# CVEs published 2026-02-03

337 CVEs were published on February 3, 2026: 27 critical, 114 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2026-1813](https://cve.now/CVE-2026-1813.md): bolo-blog bolo-solo FreeMarker Template PicUploadProcessor.java unrestricted upload (CVSS 5.3, bolo-blog bolo-solo)
- [CVE-2026-1633](https://cve.now/CVE-2026-1633.md): Synectix LAN 232 TRIO Missing Authentication for Critical Function (CVSS 10.0, Synectix LAN 232 TRIO)
- [CVE-2026-1632](https://cve.now/CVE-2026-1632.md): RISS SRL MOMA Seismic Station Missing Authentication for Critical Function (CVSS 9.1, RISS SRL MOMA Seismic Station)
- [CVE-2026-1812](https://cve.now/CVE-2026-1812.md): bolo-blog bolo-solo Filename BackupService.java importFromCnblogs path traversal (CVSS 5.3, bolo-blog bolo-solo)
- [CVE-2026-1755](https://cve.now/CVE-2026-1755.md): Menu Icons by ThemeIsle \<= 0.13.20 - Authenticated (Author+) Stored Cross-Site Scripting (CVSS 6.4, Menu Icons by ThemeIsle)
- [CVE-2026-24514](https://cve.now/CVE-2026-24514.md): ingress-nginx Admission Controller denial of service (CVSS 6.5, Kubernetes ingress-nginx · k8s.io/ingress-nginx)
- [CVE-2026-24513](https://cve.now/CVE-2026-24513.md): ingress-nginx auth-url protection bypass (CVSS 3.1, Kubernetes ingress-nginx · k8s.io/ingress-nginx)
- [CVE-2026-24512](https://cve.now/CVE-2026-24512.md): ingress-nginx auth-method nginx configuration injection (CVSS 8.8, Kubernetes ingress-nginx · k8s.io/ingress-nginx)
- [CVE-2026-1580](https://cve.now/CVE-2026-1580.md): ingress-nginx auth-method nginx configuration injection (CVSS 8.8, Kubernetes ingress-nginx · k8s.io/ingress-nginx)
- [CVE-2025-33081](https://cve.now/CVE-2025-33081.md): Multiple Vulnerabilities in IBM Concert Software. (CVSS 3.3, IBM Concert)
- [CVE-2025-36033](https://cve.now/CVE-2025-36033.md): IBM Engineering Lifecycle Management - Global Configuration Management is vulnerable to cross-site scripting (CVSS 5.4, IBM Engineering Lifecycle Management - Global Configuration…)
- [CVE-2020-37087](https://cve.now/CVE-2020-37087.md): Easy Transfer 1.7 for iOS - Persistent Cross-Site Scripting (CVSS 5.1, Rubikon Teknoloji Easy Transfer)
- [CVE-2020-37084](https://cve.now/CVE-2020-37084.md): School ERP Pro 1.0 Admin Profile Photo Upload Remote Code Execution Vulnerability (CVSS 8.6, Arox School ERP Pro)
- [CVE-2025-36094](https://cve.now/CVE-2025-36094.md): Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2026. (CVSS 5.4, IBM Cloud Pak for Business Automation)
- [CVE-2020-37097](https://cve.now/CVE-2020-37097.md): Edimax EW-7438RPn 1.13 - Information Disclosure (WiFi Password) (CVSS 8.7, EDIMAX Technology Co. EW-7438RPn Mini)
- [CVE-2020-37096](https://cve.now/CVE-2020-37096.md): Edimax EW-7438RPn - Cross-Site Request Forgery (MAC Filtering) (CVSS 5.1, EDIMAX Technology Co. EW-7438RPn Mini)
- [CVE-2020-37094](https://cve.now/CVE-2020-37094.md): EspoCRM 5.7.0 \< 5.9.0 - Two-Factor Authentication Bypass via Auth Token Reuse Between Accounts with Identical Passwords (CVSS 8.6, EspoCRM)
- [CVE-2020-37093](https://cve.now/CVE-2020-37093.md): Netis E1+ 1.2.32533 - Unauthenticated WiFi Password Leak (CVSS 8.7, Netis Systems Co. Netis E1+)
- [CVE-2020-37092](https://cve.now/CVE-2020-37092.md): Netis E1+ 1.2.32533 - Backdoor Account (root) (CVSS 9.3, Netis Systems Co. Netis E1+)
- [CVE-2020-37091](https://cve.now/CVE-2020-37091.md): Maian Support Helpdesk 4.3 - Cross-Site Request Forgery (Add Admin) (CVSS 5.1, Maian Media Maian Support Helpdesk)
- [CVE-2020-37090](https://cve.now/CVE-2020-37090.md): School ERP Pro 1.0 - Remote Code Execution (CVSS 8.7, Arox School ERP Pro)
- [CVE-2020-37089](https://cve.now/CVE-2020-37089.md): School ERP Pro 1.0 - 'es\_messagesid' SQL Injection (CVSS 7.1, Arox School ERP Pro)
- [CVE-2020-37088](https://cve.now/CVE-2020-37088.md): School ERP Pro 1.0 - Arbitrary File Read (CVSS 8.7, Arox School ERP Pro)
- [CVE-2020-37086](https://cve.now/CVE-2020-37086.md): Easy Transfer 1.7 for iOS - Directory Traversal (CVSS 6.9, Rubikon Teknoloji Easy Transfer)
- [CVE-2020-37085](https://cve.now/CVE-2020-37085.md): VirtualTablet Server 3.0.2 - Denial of Service (PoC) (CVSS 8.7, SunnySideSoft VirtualTablet Server)
- [CVE-2020-37083](https://cve.now/CVE-2020-37083.md): addressbook 9.0.0.1 - 'id' SQL Injection (CVSS 8.8, chatelao PHP Address Book)
- [CVE-2020-37082](https://cve.now/CVE-2020-37082.md): webERP 4.15.1 - Unauthenticated Backup File Access (CVSS 8.6, webERP)
- [CVE-2020-37081](https://cve.now/CVE-2020-37081.md): Fishing Reservation System 7.5 - 'uid' SQL Injection (CVSS 7.1, Fishing Reservation System)
- [CVE-2020-37080](https://cve.now/CVE-2020-37080.md): webTareas 2.0.p8 - Arbitrary File Deletion (CVSS 7.2, luiswang webTareas)
- [CVE-2020-37078](https://cve.now/CVE-2020-37078.md): i-doit Open Source CMDB 1.14.1 - Arbitrary File Deletion (CVSS 7.2, i-doit Open Source CMDB)
- [CVE-2020-37077](https://cve.now/CVE-2020-37077.md): Booked Scheduler 2.7.7 - Authenticated Directory Traversal (CVSS 6.9, Twinkle Toes Software Booked Scheduler)
- [CVE-2020-37076](https://cve.now/CVE-2020-37076.md): Victor CMS 1.0 - 'post' SQL Injection (CVSS 8.8, VictorAlagwu CMSsite)
- [CVE-2020-37075](https://cve.now/CVE-2020-37075.md): LanSend 3.2 - Buffer Overflow (SEH) (CVSS 8.4, LizardSystems LanSend)
- [CVE-2020-37074](https://cve.now/CVE-2020-37074.md): Remote Desktop Audit 2.3.0.157 - Buffer Overflow (SEH) (CVSS 8.4, LizardSystems Remote Desktop Audit)
- [CVE-2020-37073](https://cve.now/CVE-2020-37073.md): Victor CMS 1.0 - Authenticated Arbitrary File Upload (CVSS 8.6, VictorAlagwu CMSsite)
- [CVE-2020-37072](https://cve.now/CVE-2020-37072.md): Victor CMS 1.0 - 'comment\_author' Persistent Cross-Site Scripting (CVSS 5.1, VictorAlagwu CMSsite)
- [CVE-2020-37071](https://cve.now/CVE-2020-37071.md): CraftCMS 3 vCard Plugin 1.0.0 - Remote Code Execution (CVSS 9.3, CraftCMS)
- [CVE-2020-37070](https://cve.now/CVE-2020-37070.md): CloudMe 1.11.2 - Buffer Overflow (SEH,DEP,ASLR) (CVSS 8.6, CloudMe)
- [CVE-2020-37069](https://cve.now/CVE-2020-37069.md): Konica Minolta FTP Utility 1.0 - 'NLST' Denial of Service (CVSS 8.7, Konica Minolta FTP Utility)
- [CVE-2020-37068](https://cve.now/CVE-2020-37068.md): Konica Minolta FTP Utility 1.0 - 'LIST' Denial of Service (CVSS 8.7, Konica Minolta FTP Utility)
- [CVE-2020-37067](https://cve.now/CVE-2020-37067.md): Filetto 1.0 - 'FEAT' Denial of Service (CVSS 7.1, Utillyty Filetto)
- [CVE-2020-37066](https://cve.now/CVE-2020-37066.md): GoldWave 5.70 – Buffer Overflow (SEH Unicode) (CVSS 8.4, GoldWave)
- [CVE-2020-37065](https://cve.now/CVE-2020-37065.md): StreamRipper32 2.6 - Buffer Overflow (CVSS 8.4, StreamRipper32)
- [CVE-2019-25260](https://cve.now/CVE-2019-25260.md): OXID eShop 6.3.4 - 'sorting' SQL Injection (CVSS 8.8, OXID-eSales OXID eShop)
- [CVE-2026-1811](https://cve.now/CVE-2026-1811.md): bolo-blog bolo-solo Filename BackupService.java importFromMarkdown path traversal (CVSS 5.3, bolo-blog bolo-solo)
- [CVE-2026-1341](https://cve.now/CVE-2026-1341.md): Missing Authentication for Critical Function in Avation Light Engine Pro (CVSS 9.3, Avation Light Engine Pro)
- [CVE-2026-25223](https://cve.now/CVE-2026-25223.md): Fastify's Content-Type header tab character allows body validation bypass (CVSS 7.5, fastify)
- [CVE-2026-25224](https://cve.now/CVE-2026-25224.md): Fastify Vulnerable to DoS via Unbounded Memory Allocation in sendWebStream (CVSS 3.7, fastify)
- [CVE-2026-25510](https://cve.now/CVE-2026-25510.md): CI4MS Vulnerable to Remote Code Execution (RCE) via Arbitrary File Creation and Save in File Editor (CVSS 10.0, ci4-cms-erp ci4ms · ci4-cms-erp/ci4ms)
- [CVE-2026-25509](https://cve.now/CVE-2026-25509.md): CI4MS Vulnerable to User Email Enumeration via Password Reset Flow (CVSS 5.3, ci4-cms-erp ci4ms · ci4-cms-erp/ci4ms)
- [CVE-2026-25150](https://cve.now/CVE-2026-25150.md): Prototype Pollution via FormData Processing in Qwik City (CVSS 9.3, QwikDev qwik · @builder.io/qwik-city)
- [CVE-2026-25148](https://cve.now/CVE-2026-25148.md): Qwik SSR XSS via Unsafe Virtual Node Serialization (CVSS 5.3, QwikDev qwik · @builder.io/qwik-city)
- [CVE-2026-25151](https://cve.now/CVE-2026-25151.md): Qwik City has a CSRF Protection Bypass via Content-Type Header Validation (CVSS 5.9, QwikDev qwik · @builder.io/qwik-city)
- [CVE-2026-25155](https://cve.now/CVE-2026-25155.md): \[qwik-city\] CSRF protection middleware does not work properly for content type header with parameters (eg. multipart/form-data) (CVSS 5.9, QwikDev qwik · @builder.io/qwik-city)
- [CVE-2026-25149](https://cve.now/CVE-2026-25149.md): Qwik City Open Redirect via fixTrailingSlash (CVSS 2.7, QwikDev qwik · @builder.io/qwik-city)
- [CVE-2026-1862](https://cve.now/CVE-2026-1862.md): Type Confusion in V8 in Google Chrome prior to 144.0.7559.132 allowed a remote attacker to potentially exploit heap corruption via a crafted (CVSS 8.8, Google Chrome)
- [CVE-2026-1861](https://cve.now/CVE-2026-1861.md): Heap buffer overflow in libvpx in Google Chrome prior to 144.0.7559.132 allowed a remote attacker to potentially exploit heap corruption via (CVSS 8.8, Google Chrome)
- [CVE-2025-65078](https://cve.now/CVE-2025-65078.md): Untrusted search path vulnerability in Embedded Solutions Framework (CVSS 9.3, Lexmark MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CX…)
- [CVE-2026-24887](https://cve.now/CVE-2026-24887.md): Claude Code has a Command Injection in find Command Bypasses User Approval Prompt (CVSS 7.7, anthropics claude-code · @anthropic-ai/claude-code)
- [CVE-2026-24053](https://cve.now/CVE-2026-24053.md): Cluade Code has a Path Restriction Bypass via ZSH Clobber which Allows Arbitrary File Writes (CVSS 7.7, anthropics claude-code · @anthropic-ai/claude-code)
- [CVE-2026-24052](https://cve.now/CVE-2026-24052.md): Claude Code has a Domain Validation Bypass which Allows Automatic Requests to Attacker-Controlled Domains (CVSS 7.1, anthropics claude-code · @anthropic-ai/claude-code)
- [CVE-2025-65077](https://cve.now/CVE-2025-65077.md): Relative path traversal vulnerability in Embedded Solutions Framework (CVSS 8.8, Lexmark MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CX…)
- [CVE-2025-65081](https://cve.now/CVE-2025-65081.md): Out-of-bounds read vulnerability in Postscript interpreter (CVSS 6.9, Lexmark MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CX…)
- [CVE-2025-65080](https://cve.now/CVE-2025-65080.md): Type confusion vulnerability in Postscript interpreter (CVSS 6.9, Lexmark MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CX…)
- [CVE-2026-1810](https://cve.now/CVE-2026-1810.md): bolo-blog bolo-solo ZIP File BackupService.java unpackFilteredZip path traversal (CVSS 5.3, bolo-blog bolo-solo)
- [CVE-2025-65079](https://cve.now/CVE-2025-65079.md): Heap-based buffer overflow vulnerability in Postscript interpreter (CVSS 6.9, Lexmark MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CX…)
- [CVE-2026-1801](https://cve.now/CVE-2026-1801.md): Libsoup: libsoup: http request smuggling via malformed chunk headers (CVSS 5.3, Red Hat Enterprise Linux)
- [CVE-2026-1803](https://cve.now/CVE-2026-1803.md): Ziroom ZHOME A0101 Dropbear SSH Service default credentials (CVSS 9.2, Ziroom ZHOME A0101)
- [CVE-2026-24149](https://cve.now/CVE-2026-24149.md): NVIDIA Megatron-LM for all platforms contains a vulnerability in a script, where malicious data created by an attacker may cause a code inje (CVSS 7.8, NVIDIA Megatron-LM)
- [CVE-2025-64438](https://cve.now/CVE-2025-64438.md): Fast-DDS: Unbounded GAP range triggers OOM DoS under RELIABLE QoS (CVSS 1.7, eProsima Fast-DDS)
- [CVE-2025-64098](https://cve.now/CVE-2025-64098.md): FastDDS has Out-of-memory in readOctetVector via Manipulated DATA Submessage when DDS Security is enabled (CVSS 1.7, eProsima Fast-DDS)
- [CVE-2025-62799](https://cve.now/CVE-2025-62799.md): FastDDS's heap buffer overflow in RTPS DATA\_FRAG enables unauthenticated DoS (potential RCE) (CVSS 7.2, eProsima Fast-DDS)
- [CVE-2025-62603](https://cve.now/CVE-2025-62603.md): FastDDS has Out-of-memory while parsing GenericMessage when DDS Security is enabled (CVSS 1.7, eProsima Fast-DDS)
- [CVE-2026-25616](https://cve.now/CVE-2026-25616.md): Blesta 3.x through 5.x before 5.13.3 mishandles input validation, aka CORE-5665. (CVSS 4.7, Blesta)
- [CVE-2025-62602](https://cve.now/CVE-2025-62602.md): FastDDS has heap buffer overflow in readData via Manipulated DATA Submessage when DDS Security is enabled (CVSS 1.7, eProsima Fast-DDS)
- [CVE-2026-25615](https://cve.now/CVE-2026-25615.md): Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5668. (CVSS 7.2, Blesta)
- [CVE-2026-25614](https://cve.now/CVE-2026-25614.md): Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5680. (CVSS 7.5, Blesta)
- [CVE-2025-62601](https://cve.now/CVE-2025-62601.md): FastDDS has heap buffer overflow in readString via Manipulated DATA Submessage when DDS Security is enabled (CVSS 1.7, eProsima Fast-DDS)
- [CVE-2026-24441](https://cve.now/CVE-2026-24441.md): Tenda AC7 Transmits Admin Credentials Without HTTPS Protection (CVSS 8.2, Shenzhen Tenda Technology Co. Tenda AC7)
- [CVE-2026-24434](https://cve.now/CVE-2026-24434.md): Tenda AC7 Web Interface Lacks CSRF Protections for Admin Actions (CVSS 5.1, Shenzhen Tenda Technology Co. Tenda AC7)
- [CVE-2026-24427](https://cve.now/CVE-2026-24427.md): Tenda AC7 Exposes Admin Credentials in Configuration Responses (CVSS 6.8, Shenzhen Tenda Technology Co. Tenda AC7)
- [CVE-2025-62600](https://cve.now/CVE-2025-62600.md): eprosima Fast DDS affected by Out-of-Memory in readBinaryPropertySeq via Manipulated DATA Submessage when DDS Security is enabled (CVSS 8.6, eProsima Fast-DDS)
- [CVE-2026-24426](https://cve.now/CVE-2026-24426.md): Tenda AC7 Reflected XSS via Web Interface Output Encoding (CVSS 5.1, Shenzhen Tenda Technology Co. Tenda AC7)
- [CVE-2026-1802](https://cve.now/CVE-2026-1802.md): Ziroom ZHOME A0101 zrMacClone.lua macAddrClone command injection (CVSS 6.9, Ziroom ZHOME A0101)
- [CVE-2025-62673](https://cve.now/CVE-2025-62673.md): Heap-based Buffer Overflow Vulnerability in Archer AX53 and AX12 (CVSS 8.6, TP-Link Systems Archer AX53 · TP-Link Systems Archer AX12)
- [CVE-2025-62501](https://cve.now/CVE-2025-62501.md): SSH Hostkey Misconfiguration Vulnerability in Archer Devices (CVSS 7.0, TP-Link Systems Archer AX53 · TP-Link Systems Archer BE3600)
- [CVE-2025-62405](https://cve.now/CVE-2025-62405.md): Heap-based Buffer Overflow Vulnerability in TP-Link Archer AX53 (CVSS 7.3, TP-Link Systems Archer AX53)
- [CVE-2025-62404](https://cve.now/CVE-2025-62404.md): Heap-based Buffer Overflow Vulnerability in TP-Link Archer AX53 (CVSS 7.3, TP-Link Systems Archer AX53)
- [CVE-2025-61983](https://cve.now/CVE-2025-61983.md): Heap-based Buffer Overflow Vulnerability in TP-Link Archer AX53 (CVSS 7.3, TP-Link Systems Archer AX53)
- [CVE-2025-61944](https://cve.now/CVE-2025-61944.md): Heap-based Buffer Overflow Vulnerability in TP-Link Archer AX53 (CVSS 7.3, TP-Link Systems Archer AX53)
- [CVE-2025-59487](https://cve.now/CVE-2025-59487.md): Heap-based Buffer Overflow Vulnerability in TP-Link Archer AX53 (CVSS 7.3, TP-Link Systems Archer AX53)
- [CVE-2025-59482](https://cve.now/CVE-2025-59482.md): Heap-based Buffer Overflow Vulnerability in TP-Link Archer AX53 (CVSS 7.3, TP-Link Systems Archer AX53)
- [CVE-2025-58455](https://cve.now/CVE-2025-58455.md): Heap-based Buffer Overflow Vulnerability in TP-Link Archer AX53 (CVSS 7.3, TP-Link Systems Archer AX53)
- [CVE-2025-58077](https://cve.now/CVE-2025-58077.md): Heap-based Buffer Overflow Vulnerability in TP-Link Archer AX53 (CVSS 7.3, TP-Link Systems Archer AX53)
- [CVE-2026-25502](https://cve.now/CVE-2026-25502.md): iccDEV is vulnerable to stack-buffer-overflow in icFixXml() (CVSS 7.8, InternationalColorConsortium iccDEV)
- [CVE-2026-25503](https://cve.now/CVE-2026-25503.md): iccDEV Has Type Confusion in CIccTagEmbeddedHeightImage::Validate() (CVSS 7.1, InternationalColorConsortium iccDEV)
- [CVE-2026-25241](https://cve.now/CVE-2026-25241.md): PEAR is Vulnerable to SQL Injection in /get/\<package\>/\<version\> Endpoint (CVSS 9.3, pearweb)
- [CVE-2026-25240](https://cve.now/CVE-2026-25240.md): PEAR is Vulnerable to SQL Injection in user::maintains() Role IN() Filter (CVSS 6.9, pearweb)
- [CVE-2026-25239](https://cve.now/CVE-2026-25239.md): PEAR is Vulnerable to SQL Injection in apidoc\_queue Insert via Unescaped Filename (CVSS 8.2, pearweb)
- [CVE-2026-25238](https://cve.now/CVE-2026-25238.md): PEAR is Vulnerable to SQL Injection in Bug Subscription Deletion via Weak Email Validation (CVSS 9.2, pearweb)
- [CVE-2026-25237](https://cve.now/CVE-2026-25237.md): PEAR is Vulnerable to PHP Code Execution via preg\_replace /e in Bug Update Emails (CVSS 9.2, pearweb)
- [CVE-2026-25236](https://cve.now/CVE-2026-25236.md): PEAR is Vulnerable to SQL Injection in Damblan\_Karma IN() Query via Literal Substitution (CVSS 6.9, pearweb)
- [CVE-2026-25235](https://cve.now/CVE-2026-25235.md): PEAR Has a Predictable Verification Hash in Election Account Requests (CVSS 8.2, pearweb)
- [CVE-2026-25234](https://cve.now/CVE-2026-25234.md): PEAR is Vulnerable to SQL Injection in Category Deletion (CVSS 5.3, pearweb)
- [CVE-2026-25233](https://cve.now/CVE-2026-25233.md): PEAR Has a Roadmap Authorization Bypass via Operator Precedence Bug (CVSS 7.1, pearweb)
- [CVE-2025-52631](https://cve.now/CVE-2025-52631.md): HCL AION is affected by a Missing or Insecure HTTP Strict-Transport-Security (HSTS) Header vulnerability. (CVSS 3.7, HCL AION)
- [CVE-2025-52623](https://cve.now/CVE-2025-52623.md): HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerability (CVSS 3.7, HCL AION)
- [CVE-2026-25522](https://cve.now/CVE-2026-25522.md): Craft Commerce has Stored XSS in Shipping Zone (Name & Description) Fields Leading to Potential Privilege Escalation (CVSS 6.1, craftcms commerce · craftcms/commerce)
- [CVE-2026-25490](https://cve.now/CVE-2026-25490.md): Craft Commerce has Stored XSS in Inventory Location Address Leading to Potential Privilege Escalation (CVSS 6.1, craftcms commerce · craftcms/commerce)
- [CVE-2026-25489](https://cve.now/CVE-2026-25489.md): Craft Commerce has Stored XSS in Tax Zones (Name & Description) Leading to Potential Privilege Escalation (CVSS 6.1, craftcms commerce · craftcms/commerce)
- [CVE-2026-25488](https://cve.now/CVE-2026-25488.md): Craft Commerce has Stored XSS in Tax Categories (Name & Description) Fields Leading to Potential Privilege Escalation (CVSS 6.1, craftcms commerce · craftcms/commerce)
- [CVE-2026-25487](https://cve.now/CVE-2026-25487.md): Craft CMS has Stored XSS in Tax Rates Name Leading to Potential Privilege Escalation (CVSS 6.1, craftcms commerce · craftcms/commerce)
- [CVE-2026-25486](https://cve.now/CVE-2026-25486.md): Craft Commerce has Stored XSS in Shipping Methods Name Field Leading to Potential Privilege Escalation (CVSS 6.1, craftcms commerce · craftcms/commerce)
- [CVE-2026-25485](https://cve.now/CVE-2026-25485.md): Craft Commerce has Stored XSS in Shipping Categories (Name & Description) Fields Leading to Potential Privilege Escalation (CVSS 6.2, craftcms commerce · craftcms/composer)
- [CVE-2025-52628](https://cve.now/CVE-2025-52628.md): HCL AION is susceptible to Missing SameSite vulnerability (CVSS 4.6, HCL AION)
- [CVE-2026-25484](https://cve.now/CVE-2026-25484.md): Craft Commerce has Stored XSS in Product Type Name (CVSS 4.8, craftcms commerce · craftcms/commerce)
- [CVE-2026-25483](https://cve.now/CVE-2026-25483.md): Craft Commerce has Stored XSS via Order Status Message with potential database exfiltration (CVSS 6.2, craftcms commerce · craftcms/commerce)
- [CVE-2026-0620](https://cve.now/CVE-2026-0620.md): L2TP over IPSec Encryption Failure on ArcherAXE75 (CVSS 6.0, TP-Link Systems AXE75)
- [CVE-2026-25482](https://cve.now/CVE-2026-25482.md): Craft Commerce has Stored DOM XSS in Order Status Name (Reflects in "Recent Orders" Dashboard Widget) (CVSS 6.2, craftcms commerce · craftcms/commerce)
- [CVE-2025-52633](https://cve.now/CVE-2025-52633.md): HCL AION is susceptible to Missing Content-Security-Policy (CVSS 3.1, HCL AION)
- [CVE-2025-62599](https://cve.now/CVE-2025-62599.md): eprosima Fast DDS affected by Out-of-Memory in readPropertySeq via Manipulated DATA Submessage when DDS Security is enabled (CVSS 8.6, eProsima Fast-DDS)
- [CVE-2025-52629](https://cve.now/CVE-2025-52629.md): HCL AION is susceptible to Missing Content-Security-Policy (CVSS 3.7, HCL AION)
- [CVE-2025-52626](https://cve.now/CVE-2025-52626.md): HCL AION is susceptible to Potential Command Injection vulnerability (CVSS 4.5, HCL AION)
- [CVE-2025-52627](https://cve.now/CVE-2025-52627.md): HCL AION is susceptible to Incorrect Permission Assignment for Critical Resource (CVSS 5.5, HCL AION)
- [CVE-2026-22228](https://cve.now/CVE-2026-22228.md): Improper Input Validation Leading to DoS on TP-Link Archer BE230 (CVSS 6.8, TP-Link Systems Archer BE230)
- [CVE-2026-22220](https://cve.now/CVE-2026-22220.md): Improper Input Validation Leading to DoS on TP-Link Archer BE230 (CVSS 6.8, TP-Link Systems Archer BE230)
- [CVE-2026-24669](https://cve.now/CVE-2026-24669.md): Open eClass Insecure Password Reset Token Reuse Enables Account Takeover (CVSS 7.8, gunet openeclass)
- [CVE-2026-24668](https://cve.now/CVE-2026-24668.md): Open eClass Broken Access Control Allows Students to Add Content to Course Units (CVSS 6.5, gunet openeclass)
- [CVE-2026-24667](https://cve.now/CVE-2026-24667.md): Open eClass's Active Sessions Not Invalidated After Password Change Allow Persistent Account Access (CVSS 5.0, gunet openeclass)
- [CVE-2026-24666](https://cve.now/CVE-2026-24666.md): Open eClass is Vulnerable to CSRF in Teacher-Restricted Endpoints Allows Unauthorized Actions (CVSS 6.5, gunet openeclass)
- [CVE-2026-24665](https://cve.now/CVE-2026-24665.md): Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) via Student Assignment Upload (CVSS 8.7, gunet openeclass)
- [CVE-2026-24774](https://cve.now/CVE-2026-24774.md): Open eClass Business Logic Flaw Allows Students to Mark Attendance in Expired Activities (CVSS 4.3, gunet openeclass)
- [CVE-2026-24773](https://cve.now/CVE-2026-24773.md): Open eClass Unauthenticated IDOR Allows Access to Arbitrary User Files (CVSS 7.5, gunet openeclass)
- [CVE-2026-24674](https://cve.now/CVE-2026-24674.md): Open eClass is Vulnerable to Reflected Cross-Site Scripting (XSS) in Multiple Endpoints (CVSS 4.7, gunet openeclass)
- [CVE-2026-24673](https://cve.now/CVE-2026-24673.md): Open eClass Has File Upload Filter Bypass via ZIP Archive Extraction (CVSS 4.3, gunet openeclass)
- [CVE-2026-24672](https://cve.now/CVE-2026-24672.md): Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) in User Profile Fields (CVSS 7.3, gunet openeclass)
- [CVE-2026-24671](https://cve.now/CVE-2026-24671.md): Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) in Multiple High-Privilege User Fields (CVSS 6.1, gunet openeclass)
- [CVE-2026-24670](https://cve.now/CVE-2026-24670.md): Open eClass Has Broken Access Control in Course Units Module Allows Students to Create Units (CVSS 6.5, gunet openeclass)
- [CVE-2026-24664](https://cve.now/CVE-2026-24664.md): Open eClass is Vulnerable to Username Enumeration via Login Response Discrepancies (CVSS 5.3, gunet openeclass)
- [CVE-2020-37116](https://cve.now/CVE-2020-37116.md): GUnet OpenEclass 1.7.3 E-learning platform - phpMyAdmin Remote Access (CVSS 8.7, GUnet OpenEclass)
- [CVE-2020-37115](https://cve.now/CVE-2020-37115.md): GUnet OpenEclass 1.7.3 E-learning platform - Plaintext Password Storage (CVSS 7.1, GUnet OpenEclass)
- [CVE-2020-37114](https://cve.now/CVE-2020-37114.md): GUnet OpenEclass 1.7.3 E-learning platform - Information Disclosure (CVSS 5.3, GUnet OpenEclass)
- [CVE-2020-37113](https://cve.now/CVE-2020-37113.md): GUnet OpenEclass 1.7.3 E-learning platform - File Upload Extension Bypass (CVSS 8.7, GUnet OpenEclass)
- [CVE-2020-37112](https://cve.now/CVE-2020-37112.md): GUnet OpenEclass 1.7.3 E-learning platform - 'month' SQL Injection (CVSS 7.1, GUnet OpenEclass)
- [CVE-2020-37111](https://cve.now/CVE-2020-37111.md): 60CycleCMS 2.5.2 - 'news.php' Cross-site Scripting (XSS) Vulnerability (CVSS 5.1, Davidvg 60CycleCMS)
- [CVE-2020-37110](https://cve.now/CVE-2020-37110.md): 60CycleCMS 2.5.2 - 'news.php' SQL Injection Vulnerability (CVSS 8.8, Davidvg 60CycleCMS)
- [CVE-2020-37108](https://cve.now/CVE-2020-37108.md): PhpIX 2012 Professional - 'id' SQL Injection (CVSS 7.1, AllHandsMarketing PhpIX 2012 Professional)
- [CVE-2020-37105](https://cve.now/CVE-2020-37105.md): PMB 5.6 - 'logid' SQL Injection (CVSS 7.1, redmine PMB)
- [CVE-2020-37103](https://cve.now/CVE-2020-37103.md): DotNetNuke 9.5 - Persistent Cross-Site Scripting (CVSS 5.1, Dnnsoftware DotNetNuke)
- [CVE-2019-25265](https://cve.now/CVE-2019-25265.md): Online Inventory Manager 3.2 - Persistent Cross-Site Scripting (CVSS 5.1, Bigprof Online Inventory Manager)
- [CVE-2019-25264](https://cve.now/CVE-2019-25264.md): Snipe-IT Open Source Asset Management 4.7.5 - Persistent Cross-Site Scripting (CVSS 5.1, Snipeitapp IT Open Source Asset Management)
- [CVE-2019-25263](https://cve.now/CVE-2019-25263.md): Zendesk App SweetHawk Survey 1.6 - Persistent Cross-Site Scripting (CVSS 5.1, Zendesk App SweetHawk Survey)
- [CVE-2026-1568](https://cve.now/CVE-2026-1568.md): Rapid7 InsightVM Signature Validation Vulnerability (CVSS 9.6, Rapid7 Vulnerability Management)
- [CVE-2026-24762](https://cve.now/CVE-2026-24762.md): RustFS Logs Sensitive Credentials in Plaintext (CVSS 6.9, rustfs)
- [CVE-2026-21862](https://cve.now/CVE-2026-21862.md): RustFS sourceIp bypass via spoofed X-Forwarded-For/Real-IP headers (CVSS 7.7, rustfs)
- [CVE-2026-23794](https://cve.now/CVE-2026-23794.md): Apache Syncope: Reflected XSS on Enduser Login (CVSS 6.8, Apache Software Foundation Apache Syncope · org.apache.sync…)
- [CVE-2026-23795](https://cve.now/CVE-2026-23795.md): Apache Syncope: Console XXE on Keymaster parameters (CVSS 4.9, Apache Software Foundation Apache Syncope · org.apache.sync…)
- [CVE-2025-65017](https://cve.now/CVE-2025-65017.md): Decidim's private data exports can lead to data leaks (CVSS 8.2, decidim · decidim-core)
- [CVE-2026-1814](https://cve.now/CVE-2026-1814.md): Rapid7 Nexpose Insecure Java Keystore Password Generation (CVSS 6.8, Rapid7 InsightVM/Nexpose)
- [CVE-2020-37102](https://cve.now/CVE-2020-37102.md): Adaware Web Companion 4.9.2159 - 'WCAssistantService' Unquoted Service Path (CVSS 8.5, Lavasoft Web Companion)
- [CVE-2020-37101](https://cve.now/CVE-2020-37101.md): VPN unlimited 6.1 - Unquoted Service Path (CVSS 8.5, Vpnunlimitedapp VPN unlimited)
- [CVE-2020-37100](https://cve.now/CVE-2020-37100.md): Sync Breeze Enterprise 12.4.18 - Unquoted Service Path (CVSS 8.5, SyncBreeze Sync Breeze Enterprise)
- [CVE-2020-37099](https://cve.now/CVE-2020-37099.md): Disk Savvy Enterprise 12.3.18 - 'disksvs.exe' Unquoted Service Path (CVSS 8.5, DiskSavvy Disk Savvy Enterprise)
- [CVE-2020-37098](https://cve.now/CVE-2020-37098.md): Disk Sorter Enterprise 12.4.16 - Unquoted Service Path (CVSS 8.5, DiskSorter Disk Sorter Enterprise)
- [CVE-2019-25261](https://cve.now/CVE-2019-25261.md): AnyDesk 5.4.0 - Unquoted Service Path (CVSS 8.5, AnyDesk)
- [CVE-2025-14550](https://cve.now/CVE-2025-14550.md): Potential denial-of-service vulnerability via repeated headers when using ASGI (CVSS 7.5, djangoproject Django · djangoproject asgiref +1)
- [CVE-2026-1312](https://cve.now/CVE-2026-1312.md): Potential SQL injection via QuerySet.order\_by and FilteredRelation (CVSS 5.4, djangoproject Django · django)
- [CVE-2026-1287](https://cve.now/CVE-2026-1287.md): Potential SQL injection in column aliases via control characters (CVSS 5.4, djangoproject Django · django)
- [CVE-2026-1285](https://cve.now/CVE-2026-1285.md): Potential denial-of-service vulnerability in django.utils.text.Truncator HTML methods (CVSS 7.5, djangoproject Django · django)
- [CVE-2026-1207](https://cve.now/CVE-2026-1207.md): Potential SQL injection via raster lookups on PostGIS (CVSS 5.4, djangoproject Django · django)
- [CVE-2025-13473](https://cve.now/CVE-2025-13473.md): Username enumeration through timing difference in mod\_wsgi authentication handler (CVSS 5.3, djangoproject Django · django)
- [CVE-2025-5319](https://cve.now/CVE-2025-5319.md): SQLi in Emit Informatics' DIGITA Efficiency Management System (CVSS 9.8, Emit Informatics and Communication Technologies Industry an…)
- [CVE-2026-25036](https://cve.now/CVE-2026-25036.md): WordPress Passster plugin \<= 4.2.25 - Broken Access Control vulnerability (CVSS 6.5, WP Chill Passster)
- [CVE-2026-25028](https://cve.now/CVE-2026-25028.md): WordPress ElementInvader Addons for Elementor plugin \<= 1.4.1 - Broken Access Control vulnerability (CVSS 5.4, Element Invader ElementInvader Addons for Elementor)
- [CVE-2026-25027](https://cve.now/CVE-2026-25027.md): WordPress Unicamp theme \<= 2.7.1 - Local File Inclusion vulnerability (CVSS 7.5, ThemeMove Unicamp)
- [CVE-2026-25024](https://cve.now/CVE-2026-25024.md): WordPress ThirstyAffiliates plugin \<= 3.11.9 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 5.4, Blair Williams ThirstyAffiliates)
- [CVE-2026-25023](https://cve.now/CVE-2026-25023.md): WordPress Run Contests, Raffles, and Giveaways with ContestsWP plugin \<= 2.0.7 - Sensitive Data Exposure vulnerability (CVSS 5.3, mdedev Run Contests, Raffles, and Giveaways with ContestsWP)
- [CVE-2026-25022](https://cve.now/CVE-2026-25022.md): WordPress KiviCare plugin \<= 3.6.16 - SQL Injection vulnerability (CVSS 8.5, Iqonic Design KiviCare)
- [CVE-2026-25021](https://cve.now/CVE-2026-25021.md): WordPress Mizan Demo Importer plugin \<= 0.1.3 - Broken Access Control vulnerability (CVSS 5.4, Mizan Themes Mizan Demo Importer)
- [CVE-2026-25020](https://cve.now/CVE-2026-25020.md): WordPress WP Sync for Notion plugin \<= 1.7.0 - Broken Access Control vulnerability (CVSS 4.3, WP connect WP Sync for Notion)
- [CVE-2026-25019](https://cve.now/CVE-2026-25019.md): WordPress Atarim plugin \<= 4.3.1 - Broken Access Control vulnerability (CVSS 5.3, Vito Peleg Atarim)
- [CVE-2026-25016](https://cve.now/CVE-2026-25016.md): WordPress Nelio Popups plugin \<= 1.3.5 - Broken Access Control vulnerability (CVSS 4.3, Nelio Software Nelio Popups)
- [CVE-2026-25015](https://cve.now/CVE-2026-25015.md): WordPress UsersWP plugin \<= 1.2.53 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, Stiofan UsersWP)
- [CVE-2026-25014](https://cve.now/CVE-2026-25014.md): WordPress Enter Addons plugin \<= 2.3.2 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, themelooks Enter Addons)
- [CVE-2026-25012](https://cve.now/CVE-2026-25012.md): WordPress WP Bannerize Pro plugin \<= 1.11.0 - Broken Access Control vulnerability (CVSS 5.3, gfazioli WP Bannerize Pro)
- [CVE-2026-25011](https://cve.now/CVE-2026-25011.md): WordPress WP Custom Admin Interface plugin \<= 7.41 - Broken Access Control vulnerability (CVSS 4.3, Northern Beaches Websites WP Custom Admin Interface)
- [CVE-2026-25010](https://cve.now/CVE-2026-25010.md): WordPress Share This Image plugin \<= 2.09 - Broken Access Control vulnerability (CVSS 5.3, ILLID Share This Image)
- [CVE-2026-24998](https://cve.now/CVE-2026-24998.md): WordPress Hustle plugin \<= 7.8.9.2 - Sensitive Data Exposure vulnerability (CVSS 5.3, WPMU DEV - Your All-in-One WordPress Platform Hustle)
- [CVE-2026-24997](https://cve.now/CVE-2026-24997.md): WordPress Wired Impact Volunteer Management plugin \<= 2.8 - Broken Access Control vulnerability (CVSS 5.3, Wired Impact Volunteer Management)
- [CVE-2026-24996](https://cve.now/CVE-2026-24996.md): WordPress WPElemento Importer plugin \<= 0.6.4 - Broken Access Control vulnerability (CVSS 4.3, WPElemento Importer)
- [CVE-2026-24995](https://cve.now/CVE-2026-24995.md): WordPress Latest Post Shortcode plugin \<= 14.2.0 - Broken Access Control vulnerability (CVSS 4.3, Iulia Cazan Latest Post Shortcode)
- [CVE-2026-24994](https://cve.now/CVE-2026-24994.md): WordPress Sunshine Photo Cart plugin \<= 3.5.7.2 - Broken Access Control vulnerability (CVSS 5.3, sunshinephotocart Sunshine Photo Cart)
- [CVE-2026-24992](https://cve.now/CVE-2026-24992.md): WordPress Advanced WooCommerce Product Sales Reporting plugin \<= 4.1.2 - Sensitive Data Exposure vulnerability (CVSS 5.3, WPFactory Advanced WooCommerce Product Sales Reporting)
- [CVE-2026-24991](https://cve.now/CVE-2026-24991.md): WordPress Extensions For CF7 plugin \<= 3.4.0 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.3, HT Plugins Extensions For CF7)
- [CVE-2026-24990](https://cve.now/CVE-2026-24990.md): WordPress WP Docs plugin \<= 2.2.8 - Broken Access Control vulnerability (CVSS 5.4, Fahad Mahmood WP Docs)
- [CVE-2026-24988](https://cve.now/CVE-2026-24988.md): WordPress The Events Calendar Shortcode & Block plugin \<= 3.1.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Brian Hogg The Events Calendar Shortcode & Block)
- [CVE-2026-24986](https://cve.now/CVE-2026-24986.md): WordPress Simple Membership WP user Import plugin \<= 1.9.1 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 5.4, wp.insider Simple Membership WP user Import)
- [CVE-2026-24985](https://cve.now/CVE-2026-24985.md): WordPress WP Forms Signature Contract Add-On plugin \<= 1.8.2 - Broken Access Control to Notice Dismissal vulnerability (CVSS 4.3, approveme WP Forms Signature Contract Add-On)
- [CVE-2026-24984](https://cve.now/CVE-2026-24984.md): WordPress Visual Link Preview plugin \<= 2.2.9 - Broken Access Control vulnerability (CVSS 6.5, Brecht Visual Link Preview)
- [CVE-2026-24982](https://cve.now/CVE-2026-24982.md): WordPress Spectra plugin \<= 2.19.17 - Broken Access Control vulnerability (CVSS 5.3, Brainstorm Force Spectra)
- [CVE-2026-24967](https://cve.now/CVE-2026-24967.md): WordPress Amelia plugin \<= 1.2.38 - Broken Access Control vulnerability (CVSS 5.3, ameliabooking Amelia)
- [CVE-2026-24966](https://cve.now/CVE-2026-24966.md): WordPress Copyscape Premium plugin \<= 1.4.1 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, Copyscape Premium)
- [CVE-2026-24965](https://cve.now/CVE-2026-24965.md): WordPress Contest Gallery plugin \<= 28.1.1 - Broken Access Control vulnerability (CVSS 4.3, Wasiliy Strecker / ContestGallery developer Contest Gallery)
- [CVE-2026-24962](https://cve.now/CVE-2026-24962.md): WordPress Sigmize plugin \<= 0.0.9 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, Brainstorm Force Sigmize)
- [CVE-2026-24961](https://cve.now/CVE-2026-24961.md): WordPress Grand Blog theme \< 3.1.5 - Server Side Request Forgery (SSRF) vulnerability (CVSS 5.4, ThemeGoods Grand Blog)
- [CVE-2026-24958](https://cve.now/CVE-2026-24958.md): WordPress JetElements For Elementor plugin \<= 2.7.12.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Crocoblock JetElements For Elementor)
- [CVE-2026-24957](https://cve.now/CVE-2026-24957.md): WordPress Strong Testimonials plugin \<= 3.2.20 - Broken Access Control vulnerability (CVSS 6.5, WP Chill Strong Testimonials)
- [CVE-2026-24954](https://cve.now/CVE-2026-24954.md): WordPress WpEvently plugin \<= 5.0.8 - Deserialization of untrusted data vulnerability (CVSS 8.8, magepeopleteam WpEvently)
- [CVE-2026-24952](https://cve.now/CVE-2026-24952.md): WordPress Seriously Simple Podcasting plugin \<= 3.14.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Craig Hewitt Seriously Simple Podcasting)
- [CVE-2026-24951](https://cve.now/CVE-2026-24951.md): WordPress myCred plugin \<= 2.9.7.3 - Broken Access Control vulnerability (CVSS 4.3, Saad Iqbal myCred)
- [CVE-2026-24947](https://cve.now/CVE-2026-24947.md): WordPress LA-Studio Element Kit for Elementor plugin \< 1.5.6.3 - Broken Access Control vulnerability (CVSS 4.3, LA-Studio Element Kit for Elementor)
- [CVE-2026-24945](https://cve.now/CVE-2026-24945.md): WordPress Ultimate Addons for Contact Form 7 plugin \<= 3.5.34 - Broken Access Control vulnerability (CVSS 5.3, Themefic Ultimate Addons for Contact Form)
- [CVE-2026-24942](https://cve.now/CVE-2026-24942.md): WordPress WpEvently plugin \<= 5.1.1 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, magepeopleteam WpEvently)
- [CVE-2026-24940](https://cve.now/CVE-2026-24940.md): WordPress Travelfic Toolkit plugin \<= 1.3.3 - Broken Access Control vulnerability (CVSS 4.3, Themefic Travelfic Toolkit)
- [CVE-2026-24939](https://cve.now/CVE-2026-24939.md): WordPress Modula Image Gallery plugin \<= 2.13.6 - Broken Access Control vulnerability (CVSS 4.3, WP Chill Modula Image Gallery)
- [CVE-2026-24938](https://cve.now/CVE-2026-24938.md): WordPress Better Search plugin \<= 4.2.1 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, Ajay Better Search)
- [CVE-2025-7760](https://cve.now/CVE-2025-7760.md): Reflected XSS in Ofisimo's Association Web Package Flora (CVSS 7.6, Ofisimo Web-Based Software Technologies Association Web Pac…)
- [CVE-2025-6397](https://cve.now/CVE-2025-6397.md): XSS in Ankara Hosting's web site (CVSS 8.6, Ankara Hosting Website Design Website Software)
- [CVE-2026-1664](https://cve.now/CVE-2026-1664.md): Insecure Direct Object Reference (IDOR) via Header-Based Email Routing (CVSS 6.9, agents)
- [CVE-2025-11598](https://cve.now/CVE-2025-11598.md): Exposure of Confidential Information in mObywatel application (CVSS 1.0, Centralny Ośrodek Informatyki mObywatel)
- [CVE-2026-1432](https://cve.now/CVE-2026-1432.md): SQL injection (SQLi) on the Buroweb platform (CVSS 9.3, T-Systems Buroweb)
- [CVE-2025-67857](https://cve.now/CVE-2025-67857.md): Moodle: moodle: data exposure of user identifiers in urls (CVSS 4.3, moodle · moodle/moodle)
- [CVE-2025-67856](https://cve.now/CVE-2025-67856.md): Moodle: moodle: privilege escalation via incomplete role checks in badge awarding (CVSS 5.4, moodle · moodle/moodle)
- [CVE-2025-67855](https://cve.now/CVE-2025-67855.md): Mooodle: mooodle: information disclosure and script execution via reflected cross-site scripting (CVSS 5.4, moodle · moodle/moodle)
- [CVE-2025-67853](https://cve.now/CVE-2025-67853.md): Moodle: moodle: brute-force facilitation due to missing rate limiting in confirmation email service (CVSS 7.5, moodle · moodle/moodle)
- [CVE-2025-67852](https://cve.now/CVE-2025-67852.md): Moodle: moodle: open redirect vulnerability in oauth login flow allows redirection to malicious sites. (CVSS 3.5, moodle · moodle/moodle)
- [CVE-2025-67851](https://cve.now/CVE-2025-67851.md): Moodle: moodle: formula injection allows arbitrary formula execution via unescaped data export (CVSS 6.1, moodle · moodle/moodle)
- [CVE-2025-67850](https://cve.now/CVE-2025-67850.md): Moodle: moodle: cross-site scripting vulnerability via inadequate input filtering in formula editor (CVSS 7.3, moodle · moodle/moodle)
- [CVE-2025-67849](https://cve.now/CVE-2025-67849.md): Moodle: moodle: cross-site scripting (xss) via improper sanitization of ai prompt responses (CVSS 7.3, moodle · moodle/moodle)
- [CVE-2025-67848](https://cve.now/CVE-2025-67848.md): Moodle: moodle: authentication bypass via lti provider allows suspended users to gain unauthorized access. (CVSS 8.1, moodle · moodle/moodle)
- [CVE-2025-59902](https://cve.now/CVE-2025-59902.md): HTML injection in NICE Chat (CVSS 7.1, NICE Chat)
- [CVE-2025-41065](https://cve.now/CVE-2025-41065.md): Stored Cross-Site Scripting (XSS) in LUNA from Luna Imaging (CVSS 5.1, Luna Imaging LUNA)
- [CVE-2025-8461](https://cve.now/CVE-2025-8461.md): Reflected XSS in Seres Software's syWEB (CVSS 7.6, Seres Software syWEB)
- [CVE-2025-8456](https://cve.now/CVE-2025-8456.md): Reflected XSS in Kod8 Software's Kod8 Individual and SME Website (CVSS 7.6, Kod8 Software Technologies Trade Ltd. Kod8 Individual and S…)
- [CVE-2026-1592](https://cve.now/CVE-2026-1592.md): Stored XSS via Create New Layer Field found in Foxit PDF Editor Cloud (CVSS 6.3, Foxit Software pdfonline.foxit.com)
- [CVE-2026-1591](https://cve.now/CVE-2026-1591.md): Stored XSS via Attachments Feature in https://pdfonline.foxit.com/ (CVSS 6.3, Foxit Software pdfonline.foxit.com)
- [CVE-2026-1730](https://cve.now/CVE-2026-1730.md): OS DataHub Maps \<= 1.8.3 - Authenticated (Author+) Arbitrary File Upload (CVSS 8.8, skirridsystems OS DataHub Maps)
- [CVE-2026-1371](https://cve.now/CVE-2026-1371.md): Tutor LMS \<= 3.9.5 - Authenticated (Subscriber+) Information Disclosure in Coupon Details via 'tutor\_coupon\_details' AJAX Action (CVSS 5.3, themeum Tutor LMS – eLearning and online course solution)
- [CVE-2026-1375](https://cve.now/CVE-2026-1375.md): Tutor LMS \<= 3.9.5 - Insecure Direct Object Reference to Authenticated (Instructor+) Arbitrary Course Modification and Deletion (CVSS 8.1, themeum Tutor LMS – eLearning and online course solution)
- [CVE-2025-8590](https://cve.now/CVE-2025-8590.md): Information Disclosure in AKCE Software's SKSPro (CVSS 7.5, AKCE Software Technology R&D Industry and Trade SKSPro)
- [CVE-2025-8589](https://cve.now/CVE-2025-8589.md): Reflected XSS in AKCE Software's SKSPro (CVSS 7.6, AKCE Software Technology R&D Industry and Trade SKSPro)
- [CVE-2026-24465](https://cve.now/CVE-2026-24465.md): Stack-based buffer overflow vulnerability exists in ELECOM wireless LAN access point devices. (CVSS 9.8, ELECOM CO. WAB-S733IW2-PD · ELECOM CO. WAB-S733IW-AC +4)
- [CVE-2026-24449](https://cve.now/CVE-2026-24449.md): For WRC-X1500GS-B and WRC-X1500GSA-B, the initial passwords can be calculated easily from the system information. (CVSS 4.6, ELECOM CO. WRC-X1500GS-B · ELECOM CO. WRC-X1500GSA-B)
- [CVE-2026-22550](https://cve.now/CVE-2026-22550.md): OS command injection vulnerability exists in ELECOM wireless LAN products. (CVSS 7.2, ELECOM CO. WRC-X6000XS-G · ELECOM CO. WRC-X6000XST-G +13)
- [CVE-2026-20704](https://cve.now/CVE-2026-20704.md): Cross-site request forgery vulnerability exists in ELECOM wireless LAN products. (CVSS 4.3, ELECOM CO. WRC-X1500GS-B · ELECOM CO. WRC-X1500GSA-B +13)
- [CVE-2026-1447](https://cve.now/CVE-2026-1447.md): Mail Mint \<= 1.19.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting (CVSS 5.4, getwpfunnels Mail Mint – Email Marketing, Newsletter, Email…)
- [CVE-2026-1058](https://cve.now/CVE-2026-1058.md): Form Maker by 10Web \<= 1.15.35 - Unauthenticated Stored Cross-Site Scripting via Hidden Field (CVSS 7.1, Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact F…)
- [CVE-2026-1210](https://cve.now/CVE-2026-1210.md): Happy Addons for Elementor \<= 3.20.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via '\_elementor\_data' Meta Field (CVSS 6.4, thehappymonster Happy Addons for Elementor)
- [CVE-2026-1065](https://cve.now/CVE-2026-1065.md): Form Maker by 10Web \<= 1.15.35 - Unauthenticated Stored Cross-Site Scripting via SVG file (CVSS 7.2, Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact F…)
- [CVE-2026-0617](https://cve.now/CVE-2026-0617.md): LatePoint – Calendar Booking Plugin for Appointments and Events \<= 5.2.5 - Unauthenticated Stored Cross-Site Scripting (CVSS 7.2, LatePoint – Calendar Booking Plugin for Appointments and Ev…)
- [CVE-2025-58381](https://cve.now/CVE-2025-58381.md): Directory transversal vulnerability in Brocade Fabric OS before 9.2.1c2 and 9.2.2 through 9.2.2a using various shell commands (CVSS 4.6, Brocade Fabric OS)
- [CVE-2026-0950](https://cve.now/CVE-2026-0950.md): Spectra Gutenberg Blocks \<= 2.19.17 - Unauthenticated Information Disclosure in Sensitive Data (CVSS 5.3, brainstormforce Spectra Gutenberg Blocks – Website Builder…)
- [CVE-2025-14274](https://cve.now/CVE-2025-14274.md): Unlimited Elements for Elementor \<= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Border Hero Widget (CVSS 5.4, unitecms Unlimited Elements For Elementor)
- [CVE-2026-24694](https://cve.now/CVE-2026-24694.md): The installer for Roland Cloud Manager ver.3.1.19 and prior insecurely loads Dynamic Link Libraries (DLLs), which could allow an attacker to (CVSS 7.8, Roland Cloud Manager)
- [CVE-2025-9711](https://cve.now/CVE-2025-9711.md): Privilege escalation in Brocade Fabric OS before 9.2.1c3, and 9.2.2 though 9.2.2b (CVSS 8.5, Brocade Fabric OS)
- [CVE-2025-58380](https://cve.now/CVE-2025-58380.md): Directory transversal vulnerability in Brocade Fabric OS before 9.2.1 using grep command (CVSS 4.6, Brocade Fabric OS)
- [CVE-2026-0383](https://cve.now/CVE-2026-0383.md): Information disclosure in Brocade Fabric OS before 9.2.1c2, 9.2.2 through 9.2.2a and 10.0.0 (CVSS 8.2, Brocade Fabric OS)
- [CVE-2026-24936](https://cve.now/CVE-2026-24936.md): An improper input validation vulnerability was found in ADM while joining a AD Domain. (CVSS 9.5, ASUSTOR ADM)
- [CVE-2026-0909](https://cve.now/CVE-2026-0909.md): WP ULike \<= 4.8.3.1 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Log Deletion via 'id' Parameter (CVSS 5.3, alimir WP ULike – Like & Dislike Buttons for Engagement and…)
- [CVE-2026-1788](https://cve.now/CVE-2026-1788.md): Buffer Overflow in Xquic Server (CVSS 6.6, Xquic Project Xquic Server)
- [CVE-2026-24935](https://cve.now/CVE-2026-24935.md): An improper certificate validation vulnerability was found in a third-party NAT traversal module. (CVSS 6.3, ASUSTOR ADM)
- [CVE-2026-24934](https://cve.now/CVE-2026-24934.md): An improper certificate validation vulnerability was found in ADM while querying an external server for the device's WAN IP address. (CVSS 6.3, ASUSTOR ADM)
- [CVE-2026-24933](https://cve.now/CVE-2026-24933.md): An improper certificate validation vulnerability was found in ADM while sending HTTPS requests to the server. (CVSS 8.9, ASUSTOR ADM)
- [CVE-2026-24932](https://cve.now/CVE-2026-24932.md): An improper certificate validation vulnerability was found in ADM while updating the DDNS settings. (CVSS 8.9, ASUSTOR ADM)
- [CVE-2025-58379](https://cve.now/CVE-2025-58379.md): Password Exposure in Brocade Fabric OS (CVSS 6.0, Brocade Fabric OS)
- [CVE-2025-58383](https://cve.now/CVE-2025-58383.md): Privilege escalation via bind command in Brocade Fabric OS (CVSS 8.4, Brocade Fabric OS)
- [CVE-2025-58382](https://cve.now/CVE-2025-58382.md): Privilege escalation in Brocade Fabric before 9.2.1c2 and 9.2.2 through 9.2.2a (CVSS 8.5, Brocade Fabric OS)
- [CVE-2025-67481](https://cve.now/CVE-2025-67481.md): mw.message(…).parse() doesn't output safe HTML, but it's being used as if it does (CVSS 0.0, Wikimedia Foundation MediaWiki)
- [CVE-2025-67482](https://cve.now/CVE-2025-67482.md): Lua segfault in unpack() (CVSS 1.7, Wikimedia Foundation Scribunto · Wikimedia Foundation luasa…)
- [CVE-2025-12774](https://cve.now/CVE-2025-12774.md): SQL queries with sensitive information printed in logs with Brocade SANnav before 3.0 (CVSS 4.6, Brocade SANnav)
- [CVE-2025-67483](https://cve.now/CVE-2025-67483.md): Theoretical i18n XSS in mediawiki.page.preview.js when a page has multiple protection levels (CVSS 0.0, Wikimedia Foundation MediaWiki)
- [CVE-2025-67484](https://cve.now/CVE-2025-67484.md): Action API xslt option allows JavaScript execution by administrators who are not interface administrators (CVSS 0.0, Wikimedia Foundation MediaWiki)
- [CVE-2025-67480](https://cve.now/CVE-2025-67480.md): list=allrevisions can be used to bypass Extension:Lockdown (CVSS 0.0, Wikimedia Foundation MediaWiki)
- [CVE-2025-67475](https://cve.now/CVE-2025-67475.md): Stored XSS through edit summaries in MW Core (CVSS 0.0, Wikimedia Foundation MediaWiki)
- [CVE-2025-67476](https://cve.now/CVE-2025-67476.md): Importing leaks IP address of importer via EventStreams (CVSS 1.3, Wikimedia Foundation MediaWiki)
- [CVE-2025-67477](https://cve.now/CVE-2025-67477.md): Stored XSS through a system message in Special:ApiSandbox (CVSS 0.0, Wikimedia Foundation MediaWiki)
- [CVE-2025-67478](https://cve.now/CVE-2025-67478.md): Wrong E-Mail address composition for usernames with a comma and Umlauts in it like "Döe, Jähn" (CVSS 0.0, Wikimedia Foundation CheckUser)
- [CVE-2025-67479](https://cve.now/CVE-2025-67479.md): Magic word replacement in legacy parser allows using reserved data attributes through wikitext (CVSS 0.0, Wikimedia Foundation MediaWiki · Wikimedia Foundation Cite)
- [CVE-2025-61654](https://cve.now/CVE-2025-61654.md): UserInfoCard: Do permission checking when getting counts of global and local edits, new articles and thanks (CVSS 0.0, Wikimedia Foundation Thanks)
- [CVE-2025-61655](https://cve.now/CVE-2025-61655.md): Stored XSS through system messages in VisualEditor (CVSS 0.0, Wikimedia Foundation VisualEditor)
- [CVE-2025-61656](https://cve.now/CVE-2025-61656.md): XSS when pasting into VE (CVSS 0.0, Wikimedia Foundation VisualEditor)
- [CVE-2025-61657](https://cve.now/CVE-2025-61657.md): Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Vector. (CVSS 0.0, Wikimedia Foundation Vector)
- [CVE-2025-61658](https://cve.now/CVE-2025-61658.md): Special:GlobalContributions shows edits on wikis the viewer doesn't have access to (CVSS 1.3, Wikimedia Foundation CheckUser)
- [CVE-2025-61653](https://cve.now/CVE-2025-61653.md): Extension:TextExtracts does not check for authorizeRead when returning extracts (CVSS 2.7, Wikimedia Foundation TextExtracts)
- [CVE-2025-61652](https://cve.now/CVE-2025-61652.md): Action API discussiontoolspageinfo does not check for authorizeRead for the page (CVSS 2.7, Wikimedia Foundation DiscussionTools)
- [CVE-2025-61651](https://cve.now/CVE-2025-61651.md): i18n XSS through Special:CheckUser CheckUser helper (CVSS 0.0, Wikimedia Foundation CheckUser)
- [CVE-2025-15556](https://cve.now/CVE-2025-15556.md): Notepad++ \< 8.8.9 WinGUp Updater Lacks Update Integrity Verification (CVSS 7.7, KEV, notepad-plus-plus)
- [CVE-2025-12773](https://cve.now/CVE-2025-12773.md): Plain password is generated in the audit logs while executing update-reports-purge-settings.sh script with Brocade SANnav before 2.4.0a (CVSS 7.1, Brocade SANnav)
- [CVE-2025-11173](https://cve.now/CVE-2025-11173.md): Reauth for enabling 2FA can be bypassed by submitting a form (CVSS 0.0, Wikimedia Foundation OATHAuth)
- [CVE-2025-11261](https://cve.now/CVE-2025-11261.md): Stored i18n XSS exposed by security patch for T402077 (CVSS 0.0, Wikimedia Foundation MediaWiki)
- [CVE-2025-61648](https://cve.now/CVE-2025-61648.md): Stored XSS through system messages in CheckUser (CVSS 0.0, Wikimedia Foundation CheckUser)
- [CVE-2025-61649](https://cve.now/CVE-2025-61649.md): UserInfoCard: Check that performing user has permission to view log entries for number of past blocks (CVSS 1.1, Wikimedia Foundation CheckUser)
- [CVE-2025-61650](https://cve.now/CVE-2025-61650.md): UserInfoCard is vulnerable to message key stored XSS (CVSS 1.1, Wikimedia Foundation CheckUser)
- [CVE-2025-61645](https://cve.now/CVE-2025-61645.md): CodexTablePager has i18n XSS (CVSS 0.0, Wikimedia Foundation MediaWiki)
- [CVE-2025-61646](https://cve.now/CVE-2025-61646.md): Watchlist group mode reveals authors of edits with hidden authorship (CVSS 1.2, Wikimedia Foundation MediaWiki)
- [CVE-2025-61647](https://cve.now/CVE-2025-61647.md): UserInfoCard: Don't allow access to information about users who are suppressed if you don't have suppressor rights (CVSS 0.3, Wikimedia Foundation CheckUser)
- [CVE-2025-10878](https://cve.now/CVE-2025-10878.md): A SQL injection vulnerability exists in the login functionality of Fikir Odalari AdminPando 1.0.1 before 2026-01-26. (CVSS 10.0, Insaat Fikir Odalari AdminPando)
- [CVE-2025-46651](https://cve.now/CVE-2025-46651.md): Tiny File Manager through 2.6 contains a server-side request forgery (SSRF) vulnerability in the URL upload feature. (CVSS 4.3)
- [CVE-2025-57529](https://cve.now/CVE-2025-57529.md): YouDataSum CPAS Audit Management System \<=v4.9 is vulnerable to SQL Injection in /cpasList/findArchiveReportByDah due to insufficient input (CVSS 9.8)
- [CVE-2025-58340](https://cve.now/CVE-2025-58340.md): An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480 (CVSS 6.2)
- [CVE-2025-58341](https://cve.now/CVE-2025-58341.md): An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480 (CVSS 6.2)
- [CVE-2025-58342](https://cve.now/CVE-2025-58342.md): An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480 (CVSS 6.2)
- [CVE-2025-58343](https://cve.now/CVE-2025-58343.md): An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480 (CVSS 5.5)
- [CVE-2025-58344](https://cve.now/CVE-2025-58344.md): An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480 (CVSS 6.2)
- [CVE-2025-58345](https://cve.now/CVE-2025-58345.md): An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480 (CVSS 5.5)
- [CVE-2025-58346](https://cve.now/CVE-2025-58346.md): An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480 (CVSS 5.5)
- [CVE-2025-58347](https://cve.now/CVE-2025-58347.md): An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480 (CVSS 5.5)
- [CVE-2025-58348](https://cve.now/CVE-2025-58348.md): An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480 (CVSS 5.5)
- [CVE-2025-59439](https://cve.now/CVE-2025-59439.md): An issue was discovered in Samsung Mobile Processor, Wearable Processor and Modem Exynos 980, 990, 850, 1080, 9110, W920, W930, W1000 and Mo (CVSS 7.5)
- [CVE-2025-60865](https://cve.now/CVE-2025-60865.md): Insecure Permissions vulnerability in avanquest Driver Updater v.9.1.57803.1174 allows a local attacker to escalate privileges via the Drive (CVSS 7.8)
- [CVE-2025-61506](https://cve.now/CVE-2025-61506.md): An issue was discovered in MediaCrush thru 1.0.1 allowing remote unauthenticated attackers to upload arbitrary files of any size to the /upl (CVSS 9.8)
- [CVE-2025-63372](https://cve.now/CVE-2025-63372.md): Articentgroup Zip Rar Extractor Tool 1.345.93.0 is vulnerable to Directory Traversal. (CVSS 4.3)
- [CVE-2025-63624](https://cve.now/CVE-2025-63624.md): SQL Injection vulnerability in Shandong Kede Electronics Co., Ltd IoT smart water meter monitoring platform v.1.0 allows a remote attacker t (CVSS 9.8)
- [CVE-2025-65875](https://cve.now/CVE-2025-65875.md): An arbitrary file upload vulnerability in the AddFont() function of FPDF v1.86 and earlier allows attackers to execute arbitrary code via up (CVSS 8.8)
- [CVE-2025-65923](https://cve.now/CVE-2025-65923.md): A Stored Cross-Site Scripting (XSS) vulnerability was discovered within the CSV import mechanism of ERPNext thru 15.88.1 when using the Upda (CVSS 5.4)
- [CVE-2025-65924](https://cve.now/CVE-2025-65924.md): ERPNext thru 15.88.1 does not sanitize or remove certain HTML tags specifically \`\<a\>\` hyperlinks in fields that are intended for plain text. (CVSS 4.1)
- [CVE-2025-66374](https://cve.now/CVE-2025-66374.md): CyberArk Endpoint Privilege Manager Agent through 25.10.0 allows a local user to achieve privilege escalation through policy elevation of an (CVSS 7.8)
- [CVE-2025-67186](https://cve.now/CVE-2025-67186.md): TOTOLINK A950RG V4.1.2cu.5204\_B20210112 contains a buffer overflow vulnerability in the setUrlFilterRules interface of /lib/cste\_modules/fir (CVSS 9.8)
- [CVE-2025-67187](https://cve.now/CVE-2025-67187.md): A stack-based buffer overflow vulnerability was identified in TOTOLINK A950RG V4.1.2cu.5204\_B20210112. (CVSS 9.8)
- [CVE-2025-67188](https://cve.now/CVE-2025-67188.md): A buffer overflow vulnerability exists in TOTOLINK A950RG V4.1.2cu.5204\_B20210112. (CVSS 9.8)
- [CVE-2025-67189](https://cve.now/CVE-2025-67189.md): A buffer overflow vulnerability exists in the setParentalRules interface of TOTOLINK A950RG V4.1.2cu.5204\_B20210112. (CVSS 6.5)
- [CVE-2025-69429](https://cve.now/CVE-2025-69429.md): The ORICO NAS CD3510 (version V1.9.12 and below) contains an Incorrect Symlink Follow vulnerability that could be exploited by attackers to (CVSS 6.1)
- [CVE-2025-69430](https://cve.now/CVE-2025-69430.md): An Incorrect Symlink Follow vulnerability exists in multiple Yottamaster NAS devices, including DM2 (version equal to or prior to V1.9.12), (CVSS 6.1)
- [CVE-2025-69431](https://cve.now/CVE-2025-69431.md): The ZSPACE Q2C NAS contains a vulnerability related to incorrect symbolic link following. (CVSS 6.1)
- [CVE-2025-69848](https://cve.now/CVE-2025-69848.md): NetBox is an open-source infrastructure resource modeling and IP address management platform. (CVSS 5.4)
- [CVE-2025-69875](https://cve.now/CVE-2025-69875.md): A vulnerability exists in Quick Heal Total Security 23.0.0 in the quarantine management component where insufficient validation of restore p (CVSS 7.8)
- [CVE-2025-69970](https://cve.now/CVE-2025-69970.md): FUXA v1.2.7 contains an insecure default configuration vulnerability in server/settings.default.js. (CVSS 9.3, fuxa-server)
- [CVE-2025-69971](https://cve.now/CVE-2025-69971.md): FUXA v1.2.7 contains a hard-coded credential vulnerability in server/api/jwt-helper.js. (CVSS 9.8, @frangoteam/fuxa)
- [CVE-2025-69981](https://cve.now/CVE-2025-69981.md): FUXA v1.2.7 contains an Unrestricted File Upload vulnerability in the \`/api/upload\` API endpoint. (CVSS 7.5, fuxa-server)
- [CVE-2025-69983](https://cve.now/CVE-2025-69983.md): FUXA v1.2.7 allows Remote Code Execution (RCE) via the project import functionality. (CVSS 8.2, fuxa-server)
- [CVE-2025-70311](https://cve.now/CVE-2025-70311.md): JEEWMS 1.0 is vulnerable to SQL Injection. (CVSS 6.5)
- [CVE-2025-70559](https://cve.now/CVE-2025-70559.md): pdfminer.six before 20251230 contains an insecure deserialization vulnerability in the CMap loading mechanism. (CVSS 6.5, pdfminer-six)
- [CVE-2025-70560](https://cve.now/CVE-2025-70560.md): Boltz 2.0.0 contains an insecure deserialization vulnerability in its molecule loading functionality. (CVSS 8.4, boltz)
- [CVE-2025-70758](https://cve.now/CVE-2025-70758.md): chetans9 core-php-admin-panel through commit a94a780d6 contains an authentication bypass vulnerability in includes/auth\_validate.php. (CVSS 7.5)
- [CVE-2025-70841](https://cve.now/CVE-2025-70841.md): Dokans Multi-Tenancy Based eCommerce Platform SaaS 3.9.2 allows unauthenticated remote attackers to obtain sensitive application configurati (CVSS 10.0)
- [CVE-2025-70849](https://cve.now/CVE-2025-70849.md): Arbitrary File Upload in podinfo thru 6.9.0 allows unauthenticated attackers to upload arbitrary files via crafted POST request to the /stor (CVSS 6.1, github.com/stefanprodan/podinfo)
- [CVE-2025-71179](https://cve.now/CVE-2025-71179.md): Creativeitem Academy LMS 7.0 contains reflected Cross-Site Scripting (XSS) vulnerabilities via the search parameter to the /academy/blogs en (CVSS 6.1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-02-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.