# CVEs published 2026-02-23

97 CVEs were published on February 23, 2026: 8 critical, 33 high. Days are UTC.

- [CVE-2025-69252](https://cve.now/CVE-2025-69252.md): free5GC has Null Pointer Dereference in UDM, Leading to Service Panic (CVSS 6.6, free5gc udm)
- [CVE-2024-58041](https://cve.now/CVE-2024-58041.md): Smolder versions through 1.51 for Perl uses insecure rand() function for cryptographic functions (CVSS 9.1, WONKO Smolder)
- [CVE-2025-69251](https://cve.now/CVE-2025-69251.md): free5GC has Improper Input Validation in UDM, Leading to Information Exposure (CVSS 6.6, free5gc udm)
- [CVE-2025-69250](https://cve.now/CVE-2025-69250.md): free5GC has Improper Error Handling in UDM, Leading to Information Exposure (CVSS 6.6, free5gc udm)
- [CVE-2026-3044](https://cve.now/CVE-2026-3044.md): Tenda AC8 Httpd Service UploadCfg webCgiGetUploadFile stack-based overflow (CVSS 8.7, Tenda AC8)
- [CVE-2026-3043](https://cve.now/CVE-2026-3043.md): itsourcecode Event Management System navbar.php cross site scripting (CVSS 5.3, itsourcecode Event Management System)
- [CVE-2026-3042](https://cve.now/CVE-2026-3042.md): itsourcecode Event Management System index.php sql injection (CVSS 6.9, itsourcecode Event Management System)
- [CVE-2026-21665](https://cve.now/CVE-2026-21665.md): The Print Service component of Fiserv Originate Loans Peripherals (formerly Velocity Services) in unsupported version 2021.2.4 (build 4.7.31 (CVSS 7.7, Fiserv Originate Loans Peripherals (formerly Velocity Servi…)
- [CVE-2026-3063](https://cve.now/CVE-2026-3063.md): Inappropriate implementation in DevTools in Google Chrome prior to 145.0.7632.116 allowed an attacker who convinced a user to install a mali (CVSS 8.8, Google Chrome)
- [CVE-2026-3062](https://cve.now/CVE-2026-3062.md): Out of bounds read and write in Tint in Google Chrome on Mac prior to 145.0.7632.116 allowed a remote attacker to perform out of bounds memo (CVSS 8.8, Google Chrome)
- [CVE-2026-3061](https://cve.now/CVE-2026-3061.md): Out of bounds read in Media in Google Chrome prior to 145.0.7632.116 allowed a remote attacker to perform an out of bounds memory read via a (CVSS 8.8, Google Chrome)
- [CVE-2026-3041](https://cve.now/CVE-2026-3041.md): xingfuggz BaykeShop Article Sidebar custom.html cross site scripting (CVSS 4.8, xingfuggz BaykeShop)
- [CVE-2026-3040](https://cve.now/CVE-2026-3040.md): DrayTek Vigor 300B Web Management uploadlangs cgiGetFile os command injection (CVSS 5.1, DrayTek Vigor)
- [CVE-2026-27741](https://cve.now/CVE-2026-27741.md): Bludit \<= 3.16.1 CSRF in Plugin and Theme Management Endpoints (CVSS 5.1, Bludit)
- [CVE-2026-27742](https://cve.now/CVE-2026-27742.md): Bludit \<= 3.16.2 Stored XSS in Post Content (CVSS 5.1, Bludit)
- [CVE-2025-69248](https://cve.now/CVE-2025-69248.md): free5GC has Array Index Out of Bounds in AMF Leading to Denial of Service (CVSS 6.6, free5gc amf)
- [CVE-2025-69247](https://cve.now/CVE-2025-69247.md): free5GC has Heap Buffer Overflow in UPF Leading to Denial of Service (CVSS 2.7, free5gc go-upf)
- [CVE-2026-3028](https://cve.now/CVE-2026-3028.md): erzhongxmu JEEWMS JeecgListDemoController.java doAdd cross site scripting (CVSS 5.3, erzhongxmu JEEWMS)
- [CVE-2025-69232](https://cve.now/CVE-2025-69232.md): free5GC hasProtocol Compliance Violation in UPF Leading to SMF Service Disruption (CVSS 2.7, free5gc go-upf · free5gc smf)
- [CVE-2025-69208](https://cve.now/CVE-2025-69208.md): free5GC UDR's NEF incorrectly returns 500 for missing PFD data (UDR 404) in Nnef\_PfdManagement GET request (CVSS 2.7, free5gc udr)
- [CVE-2026-25649](https://cve.now/CVE-2026-25649.md): Traccar Vulnerable to Authorization Code Theft via Open Redirect in OIDC Provider Endpoints (CVSS 7.3, traccar)
- [CVE-2026-3027](https://cve.now/CVE-2026-3027.md): erzhongxmu JEEWMS UEditor getContent.jsp cross site scripting (CVSS 5.3, erzhongxmu JEEWMS)
- [CVE-2026-25648](https://cve.now/CVE-2026-25648.md): Traccar Vulnerable to Stored Cross-Site Scripting (XSS) via Malicious SVG File Upload (CVSS 8.7, traccar)
- [CVE-2026-23521](https://cve.now/CVE-2026-23521.md): Traccar vulnerable to Path Traversal and External Control of File Name or Path (CVSS 6.5, traccar)
- [CVE-2026-3075](https://cve.now/CVE-2026-3075.md): WordPress Simple Ajax Chat plugin \<= 20251121 - Sensitive Data Exposure vulnerability (CVSS 5.3, Jeff Starr Simple Ajax Chat)
- [CVE-2025-68930](https://cve.now/CVE-2025-68930.md): Traccar Missing Origin Validation in WebSockets (CVSS 7.1, traccar)
- [CVE-2026-23693](https://cve.now/CVE-2026-23693.md): ElementsKit Elementor Addons \< 3.7.9 Unauthenticated Mailchimp REST Endpoint (CVSS 9.3, Roxnor ElementsKit Elementor Addons – Advanced Widgets & Te…)
- [CVE-2026-23694](https://cve.now/CVE-2026-23694.md): Aruba HiSpeed Cache \< 3.0.5 CSRF in Multiple Administrative AJAX Actions (CVSS 5.1, Aruba.it Aruba HiSpeed Cache)
- [CVE-2026-3026](https://cve.now/CVE-2026-3026.md): erzhongxmu JEEWMS UEditor getRemoteImage.jsp server-side request forgery (CVSS 6.9, erzhongxmu JEEWMS)
- [CVE-2026-3025](https://cve.now/CVE-2026-3025.md): ShuoRen Smart Heating Integrated Management Platform ExampleNodeService.asmx unrestricted upload (CVSS 6.9, ShuoRen Smart Heating Integrated Management Platform)
- [CVE-2026-27623](https://cve.now/CVE-2026-27623.md): Valkey has Pre-Authentication DOS from malformed RESP request (CVSS 7.5, valkey-io valkey)
- [CVE-2026-21863](https://cve.now/CVE-2026-21863.md): Malformed Valkey Cluster bus message can lead to Remote DoS (CVSS 7.5, valkey-io valkey)
- [CVE-2025-67733](https://cve.now/CVE-2025-67733.md): Valkey Affected by RESP Protocol Injection via Lua error\_reply (CVSS 8.5, valkey-io valkey)
- [CVE-2026-2698](https://cve.now/CVE-2026-2698.md): Improper Access Control (CVSS 6.5, Tenable Security Center)
- [CVE-2026-27514](https://cve.now/CVE-2026-27514.md): Tenda F3 Plaintext Credential Exposure in Configuration Download (CVSS 7.1, Shenzhen Tenda Technology Co. Tenda F3)
- [CVE-2026-27513](https://cve.now/CVE-2026-27513.md): Tenda F3 CSRF in Web Management Interface (CVSS 5.1, Shenzhen Tenda Technology Co. Tenda F3)
- [CVE-2026-27512](https://cve.now/CVE-2026-27512.md): Tenda F3 Reflected Script Execution via Missing nosniff Header (CVSS 5.1, Shenzhen Tenda Technology Co. Tenda F3)
- [CVE-2026-27511](https://cve.now/CVE-2026-27511.md): Tenda F3 Clickjacking in Web Management Interface (CVSS 5.1, Shenzhen Tenda Technology Co. Tenda F3)
- [CVE-2026-22567](https://cve.now/CVE-2026-22567.md): ZIA Admin UI Input Validation Bug (CVSS 7.6, Zscaler ZIA Admin UI)
- [CVE-2026-22568](https://cve.now/CVE-2026-22568.md): Unauthorized information retrieval in ZIA Admin UI (CVSS 5.5, Zscaler ZIA Admin UI)
- [CVE-2025-14905](https://cve.now/CVE-2025-14905.md): 389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow (CVSS 7.2, Red Hat Directory Server 11.5 E4S for RHEL · Red Hat Dir… +5)
- [CVE-2026-2697](https://cve.now/CVE-2026-2697.md): Indirect Object Reference (IDOR) in Security Center (CVSS 6.3, Tenable Security Center)
- [CVE-2026-3016](https://cve.now/CVE-2026-3016.md): UTT HiPER 810G formP2PLimitConfig strcpy buffer overflow (CVSS 8.7, UTT HiPER)
- [CVE-2026-3015](https://cve.now/CVE-2026-3015.md): UTT HiPER 810G formPolicyRouteConf strcpy buffer overflow (CVSS 8.7, UTT HiPER)
- [CVE-2026-21420](https://cve.now/CVE-2026-21420.md): Dell Repository Manager (DRM), versions prior to 3.4.8, contains an Uncontrolled Search Path Element vulnerability. (CVSS 7.3, Dell Repository Manager)
- [CVE-2025-59873](https://cve.now/CVE-2025-59873.md): Session Token Exposure via URL Query Parameters (CVSS 5.9, HCL Software ZIE for Web)
- [CVE-2026-2985](https://cve.now/CVE-2026-2985.md): Tiandy Video Surveillance System 视频监控平台 CLSBODownLoad.java downloadImage server-side request forgery (CVSS 5.3, Tiandy Video Surveillance System 视频监控平台)
- [CVE-2025-40986](https://cve.now/CVE-2025-40986.md): Reflected Cross-Site Scripting in PideTuCita (CVSS 5.1, PideTuCita)
- [CVE-2025-40701](https://cve.now/CVE-2025-40701.md): Reflected Cross-Site scripting (XSS) in SOTE's SOTESHOP (CVSS 5.1, SOTESHOP)
- [CVE-2026-2984](https://cve.now/CVE-2026-2984.md): SourceCodester Student Result Management System drop\_user.php denial of service (CVSS 6.9, SourceCodester Student Result Management System)
- [CVE-2026-2983](https://cve.now/CVE-2026-2983.md): SourceCodester Student Result Management System Bulk Import import\_users.php access control (CVSS 6.9, SourceCodester Student Result Management System)
- [CVE-2025-41002](https://cve.now/CVE-2025-41002.md): SQL injection in Infoticketing (CVSS 9.3, MANANTIAL DE IDEAS Infoticketing)
- [CVE-2026-2981](https://cve.now/CVE-2026-2981.md): UTT HiPER 810G formTaskEdit\_ap strcpy buffer overflow (CVSS 8.7, UTT HiPER)
- [CVE-2026-25747](https://cve.now/CVE-2026-25747.md): Apache Camel LevelDB: Deserialization of Untrusted Data in Camel LevelDB (CVSS 8.8, Apache Software Foundation Apache Camel LevelDB · org.apach…)
- [CVE-2026-23552](https://cve.now/CVE-2026-23552.md): Apache Camel: Camel-Keycloak: Cross-Realm Token Acceptance Bypass in KeycloakSecurityPolicy (CVSS 9.1, Apache Software Foundation Apache Camel · org.apache.camel:…)
- [CVE-2026-2980](https://cve.now/CVE-2026-2980.md): UTT HiPER 810G setSysAdm strcpy buffer overflow (CVSS 8.6, UTT HiPER)
- [CVE-2026-2979](https://cve.now/CVE-2026-2979.md): FastApiAdmin Scheduled Task API controller.py user\_avatar\_upload\_controller unrestricted upload (CVSS 5.3, FastApiAdmin)
- [CVE-2026-2978](https://cve.now/CVE-2026-2978.md): FastApiAdmin Scheduled Task API controller.py upload\_file\_controller unrestricted upload (CVSS 5.3, FastApiAdmin)
- [CVE-2026-2977](https://cve.now/CVE-2026-2977.md): FastApiAdmin Scheduled Task API controller.py upload\_controller unrestricted upload (CVSS 5.3, FastApiAdmin)
- [CVE-2026-1367](https://cve.now/CVE-2026-1367.md): SQL Injection (CVSS 8.3, Zohocorp ManageEngine ADSelfService Plus)
- [CVE-2026-2976](https://cve.now/CVE-2026-2976.md): FastApiAdmin Download Endpoint controller.py download\_controller information disclosure (CVSS 5.3, FastApiAdmin)
- [CVE-2026-2975](https://cve.now/CVE-2026-2975.md): FastApiAdmin Custom Documentation Endpoint init\_app.py reset\_api\_docs information disclosure (CVSS 6.9, FastApiAdmin)
- [CVE-2026-2974](https://cve.now/CVE-2026-2974.md): AliasVault App Backup aliasvault.xml backup (CVSS 2.0, AliasVault App)
- [CVE-2026-2972](https://cve.now/CVE-2026-2972.md): a466350665 Smart-SSO Role Edit UserController.java save cross site scripting (CVSS 4.8, a466350665 Smart-SSO)
- [CVE-2026-2971](https://cve.now/CVE-2026-2971.md): a466350665 Smart-SSO Login login.html cross site scripting (CVSS 5.3, a466350665 Smart-SSO)
- [CVE-2026-2970](https://cve.now/CVE-2026-2970.md): datapizza-labs datapizza-ai cache.py RedisCache deserialization (CVSS 2.1, datapizza-labs datapizza-ai · datapizza-ai-core)
- [CVE-2026-2969](https://cve.now/CVE-2026-2969.md): datapizza-labs datapizza-ai Jinja2 Template prompt.py ChatPromptTemplate special elements used in a template engine (CVSS 5.1, datapizza-labs datapizza-ai · datapizza-ai-core)
- [CVE-2026-2968](https://cve.now/CVE-2026-2968.md): Cesanta Mongoose Poly1305 Authentication Tag tls\_chacha20.c mg\_chacha20\_poly1305\_decrypt signature verification (CVSS 6.3, Cesanta Mongoose)
- [CVE-2026-2998](https://cve.now/CVE-2026-2998.md): eAI Technologies｜ERP - DLL Hijacking (CVSS 8.5, eAI Technologies ERP F2)
- [CVE-2026-2967](https://cve.now/CVE-2026-2967.md): Cesanta Mongoose TCP Sequence Number net\_builtin.c getpeer verification of source (CVSS 6.3, Cesanta Mongoose)
- [CVE-2026-2966](https://cve.now/CVE-2026-2966.md): Cesanta Mongoose DNS Transaction ID dns.c mg\_sendnsreq random values (CVSS 6.3, Cesanta Mongoose)
- [CVE-2026-2997](https://cve.now/CVE-2026-2997.md): WisdomGarden｜Tronclass - Insecure Direct Object Reference (CVSS 5.4, WisdomGarden Tronclass)
- [CVE-2026-2965](https://cve.now/CVE-2026-2965.md): 07FLYCMS/07FLY-CMS/07FlyCRM System Extension edit.html cross site scripting (CVSS 4.8, 07FLYCMS · 07FLY-CMS +1)
- [CVE-2026-24494](https://cve.now/CVE-2026-24494.md): SQL injection vulnerability in Order Up Online Ordering System (CVSS 9.8, Order Up Online Ordering System)
- [CVE-2026-2964](https://cve.now/CVE-2026-2964.md): higuma web-audio-recorder-js Dynamic Config Handling WebAudioRecorder.js extend prototype pollution (CVSS 2.3, higuma web-audio-recorder-js)
- [CVE-2026-2963](https://cve.now/CVE-2026-2963.md): Jinher OA C6 OfficeSupplyTypeRight.aspx sql injection (CVSS 5.3, Jinher OA C6)
- [CVE-2026-2962](https://cve.now/CVE-2026-2962.md): D-Link DWR-M960 Scheduled Reboot Configuration Endpoint formDateReboot sub\_460F30 stack-based overflow (CVSS 8.7, D-Link DWR-M960)
- [CVE-2026-2961](https://cve.now/CVE-2026-2961.md): D-Link DWR-M960 VPN Configuration Endpoint formVpnConfigSetup sub\_4196C4 stack-based overflow (CVSS 8.7, D-Link DWR-M960)
- [CVE-2026-2960](https://cve.now/CVE-2026-2960.md): D-Link DWR-M960 formDhcpv6s sub\_468D64 stack-based overflow (CVSS 8.7, D-Link DWR-M960)
- [CVE-2025-61143](https://cve.now/CVE-2025-61143.md): libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif\_open.c. (CVSS 5.5)
- [CVE-2025-61144](https://cve.now/CVE-2025-61144.md): libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function. (CVSS 9.8)
- [CVE-2025-61145](https://cve.now/CVE-2025-61145.md): libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c. (CVSS 5.5)
- [CVE-2025-61146](https://cve.now/CVE-2025-61146.md): saitoha libsixel until v1.8.7 was discovered to contain a memory leak via the component malloc\_stub.c. (CVSS 4.0)
- [CVE-2025-61147](https://cve.now/CVE-2025-61147.md): strukturag libde265 commit d9fea9d wa discovered to contain a segmentation fault via the component decoder\_context::compute\_framedrop\_table( (CVSS 6.2)
- [CVE-2025-63945](https://cve.now/CVE-2025-63945.md): A privilege escalation (PE) vulnerability in the Tencent iOA app thru 210.9.28693.621001 on Windows devices enables a local user to execute (CVSS 7.4)
- [CVE-2025-63946](https://cve.now/CVE-2025-63946.md): A privilege escalation (PE) vulnerability in the Tencent PC Manager app thru 17.10.28554.205 on Windows devices enables a local user to exec (CVSS 7.4)
- [CVE-2025-69700](https://cve.now/CVE-2025-69700.md): Tenda FH1203 V2.0.1.6 contains a stack-based buffer overflow vulnerability in the modify\_add\_client\_prio function, which is reachable via th (CVSS 7.5)
- [CVE-2025-70043](https://cve.now/CVE-2025-70043.md): An issue pertaining to CWE-295: Improper Certificate Validation was discovered in Ayms node-To master. (CVSS 9.1)
- [CVE-2025-70044](https://cve.now/CVE-2025-70044.md): An issue pertaining to CWE-295: Improper Certificate Validation was discovered in fofolee uTools-quickcommand 5.0.3. (CVSS 6.5)
- [CVE-2025-70045](https://cve.now/CVE-2025-70045.md): An issue pertaining to CWE-295: Improper Certificate Validation was discovered in jxcore jxm master. (CVSS 7.4)
- [CVE-2025-70058](https://cve.now/CVE-2025-70058.md): An issue pertaining to CWE-295: Improper Certificate Validation was discovered in YMFE yapi v1.12.0. (CVSS 7.4, yapi-vendor)
- [CVE-2025-70327](https://cve.now/CVE-2025-70327.md): TOTOLINK X5000R v9.1.0cu\_2415\_B20250515 contains an argument injection vulnerability in the setDiagnosisCfg handler of the /usr/sbin/lighttp (CVSS 9.8)
- [CVE-2025-70328](https://cve.now/CVE-2025-70328.md): TOTOLINK X6000R v9.4.0cu.1498\_B20250826 contains an OS command injection vulnerability in the NTPSyncWithHost handler of the /usr/sbin/shttp (CVSS 8.8)
- [CVE-2025-70329](https://cve.now/CVE-2025-70329.md): TOTOLink X5000R v9.1.0cu\_2415\_B20250515 contains an OS command injection vulnerability in the setIptvCfg handler of the /usr/sbin/lighttpd e (CVSS 8.0)
- [CVE-2025-71056](https://cve.now/CVE-2025-71056.md): Improper session management in GCOM EPON 1GE ONU version C00R371V00B01 allows attackers to execute a session hijacking attack via spoofing t (CVSS 8.1)
- [CVE-2026-26365](https://cve.now/CVE-2026-26365.md): Akamai Ghost on Akamai CDN edge servers before 2026-02-06 mishandles processing of custom hop-by-hop HTTP headers, where an incoming request (CVSS 4.0, Akamai Ghost)
- [CVE-2026-26464](https://cve.now/CVE-2026-26464.md): Stored Cross-Site Scripting (XSS) was found in the /admin/edit\_user.php page of Society Management System Portal V1.0, which allows remote a (CVSS 6.1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-02-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.