CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-120196WAVLINK WN579X3-D wapi.cgi port_forward os command injectionWAVLINK WN579X3-D
- CVE-2026-120195WAVLINK WL-WN579A3-A Initial Setup Wizard adm.cgi set_wzdgwMesh os command injectionWAVLINK WL-WN579A3-A
- CVE-2026-120192Presenton Desktop Authentication Middleware app_data information disclosurePresenton
- CVE-2026-120191Presenton API missing authenticationPresenton
- CVE-2026-120252imagecodecs 2023.1.23 through 2026.10.10 Stack Buffer Overflow via jpegsof3_decode()cgohlke imagecodecs
- CVE-2026-120251imagecodecs 2026.3.6 through 2026.10.10 Infinite Loop via ccittfax4_decode()cgohlke imagecodecs
- CVE-2026-120250OpenAlgo 1.0.0.29 before 2.0.3.1 Improper Certificate Validation in SMTP Connectionsmarketcalls OpenAlgo
- CVE-2026-120249Thelia Back-office Default Twig Template before 1.1.1 CSRF via Product Combination RoutesThelia Back-office Default Twig Template
- CVE-2026-120248Thelia before 3.1.1 Stored XSS via SVG Store Logo and Banner UploadsThelia
- CVE-2026-120247FFmpeg 2.3 through 9.0.2 Huffyuv Decoder Uninitialized Heap Memory DisclosureFFmpeg
- CVE-2026-120246FFmpeg 4.4 through 9.0.2 Uninitialized Memory Disclosure via CDXL HAM DecoderFFmpeg
- CVE-2026-120245FFmpeg 0.10 through 9.0.2 Uninitialized Memory Disclosure via Sun Raster DecoderFFmpeg
- CVE-2026-120244FFmpeg 2.1 through 9.0.2 Uninitialized Memory Leak via PCX DecoderFFmpeg
- CVE-2026-120243FFmpeg 2.0 through 9.0.2 Information Disclosure via G2M Kempf PaletteFFmpeg
- CVE-2026-120190PostyBirb Plus Submission Description Editor DescriptionInput.tsx cross site scriptingPostyBirb Plus
- CVE-2026-120189D-Link DIR-505 TFTP Upload Filename tftpd mp_upload_file stack-based overflowD-Link DIR-505
- CVE-2026-115946XS::libbrotli versions before 1.2.1.0 for Perl bundle a brotli library with an out-of-bounds write in the decoderXS-libbrotli
- CVE-2026-120185ken678 YznCMS Auth Group Group.php Backend privileges managementken678 YznCMS
- CVE-2026-120135Apache Thrift: Java TProtocolUtil.skip() does not limit the recursion depth by defaultApache Software Foundation org.apache.thrift:libthrift
- CVE-2026-118636Apache MINA: Unsafe Deserialization (CWE-502) in JavaNativeMessageDecoderApache Software Foundation org.apache.mina:mina-core
- CVE-2026-118147Visual Studio Spoofing VulnerabilityMicrosoft Visual Studio
- CVE-2026-120210FFmpeg 5.0 through 9.0.2 Path Traversal via IMF Demuxer ASSETMAP PathFFmpeg
- CVE-2026-120209AJ-Report through 1.7.1 Authentication Bypass leading to RCE via Share-Tokenanji-plus AJ-Report
- CVE-2026-120208libheif 1.18.0 before 1.23.3 Heap Buffer Overflow via unci Mixed-Interleave Decoderstrukturag libheif
- CVE-2026-120207Thelia Page Module before 2.0.4 CSRF via Page Tag, Document and Image Delete RoutesThelia Page Module
- CVE-2026-120206Thelia before 3.2.0 Back-Office CSRF via URL Token and Unprotected ActionsThelia
- CVE-2026-120205Thelia before 3.1.0 Stored XSS via Coupon Condition Customer NameThelia
- CVE-2026-120204DeepInfer through 0.1.0 Path Traversal via /profile output_dir Parameterdeepseek-ai DeepInfer
- CVE-2026-120203ShowDoc 2.8.14 before 3.9.6 Code Injection via Mock TemplatesShowDoc
- CVE-2026-120202Highflame ramparts 0.8.1 through 0.8.10 Skill Bundle Scan Bypass via Nested .pychighflame-ai ramparts