# CVEs published 2026-01-13

444 CVEs were published on January 13, 2026: 41 critical, 242 high. 3 are now in CISA KEV. Days are UTC.

- [CVE-2026-22686](https://cve.now/CVE-2026-22686.md): Sandbox Escape via Host Error Prototype Chain in enclave-vm (CVSS 10.0, agentfront enclave · enclave-vm)
- [CVE-2026-0716](https://cve.now/CVE-2026-0716.md): Libsoup: out-of-bounds read in libsoup websocket frame processing (CVSS 4.8, Red Hat Enterprise Linux)
- [CVE-2023-54333](https://cve.now/CVE-2023-54333.md): Social-Share-Buttons 2.2.3 - SQL Injection via project\_id Parameter (CVSS 8.8, Wordpress Social-Share-Buttons)
- [CVE-2023-54332](https://cve.now/CVE-2023-54332.md): Jetpack 11.4 - Cross Site Scripting (XSS) (CVSS 5.1, Automattic Jetpack)
- [CVE-2023-53985](https://cve.now/CVE-2023-53985.md): Zstore 6.5.4 - Reflected Cross-Site Scripting (XSS) (CVSS 5.1, Zippy Zstore)
- [CVE-2022-50896](https://cve.now/CVE-2022-50896.md): Testa 3.5.1 Online Test Management System - Reflected Cross-Site Scripting (XSS) (CVSS 5.1, Testa)
- [CVE-2022-50894](https://cve.now/CVE-2022-50894.md): VIAVIWEB Wallpaper Admin 1.0 SQL Injection via edit\_gallery\_image.php (CVSS 7.1, VIAVIWEB Wallpaper Admin)
- [CVE-2022-50893](https://cve.now/CVE-2022-50893.md): VIAVIWEB Wallpaper Admin 1.0 - Code Execution via Image Upload (CVSS 9.3, VIAVIWEB Wallpaper Admin)
- [CVE-2022-50892](https://cve.now/CVE-2022-50892.md): VIAVIWEB Wallpaper Admin 1.0 - SQL Injection via Login Page (CVSS 8.8, VIAVIWEB Wallpaper Admin)
- [CVE-2021-47750](https://cve.now/CVE-2021-47750.md): YouPHPTube \<= 7.8 - Cross-Site Scripting (CVSS 5.1, YouPHPTube)
- [CVE-2020-36919](https://cve.now/CVE-2020-36919.md): WPForms 1.7.8 - Cross-Site Scripting (XSS) (CVSS 5.1, Syed Balkhi WPForms)
- [CVE-2023-54341](https://cve.now/CVE-2023-54341.md): Webgrind 1.1 - Reflected Cross-Site Scripting (XSS) via file Parameter (CVSS 5.1, jokkedk Webgrind)
- [CVE-2023-54340](https://cve.now/CVE-2023-54340.md): WorkOrder CMS 0.1.0 - SQL Injection (CVSS 8.8, WorkOrder CMS)
- [CVE-2023-54339](https://cve.now/CVE-2023-54339.md): Webgrind 1.1 - Remote Command Execution (RCE) via dataFile Parameter (CVSS 9.3, jokkedk Webgrind)
- [CVE-2023-54338](https://cve.now/CVE-2023-54338.md): Tftpd32\_SE 4.60 - 'Tftpd32\_svc' Unquoted Service Path (CVSS 8.5, Pjo2 Tftpd32\_SE)
- [CVE-2023-54337](https://cve.now/CVE-2023-54337.md): Sysax Multi Server 6.95 - 'Password' Denial of Service (PoC) (CVSS 5.1, Sysax Multi Server)
- [CVE-2023-54336](https://cve.now/CVE-2023-54336.md): Mediconta 3.7.27 - 'servermedicontservice' Unquoted Service Path (CVSS 8.5, Infonetsoftware Mediconta)
- [CVE-2023-54335](https://cve.now/CVE-2023-54335.md): eXtplorer\<= 2.1.14 - Authentication Bypass & Remote Code Execution (RCE) (CVSS 9.3, eXtplorer)
- [CVE-2023-54334](https://cve.now/CVE-2023-54334.md): Explorer32++ 1.3.5.531 - Buffer overflow (CVSS 7.0, Explorerplusplus Explorer32++)
- [CVE-2023-54331](https://cve.now/CVE-2023-54331.md): Outline 1.6.0 - Unquoted Service Path (CVSS 8.5, Getoutline Outline)
- [CVE-2023-54330](https://cve.now/CVE-2023-54330.md): Inbit Messenger 4.9.0 - Unauthenticated Remote SEH Overflow (CVSS 9.3, Inbit Messenger)
- [CVE-2023-54329](https://cve.now/CVE-2023-54329.md): Inbit Messenger 4.9.0 - Unauthenticated Remote Command Execution (RCE) (CVSS 9.3, Inbit Messenger)
- [CVE-2023-54328](https://cve.now/CVE-2023-54328.md): AimOne Video Converter 2.04 Build 103 Buffer Overflow in Registration Form (CVSS 5.1, Aimone-Video-Converter AimOne Video Converter)
- [CVE-2023-53984](https://cve.now/CVE-2023-53984.md): HotKey Clipboard 2.1.0.6 - Privilege Escalation Unquoted Service Path (CVSS 8.5, clevo HotKey Clipboard)
- [CVE-2022-50939](https://cve.now/CVE-2022-50939.md): e107 CMS v3.2.1 - Upload Restriction Bypass with Path Traversal File Override (CVSS 8.6, e107 CMS)
- [CVE-2022-50938](https://cve.now/CVE-2022-50938.md): CONTPAQi® AdminPAQ 14.0.0 - Unquoted Service Path (CVSS 8.5, Contpaqi CONTPAQ AdminPAQ)
- [CVE-2022-50937](https://cve.now/CVE-2022-50937.md): Ametys CMS v4.4.1 - Cross Site Scripting (XSS) (CVSS 5.1, Ametys CMS)
- [CVE-2022-50936](https://cve.now/CVE-2022-50936.md): WBCE CMS 1.5.2 - Remote Code Execution (RCE) (Authenticated) (CVSS 8.7, WBCE CMS)
- [CVE-2022-50935](https://cve.now/CVE-2022-50935.md): FLAME II MODEM USB - Unquoted Service Path (CVSS 8.5, Telcel FLAME II MODEM USB)
- [CVE-2022-50933](https://cve.now/CVE-2022-50933.md): Cain & Abel 4.9.56 - Unquoted Service Path (CVSS 8.5, Malavida Cain & Abel)
- [CVE-2022-50932](https://cve.now/CVE-2022-50932.md): Kyocera Command Center RX ECOSYS M2035dn - Directory Traversal File Disclosure (Unauthenticated) (CVSS 8.7, KYOCERA Document Solutions Kyocera Command Center RX)
- [CVE-2022-50931](https://cve.now/CVE-2022-50931.md): TeamSpeak 3.5.6 - Insecure File Permissions (CVSS 8.5, TeamSpeak)
- [CVE-2022-50930](https://cve.now/CVE-2022-50930.md): Emerson PAC Machine Edition 9.80 Build 8695 - 'TrapiServer' Unquoted Service Path (CVSS 8.5, Emerson PAC Machine Edition)
- [CVE-2022-50929](https://cve.now/CVE-2022-50929.md): Connectify Hotspot 2018 'ConnectifyService' - Unquoted Service Path (CVSS 8.5, Connectify Hotspot)
- [CVE-2022-50928](https://cve.now/CVE-2022-50928.md): Bluetooth Application 5.4.277 - 'BlueSoleilCS' Unquoted Service Path (CVSS 8.5, IVT Bluetooth Application BlueSoleilCS)
- [CVE-2022-50927](https://cve.now/CVE-2022-50927.md): Cyclades Serial Console Server 3.3.0 - Local Privilege Escalation (CVSS 8.5, Vertiv Cyclades Serial Console Server)
- [CVE-2022-50926](https://cve.now/CVE-2022-50926.md): WAGO 750-8212 PFC200 G2 2ETH RS Privilege Escalation (CVSS 8.7, WAGO 750-8212 PFC200)
- [CVE-2022-50925](https://cve.now/CVE-2022-50925.md): Prowise Reflect v1.0.9 - Remote Keystroke Injection (CVSS 8.6, Prowise Reflect)
- [CVE-2022-50924](https://cve.now/CVE-2022-50924.md): Private Internet Access 3.3 - 'pia-service' Unquoted Service Path (CVSS 8.5, Private Internet Access)
- [CVE-2022-50923](https://cve.now/CVE-2022-50923.md): Cobian Backup 0.9 - Unquoted Service Path (CVSS 8.5, Cobiansoft Cobian Backup)
- [CVE-2022-50922](https://cve.now/CVE-2022-50922.md): Audio Conversion Wizard v2.01 - Buffer Overflow (CVSS 8.6, Litexmedia Audio Conversion Wizard)
- [CVE-2022-50921](https://cve.now/CVE-2022-50921.md): WOW21 5.0.1.9 - 'Service WOW21\_Service' Unquoted Service Path (CVSS 8.5, ilwebmaster21 WOW21)
- [CVE-2022-50920](https://cve.now/CVE-2022-50920.md): Sandboxie-Plus 5.50.2 - 'Service SbieSvc' Unquoted Service Path (CVSS 8.5, Sandboxie Plus)
- [CVE-2022-50919](https://cve.now/CVE-2022-50919.md): Tdarr 2.00.15 - Command Injection (CVSS 9.3, Tdarr)
- [CVE-2022-50918](https://cve.now/CVE-2022-50918.md): VIVE Runtime Service - 'ViveAgentService' Unquoted Service Path (CVSS 8.5, VIVE Runtime Service)
- [CVE-2022-50917](https://cve.now/CVE-2022-50917.md): ProtonVPN 1.26.0 - Unquoted Service Path (CVSS 8.5, ProtonVPN)
- [CVE-2022-50916](https://cve.now/CVE-2022-50916.md): e107 CMS v3.2.1 - Upload restriction bypass (Authenticated \[Admin\])+ Server file override (CVSS 8.7, e107 CMS)
- [CVE-2022-50915](https://cve.now/CVE-2022-50915.md): PTPublisher 2.3.4 - Unquoted Service Path (CVSS 8.5, Primera PTPublisher)
- [CVE-2022-50914](https://cve.now/CVE-2022-50914.md): EaseUS Data Recovery - 'ensserver.exe' Unquoted Service Path (CVSS 8.5, EaseUS Data Recovery)
- [CVE-2022-50913](https://cve.now/CVE-2022-50913.md): TCQ - 'ITeCProteccioAppServer.exe' Unquoted Service Path (CVSS 8.5, ITEC TCQ)
- [CVE-2022-50912](https://cve.now/CVE-2022-50912.md): ImpressCMS 1.4.4 - Unrestricted File Upload (CVSS 9.3, ImpressCMS)
- [CVE-2022-50910](https://cve.now/CVE-2022-50910.md): Beehive Forum - Account Takeover (CVSS 8.5, Beehive Forum)
- [CVE-2022-50909](https://cve.now/CVE-2022-50909.md): Algo 8028 Control Panel - Remote Code Execution (RCE) (Authenticated) (CVSS 8.6, Algo Solutions Algo)
- [CVE-2022-50908](https://cve.now/CVE-2022-50908.md): Mailhog 1.0.1 - Stored Cross-Site Scripting (XSS) (CVSS 5.1, Mailhog)
- [CVE-2022-50907](https://cve.now/CVE-2022-50907.md): e107 CMS v3.2.1 - Admin Upload Restriction Bypass + RCE (CVSS 8.6, e107 CMS)
- [CVE-2022-50906](https://cve.now/CVE-2022-50906.md): e107 CMS v3.2.1 - Admin Upload Restriction Bypass + Stored XSS (CVSS 4.8, e107 CMS)
- [CVE-2022-50905](https://cve.now/CVE-2022-50905.md): e107 CMS v3.2.1 - Reflected XSS via Comment Flow (CVSS 6.1, e107 CMS)
- [CVE-2022-50904](https://cve.now/CVE-2022-50904.md): Wondershare UBackit 2.0.5 - 'wsbackup' Unquoted Service Path (CVSS 8.5, Wondershare UBackit)
- [CVE-2022-50903](https://cve.now/CVE-2022-50903.md): Wondershare MobileTrans 3.5.9 - 'ElevationService' Unquoted Service Path (CVSS 8.5, Wondershare MobileTrans)
- [CVE-2022-50902](https://cve.now/CVE-2022-50902.md): Wondershare FamiSafe 1.0 - 'FSService' Unquoted Service Path (CVSS 8.5, Wondershare FamiSafe)
- [CVE-2022-50901](https://cve.now/CVE-2022-50901.md): Wondershare Dr.Fone 11.4.9 - 'DFWSIDService' Unquoted Service Path (CVSS 8.5, Wondershare Dr.Fone)
- [CVE-2022-50900](https://cve.now/CVE-2022-50900.md): Wondershare Dr.Fone 12.0.18 - 'Wondershare InstallAssist' Unquoted Service Path (CVSS 8.5, Wondershare Dr.Fone)
- [CVE-2022-50899](https://cve.now/CVE-2022-50899.md): Geonetwork 4.2.0 - XML External Entity (XXE) (CVSS 8.7, GeoNetwork)
- [CVE-2022-50898](https://cve.now/CVE-2022-50898.md): NanoCMS 0.4 - Remote Code Execution (RCE) (Authenticated) (CVSS 8.6, kalyan02 NanoCMS)
- [CVE-2022-50897](https://cve.now/CVE-2022-50897.md): mPDF 7.0 - Local File Inclusion (CVSS 8.7, mPDF)
- [CVE-2022-50895](https://cve.now/CVE-2022-50895.md): Aero CMS 0.0.1 - SQL Injection (CVSS 8.8, MegaTKC Aero CMS)
- [CVE-2022-50891](https://cve.now/CVE-2022-50891.md): Owlfiles File Manager 12.0.1 Cross-Site Scripting via HTTP Server (CVSS 5.1, Skyjos Owlfiles File Manager)
- [CVE-2022-50890](https://cve.now/CVE-2022-50890.md): Owlfiles File Manager 12.0.1 - Path Traversal (CVSS 8.7, Skyjos Owlfiles File Manager)
- [CVE-2022-50808](https://cve.now/CVE-2022-50808.md): CoolerMaster MasterPlus 1.8.5 - 'MPService' Unquoted Service Path (CVSS 8.5, Cooler Master Technology Cooler Master MasterPlus)
- [CVE-2022-50806](https://cve.now/CVE-2022-50806.md): 4images 1.9 - Remote Command Execution (RCE) (CVSS 8.6, 4Homepages 4images)
- [CVE-2022-50805](https://cve.now/CVE-2022-50805.md): Senayan Library Management System 9.0.0 - SQL Injection (CVSS 8.8, SLIMS Senayan Library Management System)
- [CVE-2022-50693](https://cve.now/CVE-2022-50693.md): Splashtop 8.71.12001.0 - Unquoted Service Path (CVSS 8.5, Splashtop)
- [CVE-2021-47751](https://cve.now/CVE-2021-47751.md): CuteEditor for PHP 6.6 - Directory Traversal (CVSS 5.3, Phphtmledit CuteEditor)
- [CVE-2021-47749](https://cve.now/CVE-2021-47749.md): YouPHPTube \<= 7.8 - Directory Traversal (CVSS 8.7, YouPHPTube)
- [CVE-2020-36911](https://cve.now/CVE-2020-36911.md): Covenant 0.5 - Remote Code Execution (RCE) (CVSS 9.3, Cobbr Covenant)
- [CVE-2026-23478](https://cve.now/CVE-2026-23478.md): Cal.com has an Authentication Bypass via Unvalidated Email in Custom JWT Callback (CVSS 10.0, calcom cal.com)
- [CVE-2025-68658](https://cve.now/CVE-2025-68658.md): Open Source Point of Sale (opensourcepos) Stored XSS in Configuration (Information) – Company Name field (CVSS 4.3, opensourcepos)
- [CVE-2025-68947](https://cve.now/CVE-2025-68947.md): NSecsoft NSecKrnl process termination privilege escalation (CVSS 4.7, NSecsoft NSecKrnl)
- [CVE-2026-0543](https://cve.now/CVE-2026-0543.md): Improper Input Validation in Kibana Email Connector Leading to Excessive Allocation (CVSS 6.5, Elastic Kibana)
- [CVE-2026-0531](https://cve.now/CVE-2026-0531.md): Allocation of Resources Without Limits or Throttling in Kibana Fleet (CVSS 6.5, Elastic Kibana)
- [CVE-2026-0530](https://cve.now/CVE-2026-0530.md): Allocation of Resources Without Limits or Throttling in Kibana Leading to Excessive Allocation (CVSS 6.5, Elastic Kibana)
- [CVE-2026-0528](https://cve.now/CVE-2026-0528.md): Improper Input Validation in Metricbeat Leading to Denial of Service (CVSS 6.5, Elastic Metricbeat · github.com/elastic/beats +1)
- [CVE-2026-22871](https://cve.now/CVE-2026-22871.md): GuardDog Path Traversal Vulnerability Leads to Arbitrary File Overwrite and RCE (CVSS 8.7, DataDog guarddog · guarddog)
- [CVE-2026-22870](https://cve.now/CVE-2026-22870.md): GuardDog Zip Bomb Vulnerability in safe\_extract() Allows DoS (CVSS 7.1, DataDog guarddog · guarddog)
- [CVE-2025-15056](https://cve.now/CVE-2025-15056.md): Quill 2.0.3 - Lack of data validation in HTML export allowing XSS (CVSS 5.1, Slab Quill · quill)
- [CVE-2026-22869](https://cve.now/CVE-2026-22869.md): Eigent Allows Arbitrary Code Execution via pull\_request\_target CI Workflow (CVSS 8.9, eigent-ai eigent)
- [CVE-2026-22868](https://cve.now/CVE-2026-22868.md): go-ethereum has a DoS via malicious p2p message (CVSS 7.1, go-ethereum · github.com/ethereum/go-ethereum)
- [CVE-2026-22862](https://cve.now/CVE-2026-22862.md): go-ethereum has a DoS via malicious p2p message (CVSS 7.1, go-ethereum · github.com/ethereum/go-ethereum)
- [CVE-2026-22861](https://cve.now/CVE-2026-22861.md): iccDEV has a heap-buffer-overflow in SIccCalcOp::Describe() at IccProfLib/IccMpeCalc.cpp (CVSS 8.8, InternationalColorConsortium iccDEV)
- [CVE-2026-21301](https://cve.now/CVE-2026-21301.md): Substance3D - Modeler | NULL Pointer Dereference (CWE-476) (CVSS 5.5, Adobe Substance3D - Modeler)
- [CVE-2026-21299](https://cve.now/CVE-2026-21299.md): Substance3D - Modeler | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance3D - Modeler)
- [CVE-2026-21298](https://cve.now/CVE-2026-21298.md): Substance3D - Modeler | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance3D - Modeler)
- [CVE-2026-21300](https://cve.now/CVE-2026-21300.md): Substance3D - Modeler | NULL Pointer Dereference (CWE-476) (CVSS 5.5, Adobe Substance3D - Modeler)
- [CVE-2026-21303](https://cve.now/CVE-2026-21303.md): Substance3D - Modeler | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Substance3D - Modeler)
- [CVE-2026-21302](https://cve.now/CVE-2026-21302.md): Substance3D - Modeler | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Substance3D - Modeler)
- [CVE-2025-37186](https://cve.now/CVE-2025-37186.md): Local Privilege Escalation Vulnerability in HPE Aruba Networking Virtual Intranet Access (VIA) Client for Linux (CVSS 7.8, Hewlett Packard Enterprise (HPE) Virtual Intranet Access)
- [CVE-2025-37179](https://cve.now/CVE-2025-37179.md): Out-of-Bounds Read Vulnerabilities Leading to Process Crash in AOS-8 Operating System (CVSS 5.3, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2025-37178](https://cve.now/CVE-2025-37178.md): Out-of-Bounds Read Vulnerabilities Leading to Process Crash in AOS-8 Operating System (CVSS 5.3, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2025-37177](https://cve.now/CVE-2025-37177.md): Authenticated Arbitrary File Deletion Vulnerability in AOS-10 or AOS-8 Command Line Interface (CLI) (CVSS 6.5, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2025-37176](https://cve.now/CVE-2025-37176.md): Authenticated Command Injection Vulnerability in an AOS-8 operating system's internal workflow (CVSS 6.5, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2025-37175](https://cve.now/CVE-2025-37175.md): Authenticated Arbitrary File Upload Vulnerability in AOS-10 or AOS-8 Web-Based Management Interface (CVSS 7.2, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-21308](https://cve.now/CVE-2026-21308.md): Substance3D - Designer | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Substance 3D Designer)
- [CVE-2026-21307](https://cve.now/CVE-2026-21307.md): Substance3D - Designer | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance 3D Designer)
- [CVE-2025-37174](https://cve.now/CVE-2025-37174.md): Authenticated Arbitrary File Write Vulnerability in AOS 10 and AOS-8 Web-Based Management Interface (CVSS 7.2, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2025-37173](https://cve.now/CVE-2025-37173.md): Improper Input Handling Vulnerability in Authenticated Configuration API Endpoint (AOS-10/AOS-8 Web UI) (CVSS 7.2, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2025-37172](https://cve.now/CVE-2025-37172.md): Authenticated Command Injection Vulnerabilities in AOS-8 Web-Based Management Interface (CVSS 7.2, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2025-37171](https://cve.now/CVE-2025-37171.md): Authenticated Command Injection Vulnerabilities in AOS-8 Web-Based Management Interface (CVSS 7.2, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2025-37170](https://cve.now/CVE-2025-37170.md): Authenticated Command Injection Vulnerabilities in AOS-8 Web-Based Management Interface (CVSS 7.2, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2025-37169](https://cve.now/CVE-2025-37169.md): Stack Overflow Vulnerability in AOS-10 Web-Based Management Interface (CVSS 7.2, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2025-37168](https://cve.now/CVE-2025-37168.md): Unauthenticated Arbitrary File Deletion Vulnerability in AOS-8 Operating System (CVSS 8.2, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-21306](https://cve.now/CVE-2026-21306.md): Substance3D - Sampler | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance 3D Sampler)
- [CVE-2026-22817](https://cve.now/CVE-2026-22817.md): JWT Algorithm Confusion via Unsafe Default (HS256) in Hono JWT Middleware Allows Token Forgery and Auth Bypass (CVSS 8.2, honojs hono · hono)
- [CVE-2026-22818](https://cve.now/CVE-2026-22818.md): JWT algorithm confusion in Hono JWK Auth Middleware when JWK lacks "alg" (untrusted header.alg fallback) (CVSS 8.2, honojs hono · hono)
- [CVE-2026-21287](https://cve.now/CVE-2026-21287.md): Substance3D - Stager | Use After Free (CWE-416) (CVSS 7.8, Adobe Substance3D - Stager)
- [CVE-2026-22814](https://cve.now/CVE-2026-22814.md): Mass Assignment in AdonisJS Lucid Allows Overwriting Internal ORM State (CVSS 8.2, adonisjs lucid · @adonisjs/lucid)
- [CVE-2026-22809](https://cve.now/CVE-2026-22809.md): tarteaucitron.js has Regular Expression Denial of Service (ReDoS) vulnerability (CVSS 4.4, AmauriC tarteaucitron.js · tarteaucitronjs)
- [CVE-2026-21305](https://cve.now/CVE-2026-21305.md): Substance3D - Painter | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance3D - Painter)
- [CVE-2025-68925](https://cve.now/CVE-2025-68925.md): Jervis has a JWT Algorithm Confusion Vulnerability (CVSS 6.9, samrocketman jervis · net.gleske:jervis)
- [CVE-2025-68704](https://cve.now/CVE-2025-68704.md): Jervis has a Weak Random for Timing Attack Mitigation (CVSS 8.2, samrocketman jervis · net.gleske:jervis)
- [CVE-2025-68703](https://cve.now/CVE-2025-68703.md): Jervis has a Salt for PBKDF2 derived from password (CVSS 8.7, samrocketman jervis · net.gleske:jervis)
- [CVE-2025-68702](https://cve.now/CVE-2025-68702.md): Jervis has a SHA-256 Hex String Padding Bug (CVSS 8.7, samrocketman jervis · net.gleske:jervis)
- [CVE-2025-68701](https://cve.now/CVE-2025-68701.md): Jervis has Deterministic AES IV Derivation from Passphrase (CVSS 8.7, samrocketman jervis · net.gleske:jervis)
- [CVE-2025-68931](https://cve.now/CVE-2025-68931.md): Jervis has AES CBC Mode Without Authentication (CVSS 8.7, samrocketman jervis · net.gleske:jervis)
- [CVE-2025-68698](https://cve.now/CVE-2025-68698.md): Jervis has an RSA PKCS#1 v1.5 Padding Vulnerability (CVSS 8.7, samrocketman jervis · net.gleske:jervis)
- [CVE-2026-22791](https://cve.now/CVE-2026-22791.md): openCryptoki incorrectly calculates the buffer size in C\_WrapKey with CKM\_ECDH\_AES\_KEY\_WRAP (CVSS 6.6, opencryptoki)
- [CVE-2026-21283](https://cve.now/CVE-2026-21283.md): Bridge | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Bridge)
- [CVE-2026-21281](https://cve.now/CVE-2026-21281.md): InCopy | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe InCopy)
- [CVE-2025-68949](https://cve.now/CVE-2025-68949.md): n8n has a Webhook Node IP Whitelist Bypass via Partial String Matching (CVSS 5.3, n8n-io n8n · n8n)
- [CVE-2026-21280](https://cve.now/CVE-2026-21280.md): Illustrator | Untrusted Search Path (CWE-426) (CVSS 8.6, Adobe Illustrator Desktop)
- [CVE-2026-21288](https://cve.now/CVE-2026-21288.md): Illustrator | NULL Pointer Dereference (CWE-476) (CVSS 5.5, Adobe Illustrator Desktop)
- [CVE-2026-21277](https://cve.now/CVE-2026-21277.md): InDesign Desktop | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2026-21304](https://cve.now/CVE-2026-21304.md): InDesign Desktop | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2026-21275](https://cve.now/CVE-2026-21275.md): InDesign Desktop | Access of Uninitialized Pointer (CWE-824) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2026-21278](https://cve.now/CVE-2026-21278.md): InDesign Desktop | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe InDesign Desktop)
- [CVE-2026-21276](https://cve.now/CVE-2026-21276.md): InDesign Desktop | Access of Uninitialized Pointer (CWE-824) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2025-68271](https://cve.now/CVE-2025-68271.md): Unauthenticated Remote Code Execution in openc3-api (CVSS 10.0, OpenC3 cosmos · openc3)
- [CVE-2026-21267](https://cve.now/CVE-2026-21267.md): Dreamweaver Desktop | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) (CVSS 8.6, Adobe Dreamweaver Desktop)
- [CVE-2026-21271](https://cve.now/CVE-2026-21271.md): Dreamweaver Desktop | Improper Input Validation (CWE-20) (CVSS 8.6, Adobe Dreamweaver Desktop)
- [CVE-2026-21274](https://cve.now/CVE-2026-21274.md): Dreamweaver Desktop | Incorrect Authorization (CWE-863) (CVSS 7.8, Adobe Dreamweaver Desktop)
- [CVE-2026-21272](https://cve.now/CVE-2026-21272.md): Dreamweaver Desktop | Improper Input Validation (CWE-20) (CVSS 8.6, Adobe Dreamweaver Desktop)
- [CVE-2026-21268](https://cve.now/CVE-2026-21268.md): Dreamweaver Desktop | Improper Input Validation (CWE-20) (CVSS 8.6, Adobe Dreamweaver Desktop)
- [CVE-2026-21226](https://cve.now/CVE-2026-21226.md): Azure Core shared client library for Python Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Azure Core shared client library for Python · azu…)
- [CVE-2026-20941](https://cve.now/CVE-2026-20941.md): Host Process for Windows Tasks Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-20958](https://cve.now/CVE-2026-20958.md): Microsoft SharePoint Information Disclosure Vulnerability (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-20957](https://cve.now/CVE-2026-20957.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2026-20952](https://cve.now/CVE-2026-20952.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2026-20950](https://cve.now/CVE-2026-20950.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2026-20949](https://cve.now/CVE-2026-20949.md): Microsoft Excel Security Feature Bypass Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-20948](https://cve.now/CVE-2026-20948.md): Microsoft Word Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office +3)
- [CVE-2026-20939](https://cve.now/CVE-2026-20939.md): Windows File Explorer Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-20937](https://cve.now/CVE-2026-20937.md): Windows File Explorer Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-20936](https://cve.now/CVE-2026-20936.md): Windows NDIS Information Disclosure Vulnerability (CVSS 4.3, Microsoft Windows)
- [CVE-2026-20935](https://cve.now/CVE-2026-20935.md): Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability (CVSS 6.2, Microsoft Windows)
- [CVE-2026-20931](https://cve.now/CVE-2026-20931.md): Windows Telephony Service Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows)
- [CVE-2026-20929](https://cve.now/CVE-2026-20929.md): Windows HTTP.sys Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-20874](https://cve.now/CVE-2026-20874.md): Windows Management Services Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-20873](https://cve.now/CVE-2026-20873.md): Windows Management Services Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-20872](https://cve.now/CVE-2026-20872.md): NTLM Hash Disclosure Spoofing Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-20871](https://cve.now/CVE-2026-20871.md): Desktop Window Manager Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-20870](https://cve.now/CVE-2026-20870.md): Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-20868](https://cve.now/CVE-2026-20868.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-20867](https://cve.now/CVE-2026-20867.md): Windows Management Services Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-20866](https://cve.now/CVE-2026-20866.md): Windows Management Services Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-20863](https://cve.now/CVE-2026-20863.md): Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-20862](https://cve.now/CVE-2026-20862.md): Windows Management Services Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-20861](https://cve.now/CVE-2026-20861.md): Windows Management Services Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-21219](https://cve.now/CVE-2026-21219.md): Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability (CVSS 7.0, Microsoft Windows SDK)
- [CVE-2026-20854](https://cve.now/CVE-2026-20854.md): Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-20853](https://cve.now/CVE-2026-20853.md): Windows WalletService Elevation of Privilege Vulnerability (CVSS 7.4, Microsoft Windows)
- [CVE-2026-20849](https://cve.now/CVE-2026-20849.md): Windows Kerberos Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-20848](https://cve.now/CVE-2026-20848.md): Windows SMB Server Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-20843](https://cve.now/CVE-2026-20843.md): Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-20947](https://cve.now/CVE-2026-20947.md): Microsoft SharePoint Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-21224](https://cve.now/CVE-2026-21224.md): Azure Connected Machine Agent Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Azure Connected Machine Agent)
- [CVE-2026-21221](https://cve.now/CVE-2026-21221.md): Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-20830](https://cve.now/CVE-2026-20830.md): Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows Server)
- [CVE-2026-20963](https://cve.now/CVE-2026-20963.md): Microsoft SharePoint Remote Code Execution Vulnerability (CVSS 9.8, KEV, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-20959](https://cve.now/CVE-2026-20959.md): Microsoft SharePoint Server Spoofing Vulnerability (CVSS 4.6, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-20956](https://cve.now/CVE-2026-20956.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-20955](https://cve.now/CVE-2026-20955.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2026-20953](https://cve.now/CVE-2026-20953.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2026-20951](https://cve.now/CVE-2026-20951.md): Microsoft SharePoint Server Remote Code Execution Vulnerability (CVSS 7.8, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-20946](https://cve.now/CVE-2026-20946.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2026-20944](https://cve.now/CVE-2026-20944.md): Microsoft Word Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC f…)
- [CVE-2026-20943](https://cve.now/CVE-2026-20943.md): Microsoft Office Click-To-Run Remote Code Execution Vulnerability (CVSS 7.0, Microsoft Office · Microsoft SharePoint Enterprise Server +1)
- [CVE-2026-20940](https://cve.now/CVE-2026-20940.md): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-20938](https://cve.now/CVE-2026-20938.md): Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-20934](https://cve.now/CVE-2026-20934.md): Windows SMB Server Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-20932](https://cve.now/CVE-2026-20932.md): Windows File Explorer Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-20927](https://cve.now/CVE-2026-20927.md): Windows SMB Server Denial of Service Vulnerability (CVSS 5.3, Microsoft Windows)
- [CVE-2026-20926](https://cve.now/CVE-2026-20926.md): Windows SMB Server Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-20925](https://cve.now/CVE-2026-20925.md): NTLM Hash Disclosure Spoofing Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-20924](https://cve.now/CVE-2026-20924.md): Windows Management Services Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-20923](https://cve.now/CVE-2026-20923.md): Windows Management Services Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-20922](https://cve.now/CVE-2026-20922.md): Windows NTFS Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-20921](https://cve.now/CVE-2026-20921.md): Windows SMB Server Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-20920](https://cve.now/CVE-2026-20920.md): Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-20919](https://cve.now/CVE-2026-20919.md): Windows SMB Server Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-20918](https://cve.now/CVE-2026-20918.md): Windows Management Services Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-20877](https://cve.now/CVE-2026-20877.md): Windows Management Services Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-20876](https://cve.now/CVE-2026-20876.md): Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability (CVSS 6.7, Microsoft Windows)
- [CVE-2026-20875](https://cve.now/CVE-2026-20875.md): Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-20869](https://cve.now/CVE-2026-20869.md): Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-20865](https://cve.now/CVE-2026-20865.md): Windows Management Services Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-20864](https://cve.now/CVE-2026-20864.md): Windows Connected Devices Platform Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-20860](https://cve.now/CVE-2026-20860.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-20859](https://cve.now/CVE-2026-20859.md): Windows Kernel-Mode Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-20858](https://cve.now/CVE-2026-20858.md): Windows Management Services Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-20857](https://cve.now/CVE-2026-20857.md): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-20856](https://cve.now/CVE-2026-20856.md): Windows Server Update Service (WSUS) Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-20852](https://cve.now/CVE-2026-20852.md): Windows Hello Tampering Vulnerability (CVSS 7.7, Microsoft Windows)
- [CVE-2026-20851](https://cve.now/CVE-2026-20851.md): Capability Access Management Service (camsvc) Information Disclosure Vulnerability (CVSS 6.2, Microsoft Windows)
- [CVE-2026-20847](https://cve.now/CVE-2026-20847.md): Microsoft Windows File Explorer Spoofing Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-20844](https://cve.now/CVE-2026-20844.md): Windows Clipboard Server Elevation of Privilege Vulnerability (CVSS 7.4, Microsoft Windows)
- [CVE-2026-20842](https://cve.now/CVE-2026-20842.md): Microsoft DWM Core Library Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-20840](https://cve.now/CVE-2026-20840.md): Windows NTFS Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-20839](https://cve.now/CVE-2026-20839.md): Windows Client-Side Caching (CSC) Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-20838](https://cve.now/CVE-2026-20838.md): Windows Kernel Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-20837](https://cve.now/CVE-2026-20837.md): Windows Media Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-20836](https://cve.now/CVE-2026-20836.md): DirectX Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-20835](https://cve.now/CVE-2026-20835.md): Capability Access Management Service (camsvc) Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-20834](https://cve.now/CVE-2026-20834.md): Windows Spoofing Vulnerability (CVSS 4.6, Microsoft Windows)
- [CVE-2026-20833](https://cve.now/CVE-2026-20833.md): Windows Kerberos Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows Server 2008 R2 Service Pack · Microsof… +1)
- [CVE-2026-20832](https://cve.now/CVE-2026-20832.md): Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-20831](https://cve.now/CVE-2026-20831.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-20829](https://cve.now/CVE-2026-20829.md): TPM Trustlet Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-20828](https://cve.now/CVE-2026-20828.md): Windows rndismp6.sys Information Disclosure Vulnerability (CVSS 4.6, Microsoft Windows)
- [CVE-2026-20827](https://cve.now/CVE-2026-20827.md): Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-20826](https://cve.now/CVE-2026-20826.md): Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-20825](https://cve.now/CVE-2026-20825.md): Windows Hyper-V Information Disclosure Vulnerability (CVSS 4.4, Microsoft Windows)
- [CVE-2026-20824](https://cve.now/CVE-2026-20824.md): Windows Remote Assistance Security Feature Bypass Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-20823](https://cve.now/CVE-2026-20823.md): Windows File Explorer Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-20822](https://cve.now/CVE-2026-20822.md): Windows Graphics Component Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-20821](https://cve.now/CVE-2026-20821.md): Remote Procedure Call Information Disclosure Vulnerability (CVSS 6.2, Microsoft Windows)
- [CVE-2026-20820](https://cve.now/CVE-2026-20820.md): Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-20819](https://cve.now/CVE-2026-20819.md): Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-20818](https://cve.now/CVE-2026-20818.md): Windows Kernel Information Disclosure Vulnerability (CVSS 6.2, Microsoft Windows Server)
- [CVE-2026-20817](https://cve.now/CVE-2026-20817.md): Windows Error Reporting Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-20816](https://cve.now/CVE-2026-20816.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-20815](https://cve.now/CVE-2026-20815.md): Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-20814](https://cve.now/CVE-2026-20814.md): DirectX Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-20812](https://cve.now/CVE-2026-20812.md): LDAP Tampering Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-20811](https://cve.now/CVE-2026-20811.md): Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-20810](https://cve.now/CVE-2026-20810.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-20809](https://cve.now/CVE-2026-20809.md): Windows Kernel Memory Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-20808](https://cve.now/CVE-2026-20808.md): Windows File Explorer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-20805](https://cve.now/CVE-2026-20805.md): Desktop Window Manager Information Disclosure Vulnerability (CVSS 5.5, KEV, Microsoft Windows)
- [CVE-2026-20804](https://cve.now/CVE-2026-20804.md): Windows Hello Tampering Vulnerability (CVSS 7.7, Microsoft Windows)
- [CVE-2026-20965](https://cve.now/CVE-2026-20965.md): Windows Admin Center Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Windows Admin Center in Azure Portal)
- [CVE-2026-20803](https://cve.now/CVE-2026-20803.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 7.2, Microsoft SQL Server)
- [CVE-2026-0386](https://cve.now/CVE-2026-0386.md): Windows Deployment Services Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows Server 2008 R2 Service Pack · Microsof… +1)
- [CVE-2026-21265](https://cve.now/CVE-2026-21265.md): Secure Boot Certificate Expiration Security Feature Bypass Vulnerability (CVSS 6.4, Microsoft Windows)
- [CVE-2026-20962](https://cve.now/CVE-2026-20962.md): Dynamic Root of Trust for Measurement (DRTM) Information Disclosure Vulnerability (CVSS 4.4, Microsoft Windows)
- [CVE-2025-37166](https://cve.now/CVE-2025-37166.md): Unexpected shutdown in HPE Instant On Access Points after processing specific packets (CVSS 7.5, Hewlett Packard Enterprise (HPE) Instant On)
- [CVE-2025-37165](https://cve.now/CVE-2025-37165.md): Exposure of VLAN information in unintended network interfaces (CVSS 7.5, Hewlett Packard Enterprise (HPE) Instant On)
- [CVE-2025-10865](https://cve.now/CVE-2025-10865.md): GPU DDK - DevmemIntGetReservationData does not ref the PMR it returns (CVSS 7.8, Imagination Technologies Graphics DDK)
- [CVE-2025-58411](https://cve.now/CVE-2025-58411.md): GPU DDK - Reservation::psMappedPMR can change while used by a freelist -\> UAF (CVSS 8.8, Imagination Technologies Graphics DDK)
- [CVE-2025-58409](https://cve.now/CVE-2025-58409.md): GPU DDK - Disguised freelist buffers passed to RGXCreateHWRTDataSet can cause arbitrary physical memory writes corrupting memory (CVSS 3.5, Imagination Technologies Graphics DDK)
- [CVE-2025-62182](https://cve.now/CVE-2025-62182.md): Pega Customer Service Framework versions 8.7.0 through 25.1.0 are affected by a Unrestricted file upload vulnerability, where a privileged user could potentially upload a malicious file. (CVSS 5.3, Pegasystems Pega Infinity)
- [CVE-2025-46685](https://cve.now/CVE-2025-46685.md): Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File With Insecure Permissions vulnerability. (CVSS 7.5, Dell SupportAssist OS Recovery)
- [CVE-2025-8090](https://cve.now/CVE-2025-8090.md): Vulnerability in the QNX Neutrino Kernel impacts the QNX Software Development Platform and QNX OS for Safety (CVSS 6.2, BlackBerry QNX Software Development Platform · BlackBerr… +1)
- [CVE-2025-25249](https://cve.now/CVE-2025-25249.md): A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.1 (CVSS 7.4, KEV, Fortinet FortiSwitchManager · Fortinet FortiOS)
- [CVE-2025-47855](https://cve.now/CVE-2025-47855.md): An exposure of sensitive information to an unauthorized actor \[CWE-200\] vulnerability in Fortinet FortiFone 7.0.0 through 7.0.1, FortiFone 3 (CVSS 9.3, Fortinet FortiFone)
- [CVE-2025-67685](https://cve.now/CVE-2025-67685.md): A Server-Side Request Forgery (SSRF) vulnerability \[CWE-918\] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.4, FortiSandbox 4.4 al (CVSS 3.4, Fortinet FortiSandbox)
- [CVE-2025-58693](https://cve.now/CVE-2025-58693.md): An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiVoice 7.2.0 through 7.2.2, (CVSS 5.7, Fortinet FortiVoice)
- [CVE-2025-59922](https://cve.now/CVE-2025-59922.md): An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability \[CWE-89\] vulnerability in Fortinet For (CVSS 6.8, Fortinet FortiClientEMS)
- [CVE-2025-64155](https://cve.now/CVE-2025-64155.md): An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSIEM 7.4.0, For (CVSS 9.4, Fortinet FortiSIEM)
- [CVE-2025-25176](https://cve.now/CVE-2025-25176.md): GPU DDK - GPU Register value contents leaked from secure workloads to non-secure world (CVSS 9.1, Imagination Technologies Graphics DDK)
- [CVE-2025-46684](https://cve.now/CVE-2025-46684.md): Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File With Insecure Permissions vulnerability. (CVSS 6.6, Dell SupportAssist OS Recovery,)
- [CVE-2026-0404](https://cve.now/CVE-2026-0404.md): Insufficient input validation in NETGEAR Orbi routers (CVSS 4.8, NETGEAR RBRE960 · NETGEAR RBSE960 +10)
- [CVE-2026-0408](https://cve.now/CVE-2026-0408.md): Path traversal vulnerability in Netgear WiFi Range Extenders (CVSS 6.1, NETGEAR EX5000 · NETGEAR EX3110 +2)
- [CVE-2026-0407](https://cve.now/CVE-2026-0407.md): Authentication bypass in NETGEAR WiFi Range Extenders via network adjacent attacks (CVSS 6.1, NETGEAR EX5000 · NETGEAR EX3110 +2)
- [CVE-2026-0406](https://cve.now/CVE-2026-0406.md): Insufficient input validation in NETGEAR Nighthawk router XR1000v2 (CVSS 6.1, NETGEAR XR1000v2)
- [CVE-2026-0405](https://cve.now/CVE-2026-0405.md): Authentication Bypass in NETGEAR Orbi Devices (CVSS 6.1, NETGEAR RBE970 · NETGEAR RBE971 +23)
- [CVE-2026-0403](https://cve.now/CVE-2026-0403.md): Insufficient input validation in NETGEAR Orbi routers (CVSS 1.1, NETGEAR RBR750 · NETGEAR RBS750 +8)
- [CVE-2025-12548](https://cve.now/CVE-2025-12548.md): Github.com/che-incubator/che-code: eclipse che — unauthenticated rce and secret exfiltration via tcp/3333 (CVSS 9.0, Red Hat OpenShift Dev Spaces (RHOSDS))
- [CVE-2025-71101](https://cve.now/CVE-2025-71101.md): platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing (CVSS 7.1, Linux)
- [CVE-2025-71100](https://cve.now/CVE-2025-71100.md): wifi: rtlwifi: 8192cu: fix tid out of range in rtl92cu\_tx\_fill\_desc() (CVSS 7.6, Linux)
- [CVE-2025-71099](https://cve.now/CVE-2025-71099.md): drm/xe/oa: Fix potential UAF in xe\_oa\_add\_config\_ioctl() (CVSS 7.8, Linux)
- [CVE-2025-71098](https://cve.now/CVE-2025-71098.md): ip6\_gre: make ip6gre\_header() robust (no CVSS, Linux)
- [CVE-2025-71097](https://cve.now/CVE-2025-71097.md): ipv4: Fix reference count leak when using error routes with nexthop objects (no CVSS, Linux)
- [CVE-2025-71096](https://cve.now/CVE-2025-71096.md): RDMA/core: Check for the presence of LS\_NLA\_TYPE\_DGID correctly (no CVSS, Linux)
- [CVE-2025-71095](https://cve.now/CVE-2025-71095.md): net: stmmac: fix the crash issue for zero copy XDP\_TX action (CVSS 9.1, Linux)
- [CVE-2025-71094](https://cve.now/CVE-2025-71094.md): net: usb: asix: validate PHY address before use (no CVSS, Linux)
- [CVE-2025-71093](https://cve.now/CVE-2025-71093.md): e1000: fix OOB in e1000\_tbi\_should\_accept() (CVSS 9.1, Linux)
- [CVE-2025-71092](https://cve.now/CVE-2025-71092.md): RDMA/bnxt\_re: Fix OOB write in bnxt\_re\_copy\_err\_stats() (CVSS 7.8, Linux)
- [CVE-2025-71091](https://cve.now/CVE-2025-71091.md): team: fix check for port enabled in team\_queue\_override\_port\_prio\_changed() (no CVSS, Linux)
- [CVE-2025-71090](https://cve.now/CVE-2025-71090.md): nfsd: fix nfsd\_file reference leak in nfsd4\_add\_rdaccess\_to\_wrdeleg() (CVSS 7.5, Linux)
- [CVE-2025-71089](https://cve.now/CVE-2025-71089.md): iommu: disable SVA when CONFIG\_X86 is set (CVSS 7.8, Linux)
- [CVE-2025-71088](https://cve.now/CVE-2025-71088.md): mptcp: fallback earlier on simult connection (no CVSS, Linux)
- [CVE-2025-71087](https://cve.now/CVE-2025-71087.md): iavf: fix off-by-one issues in iavf\_config\_rss\_reg() (no CVSS, Linux)
- [CVE-2025-71086](https://cve.now/CVE-2025-71086.md): net: rose: fix invalid array index in rose\_kill\_by\_device() (no CVSS, Linux)
- [CVE-2025-71085](https://cve.now/CVE-2025-71085.md): ipv6: BUG() in pskb\_expand\_head() as part of calipso\_skbuff\_setattr() (CVSS 7.5, Linux)
- [CVE-2025-71084](https://cve.now/CVE-2025-71084.md): RDMA/cm: Fix leaking the multicast GID table reference (no CVSS, Linux)
- [CVE-2025-71083](https://cve.now/CVE-2025-71083.md): drm/ttm: Avoid NULL pointer deref for evicted BOs (no CVSS, Linux)
- [CVE-2025-71082](https://cve.now/CVE-2025-71082.md): Bluetooth: btusb: revert use of devm\_kzalloc in btusb (CVSS 7.8, Linux)
- [CVE-2025-71081](https://cve.now/CVE-2025-71081.md): ASoC: stm32: sai: fix OF node leak on probe (no CVSS, Linux)
- [CVE-2025-71080](https://cve.now/CVE-2025-71080.md): ipv6: fix a BUG in rt6\_get\_pcpu\_route() under PREEMPT\_RT (CVSS 7.5, Linux)
- [CVE-2025-71079](https://cve.now/CVE-2025-71079.md): net: nfc: fix deadlock between nfc\_unregister\_device and rfkill\_fop\_write (no CVSS, Linux)
- [CVE-2025-71078](https://cve.now/CVE-2025-71078.md): powerpc/64s/slb: Fix SLB multihit issue during SLB preload (CVSS 7.8, Linux)
- [CVE-2025-71077](https://cve.now/CVE-2025-71077.md): tpm: Cap the number of PCR banks (no CVSS, Linux)
- [CVE-2025-71076](https://cve.now/CVE-2025-71076.md): drm/xe/oa: Limit num\_syncs to prevent oversized allocations (no CVSS, Linux)
- [CVE-2025-71075](https://cve.now/CVE-2025-71075.md): scsi: aic94xx: fix use-after-free in device removal path (no CVSS, Linux)
- [CVE-2025-71074](https://cve.now/CVE-2025-71074.md): functionfs: fix the open/removal races (CVSS 7.8, Linux)
- [CVE-2025-71073](https://cve.now/CVE-2025-71073.md): Input: lkkbd - disable pending work before freeing device (no CVSS, Linux)
- [CVE-2025-71072](https://cve.now/CVE-2025-71072.md): shmem: fix recovery on rename failures (CVSS 8.2, Linux)
- [CVE-2025-71071](https://cve.now/CVE-2025-71071.md): iommu/mediatek: fix use-after-free on probe deferral (no CVSS, Linux)
- [CVE-2025-71070](https://cve.now/CVE-2025-71070.md): ublk: clean up user copy references on ublk server exit (CVSS 7.8, Linux)
- [CVE-2025-71069](https://cve.now/CVE-2025-71069.md): f2fs: invalidate dentry cache on failed whiteout creation (no CVSS, Linux)
- [CVE-2025-71068](https://cve.now/CVE-2025-71068.md): svcrdma: bound check rq\_pages index in inline path (CVSS 9.8, Linux)
- [CVE-2025-71067](https://cve.now/CVE-2025-71067.md): ntfs: set dummy blocksize to read boot\_block when mounting (no CVSS, Linux)
- [CVE-2025-71066](https://cve.now/CVE-2025-71066.md): net/sched: ets: Always remove class from active list before deleting in ets\_qdisc\_change (CVSS 7.8, Linux)
- [CVE-2025-71065](https://cve.now/CVE-2025-71065.md): f2fs: fix to avoid potential deadlock (no CVSS, Linux)
- [CVE-2025-71064](https://cve.now/CVE-2025-71064.md): net: hns3: using the num\_tqps in the vf driver to apply for resources (no CVSS, Linux)
- [CVE-2025-68823](https://cve.now/CVE-2025-68823.md): ublk: fix deadlock when reading partition table (no CVSS, Linux)
- [CVE-2025-68822](https://cve.now/CVE-2025-68822.md): Input: alps - fix use-after-free bugs caused by dev3\_register\_work (CVSS 7.8, Linux)
- [CVE-2025-68821](https://cve.now/CVE-2025-68821.md): fuse: fix readahead reclaim deadlock (no CVSS, Linux)
- [CVE-2025-68820](https://cve.now/CVE-2025-68820.md): ext4: xattr: fix null pointer deref in ext4\_raw\_inode() (no CVSS, Linux)
- [CVE-2025-68819](https://cve.now/CVE-2025-68819.md): media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100\_i2c\_msg() (CVSS 7.8, Linux)
- [CVE-2025-68818](https://cve.now/CVE-2025-68818.md): scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" (CVSS 8.8, Linux)
- [CVE-2025-68817](https://cve.now/CVE-2025-68817.md): ksmbd: fix use-after-free in ksmbd\_tree\_connect\_put under concurrency (CVSS 9.8, Linux)
- [CVE-2025-68816](https://cve.now/CVE-2025-68816.md): net/mlx5: fw\_tracer, Validate format string parameters (no CVSS, Linux)
- [CVE-2025-68815](https://cve.now/CVE-2025-68815.md): net/sched: ets: Remove drr class from the active list if it changes to strict (CVSS 7.8, Linux)
- [CVE-2025-68814](https://cve.now/CVE-2025-68814.md): io\_uring: fix filename leak in \_\_io\_openat\_prep() (no CVSS, Linux)
- [CVE-2025-68813](https://cve.now/CVE-2025-68813.md): ipvs: fix ipv4 null-ptr-deref in route error path (no CVSS, Linux)
- [CVE-2025-68811](https://cve.now/CVE-2025-68811.md): svcrdma: use rc\_pageoff for memcpy byte offset (CVSS 9.8, Linux)
- [CVE-2025-68810](https://cve.now/CVE-2025-68810.md): KVM: Disallow toggling KVM\_MEM\_GUEST\_MEMFD on an existing memslot (CVSS 7.8, Linux)
- [CVE-2025-68809](https://cve.now/CVE-2025-68809.md): ksmbd: vfs: fix race on m\_flags in vfs\_cache (CVSS 9.1, Linux)
- [CVE-2025-68808](https://cve.now/CVE-2025-68808.md): media: vidtv: initialize local pointers upon transfer of memory ownership (CVSS 7.8, Linux)
- [CVE-2025-68807](https://cve.now/CVE-2025-68807.md): block: fix race between wbt\_enable\_default and IO submission (no CVSS, Linux)
- [CVE-2025-68806](https://cve.now/CVE-2025-68806.md): ksmbd: fix buffer validation by including null terminator size in EA length (CVSS 7.5, Linux)
- [CVE-2025-68805](https://cve.now/CVE-2025-68805.md): fuse: fix io-uring list corruption for terminated non-committed requests (CVSS 7.8, Linux)
- [CVE-2025-68804](https://cve.now/CVE-2025-68804.md): platform/chrome: cros\_ec\_ishtp: Fix UAF after unbinding driver (no CVSS, Linux)
- [CVE-2025-68803](https://cve.now/CVE-2025-68803.md): NFSD: NFSv4 file creation neglects setting ACL (CVSS 8.0, Linux)
- [CVE-2025-68802](https://cve.now/CVE-2025-68802.md): drm/xe: Limit num\_syncs to prevent oversized allocations (no CVSS, Linux)
- [CVE-2025-68801](https://cve.now/CVE-2025-68801.md): mlxsw: spectrum\_router: Fix neighbour use-after-free (CVSS 7.8, Linux)
- [CVE-2025-68800](https://cve.now/CVE-2025-68800.md): mlxsw: spectrum\_mr: Fix use-after-free when updating multicast route stats (CVSS 7.8, Linux)
- [CVE-2025-68799](https://cve.now/CVE-2025-68799.md): caif: fix integer underflow in cffrml\_receive() (CVSS 8.1, Linux)
- [CVE-2025-68798](https://cve.now/CVE-2025-68798.md): perf/x86/amd: Check event before enable to avoid GPF (no CVSS, Linux)
- [CVE-2025-68797](https://cve.now/CVE-2025-68797.md): char: applicom: fix NULL pointer dereference in ac\_ioctl (no CVSS, Linux)
- [CVE-2025-68796](https://cve.now/CVE-2025-68796.md): f2fs: fix to avoid updating zero-sized extent in extent cache (no CVSS, Linux)
- [CVE-2025-68795](https://cve.now/CVE-2025-68795.md): ethtool: Avoid overflowing userspace buffer on stats query (CVSS 7.8, Linux)
- [CVE-2025-68794](https://cve.now/CVE-2025-68794.md): iomap: adjust read range correctly for non-block-aligned positions (CVSS 9.8, Linux)
- [CVE-2025-68793](https://cve.now/CVE-2025-68793.md): drm/amdgpu: fix a job-\>pasid access race in gpu recovery (CVSS 7.8, Linux)
- [CVE-2025-68792](https://cve.now/CVE-2025-68792.md): tpm2-sessions: Fix out of range indexing in name\_size (CVSS 7.8, Linux)
- [CVE-2025-68791](https://cve.now/CVE-2025-68791.md): fuse: missing copy\_finish in fuse-over-io-uring argument copies (no CVSS, Linux)
- [CVE-2025-68790](https://cve.now/CVE-2025-68790.md): net/mlx5: Fix double unregister of HCA\_PORTS component (no CVSS, Linux)
- [CVE-2025-68788](https://cve.now/CVE-2025-68788.md): fsnotify: do not generate ACCESS/MODIFY events on child for special files (no CVSS, Linux)
- [CVE-2025-68787](https://cve.now/CVE-2025-68787.md): netrom: Fix memory leak in nr\_sendmsg() (no CVSS, Linux)
- [CVE-2025-68786](https://cve.now/CVE-2025-68786.md): ksmbd: skip lock-range check on equal size to avoid size==0 underflow (no CVSS, Linux)
- [CVE-2025-68785](https://cve.now/CVE-2025-68785.md): net: openvswitch: fix middle attribute validation in push\_nsh() action (CVSS 7.1, Linux)
- [CVE-2025-68784](https://cve.now/CVE-2025-68784.md): xfs: fix a UAF problem in xattr repair (no CVSS, Linux)
- [CVE-2025-68783](https://cve.now/CVE-2025-68783.md): ALSA: usb-mixer: us16x08: validate meter packet indices (no CVSS, Linux)
- [CVE-2025-68782](https://cve.now/CVE-2025-68782.md): scsi: target: Reset t\_task\_cdb pointer in error case (CVSS 7.5, Linux)
- [CVE-2025-68781](https://cve.now/CVE-2025-68781.md): usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal (no CVSS, Linux)
- [CVE-2025-68780](https://cve.now/CVE-2025-68780.md): sched/deadline: only set free\_cpus for online runqueues (no CVSS, Linux)
- [CVE-2025-68779](https://cve.now/CVE-2025-68779.md): net/mlx5e: Avoid unregistering PSP twice (no CVSS, Linux)
- [CVE-2025-68778](https://cve.now/CVE-2025-68778.md): btrfs: don't log conflicting inode if it's a dir moved in the current transaction (no CVSS, Linux)
- [CVE-2025-68777](https://cve.now/CVE-2025-68777.md): Input: ti\_am335x\_tsc - fix off-by-one error in wire\_order validation (no CVSS, Linux)
- [CVE-2025-68776](https://cve.now/CVE-2025-68776.md): net/hsr: fix NULL pointer dereference in prp\_get\_untagged\_frame() (no CVSS, Linux)
- [CVE-2025-68775](https://cve.now/CVE-2025-68775.md): net/handshake: duplicate handshake cancellations leak socket (CVSS 9.8, Linux)
- [CVE-2025-68774](https://cve.now/CVE-2025-68774.md): hfsplus: fix missing hfs\_bnode\_get() in \_\_hfs\_bnode\_create (CVSS 7.5, Linux)
- [CVE-2025-68773](https://cve.now/CVE-2025-68773.md): spi: fsl-cpm: Check length parity before switching to 16 bit mode (no CVSS, Linux)
- [CVE-2025-68772](https://cve.now/CVE-2025-68772.md): f2fs: fix to avoid updating compression context during writeback (no CVSS, Linux)
- [CVE-2025-68771](https://cve.now/CVE-2025-68771.md): ocfs2: fix kernel BUG in ocfs2\_find\_victim\_chain (no CVSS, Linux)
- [CVE-2025-68770](https://cve.now/CVE-2025-68770.md): bnxt\_en: Fix XDP\_TX path (CVSS 7.5, Linux)
- [CVE-2025-68769](https://cve.now/CVE-2025-68769.md): f2fs: fix return value of f2fs\_recover\_fsync\_data() (no CVSS, Linux)
- [CVE-2025-68768](https://cve.now/CVE-2025-68768.md): inet: frags: flush pending skbs in fqdir\_pre\_exit() (no CVSS, Linux)
- [CVE-2025-68767](https://cve.now/CVE-2025-68767.md): hfsplus: Verify inode mode when loading from disk (no CVSS, Linux)
- [CVE-2026-22755](https://cve.now/CVE-2026-22755.md): Legacy Vivotek Camera Firmware Command Injection in upload\_map.cgi (CVSS 9.3, Vivotek Affected device model numbers are FD8365, FD8365v2,…)
- [CVE-2025-36640](https://cve.now/CVE-2025-36640.md): Local Privilege Escalation (CVSS 7.3, Tenable Nessus Agent)
- [CVE-2025-13447](https://cve.now/CVE-2025-13447.md): OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster (CVSS 8.4, Progress Software LoadMaster)
- [CVE-2025-13444](https://cve.now/CVE-2025-13444.md): OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster (CVSS 8.4, Progress Software LoadMaster · Progress Software Multi Tena…)
- [CVE-2025-11669](https://cve.now/CVE-2025-11669.md): Broken Access Control (CVSS 8.1, Zohocorp ManageEngine PAM360 · Zohocorp ManageEngine Pas… +1)
- [CVE-2025-14507](https://cve.now/CVE-2025-14507.md): EventPrime - Events Calendar, Bookings and Tickets \<= 4.2.7.0 - Unauthenticated Sensitive Information Exposure via REST API (CVSS 5.3, metagauss EventPrime – Events Calendar, Bookings and Tickets)
- [CVE-2026-0684](https://cve.now/CVE-2026-0684.md): CP Image Store with Slideshow \<= 1.1.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Product Import (CVSS 4.3, codepeople CP Image Store with Slideshow)
- [CVE-2025-9427](https://cve.now/CVE-2025-9427.md): Admin reflected XSS (CVSS 8.4, Lemonsoft WordPress add-on)
- [CVE-2025-11250](https://cve.now/CVE-2025-11250.md): Authentication Bypass (CVSS 9.1, Zohocorp ManageEngine ADSelfService Plus)
- [CVE-2026-0892](https://cve.now/CVE-2026-0892.md): Memory safety bugs fixed in Firefox 147 and Thunderbird 147 (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-0891](https://cve.now/CVE-2026-0891.md): Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147 (CVSS 8.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-0890](https://cve.now/CVE-2026-0890.md): Spoofing issue in the DOM: Copy & Paste and Drag & Drop component (CVSS 5.4, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-0889](https://cve.now/CVE-2026-0889.md): Denial-of-service in the DOM: Service Workers component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-0888](https://cve.now/CVE-2026-0888.md): Information disclosure in the XML component (CVSS 5.3, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-0887](https://cve.now/CVE-2026-0887.md): Clickjacking issue, information disclosure in the PDF Viewer component (CVSS 4.3, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-0886](https://cve.now/CVE-2026-0886.md): Incorrect boundary conditions in the Graphics component (CVSS 5.3, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-0885](https://cve.now/CVE-2026-0885.md): Use-after-free in the JavaScript: GC component (CVSS 6.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-0884](https://cve.now/CVE-2026-0884.md): Use-after-free in the JavaScript Engine component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-0883](https://cve.now/CVE-2026-0883.md): Information disclosure in the Networking component (CVSS 5.3, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-0882](https://cve.now/CVE-2026-0882.md): Use-after-free in the IPC component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-0881](https://cve.now/CVE-2026-0881.md): Sandbox escape in the Messaging System component (CVSS 10.0, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-0880](https://cve.now/CVE-2026-0880.md): Sandbox escape due to integer overflow in the Graphics component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-0879](https://cve.now/CVE-2026-0879.md): Sandbox escape due to incorrect boundary conditions in the Graphics component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-0878](https://cve.now/CVE-2026-0878.md): Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVSS 8.0, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-0877](https://cve.now/CVE-2026-0877.md): Mitigation bypass in the DOM: Security component (CVSS 8.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-9435](https://cve.now/CVE-2025-9435.md): Path Traversal (CVSS 5.5, Zohocorp ManageEngine ADManager Plus)
- [CVE-2025-13774](https://cve.now/CVE-2025-13774.md): SQL injection leading to privilege escalation in Progress Flowmon ADS (CVSS 8.8, Progress Software Flowmon ADS)
- [CVE-2026-0859](https://cve.now/CVE-2026-0859.md): TYPO3 CMS Allows Insecure Deserialization via Mailer File Spool (CVSS 5.2, TYPO3 CMS · typo3/cms-core)
- [CVE-2025-59022](https://cve.now/CVE-2025-59022.md): TYPO3 CMS Allows Broken Access Control in Recycler Module (CVSS 7.1, TYPO3 CMS · typo3/cms-recycler)
- [CVE-2025-59021](https://cve.now/CVE-2025-59021.md): TYPO3 CMS Allows Broken Access Control in Redirects Module (CVSS 5.3, TYPO3 CMS · typo3/cms-redirects)
- [CVE-2025-59020](https://cve.now/CVE-2025-59020.md): TYPO3 CMS Allows Broken Access Control in Edit Document Controller (CVSS 5.3, TYPO3 CMS · typo3/cms-backend)
- [CVE-2025-14001](https://cve.now/CVE-2025-14001.md): WP Duplicate Page \<= 1.8 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Duplication (CVSS 5.4, ninjateam WP Duplicate Page)
- [CVE-2025-40944](https://cve.now/CVE-2025-40944.md): A vulnerability has been identified in SIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0) (All versions), SIMATIC ET 200MP IM 155-5 PN HF (6E (CVSS 7.5, Siemens SIMATIC ET 200AL IM 157-1 PN · Siemens SIMATIC… +10)
- [CVE-2025-40942](https://cve.now/CVE-2025-40942.md): A vulnerability has been identified in TeleControl Server Basic (All versions \< V3.1.2.4). (CVSS 8.8, Siemens TeleControl Server Basic)
- [CVE-2025-40805](https://cve.now/CVE-2025-40805.md): Affected devices do not properly enforce user authentication on specific API endpoints. (CVSS 10.0, Siemens Industrial Edge Cloud Device · Siemens Industri… +52)
- [CVE-2025-41717](https://cve.now/CVE-2025-41717.md): Config-Upload Code Injection (CVSS 8.8, Phoenix Contact TC ROUTER 3002T-3G · Phoenix Contact TC… +6)
- [CVE-2025-14829](https://cve.now/CVE-2025-14829.md): e-xact-hosted-payment \<= 2.0 - Unauthenticated Arbitrary File Deletion (CVSS 9.1, E-xact | Hosted Payment |)
- [CVE-2025-10915](https://cve.now/CVE-2025-10915.md): Dreamer Blog \<= 1.2 - Subscriber+ Arbitrary Plugin Installation (CVSS 9.8, Dreamer Blog)
- [CVE-2025-66177](https://cve.now/CVE-2025-66177.md): There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models. (CVSS 8.8, Hikvision DS-96xxxNI-Hx · Hikvision DS-96xxxNI-Ix +95)
- [CVE-2025-66176](https://cve.now/CVE-2025-66176.md): There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. (CVSS 8.8, Hikvision DS-K1T331 · Hikvision DS-K1T341A/K1T341B +16)
- [CVE-2026-0514](https://cve.now/CVE-2026-0514.md): Cross-Site Scripting (XSS) vulnerability in SAP Business Connector (CVSS 6.1, SAP\_SE SAP Business Connector)
- [CVE-2026-0513](https://cve.now/CVE-2026-0513.md): Open Redirect Vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog) (CVSS 4.7, SAP\_SE SAP Supplier Relationship Management)
- [CVE-2026-0511](https://cve.now/CVE-2026-0511.md): Multiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation) (CVSS 8.1, SAP\_SE SAP Fiori App)
- [CVE-2026-0510](https://cve.now/CVE-2026-0510.md): Obsolete Encryption Algorithm Used in NW AS Java UME User Mapping (CVSS 3.0, SAP\_SE NW AS Java UME User Mapping)
- [CVE-2026-0507](https://cve.now/CVE-2026-0507.md): OS Command Injection vulnerability in SAP Application Server for ABAP and SAP NetWeaver RFCSDK (CVSS 8.4, SAP\_SE SAP Application Server for ABAP and SAP NetWeaver RF…)
- [CVE-2026-0506](https://cve.now/CVE-2026-0506.md): Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform (CVSS 8.1, SAP\_SE SAP NetWeaver Application Server ABAP and ABAP Platf…)
- [CVE-2026-0504](https://cve.now/CVE-2026-0504.md): Insufficient Input Handling in JNDI Operations of SAP Identity Management (CVSS 3.8, SAP\_SE SAP Identity Management)
- [CVE-2026-0503](https://cve.now/CVE-2026-0503.md): Missing Authorization check in in SAP ERP Central Component and SAP S/4HANA (SAP EHS Management) (CVSS 6.4, SAP\_SE SAP ERP Central Component and SAP S/4HANA)
- [CVE-2026-0501](https://cve.now/CVE-2026-0501.md): SQL Injection Vulnerability in SAP S/4HANA Private Cloud and On-Premise (Financials � General Ledger) (CVSS 9.9, SAP\_SE SAP S/4HANA Private Cloud and On-Premise)
- [CVE-2026-0500](https://cve.now/CVE-2026-0500.md): Remote code execution in SAP Wily Introscope Enterprise Manager (WorkStation) (CVSS 9.6, SAP\_SE SAP Wily Introscope Enterprise Manager)
- [CVE-2026-0499](https://cve.now/CVE-2026-0499.md): Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal (CVSS 6.1, SAP\_SE SAP NetWeaver Enterprise Portal)
- [CVE-2026-0498](https://cve.now/CVE-2026-0498.md): Code Injection vulnerability in SAP S/4HANA (Private Cloud and On-Premise) (CVSS 9.1, SAP\_SE SAP S/4HANA)
- [CVE-2026-0497](https://cve.now/CVE-2026-0497.md): Missing Authorization check in Business Server Pages Application (Product Designer Web UI) (CVSS 4.3, SAP\_SE Business Server Pages Application)
- [CVE-2026-0496](https://cve.now/CVE-2026-0496.md): Multiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation) (CVSS 6.6, SAP\_SE SAP Fiori App)
- [CVE-2026-0495](https://cve.now/CVE-2026-0495.md): Multiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation) (CVSS 5.1, SAP\_SE SAP Fiori App)
- [CVE-2026-0494](https://cve.now/CVE-2026-0494.md): Information Disclosure vulnerability in SAP Fiori App (Intercompany Balance Reconciliation) (CVSS 4.3, SAP\_SE SAP Fiori App)
- [CVE-2026-0493](https://cve.now/CVE-2026-0493.md): Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App (Intercompany Balance Reconciliation) (CVSS 4.3, SAP\_SE SAP Fiori App)
- [CVE-2026-0492](https://cve.now/CVE-2026-0492.md): Privilege escalation vulnerability in SAP HANA database (CVSS 8.8, SAP\_SE SAP HANA database)
- [CVE-2026-0491](https://cve.now/CVE-2026-0491.md): Code Injection vulnerability in SAP Landscape Transformation (CVSS 9.1, SAP\_SE SAP Landscape Transformation)
- [CVE-2024-54855](https://cve.now/CVE-2024-54855.md): fabricators Ltd Vanilla OS 2 Core image v1.1.0 was discovered to contain static keys for the SSH service, allowing attackers to possibly exe (CVSS 6.4)
- [CVE-2025-25652](https://cve.now/CVE-2025-25652.md): In Eptura Archibus 2024.03.01.109, the "Run script" and "Server File" components of the "Database Update Wizard" are vulnerable to directory (CVSS 7.5)
- [CVE-2025-55462](https://cve.now/CVE-2025-55462.md): A CORS misconfiguration in Eramba Community and Enterprise Editions v3.26.0 allows an attacker-controlled Origin header to be reflected in t (CVSS 6.5)
- [CVE-2025-65783](https://cve.now/CVE-2025-65783.md): An arbitrary file upload vulnerability in the /utils/uploadFile component of Hubert Imoveis e Administracao Ltda Hub v2.0 1.27.3 allows atta (CVSS 9.8)
- [CVE-2025-65784](https://cve.now/CVE-2025-65784.md): Insecure permissions in Hubert Imoveis e Administracao Ltda Hub v2.0 1.27.3 allows authenticated attackers with low-level privileges to acce (CVSS 6.5)
- [CVE-2025-66698](https://cve.now/CVE-2025-66698.md): An issue in Semantic machines v5.4.8 allows attackers to bypass authentication via sending a crafted HTTP request to various API endpoints. (CVSS 8.6)
- [CVE-2025-68707](https://cve.now/CVE-2025-68707.md): An authentication bypass vulnerability in the Tongyu AX1800 Wi-Fi 6 Router with firmware 1.0.0 allows unauthenticated network-adjacent attac (CVSS 8.8)
- [CVE-2025-69990](https://cve.now/CVE-2025-69990.md): phpgurukul News Portal Project V4.1 has an Arbitrary File Deletion Vulnerability in remove\_file.php. (CVSS 9.1)
- [CVE-2025-69991](https://cve.now/CVE-2025-69991.md): phpgurukul News Portal Project V4.1 is vulnerable to SQL Injection in check\_availablity.php. (CVSS 9.8)
- [CVE-2025-69992](https://cve.now/CVE-2025-69992.md): phpgurukul News Portal Project V4.1 has File Upload Vulnerability via upload.php, which enables the upload of files of any format to the ser (CVSS 9.8)
- [CVE-2025-70753](https://cve.now/CVE-2025-70753.md): Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security\_5g parameter of the sub\_4CA50 function. (CVSS 7.5)
- [CVE-2025-71023](https://cve.now/CVE-2025-71023.md): Tenda AX-3 v16.03.12.10\_CN was discovered to contain a stack overflow in the mac2 parameter of the fromAdvSetMacMtuWan function. (CVSS 7.5)
- [CVE-2025-71024](https://cve.now/CVE-2025-71024.md): Tenda AX-3 v16.03.12.10\_CN was discovered to contain a stack overflow in the serviceName2 parameter of the fromAdvSetMacMtuWan function. (CVSS 7.5)
- [CVE-2025-71025](https://cve.now/CVE-2025-71025.md): Tenda AX-3 v16.03.12.10\_CN was discovered to contain a stack overflow in the cloneType2 parameter of the fromAdvSetMacMtuWan function. (CVSS 7.5)
- [CVE-2025-71026](https://cve.now/CVE-2025-71026.md): Tenda AX-3 v16.03.12.10\_CN was discovered to contain a stack overflow in the wanSpeed2 parameter of the fromAdvSetMacMtuWan function. (CVSS 7.5)
- [CVE-2025-71027](https://cve.now/CVE-2025-71027.md): Tenda AX-3 v16.03.12.10\_CN was discovered to contain a stack overflow in the wanMTU2 parameter of the fromAdvSetMacMtuWan function. (CVSS 7.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-01-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.