CVEs published February 2, 2026
156 CVEs were published on February 2, 2026: 16 critical, 55 high.
- Published
- 156
- Critical
- 16
- High
- 55
- Medium
- 58
- Low
- 27
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 62
Most affected products
- MediaTek chipset
- 21
- Wikimedia Foundation MediaWiki
- 16
- Qualcomm Snapdragon
- 9
- Innomic VibroLine VLX1 HD · Innomic VibroLine VLX2 HD +18
- 6
- parallax jsPDF · jspdf
- 4
- Brocade SANnav
- 3
- Cybozu Garoon
- 3
- EFM ipTIME A8004T
- 3
- Open5GS
- 3
- Samsung Electronics MagicINFO 9 Server
- 3
Critical 16
- CVE-2026-25142SandboxJS Prototype Pollution -> Sandbox Escape -> RCEnyariv SandboxJS · @nyariv/sandboxjs
- CVE-2026-25137NixOs Odoo database and filestore publicly accessible with default odoo configurationNixOS nixpkgs
- CVE-2026-25134Group-Office Argument Injection in MaintenanceController::actionZipLanguageIntermesh groupoffice
- CVE-2025-66480Wildfire has Arbitrary File Upload via Directory Traversal in UploadFileActionwildfirechat im-server
- CVE-2026-22778vLLM leaks a heap address when PIL throws an errorvllm-project vllm · vllm
- CVE-2026-23515RCE - Command Injection in Signal K set-system-time pluginsignalk-server · @signalk/set-system-time
- CVE-2026-24471Improper Validation in Conduit-derived homeservers resulting in Unintended Proxy or Intermediary ('Confused Deputy')continuwuity
- CVE-2022-50981Multiple Innomic VibroLine VLX HD 5.0 and avibia AVLX weak password requirementsInnomic VibroLine VLX1 HD · Innomic VibroLine VLX2 HD +18
- CVE-2024-5986Remote Arbitrary File Write with Arbitrary Data in h2oai/h2o-3h2oai/h2o-3 · ai.h2o:h2o-core +1
- CVE-2024-2356Remote Code Execution due to LFI in '/reinstall_extension' in parisneo/lollms-webuiparisneo/lollms-webui
- CVE-2024-5386Account Hijacking via Password Reset Token Leak in lunary-ai/lunarylunary-ai/lunary
- CVE-2026-20418In Thread, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20407In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check.MediaTek chipset
- CVE-2025-15030User Profile Builder < 3.15.2 - Unauthenticated Arbitrary Password ResetUser Profile Builder
- CVE-2026-25202The database account and password are hardcoded, allowing login with the account to manipulate the database in MagicInfo9 Server.This issue Samsung Electronics MagicINFO 9 Server
- CVE-2026-25200A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Stored XSS, which can rSamsung Electronics MagicINFO 9 Server
High 55
- CVE-2025-12772Plaintext Switch admin login password is seen in Brocade SANnav support saveBrocade SANnav
- CVE-2026-25060OpenList Insecure TLS Default ConfigurationOpenListTeam OpenList · github.com/OpenListTeam/OpenList +2
- CVE-2026-25059OpenList affected by Path Traversal in file copy and remove handlersOpenListTeam OpenList · github.com/OpenListTeam/OpenList +2
- CVE-2026-24763Authenticated Command Injection in OpenClaw Docker Execution via PATH Environment Variableclawdbot
- CVE-2025-12679Plain text pbe key visible in audit log during Brocade SANnav migration from 2.4.0a to 3.0.0Brocade SANnav
- CVE-2025-13096XML eXternal Entity injection (XXE) vulnerability affect IBM Business Automation Workflow -IBM Business Automation Workflow containers · IBM Business…
- CVE-2026-24133jsPDF Affected by Denial of Service (DoS) via Unvalidated BMP Dimensions in BMPDecoderparallax jsPDF · jspdf
- CVE-2026-24737jsPDF has a PDF Injection in AcroFormChoiceField which allows Arbitrary JavaScript Executionparallax jsPDF · jspdf
- CVE-2026-23997FacturaScripts has a Stored Cross-Site Scripting (XSS) in "Observations" field via History ViewNeoRazorX facturascripts · facturascripts/facturascripts
- CVE-2026-0924BuhoCleaner 1.15.2 - Local Privilege Escalation via PID reuse attackDr.Buho BuhoCleaner
- CVE-2026-1777Cleartext transmission of sensitive materials in aws/sagemaker-python-sdkAWS SageMaker Python SDK · sagemaker
- CVE-2026-24051OpenTelemetry-Go Affected by Arbitrary Code Execution via PATH Hijackingopen-telemetry opentelemetry-go · go.opentelemetry.io/otel/…
- CVE-2026-22229Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and Deco BE25 v1.0TP-Link Systems Archer BE230 · TP-Link Systems Deco BE25
- CVE-2026-22227Command Injection Vulnerability on TP-Link Archer BE230 v1.2TP-Link Systems Archer BE230
- CVE-2026-22226Command Injection Vulnerability on TP-Link Archer BE230 and AX73TP-Link Systems Archer BE230 · TP Link Systems Archer AX73
- CVE-2026-22225Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and AXE75 v1.0TP-Link Systems Archer BE230 · TP Link Systems Archer AX53
- CVE-2026-22224Command Injection Vulnerability on TP-Link Archer BE230 v1.2TP-Link Systems Archer BE230
- CVE-2026-22223Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and BE3600 v1TP-Link System Archer BE230 · TP Link Systems Archer BE3600
- CVE-2026-22222Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and AXE75 v2TP-Link Systems Archer BE230 · TP Link Systems Archer AXE75
- CVE-2026-0631Authenticated Command Injection Vulnerability in Surfshark VPN Login in multiple Archer productsTP-Link Systems Archer BE230 · TP-Link Systems Archer AX… +2
- CVE-2026-0630Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and AXE75 v1.0TP-Link Systems Archer BE230 · TP Link Systems AXE75
- CVE-2026-22221Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and BE3600 v1TP-Link Systems Archer BE230 · TP-Link Systems Archer BE3600
- CVE-2025-47399Buffer Copy Without Checking Size of Input in CameraQualcomm Snapdragon
- CVE-2025-47398Use After Free in GraphicsQualcomm Snapdragon
- CVE-2025-47397Improper Release of Memory Before Removing Last Reference in GraphicsQualcomm Snapdragon
- CVE-2025-47366Exposed Dangerous Method or Function in HLOSQualcomm Snapdragon
- CVE-2025-47359Use After Free in Secure ProcessorQualcomm Snapdragon
- CVE-2025-47358Use After Free in Secure ProcessorQualcomm Snapdragon
- CVE-2025-14914IBM WebSphere Application Server Liberty Path TraversalIBM WebSphere Application Server Liberty
- CVE-2022-50978Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset change via Modbus (TCP)Innomic VibroLine VLX1 HD · Innomic VibroLine VLX2 HD +18
- CVE-2022-50977Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset change via HTTPInnomic VibroLine VLX1 HD · Innomic VibroLine VLX2 HD +18
- CVE-2022-50976Innomic VibroLine Configurator and avibia Configurator allow unintended device reset via USBInnomic VibroLine Configurator · AvibiaLine Configurator
- CVE-2022-50975Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated access to device configurationInnomic VibroLine VLX1 HD · Innomic VibroLine VLX2 HD +18
- CVE-2026-1761Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http responseRed Hat Enterprise Linux · Red Hat OpenShift Dev Spaces (RH…
- CVE-2026-1186Path Traversal in EAP LegislatorABC PRO SP. Z O.O. EAP Legislator
- CVE-2026-24071XPC Client Validation via PID leading to Local Privilege Escalation in Native Instruments Native AccessNative Instruments Native Access
- CVE-2026-24070Local Privilege Escalation via DYLIB Injection in Native Instruments Native AccessNative Instruments Native Access
- CVE-2025-8587Time-Based Blind SQLi in AKCE Software's SKSProAKCE Software Technology R&D Industry and Trade SKSPro
- CVE-2026-0599Unbounded External Image Fetch in Validation Leads to Resource-Exhaustion DoS in huggingface/text-generation-inferencehuggingface/text-generation-inference · text-generation
- CVE-2025-10279Privilege Escalation in mlflow/mlflowmlflow/mlflow · mlflow
- CVE-2024-4147Insufficient Access Control in lunary-ai/lunarylunary-ai/lunary
- CVE-2026-1117Improper Access Control in parisneo/lollmsparisneo/lollms · lollms
- CVE-2024-54263WordPress Spirit Framework plugin <= 1.2.13 - Local File Inclusion vulnerabilityTalemy Spirit Framework
- CVE-2025-9974Insufficient Input Validation on WEBUI in Nokia ONT/Beacon productNokia ONT
- CVE-2026-20412In cameraisp, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20411In cameraisp, there is a possible escalation of privilege due to use after free.MediaTek chipset
- CVE-2026-20409In imgsys, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20408In wlan, there is a possible out of bounds write due to a heap buffer overflow.MediaTek chipset
- CVE-2025-15396Library Viewer < 3.2.0 - Reflected Cross-Site ScriptingLibrary Viewer
- CVE-2026-1530Fog-kubevirt: fog-kubevirt: man-in-the-middle vulnerability due to disabled certificate validationRed Hat Satellite 6.16 for RHEL · Red Hat Satellite 6.17… +2
- CVE-2026-1531Foreman-kubevirt: foreman_kubevirt: man-in-the-middle due to insecure default ssl verificationRed Hat Satellite 6.16 for RHEL · Red Hat Satellite 6.17… +3
- CVE-2026-25201An unauthenticated user can upload arbitrary files to execute remote code, leading to privilege escalation in MagicInfo9 Server.Samsung Electronics MagicINFO 9 Server
- CVE-2026-24788RaspAP raspap-webgui versions prior to 3.3.6 contain an OS command injection vulnerability.raspap-webgui · billz/raspap-webgui
- CVE-2026-1741EFM ipTIME A8004T Debug d.cgi httpcon_check_session_url backdoorEFM ipTIME A8004T
- CVE-2025-13348An improper access control vulnerability exists in ASUS Secure Delete Driver of ASUS Business Manager.ASUS Business Manager
Medium, low and unrated 85
- CVE-2025-61644i18n XSS through Special:WatchlistWikimedia Foundation MediaWiki
- CVE-2025-61637Stored XSS through system messages in MW CoreWikimedia Foundation MediaWiki
- CVE-2025-61638Sanitizer::validateAttributes data-XSSWikimedia Foundation MediaWiki · Wikimedia Foundation Parso…
- CVE-2025-61639Suppressed blocked IP is visible in Special:BlockList, RC, and other placesWikimedia Foundation MediaWiki
- CVE-2025-61640Stored XSS through system messages in Special:RecentChangesLinked (MW Core)Wikimedia Foundation MediaWiki
- CVE-2025-61641API list=allpages with maxsize is making really slow queriesWikimedia Foundation MediaWiki
- CVE-2025-61642Stored XSS through system messages provided to CodexHtmlFormsWikimedia Foundation MediaWiki
- CVE-2025-61643EventStreams publishes suppressed recent change entries that are suppressed from their creationWikimedia Foundation MediaWiki
- CVE-2025-61634HTML rest endpoint needs PoolCounter and proper parser cache checkWikimedia Foundation MediaWiki
- CVE-2025-61635Add rate limiting to ApiFancyCaptchaReloadWikimedia Foundation ConfirmEdit
- CVE-2025-61636Codex Special:Block vulnerable to message key XSSWikimedia Foundation MediaWiki
- CVE-2025-6589With MultiBlocks enabled and a user who is suppressed via a MultiBlock, a user without 'hideuser' can see the hidden username in the BlockListWikimedia Foundation MediaWiki
- CVE-2025-6590Complete content leak of private wikis due to PasswordReset Wikitext injection in error messageWikimedia Foundation MediaWiki
- CVE-2026-25228SignalK Server has Path Traversal leading to information disclosuresignalk-server
- CVE-2025-6591HTML injection in API action=feedcontributions output from i18n messageWikimedia Foundation MediaWiki
- CVE-2025-6592Creating a permanent account from a temporary account associates temp username and IP address with real username in AbuseLogWikimedia Foundation AbuseFilter
- CVE-2025-6593"{{SITENAME}} registered email address has been changed" email sent to unverified email addressesWikimedia Foundation MediaWiki
- CVE-2026-25222PolarLearn Affected by User Enumeration via Argon2 Timing Attack on Sign-In Endpointpolarnl PolarLearn
- CVE-2025-6594XSS in Special:ApiSandboxWikimedia Foundation MediaWiki
- CVE-2025-6595Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MultimediaWikimedia Foundation MultimediaViewer
- CVE-2026-25221PolarLearn has Multiple Login CSRFs via Missing OAuth state Parameter (GitHub & Google)polarnl PolarLearn
- CVE-2025-6596Vector inserts portlet labels as HTML, allowing for stored XSS through system messagesWikimedia Foundation Vector
- CVE-2025-6597MediaWiki should not consider autocreation as login for the purposes of security reauthenticationWikimedia Foundation MediaWiki
- CVE-2025-6927Autoblocks from global account suppressions are publicly visibleWikimedia Foundation MediaWiki
- CVE-2026-25144Talishar has a Stored XSS which can lead to data exfiltration & user impersonationTalishar
- CVE-2025-36194This Power System update is being released to addressIBM PowerVM Hypervisor
- CVE-2025-36238Power System Exposure of Sensitive System InformationIBM PowerVM Hypervisor
- CVE-2025-36253Multiple Vulnerabilities in IBM Concert Software.IBM Concert
- CVE-2025-36436Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2026.IBM Cloud Pak for Business Automation
- CVE-2025-69207Khoj has an IDOR in Notion OAuth Flow Enables Index Poisoningkhoj-ai khoj · khoj
- CVE-2026-22780Rizin has a heap overflow on mach0_chained_fixups.crizinorg rizin
- CVE-2025-12680Brocade SANnav DataBase plaintext password is logged in failover logs (CVE-2025-12680)Brocade SANnav
- CVE-2026-23476FacturaScripts Affected by Reflected XSSNeoRazorX facturascripts · facturascripts/facturascripts
- CVE-2026-24040jsPDF has a Shared State Race Condition in addJS Pluginparallax jsPDF · jspdf
- CVE-2026-24043jsPDF Affected by Stored XMP Metadata Injection (Spoofing & Integrity Violation)parallax jsPDF · jspdf
- CVE-2026-1778TLS disabled by default in select aws/sagemaker-python-sdk configurationsAWS SageMaker Python SDK · sagemaker
- CVE-2026-24007Tuleap is missing CSRF protection in the Overview inconsistent itemsEnalean tuleap
- CVE-2026-1232Anti-Tamper Bypass in BeyondTrust Privilege Management for WindowsBeyondTrust Privilege management for Windows
- CVE-2026-1770Improper Control of Dynamically-Managed Code Resources in Crafter StudioCrafterCMS · org.craftercms:craftercms
- CVE-2025-47402Buffer Over-read in WLAN FirmwareQualcomm Snapdragon
- CVE-2025-47364Integer Overflow or Wraparound in AutomotiveQualcomm Snapdragon
- CVE-2025-47363Integer Overflow or Wraparound in AutomotiveQualcomm Snapdragon
- CVE-2025-15395IBM Jazz Foundation access control violationIBM Jazz Foundation
- CVE-2026-1703Limited path traversal when installing wheel archivesPython Packaging Authority pip · pip
- CVE-2022-50980Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset change via CANInnomic VibroLine VLX1 HD · Innomic VibroLine VLX2 HD +18
- CVE-2022-50979Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset change via Modbus (RS485)Innomic VibroLine VLX1 HD · Innomic VibroLine VLX2 HD +18
- CVE-2026-1760Libsoup: soupserver: denial of service via http request smugglingRed Hat Enterprise Linux
- CVE-2026-1757Libxml2: memory leak leading to local denial of service in xmllint interactive shellRed Hat Hardened Images · Red Hat Enterprise Linux +2
- CVE-2025-7105Denial of Service via JavaScript Memory Overflow in danny-avila/librechatdanny-avila/librechat
- CVE-2025-6208Uncontrolled Memory Consumption in run-llama/llama_indexrun-llama/llama_index · llama-index-core
- CVE-2026-1751Missing Authorization in GitLabGitLab
- CVE-2026-20419In wlan AP/STA firmware, there is a possible system becoming irresponsive due to an uncaught exception.MediaTek chipset
- CVE-2026-20417In pcie, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20415In imgsys, there is a possible memory corruption due to improper locking.MediaTek chipset
- CVE-2026-20414In imgsys, there is a possible escalation of privilege due to use after free.MediaTek chipset
- CVE-2026-20413In imgsys, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20410In imgsys, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20406In Modem, there is a possible system crash due to an uncaught exception.MediaTek chipset
- CVE-2026-20405In Modem, there is a possible system crash due to a missing bounds check.MediaTek chipset
- CVE-2026-20404In Modem, there is a possible system crash due to improper input validation.MediaTek chipset
- CVE-2026-20403In Modem, there is a possible system crash due to a missing bounds check.MediaTek chipset
- CVE-2026-20422In Modem, there is a possible system crash due to improper input validation.MediaTek chipset
- CVE-2026-20421In Modem, there is a possible system crash due to improper input validation.MediaTek chipset
- CVE-2026-20402In Modem, there is a possible system crash due to improper input validation.MediaTek chipset
- CVE-2026-20401In Modem, there is a possible system crash due to an uncaught exception.MediaTek chipset
- CVE-2026-20420In Modem, there is a possible system crash due to incorrect error handling.MediaTek chipset
- CVE-2026-22888Improper input verification issue exists in Cybozu Garoon 5.0.0 to 6.0.3, which may lead to unauthorized alteration of portal settings, poteCybozu Garoon
- CVE-2026-22881Cross-site scripting vulnerability exists in Message function of Cybozu Garoon 5.15.0 to 6.0.3, which may allow an attacker to reset arbitraCybozu Garoon
- CVE-2026-20711Cross-site scripting vulnerability exists in E-mail function of Cybozu Garoon 5.0.0 to 6.0.3, which may allow an attacker to reset arbitraryCybozu Garoon
- CVE-2026-0658Five Star Restaurant Reservations < 2.7.9 - Arbitrary Bookings Deletion via CSRFFive Star Restaurant Reservations
- CVE-2025-13881Org.keycloak.services.resources.admin: keycloak: limited administrator can retrieve sensitive user attributes via admin apiRed Hat build of Keycloak · org.keycloak:keycloak-services
- CVE-2026-1746JeecgBoot Online Report API loadDictItemByKeyword sql injectionJeecgBoot
- CVE-2026-1745SourceCodester Medical Certificate Generator App cross-site request forgerySourceCodester Medical Certificate Generator App
- CVE-2026-1744D-Link DSL-6641K sp_pppoe_user.js doSubmitPPP cross site scriptingD-Link DSL-6641K
- CVE-2026-1743DJI Mavic Mini/Air/Spark/Mini SE Enhanced Wi-Fi Pairing authentication replayDJI Mavic Mini · DJI Air +2
- CVE-2026-1742EFM ipTIME A8004T VPN Service timepro.cgi commit_vpncli_file_upload unrestricted uploadEFM ipTIME A8004T
- CVE-2026-1740EFM ipTIME A8004T Hidden Hiddenloginsetup timepro.cgi httpcon_check_session_url improper authenticationEFM ipTIME A8004T
- CVE-2026-1739Free5GC pcf smpolicy.go HandleCreateSmPolicyRequest null pointer dereferenceFree5GC pcf
- CVE-2026-1738Open5GS SGWC context.c sgwc_tunnel_add assertionOpen5GS
- CVE-2026-1737Open5GS CreateBearerRequest s5c-handler.c sgwc_s5c_handle_create_bearer_request assertionOpen5GS
- CVE-2026-1736Open5GS SGWC s11-handler.c assertionOpen5GS
- CVE-2026-1735Yealink MeetingBar A30 Diagnostic command injectionYealink MeetingBar A30
- CVE-2025-70958Multiple reflected cross-site scripting (XSS) vulnerabilities in the installation module of Subrion CMS v4.2.1 allows attackers to execute aintelliants/subrion
- CVE-2025-70959A stored cross-site scripting (XSS) vulnerability in the Jobs module of Tendenci CMS v15.3.7 allows attackers to execute arbitrary web scriptendenci
- CVE-2025-70960A stored cross-site scripting (XSS) vulnerability in the Forums module of Tendenci CMS v15.3.7 allows attackers to execute arbitrary web scrtendenci