CVEs published February 25, 2026
236 CVEs were published on February 25, 2026: 37 critical, 81 high. 5 are now in CISA KEV.
- Published
- 236
- Critical
- 37
- High
- 81
- Medium
- 106
- Low
- 12
- Unrated
- 0
- Now in CISA KEV
- 5
- Fix available
- 167
Most affected products
- openemr
- 24
- FreeRDP
- 15
- GitLab
- 9
- n8n-io n8n · n8n
- 7
- Cisco Catalyst SD-WAN Manager
- 6
- rucio · rucio-webui
- 6
- feiyuchuixue sz-boot-parent
- 5
- Linksys MR9600 · Linksys MX4200
- 5
- Tenda F453
- 5
- go-vikunja vikunja · code.vikunja.io/api
- 4
Critical 37
- CVE-2026-27804Parse Server: Account takeover via JWT algorithm confusion in Google auth adapterparse-community parse-server · parse-server
- CVE-2026-27613CGI Parameter Injection (Bypass of STRICT_CGI_PARAMS and EscapeShellParam)maximmasiutin TinyWeb
- CVE-2026-27498n8n has Arbitrary Command Execution via File Write and Git Operationsn8n-io n8n · n8n
- CVE-2026-27577n8n: Expression Sandbox Escape Leads to RCEn8n-io n8n · n8n
- CVE-2026-27497n8n has Potential Remote Code Execution via Merge Noden8n-io n8n · n8n
- CVE-2026-27495n8n has a Sandbox Escape in its JavaScript Task Runnern8n-io n8n · n8n
- CVE-2026-27493n8n has Unauthenticated Expression Evaluation via Form Noden8n-io n8n · n8n
- CVE-2026-27575Vijkunja has Weak Password Policy Combined with Persistent Sessions After Password Changego-vikunja vikunja · code.vikunja.io/api
- CVE-2026-0542Remote Code Execution in ServiceNow AI PlatformServiceNow AI Platform
- CVE-2026-24908OpenEMR has SQL Injection in Patient API Sort Parameteropenemr
- CVE-2026-21902Junos OS Evolved: PTX Series: A vulnerability allows a unauthenticated, network-based attacker to execute code as rootJuniper Networks Junos OS Evolved
- CVE-2026-27739Angular SSR is vulnerable to SSRF and Header Injection via request handling pipelineangular-cli · angular @nguniversal/common +4
- CVE-2026-27728OneUptime: OS Command Injection in Probe NetworkPathMonitor via unsanitized destination in traceroute exec()oneuptime · @oneuptime/common
- CVE-2026-27849Missing neutralization in Linksys MR9600, Linksys MX4200Linksys MR9600 · Linksys MX4200
- CVE-2026-20127Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityCisco Catalyst SD-WAN Manager
- CVE-2026-20129Cisco Catayst SD-WAN Authentication Bypass VulnerabilityCisco Catalyst SD-WAN Manager
- CVE-2025-1242Administrative Credentials Can Be Extracted Through Gardyn API ResponsesGardyn Home Kit
- CVE-2026-27848Missing neutralization in Linksys MR9600, Linksys MX4200Linksys MR9600 · Linksys MX4200
- CVE-2026-27702Budibase Vulnerable to Remote Code Execution via Unsafe eval() in View Filter Map Function (Budibase Cloud)budibase
- CVE-2026-27847Missing authentication in Linksys MR9600, Linksys MX4200Linksys MR9600 · Linksys MX4200
- CVE-2026-27699Basic FTP has Path Traversal Vulnerability in its downloadToDir() methodpatrickjuchli basic-ftp · basic-ftp
- CVE-2026-2624Authentication Bypass in ePati's Antikor NGFWePati Cyber Security Technologies Antikor Next Generation…
- CVE-2025-62878Local Path Provisioner vulnerable to Path Traversal via parameters.pathPatternSUSE Rancher · github.com/rancher/local-path-provisioner
- CVE-2026-25785Path traversal vulnerability exists in Lanscope Endpoint Manager (On-Premises) Sub-Manager Server Ver.9.4.7.3 and earlier, which may allow aMOTEX Lanscope Endpoint Manager (On-Premises) Sub-Manager S…
- CVE-2026-3179A path traversal vulnerability was found in the FTP Backup on the ADM.ASUSTOR ADM
- CVE-2026-27597@enclave-vm/core is vulnerable to Sandbox Escapeagentfront enclave · @enclave-vm/core
- CVE-2026-27641Flask-Reuploaded vulnerable to Remote Code Execution via Server-Side Template Injectionjugmac00 flask-reuploaded · flask-reuploaded
- CVE-2026-27637FreeScout's Predictable Authentication Token Enables Account Takeoverfreescout-help-desk freescout
- CVE-2026-27743SPIP referer_spam < 1.3.0 Unauthenticated SQL InjectionSPIP referer_spam
- CVE-2026-27744SPIP tickets < 4.3.3 Unauthenticated RCESPIP tickets
- CVE-2026-27626OliveTin vulnerable to OS Command Injection via `password` argument type and webhook JSON extraction bypasses shell safety checksOliveTin · github.com/OliveTin/OliveTin
- CVE-2026-27614Bugsink is vulnerable to Stored XSS via Pygments fallback in stacktrace renderingbugsink
- CVE-2026-27595Parse Dashboard has incomplete authentication on AI Agent endpointparse-community parse-dashboard · parse-dashboard
- CVE-2026-27608Parse Dashboard Missing Authorization on Agent Endpointparse-community parse-dashboard · parse-dashboard
- CVE-2026-27822Rust has Critical Stored XSS in Preview Modal, leading to Administrative Account Takeoverrustfs
- CVE-2026-24849OpenEMR Arbitrary File Read Vulnerabilityopenemr
- CVE-2025-69771Cross-Site Scripting (XSS) vulnerability in the subtitle loading function of the asbplayer Chrome Extension version 1.14.0 allows attackers
High 81
- CVE-2026-27976Zed Extension Sandbox Escape via Tar Symlink Followingzed-industries zed
- CVE-2026-27967Symlink Escape in Agent File Toolszed-industries zed
- CVE-2026-27800Zed has Zip Slip Path Traversal in Extension Archive Extractionzed-industries zed
- CVE-2026-27635Manyfold vulnerable to OS command injection via ZIP filename in f3d rendermanyfold3d manyfold
- CVE-2026-27633TinyWeb has Unbounded Content-Length Memory Exhaustion (DoS)maximmasiutin TinyWeb
- CVE-2026-27630TinyWeb vulnerable to Remote Denial of Service via Thread/Connection Exhaustion (Slowloris)maximmasiutin TinyWeb
- CVE-2026-27578n8n Vulnerable to Stored XSS via Various Nodesn8n-io n8n · n8n
- CVE-2026-27494n8n has Arbitrary File Read via Python Code Node Sandbox Escapen8n-io n8n · n8n
- CVE-2026-27148Storybook Dev Server Vulnerable to WebSocket Hijackingstorybookjs storybook · storybook
- CVE-2026-27819Vikunja has Path Traversal in CLI Restorego-vikunja vikunja · code.vikunja.io/api
- CVE-2026-27616Vikunja Vulnerable to Stored Cross-Site Scripting (XSS) via Unsanitized SVG Attachment Upload Leading to Token Exposurego-vikunja vikunja · code.vikunja.io/api
- CVE-2026-26985LORIS vulnerable to path traversal in electrophysiology_browseraces Loris
- CVE-2026-26984LORIS media module vulnerable to remote code executionaces Loris
- CVE-2026-26965FreeRDP has Out-of-bounds WriteFreeRDP
- CVE-2026-3172pgvector buffer overflow in parallel HNSW index buildpgvector
- CVE-2026-26955FreeRDP has Out-of-bounds WriteFreeRDP
- CVE-2025-14511Improper Validation of Specified Quantity in Input in GitLabGitLab
- CVE-2026-0752Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabGitLab
- CVE-2026-1388Inefficient Regular Expression Complexity in GitLabGitLab
- CVE-2026-1662Allocation of Resources Without Limits or Throttling in GitLabGitLab
- CVE-2026-22720VMware Aria Operations stored cross-site scripting vulnerabilityVMware Aria Operations · VMware Cloud Foundation Operati… +2
- CVE-2026-25733Rucio WebUI Vulnerable to Stored Cross-site Scripting (XSS) through Custom Rule Functionrucio · rucio-webui
- CVE-2026-22719VMware Aria Operations command injection vulnerabilityVMware Aria Operations · VMware Cloud Foundation Operati… +2
- CVE-2026-25136Rucio WebUI has a Reflected Cross-site Scripting Vulnerabilityrucio · rucio-webui
- CVE-2026-25927OpenEMR Missing Authorization Checks in DICOM Viewer State APIopenemr
- CVE-2026-25746OpenEMR has SQL Injection Vulnerabilityopenemr
- CVE-2026-25743OpenEMR has Stored XSS in Questionnaire answersopenemr
- CVE-2026-25476OpenEMR has Session Timeout Bypass via skip_timeout_resetopenemr
- CVE-2026-25164OpenEMR's Document and Insurance REST Endpoints Skip ACLopenemr
- CVE-2026-24890OpenEMR Portal Users Can Forge Provider Signaturesopenemr
- CVE-2026-23627OpenEMR has SQL Injection in Immunization Search/Reportopenemr
- CVE-2026-27850Improper verification in Linksys MR9600, Linksys MX4200Linksys MR9600 · Linksys MX4200
- CVE-2026-25554OpenSIPS 3.1 <= 3.6.4 auth_jwt SQL Injection Enables JWT Authentication BypassOpenSIPS
- CVE-2026-20033Cisco NX-OS Software Denial of Service VulnerabilityCisco NX-OS System Software in ACI Mode
- CVE-2026-20048Cisco NX-OS Software SNMP Denial of Service VulnerabilityCisco NX-OS System Software in ACI Mode
- CVE-2026-20010Cisco Nexus 3000 and 9000 Series Switches Link Layer Discovery Protocol Denial of Service VulnerabilityCisco NX-OS Software · Cisco NX-OS System Software in AC… +1
- CVE-2026-20051Cisco Nexus 3600-R and 9500-R Series Switching Platforms Layer 2 Loop Denial of Service VulnerabilityCisco NX-OS Software
- CVE-2026-20128Cisco Catalyst SD-WAN Manager Information Disclosure VulnerabilityCisco Catalyst SD-WAN Manager
- CVE-2026-20126Cisco Catalyst SD-WAN Manager Privilege Escalation VulnerabilityCisco Catalyst SD-WAN Manager
- CVE-2026-27727mchange-commons-java: Remote Code Execution via JNDI Reference Resolutionswaldman mchange-commons-java · com.mchange:mchange-commons…
- CVE-2026-27706Plane Vulnerable to Full Read SSRF via Favicon Fetching in "Add Link" Featuremakeplane plane
- CVE-2026-27730esm.sh has SSRF localhost/private-network bypass in `/http(s)` module routeesm-dev esm.sh · github.com/esm-dev/esm.sh
- CVE-2025-50180esm.sh is vulnerable to full-response SSRFesm-dev esm.sh · github.com/esm-dev/esm.sh
- CVE-2026-27701LiveCodes vulnerable to JavaScript Injection via untrusted PR title in i18n-update-pull workflowlive-codes livecodes
- CVE-2026-27700Hono is Vulnerable to Authentication Bypass by IP Spoofing in AWS Lambda ALB conninfohonojs hono · hono
- CVE-2026-27692iccDEV has HBO in CIccTagTextDescription::Release()InternationalColorConsortium iccDEV
- CVE-2026-28193In JetBrains YouTrack before 2025.3.121962 apps were able to send requests to the app permissions endpointJetBrains YouTrack
- CVE-2026-25701An Insecure Temporary File vulnerability in openSUSE sdbootutil allows local users to pre-create a directory to achieve various effects likeopenSUSE sdbootutil
- CVE-2025-67601Rancher CLI skips TLS verification on Rancher CLI login commandSUSE rancher · github.com/rancher/rancher
- CVE-2026-26103Udisks: missing authorization check allows unprivileged users to restore luks headers via udisks d-bus apiRed Hat Enterprise Linux
- CVE-2026-1929Advanced Woo Labels <= 2.37 - Authenticated (Contributor+) Remote Code Execution via 'callback' Parametermihail-barinov Advanced Woo Labels – Product Labels & Badge…
- CVE-2026-2416Geo Mashup <= 1.13.17 - Unauthenticated SQL Injection via 'sort' Parametercyberhobo Geo Mashup
- CVE-2026-1916WPGSI: Spreadsheet Integration <= 3.8.3 - Missing Authorization to Unauthenticated Arbitrary Post Creation and Deletion via Forged Base64 Tokenjavmah WPGSI: Spreadsheet Integration
- CVE-2026-3169Tenda F453 httpd SafeEmailFilter fromSafeEmailFilter buffer overflowTenda F453
- CVE-2026-3168Tenda F453 httpd NatStaticSetting fromNatStaticSetting buffer overflowTenda F453
- CVE-2026-3167Tenda F453 httpd webtypelibrary formWebTypeLibrary buffer overflowTenda F453
- CVE-2026-3166Tenda F453 httpd RouteStatic fromRouteStatic buffer overflowTenda F453
- CVE-2026-3165Tenda F453 httpd AdvSetWrlsafeset fromSetWifiGusetBasic buffer overflowTenda F453
- CVE-2026-3100An improper certificate validation vulnerability was found in the FTP Backup on the ADM.ASUSTOR ADM
- CVE-2026-27696changedetection.io Vulnerable to Server-Side Request Forgery (SSRF) via Watch URLsdgtlmoon changedetection.io · changedetection-io
- CVE-2026-27624Coturn: IPv4-mapped IPv6 (::ffff:0:0/96) bypasses denied-peer-ip ACLcoturn
- CVE-2026-27640tfplan2md has Sensitive Value Exposure in Generated Reportsoocx tfplan2md
- CVE-2026-27627Karakeep's Reddit plugin content bypasses DOMPurify sanitization, enabling stored XSSkarakeep-app karakeep
- CVE-2026-27639Mercator vulnerable to stored XSS via unescaped Blade directives in display templatesdbarzin mercator
- CVE-2026-27636FreeScout: Missing .htaccess in Restricted File Extensions Allows Remote Code Execution on Apachefreescout-help-desk freescout
- CVE-2026-27745SPIP interface_traduction_objets < 2.2.2 Authenticated RCESPIP interface_traduction_objets
- CVE-2026-27747SPIP interface_traduction_objets < 2.2.2 Authenticated SQL InjectionSPIP interface_traduction_objets
- CVE-2026-27615ADB-Explorer: UNC Path Support in ManualAdbPath Leads to Remote Code Execution (RCE)Alex4SSB ADB-Explorer
- CVE-2026-27611FileBrowser Quantum: Password Protection Not Enforced on Shared File Linksgtsteffaniak filebrowser · github.com/gtsteffaniak/filebrow…
- CVE-2026-27610Parse Dashboard Has a Cache Key Collision that Leaks Master Key to Read-Only Sessionsparse-community parse-dashboard · parse-dashboard
- CVE-2026-27609Parse Dashboard Missing CSRF Protection on Agent Endpointparse-community parse-dashboard · parse-dashboard
- CVE-2026-27607RustFS's Missing Post Policy Validation leads to Arbitrary Object Writerustfs
- CVE-2026-27606Rollup 4 has Arbitrary File Write via Path Traversalrollup
- CVE-2026-25131OpenEMR has Broken Access Control in Procedures Configurationopenemr
- CVE-2026-25127OpenEMR has Broken Access Control on Care Coordination Moduleopenemr
- CVE-2026-2914CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized privilege elevation leveraging CyberArk elCyberArk Software, a Palo Alto Networks Company Endpoint Pr…
- CVE-2025-69231OpenEMR has a Stored XSS in GAD-7 Form that Enables Session Hijacking and Privilege Escalationopenemr
- CVE-2025-68277OpenEMR allows links sent via Secure Messaging to be opened in OpenEMR and Portalopenemr
- CVE-2025-67752OpenEMR Has Disabled SSL Certificate Verification in HTTP Clientopenemr
- CVE-2025-67491OpenEMR has Stored XSS in ub04 helperopenemr
- CVE-2026-27598Dagu: Path traversal in DAG creation allows arbitrary YAML file write outside DAGs directorydagu-org dagu · github.com/dagu-org/dagu
Medium, low and unrated 118
- CVE-2026-27809psd-tools: Compression module has unguarded zlib decompression, missing dimension validation, and hardening gapspsd-tools
- CVE-2026-27808Mailpit is Vulnerable to Server-Side Request Forgery (SSRF) via Link Check APIaxllent mailpit · github.com/axllent/mailpit
- CVE-2026-27735mcp-server-git : Path traversal in git_add allows staging files outside repository boundariesmodelcontextprotocol servers · mcp-server-git
- CVE-2026-27711NanaZip UFS Archive Parser Memory Corruption via Unvalidated Directory Record LengthM2Team NanaZip
- CVE-2026-27710NanaZip .NET Single-File Parser Integer Underflow Leads to Unbounded Allocation (DoS)M2Team NanaZip
- CVE-2026-27709NanaZip .NET Single-File Manifest Parser Vulnerable to Out-of-Bounds Read via Unchecked RelativePathLengthM2Team NanaZip
- CVE-2026-27799ImageMagick has a heap Buffer Over-read in its DJVU image format handlerImageMagick · Magick.NET-Q16-AnyCPU +18
- CVE-2026-27798ImageMagick: Heap Buffer Over-read in WaveletDenoise when processing small imagesImageMagick · Magick.NET-Q16-AnyCPU +18
- CVE-2026-27933Manyfold vulnerable to session hijack via cookie leakage in proxy cachesmanyfold3d manyfold
- CVE-2026-3209fosrl Pangolin Role verifyApiKeyRoleAccess access controlfosrl Pangolin
- CVE-2026-27116Vikunja has Reflected HTML Injection via filter Parameter in Projects Modulego-vikunja vikunja · code.vikunja.io/api
- CVE-2026-2694The Events Calendar <= 6.15.16 - Improper Authorization to Authenticated (Contributor+) Event/Organizer/Venue Update/Trash via REST APIstellarwp The Events Calendar
- CVE-2026-27951FreeRDP has possible Integer overflow in Stream_EnsureCapacityFreeRDP
- CVE-2026-27950FreeRDP heap-use-after-free in update_pointer_new(SDL): Fix Applied in the Wrong FileFreeRDP
- CVE-2026-26986FreeRDP has heap-use-after-free in rail_window_freeFreeRDP
- CVE-2026-27015FreeRDP: Smartcard NDR Alignment Padding Triggers Reachable WINPR_ASSERT Abort (Client DoS)FreeRDP
- CVE-2026-26271Buffer Overread in FreeRDP Icon ProcessingFreeRDP
- CVE-2026-25997FreeRDP has heap-use-after-free in xf_clipboard_format_equalFreeRDP
- CVE-2026-25959FreeRDP has heap-use-after-free in xf_cliprdr_provide_data_FreeRDP
- CVE-2026-25955FreeRDP has heap-use-after-free in xf_AppUpdateWindowFromSurface (stale XImage)FreeRDP
- CVE-2026-25954FreeRDP has heap-use-after-free in xf_rail_server_local_move_sizeFreeRDP
- CVE-2026-25953FreeRDP has heap-use-after-free in xf_AppUpdateWindowFromSurface (freed appWindow)FreeRDP
- CVE-2026-25952FreeRDP has heap-use-after-free in xf_SetWindowMinMaxInfoFreeRDP
- CVE-2026-1747Authentication Bypass Using an Alternate Path or Channel in GitLabGitLab
- CVE-2026-1725Allocation of Resources Without Limits or Throttling in GitLabGitLab
- CVE-2026-2845Allocation of Resources Without Limits or Throttling in GitLabGitLab
- CVE-2026-3200z-9527 admin user.js getUsers sql injectionz-9527 admin
- CVE-2026-25942FreeRDP has global-buffer-overflow in xf_rail_server_execute_resultFreeRDP
- CVE-2026-22721VMware Aria Operations privilege escalation vulnerabilityVMware Aria Operations · VMware Cloud Foundation +2
- CVE-2026-25941FreeRDP: vuln_1_15_1 RDPGFX WIRE_TO_SURFACE_2 Out-of-Bounds ReadFreeRDP
- CVE-2026-25736Rucio WebUI has a Stored Cross-site Scripting (XSS) Vulnerability in its Custom RSE Attributerucio · rucio-webui
- CVE-2026-25735Rucio WebUI has a Stored Cross-site Scripting (XSS) vulnerability its Identity Namerucio · rucio-webui
- CVE-2025-3525Allocation of Resources Without Limits or Throttling in GitLabGitLab
- CVE-2026-25734Rucio WebUI has Stored Cross-site Scripting (XSS) in RSE Metadatarucio · rucio-webui
- CVE-2025-14103Missing Authorization in GitLabGitLab
- CVE-2026-25138Rucio WebUI has Username Enumeration via Login Error Messagerucio · rucio-webui
- CVE-2026-2636Denial of Service in Microsoft OSMicrosoft Windows OS
- CVE-2026-24005OpenKruise PodProbeMarker is Vulnerable to SSRF via Unrestricted Host Fieldopenkruise kruise · github.com/openkruise/kruise
- CVE-2026-25930OpenEMR's Printable LBF Endpoint Leaks Arbitrary Patient Formsopenemr
- CVE-2026-25929OpenEMR Patient Picture Context Allows Arbitrary Patient Photo Retrievalopenemr
- CVE-2026-3221Sensitive user account information is not encrypted in the database in Devolutions Server 2025.3.14 and earlier, which allows an attacker wDevolutions Server
- CVE-2026-25220OpenEMR Messages "Show All" Not Restricted to Adminsopenemr
- CVE-2026-24487OpenEMR has FHIR Patient Compartment Bypass in CareTeam Resourceopenemr
- CVE-2026-27795LangChain Community: redirect chaining can lead to SSRF bypass via RecursiveUrlLoaderlangchain-ai langchainjs · @langchain/community
- CVE-2026-3194Chia Blockchain RPC Server Master Passphrase get_private_key missing authenticationChia Blockchain
- CVE-2026-27794LangGraph: BaseCache Deserialization of Untrusted Data may lead to Remote Code Executionlangchain-ai langgraph-checkpoint · langgraph-checkpoint
- CVE-2026-27738Angular SSR has an Open Redirect via X-Forwarded-Prefixangular-cli · @angular/ssr
- CVE-2026-3193Chia Blockchain send_transaction cross-site request forgeryChia Blockchain
- CVE-2026-27736BigBlueButton has Open Redirect vulnerability in ApiControllerbigbluebutton
- CVE-2026-20099Cisco UCS Manager and FXOS Software Command Injection VulnerabilityCisco Firepower Extensible Operating System · Cisco Secu… +1
- CVE-2026-20091Cisco UCS Manager and FXOS Software Stored Cross-Site Scripting VulnerabilityCisco Firepower Extensible Operating System · Cisco Secu… +1
- CVE-2026-20037Cisco UCS Manager File Write VulnerabilityCisco Unified Computing System
- CVE-2026-20036Cisco UCS Manager Software Command Injection VulnerabilityCisco Unified Computing System
- CVE-2026-20107Cisco Application Policy Infrastructure Controller Denial of Service VulnerabilityCisco Application Policy Infrastructure Controller
- CVE-2026-20122Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite VulnerabilityCisco Catalyst SD-WAN Manager
- CVE-2026-20133A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affectCisco Catalyst SD-WAN Manager
- CVE-2026-3192Chia Blockchain RPC Credential rpc_server_base.py _authenticate improper authenticationChia Blockchain
- CVE-2026-3189feiyuchuixue sz-boot-parent download server-side request forgeryfeiyuchuixue sz-boot-parent
- CVE-2026-27705Plane Vulnerable to Cross-Workspace/Cross-Project Asset Modification via IDOR in ProjectAssetEndpoint.patchmakeplane plane
- CVE-2026-22866ENS DNSSEC Oracle Vulnerable to RSA Signature Forgery via Missing PKCS#1 v1.5 Padding Validationensdomains ens-contracts · @ensdomains/ens-contracts
- CVE-2026-3188feiyuchuixue sz-boot-parent API templates path traversalfeiyuchuixue sz-boot-parent
- CVE-2026-27704Dart SDK and Flutter SDK have Zip slip in Dart Pub package extractiondart-lang sdk · dart-lang flutter
- CVE-2026-3206Improper management of context cancelationsKrakenD-CE · KrakenD-EE
- CVE-2026-27846Missing authentication in Linksys MR9600, Linksys MX4200Linksys MR9600 · Linksys MX4200
- CVE-2026-27695zae-limiter: DynamoDB hot partition throttling enables per-entity Denial of Servicezeroae zae-limiter · zae-limiter
- CVE-2026-2878Insufficient Entropy Vulnerability in Telerik UI for ASP.NET AJAXProgress Software Telerik UI for ASP.NET AJAX
- CVE-2026-27691iccDEV has SIO in parse3DTable() at iccFromCube.cpp Line 218InternationalColorConsortium iccDEV
- CVE-2026-3203Buffer Over-read in WiresharkWireshark Foundation Wireshark
- CVE-2026-3202NULL Pointer Dereference in WiresharkWireshark Foundation Wireshark
- CVE-2026-3201Improperly Controlled Sequential Memory Allocation in WiresharkWireshark Foundation Wireshark
- CVE-2026-3187feiyuchuixue sz-boot-parent API Endpoint upload unrestricted uploadfeiyuchuixue sz-boot-parent
- CVE-2026-3186feiyuchuixue sz-boot-parent Password Reset password default passwordfeiyuchuixue sz-boot-parent
- CVE-2026-3185feiyuchuixue sz-boot-parent API Endpoint sys-message authorizationfeiyuchuixue sz-boot-parent
- CVE-2026-28196In JetBrains TeamCity before 2025.11.3 disabling versioned settings left a credentials config on diskJetBrains TeamCity
- CVE-2026-28195In JetBrains TeamCity before 2025.11.3 missing authorization allowed project developers to add parameters to build configurationsJetBrains TeamCity
- CVE-2026-28194In JetBrains TeamCity before 2025.11.3 open redirect was possible in the React project creation flowJetBrains TeamCity
- CVE-2026-21725Authorization Bypass via TOCTOU in Grafana Datasource Deletion by NameGrafana
- CVE-2026-0704In affected version of Octopus Deploy it was possible to remove files and/or contents of files on the host using an API endpoint.Octopus Deploy Octopus Server
- CVE-2026-3118Rhdh: graphql injection leading to platform-wide denial of service (dos) in rh developer hub orchestrator pluginRed Hat Developer Hub
- CVE-2026-26104Udisks: missing authorization check allows unprivileged users to back up luks headers via udisks d-bus apiRed Hat Enterprise Linux
- CVE-2025-67860NeuVector scanner insecurely handles passwords as command argumentsSUSE harvester · github.com/neuvector/scanner
- CVE-2026-2367Secure Copy Content Protection and Content Locking <= 5.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributeays-pro Secure Copy Content Protection and Content Locking
- CVE-2026-2301Post Duplicator <= 3.0.8 - Missing Authorization to Authenticated (Contributor+) Protected Post Meta Insertion via 'customMetaData' Parametermetaphorcreations Post Duplicator
- CVE-2026-2410Disable Admin Notices – Hide Dashboard Notifications <= 1.4.2 - Cross-Site Request Forgery to Plugin Settings Updatethemeisle Disable Admin Notices – Hide Dashboard Notificati…
- CVE-2025-14742WP Recipe Maker <= 10.2.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposurebrechtvds WP Recipe Maker
- CVE-2026-3171SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System queue.php cross site scriptingSourceCodester Patients Waiting Area Queue Management Syste…
- CVE-2026-2479Responsive Lightbox & Gallery <= 2.7.1 - Authenticated (Author+) Server-Side Request Forgery via Remote Library Image Uploaddfactory Responsive Lightbox & Gallery
- CVE-2026-3170SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System patient-search.php cross site scriptingSourceCodester Patients Waiting Area Queue Management Syste…
- CVE-2025-11563wcurl path traversal with percent-encoded slashescurl
- CVE-2026-1614Rise Blocks – A Complete Gutenberg Page Builder <= 3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Identity Block Attributeseaglethemes Rise Blocks – A Complete Gutenberg Page Builder
- CVE-2026-3164itsourcecode News Portal Project contactus.php sql injectionitsourcecode News Portal Project
- CVE-2026-3163SourceCodester Website Link Extractor URL file_get_contents server-side request forgerySourceCodester Website Link Extractor
- CVE-2026-3153itsourcecode Document Management System register.php sql injectionitsourcecode Document Management System
- CVE-2026-3152itsourcecode College Management System teacher-salary.php sql injectionitsourcecode College Management System
- CVE-2026-3151itsourcecode College Management System login.php sql injectionitsourcecode College Management System
- CVE-2026-3150itsourcecode College Management System display-teacher.php sql injectionitsourcecode College Management System
- CVE-2025-0976Information Exposure Vulnerability in Hitachi Configuration Manager, Hitachi Ops Center API Configuration ManagerHitachi Ops Center API Configuration Manager · Hitachi Conf…
- CVE-2026-27645changedetection.io Vulnerable to Reflected XSS in RSS Single Watch Error Responsedgtlmoon changedetection.io · changedetection-io
- CVE-2026-3149itsourcecode College Management System asign-single-student-subjects.php sql injectionitsourcecode College Management System
- CVE-2026-3148SourceCodester Simple and Nice Shopping Cart Script signup.php sql injectionSourceCodester Simple and Nice Shopping Cart Script
- CVE-2026-3147libvips csvload.c vips_foreign_load_csv_build heap-based overflowlibvips
- CVE-2026-27746SPIP jeux < 4.1.1 Reflected XSS via index ParametersSPIP jeux
- CVE-2026-3146libvips matrixload.c vips_foreign_load_matrix_header null pointer dereferencelibvips
- CVE-2025-5781Information Exposure Vulnerability in Hitachi Configuration Manager, Hitachi Ops Center API Configuration ManagerHitachi Ops Center API Configuration Manager · Hitachi C… +1
- CVE-2026-27632Talishar Vulnerable to Cross-Site Request Forgery (CSRF)Talishar
- CVE-2026-27629InvenTree Vulnerable to Server Side Template Injection (SSTI)InvenTree
- CVE-2026-27628pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streamspy-pdf pypdf · pypdf
- CVE-2026-27612Repostat Vulnerable to Reflected Cross-Site Scripting (XSS) via repo prop in RepoCarddenpiligrim repostat · repostat
- CVE-2026-27621TypiCMS Core has Stored Cross-Site Scripting (XSS) via SVG File UploadTypiCMS Core · typicms/core
- CVE-2026-25135OpenEMR's location resource for Group.$export operation returns entire patient/user population contact informationopenemr
- CVE-2026-3145libvips matrixload.c vips_foreign_load_matrix_header memory corruptionlibvips
- CVE-2026-25124OpenEMR has Broken Access Control in Report/Clients/Message List CSV Exportopenemr
- CVE-2026-24896OpenEMR has Broken Access Control that allows unauthorized access to EDI Logsopenemr
- CVE-2026-24847OpenEMR has Open Redirect in Eye Exam Formopenemr
- CVE-2026-21443OpenEMR allows inconsistent escaping of translation function outputopenemr
- CVE-2026-3137CodeAstro Food Ordering System food_ordering.exe stack-based overflowCodeAstro Food Ordering System
- CVE-2026-3135itsourcecode News Portal Project add-category.php sql injectionitsourcecode News Portal Project
- CVE-2026-26717An issue in OpenFUN Richie (LMS) in src/richie/apps/courses/api.py.richie