CVEs published February 8, 2026
75 CVEs were published on February 8, 2026: 1 critical, 24 high.
- Published
- 75
- Critical
- 1
- High
- 24
- Medium
- 50
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 7
Most affected products
- D-Link DIR-823X
- 7
- Tenda RX3
- 5
- WeKan
- 5
- SourceCodester Patients Waiting Area Queue Management Syste…
- 3
- Tenda TX9
- 3
- code-projects Contact Management System
- 2
- code-projects Online Music Site
- 2
- code-projects Online Reviewer System
- 2
- code-projects Online Student Management System
- 2
- D-Link DI-7100G C1
- 2
Critical 1
High 24
- CVE-2026-2192Tenda AC9 formGetRebootTimer stack-based overflowTenda AC9
- CVE-2026-2191Tenda AC9 formGetDdosDefenceList stack-based overflowTenda AC9
- CVE-2026-2188UTT 进取 521G formPdbUpConfig sub_446B18 os command injectionUTT 进取
- CVE-2026-2187Tenda RX3 formSetQosBand set_qosMib_list stack-based overflowTenda RX3
- CVE-2026-2186Tenda RX3 SetIpMacBind fromSetIpMacBind stack-based overflowTenda RX3
- CVE-2026-2185Tenda RX3 MAC Filtering Configuration Endpoint setBlackRule set_device_name stack-based overflowTenda RX3
- CVE-2026-2182UTT 进取 521G setSysAdm doSystem command injectionUTT 进取
- CVE-2026-2181Tenda RX3 openSchedWifi stack-based overflowTenda RX3
- CVE-2026-2180Tenda RX3 fast_setting_wifi_set stack-based overflowTenda RX3
- CVE-2026-2175D-Link DIR-823X set_upnp sub_420618 os command injectionD-Link DIR-823X
- CVE-2026-2157D-Link DIR-823X set_static_route_table sub_4175CC os command injectionD-Link DIR-823X
- CVE-2026-2155D-Link DIR-823X Configuration set_dmz sub_4208A0 os command injectionD-Link DIR-823X
- CVE-2026-2152D-Link DIR-615 Web Configuration adv_routing.php os command injectionD-Link DIR-615
- CVE-2026-2151D-Link DIR-615 DMZ Host Feature adv_firewall.php os command injectionD-Link DIR-615
- CVE-2026-2143D-Link DIR-823X DDNS Service set_ddns os command injectionD-Link DIR-823X
- CVE-2026-2142D-Link DIR-823X set_qos sub_420688 os command injectionD-Link DIR-823X
- CVE-2026-2140Tenda TX9 setMacFilterCfg sub_4223E0 buffer overflowTenda TX9
- CVE-2026-2139Tenda TX9 fast_setting_wifi_set sub_432580 buffer overflowTenda TX9
- CVE-2026-2138Tenda TX9 SetStaticRouteCfg sub_42D03C buffer overflowTenda TX9
- CVE-2026-2137Tenda TX3 SetIpMacBind buffer overflowTenda TX3
- CVE-2026-2129D-Link DIR-823X set_ac_status os command injectionD-Link DIR-823X
- CVE-2025-15100JAY Login & Register <= 2.6.03 - Authenticated (Subscriber+) Privilege Escalation via jay_panel_ajax_update_profilejayarsiech JAY Login & Register
- CVE-2026-2120D-Link DIR-823X Configuration Parameter set_server_settings os command injectionD-Link DIR-823X
- CVE-2026-2118UTT HiPER 810 rehttpd formReleaseConnect sub_4407D4 command injectionUTT HiPER
Medium, low and unrated 50
- CVE-2026-2195code-projects Online Reviewer System questions-view.php sql injectioncode-projects Online Reviewer System
- CVE-2026-2194D-Link DI-7100G C1 start_proxy_client_email command injectionD-Link DI-7100G C1
- CVE-2026-2193D-Link DI-7100G C1 set_jhttpd_info command injectionD-Link DI-7100G C1
- CVE-2026-2190itsourcecode School Management System controller.php sql injectionitsourcecode School Management System
- CVE-2026-2189itsourcecode School Management System index.php sql injectionitsourcecode School Management System
- CVE-2026-2184Great Developers Certificate Generation System csv.php os command injectionGreat Developers Certificate Generation System
- CVE-2026-2183Great Developers Certificate Generation System csv.php unrestricted uploadGreat Developers Certificate Generation System
- CVE-2026-2179PHPGurukul Hospital Management System manage-users.php sql injectionPHPGurukul Hospital Management System
- CVE-2026-2178r-huijts xcode-mcp-server run_lldb index.ts registerXcodeTools command injectionr-huijts xcode-mcp-server · xcode-mcp-server
- CVE-2026-2177SourceCodester Prison Management System Login session fixiationSourceCodester Prison Management System
- CVE-2026-2176code-projects Contact Management System index.py sql injectioncode-projects Contact Management System
- CVE-2026-2174code-projects Contact Management System CRUD Endpoint improper authenticationcode-projects Contact Management System
- CVE-2026-2173code-projects Online Examination System login.php sql injectioncode-projects Online Examination System
- CVE-2026-2172code-projects Online Application System for Admission Login Endpoint index.php sql injectioncode-projects Online Application System for Admission
- CVE-2026-2171code-projects Online Student Management System Login accounts.php sql injectioncode-projects Online Student Management System
- CVE-2026-2169D-Link DWR-M921 formLtefotaUpgradeFibocom command injectionD-Link DWR-M921
- CVE-2026-2168D-Link DWR-M921 formLtefotaUpgradeQuectel sub_419920 command injectionD-Link DWR-M921
- CVE-2026-2167Totolink WA300 cstecgi.cgi setAPNetwork os command injectionTotolink WA300
- CVE-2026-2166code-projects Online Reviewer System Login index.php sql injectioncode-projects Online Reviewer System
- CVE-2026-2165detronetdip E-commerce Account Creation Endpoint add_seller.php missing authenticationdetronetdip E-commerce
- CVE-2026-2164detronetdip E-commerce addadhar.php unrestricted uploaddetronetdip E-commerce
- CVE-2026-2163D-Link DIR-600 ssdp.cgi command injectionD-Link DIR-600
- CVE-2026-2162itsourcecode News Portal Project aboutus.php sql injectionitsourcecode News Portal Project
- CVE-2026-2161itsourcecode Directory Management System forget-password.php sql injectionitsourcecode Directory Management System
- CVE-2026-2160SourceCodester Simple Responsive Tourism Website Master.php cross site scriptingSourceCodester Simple Responsive Tourism Website
- CVE-2026-2159SourceCodester Simple Responsive Tourism Website Registration Master.php cross site scriptingSourceCodester Simple Responsive Tourism Website
- CVE-2026-2158code-projects Student Web Portal check_user.php sql injectioncode-projects Student Web Portal
- CVE-2026-2156code-projects Online Student Management System Announcement Management index.php cross site scriptingcode-projects Online Student Management System
- CVE-2026-2154SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System Patient Registration registration.php cross site scriptingSourceCodester Patients Waiting Area Queue Management Syste…
- CVE-2026-2153mwielgoszewski doorman views.py is_safe_url redirectmwielgoszewski doorman
- CVE-2026-2150SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System checkin.php cross site scriptingSourceCodester Patients Waiting Area Queue Management Syste…
- CVE-2026-2149SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System appointments.php cross site scriptingSourceCodester Patients Waiting Area Queue Management Syste…
- CVE-2026-2148Tenda AC21 Web Management DownloadFlash information disclosureTenda AC21
- CVE-2026-2147Tenda AC21 Web Management DownloadLog information disclosureTenda AC21
- CVE-2026-2146guchengwuyue yshopmall co.yixiang.utils.FileUtil updateAvatar unrestricted uploadguchengwuyue yshopmall
- CVE-2026-2145cym1102 nginxWebUI Web Management check cross site scriptingcym1102 nginxWebUI
- CVE-2026-2141WuKongOpenSource WukongCRM URL PermissionServiceImpl.java improper authorizationWuKongOpenSource WukongCRM
- CVE-2026-2136projectworlds Online Food Ordering System view-ticket.php sql injectionprojectworlds Online Food Ordering System
- CVE-2026-2135UTT HiPER 810 formPdbUpConfig sub_43F020 command injectionUTT HiPER
- CVE-2026-2134PHPGurukul Hospital Management System manage-doctors.php sql injectionPHPGurukul Hospital Management System
- CVE-2026-2133code-projects Online Music Site AdminUpdateCategory.php unrestricted uploadcode-projects Online Music Site
- CVE-2026-2132code-projects Online Music Site AdminUpdateCategory.php sql injectioncode-projects Online Music Site
- CVE-2026-2131XixianLiang HarmonyOS-mcp-server input_text os command injectionXixianLiang HarmonyOS-mcp-server
- CVE-2026-2130BurtTheCoder mcp-maigret search_username index.ts command injectionBurtTheCoder mcp-maigret · mcp-maigret
- CVE-2026-2209WeKan Custom Translation translationBody.js setCreateTranslation improper authorizationWeKan
- CVE-2026-2208WeKan Rules rules.js RulesBleed authorizationWeKan
- CVE-2026-2207WeKan Activity Publication activities.js LinkedBoardActivitiesBleed information disclosureWeKan
- CVE-2026-2206WeKan Administrative Repair fixDuplicateLists.js FixDuplicateBleed access controlWeKan
- CVE-2026-2205WeKan Meteor Publication cards.js CardPubSubBleed information disclosureWeKan
- CVE-2026-2122Xiaopi Panel WAF Firewall demo.php sql injectionXiaopi Panel