CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-86394Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…Dell PowerProtect Data Domain
- CVE-2026-86395Dell PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.Dell PowerProtect Data Domain Virtual Edition
- CVE-2026-86396Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…Dell PowerProtect Data Domain
- CVE-2026-86397Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…Dell PowerProtect Data Domain
- CVE-2026-86398Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…Dell PowerProtect Data Domain
- CVE-2026-86399Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…Dell PowerProtect Data Domain
- CVE-2026-86400Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…Dell PowerProtect Data Domain
- CVE-2026-86401Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…Dell PowerProtect Data Domain Management Center
- CVE-2026-90717Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…Dell PowerProtect Data Domain Management Center
- CVE-2026-16020Stored XSS Fazile BACAK's DefterAsist Financial Advisor PlatformFazile BACAK DefterAsist Financial Advisor Platform
- CVE-2026-90719Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…Dell PowerProtect Data Domain Management Center
- CVE-2026-90720Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-90721Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-90723Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…Dell PowerProtect Data Domain Management Center
- CVE-2026-90724Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…Dell PowerProtect Data Domain Management Center
- CVE-2026-118435Out-of-bounds write vulnerability in Samsung Open Source escargot allows Buffer Manipulation.Samsung Open Source escargot
- CVE-2026-85655Enable Media Replace <= 4.2.2 - Missing Authorization to Authenticated (Author+) Post Content Modification via Media Replacement Workflowshortpixel Enable Media Replace
- CVE-2026-101935Echo Knowledge Base <= 17.214.0 - Reflected Cross-Site Scripting via 'new_kb_config' Parameterechoplugins Echo Knowledge Base – Documentation, FAQs, Chat…
- CVE-2026-92797Memberpress <= 1.14.1 - Cross-Site Request Forgery via 'user_email' ParameterMemberpress
- CVE-2026-63286Database backups are vulnerable to offline attacks.Axis Communications AB AXIS Camera Station Pro · Axis Commu…
- CVE-2026-109975Cozy Blocks <= 2.2.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon.view' Block Attributecozythemes Cozy Blocks – Website Builder & Business Growth…
- CVE-2026-76005WP Inventory Manager <= 2.5.5 - Authenticated (Contributor+) SQL Injection via 'sort_order' Shortcode Attributechuck1982 WP Inventory Manager
- CVE-2026-118169Hustle <= 7.8.14.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'cta_label' Parameterwpmudev Hustle – Email Marketing, Lead Generation, Optins,…
- CVE-2026-104743Tainacan <= 1.3.0 - Authenticated (Editor+) Path Traversal to Arbitrary File Read via 'tmp_file' Parameter via Mass AssignmentTainacan
- CVE-2026-76780BeyondSEO <= 1.3.6 - Missing Authorization to Authenticated (Contributor+) Limited Privilege Escalationrankingcoach BeyondSEO – AI SEO to Improve Rankings, Listin…
- CVE-2026-110185Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More <= 1.31.0 - Unauthenticated Local File Inclusion via 'webhook' and 'body' Parametersbitpressadmin Bit Flows: AI Agent Automation & Integrations…
- CVE-2026-116750VikRentCar Car Rental Management System <= 1.4.10 - Authenticated (Contributor+) SQL Injection via 'catid' Block Attributee4jvikwp VikRentCar Car Rental Management System
- CVE-2026-109218Contact Manager <= 9.1.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename Blacklist Bypasskleor Contact Manager
- CVE-2026-109370Document Embedder <= 2.4.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via 'documentSource.doc' Block Attributebplugins Document Embedder – let visitors read files withou…
- CVE-2026-77871Post Snippets <= 4.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributessaadiqbal Post Snippets – Custom WordPress Code Snippets Cu…