# CVEs published 2026-02-02

156 CVEs were published on February 2, 2026: 16 critical, 55 high. Days are UTC.

- [CVE-2025-61644](https://cve.now/CVE-2025-61644.md): i18n XSS through Special:Watchlist (CVSS 0.0, Wikimedia Foundation MediaWiki)
- [CVE-2025-61637](https://cve.now/CVE-2025-61637.md): Stored XSS through system messages in MW Core (CVSS 0.0, Wikimedia Foundation MediaWiki)
- [CVE-2025-61638](https://cve.now/CVE-2025-61638.md): Sanitizer::validateAttributes data-XSS (CVSS 0.0, Wikimedia Foundation MediaWiki · Wikimedia Foundation Parso…)
- [CVE-2025-61639](https://cve.now/CVE-2025-61639.md): Suppressed blocked IP is visible in Special:BlockList, RC, and other places (CVSS 1.7, Wikimedia Foundation MediaWiki)
- [CVE-2025-61640](https://cve.now/CVE-2025-61640.md): Stored XSS through system messages in Special:RecentChangesLinked (MW Core) (CVSS 0.0, Wikimedia Foundation MediaWiki)
- [CVE-2025-61641](https://cve.now/CVE-2025-61641.md): API list=allpages with maxsize is making really slow queries (CVSS 1.7, Wikimedia Foundation MediaWiki)
- [CVE-2025-61642](https://cve.now/CVE-2025-61642.md): Stored XSS through system messages provided to CodexHtmlForms (CVSS 0.0, Wikimedia Foundation MediaWiki)
- [CVE-2025-61643](https://cve.now/CVE-2025-61643.md): EventStreams publishes suppressed recent change entries that are suppressed from their creation (CVSS 2.7, Wikimedia Foundation MediaWiki)
- [CVE-2025-61634](https://cve.now/CVE-2025-61634.md): HTML rest endpoint needs PoolCounter and proper parser cache check (CVSS 0.0, Wikimedia Foundation MediaWiki)
- [CVE-2025-61635](https://cve.now/CVE-2025-61635.md): Add rate limiting to ApiFancyCaptchaReload (CVSS 0.0, Wikimedia Foundation ConfirmEdit)
- [CVE-2025-61636](https://cve.now/CVE-2025-61636.md): Codex Special:Block vulnerable to message key XSS (CVSS 0.0, Wikimedia Foundation MediaWiki)
- [CVE-2025-6589](https://cve.now/CVE-2025-6589.md): With MultiBlocks enabled and a user who is suppressed via a MultiBlock, a user without 'hideuser' can see the hidden username in the BlockList (CVSS 2.1, Wikimedia Foundation MediaWiki)
- [CVE-2025-6590](https://cve.now/CVE-2025-6590.md): Complete content leak of private wikis due to PasswordReset Wikitext injection in error message (CVSS 4.6, Wikimedia Foundation MediaWiki)
- [CVE-2026-25228](https://cve.now/CVE-2026-25228.md): SignalK Server has Path Traversal leading to information disclosure (CVSS 5.0, signalk-server)
- [CVE-2025-6591](https://cve.now/CVE-2025-6591.md): HTML injection in API action=feedcontributions output from i18n message (CVSS 0.0, Wikimedia Foundation MediaWiki)
- [CVE-2025-6592](https://cve.now/CVE-2025-6592.md): Creating a permanent account from a temporary account associates temp username and IP address with real username in AbuseLog (CVSS 2.1, Wikimedia Foundation AbuseFilter)
- [CVE-2025-6593](https://cve.now/CVE-2025-6593.md): "{{SITENAME}} registered email address has been changed" email sent to unverified email addresses (CVSS 2.1, Wikimedia Foundation MediaWiki)
- [CVE-2026-25222](https://cve.now/CVE-2026-25222.md): PolarLearn Affected by User Enumeration via Argon2 Timing Attack on Sign-In Endpoint (CVSS 6.3, polarnl PolarLearn)
- [CVE-2025-6594](https://cve.now/CVE-2025-6594.md): XSS in Special:ApiSandbox (CVSS 0.0, Wikimedia Foundation MediaWiki)
- [CVE-2025-6595](https://cve.now/CVE-2025-6595.md): Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Multimedia (CVSS 0.0, Wikimedia Foundation MultimediaViewer)
- [CVE-2026-25221](https://cve.now/CVE-2026-25221.md): PolarLearn has Multiple Login CSRFs via Missing OAuth state Parameter (GitHub & Google) (CVSS 2.3, polarnl PolarLearn)
- [CVE-2025-6596](https://cve.now/CVE-2025-6596.md): Vector inserts portlet labels as HTML, allowing for stored XSS through system messages (CVSS 0.0, Wikimedia Foundation Vector)
- [CVE-2025-6597](https://cve.now/CVE-2025-6597.md): MediaWiki should not consider autocreation as login for the purposes of security reauthentication (CVSS 0.0, Wikimedia Foundation MediaWiki)
- [CVE-2025-6927](https://cve.now/CVE-2025-6927.md): Autoblocks from global account suppressions are publicly visible (CVSS 2.3, Wikimedia Foundation MediaWiki)
- [CVE-2026-25144](https://cve.now/CVE-2026-25144.md): Talishar has a Stored XSS which can lead to data exfiltration & user impersonation (CVSS 5.3, Talishar)
- [CVE-2026-25142](https://cve.now/CVE-2026-25142.md): SandboxJS Prototype Pollution -\> Sandbox Escape -\> RCE (CVSS 10.0, nyariv SandboxJS · @nyariv/sandboxjs)
- [CVE-2026-25137](https://cve.now/CVE-2026-25137.md): NixOs Odoo database and filestore publicly accessible with default odoo configuration (CVSS 9.1, NixOS nixpkgs)
- [CVE-2025-12772](https://cve.now/CVE-2025-12772.md): Plaintext Switch admin login password is seen in Brocade SANnav support save (CVSS 8.5, Brocade SANnav)
- [CVE-2026-25134](https://cve.now/CVE-2026-25134.md): Group-Office Argument Injection in MaintenanceController::actionZipLanguage (CVSS 9.4, Intermesh groupoffice)
- [CVE-2026-25060](https://cve.now/CVE-2026-25060.md): OpenList Insecure TLS Default Configuration (CVSS 8.1, OpenListTeam OpenList · github.com/OpenListTeam/OpenList +2)
- [CVE-2026-25059](https://cve.now/CVE-2026-25059.md): OpenList affected by Path Traversal in file copy and remove handlers (CVSS 8.8, OpenListTeam OpenList · github.com/OpenListTeam/OpenList +2)
- [CVE-2025-36194](https://cve.now/CVE-2025-36194.md): This Power System update is being released to address (CVSS 2.8, IBM PowerVM Hypervisor)
- [CVE-2025-36238](https://cve.now/CVE-2025-36238.md): Power System Exposure of Sensitive System Information (CVSS 6.0, IBM PowerVM Hypervisor)
- [CVE-2026-24763](https://cve.now/CVE-2026-24763.md): Authenticated Command Injection in OpenClaw Docker Execution via PATH Environment Variable (CVSS 8.8, clawdbot)
- [CVE-2025-36253](https://cve.now/CVE-2025-36253.md): Multiple Vulnerabilities in IBM Concert Software. (CVSS 5.9, IBM Concert)
- [CVE-2025-36436](https://cve.now/CVE-2025-36436.md): Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2026. (CVSS 6.4, IBM Cloud Pak for Business Automation)
- [CVE-2025-12679](https://cve.now/CVE-2025-12679.md): Plain text pbe key visible in audit log during Brocade SANnav migration from 2.4.0a to 3.0.0 (CVSS 7.1, Brocade SANnav)
- [CVE-2025-66480](https://cve.now/CVE-2025-66480.md): Wildfire has Arbitrary File Upload via Directory Traversal in UploadFileAction (CVSS 9.8, wildfirechat im-server)
- [CVE-2025-69207](https://cve.now/CVE-2025-69207.md): Khoj has an IDOR in Notion OAuth Flow Enables Index Poisoning (CVSS 5.4, khoj-ai khoj · khoj)
- [CVE-2026-22778](https://cve.now/CVE-2026-22778.md): vLLM leaks a heap address when PIL throws an error (CVSS 9.8, vllm-project vllm · vllm)
- [CVE-2025-13096](https://cve.now/CVE-2025-13096.md): XML eXternal Entity injection (XXE) vulnerability affect IBM Business Automation Workflow - (CVSS 7.1, IBM Business Automation Workflow containers · IBM Business…)
- [CVE-2026-22780](https://cve.now/CVE-2026-22780.md): Rizin has a heap overflow on mach0\_chained\_fixups.c (CVSS 4.4, rizinorg rizin)
- [CVE-2025-12680](https://cve.now/CVE-2025-12680.md): Brocade SANnav DataBase plaintext password is logged in failover logs (CVE-2025-12680) (CVSS 6.0, Brocade SANnav)
- [CVE-2026-23476](https://cve.now/CVE-2026-23476.md): FacturaScripts Affected by Reflected XSS (CVSS 5.4, NeoRazorX facturascripts · facturascripts/facturascripts)
- [CVE-2026-23515](https://cve.now/CVE-2026-23515.md): RCE - Command Injection in Signal K set-system-time plugin (CVSS 10.0, signalk-server · @signalk/set-system-time)
- [CVE-2026-24040](https://cve.now/CVE-2026-24040.md): jsPDF has a Shared State Race Condition in addJS Plugin (CVSS 6.3, parallax jsPDF · jspdf)
- [CVE-2026-24043](https://cve.now/CVE-2026-24043.md): jsPDF Affected by Stored XMP Metadata Injection (Spoofing & Integrity Violation) (CVSS 6.9, parallax jsPDF · jspdf)
- [CVE-2026-24133](https://cve.now/CVE-2026-24133.md): jsPDF Affected by Denial of Service (DoS) via Unvalidated BMP Dimensions in BMPDecoder (CVSS 8.7, parallax jsPDF · jspdf)
- [CVE-2026-24737](https://cve.now/CVE-2026-24737.md): jsPDF has a PDF Injection in AcroFormChoiceField which allows Arbitrary JavaScript Execution (CVSS 8.1, parallax jsPDF · jspdf)
- [CVE-2026-23997](https://cve.now/CVE-2026-23997.md): FacturaScripts has a Stored Cross-Site Scripting (XSS) in "Observations" field via History View (CVSS 8.0, NeoRazorX facturascripts · facturascripts/facturascripts)
- [CVE-2026-0924](https://cve.now/CVE-2026-0924.md): BuhoCleaner 1.15.2 - Local Privilege Escalation via PID reuse attack (CVSS 7.3, Dr.Buho BuhoCleaner)
- [CVE-2026-1778](https://cve.now/CVE-2026-1778.md): TLS disabled by default in select aws/sagemaker-python-sdk configurations (CVSS 5.9, AWS SageMaker Python SDK · sagemaker)
- [CVE-2026-1777](https://cve.now/CVE-2026-1777.md): Cleartext transmission of sensitive materials in aws/sagemaker-python-sdk (CVSS 7.2, AWS SageMaker Python SDK · sagemaker)
- [CVE-2026-24007](https://cve.now/CVE-2026-24007.md): Tuleap is missing CSRF protection in the Overview inconsistent items (CVSS 4.6, Enalean tuleap)
- [CVE-2026-24051](https://cve.now/CVE-2026-24051.md): OpenTelemetry-Go Affected by Arbitrary Code Execution via PATH Hijacking (CVSS 7.0, open-telemetry opentelemetry-go · go.opentelemetry.io/otel/…)
- [CVE-2026-24471](https://cve.now/CVE-2026-24471.md): Improper Validation in Conduit-derived homeservers resulting in Unintended Proxy or Intermediary ('Confused Deputy') (CVSS 9.3, continuwuity)
- [CVE-2026-22229](https://cve.now/CVE-2026-22229.md): Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and Deco BE25 v1.0 (CVSS 8.6, TP-Link Systems Archer BE230 · TP-Link Systems Deco BE25)
- [CVE-2026-22227](https://cve.now/CVE-2026-22227.md): Command Injection Vulnerability on TP-Link Archer BE230 v1.2 (CVSS 8.5, TP-Link Systems Archer BE230)
- [CVE-2026-22226](https://cve.now/CVE-2026-22226.md): Command Injection Vulnerability on TP-Link Archer BE230 and AX73 (CVSS 8.5, TP-Link Systems Archer BE230 · TP Link Systems Archer AX73)
- [CVE-2026-22225](https://cve.now/CVE-2026-22225.md): Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and AXE75 v1.0 (CVSS 8.5, TP-Link Systems Archer BE230 · TP Link Systems Archer AX53)
- [CVE-2026-22224](https://cve.now/CVE-2026-22224.md): Command Injection Vulnerability on TP-Link Archer BE230 v1.2 (CVSS 8.5, TP-Link Systems Archer BE230)
- [CVE-2026-22223](https://cve.now/CVE-2026-22223.md): Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and BE3600 v1 (CVSS 8.5, TP-Link System Archer BE230 · TP Link Systems Archer BE3600)
- [CVE-2026-22222](https://cve.now/CVE-2026-22222.md): Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and AXE75 v2 (CVSS 8.5, TP-Link Systems Archer BE230 · TP Link Systems Archer AXE75)
- [CVE-2026-0631](https://cve.now/CVE-2026-0631.md): Authenticated Command Injection Vulnerability in Surfshark VPN Login in multiple Archer products (CVSS 8.5, TP-Link Systems Archer BE230 · TP-Link Systems Archer AX… +2)
- [CVE-2026-0630](https://cve.now/CVE-2026-0630.md): Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and AXE75 v1.0 (CVSS 8.5, TP-Link Systems Archer BE230 · TP Link Systems AXE75)
- [CVE-2026-22221](https://cve.now/CVE-2026-22221.md): Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and BE3600 v1 (CVSS 8.5, TP-Link Systems Archer BE230 · TP-Link Systems Archer BE3600)
- [CVE-2026-1232](https://cve.now/CVE-2026-1232.md): Anti-Tamper Bypass in BeyondTrust Privilege Management for Windows (CVSS 6.8, BeyondTrust Privilege management for Windows)
- [CVE-2026-1770](https://cve.now/CVE-2026-1770.md): Improper Control of Dynamically-Managed Code Resources in Crafter Studio (CVSS 4.5, CrafterCMS · org.craftercms:craftercms)
- [CVE-2025-47402](https://cve.now/CVE-2025-47402.md): Buffer Over-read in WLAN Firmware (CVSS 6.5, Qualcomm Snapdragon)
- [CVE-2025-47399](https://cve.now/CVE-2025-47399.md): Buffer Copy Without Checking Size of Input in Camera (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-47398](https://cve.now/CVE-2025-47398.md): Use After Free in Graphics (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-47397](https://cve.now/CVE-2025-47397.md): Improper Release of Memory Before Removing Last Reference in Graphics (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-47366](https://cve.now/CVE-2025-47366.md): Exposed Dangerous Method or Function in HLOS (CVSS 7.1, Qualcomm Snapdragon)
- [CVE-2025-47364](https://cve.now/CVE-2025-47364.md): Integer Overflow or Wraparound in Automotive (CVSS 6.8, Qualcomm Snapdragon)
- [CVE-2025-47363](https://cve.now/CVE-2025-47363.md): Integer Overflow or Wraparound in Automotive (CVSS 6.8, Qualcomm Snapdragon)
- [CVE-2025-47359](https://cve.now/CVE-2025-47359.md): Use After Free in Secure Processor (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-47358](https://cve.now/CVE-2025-47358.md): Use After Free in Secure Processor (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-14914](https://cve.now/CVE-2025-14914.md): IBM WebSphere Application Server Liberty Path Traversal (CVSS 7.6, IBM WebSphere Application Server Liberty)
- [CVE-2025-15395](https://cve.now/CVE-2025-15395.md): IBM Jazz Foundation access control violation (CVSS 4.3, IBM Jazz Foundation)
- [CVE-2026-1703](https://cve.now/CVE-2026-1703.md): Limited path traversal when installing wheel archives (CVSS 2.0, Python Packaging Authority pip · pip)
- [CVE-2022-50981](https://cve.now/CVE-2022-50981.md): Multiple Innomic VibroLine VLX HD 5.0 and avibia AVLX weak password requirements (CVSS 9.8, Innomic VibroLine VLX1 HD · Innomic VibroLine VLX2 HD +18)
- [CVE-2022-50980](https://cve.now/CVE-2022-50980.md): Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset change via CAN (CVSS 6.5, Innomic VibroLine VLX1 HD · Innomic VibroLine VLX2 HD +18)
- [CVE-2022-50979](https://cve.now/CVE-2022-50979.md): Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset change via Modbus (RS485) (CVSS 6.5, Innomic VibroLine VLX1 HD · Innomic VibroLine VLX2 HD +18)
- [CVE-2022-50978](https://cve.now/CVE-2022-50978.md): Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset change via Modbus (TCP) (CVSS 7.5, Innomic VibroLine VLX1 HD · Innomic VibroLine VLX2 HD +18)
- [CVE-2022-50977](https://cve.now/CVE-2022-50977.md): Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset change via HTTP (CVSS 7.5, Innomic VibroLine VLX1 HD · Innomic VibroLine VLX2 HD +18)
- [CVE-2022-50976](https://cve.now/CVE-2022-50976.md): Innomic VibroLine Configurator and avibia Configurator allow unintended device reset via USB (CVSS 7.7, Innomic VibroLine Configurator · AvibiaLine Configurator)
- [CVE-2022-50975](https://cve.now/CVE-2022-50975.md): Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated access to device configuration (CVSS 8.8, Innomic VibroLine VLX1 HD · Innomic VibroLine VLX2 HD +18)
- [CVE-2026-1760](https://cve.now/CVE-2026-1760.md): Libsoup: soupserver: denial of service via http request smuggling (CVSS 5.3, Red Hat Enterprise Linux)
- [CVE-2026-1761](https://cve.now/CVE-2026-1761.md): Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response (CVSS 8.6, Red Hat Enterprise Linux · Red Hat OpenShift Dev Spaces (RH…)
- [CVE-2026-1186](https://cve.now/CVE-2026-1186.md): Path Traversal in EAP Legislator (CVSS 8.6, ABC PRO SP. Z O.O. EAP Legislator)
- [CVE-2026-24071](https://cve.now/CVE-2026-24071.md): XPC Client Validation via PID leading to Local Privilege Escalation in Native Instruments Native Access (CVSS 7.8, Native Instruments Native Access)
- [CVE-2026-24070](https://cve.now/CVE-2026-24070.md): Local Privilege Escalation via DYLIB Injection in Native Instruments Native Access (CVSS 8.8, Native Instruments Native Access)
- [CVE-2025-8587](https://cve.now/CVE-2025-8587.md): Time-Based Blind SQLi in AKCE Software's SKSPro (CVSS 8.6, AKCE Software Technology R&D Industry and Trade SKSPro)
- [CVE-2026-1757](https://cve.now/CVE-2026-1757.md): Libxml2: memory leak leading to local denial of service in xmllint interactive shell (CVSS 6.2, Red Hat Hardened Images · Red Hat Enterprise Linux +2)
- [CVE-2026-0599](https://cve.now/CVE-2026-0599.md): Unbounded External Image Fetch in Validation Leads to Resource-Exhaustion DoS in huggingface/text-generation-inference (CVSS 7.5, huggingface/text-generation-inference · text-generation)
- [CVE-2024-5986](https://cve.now/CVE-2024-5986.md): Remote Arbitrary File Write with Arbitrary Data in h2oai/h2o-3 (CVSS 9.1, h2oai/h2o-3 · ai.h2o:h2o-core +1)
- [CVE-2025-7105](https://cve.now/CVE-2025-7105.md): Denial of Service via JavaScript Memory Overflow in danny-avila/librechat (CVSS 5.7, danny-avila/librechat)
- [CVE-2024-2356](https://cve.now/CVE-2024-2356.md): Remote Code Execution due to LFI in '/reinstall\_extension' in parisneo/lollms-webui (CVSS 9.6, parisneo/lollms-webui)
- [CVE-2024-5386](https://cve.now/CVE-2024-5386.md): Account Hijacking via Password Reset Token Leak in lunary-ai/lunary (CVSS 9.6, lunary-ai/lunary)
- [CVE-2025-6208](https://cve.now/CVE-2025-6208.md): Uncontrolled Memory Consumption in run-llama/llama\_index (CVSS 5.3, run-llama/llama\_index · llama-index-core)
- [CVE-2025-10279](https://cve.now/CVE-2025-10279.md): Privilege Escalation in mlflow/mlflow (CVSS 7.0, mlflow/mlflow · mlflow)
- [CVE-2024-4147](https://cve.now/CVE-2024-4147.md): Insufficient Access Control in lunary-ai/lunary (CVSS 7.5, lunary-ai/lunary)
- [CVE-2026-1117](https://cve.now/CVE-2026-1117.md): Improper Access Control in parisneo/lollms (CVSS 8.2, parisneo/lollms · lollms)
- [CVE-2024-54263](https://cve.now/CVE-2024-54263.md): WordPress Spirit Framework plugin \<= 1.2.13 - Local File Inclusion vulnerability (CVSS 7.5, Talemy Spirit Framework)
- [CVE-2026-1751](https://cve.now/CVE-2026-1751.md): Missing Authorization in GitLab (CVSS 3.1, GitLab)
- [CVE-2025-9974](https://cve.now/CVE-2025-9974.md): Insufficient Input Validation on WEBUI in Nokia ONT/Beacon product (CVSS 8.0, Nokia ONT)
- [CVE-2026-20419](https://cve.now/CVE-2026-20419.md): In wlan AP/STA firmware, there is a possible system becoming irresponsive due to an uncaught exception. (CVSS 6.5, MediaTek chipset)
- [CVE-2026-20418](https://cve.now/CVE-2026-20418.md): In Thread, there is a possible out of bounds write due to a missing bounds check. (CVSS 9.8, MediaTek chipset)
- [CVE-2026-20417](https://cve.now/CVE-2026-20417.md): In pcie, there is a possible out of bounds write due to a missing bounds check. (CVSS 5.3, MediaTek chipset)
- [CVE-2026-20415](https://cve.now/CVE-2026-20415.md): In imgsys, there is a possible memory corruption due to improper locking. (CVSS 5.5, MediaTek chipset)
- [CVE-2026-20414](https://cve.now/CVE-2026-20414.md): In imgsys, there is a possible escalation of privilege due to use after free. (CVSS 6.7, MediaTek chipset)
- [CVE-2026-20413](https://cve.now/CVE-2026-20413.md): In imgsys, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek chipset)
- [CVE-2026-20412](https://cve.now/CVE-2026-20412.md): In cameraisp, there is a possible out of bounds write due to a missing bounds check. (CVSS 7.8, MediaTek chipset)
- [CVE-2026-20411](https://cve.now/CVE-2026-20411.md): In cameraisp, there is a possible escalation of privilege due to use after free. (CVSS 7.8, MediaTek chipset)
- [CVE-2026-20410](https://cve.now/CVE-2026-20410.md): In imgsys, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek chipset)
- [CVE-2026-20409](https://cve.now/CVE-2026-20409.md): In imgsys, there is a possible out of bounds write due to a missing bounds check. (CVSS 7.8, MediaTek chipset)
- [CVE-2026-20408](https://cve.now/CVE-2026-20408.md): In wlan, there is a possible out of bounds write due to a heap buffer overflow. (CVSS 8.8, MediaTek chipset)
- [CVE-2026-20407](https://cve.now/CVE-2026-20407.md): In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. (CVSS 9.3, MediaTek chipset)
- [CVE-2026-20406](https://cve.now/CVE-2026-20406.md): In Modem, there is a possible system crash due to an uncaught exception. (CVSS 6.5, MediaTek chipset)
- [CVE-2026-20405](https://cve.now/CVE-2026-20405.md): In Modem, there is a possible system crash due to a missing bounds check. (CVSS 6.5, MediaTek chipset)
- [CVE-2026-20404](https://cve.now/CVE-2026-20404.md): In Modem, there is a possible system crash due to improper input validation. (CVSS 6.5, MediaTek chipset)
- [CVE-2026-20403](https://cve.now/CVE-2026-20403.md): In Modem, there is a possible system crash due to a missing bounds check. (CVSS 6.5, MediaTek chipset)
- [CVE-2026-20422](https://cve.now/CVE-2026-20422.md): In Modem, there is a possible system crash due to improper input validation. (CVSS 6.5, MediaTek chipset)
- [CVE-2026-20421](https://cve.now/CVE-2026-20421.md): In Modem, there is a possible system crash due to improper input validation. (CVSS 6.5, MediaTek chipset)
- [CVE-2026-20402](https://cve.now/CVE-2026-20402.md): In Modem, there is a possible system crash due to improper input validation. (CVSS 6.5, MediaTek chipset)
- [CVE-2026-20401](https://cve.now/CVE-2026-20401.md): In Modem, there is a possible system crash due to an uncaught exception. (CVSS 6.5, MediaTek chipset)
- [CVE-2026-20420](https://cve.now/CVE-2026-20420.md): In Modem, there is a possible system crash due to incorrect error handling. (CVSS 6.5, MediaTek chipset)
- [CVE-2026-22888](https://cve.now/CVE-2026-22888.md): Improper input verification issue exists in Cybozu Garoon 5.0.0 to 6.0.3, which may lead to unauthorized alteration of portal settings, pote (CVSS 4.9, Cybozu Garoon)
- [CVE-2026-22881](https://cve.now/CVE-2026-22881.md): Cross-site scripting vulnerability exists in Message function of Cybozu Garoon 5.15.0 to 6.0.3, which may allow an attacker to reset arbitra (CVSS 5.7, Cybozu Garoon)
- [CVE-2026-20711](https://cve.now/CVE-2026-20711.md): Cross-site scripting vulnerability exists in E-mail function of Cybozu Garoon 5.0.0 to 6.0.3, which may allow an attacker to reset arbitrary (CVSS 6.5, Cybozu Garoon)
- [CVE-2026-0658](https://cve.now/CVE-2026-0658.md): Five Star Restaurant Reservations \< 2.7.9 - Arbitrary Bookings Deletion via CSRF (CVSS 4.3, Five Star Restaurant Reservations)
- [CVE-2025-15396](https://cve.now/CVE-2025-15396.md): Library Viewer \< 3.2.0 - Reflected Cross-Site Scripting (CVSS 7.1, Library Viewer)
- [CVE-2025-15030](https://cve.now/CVE-2025-15030.md): User Profile Builder \< 3.15.2 - Unauthenticated Arbitrary Password Reset (CVSS 9.8, User Profile Builder)
- [CVE-2026-1530](https://cve.now/CVE-2026-1530.md): Fog-kubevirt: fog-kubevirt: man-in-the-middle vulnerability due to disabled certificate validation (CVSS 8.1, Red Hat Satellite 6.16 for RHEL · Red Hat Satellite 6.17… +2)
- [CVE-2026-1531](https://cve.now/CVE-2026-1531.md): Foreman-kubevirt: foreman\_kubevirt: man-in-the-middle due to insecure default ssl verification (CVSS 8.1, Red Hat Satellite 6.16 for RHEL · Red Hat Satellite 6.17… +3)
- [CVE-2025-13881](https://cve.now/CVE-2025-13881.md): Org.keycloak.services.resources.admin: keycloak: limited administrator can retrieve sensitive user attributes via admin api (CVSS 2.7, Red Hat build of Keycloak · org.keycloak:keycloak-services)
- [CVE-2026-1746](https://cve.now/CVE-2026-1746.md): JeecgBoot Online Report API loadDictItemByKeyword sql injection (CVSS 5.3, JeecgBoot)
- [CVE-2026-1745](https://cve.now/CVE-2026-1745.md): SourceCodester Medical Certificate Generator App cross-site request forgery (CVSS 5.3, SourceCodester Medical Certificate Generator App)
- [CVE-2026-25202](https://cve.now/CVE-2026-25202.md): The database account and password are hardcoded, allowing login with the account to manipulate the database in MagicInfo9 Server.This issue (CVSS 9.8, Samsung Electronics MagicINFO 9 Server)
- [CVE-2026-25201](https://cve.now/CVE-2026-25201.md): An unauthenticated user can upload arbitrary files to execute remote code, leading to privilege escalation in MagicInfo9 Server. (CVSS 8.8, Samsung Electronics MagicINFO 9 Server)
- [CVE-2026-25200](https://cve.now/CVE-2026-25200.md): A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Stored XSS, which can r (CVSS 9.8, Samsung Electronics MagicINFO 9 Server)
- [CVE-2026-24788](https://cve.now/CVE-2026-24788.md): RaspAP raspap-webgui versions prior to 3.3.6 contain an OS command injection vulnerability. (CVSS 8.8, raspap-webgui · billz/raspap-webgui)
- [CVE-2026-1744](https://cve.now/CVE-2026-1744.md): D-Link DSL-6641K sp\_pppoe\_user.js doSubmitPPP cross site scripting (CVSS 4.8, D-Link DSL-6641K)
- [CVE-2026-1743](https://cve.now/CVE-2026-1743.md): DJI Mavic Mini/Air/Spark/Mini SE Enhanced Wi-Fi Pairing authentication replay (CVSS 2.3, DJI Mavic Mini · DJI Air +2)
- [CVE-2026-1742](https://cve.now/CVE-2026-1742.md): EFM ipTIME A8004T VPN Service timepro.cgi commit\_vpncli\_file\_upload unrestricted upload (CVSS 5.1, EFM ipTIME A8004T)
- [CVE-2026-1741](https://cve.now/CVE-2026-1741.md): EFM ipTIME A8004T Debug d.cgi httpcon\_check\_session\_url backdoor (CVSS 7.5, EFM ipTIME A8004T)
- [CVE-2026-1740](https://cve.now/CVE-2026-1740.md): EFM ipTIME A8004T Hidden Hiddenloginsetup timepro.cgi httpcon\_check\_session\_url improper authentication (CVSS 6.9, EFM ipTIME A8004T)
- [CVE-2026-1739](https://cve.now/CVE-2026-1739.md): Free5GC pcf smpolicy.go HandleCreateSmPolicyRequest null pointer dereference (CVSS 6.9, Free5GC pcf)
- [CVE-2025-13348](https://cve.now/CVE-2025-13348.md): An improper access control vulnerability exists in ASUS Secure Delete Driver of ASUS Business Manager. (CVSS 8.5, ASUS Business Manager)
- [CVE-2026-1738](https://cve.now/CVE-2026-1738.md): Open5GS SGWC context.c sgwc\_tunnel\_add assertion (CVSS 6.9, Open5GS)
- [CVE-2026-1737](https://cve.now/CVE-2026-1737.md): Open5GS CreateBearerRequest s5c-handler.c sgwc\_s5c\_handle\_create\_bearer\_request assertion (CVSS 6.9, Open5GS)
- [CVE-2026-1736](https://cve.now/CVE-2026-1736.md): Open5GS SGWC s11-handler.c assertion (CVSS 6.9, Open5GS)
- [CVE-2026-1735](https://cve.now/CVE-2026-1735.md): Yealink MeetingBar A30 Diagnostic command injection (CVSS 2.4, Yealink MeetingBar A30)
- [CVE-2025-70958](https://cve.now/CVE-2025-70958.md): Multiple reflected cross-site scripting (XSS) vulnerabilities in the installation module of Subrion CMS v4.2.1 allows attackers to execute a (CVSS 6.1, intelliants/subrion)
- [CVE-2025-70959](https://cve.now/CVE-2025-70959.md): A stored cross-site scripting (XSS) vulnerability in the Jobs module of Tendenci CMS v15.3.7 allows attackers to execute arbitrary web scrip (CVSS 5.4, tendenci)
- [CVE-2025-70960](https://cve.now/CVE-2025-70960.md): A stored cross-site scripting (XSS) vulnerability in the Forums module of Tendenci CMS v15.3.7 allows attackers to execute arbitrary web scr (CVSS 5.4, tendenci)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-02-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.