# CVEs published 2026-01-23

255 CVEs were published on January 23, 2026: 30 critical, 76 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2026-24140](https://cve.now/CVE-2026-24140.md): MyTube has Mass Assignment via Settings Management (CVSS 2.7, franklioxygen MyTube)
- [CVE-2026-24139](https://cve.now/CVE-2026-24139.md): MyTube Allows Unauthorized Database Export by Guest Users (CVSS 8.7, franklioxygen MyTube)
- [CVE-2026-24474](https://cve.now/CVE-2026-24474.md): Dioxus Components has JavaScript injection via user-supplied IDs (CVSS 5.3, DioxusLabs components)
- [CVE-2026-24136](https://cve.now/CVE-2026-24136.md): Saleor has an Insecure Direct Object Reference (IDOR) in GraphQL API (CVSS 8.7, saleor)
- [CVE-2026-24128](https://cve.now/CVE-2026-24128.md): XWiki Affected by Reflected Cross-Site Scripting (XSS) in Error Messages (CVSS 6.5, xwiki-platform · org.xwiki.platform:xwiki-platform-web-temp…)
- [CVE-2026-24127](https://cve.now/CVE-2026-24127.md): Typemill has Reflected XSS via login error view template (CVSS 5.4, typemill)
- [CVE-2026-1386](https://cve.now/CVE-2026-1386.md): Arbitrary Host File Overwrite via Symlink in Firecracker Jailer (CVSS 6.0, AWS Firecracker)
- [CVE-2025-14947](https://cve.now/CVE-2025-14947.md): All-in-One Video Gallery \<= 4.6.4 - Missing Authorization to Unauthenticated Bunny Stream Video Creation/Deletion (CVSS 6.5, plugins360 All-in-One Video Gallery)
- [CVE-2026-24423](https://cve.now/CVE-2026-24423.md): SmarterTools SmarterMail \< Build 9511 Unauthenticated RCE via ConnectToHub API (CVSS 9.3, KEV, SmarterTools SmarterMail)
- [CVE-2021-47906](https://cve.now/CVE-2021-47906.md): BloofoxCMS 0.5.2.1 - 'text' Stored Cross Site Scripting (CVSS 5.1, BloofoxCMS)
- [CVE-2021-47905](https://cve.now/CVE-2021-47905.md): MyBB Delete Account Plugin 1.4 - Cross-Site Scripting (CVSS 5.1, vintagedaddyo MyBB Delete Account Plugin)
- [CVE-2021-47904](https://cve.now/CVE-2021-47904.md): PhreeBooks 5.2.3 - Remote Code Execution (CVSS 8.7, Phreesoft PhreeBooks)
- [CVE-2021-47903](https://cve.now/CVE-2021-47903.md): LiteSpeed Web Server Enterprise 5.4.11 - Command Injection (CVSS 8.6, LiteSpeed Technologies LiteSpeed Web Server Enterprise)
- [CVE-2021-47899](https://cve.now/CVE-2021-47899.md): YetiShare File Hosting Script 5.1.0 Remote File Upload SSRF Vulnerability (CVSS 6.9, Mfscripts YetiShare File Hosting Script)
- [CVE-2021-47898](https://cve.now/CVE-2021-47898.md): Epson USB Display 1.6.0.0 Unquoted Service Path Vulnerability (CVSS 8.5, Epson America Epson USB Display)
- [CVE-2021-47897](https://cve.now/CVE-2021-47897.md): PEEL Shopping 9.3.0 - 'address' Stored Cross-Site Scripting (CVSS 5.1, PEEL eCommerce PEEL Shopping)
- [CVE-2021-47896](https://cve.now/CVE-2021-47896.md): PDFCOMPLETE Corporate Edition 4.1.45 - 'pdfcDispatcher' Unquoted Service Path (CVSS 8.5, PDF Complete PDFCOMPLETE Corporate Edition)
- [CVE-2021-47895](https://cve.now/CVE-2021-47895.md): Nsauditor 3.2.2.0 - 'Event Description' Denial of Service (CVSS 6.7, Nsauditor)
- [CVE-2021-47894](https://cve.now/CVE-2021-47894.md): Managed Switch Port Mapping Tool 2.85.2 - Denial of Service (CVSS 6.7, Northwest Performance Software Managed Switch Port Mapping…)
- [CVE-2021-47893](https://cve.now/CVE-2021-47893.md): AgataSoft PingMaster Pro 2.1 - Denial of Service (CVSS 6.7, AgataSoft PingMaster Pro)
- [CVE-2021-47892](https://cve.now/CVE-2021-47892.md): PEEL Shopping 9.3.0 - 'Comments/Special Instructions' Stored Cross-Site Scripting (CVSS 5.1, PEEL eCommerce PEEL Shopping)
- [CVE-2021-47891](https://cve.now/CVE-2021-47891.md): Unified Remote 3.9.0.2463 - Remote Code Execution (CVSS 9.3, Unified Intents AB Unified Remote)
- [CVE-2021-47890](https://cve.now/CVE-2021-47890.md): LogonExpert 8.1 - 'LogonExpertSvc' Unquoted Service Path (CVSS 8.5, Softros Systems LogonExpert)
- [CVE-2021-47889](https://cve.now/CVE-2021-47889.md): Softros LAN Messenger 9.6.4 - 'SoftrosSpellChecker' Unquoted Service Path (CVSS 8.5, Softros Systems LAN Messenger)
- [CVE-2021-47888](https://cve.now/CVE-2021-47888.md): Textpattern 4.8.3 - Remote code execution (CVSS 8.7, The Textpattern Development Team Textpattern)
- [CVE-2021-47881](https://cve.now/CVE-2021-47881.md): dataSIMS Avionics ARINC 664-1 - Local Buffer Overflow (CVSS 6.7, Data Device dataSIMS Avionics ARINC)
- [CVE-2018-25132](https://cve.now/CVE-2018-25132.md): MyBB Trending Widget Plugin 1.2 - Cross-Site Scripting (CVSS 5.1, zainali99 MyBB Trending Widget Plugin)
- [CVE-2018-25116](https://cve.now/CVE-2018-25116.md): MyBB Thread Redirect Plugin 0.2.1 - Cross-Site Scripting (CVSS 5.1, jamiesage123 MyBB Thread Redirect Plugin)
- [CVE-2025-71177](https://cve.now/CVE-2025-71177.md): LavaLite CMS \<= 10.1.0 Stored XSS via Package Creation and Search (CVSS 5.1, LavaLite CMS · lavalite/cms)
- [CVE-2026-1299](https://cve.now/CVE-2026-1299.md): email BytesGenerator header injection due to unquoted newlines (CVSS 6.0, Python Software Foundation CPython)
- [CVE-2026-22995](https://cve.now/CVE-2026-22995.md): ublk: fix use-after-free in ublk\_partition\_scan\_work (no CVSS, Linux)
- [CVE-2026-22994](https://cve.now/CVE-2026-22994.md): bpf: Fix reference count leak in bpf\_prog\_test\_run\_xdp() (no CVSS, Linux)
- [CVE-2026-22993](https://cve.now/CVE-2026-22993.md): idpf: Fix RSS LUT NULL ptr issue after soft reset (no CVSS, Linux)
- [CVE-2026-22992](https://cve.now/CVE-2026-22992.md): libceph: return the handler error from mon\_handle\_auth\_done() (CVSS 7.5, Linux)
- [CVE-2026-22991](https://cve.now/CVE-2026-22991.md): libceph: make free\_choose\_arg\_map() resilient to partial allocation (CVSS 7.5, Linux)
- [CVE-2026-22990](https://cve.now/CVE-2026-22990.md): libceph: replace overzealous BUG\_ON in osdmap\_apply\_incremental() (CVSS 7.5, Linux)
- [CVE-2026-22989](https://cve.now/CVE-2026-22989.md): nfsd: check that server is running in unlock\_filesystem (no CVSS, Linux)
- [CVE-2026-22988](https://cve.now/CVE-2026-22988.md): arp: do not assume dev\_hard\_header() does not change skb-\>head (CVSS 7.8, Linux)
- [CVE-2026-22987](https://cve.now/CVE-2026-22987.md): net/sched: act\_api: avoid dereferencing ERR\_PTR in tcf\_idrinfo\_destroy (no CVSS, Linux)
- [CVE-2026-22986](https://cve.now/CVE-2026-22986.md): gpiolib: fix race condition for gdev-\>srcu (no CVSS, Linux)
- [CVE-2026-22985](https://cve.now/CVE-2026-22985.md): idpf: Fix RSS LUT NULL pointer crash on early ethtool operations (no CVSS, Linux)
- [CVE-2026-22984](https://cve.now/CVE-2026-22984.md): libceph: prevent potential out-of-bounds reads in handle\_auth\_done() (CVSS 9.8, Linux)
- [CVE-2026-22983](https://cve.now/CVE-2026-22983.md): net: do not write to msg\_get\_inq in callee (no CVSS, Linux)
- [CVE-2026-22982](https://cve.now/CVE-2026-22982.md): net: mscc: ocelot: Fix crash when adding interface under a lag (no CVSS, Linux)
- [CVE-2026-22981](https://cve.now/CVE-2026-22981.md): idpf: detach and close netdevs while handling a reset (no CVSS, Linux)
- [CVE-2026-22980](https://cve.now/CVE-2026-22980.md): nfsd: provide locking for v4\_end\_grace (CVSS 7.8, Linux)
- [CVE-2026-22979](https://cve.now/CVE-2026-22979.md): net: fix memory leak in skb\_segment\_list for GRO packets (no CVSS, Linux)
- [CVE-2026-22978](https://cve.now/CVE-2026-22978.md): wifi: avoid kernel-infoleak from struct iw\_point (no CVSS, Linux)
- [CVE-2025-71161](https://cve.now/CVE-2025-71161.md): dm-verity: disable recursive forward error correction (CVSS 7.5, Linux)
- [CVE-2025-71160](https://cve.now/CVE-2025-71160.md): netfilter: nf\_tables: avoid chain re-validation if possible (no CVSS, Linux)
- [CVE-2025-71159](https://cve.now/CVE-2025-71159.md): btrfs: fix use-after-free warning in btrfs\_get\_or\_create\_delayed\_node() (CVSS 9.8, Linux)
- [CVE-2025-71158](https://cve.now/CVE-2025-71158.md): gpio: mpsse: ensure worker is torn down (CVSS 7.8, Linux)
- [CVE-2026-0994](https://cve.now/CVE-2026-0994.md): Denial of Service in Python Protobuf (CVSS 8.2, Python Protobuf · protobuf)
- [CVE-2026-24636](https://cve.now/CVE-2026-24636.md): WordPress Sugar Calendar (Lite) plugin \<= 3.9.1 - Broken Access Control vulnerability (CVSS 4.3, Syed Balkhi Sugar Calendar)
- [CVE-2026-24635](https://cve.now/CVE-2026-24635.md): WordPress EduBlink Core plugin \<= 2.0.7 - Local File Inclusion vulnerability (CVSS 7.5, DevsBlink EduBlink Core)
- [CVE-2026-24634](https://cve.now/CVE-2026-24634.md): WordPress Ultimate Reviews plugin \<= 3.2.16 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.3, Rustaurius Ultimate Reviews)
- [CVE-2026-24633](https://cve.now/CVE-2026-24633.md): WordPress Add Expires Headers & Optimized Minify plugin \<= 3.2.0 - Broken Access Control vulnerability (CVSS 5.3, Passionate Brains Add Expires Headers & Optimized Minify)
- [CVE-2026-24632](https://cve.now/CVE-2026-24632.md): WordPress Delay Redirects plugin \<= 1.0.0 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, jagdish1o1 Delay Redirects)
- [CVE-2026-24631](https://cve.now/CVE-2026-24631.md): WordPress Rosebud theme \<= 1.4 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.4, Mikado-Themes Rosebud)
- [CVE-2026-24630](https://cve.now/CVE-2026-24630.md): WordPress Stylish Cost Calculator plugin \<= 8.2.9 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Design Stylish Cost Calculator)
- [CVE-2026-24629](https://cve.now/CVE-2026-24629.md): WordPress Web Accessibility with Max Access plugin \<= 2.1.0 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, Ability Web Accessibility with Max Access)
- [CVE-2026-24627](https://cve.now/CVE-2026-24627.md): WordPress Trusona for WordPress plugin \<= 2.0.0 - Broken Access Control vulnerability (CVSS 4.3, Trusona for WordPress)
- [CVE-2026-24626](https://cve.now/CVE-2026-24626.md): WordPress Logo Slider plugin \<= 5.1.1 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, LogicHunt Logo Slider)
- [CVE-2026-24625](https://cve.now/CVE-2026-24625.md): WordPress File Uploads Addon for WooCommerce plugin \<= 1.7.3 - Broken Access Control vulnerability (CVSS 5.3, Imaginate Solutions File Uploads Addon for WooCommerce)
- [CVE-2026-24624](https://cve.now/CVE-2026-24624.md): WordPress Neoforum plugin \<= 1.0 - SQL Injection vulnerability (CVSS 7.6, saeros1984 Neoforum)
- [CVE-2026-24623](https://cve.now/CVE-2026-24623.md): WordPress Neoforum plugin \<= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, saeros1984 Neoforum)
- [CVE-2026-24622](https://cve.now/CVE-2026-24622.md): WordPress Suggestion Toolkit plugin \<= 5.0 - Broken Access Control vulnerability (CVSS 5.4, Sergiy Dzysyak Suggestion Toolkit)
- [CVE-2026-24621](https://cve.now/CVE-2026-24621.md): WordPress Terms descriptions plugin \<= 3.4.9 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, Vladimir Statsenko Terms descriptions)
- [CVE-2026-24620](https://cve.now/CVE-2026-24620.md): WordPress Landing Page Builder plugin \<= 1.5.3.4 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, PluginOps Landing Page Builder)
- [CVE-2026-24619](https://cve.now/CVE-2026-24619.md): WordPress PopCash.Net Code Integration Tool plugin \<= 1.8 - Broken Access Control vulnerability (CVSS 5.3, PopCash.Net Code Integration Tool)
- [CVE-2026-24617](https://cve.now/CVE-2026-24617.md): WordPress Easy Modal plugin \<= 2.1.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Daniel Iser Easy Modal)
- [CVE-2026-24616](https://cve.now/CVE-2026-24616.md): WordPress WP Popups plugin \<= 2.2.0.5 - Broken Access Control vulnerability (CVSS 6.5, Damian WP Popups)
- [CVE-2026-24615](https://cve.now/CVE-2026-24615.md): WordPress Cream Magazine theme \<= 2.1.10 - Broken Access Control vulnerability (CVSS 5.3, themebeez Cream Magazine)
- [CVE-2026-24614](https://cve.now/CVE-2026-24614.md): WordPress Flex QR Code Generator plugin \<= 1.2.10 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, Devsbrain Flex QR Code Generator)
- [CVE-2026-24613](https://cve.now/CVE-2026-24613.md): WordPress Ecwid Shopping Cart plugin \<= 7.0.6 - Broken Access Control vulnerability (CVSS 5.3, Ecwid by Lightspeed Ecommerce Shopping Cart Ecwid Shopping…)
- [CVE-2026-24612](https://cve.now/CVE-2026-24612.md): WordPress Orchid Store theme \<= 1.5.15 - Broken Access Control vulnerability (CVSS 5.3, themebeez Orchid Store)
- [CVE-2026-24609](https://cve.now/CVE-2026-24609.md): WordPress Laurent theme \<= 3.1 - Local File Inclusion vulnerability (CVSS 7.5, Elated-Themes Laurent)
- [CVE-2026-24608](https://cve.now/CVE-2026-24608.md): WordPress Laurent Core plugin \<= 2.4.1 - Local File Inclusion vulnerability (CVSS 7.5, Elated-Themes Laurent Core)
- [CVE-2026-24607](https://cve.now/CVE-2026-24607.md): WordPress Travel Monster theme \<= 1.3.3 - Broken Access Control vulnerability (CVSS 5.3, wptravelengine Travel Monster)
- [CVE-2026-24606](https://cve.now/CVE-2026-24606.md): WordPress Bayarcash WooCommerce plugin \<= 4.3.13 - Broken Access Control vulnerability (CVSS 5.3, Web Impian Bayarcash WooCommerce)
- [CVE-2026-24605](https://cve.now/CVE-2026-24605.md): WordPress X Addons for Elementor plugin \<= 1.0.23 - Broken Access Control vulnerability (CVSS 4.3, pencilwp X Addons for Elementor)
- [CVE-2026-24604](https://cve.now/CVE-2026-24604.md): WordPress Simple GDPR Cookie Compliance plugin \<= 2.0.0 - Broken Access Control vulnerability (CVSS 5.3, themebeez Simple GDPR Cookie Compliance)
- [CVE-2026-24603](https://cve.now/CVE-2026-24603.md): WordPress Universal Google Adsense and Ads manager plugin \<= 1.1.8 - Broken Access Control vulnerability (CVSS 5.3, themebeez Universal Google Adsense and Ads manager)
- [CVE-2026-24601](https://cve.now/CVE-2026-24601.md): WordPress Penci Pay Writer plugin \<= 1.5 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, PenciDesign Penci Pay Writer)
- [CVE-2026-24600](https://cve.now/CVE-2026-24600.md): WordPress Penci Review plugin \<= 3.5 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, PenciDesign Penci Review)
- [CVE-2026-24599](https://cve.now/CVE-2026-24599.md): WordPress NextMove Lite plugin \<= 2.23.0 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.3, XLPlugins NextMove Lite)
- [CVE-2026-24598](https://cve.now/CVE-2026-24598.md): WordPress Multilanguage by BestWebSoft plugin \<= 1.5.2 - Broken Access Control vulnerability (CVSS 4.3, Multilanguage by BestWebSoft)
- [CVE-2026-24596](https://cve.now/CVE-2026-24596.md): WordPress Related Posts Thumbnails plugin for WordPress plugin \<= 4.3.2 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, marynixie Related Posts Thumbnails Plugin for WordPress)
- [CVE-2026-24595](https://cve.now/CVE-2026-24595.md): WordPress Zoho CRM Lead Magnet plugin \<= 1.8.1.9 - Broken Access Control vulnerability (CVSS 5.4, zohocrm Zoho CRM Lead Magnet)
- [CVE-2026-24594](https://cve.now/CVE-2026-24594.md): WordPress Livemesh Addons for WPBakery Page Builder plugin \<= 3.9.4 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, Livemesh Addons for WPBakery Page Builder)
- [CVE-2026-24593](https://cve.now/CVE-2026-24593.md): WordPress AWP Classifieds plugin \<= 4.4.3 - Sensitive Data Exposure vulnerability (CVSS 5.3, Strategy11 Team AWP Classifieds)
- [CVE-2026-24591](https://cve.now/CVE-2026-24591.md): WordPress Turn Yoast SEO FAQ Block to Accordion plugin \<= 1.0.6 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, yasir129 Turn Yoast SEO FAQ Block to Accordion)
- [CVE-2026-24589](https://cve.now/CVE-2026-24589.md): WordPress Cargus plugin \<= 1.5.8 - Sensitive Data Exposure vulnerability (CVSS 5.3, Cargus eCommerce Cargus)
- [CVE-2026-24588](https://cve.now/CVE-2026-24588.md): WordPress Smart Product Viewer plugin \<= 1.5.4 - Broken Access Control vulnerability (CVSS 4.3, topdevs Smart Product Viewer)
- [CVE-2026-24587](https://cve.now/CVE-2026-24587.md): WordPress AJAX Hits Counter + Popular Posts Widget plugin \<= 0.10.210305 - Broken Access Control vulnerability (CVSS 5.4, kutsy AJAX Hits Counter + Popular Posts Widget)
- [CVE-2026-24585](https://cve.now/CVE-2026-24585.md): WordPress Hyyan WooCommerce Polylang Integration plugin \<= 1.5.0 - Broken Access Control vulnerability (CVSS 6.5, Hyyan Abo Fakher Hyyan WooCommerce Polylang Integration)
- [CVE-2026-24584](https://cve.now/CVE-2026-24584.md): WordPress Tutor LMS BunnyNet Integration plugin \<= 1.0.0 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, Themeum Tutor LMS BunnyNet Integration)
- [CVE-2026-24583](https://cve.now/CVE-2026-24583.md): WordPress SumUp Payment Gateway For WooCommerce plugin \<= 2.7.9 - Broken Access Control vulnerability (CVSS 5.3, SumUp Payment Gateway For WooCommerce)
- [CVE-2026-24581](https://cve.now/CVE-2026-24581.md): WordPress Points and Rewards for WooCommerce plugin \<= 2.9.5 - Broken Access Control vulnerability (CVSS 5.4, WP Swings Points and Rewards for WooCommerce)
- [CVE-2026-24580](https://cve.now/CVE-2026-24580.md): WordPress Ecwid Shopping Cart plugin \<= 7.0.5 - Broken Access Control vulnerability (CVSS 4.3, Ecwid by Lightspeed Ecommerce Shopping Cart Ecwid Shopping…)
- [CVE-2026-24579](https://cve.now/CVE-2026-24579.md): WordPress Ai Image Alt Text Generator for WP plugin \<= 1.1.9 - Broken Access Control vulnerability (CVSS 4.3, WP Messiah Ai Image Alt Text Generator for WP)
- [CVE-2026-24578](https://cve.now/CVE-2026-24578.md): WordPress Admin login URL Change plugin \<= 1.1.5 - Broken Access Control vulnerability (CVSS 4.3, Jahid Hasan Admin login URL Change)
- [CVE-2026-24577](https://cve.now/CVE-2026-24577.md): WordPress Pie Register plugin \<= 3.8.4.8 - Broken Access Control vulnerability (CVSS 5.3, Genetech Products Pie Register)
- [CVE-2026-24576](https://cve.now/CVE-2026-24576.md): WordPress UX Flat plugin \<= 5.4.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, COP UX Flat)
- [CVE-2026-24572](https://cve.now/CVE-2026-24572.md): WordPress Nelio Content plugin \<= 4.2.0 - SQL Injection vulnerability (CVSS 8.5, Nelio Software Nelio Content)
- [CVE-2026-24571](https://cve.now/CVE-2026-24571.md): WordPress BOX NOW Delivery plugin \<= 3.0.2 - Broken Access Control vulnerability (CVSS 4.3, boxnow BOX NOW Delivery)
- [CVE-2026-24570](https://cve.now/CVE-2026-24570.md): WordPress Edwiser Bridge plugin \<= 4.3.2 - Broken Access Control vulnerability (CVSS 5.4, WisdmLabs Edwiser Bridge)
- [CVE-2026-24569](https://cve.now/CVE-2026-24569.md): WordPress Media Library File Size plugin \<= 1.6.7 - Broken Access Control vulnerability (CVSS 4.3, Sully Media Library File Size)
- [CVE-2026-24568](https://cve.now/CVE-2026-24568.md): WordPress WP Travel plugin \<= 11.1.0 - Broken Access Control vulnerability (CVSS 5.3, WP Travel)
- [CVE-2026-24567](https://cve.now/CVE-2026-24567.md): WordPress Anything Order by Terms plugin \<= 1.4.0 - Broken Access Control vulnerability (CVSS 4.3, briarinc Anything Order by Terms)
- [CVE-2026-24566](https://cve.now/CVE-2026-24566.md): WordPress iNET Webkit plugin \<= 1.2.4 - Broken Access Control vulnerability (CVSS 6.5, iNET Webkit)
- [CVE-2026-24565](https://cve.now/CVE-2026-24565.md): WordPress B Accordion plugin \<= 2.0.2 - Sensitive Data Exposure vulnerability (CVSS 6.5, bPlugins B Accordion)
- [CVE-2026-24564](https://cve.now/CVE-2026-24564.md): WordPress Textmetrics plugin \<= 3.6.5 - Content Injection vulnerability (CVSS 4.3, Israpil Textmetrics)
- [CVE-2026-24563](https://cve.now/CVE-2026-24563.md): WordPress LifePress plugin \<= 2.2.1 - Broken Access Control vulnerability (CVSS 4.3, Ashan Perera LifePress)
- [CVE-2026-24562](https://cve.now/CVE-2026-24562.md): WordPress Ryviu – Product Reviews for WooCommerce plugin \<= 3.1.26 - Broken Access Control vulnerability (CVSS 5.3, Ryviu – Product Reviews for WooCommerce)
- [CVE-2026-24561](https://cve.now/CVE-2026-24561.md): WordPress FluentBoards plugin \<= 1.91.1 - Broken Access Control vulnerability (CVSS 5.4, Mahmudul Hasan Arif FluentBoards)
- [CVE-2026-24560](https://cve.now/CVE-2026-24560.md): WordPress Cloudinary plugin \<= 3.3.2 - Broken Access Control vulnerability (CVSS 5.4, Cloudinary)
- [CVE-2026-24559](https://cve.now/CVE-2026-24559.md): WordPress Integration for Contact Form 7 HubSpot plugin \<= 1.4.3 - Sensitive Data Exposure vulnerability (CVSS 5.3, CRM Perks Integration for Contact Form 7 HubSpot)
- [CVE-2026-24558](https://cve.now/CVE-2026-24558.md): WordPress ABG Rich Pins plugin \<= 1.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, antoniobg ABG Rich Pins)
- [CVE-2026-24557](https://cve.now/CVE-2026-24557.md): WordPress Contact Form 7 GetResponse Extension plugin \<= 1.0.8 - Sensitive Data Exposure vulnerability (CVSS 5.3, WEN Solutions Contact Form 7 GetResponse Extension)
- [CVE-2026-24556](https://cve.now/CVE-2026-24556.md): WordPress ElementCamp plugin \<= 2.3.2 - Broken Access Control vulnerability (CVSS 5.3, wpdive ElementCamp)
- [CVE-2026-24555](https://cve.now/CVE-2026-24555.md): WordPress ArtPlacer Widget plugin \<= 2.23.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, ArtPlacer Widget)
- [CVE-2026-24553](https://cve.now/CVE-2026-24553.md): WordPress Fraud Prevention For Woocommerce plugin \<= 2.3.2 - Sensitive Data Exposure vulnerability (CVSS 4.3, Dotstore Fraud Prevention For Woocommerce)
- [CVE-2026-24551](https://cve.now/CVE-2026-24551.md): WordPress Monetag Official Plugin plugin \<= 1.1.3 - Broken Access Control vulnerability (CVSS 5.4, monetagwp Monetag Official Plugin)
- [CVE-2026-24550](https://cve.now/CVE-2026-24550.md): WordPress Blockons plugin \<= 1.2.19 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Kaira Blockons)
- [CVE-2026-24549](https://cve.now/CVE-2026-24549.md): WordPress GeoDirectory plugin \<= 2.8.149 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, Paolo GeoDirectory)
- [CVE-2026-24548](https://cve.now/CVE-2026-24548.md): WordPress Radio Player plugin \<= 2.0.91 - Server Side Request Forgery (SSRF) vulnerability (CVSS 5.4, princeahmed Radio Player)
- [CVE-2026-24544](https://cve.now/CVE-2026-24544.md): WordPress HD Quiz plugin \<= 2.0.9 - Broken Access Control vulnerability (CVSS 4.3, Harmonic Design HD Quiz)
- [CVE-2026-24543](https://cve.now/CVE-2026-24543.md): WordPress Materialis Companion plugin \<= 1.3.52 - Broken Access Control vulnerability (CVSS 4.3, Horea Radu Materialis Companion)
- [CVE-2026-24542](https://cve.now/CVE-2026-24542.md): WordPress WP Term Order plugin \<= 2.1.0 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, John James Jacoby WP Term Order)
- [CVE-2026-24541](https://cve.now/CVE-2026-24541.md): WordPress Download After Email plugin \<= 2.1.9 - Broken Access Control vulnerability (CVSS 5.3, mkscripts Download After Email)
- [CVE-2026-24540](https://cve.now/CVE-2026-24540.md): WordPress Integrate Google Drive plugin \<= 1.5.6 - Broken Access Control vulnerability (CVSS 5.4, princeahmed Integrate Google Drive)
- [CVE-2026-24539](https://cve.now/CVE-2026-24539.md): WordPress Protección de datos – RGPD plugin \<= 0.68 - Broken Access Control vulnerability (CVSS 5.3, ABCdatos Protección de datos – RGPD)
- [CVE-2026-24538](https://cve.now/CVE-2026-24538.md): WordPress Omnipress plugin \<= 1.6.7 - Local File Inclusion vulnerability (CVSS 7.5, omnipressteam Omnipress)
- [CVE-2026-24536](https://cve.now/CVE-2026-24536.md): WordPress Webpushr plugin \<= 4.38.0 - Sensitive Data Exposure vulnerability (CVSS 5.3, Webpushr)
- [CVE-2026-24535](https://cve.now/CVE-2026-24535.md): WordPress Automatic Featured Images from Videos plugin \<= 1.2.7 - Broken Access Control vulnerability (CVSS 4.3, webdevstudios Automatic Featured Images from Videos)
- [CVE-2026-24534](https://cve.now/CVE-2026-24534.md): WordPress Booter plugin \<= 1.5.7 - Broken Access Control vulnerability (CVSS 4.3, uPress Booter)
- [CVE-2026-24532](https://cve.now/CVE-2026-24532.md): WordPress SiteLock Security plugin \<= 5.0.2 - Broken Access Control vulnerability (CVSS 4.3, SiteLock Security – WP Hardening, Login Security & Malware…)
- [CVE-2026-24531](https://cve.now/CVE-2026-24531.md): WordPress Prowess theme \<= 2.3 - Local File Inclusion vulnerability (CVSS 7.5, Select-Themes Prowess)
- [CVE-2026-24530](https://cve.now/CVE-2026-24530.md): WordPress WebP Conversion plugin \<= 2.2 - Broken Access Control vulnerability (CVSS 5.3, sheepfish WebP Conversion)
- [CVE-2026-24529](https://cve.now/CVE-2026-24529.md): WordPress Quick Restaurant Reservations plugin \<= 1.6.7 - Broken Access Control vulnerability (CVSS 5.3, Alejandro Quick Restaurant Reservations)
- [CVE-2026-24528](https://cve.now/CVE-2026-24528.md): WordPress Nova Blocks plugin \<= 2.1.9 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, pixelgrade Nova Blocks)
- [CVE-2026-24526](https://cve.now/CVE-2026-24526.md): WordPress Email Inquiry & Cart Options for WooCommerce plugin \<= 3.4.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Steve Truman Email Inquiry & Cart Options for WooCommerce)
- [CVE-2026-24525](https://cve.now/CVE-2026-24525.md): WordPress CLP Varnish Cache plugin \<= 1.0.2 - Broken Access Control vulnerability (CVSS 5.3, CloudPanel CLP Varnish Cache)
- [CVE-2026-24524](https://cve.now/CVE-2026-24524.md): WordPress Tablesome plugin \<= 1.2.8 - Broken Access Control vulnerability (CVSS 4.3, Essekia Tablesome)
- [CVE-2026-24523](https://cve.now/CVE-2026-24523.md): WordPress WP FullCalendar plugin \<= 1.6 - Sensitive Data Exposure vulnerability (CVSS 5.3, Marcus (aka @msykes) WP FullCalendar)
- [CVE-2026-24522](https://cve.now/CVE-2026-24522.md): WordPress WP Subscribe plugin \<= 1.2.16 - Broken Access Control vulnerability (CVSS 4.3, MyThemeShop WP Subscribe)
- [CVE-2026-24521](https://cve.now/CVE-2026-24521.md): WordPress Kama Thumbnail plugin \<= 3.5.1 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, Timur Kamaev Kama Thumbnail)
- [CVE-2025-71157](https://cve.now/CVE-2025-71157.md): RDMA/core: always drop device refcount in ib\_del\_sub\_device\_and\_put() (no CVSS, Linux)
- [CVE-2025-71156](https://cve.now/CVE-2025-71156.md): gve: defer interrupt enabling until NAPI registration (no CVSS, Linux)
- [CVE-2025-71155](https://cve.now/CVE-2025-71155.md): KVM: s390: Fix gmap\_helper\_zap\_one\_page() again (CVSS 7.8, Linux)
- [CVE-2025-71154](https://cve.now/CVE-2025-71154.md): net: usb: rtl8150: fix memory leak on usb\_submit\_urb() failure (no CVSS, Linux)
- [CVE-2025-71153](https://cve.now/CVE-2025-71153.md): ksmbd: Fix memory leak in get\_file\_all\_info() (no CVSS, Linux)
- [CVE-2025-71152](https://cve.now/CVE-2025-71152.md): net: dsa: properly keep track of conduit reference (no CVSS, Linux)
- [CVE-2025-71151](https://cve.now/CVE-2025-71151.md): cifs: Fix memory and information leak in smb3\_reconfigure() (no CVSS, Linux)
- [CVE-2025-71150](https://cve.now/CVE-2025-71150.md): ksmbd: Fix refcount leak when invalid session is found on session lookup (CVSS 7.5, Linux)
- [CVE-2025-71148](https://cve.now/CVE-2025-71148.md): net/handshake: restore destructor on submit failure (no CVSS, Linux)
- [CVE-2025-71147](https://cve.now/CVE-2025-71147.md): KEYS: trusted: Fix a memory leak in tpm2\_load\_cmd (no CVSS, Linux)
- [CVE-2025-71146](https://cve.now/CVE-2025-71146.md): netfilter: nf\_conncount: fix leaked ct in error paths (CVSS 7.5, Linux)
- [CVE-2025-71145](https://cve.now/CVE-2025-71145.md): usb: phy: isp1301: fix non-OF device reference imbalance (CVSS 7.8, Linux)
- [CVE-2025-13921](https://cve.now/CVE-2025-13921.md): weDocs \<= 2.1.16 - Missing Authorization to Authenticated (Subscriber+) Documentation Post Update (CVSS 4.3, wedevs weDocs: AI Powered Knowledge Base, Docs, Documentati…)
- [CVE-2026-0914](https://cve.now/CVE-2026-0914.md): WP DSGVO Tools (GDPR) \<= 3.1.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'lw\_content\_block' Shortcode (CVSS 6.4, legalweb WP DSGVO Tools)
- [CVE-2025-14866](https://cve.now/CVE-2025-14866.md): Melapress Role Editor \<= 1.1.1 - Improper Authorization to Authenticated (Subscriber+) Privilege Escalation via Secondary Role Assignment (CVSS 8.8, Melapress Role Editor)
- [CVE-2025-4320](https://cve.now/CVE-2025-4320.md): Information Disclosure in Birebirsoft's Sufirmam (CVSS 10.0, Birebirsoft Software and Technology Solutions Sufirmam)
- [CVE-2025-4319](https://cve.now/CVE-2025-4319.md): Improper Access Control in Birebirsoft's Sufirmam (CVSS 9.4, Birebirsoft Software and Technology Solutions Sufirmam)
- [CVE-2025-2204](https://cve.now/CVE-2025-2204.md): XSS in Tapandsign Technologies' Tap&Sign App (CVSS 4.7, Tapandsign Technologies Software Tap&Sign)
- [CVE-2025-46699](https://cve.now/CVE-2025-46699.md): Dell Data Protection Advisor, versions prior to 19.12, contains an Improper Neutralization of Special Elements Used in a Template Engine vul (CVSS 4.3, Dell Data Protection Advisor)
- [CVE-2026-22276](https://cve.now/CVE-2026-22276.md): Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains a Cleartext Storage of Sensitive Inform (CVSS 5.5, Dell ObjectScale)
- [CVE-2026-22275](https://cve.now/CVE-2026-22275.md): Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains an Inclusion of Sensitive Information i (CVSS 4.4, Dell ObjectScale)
- [CVE-2026-22274](https://cve.now/CVE-2026-22274.md): Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains a Cleartext Transmission of Sensitive I (CVSS 6.5, Dell ObjectScale)
- [CVE-2026-22273](https://cve.now/CVE-2026-22273.md): Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains an Use of Default Credentials vulnerabi (CVSS 8.8, Dell ObjectScale)
- [CVE-2026-22271](https://cve.now/CVE-2026-22271.md): Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains a Cleartext Transmission of Sensitive I (CVSS 7.5, Dell ObjectScale)
- [CVE-2026-1364](https://cve.now/CVE-2026-1364.md): JNC｜IAQS and I6 - Missing Authentication (CVSS 9.3, JNC IAQS · JNC I6)
- [CVE-2026-1363](https://cve.now/CVE-2026-1363.md): JNC｜IAQS and I6 - Client-Side Enforcement of Server-Side Security (CVSS 9.3, JNC IAQS · JNC I6)
- [CVE-2026-24515](https://cve.now/CVE-2026-24515.md): In libexpat before 2.7.4, XML\_ExternalEntityParserCreate does not copy unknown encoding handler user data. (CVSS 2.9, libexpat project libexpat)
- [CVE-2024-11976](https://cve.now/CVE-2024-11976.md): BuddyPress \<= 14.3.3 - Unauthenticated Arbitrary Shortcode Execution (CVSS 7.3, BuddyPress)
- [CVE-2026-0603](https://cve.now/CVE-2026-0603.md): Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection (CVSS 8.3, org.hibernate/hibernate-core · Red Hat JBoss Enterprise… +13)
- [CVE-2025-14745](https://cve.now/CVE-2025-14745.md): RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging \<= 5.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via wp-rss-aggregator Shortcode (CVSS 6.4, rebelcode RSS Aggregator – RSS Import, News Feeds, Feed to…)
- [CVE-2025-14069](https://cve.now/CVE-2025-14069.md): Schema & Structured Data for WP & AMP \<= 1.54 - Authenticated (Contributor+) Stored Cross-Site Scripting via User Custom Schema (CVSS 6.4, magazine3 Schema & Structured Data for WP & AMP)
- [CVE-2026-0927](https://cve.now/CVE-2026-0927.md): KiviCare – Clinic & Patient Management System (EHR) \<= 3.6.15 - Missing Authorization to Unauthenticated Limited Arbitrary File Upload (CVSS 5.3, iqonicdesign KiviCare – Clinic & Patient Management System)
- [CVE-2025-67847](https://cve.now/CVE-2025-67847.md): Moodle: moodle: remote code execution via insufficient restore input validation (CVSS 8.8, moodle · moodle/moodle)
- [CVE-2025-15522](https://cve.now/CVE-2025-15522.md): Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin \<= 6.10.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, uncannyowl Uncanny Automator – Easy Automation, Integration…)
- [CVE-2025-3839](https://cve.now/CVE-2025-3839.md): Epiphany: insecure external protocol invocation in epiphany (CVSS 8.0, epiphany)
- [CVE-2026-0710](https://cve.now/CVE-2026-0710.md): Sipp/sipp: sipp: denial of service and potential arbitrary code execution vulnerability (CVSS 8.4, sipp)
- [CVE-2025-15351](https://cve.now/CVE-2025-15351.md): Anritsu VectorStar CHX File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 7.8, Anritsu VectorStar)
- [CVE-2025-15350](https://cve.now/CVE-2025-15350.md): Anritsu VectorStar CHX File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 7.8, Anritsu VectorStar)
- [CVE-2025-15349](https://cve.now/CVE-2025-15349.md): Anritsu ShockLine SCPI Race Condition Remote Code Execution Vulnerability (CVSS 7.5, Anritsu ShockLine)
- [CVE-2025-15348](https://cve.now/CVE-2025-15348.md): Anritsu ShockLine CHX File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 7.8, Anritsu ShockLine)
- [CVE-2026-0778](https://cve.now/CVE-2026-0778.md): Enel X JuiceBox 40 Telnet Service Missing Authentication Remote Code Execution Vulnerability (CVSS 8.8, Enel X JuiceBox)
- [CVE-2026-0776](https://cve.now/CVE-2026-0776.md): Discord Client Uncontrolled Search Path Element Local Privilege Escalation Vulnerability (CVSS 7.3, Discord Client)
- [CVE-2026-0775](https://cve.now/CVE-2026-0775.md): npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability (CVSS 7.0, npm cli)
- [CVE-2026-0774](https://cve.now/CVE-2026-0774.md): WatchYourLAN Configuration Page Argument Injection Remote Code Execution Vulnerability (CVSS 8.8, WatchYourLAN)
- [CVE-2026-0773](https://cve.now/CVE-2026-0773.md): Upsonic Cloudpickle Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 9.8, Upsonic)
- [CVE-2026-0772](https://cve.now/CVE-2026-0772.md): Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 7.5, Langflow)
- [CVE-2026-0771](https://cve.now/CVE-2026-0771.md): Langflow PythonFunction Code Injection Remote Code Execution Vulnerability (CVSS 7.1, Langflow)
- [CVE-2026-0770](https://cve.now/CVE-2026-0770.md): Langflow exec\_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability (CVSS 9.8, KEV, Langflow)
- [CVE-2026-0769](https://cve.now/CVE-2026-0769.md): Langflow eval\_custom\_component\_code Eval Injection Remote Code Execution Vulnerability (CVSS 9.8, Langflow)
- [CVE-2026-0768](https://cve.now/CVE-2026-0768.md): Langflow code Code Injection Remote Code Execution Vulnerability (CVSS 9.8, Langflow)
- [CVE-2026-0764](https://cve.now/CVE-2026-0764.md): GPT Academic upload Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 9.8, GPT Academic)
- [CVE-2026-0763](https://cve.now/CVE-2026-0763.md): GPT Academic run\_in\_subprocess\_wrapper\_func Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 9.8, GPT Academic)
- [CVE-2026-0762](https://cve.now/CVE-2026-0762.md): GPT Academic stream\_daas Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 8.1, GPT Academic)
- [CVE-2026-0761](https://cve.now/CVE-2026-0761.md): Foundation Agents MetaGPT actionoutput\_str\_to\_mapping Code Injection Remote Code Execution Vulnerability (CVSS 9.8, Foundation Agents MetaGPT)
- [CVE-2026-0760](https://cve.now/CVE-2026-0760.md): Foundation Agents MetaGPT deserialize\_message Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 9.8, Foundation Agents MetaGPT)
- [CVE-2026-0759](https://cve.now/CVE-2026-0759.md): Katana Network Development Starter Kit executeCommand Command Injection Remote Code Execution Vulnerability (CVSS 9.8, Katana Network Development Starter Kit)
- [CVE-2026-0758](https://cve.now/CVE-2026-0758.md): mcp-server-siri-shortcuts shortcutName Command Injection Privilege Escalation Vulnerability (CVSS 7.8, mcp-server-siri-shortcuts)
- [CVE-2026-0757](https://cve.now/CVE-2026-0757.md): MCP Manager for Claude Desktop execute-command Command Injection Sandbox Escape Vulnerability (CVSS 8.8, MCP Manager for Claude Desktop)
- [CVE-2026-0756](https://cve.now/CVE-2026-0756.md): github-kanban-mcp-server execAsync Command Injection Remote Code Execution Vulnerability (CVSS 9.8, github-kanban-mcp-server)
- [CVE-2026-0755](https://cve.now/CVE-2026-0755.md): gemini-mcp-tool execAsync Command Injection Remote Code Execution Vulnerability (CVSS 9.8, Gemini MCP Tool gemini-mcp-tool · gemini-mcp-tool)
- [CVE-2025-15061](https://cve.now/CVE-2025-15061.md): Framelink Figma MCP Server fetchWithRetry Command Injection Remote Code Execution Vulnerability (CVSS 9.8, Framelink Figma MCP Server · figma-developer-mcp)
- [CVE-2025-15062](https://cve.now/CVE-2025-15062.md): Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Trimble SketchUp)
- [CVE-2026-0795](https://cve.now/CVE-2026-0795.md): ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability (CVSS 7.2, ALGO 8180 IP Audio Alerter)
- [CVE-2026-0794](https://cve.now/CVE-2026-0794.md): ALGO 8180 IP Audio Alerter SIP Use-After-Free Remote Code Execution Vulnerability (CVSS 8.1, ALGO 8180 IP Audio Alerter)
- [CVE-2026-0793](https://cve.now/CVE-2026-0793.md): ALGO 8180 IP Audio Alerter InformaCast Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.1, ALGO 8180 IP Audio Alerter)
- [CVE-2026-0792](https://cve.now/CVE-2026-0792.md): ALGO 8180 IP Audio Alerter SIP INVITE Alert-Info Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.1, ALGO 8180 IP Audio Alerter)
- [CVE-2026-0791](https://cve.now/CVE-2026-0791.md): ALGO 8180 IP Audio Alerter SIP INVITE Replaces Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.1, ALGO 8180 IP Audio Alerter)
- [CVE-2026-0790](https://cve.now/CVE-2026-0790.md): ALGO 8180 IP Audio Alerter Web UI Direct Request Information Disclosure Vulnerability (CVSS 5.3, ALGO 8180 IP Audio Alerter)
- [CVE-2026-0789](https://cve.now/CVE-2026-0789.md): ALGO 8180 IP Audio Alerter Web UI Inclusion of Authentication Cookie in Response Body Information Disclosure Vulnerability (CVSS 5.3, ALGO 8180 IP Audio Alerter)
- [CVE-2026-0788](https://cve.now/CVE-2026-0788.md): ALGO 8180 IP Audio Alerter Web UI Persistent Cross-Site Scripting Vulnerability (CVSS 5.3, ALGO 8180 IP Audio Alerter)
- [CVE-2026-0787](https://cve.now/CVE-2026-0787.md): ALGO 8180 IP Audio Alerter SAC Command Injection Remote Code Execution Vulnerability (CVSS 8.1, ALGO 8180 IP Audio Alerter)
- [CVE-2026-0786](https://cve.now/CVE-2026-0786.md): ALGO 8180 IP Audio Alerter SCI Command Injection Remote Code Execution Vulnerability (CVSS 7.5, ALGO 8180 IP Audio Alerter)
- [CVE-2026-0785](https://cve.now/CVE-2026-0785.md): ALGO 8180 IP Audio Alerter API Command Injection Remote Code Execution Vulnerability (CVSS 7.5, ALGO 8180 IP Audio Alerter)
- [CVE-2026-0784](https://cve.now/CVE-2026-0784.md): ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability (CVSS 7.2, ALGO 8180 IP Audio Alerter)
- [CVE-2026-0783](https://cve.now/CVE-2026-0783.md): ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability (CVSS 7.2, ALGO 8180 IP Audio Alerter)
- [CVE-2026-0782](https://cve.now/CVE-2026-0782.md): ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability (CVSS 7.2, ALGO 8180 IP Audio Alerter)
- [CVE-2026-0781](https://cve.now/CVE-2026-0781.md): ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability (CVSS 7.2, ALGO 8180 IP Audio Alerter)
- [CVE-2026-0780](https://cve.now/CVE-2026-0780.md): ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability (CVSS 7.2, ALGO 8180 IP Audio Alerter)
- [CVE-2026-0779](https://cve.now/CVE-2026-0779.md): ALGO 8180 IP Audio Alerter Ping Command Injection Remote Code Execution Vulnerability (CVSS 7.2, ALGO 8180 IP Audio Alerter)
- [CVE-2026-0796](https://cve.now/CVE-2026-0796.md): ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability (CVSS 7.2, ALGO 8180 IP Audio Alerter)
- [CVE-2025-15059](https://cve.now/CVE-2025-15059.md): GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, GIMP)
- [CVE-2025-15063](https://cve.now/CVE-2025-15063.md): Ollama MCP Server execAsync Command Injection Remote Code Execution Vulnerability (CVSS 9.8, Ollama MCP Server)
- [CVE-2025-11002](https://cve.now/CVE-2025-11002.md): 7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability (CVSS 7.0, 7-Zip)
- [CVE-2026-24304](https://cve.now/CVE-2026-24304.md): Azure Resource Manager Elevation of Privilege Vulnerability (CVSS 9.9, Microsoft Azure Resource Manager)
- [CVE-2026-24138](https://cve.now/CVE-2026-24138.md): FOG vulnerable to unauthenticated SSRF via \`/fog/service/getversion.php\` (CVSS 7.5, fogproject)
- [CVE-2026-24137](https://cve.now/CVE-2026-24137.md): sigstore legacy TUF client allows for arbitrary file writes with target cache path traversal (CVSS 5.8, sigstore · github.com/sigstore/sigstore)
- [CVE-2022-25369](https://cve.now/CVE-2022-25369.md): An issue was discovered in Dynamicweb before 9.12.8. (CVSS 9.8)
- [CVE-2025-52022](https://cve.now/CVE-2025-52022.md): A vulnerability in the PHP backend of gemsloyalty.aptsys.com.sg thru 2025-05-28 allows unauthenticated remote attackers to trigger detailed (CVSS 5.3)
- [CVE-2025-52023](https://cve.now/CVE-2025-52023.md): A vulnerability in the PHP backend of gemscms.aptsys.com.sg thru 2025-05-28 allows unauthenticated remote attackers to trigger detailed erro (CVSS 5.3)
- [CVE-2025-52024](https://cve.now/CVE-2025-52024.md): A vulnerability exists in the Aptsys POS Platform Web Services module thru 2025-05-28, which exposes internal API testing tools to unauthent (CVSS 9.4)
- [CVE-2025-52025](https://cve.now/CVE-2025-52025.md): An SQL Injection vulnerability exists in the GetServiceByRestaurantID endpoint of the Aptsys gemscms POS Platform backend thru 2025-05-28. (CVSS 9.4)
- [CVE-2025-52026](https://cve.now/CVE-2025-52026.md): An information disclosure vulnerability exists in the /srvs/membersrv/getCashiers endpoint of the Aptsys gemscms backend platform thru 2025- (CVSS 7.5)
- [CVE-2025-66719](https://cve.now/CVE-2025-66719.md): An issue was discovered in Free5gc NRF 1.4.0. (CVSS 9.1, github.com/free5gc/nrf)
- [CVE-2025-66720](https://cve.now/CVE-2025-66720.md): Null pointer dereference in free5gc pcf 1.4.0 in file internal/sbi/processor/ampolicy.go in function HandleDeletePoliciesPolAssoId. (CVSS 7.5)
- [CVE-2025-67124](https://cve.now/CVE-2025-67124.md): A TOCTOU and symlink race in svenstaro/miniserve 0.32.0 upload finalization (when uploads are enabled) can allow an attacker to overwrite ar (CVSS 6.8, miniserve)
- [CVE-2025-67125](https://cve.now/CVE-2025-67125.md): A signed integer overflow in docopt.cpp v0.6.2 (LeafPattern::match in docopt\_private.h) when merging occurrence counters (e.g., default LONG (CVSS 4.4)
- [CVE-2025-67229](https://cve.now/CVE-2025-67229.md): An improper certificate validation vulnerability exists in ToDesktop Builder v0.32.1 This vulnerability allows an unauthenticated, on-path a (CVSS 9.8)
- [CVE-2025-67230](https://cve.now/CVE-2025-67230.md): Improper permissions in the handler for the Custom URL Scheme in ToDesktop Builder v0.33.0 allows attackers with renderer-context access to (CVSS 7.1)
- [CVE-2025-67231](https://cve.now/CVE-2025-67231.md): A reflected cross-site scripting (XSS) vulnerability in ToDesktop Builder v0.33.1 allows attackers to execute arbitrary code in the context (CVSS 5.9)
- [CVE-2025-67264](https://cve.now/CVE-2025-67264.md): An OS command injection vulnerability in the com.sprd.engineermode component in Doogee Note59, Note59 Pro, and Note59 Pro+ allows a local at (CVSS 7.8)
- [CVE-2025-69907](https://cve.now/CVE-2025-69907.md): An unauthenticated information disclosure vulnerability exists in Newgen OmniDocs due to missing authentication and access control on the /o (CVSS 7.5)
- [CVE-2025-69908](https://cve.now/CVE-2025-69908.md): An unauthenticated information disclosure vulnerability in Newgen OmniApp allows attackers to enumerate valid privileged usernames via a pub (CVSS 7.5)
- [CVE-2025-70457](https://cve.now/CVE-2025-70457.md): A Remote Code Execution (RCE) vulnerability exists in Sourcecodester Modern Image Gallery App v1.0 within the gallery/upload.php component. (CVSS 9.8)
- [CVE-2025-70458](https://cve.now/CVE-2025-70458.md): A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the DomainCheckerApp class within domain/script.js of Sourcecodester Domain A (CVSS 5.4)
- [CVE-2025-70983](https://cve.now/CVE-2025-70983.md): Incorrect access control in the authRoutes function of SpringBlade v4.5.0 allows attackers with low-level privileges to escalate privileges. (CVSS 9.9)
- [CVE-2025-70985](https://cve.now/CVE-2025-70985.md): Incorrect access control in the update function of RuoYi v4.8.2 allows unauthorized attackers to arbitrarily modify data outside of their sc (CVSS 9.1)
- [CVE-2025-70986](https://cve.now/CVE-2025-70986.md): Incorrect access control in the selectDept function of RuoYi v4.8.2 allows unauthorized attackers to arbitrarily access sensitive department (CVSS 7.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-01-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.