# CVEs published 2026-02-24

223 CVEs were published on February 24, 2026: 47 critical, 65 high. Days are UTC.

- [CVE-2026-3134](https://cve.now/CVE-2026-3134.md): itsourcecode News Portal Project edit-category.php sql injection (CVSS 6.9, itsourcecode News Portal Project)
- [CVE-2026-3133](https://cve.now/CVE-2026-3133.md): itsourcecode Document Management System Login loging.php sql injection (CVSS 6.9, itsourcecode Document Management System)
- [CVE-2026-26351](https://cve.now/CVE-2026-26351.md): GetSimpleCMS-CE \< 3.3.22 Stored XSS via components.php (CVSS 4.8, GetSimpleCMS-CE)
- [CVE-2026-27117](https://cve.now/CVE-2026-27117.md): bit7z has a path traversal vulnerability (CVSS 5.5, rikyoz bit7z)
- [CVE-2026-27593](https://cve.now/CVE-2026-27593.md): Statamic is vulnerable to account takeover via password reset link injection (CVSS 9.3, statamic cms · statamic/cms)
- [CVE-2026-27572](https://cve.now/CVE-2026-27572.md): Wasmtime can panic when adding excessive fields to a \`wasi:http/types.fields\` instance (CVSS 6.9, bytecodealliance wasmtime · wasmtime)
- [CVE-2026-27204](https://cve.now/CVE-2026-27204.md): Wasmtime WASI implementations are vulnerable to guest-controlled resource exhaustion (CVSS 6.9, bytecodealliance wasmtime · wasmtime)
- [CVE-2026-27195](https://cve.now/CVE-2026-27195.md): Wasmtime is vulnerable to panic when dropping a \`\[Typed\]Func::call\_async\` future (CVSS 6.9, bytecodealliance wasmtime · wasmtime)
- [CVE-2026-25899](https://cve.now/CVE-2026-25899.md): Fiber is Vulnerable to Denial of Service via Flash Cookie Unbounded Allocation (CVSS 7.5, gofiber fiber · github.com/gofiber/fiber/v3)
- [CVE-2026-25891](https://cve.now/CVE-2026-25891.md): Fiber has an Arbitrary File Read in Static Middleware on Windows (CVSS 7.7, gofiber fiber · github.com/gofiber/fiber/v3)
- [CVE-2026-25882](https://cve.now/CVE-2026-25882.md): Fiber has a Denial of Service Vulnerability via Route Parameter Overflow (CVSS 5.5, gofiber fiber · github.com/gofiber/fiber/v2 +1)
- [CVE-2026-22553](https://cve.now/CVE-2026-22553.md): InSAT MasterSCADA BUK-TS OS Command Injection (CVSS 9.8, InSAT MasterSCADA BUK-TS)
- [CVE-2026-21410](https://cve.now/CVE-2026-21410.md): InSAT MasterSCADA BUK-TS SQL Injection (CVSS 9.8, InSAT MasterSCADA BUK-TS)
- [CVE-2025-46320](https://cve.now/CVE-2025-46320.md): A cross-site scripting (XSS) vulnerability in a FileMaker WebDirect custom homepage could lead to unauthorized access and remote code execut (CVSS 6.1, Claris FileMaker Server)
- [CVE-2026-24443](https://cve.now/CVE-2026-24443.md): EventSentry \< 6.0.1.20 Web Reports Unverified Password Change (CVSS 8.6, NETIKUS.NET EventSentry)
- [CVE-2026-23859](https://cve.now/CVE-2026-23859.md): Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Client-Side Enforcement of Server-Side Security vulnerability. (CVSS 2.7, Dell Wyse Management Suite)
- [CVE-2026-23858](https://cve.now/CVE-2026-23858.md): Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site S (CVSS 5.4, Dell Wyse Management Suite)
- [CVE-2026-22766](https://cve.now/CVE-2026-22766.md): Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Unrestricted Upload of File with Dangerous Type vulnerability. (CVSS 7.2, Dell Wyse Management Suite)
- [CVE-2026-22765](https://cve.now/CVE-2026-22765.md): Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Missing Authorization vulnerability. (CVSS 8.8, Dell Wyse Management Suite)
- [CVE-2026-3131](https://cve.now/CVE-2026-3131.md): Improper access control in multiple DVLS REST API endpoints in Devolutions Server 2025.3.14.0 and earlier allows an authenticated user wit (CVSS 6.5, Devolutions Server)
- [CVE-2026-1768](https://cve.now/CVE-2026-1768.md): A permission cache poisoning vulnerability in Devolutions Server allows authenticated users to bypass permissions to access entries.This iss (CVSS 4.3, Devolutions Server)
- [CVE-2026-27477](https://cve.now/CVE-2026-27477.md): Mastodon has SSRF via unvalidated FASP Provider base\_url (CVSS 4.6, mastodon)
- [CVE-2025-1789](https://cve.now/CVE-2025-1789.md): Local privilege escalation in Genetec Update Service. (CVSS 5.8, Genetec Update Service)
- [CVE-2025-1787](https://cve.now/CVE-2025-1787.md): Local admin could to leak information from the Genetec Update Service configuration web page. (CVSS 5.8, Genetec Update Service)
- [CVE-2026-24241](https://cve.now/CVE-2026-24241.md): NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an attacker could exploit an improper authenti (CVSS 4.3, DLS component of NVIDIA License System)
- [CVE-2025-33181](https://cve.now/CVE-2025-33181.md): NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could inject a command. (CVSS 7.3, NVIDIA Cumulus Linux GA · NVIDIA Cumulus Linux LTS +1)
- [CVE-2025-33180](https://cve.now/CVE-2025-33180.md): NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could inject a command. (CVSS 8.0, NVIDIA Cumulus Linux GA · NVIDIA Cumulus Linux LTS +1)
- [CVE-2025-33179](https://cve.now/CVE-2025-33179.md): NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could run an unauthorized (CVSS 8.0, NVIDIA Cumulus Linux GA · NVIDIA Cumulus Linux LTS +1)
- [CVE-2026-26342](https://cve.now/CVE-2026-26342.md): Tattile Smart+ / Vega / Basic \<= 1.181.5 Insufficient Session Token Expiration (CVSS 8.7, Tattile s.r.l. Smart+ · Tattile s.r.l. Tolling+ +6)
- [CVE-2026-26341](https://cve.now/CVE-2026-26341.md): Tattile Smart+ / Vega / Basic \<= 1.181.5 Default Credentials (CVSS 9.3, Tattile s.r.l. Smart+ · Tattile s.r.l. Tolling+ +6)
- [CVE-2026-26340](https://cve.now/CVE-2026-26340.md): Tattile Smart+ / Vega / Basic \<= 1.181.5 Unauthenticated RTSP Stream Disclosure (CVSS 8.7, Tattile s.r.l. Smart+ · Tattile s.r.l. Tolling+ +6)
- [CVE-2026-3105](https://cve.now/CVE-2026-3105.md): SQL Injection in Contact Activity API Sorting (CVSS 7.6, Mautic · mautic/core)
- [CVE-2026-26222](https://cve.now/CVE-2026-26222.md): DocLink .NET Remoting Unauthenticated Arbitrary File Read/Write RCE (CVSS 10.0, Beyond Limits Altec DocLink)
- [CVE-2026-25603](https://cve.now/CVE-2026-25603.md): Path Traversal vulnerability in Linksys MR9600, Linksys MX4200 (CVSS 6.6, Linksys MR9600 · Linksys MX4200)
- [CVE-2026-27468](https://cve.now/CVE-2026-27468.md): Mastodon may allow unconfirmed FASP to make subscriptions (CVSS 4.8, mastodon)
- [CVE-2025-14963](https://cve.now/CVE-2025-14963.md): A vulnerability identified in the HX Agent driver file fekern.sys allowed a threat actor with local user access the ability to gain elevated (CVSS 6.2, Trellix Endpoint HX Agent)
- [CVE-2026-27156](https://cve.now/CVE-2026-27156.md): NiceGUI has XSS via Code Injection (CVSS 6.1, zauberzeug nicegui · nicegui)
- [CVE-2025-62512](https://cve.now/CVE-2025-62512.md): Piwigo Vulnerable to User Enumeration via Password Reset Endpoint (CVSS 5.5, Piwigo)
- [CVE-2024-48928](https://cve.now/CVE-2024-48928.md): Piwigo's secret key can be brute forced (CVSS 2.7, Piwigo)
- [CVE-2026-27590](https://cve.now/CVE-2026-27590.md): Caddy: Unicode case-folding length expansion causes incorrect split\_path index (SCRIPT\_NAME/PATH\_INFO confusion) in FastCGI transport (CVSS 8.9, caddyserver caddy · github.com/caddyserver/caddy/v2)
- [CVE-2026-27589](https://cve.now/CVE-2026-27589.md): Caddy vulnerable to cross-origin config application via local admin API /load (caddy) (CVSS 6.9, caddyserver caddy · github.com/caddyserver/caddy/v2)
- [CVE-2026-27588](https://cve.now/CVE-2026-27588.md): Caddy: MatchHost becomes case-sensitive for large host lists (\>100), enabling host-based route/auth bypass (CVSS 7.7, caddyserver caddy · github.com/caddyserver/caddy/v2)
- [CVE-2026-27587](https://cve.now/CVE-2026-27587.md): Caddy: MatchPath %xx (escaped-path) branch skips case normalization, enabling path-based route/auth bypass (CVSS 7.7, caddyserver caddy · github.com/caddyserver/caddy/v2)
- [CVE-2026-27586](https://cve.now/CVE-2026-27586.md): Caddy's mTLS client authentication silently fails open when CA certificate file is missing or malformed (CVSS 8.8, caddyserver caddy · github.com/caddyserver/caddy/v2)
- [CVE-2026-27585](https://cve.now/CVE-2026-27585.md): Caddy's improper sanitization of glob characters in file matcher may lead to bypassing security protections (CVSS 6.9, caddyserver caddy · github.com/caddyserver/caddy/v2)
- [CVE-2026-27571](https://cve.now/CVE-2026-27571.md): nats-server websockets are vulnerable to pre-auth memory DoS (CVSS 5.9, nats-io nats-server · github.com/nats-io/nats-server +1)
- [CVE-2025-13776](https://cve.now/CVE-2025-13776.md): Hard-coded database credentials in Finka software (CVSS 8.6, TIK-SOFT Finka-FK · TIK-SOFT Finka-KPR +4)
- [CVE-2025-47904](https://cve.now/CVE-2025-47904.md): Unsigned upgrade package (CVSS 5.7, Microchip Time Provider)
- [CVE-2026-27521](https://cve.now/CVE-2026-27521.md): Binardat 10G08-0800GSM Network Switch Missing Login Rate Limiting (CVSS 6.9, Binardat 10G08-0800GSM Network Switch)
- [CVE-2026-27520](https://cve.now/CVE-2026-27520.md): Binardat 10G08-0800GSM Network Switch Base64-encoded Password Stored in Cookie (CVSS 8.7, Binardat 10G08-0800GSM Network Switch)
- [CVE-2026-27519](https://cve.now/CVE-2026-27519.md): Binardat 10G08-0800GSM Network Switch Hard-coded RC4 Encryption Key (CVSS 8.7, Binardat 10G08-0800GSM Network Switch)
- [CVE-2026-27518](https://cve.now/CVE-2026-27518.md): Binardat 10G08-0800GSM Network Switch CSRF (CVSS 5.1, Binardat 10G08-0800GSM Network Switch)
- [CVE-2026-27517](https://cve.now/CVE-2026-27517.md): Binardat 10G08-0800GSM Network Switch XSS (CVSS 5.1, Binardat 10G08-0800GSM Network Switch)
- [CVE-2026-27516](https://cve.now/CVE-2026-27516.md): Binardat 10G08-0800GSM Network Switch Plaintext Password Exposure (CVSS 8.6, Binardat 10G08-0800GSM Network Switch)
- [CVE-2026-27515](https://cve.now/CVE-2026-27515.md): Binardat 10G08-0800GSM Network Switch Predictable Session Identifiers (CVSS 9.3, Binardat 10G08-0800GSM Network Switch)
- [CVE-2026-27507](https://cve.now/CVE-2026-27507.md): Binardat 10G08-0800GSM Network Switch Hard-coded Credentials (CVSS 9.3, Binardat 10G08-0800GSM Network Switch)
- [CVE-2026-23678](https://cve.now/CVE-2026-23678.md): Binardat 10G08-0800GSM Network Switch Traceroute CLI Command Injection (CVSS 8.7, Binardat 10G08-0800GSM Network Switch)
- [CVE-2026-27584](https://cve.now/CVE-2026-27584.md): ActualBudget server is Missing Authentication for SimpleFIN and Pluggy AI bank sync endpoints (CVSS 9.2, actualbudget actual · @actual-app/sync-server)
- [CVE-2026-0402](https://cve.now/CVE-2026-0402.md): A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall. (CVSS 4.9, SonicWall SonicOS)
- [CVE-2026-27732](https://cve.now/CVE-2026-27732.md): AVideo has Authenticated Server-Side Request Forgery via downloadURL in aVideoEncoder.json.php (CVSS 8.6, WWBN AVideo · wwbn/avideo)
- [CVE-2026-0401](https://cve.now/CVE-2026-0401.md): A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall. (CVSS 4.9, SonicWall SonicOS)
- [CVE-2026-0400](https://cve.now/CVE-2026-0400.md): A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall. (CVSS 4.9, SonicWall SonicOS)
- [CVE-2026-27568](https://cve.now/CVE-2026-27568.md): AVideo has Stored Cross-Site Scripting via Markdown Comment Injection (CVSS 5.1, WWBN AVideo · wwbn/avideo)
- [CVE-2026-0399](https://cve.now/CVE-2026-0399.md): Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to improper bounds checking (CVSS 4.9, SonicWall SonicOS)
- [CVE-2026-3102](https://cve.now/CVE-2026-3102.md): exiftool PNG File MacOS.pm SetMacOSTags os command injection (CVSS 5.3, exiftool)
- [CVE-2026-3101](https://cve.now/CVE-2026-3101.md): Intelbras TIP 635G Ping os command injection (CVSS 5.3, Intelbras TIP)
- [CVE-2026-27567](https://cve.now/CVE-2026-27567.md): Payload has Server-Side Request Forgery (SSRF) in External File URL Uploads (CVSS 6.5, payloadcms payload · payload)
- [CVE-2025-10010](https://cve.now/CVE-2025-10010.md): Integrity Validation Bypass in CryptoPro Secure Disk for BitLocker (CVSS 6.8, CPSD IT SERVICES CryptoPro Secure Disk for BitLocker)
- [CVE-2026-27483](https://cve.now/CVE-2026-27483.md): MindsDB has Path Traversal in /api/files Leading to Remote Code Execution (CVSS 8.8, mindsdb)
- [CVE-2026-27208](https://cve.now/CVE-2026-27208.md): api-gateway-deploy Affected by Exploitable Command Injection via Unprivileged Root Execution (CVSS 9.2, bleon-ethical api-gateway-deploy)
- [CVE-2026-2807](https://cve.now/CVE-2026-2807.md): Memory safety bugs fixed in Firefox 148 and Thunderbird 148 (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2806](https://cve.now/CVE-2026-2806.md): Uninitialized memory in the Graphics: Text component (CVSS 9.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2805](https://cve.now/CVE-2026-2805.md): Invalid pointer in the DOM: Core & HTML component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2804](https://cve.now/CVE-2026-2804.md): Use-after-free in the JavaScript: WebAssembly component (CVSS 5.4, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2803](https://cve.now/CVE-2026-2803.md): Information disclosure, mitigation bypass in the Settings UI component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2802](https://cve.now/CVE-2026-2802.md): Race condition in the JavaScript: GC component (CVSS 4.2, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2801](https://cve.now/CVE-2026-2801.md): Incorrect boundary conditions in the JavaScript: WebAssembly component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2800](https://cve.now/CVE-2026-2800.md): Spoofing issue in the WebAuthn component in Firefox for Android (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2799](https://cve.now/CVE-2026-2799.md): Use-after-free in the DOM: Core & HTML component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2798](https://cve.now/CVE-2026-2798.md): Use-after-free in the DOM: Core & HTML component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2797](https://cve.now/CVE-2026-2797.md): Use-after-free in the JavaScript: GC component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2796](https://cve.now/CVE-2026-2796.md): JIT miscompilation in the JavaScript: WebAssembly component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2795](https://cve.now/CVE-2026-2795.md): Use-after-free in the JavaScript: GC component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2794](https://cve.now/CVE-2026-2794.md): Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android (CVSS 6.5, Mozilla Firefox)
- [CVE-2026-2634](https://cve.now/CVE-2026-2634.md): Spoofed web content presented under trusted domains using scripted navigation on Firefox iOS (CVSS 9.8, Mozilla Firefox for iOS)
- [CVE-2026-2793](https://cve.now/CVE-2026-2793.md): Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2792](https://cve.now/CVE-2026-2792.md): Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2791](https://cve.now/CVE-2026-2791.md): Mitigation bypass in the Networking: Cache component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2790](https://cve.now/CVE-2026-2790.md): Same-origin policy bypass in the Networking: JAR component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2789](https://cve.now/CVE-2026-2789.md): Use-after-free in the Graphics: ImageLib component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2788](https://cve.now/CVE-2026-2788.md): Incorrect boundary conditions in the Audio/Video: GMP component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2787](https://cve.now/CVE-2026-2787.md): Use-after-free in the DOM: Window and Location component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2786](https://cve.now/CVE-2026-2786.md): Use-after-free in the JavaScript Engine component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2785](https://cve.now/CVE-2026-2785.md): Invalid pointer in the JavaScript Engine component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2784](https://cve.now/CVE-2026-2784.md): Mitigation bypass in the DOM: Security component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2783](https://cve.now/CVE-2026-2783.md): Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component (CVSS 6.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2782](https://cve.now/CVE-2026-2782.md): Privilege escalation in the Netmonitor component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2781](https://cve.now/CVE-2026-2781.md): Integer overflow in the Libraries component in NSS (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2780](https://cve.now/CVE-2026-2780.md): Privilege escalation in the Netmonitor component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2779](https://cve.now/CVE-2026-2779.md): Incorrect boundary conditions in the Networking: JAR component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2778](https://cve.now/CVE-2026-2778.md): Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component (CVSS 10.0, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2777](https://cve.now/CVE-2026-2777.md): Privilege escalation in the Messaging System component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2776](https://cve.now/CVE-2026-2776.md): Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software (CVSS 10.0, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2775](https://cve.now/CVE-2026-2775.md): Mitigation bypass in the DOM: HTML Parser component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2774](https://cve.now/CVE-2026-2774.md): Integer overflow in the Audio/Video component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2773](https://cve.now/CVE-2026-2773.md): Incorrect boundary conditions in the Web Audio component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2772](https://cve.now/CVE-2026-2772.md): Use-after-free in the Audio/Video: Playback component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2771](https://cve.now/CVE-2026-2771.md): Undefined behavior in the DOM: Core & HTML component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2770](https://cve.now/CVE-2026-2770.md): Use-after-free in the DOM: Bindings (WebIDL) component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2769](https://cve.now/CVE-2026-2769.md): Use-after-free in the Storage: IndexedDB component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2768](https://cve.now/CVE-2026-2768.md): Sandbox escape in the Storage: IndexedDB component (CVSS 10.0, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2767](https://cve.now/CVE-2026-2767.md): Use-after-free in the JavaScript: WebAssembly component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2766](https://cve.now/CVE-2026-2766.md): Use-after-free in the JavaScript Engine: JIT component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2765](https://cve.now/CVE-2026-2765.md): Use-after-free in the JavaScript Engine component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2764](https://cve.now/CVE-2026-2764.md): JIT miscompilation, use-after-free in the JavaScript Engine: JIT component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2763](https://cve.now/CVE-2026-2763.md): Use-after-free in the JavaScript Engine component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2762](https://cve.now/CVE-2026-2762.md): Integer overflow in the JavaScript: Standard Library component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2761](https://cve.now/CVE-2026-2761.md): Sandbox escape in the Graphics: WebRender component (CVSS 10.0, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2760](https://cve.now/CVE-2026-2760.md): Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVSS 10.0, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2759](https://cve.now/CVE-2026-2759.md): Incorrect boundary conditions in the Graphics: ImageLib component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2758](https://cve.now/CVE-2026-2758.md): Use-after-free in the JavaScript: GC component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2757](https://cve.now/CVE-2026-2757.md): Incorrect boundary conditions in the WebRTC: Audio/Video component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-2460](https://cve.now/CVE-2026-2460.md): A vulnerability exists in REB500 for an authenticated user with low-level privileges to access and alter the content of directories by using (CVSS 7.6, Hitachi Energy Relion REB500)
- [CVE-2026-2459](https://cve.now/CVE-2026-2459.md): A vulnerability exists in REB500 for an authenticated user with Installer role to access and alter the contents of directories that the role (CVSS 7.4, Hitachi Energy Relion REB500)
- [CVE-2025-14577](https://cve.now/CVE-2025-14577.md): PHP Function Injection in Slican NPC/IPL/IPM/IPU (CVSS 9.3, Slican NCP · Slican IPL +2)
- [CVE-2026-1773](https://cve.now/CVE-2026-1773.md): IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format frame. (CVSS 8.7, Hitachi Energy RTU500 series CMU firmware)
- [CVE-2026-1772](https://cve.now/CVE-2026-1772.md): RTU500 web interface: An unprivileged user can read user management information. (CVSS 5.3, Hitachi Energy RTU500 series CMU firmware)
- [CVE-2026-23969](https://cve.now/CVE-2026-23969.md): Apache Superset: Exposure of Sensitive Information via Incomplete ClickHouse Function Filtering (CVSS 5.3, Apache Software Foundation Apache Superset · apache-superset)
- [CVE-2026-23980](https://cve.now/CVE-2026-23980.md): Apache Superset: Improper Neutralization of Special Elements used in a SQL Command (CVSS 5.3, Apache Software Foundation Apache Superset · apache-superset)
- [CVE-2026-23982](https://cve.now/CVE-2026-23982.md): Apache Superset: Improper Authorization in Dataset Creation Allows Access Control Bypass (CVSS 7.1, Apache Software Foundation Apache Superset · apache-superset)
- [CVE-2026-23983](https://cve.now/CVE-2026-23983.md): Apache Superset: Sensitive Data Exposure via REST API (disabled by default) (CVSS 2.3, Apache Software Foundation Apache Superset · apache-superset)
- [CVE-2026-23984](https://cve.now/CVE-2026-23984.md): Apache Superset: SQLLab Read-Only Bypass on PostgreSQL (CVSS 7.1, Apache Software Foundation Apache Superset · apache-superset)
- [CVE-2025-27555](https://cve.now/CVE-2025-27555.md): Apache Airflow: Connection Secrets not masked in UI when Connection are added via Airflow cli (CVSS 6.5, Apache Software Foundation Apache Airflow · apache-airflow)
- [CVE-2026-2664](https://cve.now/CVE-2026-2664.md): Out of bounds read vulnerability in grpcfuse kernel module (CVSS 6.8, Docker Desktop)
- [CVE-2024-56373](https://cve.now/CVE-2024-56373.md): Apache Airflow: SSTI to Code Execution in Airflow through Shared DB Information (CVSS 8.4, Apache Software Foundation Apache Airflow · apache-airflow)
- [CVE-2024-1524](https://cve.now/CVE-2024-1524.md): A local user can be impersonated when using federated authentication with Silent JIT Provisioning. (CVSS 7.7, WSO2 API Manager · WSO2 Identity Server)
- [CVE-2025-11165](https://cve.now/CVE-2025-11165.md): A sandbox escape vulnerability exists in dotCMS’s Velocity scripting engine (VTools) that allows authenticated users with scripting privileg (CVSS 9.4, dotCMS)
- [CVE-2026-1229](https://cve.now/CVE-2026-1229.md): Incorrect calculation in CIRCL secp384r1 CombinedMult (CVSS 2.9, Cloudflare CIRCL · github.com/cloudflare/circl)
- [CVE-2025-40541](https://cve.now/CVE-2025-40541.md): SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Remote Code Execution Vulnerability (CVSS 9.1, SolarWinds Serv-U)
- [CVE-2025-40540](https://cve.now/CVE-2025-40540.md): SolarWinds Serv-U Type Confusion Remote Code Execution Vulnerability (CVSS 9.1, SolarWinds Serv-U)
- [CVE-2025-40539](https://cve.now/CVE-2025-40539.md): SolarWinds Serv-U Type Confusion Remote Code Execution Vulnerability (CVSS 9.1, SolarWinds Serv-U)
- [CVE-2025-40538](https://cve.now/CVE-2025-40538.md): SolarWinds Serv-U Broken Access Control Remote Code Execution Vulnerability (CVSS 9.1, SolarWinds Serv-U)
- [CVE-2025-15386](https://cve.now/CVE-2025-15386.md): Responsive Lightbox & Gallery \< 2.6.1 - Unauthenticated Stored XSS (CVSS 8.8, Responsive Lightbox & Gallery)
- [CVE-2025-15589](https://cve.now/CVE-2025-15589.md): MuYuCMS Template Management Template.php delete\_dir\_file path traversal (CVSS 5.1, MuYuCMS)
- [CVE-2026-24314](https://cve.now/CVE-2026-24314.md): Information Disclosure vulnerability in S/4HANA (Manage Payment Media) (CVSS 4.3, SAP\_SE S/4HANA)
- [CVE-2026-3070](https://cve.now/CVE-2026-3070.md): SourceCodester Modern Image Gallery App upload.php cross site scripting (CVSS 5.3, SourceCodester Modern Image Gallery App)
- [CVE-2026-3069](https://cve.now/CVE-2026-3069.md): itsourcecode Document Management System edtlbls.php sql injection (CVSS 6.9, itsourcecode Document Management System)
- [CVE-2026-3068](https://cve.now/CVE-2026-3068.md): itsourcecode Document Management System deluser.php sql injection (CVSS 6.9, itsourcecode Document Management System)
- [CVE-2026-3067](https://cve.now/CVE-2026-3067.md): HummerRisk Archive Extraction CommandUtils.java extractZip path traversal (CVSS 5.3, HummerRisk)
- [CVE-2026-3066](https://cve.now/CVE-2026-3066.md): HummerRisk Cloud Compliance Scanning PlatformUtils.java fixedCommand command injection (CVSS 5.3, HummerRisk)
- [CVE-2026-27461](https://cve.now/CVE-2026-27461.md): Pimcore vulnerable to SQL injection via unsanitized filter value in Dependency Dao RLIKE clause (CVSS 6.9, pimcore · pimcore/pimcore)
- [CVE-2026-1459](https://cve.now/CVE-2026-1459.md): A post-authentication command injection vulnerability in the TR-369 certificate download CGI program of the Zyxel VMG3625-T50B firmware vers (CVSS 7.2, Zyxel VMG3625-T50B firmware)
- [CVE-2026-27129](https://cve.now/CVE-2026-27129.md): Cloud Metadata SSRF Protection Bypass via IPv6 Resolution (CVSS 5.7, craftcms cms · craftcms/cms)
- [CVE-2026-27128](https://cve.now/CVE-2026-27128.md): Craft CMS's race condition in Token Service potentially allows for token usage greater than the token limit (CVSS 6.9, craftcms cms · craftcms/cms)
- [CVE-2026-27127](https://cve.now/CVE-2026-27127.md): Craft CMS has Cloud Metadata SSRF Protection Bypass via DNS Rebinding (CVSS 7.0, craftcms cms · craftcms/cms)
- [CVE-2025-13943](https://cve.now/CVE-2025-13943.md): A post-authentication command injection vulnerability in the log file download function of the Zyxel EX3301-T0 firmware versions through 5.5 (CVSS 8.8, Zyxel EX3301-T0 firmware)
- [CVE-2025-13942](https://cve.now/CVE-2025-13942.md): A command injection vulnerability in the UPnP function of the Zyxel EX3510-B0 firmware versions through 5.17(ABUP.15.1)C0 could allow a remo (CVSS 9.8, Zyxel EX3510-B0 firmware)
- [CVE-2026-3065](https://cve.now/CVE-2026-3065.md): HummerRisk Cloud Task Dry-run CloudTaskService.java CommandUtils.commonExecCmdWithResult command injection (CVSS 5.3, HummerRisk)
- [CVE-2026-3064](https://cve.now/CVE-2026-3064.md): HummerRisk Cloud Task Scheduler ResourceCreateService.java command injection (CVSS 5.3, HummerRisk)
- [CVE-2026-3091](https://cve.now/CVE-2026-3091.md): An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read or write arbitrary (CVSS 6.7, Synology Presto Client)
- [CVE-2026-27126](https://cve.now/CVE-2026-27126.md): Craft CMS has Stored XSS in Table Field via "HTML" Column Type (CVSS 5.9, craftcms cms · craftcms/cms)
- [CVE-2026-26981](https://cve.now/CVE-2026-26981.md): OpenEXR has heap-buffer-overflow via signed integer underflow in ImfContextInit.cpp (CVSS 6.5, AcademySoftwareFoundation openexr · openexr)
- [CVE-2026-26331](https://cve.now/CVE-2026-26331.md): yt-dlp: Arbitrary Command Injection when using the \`--netrc-cmd\` option (CVSS 8.8, yt-dlp)
- [CVE-2025-11848](https://cve.now/CVE-2025-11848.md): A null pointer dereference vulnerability in the Wake-on-LAN CGI program of the Zyxel VMG3625-T50B firmware version through 5.50(ABPM.9.6)C0 (CVSS 4.9, Zyxel VMG3625-T50B firmware · Zyxel WX3100-T0 firmware)
- [CVE-2025-11847](https://cve.now/CVE-2025-11847.md): A null pointer dereference vulnerability in the IP settings CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.6)C0 (CVSS 4.9, Zyxel VMG3625-T50B firmware · Zyxel WX3100-T0 firmware)
- [CVE-2026-26198](https://cve.now/CVE-2026-26198.md): ormar is vulnerable to SQL Injection through aggregate functions min() and max() (CVSS 9.8, collerek ormar · ormar)
- [CVE-2026-3057](https://cve.now/CVE-2026-3057.md): a54552239 pearProjectApi Backend Task.php dateTotalForProject sql injection (CVSS 5.3, a54552239 pearProjectApi)
- [CVE-2026-3054](https://cve.now/CVE-2026-3054.md): Alinto SOGo cross site scripting (CVSS 5.3, Alinto SOGo)
- [CVE-2026-26983](https://cve.now/CVE-2026-26983.md): ImageMagick: Invalid MSL \<map\> can result in a use after free (CVSS 5.3, ImageMagick · Magick.NET-Q16-AnyCPU +18)
- [CVE-2026-26284](https://cve.now/CVE-2026-26284.md): ImageMagick has heap overflow in pcd decoder that leads to out of bounds read. (CVSS 6.5, ImageMagick · Magick.NET-Q16-AnyCPU +18)
- [CVE-2026-26283](https://cve.now/CVE-2026-26283.md): ImageMagick has possible infinite loop in JPEG encoder when using \`jpeg:extent\` (CVSS 6.2, ImageMagick · Magick.NET-Q16-AnyCPU +18)
- [CVE-2026-26066](https://cve.now/CVE-2026-26066.md): ImageMagick has infinite loop when writing IPTCTEXT leads to denial of service via crafted profile (CVSS 6.2, ImageMagick · Magick.NET-Q16-AnyCPU +18)
- [CVE-2026-25989](https://cve.now/CVE-2026-25989.md): ImageMagick has integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder (CVSS 7.5, ImageMagick · Magick.NET-Q16-AnyCPU +18)
- [CVE-2026-25988](https://cve.now/CVE-2026-25988.md): ImageMagick's MSL image stack index not refreshed, leading to leaked images. (CVSS 5.3, ImageMagick · Magick.NET-Q16-AnyCPU +17)
- [CVE-2026-25987](https://cve.now/CVE-2026-25987.md): ImageMagick has heap buffer over-read in MAP image decoder (CVSS 5.3, ImageMagick · Magick.NET-Q16-AnyCPU +18)
- [CVE-2026-25986](https://cve.now/CVE-2026-25986.md): ImageMagick has a heap buffer overflow in YUV 4:2:2 decoder (CVSS 5.3, ImageMagick · Magick.NET-Q16-AnyCPU +18)
- [CVE-2026-25985](https://cve.now/CVE-2026-25985.md): Memory allocation with excessive without limits in the internal SVG decoder (CVSS 7.5, ImageMagick · Magick.NET-Q16-AnyCPU +18)
- [CVE-2026-25983](https://cve.now/CVE-2026-25983.md): ImageMagick has Use After Free in MSLStartElement in "coders/msl.c" (CVSS 5.3, ImageMagick · Magick.NET-Q16-AnyCPU +18)
- [CVE-2026-25982](https://cve.now/CVE-2026-25982.md): ImageMagick Has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage) (CVSS 6.5, ImageMagick · Magick.NET-Q16-AnyCPU +18)
- [CVE-2026-25971](https://cve.now/CVE-2026-25971.md): ImageMagick's MSL: Stack overflow in ProcessMSLScript (CVSS 6.2, ImageMagick · Magick.NET-Q16-AnyCPU +18)
- [CVE-2025-11846](https://cve.now/CVE-2025-11846.md): A null pointer dereference vulnerability in the account settings CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9 (CVSS 4.9, Zyxel VMG3625-T50B firmware · Zyxel WX3100-T0 firmware)
- [CVE-2026-25970](https://cve.now/CVE-2026-25970.md): ImageMagick SIXEL Decoder Has Signed Integer Overflow, Leading to Memory Corruption (CVSS 5.3, ImageMagick · Magick.NET-Q16-AnyCPU +18)
- [CVE-2026-25969](https://cve.now/CVE-2026-25969.md): ImageMagick has Memory Leak in coders/ashlar.c (CVSS 5.3, ImageMagick · Magick.NET-Q16-AnyCPU +17)
- [CVE-2026-3053](https://cve.now/CVE-2026-3053.md): DataLinkDC dinky OpenAPI Endpoint AppConfig.java addInterceptors missing authentication (CVSS 6.9, DataLinkDC dinky)
- [CVE-2026-3052](https://cve.now/CVE-2026-3052.md): DataLinkDC dinky Flink Proxy Controller FlinkProxyController.java proxyUba server-side request forgery (CVSS 5.3, DataLinkDC dinky)
- [CVE-2026-25968](https://cve.now/CVE-2026-25968.md): ImageMagick has MSL attribute stack buffer overflow that leads to out of bounds write. (CVSS 7.4, ImageMagick · Magick.NET-Q16-AnyCPU +18)
- [CVE-2025-11845](https://cve.now/CVE-2025-11845.md): A null pointer dereference vulnerability in the certificate downloader CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50( (CVSS 4.9, Zyxel VMG3625-T50B firmware · Zyxel WX3100-T0 firmware)
- [CVE-2026-25967](https://cve.now/CVE-2026-25967.md): ImageMagick has stack buffer overflow in FTXT reader via oversized integer field (CVSS 7.4, ImageMagick · Magick.NET-Q16-AnyCPU +17)
- [CVE-2026-25966](https://cve.now/CVE-2026-25966.md): ImageMagick's Security Policy Bypass through config/policy-secure.xml via "fd handler" leads to stdin/stdout access (CVSS 5.9, ImageMagick · Magick.NET-Q16-AnyCPU +16)
- [CVE-2026-25965](https://cve.now/CVE-2026-25965.md): ImageMagick's policy bypass through path traversal allows reading restricted content despite secured policy (CVSS 8.6, ImageMagick · Magick.NET-Q16-AnyCPU +18)
- [CVE-2026-25898](https://cve.now/CVE-2026-25898.md): Imagemagick Has Global Buffer Overflow (OOB Read) via Negative Pixel Index in UIL and XPM Writer (CVSS 6.5, ImageMagick · Magick.NET-Q16-AnyCPU +16)
- [CVE-2026-25897](https://cve.now/CVE-2026-25897.md): ImageMagick has heap overflow in sun decoder on 32-bit systems that can result in out of bounds write (CVSS 6.5, ImageMagick · Magick.NET-Q16-AnyCPU +18)
- [CVE-2026-25799](https://cve.now/CVE-2026-25799.md): ImageMagick has Division-by-Zero in YUV sampling factor validation, which leads to crash (CVSS 5.3, ImageMagick · Magick.NET-Q16-AnyCPU +18)
- [CVE-2026-25798](https://cve.now/CVE-2026-25798.md): ImageMagick has NULL Pointer Dereference in ClonePixelCacheRepository via crafted image (CVSS 5.3, ImageMagick · Magick.NET-Q16-AnyCPU +17)
- [CVE-2026-3051](https://cve.now/CVE-2026-3051.md): DataLinkDC dinky Project Name GitRepository.java getProjectDir path traversal (CVSS 5.3, DataLinkDC dinky)
- [CVE-2026-3050](https://cve.now/CVE-2026-3050.md): horilla-opensource horilla Leads global.js cross site scripting (CVSS 5.1, horilla-opensource horilla)
- [CVE-2026-25797](https://cve.now/CVE-2026-25797.md): ImageMagick vulnerable to Code injection via PostScript header in ps coders (CVSS 5.7, ImageMagick · Magick.NET-Q16-AnyCPU +17)
- [CVE-2026-25796](https://cve.now/CVE-2026-25796.md): ImageMagick has memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths (CVSS 5.3, ImageMagick · Magick.NET-Q16-AnyCPU +17)
- [CVE-2026-25795](https://cve.now/CVE-2026-25795.md): ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c) (CVSS 5.3, ImageMagick · Magick.NET-Q16-AnyCPU +17)
- [CVE-2026-25794](https://cve.now/CVE-2026-25794.md): ImageMagick has heap-buffer-overflow via signed integer overflow in \`WriteUHDRImage\` when writing UHDR images with large dimensions (CVSS 8.2, ImageMagick · Magick.NET-Q16-AnyCPU +18)
- [CVE-2026-25638](https://cve.now/CVE-2026-25638.md): ImageMagick has memory leak in msl encoder (CVSS 5.3, ImageMagick · Magick.NET-Q16-AnyCPU +18)
- [CVE-2026-25637](https://cve.now/CVE-2026-25637.md): ImageMagick: Possible memory leak in ASHLAR encoder (CVSS 5.3, ImageMagick · Magick.NET-Q16-AnyCPU +18)
- [CVE-2026-27729](https://cve.now/CVE-2026-27729.md): Astro has memory exhaustion DoS due to missing request body size limit in Server Actions (CVSS 5.9, withastro astro · @astrojs/node)
- [CVE-2026-25802](https://cve.now/CVE-2026-25802.md): New API has Potential XSS in its MarkdownRenderer component (CVSS 7.6, QuantumNous new-api · github.com/QuantumNous/new-api)
- [CVE-2026-25591](https://cve.now/CVE-2026-25591.md): New API has an SQL LIKE Wildcard Injection DoS via Token Search (CVSS 7.1, QuantumNous new-api · github.com/QuantumNous/new-api)
- [CVE-2026-25576](https://cve.now/CVE-2026-25576.md): ImageMagick: Out of bounds read in multiple coders read raw pixel data (CVSS 5.1, ImageMagick · Magick.NET-Q16-AnyCPU +15)
- [CVE-2026-25545](https://cve.now/CVE-2026-25545.md): Astro has Full-Read SSRF in error rendering via Host: header injection (CVSS 6.9, withastro astro · @astrojs/node)
- [CVE-2026-24485](https://cve.now/CVE-2026-24485.md): ImageMagick: Infinite loop vulnerability when parsing a PCD file (CVSS 7.5, ImageMagick · Magick.NET-Q16-AnyCPU +18)
- [CVE-2026-3049](https://cve.now/CVE-2026-3049.md): horilla-opensource horilla Query Parameter global\_search.py get redirect (CVSS 5.3, horilla-opensource horilla)
- [CVE-2026-3046](https://cve.now/CVE-2026-3046.md): itsourcecode E-Logbook with Health Monitoring System for COVID-19 check\_profile\_old.php sql injection (CVSS 6.9, itsourcecode E-Logbook with Health Monitoring System for CO…)
- [CVE-2026-24484](https://cve.now/CVE-2026-24484.md): ImageMagick: Converting multi-layer nested MVG to SVG can cause DoS (CVSS 5.3, ImageMagick · Magick.NET-Q16-AnyCPU +18)
- [CVE-2026-24481](https://cve.now/CVE-2026-24481.md): ImageMagick has Possible Heap Information Disclosure in PSD ZIP Decompression (CVSS 7.5, ImageMagick · Magick.NET-Q16-AnyCPU +16)
- [CVE-2026-21864](https://cve.now/CVE-2026-21864.md): Remote DoS from malformed RESTORE command (CVSS 6.5, valkey-io valkey-bloom)
- [CVE-2026-27643](https://cve.now/CVE-2026-27643.md): free5GC has improper error handling in NEF with information exposure (CVSS 6.6, free5gc udr)
- [CVE-2026-27642](https://cve.now/CVE-2026-27642.md): free5GC has Improper Input Validation in UDM UEAU Service (CVSS 6.6, free5gc udm)
- [CVE-2026-26025](https://cve.now/CVE-2026-26025.md): free5GC SMF crash (nil pointer dereference) on PFCP SessionReportRequest when ReportType.USAR=1 and UsageReport omits mandatory URRID sub-IE  (CVSS 6.6, free5gc smf)
- [CVE-2026-26024](https://cve.now/CVE-2026-26024.md): free5GC SMF crash (nil pointer dereference) on PFCP SessionReportRequest when ReportType.USAR=1 and UsageReport omits mandatory URRID sub-IE  (CVSS 6.6, free5gc smf)
- [CVE-2026-25501](https://cve.now/CVE-2026-25501.md): free5GC SMF crash (nil pointer dereference) on PFCP SessionReportRequest when ReportType.DLDR is set but DownlinkDataReport IE is missing (CVSS 6.6, free5gc smf)
- [CVE-2025-9120](https://cve.now/CVE-2025-9120.md): RCE vulnerability has been discovered in OpenText™ Carbonite Safe Server Backup. (CVSS 8.6, OpenText™ Carbonite Safe Server Backup)
- [CVE-2025-69253](https://cve.now/CVE-2025-69253.md): free5GC vulnerable to improper error handling in NEF with information exposure (CVSS 6.6, free5gc udr)
- [CVE-2025-63409](https://cve.now/CVE-2025-63409.md): Privilege escalation and improper access control in GCOM EPON 1GE C00R371V00B01 allows remote authenticated users to modify administrator on (CVSS 8.8)
- [CVE-2025-67445](https://cve.now/CVE-2025-67445.md): TOTOLINK X5000R V9.1.0cu.2415\_B20250515 contains a denial-of-service vulnerability in /cgi-bin/cstecgi.cgi. (CVSS 6.5)
- [CVE-2025-69985](https://cve.now/CVE-2025-69985.md): FUXA 1.2.8 and prior contains an Authentication Bypass vulnerability leading to Remote Code Execution (RCE). (CVSS 9.8, @frangoteam/fuxa)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-02-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.