# CVEs published 2026-02-04

251 CVEs were published on February 4, 2026: 21 critical, 78 high. Days are UTC.

- [CVE-2026-1896](https://cve.now/CVE-2026-1896.md): WeKan Migration Operation comprehensiveBoardMigration.js ComprehensiveBoardMigration MigrationBleed access control (CVSS 5.3, WeKan)
- [CVE-2025-13192](https://cve.now/CVE-2025-13192.md): Popup builder with Gamification \<= 2.2.0 - Unauthenticated SQL Injection via Multiple REST API Endpoints (CVSS 8.2, roxnor Popup builder with Gamification, Multi-Step Popups,…)
- [CVE-2019-25286](https://cve.now/CVE-2019-25286.md): \_GCafé 3.0 - 'gbClienService' Unquoted Service Path (CVSS 8.5, Gcafe \_GCafé)
- [CVE-2019-25283](https://cve.now/CVE-2019-25283.md): Shrew Soft VPN Client 2.2.2 - 'iked' Unquoted Service Path (CVSS 8.5, Shrew Soft VPN Client)
- [CVE-2019-25288](https://cve.now/CVE-2019-25288.md): Wacom WTabletService 6.6.7-3 - 'WTabletServicePro' Unquoted Service Path (CVSS 8.5, Wacom WTabletService)
- [CVE-2019-25287](https://cve.now/CVE-2019-25287.md): Adaware Web Companion version 4.8.2078.3950 - 'WCAssistantService' Unquoted Service Path (CVSS 8.5, Webcompanion Adaware Web Companion version)
- [CVE-2019-25285](https://cve.now/CVE-2019-25285.md): Alps Pointing-device Controller 8.1202.1711.04 - 'ApHidMonitorService' Unquoted Service Path (CVSS 8.5, Alps device Controller)
- [CVE-2019-25281](https://cve.now/CVE-2019-25281.md): NCP\_Secure\_Entry\_Client 9.2 - Unquoted Service Paths (CVSS 8.5, ncp-e NCP\_Secure\_Entry\_Client)
- [CVE-2019-25276](https://cve.now/CVE-2019-25276.md): Studio 5000 Logix Designer 30.01.00 - 'FactoryTalk Activation Service' Unquoted Service Path (CVSS 8.5, Rockwellautomation Studio)
- [CVE-2019-25275](https://cve.now/CVE-2019-25275.md): BartVPN 1.2.2 - 'BartVPNService' Unquoted Service Path (CVSS 8.5, FileHorse BartVPN)
- [CVE-2019-25274](https://cve.now/CVE-2019-25274.md): ProShow Producer 9.0.3797 - Unquoted Service Path (CVSS 8.5, Photodex ProShow Producer)
- [CVE-2019-25273](https://cve.now/CVE-2019-25273.md): Easy-Hide-IP 5.0.0.3 - 'EasyRedirect' Unquoted Service Path (CVSS 8.5, Easy-Hide-Ip IP)
- [CVE-2019-25272](https://cve.now/CVE-2019-25272.md): TexasSoft CyberPlanet 6.4.131 - 'CCSrvProxy' Unquoted Service Path (CVSS 8.5, Tenaxsoft TexasSoft CyberPlanet)
- [CVE-2019-25271](https://cve.now/CVE-2019-25271.md): NETGATE Data Backup 3.0.620 - 'NGDatBckpSrv' Unquoted Service Path (CVSS 8.5, NETGATE Data Backup)
- [CVE-2019-25269](https://cve.now/CVE-2019-25269.md): Amiti Antivirus 25.0.640 - Unquoted Service Path Vulnerability (CVSS 8.5, Netgate Amiti Antivirus)
- [CVE-2019-25267](https://cve.now/CVE-2019-25267.md): Wing FTP Server 6.0.7 - Unquoted Service Path (CVSS 8.5, Wftpserver Wing FTP Server)
- [CVE-2025-22873](https://cve.now/CVE-2025-22873.md): Improper access to parent directory of root in os (CVSS 3.8, Go standard library os · stdlib)
- [CVE-2026-1895](https://cve.now/CVE-2026-1895.md): WeKan Attachment Storage lists.js applyWipLimit ListWIPBleed access control (CVSS 5.3, WeKan)
- [CVE-2026-1894](https://cve.now/CVE-2026-1894.md): WeKan REST API checklistItems.js Checklist REST Bleed improper authorization (CVSS 5.3, WeKan)
- [CVE-2025-62616](https://cve.now/CVE-2025-62616.md): AutoGPT has SSRF vulnerability in SendDiscordFileBlock (CVSS 9.3, Significant-Gravitas AutoGPT)
- [CVE-2025-62615](https://cve.now/CVE-2025-62615.md): AutoGPT has SSRF vulnerability in ReadRSSFeedBlock (CVSS 9.3, Significant-Gravitas AutoGPT)
- [CVE-2026-22038](https://cve.now/CVE-2026-22038.md): AutoGPT's API Keys and Secrets Logged in Plaintext in Stagehand Integration Blocks (CVSS 8.1, Significant-Gravitas AutoGPT)
- [CVE-2026-25585](https://cve.now/CVE-2026-25585.md): iccDEV vulnerable to OOB in CIccXform3DLut::Apply() (CVSS 7.8, InternationalColorConsortium iccDEV)
- [CVE-2026-25584](https://cve.now/CVE-2026-25584.md): iccDEV vulnerable to Stack-based Buffer Overflow in CIccTagFloatNum::GetValues() (CVSS 7.8, InternationalColorConsortium iccDEV)
- [CVE-2026-25583](https://cve.now/CVE-2026-25583.md): iccDEV vulnerable to Heap Buffer Overflow in CIccFileIO::Read8() (CVSS 7.8, InternationalColorConsortium iccDEV)
- [CVE-2026-25582](https://cve.now/CVE-2026-25582.md): iccDEV vulnerable to Heap Buffer Overflow in CIccIO::WriteUInt16Float() (CVSS 7.8, InternationalColorConsortium iccDEV)
- [CVE-2026-25541](https://cve.now/CVE-2026-25541.md): Bytes is vulnerable to integer overflow in BytesMut::reserve (CVSS 5.5, tokio-rs bytes · bytes)
- [CVE-2026-1892](https://cve.now/CVE-2026-1892.md): WeKan REST API boards.js setBoardOrgs improper authorization (CVSS 2.3, WeKan)
- [CVE-2026-25578](https://cve.now/CVE-2026-25578.md): Navidrome is vulnerable to XSS via comment from song metadata (CVSS 6.1, navidrome · github.com/navidrome/navidrome)
- [CVE-2026-25579](https://cve.now/CVE-2026-25579.md): Navidrome affected by Denial of Service and disk exhaustion via oversized \`size\` parameter in \`/rest/getCoverArt\` and \`/share/img/\<token\>\` endpoints (CVSS 9.2, navidrome · github.com/navidrome/navidrome)
- [CVE-2026-25575](https://cve.now/CVE-2026-25575.md): NavigaTUM has a Path Traversal Vulnerability in the propose\_edits functionality (CVSS 8.8, TUM-Dev NavigaTUM)
- [CVE-2026-25547](https://cve.now/CVE-2026-25547.md): Uncontrolled Resource Consumption in @isaacs/brace-expansion (CVSS 9.2, isaacs brace-expansion · @isaacs/brace-expansion)
- [CVE-2026-25546](https://cve.now/CVE-2026-25546.md): Godot MCP is vulnerable to Command Injection via unsanitized projectPath (CVSS 7.8, Coding-Solo godot-mcp · @coding-solo/godot-mcp)
- [CVE-2026-25543](https://cve.now/CVE-2026-25543.md): HtmlSanitizer has a bypass via template tag (CVSS 6.3, mganss HtmlSanitizer · HtmlSanitizer)
- [CVE-2026-25540](https://cve.now/CVE-2026-25540.md): Mastodon's signature-dependent ActivityPub collection responses cached under signature-independent keys (Web Cache Poisoning via \`Rails.cache\`) (CVSS 6.5, mastodon)
- [CVE-2026-25539](https://cve.now/CVE-2026-25539.md): SiYuan has Arbitrary File Write via /api/file/copyFile leading to RCE (CVSS 9.1, siyuan-note siyuan · github.com/siyuan-note/siyuan/kernel)
- [CVE-2026-25538](https://cve.now/CVE-2026-25538.md): Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage (CVSS 8.7, devtron-labs devtron · github.com/devtron-labs/devtron)
- [CVE-2026-1884](https://cve.now/CVE-2026-1884.md): ZenTao Webhook model.php fetchHook server-side request forgery (CVSS 5.1, ZenTao)
- [CVE-2026-25537](https://cve.now/CVE-2026-25537.md): jsonwebtoken has Type Confusion that leads to potential authorization bypass (CVSS 5.5, Keats jsonwebtoken · jsonwebtoken)
- [CVE-2026-25536](https://cve.now/CVE-2026-25536.md): @modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse (CVSS 7.1, modelcontextprotocol typescript-sdk · @modelcontextprotocol…)
- [CVE-2026-25526](https://cve.now/CVE-2026-25526.md): JinJava Bypass through ForTag leads to Arbitrary Java Execution (CVSS 9.8, HubSpot jinjava · com.hubspot.jinjava:jinjava)
- [CVE-2026-25523](https://cve.now/CVE-2026-25523.md): Magento's X-Original-Url header can expose admin url (CVSS 5.3, OpenMage magento-lts · openmage/magento-lts)
- [CVE-2024-51451](https://cve.now/CVE-2024-51451.md): Multiple Vulnerabilities in IBM Concert Software (CVSS 6.5, IBM Concert)
- [CVE-2026-25521](https://cve.now/CVE-2026-25521.md): Locutus is vulnerable to Prototype Pollution (CVSS 9.4, locutusjs locutus · locutus)
- [CVE-2024-43181](https://cve.now/CVE-2024-43181.md): Multiple Vulnerabilities in IBM Concert Software (CVSS 6.3, IBM Concert)
- [CVE-2026-25518](https://cve.now/CVE-2026-25518.md): cert-manager-controller DoS via Specially Crafted DNS Response (CVSS 5.9, cert-manager · github.com/cert-manager/cert-manager)
- [CVE-2024-40685](https://cve.now/CVE-2024-40685.md): IBM Operations Analytics - Log Analysis is affected by CSRF Token Replay Attack (CVSS 4.3, IBM Operations Analytics - Log Analysis)
- [CVE-2025-2134](https://cve.now/CVE-2025-2134.md): IBM Jazz Reporting Service Denial of Service (CVSS 3.5, IBM Jazz Reporting Service)
- [CVE-2025-27550](https://cve.now/CVE-2025-27550.md): IBM Jazz Reporting Service Information Disclosure (CVSS 3.5, IBM Jazz Reporting Service)
- [CVE-2025-1823](https://cve.now/CVE-2025-1823.md): IBM Jazz Reporting Service Denial of Service (CVSS 3.5, IBM Jazz Reporting Service)
- [CVE-2024-39724](https://cve.now/CVE-2024-39724.md): IBM Db2 Big SQL on Cloud Pak for Data is vulnerable to a denial of service due to lack of throttling on an API (CVSS 5.3, IBM Db2 Big SQL on Cloud Pak for Data)
- [CVE-2026-25519](https://cve.now/CVE-2026-25519.md): OpenSlides has incorrect access control vulnerability in authentication service (CVSS 8.1, OpenSlides)
- [CVE-2026-25517](https://cve.now/CVE-2026-25517.md): Wagtail has improper permission handling on admin preview endpoints (CVSS 5.1, wagtail)
- [CVE-2023-38281](https://cve.now/CVE-2023-38281.md): Multiple Vulnerabilities in IBM Cloud Pak System (CVSS 5.3, IBM Cloud Pak System · IBM OS Image for Red Hat Linux Syste…)
- [CVE-2023-38017](https://cve.now/CVE-2023-38017.md): Multiple Vulnerabilities in IBM Cloud Pak System (CVSS 5.3, IBM Cloud Pak System · IBM OS Image for Red Hat Linux Syste…)
- [CVE-2026-25511](https://cve.now/CVE-2026-25511.md): Group-Office is vulnerable to SSRF and File Read in WOPI service discovery (CVSS 8.2, Intermesh groupoffice)
- [CVE-2026-25512](https://cve.now/CVE-2026-25512.md): Group-Office is vulnerable to RCE due to Command Injection via TNEF Attachment Handler (CVSS 9.4, Intermesh groupoffice)
- [CVE-2025-15555](https://cve.now/CVE-2025-15555.md): Open5GS VoLTE Cx-Test hss-cx-path.c hss\_ogs\_diam\_cx\_mar\_cb stack-based overflow (CVSS 6.9, Open5GS)
- [CVE-2026-25499](https://cve.now/CVE-2026-25499.md): terraform-provider-proxmox has insecure sudo recommendation in the documentation (CVSS 8.7, bpg terraform-provider-proxmox · github.com/bpg/terraform-p…)
- [CVE-2025-13375](https://cve.now/CVE-2025-13375.md): IBM Common Cryptographic Architecture Arbitrary Command Execution (CVSS 9.8, IBM Common Cryptographic Architecture · IBM 4769 Developers…)
- [CVE-2026-1554](https://cve.now/CVE-2026-1554.md): Central Authentication System (CAS) Server - Less critical - XML Element Injection - SA-CONTRIB-2026-007 (CVSS 4.2, Drupal Central Authentication System (CAS) Server · drupal/…)
- [CVE-2026-1553](https://cve.now/CVE-2026-1553.md): Drupal Canvas - Moderately critical - Access bypass - SA-CONTRIB-2026-006 (CVSS 4.8, Drupal Canvas · drupal/canvas)
- [CVE-2026-0948](https://cve.now/CVE-2026-0948.md): Microsoft Entra ID SSO Login - Critical - Access bypass - SA-CONTRIB-2026-005 (CVSS 6.5, Drupal Microsoft Entra ID SSO Login · drupal/social\_auth\_en…)
- [CVE-2026-0947](https://cve.now/CVE-2026-0947.md): AT Internet Piano Analytics - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-004 (CVSS 4.8, Drupal AT Internet Piano Analytics · drupal/pianoanalytics)
- [CVE-2026-0946](https://cve.now/CVE-2026-0946.md): AT Internet SmartTag - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-003 (CVSS 6.1, Drupal AT Internet SmartTag · drupal/atsmarttag)
- [CVE-2026-0945](https://cve.now/CVE-2026-0945.md): Role Delegation - Moderately critical - Access bypass - SA-CONTRIB-2026-002 (CVSS 5.4, Drupal Role Delegation · drupal/role\_delegation)
- [CVE-2026-0944](https://cve.now/CVE-2026-0944.md): Group invite - Moderately critical - Access bypass - SA-CONTRIB-2026-001 (CVSS 5.3, Drupal Group invite · drupal/ginvite)
- [CVE-2023-38010](https://cve.now/CVE-2023-38010.md): Multiple Vulnerabilities in IBM Cloud Pak System (CVSS 5.3, IBM Cloud Pak System · IBM OS Image for Red Hat Linux Syste…)
- [CVE-2026-25505](https://cve.now/CVE-2026-25505.md): Bambuddy Uses Hardcoded Secret Key + Many API Endpoints do not Require Authentication (CVSS 9.8, maziggy bambuddy · bambuddy)
- [CVE-2026-25481](https://cve.now/CVE-2026-25481.md): Langroid has WAF Bypass Leading to RCE in TableChatAgent (CVSS 9.4, langroid)
- [CVE-2026-25513](https://cve.now/CVE-2026-25513.md): FacturaScripts has SQL Injection vulnerability in API ORDER BY Clause (CVSS 8.3, NeoRazorX facturascripts · facturascripts/facturascripts)
- [CVE-2026-25514](https://cve.now/CVE-2026-25514.md): FacturaScripts has SQL Injection vulnerability in Autocomplete Actions (CVSS 8.7, NeoRazorX facturascripts · facturascripts/facturascripts)
- [CVE-2026-25157](https://cve.now/CVE-2026-25157.md): OpenClaw/Clawdbot has OS Command Injection via Project Root Path in sshNodeCommand (CVSS 7.8, openclaw · clawdbot)
- [CVE-2026-25475](https://cve.now/CVE-2026-25475.md): OpenClaw Vulnerable to Local File Inclusion via MEDIA: Path Extraction (CVSS 6.5, openclaw)
- [CVE-2026-25161](https://cve.now/CVE-2026-25161.md): Alist vulnerable to Path Traversal in multiple file operation handlers (CVSS 8.8, AlistGo alist · github.com/alist-org/alist/v3 +1)
- [CVE-2026-25160](https://cve.now/CVE-2026-25160.md): Alist has Insecure TLS Config (CVSS 9.1, AlistGo alist · github.com/alist-org/alist +1)
- [CVE-2026-24884](https://cve.now/CVE-2026-24884.md): Compressing Vulnerable to Arbitrary File Write via Symlink Extraction (CVSS 8.4, node-modules compressing · compressing)
- [CVE-2026-25145](https://cve.now/CVE-2026-25145.md): melange has a path traversal in license-path which allows reading files outside workspace (CVSS 5.5, chainguard-dev melange · chainguard.dev/melange)
- [CVE-2026-25143](https://cve.now/CVE-2026-25143.md): melange affected by potential host command execution via license-check YAML mode patch pipeline (CVSS 7.8, chainguard-dev melange · chainguard.dev/melange)
- [CVE-2026-24844](https://cve.now/CVE-2026-24844.md): melange pipeline working-directory could allow command injection (CVSS 7.8, chainguard-dev melange · chainguard.dev/melange)
- [CVE-2026-24843](https://cve.now/CVE-2026-24843.md): melange QEMU runner could write files outside workspace directory (CVSS 8.2, chainguard-dev melange · chainguard.dev/melange)
- [CVE-2025-68699](https://cve.now/CVE-2025-68699.md): NanoMQ $share/ Subscription Validation and Forwarding Parsing Inconsistency: NULL Pointer Increment Causes Crash (CVSS 6.5, nanomq)
- [CVE-2026-23897](https://cve.now/CVE-2026-23897.md): Apollo Server is vulnerable to denial of service with \`startStandaloneServer\` (CVSS 7.5, apollographql apollo-server · apollo-server +1)
- [CVE-2026-25140](https://cve.now/CVE-2026-25140.md): apko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams (CVSS 7.5, chainguard-dev apko · chainguard.dev/apko)
- [CVE-2026-25121](https://cve.now/CVE-2026-25121.md): apko is vulnerable to path traversal in apko dirFS which allows filesystem writes outside base (CVSS 7.5, chainguard-dev apko · chainguard.dev/apko)
- [CVE-2026-25122](https://cve.now/CVE-2026-25122.md): apko is vulnerable to unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams (CVSS 5.5, chainguard-dev apko · chainguard.dev/apko)
- [CVE-2026-0536](https://cve.now/CVE-2026-0536.md): GIF File Parsing Stack Based Buffer Overflow (CVSS 7.8, Autodesk 3ds Max)
- [CVE-2026-25508](https://cve.now/CVE-2026-25508.md): ESF-IDF Has Memory Safety Vulnerabilities in BLE Provisioning (CVSS 6.3, espressif esp-idf)
- [CVE-2026-25507](https://cve.now/CVE-2026-25507.md): ESF-IDF Has Use-after-free Vulnerability in BLE Provisioning (CVSS 6.3, espressif esp-idf)
- [CVE-2026-25532](https://cve.now/CVE-2026-25532.md): ESF-IDF is Vulnerable to WPS Enrollee Fragment Integer Underflow (CVSS 6.3, espressif esp-idf)
- [CVE-2026-25139](https://cve.now/CVE-2026-25139.md): RIOT Vulnerable to Multiple Out-of-Bounds Read When Processing Received 6LoWPAN SFR Fragments (CVSS 8.7, RIOT-OS RIOT)
- [CVE-2025-69215](https://cve.now/CVE-2025-69215.md): OpenSTAManager has an SQL Injection in the Stampe Module (CVSS 8.7, devcode-it openstamanager · devcode-it/openstamanager)
- [CVE-2025-69213](https://cve.now/CVE-2025-69213.md): OpenSTAManager has a SQL Injection in ajax\_complete.php (get\_sedi endpoint) (CVSS 8.7, devcode-it openstamanager · devcode-it/openstamanager)
- [CVE-2026-21893](https://cve.now/CVE-2026-21893.md): n8n Vulnerable to Command Injection in Community Package Installation (CVSS 9.4, n8n-io n8n · n8n)
- [CVE-2025-64712](https://cve.now/CVE-2025-64712.md): Unstructured has Path Traversal via Malicious MSG Attachment that Allows Arbitrary File Write (CVSS 9.8, Unstructured-IO unstructured · unstructured)
- [CVE-2026-22044](https://cve.now/CVE-2026-22044.md): GLPI is Vulnerable to Authenticated SQL Injection (CVSS 6.5, glpi-project glpi)
- [CVE-2026-23624](https://cve.now/CVE-2026-23624.md): GLPI is vulnerable to session stealing on externally authenticated user change (CVSS 4.3, glpi-project glpi)
- [CVE-2026-22247](https://cve.now/CVE-2026-22247.md): GLPI is Vulnerable to SSRF via Webhooks (CVSS 4.1, glpi-project glpi)
- [CVE-2026-25115](https://cve.now/CVE-2026-25115.md): n8n is vulnerable to Python sandbox escape (CVSS 9.4, n8n-io n8n · n8n)
- [CVE-2026-25056](https://cve.now/CVE-2026-25056.md): n8n Arbitrary File Write leading to RCE in n8n Merge Node (CVSS 9.4, n8n-io n8n · n8n)
- [CVE-2026-25055](https://cve.now/CVE-2026-25055.md): n8n Arbitrary File Write on Remote Systems via SSH Node (CVSS 7.1, n8n-io n8n · n8n)
- [CVE-2026-25054](https://cve.now/CVE-2026-25054.md): n8n is Vulnerable to Stored Cross-Site Scripting via Markdown Rendering in Workflow UI (CVSS 8.5, n8n-io n8n · n8n)
- [CVE-2026-25053](https://cve.now/CVE-2026-25053.md): n8n is Vulnerable to OS Command Injection in Git Node (CVSS 9.4, n8n-io n8n · n8n)
- [CVE-2026-25052](https://cve.now/CVE-2026-25052.md): n8n Improper File Access Controls Allow Arbitrary File Read by Authenticated Users (CVSS 9.4, n8n-io n8n · n8n)
- [CVE-2026-25051](https://cve.now/CVE-2026-25051.md): n8n Improper CSP Enforcement in Webhook Responses May Allow Stored XSS (CVSS 8.5, n8n-io n8n · n8n)
- [CVE-2025-61917](https://cve.now/CVE-2025-61917.md): n8n Unsafe Buffer Allocation Allows In-Process Memory Disclosure in Task Runner (CVSS 7.7, n8n-io n8n · n8n)
- [CVE-2026-25049](https://cve.now/CVE-2026-25049.md): n8n Has an Expression Escape Vulnerability Leading to RCE (CVSS 9.4, n8n-io n8n · n8n)
- [CVE-2026-0662](https://cve.now/CVE-2026-0662.md): Untrusted Search Path Vulnerability when opening max Files (CVSS 7.8, Autodesk 3ds Max)
- [CVE-2026-0660](https://cve.now/CVE-2026-0660.md): Stack Based Buffer Overflow in GIF File Parsing (CVSS 8.4, Autodesk 3ds Max)
- [CVE-2026-0661](https://cve.now/CVE-2026-0661.md): Out-of-Bounds Write in RGB File Parsing (CVSS 8.4, Autodesk 3ds Max)
- [CVE-2026-0537](https://cve.now/CVE-2026-0537.md): RGB File Parsing Memory Corruption (CVSS 8.4, Autodesk 3ds Max)
- [CVE-2026-0538](https://cve.now/CVE-2026-0538.md): GIF File Parsing Out-of-Bounds Write (CVSS 8.4, Autodesk 3ds Max)
- [CVE-2026-20119](https://cve.now/CVE-2026-20119.md): Cisco TelePresence Collaboration Endpoint Software and RoomOS Software Denial of Service Vulnerability (CVSS 7.5, Cisco RoomOS Software · Cisco TelePresence Endpoint Software)
- [CVE-2026-20111](https://cve.now/CVE-2026-20111.md): Cisco Prime Infrastructure Stored Cross-Site Scripting Vulnerability (CVSS 4.8, Cisco Prime Infrastructure)
- [CVE-2026-20123](https://cve.now/CVE-2026-20123.md): Cisco Prime Infrastructure and Evolved Programmable Network Manager Open Redirect Vulnerability (CVSS 4.3, Cisco Evolved Programmable Network Manager · Cisco Prime In…)
- [CVE-2026-20098](https://cve.now/CVE-2026-20098.md): Cisco Meeting Management Arbitrary File Upload Vulnerability (CVSS 8.8, Cisco Meeting Management)
- [CVE-2026-20056](https://cve.now/CVE-2026-20056.md): Cisco Secure Web Appliance TBD Bypass Vulnerability (CVSS 4.0, Cisco Secure Web Appliance)
- [CVE-2026-23110](https://cve.now/CVE-2026-23110.md): scsi: core: Wake up the error handler when final completions race against each other (no CVSS, Linux)
- [CVE-2026-23109](https://cve.now/CVE-2026-23109.md): fs/writeback: skip AS\_NO\_DATA\_INTEGRITY mappings in wait\_sb\_inodes() (no CVSS, Linux)
- [CVE-2026-23108](https://cve.now/CVE-2026-23108.md): can: usb\_8dev: usb\_8dev\_read\_bulk\_callback(): fix URB memory leak (no CVSS, Linux)
- [CVE-2026-23107](https://cve.now/CVE-2026-23107.md): arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA (no CVSS, Linux)
- [CVE-2026-23106](https://cve.now/CVE-2026-23106.md): timekeeping: Adjust the leap state for the correct auxiliary timekeeper (no CVSS, Linux)
- [CVE-2026-23105](https://cve.now/CVE-2026-23105.md): net/sched: qfq: Use cl\_is\_active to determine whether class is active in qfq\_rm\_from\_ag (CVSS 7.8, Linux)
- [CVE-2026-23104](https://cve.now/CVE-2026-23104.md): ice: fix devlink reload call trace (no CVSS, Linux)
- [CVE-2026-23103](https://cve.now/CVE-2026-23103.md): ipvlan: Make the addrs\_lock be per port (CVSS 7.8, Linux)
- [CVE-2026-23102](https://cve.now/CVE-2026-23102.md): arm64/fpsimd: signal: Fix restoration of SVE context (no CVSS, Linux)
- [CVE-2026-23101](https://cve.now/CVE-2026-23101.md): leds: led-class: Only Add LED to leds\_list when it is fully ready (no CVSS, Linux)
- [CVE-2026-23100](https://cve.now/CVE-2026-23100.md): mm/hugetlb: fix hugetlb\_pmd\_shared() (no CVSS, Linux)
- [CVE-2026-23099](https://cve.now/CVE-2026-23099.md): bonding: limit BOND\_MODE\_8023AD to Ethernet devices (no CVSS, Linux)
- [CVE-2026-23098](https://cve.now/CVE-2026-23098.md): netrom: fix double-free in nr\_route\_frame() (CVSS 8.8, Linux)
- [CVE-2026-23097](https://cve.now/CVE-2026-23097.md): migrate: correct lock ordering for hugetlb file folios (no CVSS, Linux)
- [CVE-2026-23096](https://cve.now/CVE-2026-23096.md): uacce: fix cdev handling in the cleanup path (no CVSS, Linux)
- [CVE-2026-23095](https://cve.now/CVE-2026-23095.md): gue: Fix skb memleak with inner IP protocol 0. (CVSS 7.5, Linux)
- [CVE-2026-23094](https://cve.now/CVE-2026-23094.md): uacce: fix isolate sysfs check condition (no CVSS, Linux)
- [CVE-2026-23093](https://cve.now/CVE-2026-23093.md): ksmbd: smbd: fix dma\_unmap\_sg() nents (no CVSS, Linux)
- [CVE-2026-23092](https://cve.now/CVE-2026-23092.md): iio: dac: ad3552r-hs: fix out-of-bound write in ad3552r\_hs\_write\_data\_source (no CVSS, Linux)
- [CVE-2026-23091](https://cve.now/CVE-2026-23091.md): intel\_th: fix device leak on output open() (no CVSS, Linux)
- [CVE-2026-23090](https://cve.now/CVE-2026-23090.md): slimbus: core: fix device reference leak on report present (no CVSS, Linux)
- [CVE-2026-23089](https://cve.now/CVE-2026-23089.md): ALSA: usb-audio: Fix use-after-free in snd\_usb\_mixer\_free() (no CVSS, Linux)
- [CVE-2026-23088](https://cve.now/CVE-2026-23088.md): tracing: Fix crash on synthetic stacktrace field usage (no CVSS, Linux)
- [CVE-2026-23087](https://cve.now/CVE-2026-23087.md): scsi: xen: scsiback: Fix potential memory leak in scsiback\_remove() (no CVSS, Linux)
- [CVE-2026-23086](https://cve.now/CVE-2026-23086.md): vsock/virtio: cap TX credit to local buffer size (no CVSS, Linux)
- [CVE-2026-23085](https://cve.now/CVE-2026-23085.md): irqchip/gic-v3-its: Avoid truncating memory addresses (no CVSS, Linux)
- [CVE-2026-23084](https://cve.now/CVE-2026-23084.md): be2net: Fix NULL pointer dereference in be\_cmd\_get\_mac\_from\_list (no CVSS, Linux)
- [CVE-2026-23083](https://cve.now/CVE-2026-23083.md): fou: Don't allow 0 for FOU\_ATTR\_IPPROTO. (no CVSS, Linux)
- [CVE-2026-23082](https://cve.now/CVE-2026-23082.md): can: gs\_usb: gs\_usb\_receive\_bulk\_callback(): unanchor URL on usb\_submit\_urb() error (no CVSS, Linux)
- [CVE-2026-23081](https://cve.now/CVE-2026-23081.md): net: phy: intel-xway: fix OF node refcount leakage (no CVSS, Linux)
- [CVE-2026-23080](https://cve.now/CVE-2026-23080.md): can: mcba\_usb: mcba\_usb\_read\_bulk\_callback(): fix URB memory leak (no CVSS, Linux)
- [CVE-2026-23079](https://cve.now/CVE-2026-23079.md): gpio: cdev: Fix resource leaks on errors in lineinfo\_changed\_notify() (no CVSS, Linux)
- [CVE-2026-23078](https://cve.now/CVE-2026-23078.md): ALSA: scarlett2: Fix buffer overflow in config retrieval (no CVSS, Linux)
- [CVE-2026-23077](https://cve.now/CVE-2026-23077.md): mm/vma: fix anon\_vma UAF on mremap() faulted, unfaulted merge (CVSS 7.8, Linux)
- [CVE-2026-23076](https://cve.now/CVE-2026-23076.md): ALSA: ctxfi: Fix potential OOB access in audio mixer handling (no CVSS, Linux)
- [CVE-2026-23075](https://cve.now/CVE-2026-23075.md): can: esd\_usb: esd\_usb\_read\_bulk\_callback(): fix URB memory leak (no CVSS, Linux)
- [CVE-2026-23074](https://cve.now/CVE-2026-23074.md): net/sched: Enforce that teql can only be used as root qdisc (CVSS 7.8, Linux)
- [CVE-2026-23073](https://cve.now/CVE-2026-23073.md): wifi: rsi: Fix memory corruption due to not set vif driver data size (no CVSS, Linux)
- [CVE-2026-23072](https://cve.now/CVE-2026-23072.md): l2tp: Fix memleak in l2tp\_udp\_encap\_recv(). (no CVSS, Linux)
- [CVE-2026-23071](https://cve.now/CVE-2026-23071.md): regmap: Fix race condition in hwspinlock irqsave routine (no CVSS, Linux)
- [CVE-2026-23070](https://cve.now/CVE-2026-23070.md): Octeontx2-af: Add proper checks for fwdata (no CVSS, Linux)
- [CVE-2026-23069](https://cve.now/CVE-2026-23069.md): vsock/virtio: fix potential underflow in virtio\_transport\_get\_credit() (no CVSS, Linux)
- [CVE-2026-23068](https://cve.now/CVE-2026-23068.md): spi: spi-sprd-adi: Fix double free in probe error path (no CVSS, Linux)
- [CVE-2026-23067](https://cve.now/CVE-2026-23067.md): iommu/io-pgtable-arm: fix size\_t signedness bug in unmap path (no CVSS, Linux)
- [CVE-2026-23066](https://cve.now/CVE-2026-23066.md): rxrpc: Fix recvmsg() unconditional requeue (CVSS 7.8, Linux)
- [CVE-2026-23065](https://cve.now/CVE-2026-23065.md): platform/x86/amd: Fix memory leak in wbrf\_record() (no CVSS, Linux)
- [CVE-2026-23064](https://cve.now/CVE-2026-23064.md): net/sched: act\_ife: avoid possible NULL deref (no CVSS, Linux)
- [CVE-2026-23063](https://cve.now/CVE-2026-23063.md): uacce: ensure safe queue release with state management (no CVSS, Linux)
- [CVE-2026-23062](https://cve.now/CVE-2026-23062.md): platform/x86: hp-bioscfg: Fix kernel panic in GET\_INSTANCE\_ID macro (no CVSS, Linux)
- [CVE-2026-23061](https://cve.now/CVE-2026-23061.md): can: kvaser\_usb: kvaser\_usb\_read\_bulk\_callback(): fix URB memory leak (no CVSS, Linux)
- [CVE-2026-23060](https://cve.now/CVE-2026-23060.md): crypto: authencesn - reject too-short AAD (assoclen\<8) to match ESP/ESN spec (no CVSS, Linux)
- [CVE-2026-23059](https://cve.now/CVE-2026-23059.md): scsi: qla2xxx: Sanitize payload size to prevent member overflow (no CVSS, Linux)
- [CVE-2026-23058](https://cve.now/CVE-2026-23058.md): can: ems\_usb: ems\_usb\_read\_bulk\_callback(): fix URB memory leak (no CVSS, Linux)
- [CVE-2026-23057](https://cve.now/CVE-2026-23057.md): vsock/virtio: Coalesce only linear skb (no CVSS, Linux)
- [CVE-2026-23056](https://cve.now/CVE-2026-23056.md): uacce: implement mremap in uacce\_vm\_ops to return -EPERM (no CVSS, Linux)
- [CVE-2025-71199](https://cve.now/CVE-2025-71199.md): iio: adc: at91-sama5d2\_adc: Fix potential use-after-free in sama5d2\_adc driver (no CVSS, Linux)
- [CVE-2025-71198](https://cve.now/CVE-2025-71198.md): iio: imu: st\_lsm6dsx: fix iio\_chan\_spec for sensors without event detection (no CVSS, Linux)
- [CVE-2025-71197](https://cve.now/CVE-2025-71197.md): w1: therm: Fix off-by-one buffer overflow in alarms\_store (no CVSS, Linux)
- [CVE-2026-23055](https://cve.now/CVE-2026-23055.md): i2c: riic: Move suspend handling to NOIRQ phase (no CVSS, Linux)
- [CVE-2026-23054](https://cve.now/CVE-2026-23054.md): net: hv\_netvsc: reject RSS hash key programming without RX indirection table (no CVSS, Linux)
- [CVE-2026-23053](https://cve.now/CVE-2026-23053.md): NFS: Fix a deadlock involving nfs\_release\_folio() (no CVSS, Linux)
- [CVE-2026-23052](https://cve.now/CVE-2026-23052.md): ftrace: Do not over-allocate ftrace memory (no CVSS, Linux)
- [CVE-2026-23051](https://cve.now/CVE-2026-23051.md): drm/amdgpu: fix drm panic null pointer when driver not support atomic (no CVSS, Linux)
- [CVE-2026-23050](https://cve.now/CVE-2026-23050.md): pNFS: Fix a deadlock when returning a delegation during open() (no CVSS, Linux)
- [CVE-2026-23049](https://cve.now/CVE-2026-23049.md): drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel (no CVSS, Linux)
- [CVE-2025-71196](https://cve.now/CVE-2025-71196.md): phy: stm32-usphyc: Fix off by one in probe() (no CVSS, Linux)
- [CVE-2025-71195](https://cve.now/CVE-2025-71195.md): dmaengine: xilinx: xdma: Fix regmap max\_register (no CVSS, Linux)
- [CVE-2025-71194](https://cve.now/CVE-2025-71194.md): btrfs: fix deadlock in wait\_current\_trans() due to ignored transaction type (no CVSS, Linux)
- [CVE-2025-71193](https://cve.now/CVE-2025-71193.md): phy: qcom-qusb2: Fix NULL pointer dereference on early suspend (no CVSS, Linux)
- [CVE-2026-0659](https://cve.now/CVE-2026-0659.md): USD File Parsing Out-of-Bounds Write Vulnerability (CVSS 7.8, Autodesk USD for Arnold · Autodesk Arnold +1)
- [CVE-2026-23048](https://cve.now/CVE-2026-23048.md): udp: call skb\_orphan() before skb\_attempt\_defer\_free() (no CVSS, Linux)
- [CVE-2026-23047](https://cve.now/CVE-2026-23047.md): libceph: make calc\_target() set t-\>paused, not just clear it (no CVSS, Linux)
- [CVE-2026-23046](https://cve.now/CVE-2026-23046.md): virtio\_net: fix device mismatch in devm\_kzalloc/devm\_kfree (no CVSS, Linux)
- [CVE-2026-23045](https://cve.now/CVE-2026-23045.md): net/ena: fix missing lock when update devlink params (no CVSS, Linux)
- [CVE-2026-23044](https://cve.now/CVE-2026-23044.md): PM: hibernate: Fix crash when freeing invalid crypto compressor (no CVSS, Linux)
- [CVE-2026-23043](https://cve.now/CVE-2026-23043.md): btrfs: fix NULL pointer dereference in do\_abort\_log\_replay() (no CVSS, Linux)
- [CVE-2026-23042](https://cve.now/CVE-2026-23042.md): idpf: fix aux device unplugging when rdma is not supported by vport (no CVSS, Linux)
- [CVE-2026-23041](https://cve.now/CVE-2026-23041.md): bnxt\_en: Fix NULL pointer crash in bnxt\_ptp\_enable during error cleanup (no CVSS, Linux)
- [CVE-2026-23040](https://cve.now/CVE-2026-23040.md): wifi: mac80211\_hwsim: fix typo in frequency notification (no CVSS, Linux)
- [CVE-2025-71192](https://cve.now/CVE-2025-71192.md): ALSA: ac97: fix a double free in snd\_ac97\_controller\_register() (CVSS 7.0, Linux)
- [CVE-2026-22549](https://cve.now/CVE-2026-22549.md): BIG-IP Container Ingress Services vulnerability (CVSS 4.9, F5 BIG-IP Container Ingress Services)
- [CVE-2026-1642](https://cve.now/CVE-2026-1642.md): NGINX vulnerability (CVSS 5.9, F5 NGINX Open Source · F5 NGINX Plus)
- [CVE-2026-22548](https://cve.now/CVE-2026-22548.md): BIG-IP Advanced WAF and ASM vulnerability (CVSS 5.9, F5 BIG-IP)
- [CVE-2026-20732](https://cve.now/CVE-2026-20732.md): BIG-IP Configuration utility vulnerability (CVSS 3.1, F5 BIG-IP)
- [CVE-2026-20730](https://cve.now/CVE-2026-20730.md): BIG-IP Edge Client for Windows vulnerability (CVSS 3.3, F5 BIG-IP Edge Client)
- [CVE-2025-14740](https://cve.now/CVE-2025-14740.md): Docker Desktop for Windows Incorrect Permission Assignment Privilege Escalation Vulnerabilities (CVSS 6.7, Docker Desktop)
- [CVE-2025-5329](https://cve.now/CVE-2025-5329.md): SQLi in Martcode Software's Delta Course Automation (CVSS 9.8, Martcode Software Delta Course Automation)
- [CVE-2025-15368](https://cve.now/CVE-2025-15368.md): SportsPress \<= 2.7.26 - Authenticated (Contributor+) Local File Inclusion via Shortcode (CVSS 8.8, themeboy SportsPress – Sports Club & League Manager)
- [CVE-2026-0873](https://cve.now/CVE-2026-0873.md): Privilege Elevation in Ercom Cryptobox administration console (CVSS 4.8, Ercom Cryptobox)
- [CVE-2026-24735](https://cve.now/CVE-2026-24735.md): Apache Answer: Revision API Improper Access Control leads to Information Disclosure (CVSS 7.5, Apache Software Foundation Apache Answer · github.com/apach…)
- [CVE-2025-59818](https://cve.now/CVE-2025-59818.md): Authenticated Remote Code Execution via the file name of an uploaded file (CVSS 10.0, Zenitel TCIS-3+)
- [CVE-2025-41085](https://cve.now/CVE-2025-41085.md): Stored Cross-Site Scripting (XSS) in Apidog web platform (CVSS 5.1, Apidog Web Platform)
- [CVE-2026-1622](https://cve.now/CVE-2026-1622.md): Unredacted data exposure in query.log (CVSS 4.8, neo4j Enterprise Edition · neo4j Community Edition +1)
- [CVE-2026-0816](https://cve.now/CVE-2026-0816.md): All push notification for WP \<= 1.5.3 - Authenticated (Administrator+) SQL Injection via 'delete\_id' Parameter (CVSS 4.9, gtlwpdev All push notification for WP)
- [CVE-2025-15487](https://cve.now/CVE-2025-15487.md): Code Explorer \<= 1.4.6 - Authenticated (Administrator+) Arbitrary File Read via 'file' Parameter (CVSS 4.9, qriouslad Code Explorer)
- [CVE-2026-1370](https://cve.now/CVE-2026-1370.md): SIBS - WooCommerce \<= 2.2.0 - Authenticated (Admin+) SQL Injection via 'referencedId' Parameter (CVSS 4.9, comprassibs SIBS woocommerce payment gateway)
- [CVE-2026-0743](https://cve.now/CVE-2026-0743.md): WP Content Permission \<= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'ohmem-message' Parameter (CVSS 4.4, orenhav WP Content Permission)
- [CVE-2026-0742](https://cve.now/CVE-2026-0742.md): Smart Appointment & Booking \<= 1.0.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via saab\_save\_form\_data AJAX Action (CVSS 6.4, zealopensource Smart Appointment & Booking)
- [CVE-2026-0679](https://cve.now/CVE-2026-0679.md): Fortis for WooCommerce \<= 1.2.0 - Missing Authorization to Unauthenticated Arbitrary Order Status Update to Paid via 'wc-api' Endpoint (CVSS 5.3, fortispay Fortis for WooCommerce)
- [CVE-2025-15508](https://cve.now/CVE-2025-15508.md): Magic Import Document Extractor \<= 1.0.6 - Unauthenticated Sensitive Information Exposure (CVSS 5.3, magicimport Magic Import Document Extractor)
- [CVE-2026-0572](https://cve.now/CVE-2026-0572.md): WebPurify Profanity Filter \<= 4.0.2 - Missing Authorization to Unauthenticated Plugin Settings Change via webpurify\_save\_options (CVSS 6.5, WebPurify Profanity Filter)
- [CVE-2025-15507](https://cve.now/CVE-2025-15507.md): Magic Import Document Extractor \<= 1.0.5 - Missing Authorization to Unauthenticated Plugin License Status Modification (CVSS 5.3, magicimport Magic Import Document Extractor)
- [CVE-2025-15268](https://cve.now/CVE-2025-15268.md): Infility Global \<= 2.14.46 - Unauthenticated SQL Injection via Predictable API Key and IP Whitelist Bypass (CVSS 7.5, Infility Global)
- [CVE-2026-0681](https://cve.now/CVE-2026-0681.md): Extended Random Number Generator \<= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings (CVSS 4.4, rtddev Extended Random Number Generator)
- [CVE-2025-15285](https://cve.now/CVE-2025-15285.md): SEO Flow by LupsOnline \<= 2.2.1 - Unauthenticated Arbitrary Post/Category Modification (CVSS 7.5, SEO Flow by LupsOnline)
- [CVE-2025-14461](https://cve.now/CVE-2025-14461.md): Xendit Payment \<= 6.0.2 - Missing Authorization to Unauthenticated Arbitrary Order Status Update to Paid (CVSS 5.3, tpixendit Xendit Payment)
- [CVE-2025-15260](https://cve.now/CVE-2025-15260.md): MyRewards – Loyalty Points and Rewards for WooCommerce \<= 5.6.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Loyalty Rule Modification (CVSS 6.5, lwsdevelopers MyRewards)
- [CVE-2025-15482](https://cve.now/CVE-2025-15482.md): Chapa Payment Gateway Plugin for WooCommerce \<= 1.0.3 - Unauthenticated Sensitive Information Exposure (CVSS 5.3, chapaet Chapa Payment Gateway Plugin for WooCommerce)
- [CVE-2026-1819](https://cve.now/CVE-2026-1819.md): Stored XSS in Karel Electronics' ViPort (CVSS 8.8, Karel Electronics Industry and Trade ViPort)
- [CVE-2026-24447](https://cve.now/CVE-2026-24447.md): If a malformed data is input to the affected product, a CSV file downloaded from the affected product may contain such malformed data. (CVSS 6.5, Six Apart Movable Type)
- [CVE-2026-23704](https://cve.now/CVE-2026-23704.md): A non-administrative user can upload malicious files. (CVSS 6.5, Six Apart Movable Type)
- [CVE-2026-22875](https://cve.now/CVE-2026-22875.md): Movable Type contains a stored cross-site scripting vulnerability in Export Sites. (CVSS 5.4, Six Apart Movable Type)
- [CVE-2026-21393](https://cve.now/CVE-2026-21393.md): Movable Type contains a stored cross-site scripting vulnerability in Edit Comment. (CVSS 5.4, Six Apart Movable Type)
- [CVE-2026-1756](https://cve.now/CVE-2026-1756.md): WP FOFT Loader \<= 2.1.39 - Authenticated (Author+) Arbitrary File Upload (CVSS 8.8, seezee WP FOFT Loader)
- [CVE-2026-20987](https://cve.now/CVE-2026-20987.md): Improper input validation in GalaxyDiagnostics prior to version 3.5.050 allows local privileged attackers to execute privileged commands. (CVSS 8.7, Samsung Mobile GalaxyDiagnostics)
- [CVE-2026-20986](https://cve.now/CVE-2026-20986.md): Path traversal in Samsung Members prior to Chinese version 15.5.05.4 allows local attackers to overwrite data within Samsung Members. (CVSS 5.1, Samsung Mobile Chinese Samsung Members)
- [CVE-2026-20985](https://cve.now/CVE-2026-20985.md): Improper input validation in Samsung Members prior to version 5.6.00.11 allows remote attackers to connect arbitrary URL and launch arbitrar (CVSS 7.0, Samsung Mobile Samsung Members)
- [CVE-2026-20984](https://cve.now/CVE-2026-20984.md): Improper handling of insufficient permission in Galaxy Wearable installed on non-Samsung Device prior to version 2.2.68 allows local attacke (CVSS 5.1, Samsung Mobile Galaxy Wearable)
- [CVE-2026-20983](https://cve.now/CVE-2026-20983.md): Improper export of android application components in Samsung Dialer prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitra (CVSS 8.4, Samsung Mobile Devices)
- [CVE-2026-20982](https://cve.now/CVE-2026-20982.md): Path traversal in ShortcutService prior to SMR Feb-2026 Release 1 allows privileged local attacker to create file with system privilege. (CVSS 6.8, Samsung Mobile Devices)
- [CVE-2026-20981](https://cve.now/CVE-2026-20981.md): Improper input validation in FacAtFunction prior to SMR Feb-2026 Release 1 allows privileged physical attacker to execute arbitrary command (CVSS 5.4, Samsung Mobile Devices)
- [CVE-2026-20980](https://cve.now/CVE-2026-20980.md): Improper input validation in PACM prior to SMR Feb-2026 Release 1 allows physical attacker to execute arbitrary commands. (CVSS 7.0, Samsung Mobile Devices)
- [CVE-2026-20979](https://cve.now/CVE-2026-20979.md): Improper privilege management in Settings prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with Settings (CVSS 8.4, Samsung Mobile Devices)
- [CVE-2026-20978](https://cve.now/CVE-2026-20978.md): Improper authorization in KnoxGuardManager prior to SMR Feb-2026 Release 1 allows local attackers to bypass the persistence configuration of (CVSS 5.8, Samsung Mobile Devices)
- [CVE-2026-20977](https://cve.now/CVE-2026-20977.md): Improper access control in Emergency Sharing prior to SMR Feb-2026 Release 1 allows local attackers to interrupt its functioning. (CVSS 6.9, Samsung Mobile Devices)
- [CVE-2025-29867](https://cve.now/CVE-2025-29867.md): Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Hancom Inc. (CVSS 8.5, Hancom Office)
- [CVE-2026-1791](https://cve.now/CVE-2026-1791.md): Arbitrary File Upload Vulnerability in Operation and Maintenance Security Gateway (CVSS 2.7, Hillstone Networks Operation and Maintenance Security Gatew…)
- [CVE-2026-1835](https://cve.now/CVE-2026-1835.md): lcg0124 BootDo cross-site request forgery (CVSS 5.3, lcg0124 BootDo)
- [CVE-2025-69618](https://cve.now/CVE-2025-69618.md): An arbitrary file overwrite vulnerability in the file import process of Tarot, Astro & Healing v11.4.0 allows attackers to overwrite critica (CVSS 8.1)
- [CVE-2025-69620](https://cve.now/CVE-2025-69620.md): A path traversal in Moo Chan Song v4.5.7 allows attackers to cause a Denial of Service (DoS) via writing files to the internal storage. (CVSS 5.0)
- [CVE-2025-69621](https://cve.now/CVE-2025-69621.md): An arbitrary file overwrite vulnerability in the file import process of Comic Book Reader v1.0.95 allows attackers to overwrite critical int (CVSS 8.1)
- [CVE-2025-70545](https://cve.now/CVE-2025-70545.md): A stored cross-site scripting (XSS) vulnerability exists in the web management interface of the PPC (Belden) ONT 2K05X router running firmwa (CVSS 6.1)
- [CVE-2025-70997](https://cve.now/CVE-2025-70997.md): A vulnerability has been discovered in eladmin v2.7 and before. (CVSS 8.1)
- [CVE-2025-71031](https://cve.now/CVE-2025-71031.md): Water-Melon Melon commit 9df9292 and below is vulnerable to Denial of Service. (CVSS 7.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-02-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.