126792Heap overflow via oversized RSA signature in GCP KMS signing callbackMongoDB Libmongocrypt Driver
- CVE-2026-127274Linksys EA8100 CheckAdminPassword excessive authenticationLinksys EA8100
- CVE-2026-127273Linksys EA8100 JNAP API IsAdminPasswordDefault missing authenticationLinksys EA8100
- CVE-2026-128065@grpc/grpc-js: RBAC override configs in VirtualHost and Route resources are not appliedgrpc-node · @grpc/grpc-js-xds
- CVE-2026-126367@grpc/grpc-js: safe_regex incorrectly applies partial string matching for patterns with alternationgrpc-node · @grpc/grpc-js-xds
- CVE-2026-126365Astro: XSS via unescaped code for unsupported languages in @astrojs/prismwithastro astro · @astrojs prism +1
- CVE-2026-126364Astro: Image endpoint in @astrojs/node can read files from a case-variant sibling of the output directory on case-sensitive filesystemswithastro astro
- CVE-2026-93333Vault audit device prefix vulnerable to log injectionHashiCorp Vault
- CVE-2026-93335Vault vulnerable to ACL deny bypass via trailing slashHashiCorp Vault
- CVE-2026-126363Astro: Reflected XSS via unescaped slot names in @astrojs/solid-jswithastro astro · @astrojs/solid-js
- CVE-2026-92735Vault integrated storage join may disclose server environment credentialsHashiCorp Vault
- CVE-2026-126362Astro: Reflected XSS via unescaped slot names in @astrojs/sveltewithastro astro · @astrojs/svelte
- CVE-2026-126361Astro: XSS via attribute injection in dynamic tag nameswithastro astro
- CVE-2026-126360OpenTelemetry Python: Denial of service through quadratic-time traceparent parsing in opentelemetry-apiopen-telemetry opentelemetry-python
- CVE-2026-126359Hono: `css` helper does not escape a closing tag split between the template and an interpolated value, allowing HTML injectionhonojs hono · hono
- CVE-2026-126358Hono: RegExpRouter skips wildcard middleware for some route sets and for paths with an encoded line terminatorhonojs hono · hono
- CVE-2026-127212Dokploy < 0.31.1 Broken Access Control via readAppMonitoringdokploy
- CVE-2026-126357Hono: `mount()` and `app.mount()` can forward a path that bypasses middleware scoped inside the mount prefixhonojs hono · hono
- CVE-2026-126356Hono: `validator('form')` skips validation for `multipart/form-data` requests with extra parametershonojs hono · hono
- CVE-2026-126355Hono: `csrf()` does not check requests sent by hyperlink auditing (`text/ping`)honojs hono · hono
- CVE-2026-126354Addressable URI normalization resolves some dotted path segments to the wrong pathsporkmonger addressable · addressable
- CVE-2026-126353Addressable: Regular Expression Denial of Service in Addressable templates with several exploded variablessporkmonger addressable
- CVE-2026-126352Addressable: Regular Expression Denial of Service in Addressable templates with multiple variablessporkmonger addressable · addressable
- CVE-2026-126351Addressable: Denial of service in URI path normalizationsporkmonger addressable · addressable
Show all 181 entriesShow fewer entries
- CVE-2026-126350Addressable: Regular Expression Denial of Service in Addressable templates with certain exploded expressionssporkmonger addressable · addressable
- CVE-2026-126349Addressable display_uri can show misleading hosts containing bidi and invisible characterssporkmonger addressable · addressable
- CVE-2026-126348Addressable display_uri can show misleading hosts with invalid Punycode A-labelssporkmonger addressable · addressable
- CVE-2026-126347Tornado: Open redirect via triple-slash redirect pathstornadoweb tornado
- CVE-2026-126346basic-ftp: Uncaught exception crashes the Node.js process when a password (or resumed-download path) contains CR/LFpatrickjuchli basic-ftp · basic-ftp
- CVE-2026-126345basic-ftp: Uncaught TypeError in MLSD directory-listing parser via proto fact name causes DoS in Client.list()patrickjuchli basic-ftp · basic-ftp
- CVE-2026-126344@hono/node-server: WebSocket upgrade request-target starting with `//` replaces the host in `c.req.url`, bypassing `Origin` checkshonojs node-server
- CVE-2026-126343@hono/node-server: Unhandled `ECONNRESET` on the socket during an asynchronous WebSocket upgrade crashes the processhonojs node-server · @hono/node-server
- CVE-2026-126210@hono/node-server: Backslash in the request path is parsed as a path separator, bypassing path-based access control at a reverse proxyhonojs node-server · @hono/node-server
- CVE-2026-127209Xiaomi Mi Browser < 14.66.0 Path Traversal via ThirdDocViewerActivityXiaomi Mi Browser
- CVE-2026-91141CVE-2026-91141COVESA vSomeIp
- CVE-2026-126209Loofah allowed_uri? treats javascript: alert(1) as safeflavorjones loofah · loofah
- CVE-2026-126208Loofah: SVG `<textPath>` and `<mpath>` bypass local-reference restrictionflavorjones loofah · loofah
- CVE-2026-126207Loofah: CSS url() sanitization bypass via escaped parenthesesflavorjones loofah · loofah
- CVE-2026-126206Loofah allowed_uri? treats data:text/html as safe text/plainflavorjones loofah · loofah
- CVE-2026-127207Sendcloud for WooCommerce 1.0.41 Missing Authorization via AJAX ActionsSendcloud for WooCommerce: Automated Shipping, Branded Trac…
- CVE-2026-127206Image CAPTCHA for Contact Form 7 and WPForms 3.3.29 CAPTCHA BypassImage CAPTCHA for Contact Form 7 and WPForms by HookAndHook
- CVE-2026-126205Loofah: Regular expression denial of service in the SVG local-reference checkflavorjones loofah · loofah
- CVE-2026-86324Foreman: authorization flaw in the foreman::controller::useraware handling used by api::v2::sshkeyscontrollerRed Hat Satellite 6.16 for RHEL · Red Hat Satellite 6.17… +1
- CVE-2026-86323Foreman: authorization flaw in the mail-notification endpoints implemented by api::v2::mailnotificationscontrollerRed Hat Satellite 6.16 for RHEL · Red Hat Satellite 6.17… +1
- CVE-2026-46677BACnet Stack: Client-Side Out-of-Bounds Read in AtomicReadFile-ACK Record-Access Handling via RecordCount / fileData[] Mismatchbacnet-stack
- CVE-2026-46676BACnet Stack: Uninitialized Value Use in AtomicReadFile-ACK Record-Access Encoder Causes Response Corruption and Conditional Information…bacnet-stack
- CVE-2026-127120Governikus AusweisApp Mobile StartPAOSResponse cross site scriptingGovernikus AusweisApp Mobile
- CVE-2026-124011Dixell/Copeland XWEB EVO Information Disclosure via sysinfo.luaCopeland XWEB EVO
- CVE-2026-0455The Versal™ AI Edge Series Gen 2 Peripheral Protection Unit (XPPU) for the inter-processor interrupt (IPI) buffers does not block…AMD Versal™ AI Edge Series Gen 2 Adaptive SoCs · AMD Ver… +1
- CVE-2026-0460Improper authentication in Bootgen could result in the use of a fixed salt value for RSA padding instead of a randomly generated salt…AMD Bootgen
- CVE-2024-21963An out-of-bounds read vulnerability in the IOMMU could allow a malicious guest to corrupt hypervisor (HV) pages and potentially cause a…AMD EPYC™ 7003 Series Processors · AMD EPYC™ 7002 Serie… +44
- CVE-2025-54507Improper validation of consistency within input in AMD SEV (Secure Encrypted Virtualization) firmware could allow an attacker with…AMD EPYC™ 9005 Series Processors · AMD EPYC™ Embedded 9005…
- CVE-2024-36344Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE DrvSys could allow an attacker with local access to the Trusted…AMD EPYC™ 4004 Series Processors · AMD EPYC™ 9005 Serie… +45
- GHSA-7M8X-X364-M26JSignal K Server: Buffered logs exposed to unauthenticated WebSocket clientssignalk-server
- CVE-2026-0101Improper validation of specified quantities in input within AMD Power Management Firmware (PMFW) could allow a local attacker to pass…AMD EPYC™ 9005 Series Processors · AMD EPYC™ Embedded 9005…
- CVE-2026-0004A transient execution vulnerability in some AMD processors may allow an attacker with the ability to execute code on the system to infer…AMD EPYC™ 9005 Series Processors · AMD EPYC™ 8005 Serie… +17
- CVE-2025-54501Improper access control on an internal debug interface could allow a high privileged attacker to bypass memory access controls potentially…AMD EPYC™ 7003 Series Processors · AMD EPYC™ 9005 Series… +2
- CVE-2026-0436Insufficient parameter sanitization in the AMD Secure Processor (ASP) trusted execution environment (TEE) SPDM driver could allow an…AMD EPYC™ 9005 Series Processors · AMD Instinct™ MI300C +1
- CVE-2026-127119Unverified ownership of the default EMR cluster log location in AWS SDK for pandasaws-sdk-pandas
- CVE-2026-126204express-rate-limit skipFailedRequests / skipSuccessfulRequests: with the default MemoryStore, a request from an earlier window is still…express-rate-limit
- CVE-2026-126838Rust Driver public Client Debug output exposes CSFLE KMS master-key materialMongoDB Rust Driver
- CVE-2026-120033FRRouting remote crash in bgpd via reachable assertionfrrouting
- CVE-2026-126203Loofah: Mutation XSS in the HTML5 scrubbers through unescaped attribute valuesflavorjones loofah · loofah
- CVE-2026-127235OpenNMS reflected cross-site scripting in the web UI via request parametersThe OpenNMS Group Meridian · The OpenNMS Group Horizon
- CVE-2026-121619Symfony: The "private_ranges" Trusted Proxies Shortcut Trusts Clients Presenting an IPv4-Mapped, 6to4, Teredo or NAT64 Address as Reverse…sensiolabs symfony/framework-bundle · sensiolabs symfony/ht…
- CVE-2026-117542jDownloads extension for Joomla path traversal in update_file handlingjdownloads.com jDownloads extension for Joomla
- CVE-2026-127236OpenNMS argument injection in ad-hoc RRD graphsThe OpenNMS Group Meridian · The OpenNMS Group Horizon
- CVE-2026-120468Datasolution AcyMailing Extension for Joomla information disclosure in mailing list dataDatasolution AcyMailing extension for Joomla
- CVE-2026-120471Datasolution AcyMailing Extension for Joomla access control bypass in site modulesDatasolution AcyMailing extension for Joomla
- CVE-2026-120470Joomla / WordPress Extension - acymailing.com - Online version of an email readable without the visibility check in AcyMailing 1.0.0…Datasolution AcyMailing extension for Joomla and WordPress
- CVE-2026-120469Joomla / WordPress Extension - acymailing.com - Open redirect on the subscription and unsubscription endpoints in AcyMailing 1.0.0 - 11.1.1Datasolution AcyMailing extension for Joomla and WordPress
- CVE-2026-127101Sssd: sssd: null pointer dereference in pam responder when protocol version negotiation is skippedRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-127100Sssd: sssd: local denial of service through unchecked oauth2 json code type in pam responderRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-127099Sssd: sssd: stack buffer overflow during rsa certificate-to-ssh key conversionRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-107365Unintended API access through the Google Cloud Monitoring data source resource proxyGrafana (built-in) Google Cloud Monitoring Datasource ·… +1
- CVE-2026-81843Memory exhaustion denial of service in Elasticsearch data source index patternsGrafana OSS · Grafana Elasticsearch Datasource +1
- CVE-2026-106472Server-side request forgery in the Prometheus data source resource APIGrafana OSS · Grafana Enterprise +1
- CVE-2026-126199pgEdge Postgres MCP Server write confirmation skipped for writes that begin with a reading keywordpgedge-postgres-mcp
- CVE-2026-126198pgEdge Postgres MCP Server custom tools performed writes without user confirmationpgedge-postgres-mcp
- CVE-2026-126831Cpio: cpio: stack-based buffer overflow in write_out_tar_header() with long usernames/groupnamesRed Hat Enterprise Linux · Red Hat Hardened Images
- CVE-2026-71363Awx: unauthenticated debug endpoints trigger scheduler operationsRed Hat Ansible Automation Platform
- CVE-2026-126193Soup Sieve: Uncontrolled recursion in Soup Sieve CSS parser lets nested pseudo-class selectors exhaust the Python call stackfacelessuser soupsieve
- CVE-2026-126192Soup Sieve: General sibling combinator inside :has() matches untrusted HTML in quadratic timefacelessuser soupsieve · soupsieve
- CVE-2026-126835[Node.js Driver] OIDC ENVIRONMENT confusion bypasses ALLOWED_HOSTS and leaks human-callback bearer tokensMongoDB Node.js Driver
- CVE-2026-126189Soup Sieve: Quadratic-time denial of service when matching `:has()`facelessuser soupsieve
- CVE-2026-127203AppFlowy Cloud 0.9.64 Stored XSS via Blob Upload Content-TypeAppFlowy-IO AppFlowy-Cloud
- CVE-2026-127202MLflow < 3.18.0 Path Traversal via model_id in log_outputs APImlflow
- CVE-2025-10698Improper File Permissions on Private Key Files in Docker DeploymentsOpenText Identity Console
- CVE-2026-16052Cookie Attribute Injection via Unescaped Semicolons in http.cookies.MorselPython Software Foundation CPython
- CVE-2026-127145SOGo before 5.12.13 SSRF via Web Calendar SubscriptionsAlinto sogo
- CVE-2026-127135SOGo before 5.12.13 Sieve Script Injection via Notification AddressAlinto sogo
- CVE-2026-70642ToolJet < 3.21.94 Authorization Bypass via app-environments/initToolJet
- CVE-2026-126330Docker Sandboxes restores removed automatically assigned port publicationsDocker Sandboxes
- CVE-2026-19809Kernel stack information disclosure in the charger_get_prop() system call handlerzephyrproject zephyr
- CVE-2026-127109CVE-2026-127109Promzard
- CVE-2026-123790Unauthenticated Path Traversal in ComfyUI-Easy-Use Allows Remote Code ExecutionComfyUI-Easy-Use
- CVE-2026-126998JeecgBoot Authentication Filter call OpenApiController.call server-side request forgeryJeecgBoot
- CVE-2026-126997JeecgBoot server-side request forgery in flow-run endpointJeecgBoot
- CVE-2026-16240PostgreSQL pg_basebackup can use backup manifest content as a format stringPostgreSQL
- CVE-2026-16237PostgreSQL INSERT ... ON CONFLICT can read or modify rows despite auto-updatable view WHERE conditionPostgreSQL
- CVE-2026-120154PostgreSQL INSERT ... ON CONFLICT can read rows despite row security policiesPostgreSQL
- CVE-2026-120152PostgreSQL pg_show_all_settings() use-after-free discloses memoryPostgreSQL
- CVE-2026-120146PostgreSQL REASSIGN OWNED bypasses role SET and CREATEDB checksPostgreSQL
- CVE-2026-116333PostgreSQL parallel B-tree array scan reads beyond array boundsPostgreSQL
- CVE-2026-126996SakanaAI text-to-LoRA Checkpoint Loading model_loading.py get_tokenizer path traversalSakanaAI text-to-LoRA
- CVE-2026-116327PostgreSQL security_barrier analysis can expose hidden values through indirect expressionsPostgreSQL
- CVE-2026-116322PostgreSQL pre-authentication cancel request can leak a spinlockPostgreSQL
- CVE-2026-116321PostgreSQL unterminated name value discloses server memoryPostgreSQL
- CVE-2026-116312PostgreSQL MERGE can place the wrong row in a trigger transition tablePostgreSQL
- CVE-2026-116311PostgreSQL DROP OWNED can remove restrictive row security policies from non-owned tablesPostgreSQL
- CVE-2026-116310PostgreSQL COPY error context uses freed field storagePostgreSQL
- CVE-2026-116308PostgreSQL dict_int reads beyond zero-length tokensPostgreSQL
- CVE-2026-116303PostgreSQL foreign key and JSON conversions bypass EXECUTE privilege on cast functionsPostgreSQL
- CVE-2026-71367Awx: websocket broadcast groups leak cross-organization job metadataRed Hat Ansible Automation Platform
- CVE-2026-120490Check Point Scalable Platforms sync protection bypass in NAT rulescheckpoint Scalable Platforms
- CVE-2026-126995tjake Jlama SafeTensorIndex.java SafeTensorIndex.loadWeights path traversaltjake Jlama
- CVE-2026-124018Gutenverse Form WordPress Plugin < 3.2.2 CSV Formula Injection via Form SubmissionJegstudio Gutenverse Form – Contact Form Builder, Block For…
- CVE-2026-114467Out-of-bounds Write in GitGit
- CVE-2026-114466Insufficient Granularity of Access Control in GitGit
- CVE-2026-114469Out-of-bounds Read in GitGit
- CVE-2026-127058WonderCMS before 3.7.0 Unverified Password Change via saveActionwondercms
- CVE-2026-97845Uncontrolled recursion vulnerability in QXmlSimpleReader XML parsing impacts Qtqt
- CVE-2026-125870BookStack before 26.09.3 Broken Access Control via ImageControllerbookstackapp bookstack
- CVE-2026-126994braindecode Model Config Deserialization util.py resolve_type_kwargs externally-controlled input to select classes or codebraindecode
- CVE-2026-123139Improper verification of the source of a communication channel vulnerability in Opera Neon on macOS and Windows allows a malicious browser…Opera Neon
- CVE-2026-126993SiteServer SSCMS captcha inadequate encryptionSiteServer SSCMS
- RUSTSEC-2026-0501Shamir backup recovery accepts a share at x = 0, so a supplied share can substitute the recovered private keybsv-rs
- RUSTSEC-2026-0528Ref Swap use-after-free in swap types reachable from safe coderef-swap
- RUSTSEC-2026-0533ammonia cross-site scripting in HTML sanitizer via SVG and MathMLammonia
- CVE-2026-2982WP Table Builder – Drag & Drop Table Builder <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'url'wptb WP Table Builder – Drag & Drop Table Builder
- CVE-2026-114369Security Issue CVE-2026-114369 - Resource exhaustion (denial of service) vulnerability in the WebSocket handshake handling of QWebSocket…Qt Framework
- CVE-2026-126644Ansible.posix: authorized_key module follows a parent-directory symlink allowing writes outside the intended directoryRed Hat Enterprise Linux
- CVE-2026-126643Aap-gateway-operator: resource-server secret exposed in plaintext in the automationcontroller custom resourceRed Hat Ansible Automation Platform
- CVE-2026-126641Ansible-pylibssh: accepts a changed ssh host key when host_key_auto_add is enabledRed Hat Ansible Automation Platform
- CVE-2026-124023Apache Axis2/C: Out-of-bounds read in the Guththila XML reader wrapperApache Software Foundation Apache Axis2/C
- CVE-2026-123765Apache Sling XSS: xssAPI.getStyleToken() accepts markup in unquoted urls.Apache Software Foundation org.apache.sling:org.apache.slin…
- CVE-2026-118975XML External Entity (XXE) Injection in Telerik Reporting SVG ProcessingProgress Software Telerik Reporting
- CVE-2026-126642Awx: webhook credential assignment omits use_role check, exposing another user's tokenRed Hat Ansible Automation Platform
- CVE-2026-40820Authenticated SQLi in getVpnData functionMB connect line mbCONNECT24 · MB connect line mymbCONNEC… +2
- CVE-2026-126991SPARQL Injection in MISP Wikidata Lookup Module via Unescaped User Inputmisp-modules
- CVE-2026-82292NULL pointer dereference vulnerability in QDomDocument::setContent() XML parsing impacts Qtqt
- CVE-2026-113408Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitGit
- CVE-2026-124817Clockinator Lite < 1.1.0 - Unauthenticated Leave Record ModificationClockinator Lite
- CVE-2026-124665Order Tracking < 3.6.2 - Unauthenticated Customer and Sales Rep Order History Disclosure via IDOROrder Tracking
- CVE-2026-124653Mine CloudVod < 2.6.6 - Unauthenticated Cloud Storage Credential DisclosureMine CloudVod
- CVE-2026-124652Mine CloudVod < 2.6.6 - Subscriber+ Order Information Disclosure via IDORMine CloudVod
- CVE-2026-124648TI WooCommerce Wishlist < 2.13.0 - Unauthenticated Wishlist Item Deletion via Share KeyTI WooCommerce Wishlist
- CVE-2026-121498Askany < 2.2.1 - Unauthenticated Chat Session Disclosure and Modification via IDORAskAny
- CVE-2026-119039Defender Security 4.9.0 - 6.4.0 - Unauthenticated IP Address Spoofing via Smart IP DetectionDefender Security
- CVE-2026-118531Directorist < 8.11.1 - Subscriber+ Listing Moderation Bypass via REST Status UpdateDirectorist: AI-Powered Business Directory, Listings & Clas…
- CVE-2026-118421WP Directory Kit < 1.6.3 - Listing Admin+ SQL Injection via 'order_by' ParameterWP Directory Kit
- CVE-2026-110072Photo Gallery by 10Web < 1.8.49 - Contributor+ Stored XSS via watermark_url Shortcode AttributePhoto Gallery by 10Web
- CVE-2026-110041Crop-Thumbnails < 1.10.0 - Author+ Arbitrary Attachment Read and Overwrite via crop REST EndpointsCrop Thumbnails
- CVE-2026-106027Oxygen MyData for WooCommerce 3.0.0 - 3.0.8 - Unauthenticated Arbitrary Order Completion via EveryPay Status CallbackOxygen MyData for WooCommerce
- CVE-2026-111436Missing release of memory after effective lifetime vulnerability in openEuler iSulad on Linux.openEuler iSulad
- CVE-2026-111434Use of Externally-Controlled format string vulnerability in openEuler iSulad on Linux.openEuler iSulad
- CVE-2026-88266An external control of system or configuration setting vulnerability in the synomount in Synology DiskStation Manager (DSM) before…Synology DiskStation Manager
- CVE-2026-81559A missing authorization vulnerability in the TaskScheduler API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and…Synology DiskStation Manager
- CVE-2026-81558A missing authorization vulnerability in the SocketIo API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1…Synology DiskStation Manager
- CVE-2026-77738A server-side request forgery vulnerability in the Credential API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and…Synology DiskStation Manager
- CVE-2026-74850An improper limitation of a pathname to a restricted directory vulnerability in the contentextract in Synology DiskStation Manager (DSM)…Synology DiskStation Manager
- CVE-2026-19414A missing authorization vulnerability in the Promotion API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1…Synology DiskStation Manager
- CVE-2026-85098A reachable assertion vulnerability in the synoscgi in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows…Synology DiskStation Manager
- CVE-2026-124993An incorrect authorization vulnerability in the Security Advisor in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and…Synology DiskStation Manager
- CVE-2026-92379An improper neutralization of input during web page generation vulnerability in the Notification API in Synology DiskStation Manager (DSM)…Synology DiskStation Manager
- CVE-2026-81557An improper neutralization of input during web page generation vulnerability in the DSMNotify in Synology DiskStation Manager (DSM) before…Synology DiskStation Manager
- CVE-2026-19833A missing authorization vulnerability in the ACL API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows…Synology DiskStation Manager
- CVE-2026-13656An improper neutralization of input during web page generation vulnerability in the Audio Player in Synology DiskStation Manager (DSM)…Synology DiskStation Manager
- CVE-2026-15201An improper certificate validation vulnerability in the Support Form in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and…Synology DiskStation Manager
- CVE-2026-87801An insertion of sensitive information into sent data vulnerability in the API framework in Synology DiskStation Manager (DSM) before…Synology DiskStation Manager
- CVE-2026-16550An external control of file name or path vulnerability in the Media Parser in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and…Synology DiskStation Manager
- CVE-2026-15198A missing authentication for critical functionality vulnerability in the Webdav API in Synology DiskStation Manager (DSM) before…Synology DiskStation Manager
- CVE-2026-86343An improper neutralization of CRLF sequences vulnerability in the SNMP API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and…Synology DiskStation Manager
- CVE-2026-118631Philips Hue Bridge Pro Argument Injection Restricted File Write VulnerabilityPhilips Hue Bridge Pro
- CVE-2026-126957ICMPv4 Record Route / Timestamp option: stack OOB read via ptr underflow in icmpv4.czephyrproject-rtos Zephyr
- CVE-2026-126795ToolJet Onboarding Signup Endpoint util.service.ts activateUserWithPassword missing authenticationToolJet
- CVE-2026-126673Data::Dump::Streamer versions before 3.00 for Perl allow code injection via unescaped Regexp patterns in _dump_qrData-Dump-Streamer
- CVE-2026-125785WordPress JetEngine plugin <= 3.9.1 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetEngine
- CVE-2026-125786WordPress Quiz And Survey Master plugin <= 11.3.0 - Content Injection vulnerabilityExpressTech Quiz And Survey Master
- CVE-2026-125787WordPress Quiz And Survey Master plugin <= 11.3.0 - Broken Access Control vulnerabilityExpressTech Quiz And Survey Master