# CVEs published 2026-02-06

194 CVEs were published on February 6, 2026: 22 critical, 63 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2020-37079](https://cve.now/CVE-2020-37079.md): Wing FTP Server \< 6.2.7 - Cross-site Request Forgery (CVSS 5.1, Wing FTP Server)
- [CVE-2020-37171](https://cve.now/CVE-2020-37171.md): TapinRadio 2.12.3 - 'username' Denial of Service (CVSS 6.7, Raimersoft TapinRadio)
- [CVE-2020-37170](https://cve.now/CVE-2020-37170.md): TapinRadio 2.12.3 - 'address' Denial of Service (CVSS 6.7, Raimersoft TapinRadio)
- [CVE-2020-37166](https://cve.now/CVE-2020-37166.md): AbsoluteTelnet 11.12 - 'SSH2/username' Denial of Service (CVSS 6.9, Celestial Software AbsoluteTelnet)
- [CVE-2020-37165](https://cve.now/CVE-2020-37165.md): AbsoluteTelnet 11.12 - "license name" Denial of Service (CVSS 6.7, Celestial Software AbsoluteTelnet)
- [CVE-2020-37164](https://cve.now/CVE-2020-37164.md): AbsoluteTelnet 11.12 - "license entry" Denial of Service (CVSS 6.7, Celestial Software AbsoluteTelnet)
- [CVE-2020-37163](https://cve.now/CVE-2020-37163.md): QuickDate 1.3.2 - SQL Injection (CVSS 8.8, QuickDate)
- [CVE-2020-37162](https://cve.now/CVE-2020-37162.md): Wedding Slideshow Studio 1.36 - 'Key' Buffer Overflow (CVSS 8.4, Wedding Slideshow Studio)
- [CVE-2020-37161](https://cve.now/CVE-2020-37161.md): Wedding Slideshow Studio 1.36 - 'Name' Buffer Overflow (CVSS 8.4, Wedding Slideshow Studio)
- [CVE-2020-37160](https://cve.now/CVE-2020-37160.md): SprintWork 2.3.1 - Local Privilege Escalation (CVSS 8.5, Veridium SprintWork)
- [CVE-2020-37159](https://cve.now/CVE-2020-37159.md): Cuckoo Clock 5.0 - Buffer Overflow (CVSS 8.4, Parallaxis Cuckoo Clock)
- [CVE-2020-37157](https://cve.now/CVE-2020-37157.md): DBPower C300 HD Camera - Remote Configuration Disclosure (CVSS 8.7, DBPower C300 HD Camera)
- [CVE-2020-37155](https://cve.now/CVE-2020-37155.md): Core FTP Lite 1.3 - Denial of Service (PoC) (CVSS 6.7, Core FTP Lite)
- [CVE-2020-37154](https://cve.now/CVE-2020-37154.md): eLection 2.0 - 'id' SQL Injection (CVSS 7.1, Tripath Project eLection)
- [CVE-2020-37147](https://cve.now/CVE-2020-37147.md): ATutor 2.2.4 - 'id' SQL Injection (CVSS 7.0, ATutor)
- [CVE-2020-37146](https://cve.now/CVE-2020-37146.md): Aptina AR0130 960P 1.3MP Camera - Remote Configuration Disclosure (CVSS 8.7, ACE SECURITY Aptina AR0130 960P 1.3MP Camera)
- [CVE-2020-37141](https://cve.now/CVE-2020-37141.md): AMSS++ v 4.31 - 'id' SQL Injection (CVSS 8.8, AMSS++)
- [CVE-2020-37135](https://cve.now/CVE-2020-37135.md): AMSS++ 4.7 - Backdoor Admin Account (CVSS 9.3, Amssplus AMSS++)
- [CVE-2020-37122](https://cve.now/CVE-2020-37122.md): SpotFTP-FTP Password Recover 2.4.8 - Denial of Service (CVSS 6.7, Nsauditor FTP Password Recover)
- [CVE-2020-37109](https://cve.now/CVE-2020-37109.md): aSc TimeTables 2020.11.4 - Denial of Service (CVSS 6.7, asc Applied Software Consultants aSc TimeTables)
- [CVE-2020-37107](https://cve.now/CVE-2020-37107.md): Core FTP LE 2.2 - Denial of Service (CVSS 6.7, Core FTP LE)
- [CVE-2020-37106](https://cve.now/CVE-2020-37106.md): Business Live Chat Software 1.0 - Cross-Site Request Forgery (Add Admin) (CVSS 5.1, Bdtask Business Live Chat Software)
- [CVE-2020-37095](https://cve.now/CVE-2020-37095.md): Cyberoam Authentication Client 2.1.2.7 - Buffer Overflow (SEH) (CVSS 8.4, Cyberoam Authentication Client)
- [CVE-2026-25804](https://cve.now/CVE-2026-25804.md): Antrea has invalid enforcement order for network policy rules caused by integer overflow (CVSS 8.0, antrea-io antrea · antrea.io/antrea)
- [CVE-2026-25793](https://cve.now/CVE-2026-25793.md): Nebula Has Possible Blocklist Bypass via ECDSA Signature Malleability (CVSS 7.6, slackhq nebula · github.com/slackhq/nebula)
- [CVE-2026-25803](https://cve.now/CVE-2026-25803.md): 3DP-MANAGER Uses Hard-coded Credentials (CVSS 9.8, denpiligrim 3dp-manager)
- [CVE-2026-25762](https://cve.now/CVE-2026-25762.md): AdonisJS vulnerable to Denial of Service (DoS) via Unrestricted Memory Buffering in PartHandler during File Type Detection (CVSS 7.5, adonisjs core · @adonisjs/bodyparser)
- [CVE-2026-25754](https://cve.now/CVE-2026-25754.md): AdonisJS multipart body parsing has Prototype Pollution issue (CVSS 7.2, adonisjs core · @adonisjs/bodyparser)
- [CVE-2026-25749](https://cve.now/CVE-2026-25749.md): Heap Overflow in Vim (CVSS 6.6, vim)
- [CVE-2026-25644](https://cve.now/CVE-2026-25644.md): DataHub's LDAP Ingestion Source vulnerable to MITM attack through TLS downgrade (CVSS 7.5, datahub-project datahub)
- [CVE-2026-25757](https://cve.now/CVE-2026-25757.md): Unauthenticated Spree Commerce users can view completed guest orders by Order ID (CVSS 7.7, spree · spree\_storefront)
- [CVE-2026-2070](https://cve.now/CVE-2026-2070.md): UTT 进取 520W formPolicyRouteConf strcpy buffer overflow (CVSS 8.7, UTT 进取)
- [CVE-2026-25763](https://cve.now/CVE-2026-25763.md): Command Injection on OpenProject repositories leads to Remote Code Execution (CVSS 9.4, opf openproject)
- [CVE-2026-25764](https://cve.now/CVE-2026-25764.md): OpenProject vulnerable to Stored HTML injection (CVSS 3.5, opf openproject)
- [CVE-2026-2069](https://cve.now/CVE-2026-2069.md): ggml-org llama.cpp GBNF Grammar llama-grammar.cpp llama\_grammar\_advance\_stack stack-based overflow (CVSS 4.8, ggml-org llama.cpp)
- [CVE-2026-1731](https://cve.now/CVE-2026-1731.md): Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) (CVSS 9.9, KEV, BeyondTrust Remote Support(RS) & Privileged Remote Access)
- [CVE-2026-1727](https://cve.now/CVE-2026-1727.md): Information Disclosure via Bucket Squatting in Google Cloud Agentspace. (CVSS 9.1, Google Cloud Gemini Enterprise)
- [CVE-2026-25760](https://cve.now/CVE-2026-25760.md): Website Path Traversal / Arbitrary File Read (Authenticated) in Sliver (CVSS 6.5, BishopFox sliver · github.com/bishopfox/sliver)
- [CVE-2026-2068](https://cve.now/CVE-2026-2068.md): UTT 进取 520W formSyslogConf strcpy buffer overflow (CVSS 8.7, UTT 进取)
- [CVE-2026-25758](https://cve.now/CVE-2026-25758.md): Spree allows unauthenticated users can access all guest addresses (CVSS 7.7, spree · spree\_api)
- [CVE-2025-68621](https://cve.now/CVE-2025-68621.md): Trilium Notes has a Timing Attack Vulnerability in /api/login/sync (CVSS 7.4, TriliumNext Trilium)
- [CVE-2026-25123](https://cve.now/CVE-2026-25123.md): Homarr affected by Unauthenticated SSRF / Port-Scan Primitive via widget.app.ping (CVSS 5.3, homarr-labs homarr)
- [CVE-2026-25533](https://cve.now/CVE-2026-25533.md): Enclave has a sandbox escape via infinite recursion and error objects (CVSS 6.4, agentfront enclave · enclave-vm +1)
- [CVE-2026-25516](https://cve.now/CVE-2026-25516.md): NiceGUI's XSS vulnerability in ui.markdown() allows arbitrary JavaScript execution through unsanitized HTML content (CVSS 6.1, zauberzeug nicegui · nicegui)
- [CVE-2026-25732](https://cve.now/CVE-2026-25732.md): NiceGUI's Path Traversal via Unsanitized FileUpload.name Enables Arbitrary File Write (CVSS 7.5, zauberzeug nicegui · nicegui)
- [CVE-2026-25544](https://cve.now/CVE-2026-25544.md): Payload has an SQL Injection in JSON/RichText Queries on PostgreSQL/SQLite Adapters (CVSS 9.8, payloadcms payload · @payloadcms/drizzle)
- [CVE-2026-25574](https://cve.now/CVE-2026-25574.md): Payload Affected by Cross-Collection IDOR in payload-preferences Access Control (Multi-Auth Environments) (CVSS 5.4, payloadcms payload · payload)
- [CVE-2026-2067](https://cve.now/CVE-2026-2067.md): UTT 进取 520W formTimeGroupConfig strcpy buffer overflow (CVSS 8.7, UTT 进取)
- [CVE-2026-25580](https://cve.now/CVE-2026-25580.md): Pydantic AI Affected by Server-Side Request Forgery (SSRF) in URL Download Handling (CVSS 8.6, pydantic-ai · pydantic-ai-slim)
- [CVE-2026-25581](https://cve.now/CVE-2026-25581.md): SCEditor affected by DOM XSS via emoticon URL/HTML injection (CVSS 5.4, samclarke SCEditor · sceditor)
- [CVE-2026-25593](https://cve.now/CVE-2026-25593.md): OpenClaw Affected by Unauthenticated Local RCE via WebSocket config.apply (CVSS 8.4, openclaw)
- [CVE-2026-25597](https://cve.now/CVE-2026-25597.md): PrestaShop has a time based enumeration in FO login form (CVSS 5.3, PrestaShop · prestashop/prestashop)
- [CVE-2026-25628](https://cve.now/CVE-2026-25628.md): Qdrant affected by arbitrary file write via \`/logger\` endpoint (CVSS 8.6, qdrant)
- [CVE-2026-25592](https://cve.now/CVE-2026-25592.md): Semantic Kernel has an Arbitrary File Write via AI Agent Function Calling in .NET SDK (CVSS 10.0, microsoft semantic-kernel · semantic-kernel +1)
- [CVE-2026-25631](https://cve.now/CVE-2026-25631.md): Domain allowlist bypass enables credential exfiltration (CVSS 5.3, n8n-io n8n · n8n)
- [CVE-2026-2066](https://cve.now/CVE-2026-2066.md): UTT 进取 520W formIpGroupConfig strcpy buffer overflow (CVSS 8.7, UTT 进取)
- [CVE-2026-25729](https://cve.now/CVE-2026-25729.md): DeepAudit Affected by User Enumeration via Broken Access Control (CVSS 2.1, lintsinghua DeepAudit)
- [CVE-2026-25632](https://cve.now/CVE-2026-25632.md): EPyT-Flow has unsafe JSON deserialization (\_\_type\_\_) (CVSS 10.0, WaterFutures EPyT-Flow · epyt-flow)
- [CVE-2026-25634](https://cve.now/CVE-2026-25634.md): iccDEV memcpy-param-overlap in CIccTagMultiProcessElement::Apply() (CVSS 7.8, InternationalColorConsortium iccDEV)
- [CVE-2026-25731](https://cve.now/CVE-2026-25731.md): Calibre Affected by Arbitrary Code Execution via Server-Side Template Injection in Calibre HTML Export (CVSS 7.8, kovidgoyal calibre)
- [CVE-2026-25635](https://cve.now/CVE-2026-25635.md): calibre has a Path Traversal Leading to Arbitrary File Write and Potential Code Execution (CVSS 8.6, kovidgoyal calibre)
- [CVE-2026-25636](https://cve.now/CVE-2026-25636.md): calibre has a Path Traversal Leading to Arbitrary File Corruption and Code Execution (CVSS 8.2, kovidgoyal calibre)
- [CVE-2026-2065](https://cve.now/CVE-2026-2065.md): Flycatcher Toys smART Pixelator Bluetooth Low Energy missing authentication (CVSS 5.3, Flycatcher Toys smART Pixelator)
- [CVE-2026-25640](https://cve.now/CVE-2026-25640.md): Pydantic AI affected by Stored XSS via Path Traversal in Web UI CDN URL (CVSS 7.1, pydantic-ai · pydantic-ai-slim)
- [CVE-2026-25586](https://cve.now/CVE-2026-25586.md): SandboxJS has a Sandbox Escape via Prototype Whitelist Bypass and Host Prototype Pollution (CVSS 10.0, nyariv SandboxJS · @nyariv/sandboxjs)
- [CVE-2026-25520](https://cve.now/CVE-2026-25520.md): SandboxJS has a Sandbox Escape (CVSS 10.0, nyariv SandboxJS · @nyariv/sandboxjs)
- [CVE-2026-25587](https://cve.now/CVE-2026-25587.md): SandboxJS has a Sandbox Escape (CVSS 10.0, nyariv SandboxJS · @nyariv/sandboxjs)
- [CVE-2026-25641](https://cve.now/CVE-2026-25641.md): SandboxJS has a sandbox escape via TOCTOU bug on keys in property accesses (CVSS 10.0, nyariv SandboxJS · @nyariv/sandboxjs)
- [CVE-2026-2064](https://cve.now/CVE-2026-2064.md): Portabilis i-Educar User Data meusdadod.php cross site scripting (CVSS 5.1, Portabilis i-Educar)
- [CVE-2026-25642](https://cve.now/CVE-2026-25642.md): HedgeDoc security headers for uploaded files were not working (CVSS 4.3, hedgedoc)
- [CVE-2026-25727](https://cve.now/CVE-2026-25727.md): time affected by a stack exhaustion denial of service attack (CVSS 6.8, time-rs time · time)
- [CVE-2025-15320](https://cve.now/CVE-2025-15320.md): Tanium addressed a denial of service vulnerability in Tanium Client. (CVSS 3.3, Tanium Client)
- [CVE-2026-25643](https://cve.now/CVE-2026-25643.md): Frigate Affected by Authenticated Remote Command Execution (RCE) and Container Escape (CVSS 9.1, blakeblackshear frigate)
- [CVE-2026-1709](https://cve.now/CVE-2026-1709.md): Keylime: keylime: authentication bypass allows unauthorized administrative operations due to missing client-side tls authentication (CVSS 9.4, Red Hat Enterprise Linux · keylime)
- [CVE-2026-22254](https://cve.now/CVE-2026-22254.md): Winter Affected by Stored Cross-Site Scripting (XSS) in Asset Manager (CVSS 0.0, wintercms winter · winter/wn-cms-module)
- [CVE-2026-25751](https://cve.now/CVE-2026-25751.md): FUXA Unauthenticated Exposure of Plaintext Database Credentials (CVSS 9.1, frangoteam FUXA · fuxa-server)
- [CVE-2026-25752](https://cve.now/CVE-2026-25752.md): FUXA Unauthenticated Remote Arbitrary Device Tag Write (CVSS 9.3, frangoteam FUXA · fuxa-server)
- [CVE-2026-25647](https://cve.now/CVE-2026-25647.md): Lute has a Stored Cross-Site Scripting (XSS) via Markdown hyperlink (CVSS 4.6, siyuan-note siyuan)
- [CVE-2026-2063](https://cve.now/CVE-2026-2063.md): D-Link DIR-823X Web Management set\_ac\_server os command injection (CVSS 5.1, D-Link DIR-823X)
- [CVE-2026-25753](https://cve.now/CVE-2026-25753.md): PlaciPy has a Hard-Coded Default Password for All Student Accounts (Account Takeover) (CVSS 9.3, Praskla-Technology assessment-placipy)
- [CVE-2026-25650](https://cve.now/CVE-2026-25650.md): MCP Salesforce Connector has arbitrary attribute access which leads to disclosure of Salesforce auth token (CVSS 6.6, smn2gnt MCP-Salesforce · mcp-salesforce-connector)
- [CVE-2026-25651](https://cve.now/CVE-2026-25651.md): client-certificate-auth has an Open Redirect via Host Header Injection in HTTP-to-HTTPS redirect (CVSS 6.1, tgies client-certificate-auth · client-certificate-auth)
- [CVE-2026-2062](https://cve.now/CVE-2026-2062.md): Open5GS PGW S5U Address sgwc\_sxa\_handle\_session\_modification\_response null pointer dereference (CVSS 6.9, Open5GS)
- [CVE-2026-23989](https://cve.now/CVE-2026-23989.md): REVA Public Link Exploit (CVSS 8.2, opencloud-eu reva · github.com/opencloud-eu/reva +1)
- [CVE-2026-24050](https://cve.now/CVE-2026-24050.md): Zulip affected by Stored XSS in user profile modal (CVSS 1.1, zulip)
- [CVE-2025-69212](https://cve.now/CVE-2025-69212.md): OpenSTAManager has an OS Command Injection in P7M File Processing (CVSS 9.4, devcode-it openstamanager · devcode-it/openstamanager)
- [CVE-2025-69214](https://cve.now/CVE-2025-69214.md): OpenSTAManager has a SQL Injection in ajax\_select.php (componenti endpoint) (CVSS 8.7, devcode-it openstamanager · devcode-it/openstamanager)
- [CVE-2025-69216](https://cve.now/CVE-2025-69216.md): OpenSTAManager has an SQL Injection in Scadenzario Print Template (CVSS 8.7, devcode-it openstamanager · devcode-it/openstamanager)
- [CVE-2026-24416](https://cve.now/CVE-2026-24416.md): OpenSTAManager has a Time-Based Blind SQL Injection in Article Pricing Module (CVSS 8.7, devcode-it openstamanager · devcode-it/openstamanager)
- [CVE-2026-24417](https://cve.now/CVE-2026-24417.md): OpenSTAManager has a Time-Based Blind SQL Injection with Amplified Denial of Service (CVSS 8.7, devcode-it openstamanager · devcode-it/openstamanager)
- [CVE-2026-24418](https://cve.now/CVE-2026-24418.md): OpenSTAManager has an SQL Injection vulnerability in the Scadenzario bulk operations module (CVSS 8.7, devcode-it openstamanager · devcode-it/openstamanager)
- [CVE-2026-24419](https://cve.now/CVE-2026-24419.md): OpenSTAManager has an SQL Injection in the Prima Nota module (CVSS 8.7, devcode-it openstamanager · devcode-it/openstamanager)
- [CVE-2026-2061](https://cve.now/CVE-2026-2061.md): D-Link DIR-823X set\_ipv6 sub\_424D20 os command injection (CVSS 5.1, D-Link DIR-823X)
- [CVE-2026-24776](https://cve.now/CVE-2026-24776.md): OpenProject has an IDOR on MeetingAgendaItems allows cross-project meeting agenda item transfer (CVSS 4.3, opf openproject)
- [CVE-2026-25725](https://cve.now/CVE-2026-25725.md): Claude Code Has Sandbox Escape via Persistent Configuration Injection in settings.json (CVSS 7.7, anthropics claude-code · @anthropic-ai/claude-code)
- [CVE-2026-25724](https://cve.now/CVE-2026-25724.md): Claude Code Has Permission Deny Bypass Through Symbolic Links (CVSS 2.3, anthropics claude-code · @anthropic-ai/claude-code)
- [CVE-2026-25723](https://cve.now/CVE-2026-25723.md): Claude Code Vulnerable to Command Injection via Piped sed Command Bypasses File Write Restrictions (CVSS 7.7, anthropics claude-code · @anthropic-ai/claude-code)
- [CVE-2026-25722](https://cve.now/CVE-2026-25722.md): Claude Code Vulnerable to Command Injection via Directory Change Bypasses Write Protection (CVSS 7.7, anthropics claude-code · @anthropic-ai/claude-code)
- [CVE-2026-24851](https://cve.now/CVE-2026-24851.md): OpenFGA Improper Policy Enforcement (CVSS 5.8, openfga · github.com/openfga/openfga)
- [CVE-2026-24135](https://cve.now/CVE-2026-24135.md): Gogs vulnerable to arbitrary file deletion via path traversal in wiki page update (CVSS 7.2, gogs · gogs.io/gogs)
- [CVE-2026-23633](https://cve.now/CVE-2026-23633.md): Gogs has arbitrary file read/write via path traversal in Git hook editing (CVSS 6.5, gogs · gogs.io/gogs)
- [CVE-2026-24903](https://cve.now/CVE-2026-24903.md): OrcaStatLLM Researcher Stored Cross-Site Scripting (XSS) via Log Message Injection in Session Page (CVSS 5.3, AlgoNetLab OrcaStatLLM-Researcher)
- [CVE-2026-23632](https://cve.now/CVE-2026-23632.md): Gogs user can update repository content with read-only permission (CVSS 6.5, gogs · gogs.io/gogs)
- [CVE-2026-22592](https://cve.now/CVE-2026-22592.md): Gogs is Vulnerable to Denial of Service (CVSS 6.5, gogs · gogs.io/gogs)
- [CVE-2025-64175](https://cve.now/CVE-2025-64175.md): Gogs Vulnerable to 2FA Bypass via Recovery Code (CVSS 7.7, gogs · gogs.io/gogs)
- [CVE-2026-2060](https://cve.now/CVE-2026-2060.md): code-projects Simple Blood Donor Management System editcampaignform.php sql injection (CVSS 6.9, code-projects Simple Blood Donor Management System)
- [CVE-2026-1769](https://cve.now/CVE-2026-1769.md): Stored XSS on Xerox CentreWare Web 7.0.6 (CVSS 5.3, Xerox CentreWare)
- [CVE-2026-2059](https://cve.now/CVE-2026-2059.md): SourceCodester Medical Center Portal Management System emp\_edit1.php sql injection (CVSS 6.9, SourceCodester Medical Center Portal Management System)
- [CVE-2025-64111](https://cve.now/CVE-2025-64111.md): Gogs's update .git/config file allows remote command execution (CVSS 9.3, gogs · gogs.io/gogs)
- [CVE-2026-23741](https://cve.now/CVE-2026-23741.md): ast\_coredumper running as root sources ast\_debug\_tools.conf from /etc/asterisk; potentially leading to privilege escalation (CVSS 0.0, asterisk)
- [CVE-2026-23740](https://cve.now/CVE-2026-23740.md): Asterisk vulnerable to potential privilege escalation (CVSS 0.0, asterisk)
- [CVE-2026-23739](https://cve.now/CVE-2026-23739.md): Asterisk xml.c uses unsafe XML\_PARSE\_NOENT leading to potential XXE Injection (CVSS 2.0, asterisk)
- [CVE-2019-25293](https://cve.now/CVE-2019-25293.md): Blue Stacks App Player 2.4.44.62.57 - "BstHdLogRotatorSvc" Unquote Service Path (CVSS 8.5, bluestacks Blue Stacks App Player)
- [CVE-2026-23738](https://cve.now/CVE-2026-23738.md): The Asterisk embedded web server 's /httpstatus page echos user supplied values(cookie and query string) without sanitization (CVSS 3.5, asterisk)
- [CVE-2019-25305](https://cve.now/CVE-2019-25305.md): JumpStart 0.6.0.0 - 'jswpbapi' Unquoted Service Path (CVSS 8.5, Inforprograma JumpStart)
- [CVE-2019-25304](https://cve.now/CVE-2019-25304.md): Intelligent Security System SecurOS Enterprise 10.2 - 'SecurosCtrlService' Unquoted Service Path (CVSS 8.5, Issivs Intelligent Security System SecurOS Enterprise)
- [CVE-2019-25303](https://cve.now/CVE-2019-25303.md): TheJshen contentManagementSystem 1.04 - 'id' SQL Injection (CVSS 7.1, thejshen contentManagementSystem)
- [CVE-2019-25302](https://cve.now/CVE-2019-25302.md): Acer Launch Manager 6.1.7600.16385 - 'DsiWMIService' Unquoted Service Path (CVSS 8.5, Acer Launch Manager)
- [CVE-2019-25301](https://cve.now/CVE-2019-25301.md): thrsrossi Millhouse-Project 1.414 - 'content' Persistent Cross-Site Scripting (CVSS 5.1, thrsrossi Millhouse Project)
- [CVE-2019-25300](https://cve.now/CVE-2019-25300.md): thejshen Globitek CMS 1.4 - 'id' SQL Injection (CVSS 7.1, thejshen Globitek CMS)
- [CVE-2019-25299](https://cve.now/CVE-2019-25299.md): rimbalinux AhadPOS 1.11 - 'alamatCustomer' SQL Injection (CVSS 7.1, rimbalinux AhadPOS)
- [CVE-2019-25298](https://cve.now/CVE-2019-25298.md): html5\_snmp 1.11 - 'Router\_ID' SQL Injection (CVSS 7.1, lolypop55 html5\_snmp)
- [CVE-2019-25294](https://cve.now/CVE-2019-25294.md): html5\_snmp 1.11 - 'Remark' Persistent Cross-Site Scripting (CVSS 5.1, lolypop55 html5\_snmp)
- [CVE-2019-25292](https://cve.now/CVE-2019-25292.md): Alps HID Monitor Service 8.1.0.10 - 'ApHidMonitorService' Unquote Service Path (CVSS 8.5, Alps HID Monitor Service)
- [CVE-2019-25266](https://cve.now/CVE-2019-25266.md): Wondershare Application Framework Service 2.4.3.231 - 'WsAppService' Unquote Service Path (CVSS 8.5, Wondershare Application Framework Service)
- [CVE-2026-2058](https://cve.now/CVE-2026-2058.md): mathurvishal CloudClassroom-PHP-Project Post Query Details postquerypublic.php sql injection (CVSS 6.9, mathurvishal CloudClassroom-PHP-Project)
- [CVE-2026-2103](https://cve.now/CVE-2026-2103.md): Use of Hard-Coded Cryptographic Key for Password Storage (CVSS 7.1, Infor SyteLine ERP)
- [CVE-2026-25556](https://cve.now/CVE-2026-25556.md): MuPDF 1.23.0 through 1.27.0 Barcode Decoding Double Free (CVSS 5.9, Artifex Software MuPDF)
- [CVE-2025-13523](https://cve.now/CVE-2025-13523.md): Cross-Site Scripting (XSS) via Unescaped Display Names in Mattermost Confluence Plugin OAuth2 Flow (CVSS 7.7, Mattermost Confluence Plugin · github.com/mattermost/matter…)
- [CVE-2026-2057](https://cve.now/CVE-2026-2057.md): SourceCodester Medical Center Portal Management System login.php sql injection (CVSS 6.9, SourceCodester Medical Center Portal Management System)
- [CVE-2026-2056](https://cve.now/CVE-2026-2056.md): D-Link DIR-605L/DIR-619L DHCP Connection Status wan\_connection\_status.asp information disclosure (CVSS 6.9, D-Link DIR-605L · D-Link DIR-619L)
- [CVE-2025-13818](https://cve.now/CVE-2025-13818.md): Local privilege escalation in ESET Management Agent for Windows (CVSS 8.3, ESET spol s.r.o. ESET Management Agent)
- [CVE-2026-1337](https://cve.now/CVE-2026-1337.md): Insufficient escaping of unicode characters in query log (CVSS 1.1, neo4j Enterprise Edition · neo4j Community Edition +1)
- [CVE-2026-2055](https://cve.now/CVE-2026-2055.md): D-Link DIR-605L/DIR-619L DHCP Client Information information disclosure (CVSS 6.9, D-Link DIR-605L · D-Link DIR-619L)
- [CVE-2026-2054](https://cve.now/CVE-2026-2054.md): D-Link DIR-605L/DIR-619L Wifi Setting information disclosure (CVSS 6.9, D-Link DIR-605L · D-Link DIR-619L)
- [CVE-2026-2018](https://cve.now/CVE-2026-2018.md): itsourcecode School Management System controller.php sql injection (CVSS 6.9, itsourcecode School Management System)
- [CVE-2026-2017](https://cve.now/CVE-2026-2017.md): IP-COM W30AP POST Request wx3auth R7WebsSecurityHandler stack-based overflow (CVSS 9.3, IP-COM W30AP)
- [CVE-2026-1293](https://cve.now/CVE-2026-1293.md): Yoast SEO \<= 26.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'yoast-schema' Block Attribute (CVSS 6.4, Yoast SEO – Advanced SEO with real-time guidance and built-…)
- [CVE-2026-2016](https://cve.now/CVE-2026-2016.md): happyfish100 libfastcommon base64.c base64\_decode stack-based overflow (CVSS 4.8, happyfish100 libfastcommon)
- [CVE-2026-2015](https://cve.now/CVE-2026-2015.md): Portabilis i-Educar Final Status Import FinalStatusImportService.php improper authorization (CVSS 5.3, Portabilis i-Educar)
- [CVE-2026-2014](https://cve.now/CVE-2026-2014.md): itsourcecode Student Management System index.php sql injection (CVSS 6.9, itsourcecode Student Management System)
- [CVE-2026-2013](https://cve.now/CVE-2026-2013.md): itsourcecode Student Management System index.php sql injection (CVSS 6.9, itsourcecode Student Management System)
- [CVE-2026-24928](https://cve.now/CVE-2026-24928.md): Out-of-bounds write vulnerability in the file system module. (CVSS 5.8, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2026-24927](https://cve.now/CVE-2026-24927.md): Out-of-bounds access vulnerability in the frequency modulation module. (CVSS 5.5, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2026-24924](https://cve.now/CVE-2026-24924.md): Vulnerability of improper permission control in the print module. (CVSS 6.1, Huawei HarmonyOS)
- [CVE-2026-24920](https://cve.now/CVE-2026-24920.md): Permission control vulnerability in the AMS module. (CVSS 6.2, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2026-2012](https://cve.now/CVE-2026-2012.md): itsourcecode Student Management System index.php sql injection (CVSS 6.9, itsourcecode Student Management System)
- [CVE-2026-24919](https://cve.now/CVE-2026-24919.md): Out-of-bounds write vulnerability in the DFX module. (CVSS 6.0, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2026-24917](https://cve.now/CVE-2026-24917.md): UAF vulnerability in the security module. (CVSS 6.5, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2026-24916](https://cve.now/CVE-2026-24916.md): Identity authentication bypass vulnerability in the window module. (CVSS 5.9, Huawei HarmonyOS)
- [CVE-2026-24931](https://cve.now/CVE-2026-24931.md): Vulnerability of improper criterion security check in the card module. (CVSS 5.9, Huawei HarmonyOS)
- [CVE-2026-24930](https://cve.now/CVE-2026-24930.md): UAF concurrency vulnerability in the graphics module. (CVSS 8.4, Huawei HarmonyOS)
- [CVE-2026-24929](https://cve.now/CVE-2026-24929.md): Out-of-bounds read vulnerability in the graphics module. (CVSS 5.9, Huawei HarmonyOS)
- [CVE-2026-24923](https://cve.now/CVE-2026-24923.md): Permission control vulnerability in the HDC module. (CVSS 6.3, Huawei HarmonyOS)
- [CVE-2026-24922](https://cve.now/CVE-2026-24922.md): Buffer overflow vulnerability in the HDC module. (CVSS 6.9, Huawei HarmonyOS)
- [CVE-2026-2011](https://cve.now/CVE-2026-2011.md): itsourcecode Student Management System controller.php sql injection (CVSS 6.9, itsourcecode Student Management System)
- [CVE-2026-24921](https://cve.now/CVE-2026-24921.md): Address read vulnerability in the HDC module. (CVSS 4.8, Huawei HarmonyOS)
- [CVE-2026-24918](https://cve.now/CVE-2026-24918.md): Address read vulnerability in the communication module. (CVSS 6.8, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2026-24915](https://cve.now/CVE-2026-24915.md): Out-of-bounds read issue in the media subsystem. (CVSS 6.2, Huawei HarmonyOS)
- [CVE-2026-24914](https://cve.now/CVE-2026-24914.md): Type confusion vulnerability in the camera module. (CVSS 4.0, Huawei HarmonyOS)
- [CVE-2026-1252](https://cve.now/CVE-2026-1252.md): Events Listing Widget \<= 1.3.4 - Authenticated (Author+) Stored Cross-Site Scripting via Event URL Field (CVSS 6.4, jackdewey Events Listing Widget)
- [CVE-2026-1785](https://cve.now/CVE-2026-1785.md): Code Snippets \<= 3.9.4 - Cross-Site Request Forgery to Cloud Snippet Download/Update Actions (CVSS 4.3, codesnippetspro Code Snippets)
- [CVE-2026-1499](https://cve.now/CVE-2026-1499.md): WP Duplicate \<= 1.1.8 - Authenticated (Subscriber+) Arbitrary File Upload via 'process\_add\_site' AJAX Action (CVSS 8.8, revmakx WP Duplicate – WordPress Migration Plugin)
- [CVE-2026-21643](https://cve.now/CVE-2026-21643.md): An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may a (CVSS 9.1, KEV, Fortinet FortiClientEMS)
- [CVE-2026-24926](https://cve.now/CVE-2026-24926.md): Out-of-bounds write vulnerability in the camera module. (CVSS 8.4, Huawei HarmonyOS)
- [CVE-2026-24925](https://cve.now/CVE-2026-24925.md): Heap-based buffer overflow vulnerability in the image module. (CVSS 7.3, Huawei HarmonyOS)
- [CVE-2026-2010](https://cve.now/CVE-2026-2010.md): Sanluan PublicCMS Trade Payment TradePaymentService.java paid improper authorization (CVSS 2.3, Sanluan PublicCMS)
- [CVE-2026-21626](https://cve.now/CVE-2026-21626.md): Extension - stackideas.com - Information disclosure in post custom fields in EasyDiscuss 1.0.0-5.0.15 for Joomla (CVSS 9.2, Stackideas.com EasyDiscuss extension for Joomla)
- [CVE-2026-2009](https://cve.now/CVE-2026-2009.md): SourceCodester Gas Agency Management System createUser.php access control (CVSS 5.3, SourceCodester Gas Agency Management System)
- [CVE-2026-1279](https://cve.now/CVE-2026-1279.md): Employee Directory \<= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'form\_title' Shortcode Attribute (CVSS 6.4, cyberlord92 Employee Directory – Staff Directory and Listing)
- [CVE-2026-2008](https://cve.now/CVE-2026-2008.md): abhiphile fermat-mcp eqn\_chart.py eqn\_chart code injection (CVSS 5.3, abhiphile fermat-mcp)
- [CVE-2026-1401](https://cve.now/CVE-2026-1401.md): Tune Library \<= 1.6.3 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via CSV Import (CVSS 6.4, jackdewey Tune Library)
- [CVE-2026-1909](https://cve.now/CVE-2026-1909.md): WaveSurfer-WP \<= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'src' Shortcode Attribute (CVSS 6.4, x-raym WaveSurfer-WP)
- [CVE-2025-10753](https://cve.now/CVE-2025-10753.md): OAuth Single Sign On – SSO (OAuth Client) \<= 6.26.14 - Missing Authorization (CVSS 5.3, cyberlord92 OAuth Single Sign On – SSO)
- [CVE-2026-1808](https://cve.now/CVE-2026-1808.md): Orange Confort+ accessibility toolbar for WordPress \<= 0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes (CVSS 6.4, ravanh Orange Comfort+ accessibility toolbar for WordPress)
- [CVE-2026-1888](https://cve.now/CVE-2026-1888.md): Docus \<= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes (CVSS 6.4, htplugins Docus – YouTube Video Playlist)
- [CVE-2026-2000](https://cve.now/CVE-2026-2000.md): DCN DCME-320 Web Management Backend bridge\_cfg.php apply\_config command injection (CVSS 5.1, DCN DCME-320)
- [CVE-2026-0521](https://cve.now/CVE-2026-0521.md): Reflected Cross-Site Scripting in PDF Export Error Message (CVSS 5.6, TYDAC AG MAP+)
- [CVE-2026-1998](https://cve.now/CVE-2026-1998.md): micropython runtime.c mp\_import\_all memory corruption (CVSS 4.8, micropython)
- [CVE-2026-0598](https://cve.now/CVE-2026-0598.md): Ansible-lightspeed: broken object level authorization leading to cross-user ai conversation context injection in ansible lightspeed api (CVSS 4.2, Red Hat Ansible Automation Platform)
- [CVE-2026-1991](https://cve.now/CVE-2026-1991.md): libuvc UVC Descriptor device.c uvc\_scan\_streaming null pointer dereference (CVSS 4.8, libuvc)
- [CVE-2026-1990](https://cve.now/CVE-2026-1990.md): oatpp Type.hpp ObjectWrapper null pointer dereference (CVSS 4.8, oatpp)
- [CVE-2026-1979](https://cve.now/CVE-2026-1979.md): mruby JMPNOT-to-JMPIF Optimization vm.c mrb\_vm\_exec use after free (CVSS 4.8, mruby)
- [CVE-2026-1978](https://cve.now/CVE-2026-1978.md): kalyan02 NanoCMS User Information pagesdata.txt direct request (CVSS 6.9, kalyan02 NanoCMS)
- [CVE-2026-1977](https://cve.now/CVE-2026-1977.md): isaacwasserman mcp-vegalite-server visualize\_data eval code injection (CVSS 5.3, isaacwasserman mcp-vegalite-server)
- [CVE-2025-15566](https://cve.now/CVE-2025-15566.md): ingress-nginx auth-proxy-set-headers nginx configuration injection (CVSS 8.8, Kubernetes ingress-nginx)
- [CVE-2026-1976](https://cve.now/CVE-2026-1976.md): Free5GC SMF SessionDeletionResponse null pointer dereference (CVSS 6.9, Free5GC)
- [CVE-2026-1975](https://cve.now/CVE-2026-1975.md): Free5GC pfcp\_reports.go identityTriggerType null pointer dereference (CVSS 6.9, Free5GC)
- [CVE-2026-1228](https://cve.now/CVE-2026-1228.md): Timeline Block \<= 1.3.3 - Insecure Direct Object Reference to Authenticated (Author+) Private Timeline Exposure via Shortcode Attribute (CVSS 4.3, bplugins Timeline Block – Beautiful Timeline Builder for Wo…)
- [CVE-2026-1974](https://cve.now/CVE-2026-1974.md): Free5GC SMF datapath.go ResolveNodeIdToIp denial of service (CVSS 6.9, Free5GC)
- [CVE-2026-1973](https://cve.now/CVE-2026-1973.md): Free5GC SMF establishPfcpSession null pointer dereference (CVSS 6.9, Free5GC)
- [CVE-2026-1972](https://cve.now/CVE-2026-1972.md): Edimax BR-6208AC auth\_check\_userpass2 default credentials (CVSS 6.9, Edimax BR-6208AC)
- [CVE-2026-1971](https://cve.now/CVE-2026-1971.md): Edimax BR-6288ACL wiz\_WISP24gmanual.asp wiz\_WISP24gmanual cross site scripting (CVSS 4.8, Edimax BR-6288ACL)
- [CVE-2025-70963](https://cve.now/CVE-2025-70963.md): Gophish \<=0.12.1 is vulnerable to Incorrect Access Control. (CVSS 7.6, github.com/gophish/gophish)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-02-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.