CVEs published February 24, 2026
223 CVEs were published on February 24, 2026: 47 critical, 65 high.
- Published
- 223
- Critical
- 47
- High
- 65
- Medium
- 107
- Low
- 4
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 98
Most affected products
- Mozilla Firefox · Mozilla Thunderbird
- 50
- ImageMagick · Magick.NET-Q16-AnyCPU +18
- 21
- Binardat 10G08-0800GSM Network Switch
- 9
- ImageMagick · Magick.NET-Q16-AnyCPU +17
- 7
- caddyserver caddy · github.com/caddyserver/caddy/v2
- 6
- Apache Software Foundation Apache Superset · apache-superset
- 5
- craftcms cms · craftcms/cms
- 4
- Dell Wyse Management Suite
- 4
- HummerRisk
- 4
- SolarWinds Serv-U
- 4
Critical 47
- CVE-2026-27593Statamic is vulnerable to account takeover via password reset link injectionstatamic cms · statamic/cms
- CVE-2026-22553InSAT MasterSCADA BUK-TS OS Command InjectionInSAT MasterSCADA BUK-TS
- CVE-2026-21410InSAT MasterSCADA BUK-TS SQL InjectionInSAT MasterSCADA BUK-TS
- CVE-2026-26341Tattile Smart+ / Vega / Basic <= 1.181.5 Default CredentialsTattile s.r.l. Smart+ · Tattile s.r.l. Tolling+ +6
- CVE-2026-26222DocLink .NET Remoting Unauthenticated Arbitrary File Read/Write RCEBeyond Limits Altec DocLink
- CVE-2026-27515Binardat 10G08-0800GSM Network Switch Predictable Session IdentifiersBinardat 10G08-0800GSM Network Switch
- CVE-2026-27507Binardat 10G08-0800GSM Network Switch Hard-coded CredentialsBinardat 10G08-0800GSM Network Switch
- CVE-2026-27584ActualBudget server is Missing Authentication for SimpleFIN and Pluggy AI bank sync endpointsactualbudget actual · @actual-app/sync-server
- CVE-2026-27208api-gateway-deploy Affected by Exploitable Command Injection via Unprivileged Root Executionbleon-ethical api-gateway-deploy
- CVE-2026-2807Memory safety bugs fixed in Firefox 148 and Thunderbird 148Mozilla Firefox · Mozilla Thunderbird
- CVE-2026-2806Uninitialized memory in the Graphics: Text componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2805Invalid pointer in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2800Spoofing issue in the WebAuthn component in Firefox for AndroidMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2796JIT miscompilation in the JavaScript: WebAssembly componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2634Spoofed web content presented under trusted domains using scripted navigation on Firefox iOSMozilla Firefox for iOS
- CVE-2026-2793Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148Mozilla Firefox · Mozilla Thunderbird
- CVE-2026-2792Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148Mozilla Firefox · Mozilla Thunderbird
- CVE-2026-2791Mitigation bypass in the Networking: Cache componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2788Incorrect boundary conditions in the Audio/Video: GMP componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2784Mitigation bypass in the DOM: Security componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2779Incorrect boundary conditions in the Networking: JAR componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2778Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2777Privilege escalation in the Messaging System componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2776Sandbox escape due to incorrect boundary conditions in the Telemetry component in External SoftwareMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2775Mitigation bypass in the DOM: HTML Parser componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2773Incorrect boundary conditions in the Web Audio componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2771Undefined behavior in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2768Sandbox escape in the Storage: IndexedDB componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2766Use-after-free in the JavaScript Engine: JIT componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2765Use-after-free in the JavaScript Engine componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2764JIT miscompilation, use-after-free in the JavaScript Engine: JIT componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2763Use-after-free in the JavaScript Engine componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2762Integer overflow in the JavaScript: Standard Library componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2761Sandbox escape in the Graphics: WebRender componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2760Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2759Incorrect boundary conditions in the Graphics: ImageLib componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2758Use-after-free in the JavaScript: GC componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2757Incorrect boundary conditions in the WebRTC: Audio/Video componentMozilla Firefox · Mozilla Thunderbird
- CVE-2025-14577PHP Function Injection in Slican NPC/IPL/IPM/IPUSlican NCP · Slican IPL +2
- CVE-2025-11165A sandbox escape vulnerability exists in dotCMS’s Velocity scripting engine (VTools) that allows authenticated users with scripting privilegdotCMS
- CVE-2025-40541SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Remote Code Execution VulnerabilitySolarWinds Serv-U
- CVE-2025-40540SolarWinds Serv-U Type Confusion Remote Code Execution VulnerabilitySolarWinds Serv-U
- CVE-2025-40539SolarWinds Serv-U Type Confusion Remote Code Execution VulnerabilitySolarWinds Serv-U
- CVE-2025-40538SolarWinds Serv-U Broken Access Control Remote Code Execution VulnerabilitySolarWinds Serv-U
- CVE-2025-13942A command injection vulnerability in the UPnP function of the Zyxel EX3510-B0 firmware versions through 5.17(ABUP.15.1)C0 could allow a remoZyxel EX3510-B0 firmware
- CVE-2026-26198ormar is vulnerable to SQL Injection through aggregate functions min() and max()collerek ormar · ormar
- CVE-2025-69985FUXA 1.2.8 and prior contains an Authentication Bypass vulnerability leading to Remote Code Execution (RCE).@frangoteam/fuxa
High 65
- CVE-2026-25899Fiber is Vulnerable to Denial of Service via Flash Cookie Unbounded Allocationgofiber fiber · github.com/gofiber/fiber/v3
- CVE-2026-25891Fiber has an Arbitrary File Read in Static Middleware on Windowsgofiber fiber · github.com/gofiber/fiber/v3
- CVE-2026-24443EventSentry < 6.0.1.20 Web Reports Unverified Password ChangeNETIKUS.NET EventSentry
- CVE-2026-22766Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Unrestricted Upload of File with Dangerous Type vulnerability.Dell Wyse Management Suite
- CVE-2026-22765Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Missing Authorization vulnerability.Dell Wyse Management Suite
- CVE-2025-33181NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could inject a command.NVIDIA Cumulus Linux GA · NVIDIA Cumulus Linux LTS +1
- CVE-2025-33180NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could inject a command.NVIDIA Cumulus Linux GA · NVIDIA Cumulus Linux LTS +1
- CVE-2025-33179NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could run an unauthorized NVIDIA Cumulus Linux GA · NVIDIA Cumulus Linux LTS +1
- CVE-2026-26342Tattile Smart+ / Vega / Basic <= 1.181.5 Insufficient Session Token ExpirationTattile s.r.l. Smart+ · Tattile s.r.l. Tolling+ +6
- CVE-2026-26340Tattile Smart+ / Vega / Basic <= 1.181.5 Unauthenticated RTSP Stream DisclosureTattile s.r.l. Smart+ · Tattile s.r.l. Tolling+ +6
- CVE-2026-3105SQL Injection in Contact Activity API SortingMautic · mautic/core
- CVE-2026-27590Caddy: Unicode case-folding length expansion causes incorrect split_path index (SCRIPT_NAME/PATH_INFO confusion) in FastCGI transportcaddyserver caddy · github.com/caddyserver/caddy/v2
- CVE-2026-27588Caddy: MatchHost becomes case-sensitive for large host lists (>100), enabling host-based route/auth bypasscaddyserver caddy · github.com/caddyserver/caddy/v2
- CVE-2026-27587Caddy: MatchPath %xx (escaped-path) branch skips case normalization, enabling path-based route/auth bypasscaddyserver caddy · github.com/caddyserver/caddy/v2
- CVE-2026-27586Caddy's mTLS client authentication silently fails open when CA certificate file is missing or malformedcaddyserver caddy · github.com/caddyserver/caddy/v2
- CVE-2025-13776Hard-coded database credentials in Finka softwareTIK-SOFT Finka-FK · TIK-SOFT Finka-KPR +4
- CVE-2026-27520Binardat 10G08-0800GSM Network Switch Base64-encoded Password Stored in CookieBinardat 10G08-0800GSM Network Switch
- CVE-2026-27519Binardat 10G08-0800GSM Network Switch Hard-coded RC4 Encryption KeyBinardat 10G08-0800GSM Network Switch
- CVE-2026-27516Binardat 10G08-0800GSM Network Switch Plaintext Password ExposureBinardat 10G08-0800GSM Network Switch
- CVE-2026-23678Binardat 10G08-0800GSM Network Switch Traceroute CLI Command InjectionBinardat 10G08-0800GSM Network Switch
- CVE-2026-27732AVideo has Authenticated Server-Side Request Forgery via downloadURL in aVideoEncoder.json.phpWWBN AVideo · wwbn/avideo
- CVE-2026-27483MindsDB has Path Traversal in /api/files Leading to Remote Code Executionmindsdb
- CVE-2026-2803Information disclosure, mitigation bypass in the Settings UI componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2801Incorrect boundary conditions in the JavaScript: WebAssembly componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2799Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2798Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2797Use-after-free in the JavaScript: GC componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2795Use-after-free in the JavaScript: GC componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2790Same-origin policy bypass in the Networking: JAR componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2789Use-after-free in the Graphics: ImageLib componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2787Use-after-free in the DOM: Window and Location componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2786Use-after-free in the JavaScript Engine componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2785Invalid pointer in the JavaScript Engine componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2782Privilege escalation in the Netmonitor componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2781Integer overflow in the Libraries component in NSSMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2780Privilege escalation in the Netmonitor componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2774Integer overflow in the Audio/Video componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2772Use-after-free in the Audio/Video: Playback componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2770Use-after-free in the DOM: Bindings (WebIDL) componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2769Use-after-free in the Storage: IndexedDB componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2767Use-after-free in the JavaScript: WebAssembly componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2460A vulnerability exists in REB500 for an authenticated user with low-level privileges to access and alter the content of directories by usingHitachi Energy Relion REB500
- CVE-2026-2459A vulnerability exists in REB500 for an authenticated user with Installer role to access and alter the contents of directories that the roleHitachi Energy Relion REB500
- CVE-2026-1773IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format frame.Hitachi Energy RTU500 series CMU firmware
- CVE-2026-23982Apache Superset: Improper Authorization in Dataset Creation Allows Access Control BypassApache Software Foundation Apache Superset · apache-superset
- CVE-2026-23984Apache Superset: SQLLab Read-Only Bypass on PostgreSQLApache Software Foundation Apache Superset · apache-superset
- CVE-2024-56373Apache Airflow: SSTI to Code Execution in Airflow through Shared DB InformationApache Software Foundation Apache Airflow · apache-airflow
- CVE-2024-1524A local user can be impersonated when using federated authentication with Silent JIT Provisioning.WSO2 API Manager · WSO2 Identity Server
- CVE-2025-15386Responsive Lightbox & Gallery < 2.6.1 - Unauthenticated Stored XSSResponsive Lightbox & Gallery
- CVE-2026-1459A post-authentication command injection vulnerability in the TR-369 certificate download CGI program of the Zyxel VMG3625-T50B firmware versZyxel VMG3625-T50B firmware
- CVE-2026-27127Craft CMS has Cloud Metadata SSRF Protection Bypass via DNS Rebindingcraftcms cms · craftcms/cms
- CVE-2025-13943A post-authentication command injection vulnerability in the log file download function of the Zyxel EX3301-T0 firmware versions through 5.5Zyxel EX3301-T0 firmware
- CVE-2026-26331yt-dlp: Arbitrary Command Injection when using the `--netrc-cmd` optionyt-dlp
- CVE-2026-25989ImageMagick has integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoderImageMagick · Magick.NET-Q16-AnyCPU +18
- CVE-2026-25985Memory allocation with excessive without limits in the internal SVG decoderImageMagick · Magick.NET-Q16-AnyCPU +18
- CVE-2026-25968ImageMagick has MSL attribute stack buffer overflow that leads to out of bounds write.ImageMagick · Magick.NET-Q16-AnyCPU +18
- CVE-2026-25967ImageMagick has stack buffer overflow in FTXT reader via oversized integer fieldImageMagick · Magick.NET-Q16-AnyCPU +17
- CVE-2026-25965ImageMagick's policy bypass through path traversal allows reading restricted content despite secured policyImageMagick · Magick.NET-Q16-AnyCPU +18
- CVE-2026-25794ImageMagick has heap-buffer-overflow via signed integer overflow in `WriteUHDRImage` when writing UHDR images with large dimensionsImageMagick · Magick.NET-Q16-AnyCPU +18
- CVE-2026-25802New API has Potential XSS in its MarkdownRenderer componentQuantumNous new-api · github.com/QuantumNous/new-api
- CVE-2026-25591New API has an SQL LIKE Wildcard Injection DoS via Token SearchQuantumNous new-api · github.com/QuantumNous/new-api
- CVE-2026-24485ImageMagick: Infinite loop vulnerability when parsing a PCD fileImageMagick · Magick.NET-Q16-AnyCPU +18
- CVE-2026-24481ImageMagick has Possible Heap Information Disclosure in PSD ZIP DecompressionImageMagick · Magick.NET-Q16-AnyCPU +16
- CVE-2025-9120RCE vulnerability has been discovered in OpenText™ Carbonite Safe Server Backup.OpenText™ Carbonite Safe Server Backup
- CVE-2025-63409Privilege escalation and improper access control in GCOM EPON 1GE C00R371V00B01 allows remote authenticated users to modify administrator on
Medium, low and unrated 111
- CVE-2026-3134itsourcecode News Portal Project edit-category.php sql injectionitsourcecode News Portal Project
- CVE-2026-3133itsourcecode Document Management System Login loging.php sql injectionitsourcecode Document Management System
- CVE-2026-26351GetSimpleCMS-CE < 3.3.22 Stored XSS via components.phpGetSimpleCMS-CE
- CVE-2026-27117bit7z has a path traversal vulnerabilityrikyoz bit7z
- CVE-2026-27572Wasmtime can panic when adding excessive fields to a `wasi:http/types.fields` instancebytecodealliance wasmtime · wasmtime
- CVE-2026-27204Wasmtime WASI implementations are vulnerable to guest-controlled resource exhaustionbytecodealliance wasmtime · wasmtime
- CVE-2026-27195Wasmtime is vulnerable to panic when dropping a `[Typed]Func::call_async` futurebytecodealliance wasmtime · wasmtime
- CVE-2026-25882Fiber has a Denial of Service Vulnerability via Route Parameter Overflowgofiber fiber · github.com/gofiber/fiber/v2 +1
- CVE-2025-46320A cross-site scripting (XSS) vulnerability in a FileMaker WebDirect custom homepage could lead to unauthorized access and remote code executClaris FileMaker Server
- CVE-2026-23859Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Client-Side Enforcement of Server-Side Security vulnerability.Dell Wyse Management Suite
- CVE-2026-23858Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site SDell Wyse Management Suite
- CVE-2026-3131Improper access control in multiple DVLS REST API endpoints in Devolutions Server 2025.3.14.0 and earlier allows an authenticated user witDevolutions Server
- CVE-2026-1768A permission cache poisoning vulnerability in Devolutions Server allows authenticated users to bypass permissions to access entries.This issDevolutions Server
- CVE-2026-27477Mastodon has SSRF via unvalidated FASP Provider base_urlmastodon
- CVE-2025-1789Local privilege escalation in Genetec Update Service.Genetec Update Service
- CVE-2025-1787Local admin could to leak information from the Genetec Update Service configuration web page.Genetec Update Service
- CVE-2026-24241NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an attacker could exploit an improper authentiDLS component of NVIDIA License System
- CVE-2026-25603Path Traversal vulnerability in Linksys MR9600, Linksys MX4200Linksys MR9600 · Linksys MX4200
- CVE-2026-27468Mastodon may allow unconfirmed FASP to make subscriptionsmastodon
- CVE-2025-14963A vulnerability identified in the HX Agent driver file fekern.sys allowed a threat actor with local user access the ability to gain elevatedTrellix Endpoint HX Agent
- CVE-2026-27156NiceGUI has XSS via Code Injectionzauberzeug nicegui · nicegui
- CVE-2025-62512Piwigo Vulnerable to User Enumeration via Password Reset EndpointPiwigo
- CVE-2024-48928Piwigo's secret key can be brute forcedPiwigo
- CVE-2026-27589Caddy vulnerable to cross-origin config application via local admin API /load (caddy)caddyserver caddy · github.com/caddyserver/caddy/v2
- CVE-2026-27585Caddy's improper sanitization of glob characters in file matcher may lead to bypassing security protectionscaddyserver caddy · github.com/caddyserver/caddy/v2
- CVE-2026-27571nats-server websockets are vulnerable to pre-auth memory DoSnats-io nats-server · github.com/nats-io/nats-server +1
- CVE-2025-47904Unsigned upgrade packageMicrochip Time Provider
- CVE-2026-27521Binardat 10G08-0800GSM Network Switch Missing Login Rate LimitingBinardat 10G08-0800GSM Network Switch
- CVE-2026-27518Binardat 10G08-0800GSM Network Switch CSRFBinardat 10G08-0800GSM Network Switch
- CVE-2026-27517Binardat 10G08-0800GSM Network Switch XSSBinardat 10G08-0800GSM Network Switch
- CVE-2026-0402A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall.SonicWall SonicOS
- CVE-2026-0401A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall.SonicWall SonicOS
- CVE-2026-0400A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall.SonicWall SonicOS
- CVE-2026-27568AVideo has Stored Cross-Site Scripting via Markdown Comment InjectionWWBN AVideo · wwbn/avideo
- CVE-2026-0399Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to improper bounds checkingSonicWall SonicOS
- CVE-2026-3102exiftool PNG File MacOS.pm SetMacOSTags os command injectionexiftool
- CVE-2026-3101Intelbras TIP 635G Ping os command injectionIntelbras TIP
- CVE-2026-27567Payload has Server-Side Request Forgery (SSRF) in External File URL Uploadspayloadcms payload · payload
- CVE-2025-10010Integrity Validation Bypass in CryptoPro Secure Disk for BitLockerCPSD IT SERVICES CryptoPro Secure Disk for BitLocker
- CVE-2026-2804Use-after-free in the JavaScript: WebAssembly componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2802Race condition in the JavaScript: GC componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-2794Information disclosure due to uninitialized memory in Firefox and Firefox Focus for AndroidMozilla Firefox
- CVE-2026-2783Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-1772RTU500 web interface: An unprivileged user can read user management information.Hitachi Energy RTU500 series CMU firmware
- CVE-2026-23969Apache Superset: Exposure of Sensitive Information via Incomplete ClickHouse Function FilteringApache Software Foundation Apache Superset · apache-superset
- CVE-2026-23980Apache Superset: Improper Neutralization of Special Elements used in a SQL CommandApache Software Foundation Apache Superset · apache-superset
- CVE-2026-23983Apache Superset: Sensitive Data Exposure via REST API (disabled by default)Apache Software Foundation Apache Superset · apache-superset
- CVE-2025-27555Apache Airflow: Connection Secrets not masked in UI when Connection are added via Airflow cliApache Software Foundation Apache Airflow · apache-airflow
- CVE-2026-2664Out of bounds read vulnerability in grpcfuse kernel moduleDocker Desktop
- CVE-2026-1229Incorrect calculation in CIRCL secp384r1 CombinedMultCloudflare CIRCL · github.com/cloudflare/circl
- CVE-2025-15589MuYuCMS Template Management Template.php delete_dir_file path traversalMuYuCMS
- CVE-2026-24314Information Disclosure vulnerability in S/4HANA (Manage Payment Media)SAP_SE S/4HANA
- CVE-2026-3070SourceCodester Modern Image Gallery App upload.php cross site scriptingSourceCodester Modern Image Gallery App
- CVE-2026-3069itsourcecode Document Management System edtlbls.php sql injectionitsourcecode Document Management System
- CVE-2026-3068itsourcecode Document Management System deluser.php sql injectionitsourcecode Document Management System
- CVE-2026-3067HummerRisk Archive Extraction CommandUtils.java extractZip path traversalHummerRisk
- CVE-2026-3066HummerRisk Cloud Compliance Scanning PlatformUtils.java fixedCommand command injectionHummerRisk
- CVE-2026-27461Pimcore vulnerable to SQL injection via unsanitized filter value in Dependency Dao RLIKE clausepimcore · pimcore/pimcore
- CVE-2026-27129Cloud Metadata SSRF Protection Bypass via IPv6 Resolutioncraftcms cms · craftcms/cms
- CVE-2026-27128Craft CMS's race condition in Token Service potentially allows for token usage greater than the token limitcraftcms cms · craftcms/cms
- CVE-2026-3065HummerRisk Cloud Task Dry-run CloudTaskService.java CommandUtils.commonExecCmdWithResult command injectionHummerRisk
- CVE-2026-3064HummerRisk Cloud Task Scheduler ResourceCreateService.java command injectionHummerRisk
- CVE-2026-3091An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read or write arbitrary Synology Presto Client
- CVE-2026-27126Craft CMS has Stored XSS in Table Field via "HTML" Column Typecraftcms cms · craftcms/cms
- CVE-2026-26981OpenEXR has heap-buffer-overflow via signed integer underflow in ImfContextInit.cppAcademySoftwareFoundation openexr · openexr
- CVE-2025-11848A null pointer dereference vulnerability in the Wake-on-LAN CGI program of the Zyxel VMG3625-T50B firmware version through 5.50(ABPM.9.6)C0 Zyxel VMG3625-T50B firmware · Zyxel WX3100-T0 firmware
- CVE-2025-11847A null pointer dereference vulnerability in the IP settings CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.6)C0Zyxel VMG3625-T50B firmware · Zyxel WX3100-T0 firmware
- CVE-2026-3057a54552239 pearProjectApi Backend Task.php dateTotalForProject sql injectiona54552239 pearProjectApi
- CVE-2026-3054Alinto SOGo cross site scriptingAlinto SOGo
- CVE-2026-26983ImageMagick: Invalid MSL <map> can result in a use after freeImageMagick · Magick.NET-Q16-AnyCPU +18
- CVE-2026-26284ImageMagick has heap overflow in pcd decoder that leads to out of bounds read.ImageMagick · Magick.NET-Q16-AnyCPU +18
- CVE-2026-26283ImageMagick has possible infinite loop in JPEG encoder when using `jpeg:extent`ImageMagick · Magick.NET-Q16-AnyCPU +18
- CVE-2026-26066ImageMagick has infinite loop when writing IPTCTEXT leads to denial of service via crafted profileImageMagick · Magick.NET-Q16-AnyCPU +18
- CVE-2026-25988ImageMagick's MSL image stack index not refreshed, leading to leaked images.ImageMagick · Magick.NET-Q16-AnyCPU +17
- CVE-2026-25987ImageMagick has heap buffer over-read in MAP image decoderImageMagick · Magick.NET-Q16-AnyCPU +18
- CVE-2026-25986ImageMagick has a heap buffer overflow in YUV 4:2:2 decoderImageMagick · Magick.NET-Q16-AnyCPU +18
- CVE-2026-25983ImageMagick has Use After Free in MSLStartElement in "coders/msl.c"ImageMagick · Magick.NET-Q16-AnyCPU +18
- CVE-2026-25982ImageMagick Has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)ImageMagick · Magick.NET-Q16-AnyCPU +18
- CVE-2026-25971ImageMagick's MSL: Stack overflow in ProcessMSLScriptImageMagick · Magick.NET-Q16-AnyCPU +18
- CVE-2025-11846A null pointer dereference vulnerability in the account settings CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9Zyxel VMG3625-T50B firmware · Zyxel WX3100-T0 firmware
- CVE-2026-25970ImageMagick SIXEL Decoder Has Signed Integer Overflow, Leading to Memory CorruptionImageMagick · Magick.NET-Q16-AnyCPU +18
- CVE-2026-25969ImageMagick has Memory Leak in coders/ashlar.cImageMagick · Magick.NET-Q16-AnyCPU +17
- CVE-2026-3053DataLinkDC dinky OpenAPI Endpoint AppConfig.java addInterceptors missing authenticationDataLinkDC dinky
- CVE-2026-3052DataLinkDC dinky Flink Proxy Controller FlinkProxyController.java proxyUba server-side request forgeryDataLinkDC dinky
- CVE-2025-11845A null pointer dereference vulnerability in the certificate downloader CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(Zyxel VMG3625-T50B firmware · Zyxel WX3100-T0 firmware
- CVE-2026-25966ImageMagick's Security Policy Bypass through config/policy-secure.xml via "fd handler" leads to stdin/stdout accessImageMagick · Magick.NET-Q16-AnyCPU +16
- CVE-2026-25898Imagemagick Has Global Buffer Overflow (OOB Read) via Negative Pixel Index in UIL and XPM WriterImageMagick · Magick.NET-Q16-AnyCPU +16
- CVE-2026-25897ImageMagick has heap overflow in sun decoder on 32-bit systems that can result in out of bounds writeImageMagick · Magick.NET-Q16-AnyCPU +18
- CVE-2026-25799ImageMagick has Division-by-Zero in YUV sampling factor validation, which leads to crashImageMagick · Magick.NET-Q16-AnyCPU +18
- CVE-2026-25798ImageMagick has NULL Pointer Dereference in ClonePixelCacheRepository via crafted imageImageMagick · Magick.NET-Q16-AnyCPU +17
- CVE-2026-3051DataLinkDC dinky Project Name GitRepository.java getProjectDir path traversalDataLinkDC dinky
- CVE-2026-3050horilla-opensource horilla Leads global.js cross site scriptinghorilla-opensource horilla
- CVE-2026-25797ImageMagick vulnerable to Code injection via PostScript header in ps codersImageMagick · Magick.NET-Q16-AnyCPU +17
- CVE-2026-25796ImageMagick has memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return pathsImageMagick · Magick.NET-Q16-AnyCPU +17
- CVE-2026-25795ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c)ImageMagick · Magick.NET-Q16-AnyCPU +17
- CVE-2026-25638ImageMagick has memory leak in msl encoderImageMagick · Magick.NET-Q16-AnyCPU +18
- CVE-2026-25637ImageMagick: Possible memory leak in ASHLAR encoderImageMagick · Magick.NET-Q16-AnyCPU +18
- CVE-2026-27729Astro has memory exhaustion DoS due to missing request body size limit in Server Actionswithastro astro · @astrojs/node
- CVE-2026-25576ImageMagick: Out of bounds read in multiple coders read raw pixel dataImageMagick · Magick.NET-Q16-AnyCPU +15
- CVE-2026-25545Astro has Full-Read SSRF in error rendering via Host: header injectionwithastro astro · @astrojs/node
- CVE-2026-3049horilla-opensource horilla Query Parameter global_search.py get redirecthorilla-opensource horilla
- CVE-2026-3046itsourcecode E-Logbook with Health Monitoring System for COVID-19 check_profile_old.php sql injectionitsourcecode E-Logbook with Health Monitoring System for CO…
- CVE-2026-24484ImageMagick: Converting multi-layer nested MVG to SVG can cause DoSImageMagick · Magick.NET-Q16-AnyCPU +18
- CVE-2026-21864Remote DoS from malformed RESTORE commandvalkey-io valkey-bloom
- CVE-2026-27643free5GC has improper error handling in NEF with information exposurefree5gc udr
- CVE-2026-27642free5GC has Improper Input Validation in UDM UEAU Servicefree5gc udm
- CVE-2026-26025free5GC SMF crash (nil pointer dereference) on PFCP SessionReportRequest when ReportType.USAR=1 and UsageReport omits mandatory URRID sub-IE free5gc smf
- CVE-2026-26024free5GC SMF crash (nil pointer dereference) on PFCP SessionReportRequest when ReportType.USAR=1 and UsageReport omits mandatory URRID sub-IE free5gc smf
- CVE-2026-25501free5GC SMF crash (nil pointer dereference) on PFCP SessionReportRequest when ReportType.DLDR is set but DownlinkDataReport IE is missingfree5gc smf
- CVE-2025-69253free5GC vulnerable to improper error handling in NEF with information exposurefree5gc udr
- CVE-2025-67445TOTOLINK X5000R V9.1.0cu.2415_B20250515 contains a denial-of-service vulnerability in /cgi-bin/cstecgi.cgi.