CVEs published February 15, 2026
31 CVEs were published on February 15, 2026: 3 critical, 9 high.
- Published
- 31
- Critical
- 3
- High
- 9
- Medium
- 19
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 11
Most affected products
- OPNsense
- 10
- Bosch Infotainment system ECU
- 6
- JUNG eNet SMART HOME server
- 4
- Micca Auto Electronics Co. Car Alarm System KE700
- 3
- Open5GS
- 3
- ArangoDB Community Edition
- 1
- bdthemes Element Pack – Widgets, Templates & Addons for Ele…
- 1
- Ecwid by Lightspeed Ecommerce Shopping Cart
- 1
- Spam protection, Honeypot, Anti-Spam by CleanTalk
- 1
- Unidocs ezPDF DRM Reader · Unidocs ezPDF Reader
- 1
Critical 3
- CVE-2026-26366JUNG eNet SMART HOME server 2.2.1/2.3.1 Use of Default CredentialsJUNG eNet SMART HOME server
- CVE-2025-32058Stack Overflow in processing requests over INC interface on RH850 side of Infotainment ECUBosch Infotainment system ECU
- CVE-2026-1490Spam protection, Honeypot, Anti-Spam by CleanTalk <= 6.71 - Authorization Bypass via Reverse DNS (PTR record) Spoofing to Unauthenticated Arbitrary Plugin InstallationSpam protection, Honeypot, Anti-Spam by CleanTalk
High 9
- CVE-2026-26369JUNG eNet SMART HOME server 2.2.1/2.3.1 Privilege Escalation via setUserGroupJUNG eNet SMART HOME server
- CVE-2026-26368JUNG eNet SMART HOME server 2.2.1/2.3.1 Account Takeover via resetUserPasswordJUNG eNet SMART HOME server
- CVE-2026-26367JUNG eNet SMART HOME server 2.2.1/2.3.1 Arbitrary User Deletion via deleteUserAccountJUNG eNet SMART HOME server
- CVE-2026-2516Unidocs ezPDF DRM Reader/ezPDF Reader SHFOLDER.dll uncontrolled search pathUnidocs ezPDF DRM Reader · Unidocs ezPDF Reader
- CVE-2026-2540Micca KE700 Acceptance of previously used rolling codesMicca Auto Electronics Co. Car Alarm System KE700
- CVE-2025-32062Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECUBosch Infotainment system ECU
- CVE-2025-32061Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECUBosch Infotainment system ECU
- CVE-2025-32059Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECUBosch Infotainment system ECU
- CVE-2026-1750Ecwid by Lightspeed Ecommerce Shopping Cart <= 7.0.7 - Authenticated (Subscriber+) Privilege Escalation via ec_store_admin_accessEcwid by Lightspeed Ecommerce Shopping Cart
Medium, low and unrated 19
- CVE-2026-2522Open5GS MME esm-build.c memory corruptionOpen5GS
- CVE-2026-2521Open5GS SGW-C sgwc_s5c_handle_create_session_response memory corruptionOpen5GS
- CVE-2019-25377OPNsense 19.1 Reflected XSS via system_advanced_sysctl.phpOPNsense
- CVE-2019-25376OPNsense 19.1 Reflected XSS via proxy endpointOPNsense
- CVE-2019-25375OPNsense 19.1 Reflected XSS via monit interfaceOPNsense
- CVE-2019-25374OPNsense 19.1 Reflected XSS via vpn_ipsec_settings.phpOPNsense
- CVE-2019-25373OPNsense 19.1 Stored XSS via firewall_rules_edit.phpOPNsense
- CVE-2019-25372OPNsense 19.1 Reflected XSS via diag_traceroute.phpOPNsense
- CVE-2019-25371OPNsense 19.1 Reflected XSS via diag_ping.phpOPNsense
- CVE-2019-25370OPNsense 19.1 Reflected XSS via interfaces_vlan_edit.phpOPNsense
- CVE-2019-25369OPNsense 19.1 Stored XSS via system_advanced_sysctl.phpOPNsense
- CVE-2019-25368OPNsense 19.1 Reflected XSS via diag_backup.phpOPNsense
- CVE-2019-25367ArangoDB Community Edition 3.4.2-1 XSS via aardvark admin interfaceArangoDB Community Edition
- CVE-2026-2517Open5GS SMF types.c ogs_gtp2_parse_tft denial of serviceOpen5GS
- CVE-2026-2541Micca KE700 Brute-force vulnerability due to low entropyMicca Auto Electronics Co. Car Alarm System KE700
- CVE-2026-2539Micca KE700 Cleartext transmission of key fob IDMicca Auto Electronics Co. Car Alarm System KE700
- CVE-2025-32063Enabling SSH server on Infotainment ECUBosch Infotainment system ECU
- CVE-2025-32060Absence of Kernel Module Signature Verification on Linux System of Infotainment ECUBosch Infotainment system ECU
- CVE-2026-1793Element Pack Addons for Elementor <= 8.3.17 - Authenticated (Contributor+) Arbitrary File Readbdthemes Element Pack – Widgets, Templates & Addons for Ele…