# CVEs published 2026-02-25

236 CVEs were published on February 25, 2026: 37 critical, 81 high. 5 are now in CISA KEV. Days are UTC.

- [CVE-2026-27809](https://cve.now/CVE-2026-27809.md): psd-tools: Compression module has unguarded zlib decompression, missing dimension validation, and hardening gaps (CVSS 6.8, psd-tools)
- [CVE-2026-27808](https://cve.now/CVE-2026-27808.md): Mailpit is Vulnerable to Server-Side Request Forgery (SSRF) via Link Check API (CVSS 5.8, axllent mailpit · github.com/axllent/mailpit)
- [CVE-2026-27804](https://cve.now/CVE-2026-27804.md): Parse Server: Account takeover via JWT algorithm confusion in Google auth adapter (CVSS 9.3, parse-community parse-server · parse-server)
- [CVE-2026-27735](https://cve.now/CVE-2026-27735.md): mcp-server-git : Path traversal in git\_add allows staging files outside repository boundaries (CVSS 6.4, modelcontextprotocol servers · mcp-server-git)
- [CVE-2026-27711](https://cve.now/CVE-2026-27711.md): NanaZip UFS Archive Parser Memory Corruption via Unvalidated Directory Record Length (CVSS 5.1, M2Team NanaZip)
- [CVE-2026-27710](https://cve.now/CVE-2026-27710.md): NanaZip .NET Single-File Parser Integer Underflow Leads to Unbounded Allocation (DoS) (CVSS 5.1, M2Team NanaZip)
- [CVE-2026-27709](https://cve.now/CVE-2026-27709.md): NanaZip .NET Single-File Manifest Parser Vulnerable to Out-of-Bounds Read via Unchecked RelativePathLength (CVSS 5.1, M2Team NanaZip)
- [CVE-2026-27976](https://cve.now/CVE-2026-27976.md): Zed Extension Sandbox Escape via Tar Symlink Following (CVSS 8.8, zed-industries zed)
- [CVE-2026-27967](https://cve.now/CVE-2026-27967.md): Symlink Escape in Agent File Tools (CVSS 7.1, zed-industries zed)
- [CVE-2026-27800](https://cve.now/CVE-2026-27800.md): Zed has Zip Slip Path Traversal in Extension Archive Extraction (CVSS 7.4, zed-industries zed)
- [CVE-2026-27799](https://cve.now/CVE-2026-27799.md): ImageMagick has a heap Buffer Over-read in its DJVU image format handler (CVSS 4.0, ImageMagick · Magick.NET-Q16-AnyCPU +18)
- [CVE-2026-27798](https://cve.now/CVE-2026-27798.md): ImageMagick: Heap Buffer Over-read in WaveletDenoise when processing small images (CVSS 4.0, ImageMagick · Magick.NET-Q16-AnyCPU +18)
- [CVE-2026-27933](https://cve.now/CVE-2026-27933.md): Manyfold vulnerable to session hijack via cookie leakage in proxy caches (CVSS 6.8, manyfold3d manyfold)
- [CVE-2026-27635](https://cve.now/CVE-2026-27635.md): Manyfold vulnerable to OS command injection via ZIP filename in f3d render (CVSS 7.5, manyfold3d manyfold)
- [CVE-2026-27633](https://cve.now/CVE-2026-27633.md): TinyWeb has Unbounded Content-Length Memory Exhaustion (DoS) (CVSS 8.7, maximmasiutin TinyWeb)
- [CVE-2026-27630](https://cve.now/CVE-2026-27630.md): TinyWeb vulnerable to Remote Denial of Service via Thread/Connection Exhaustion (Slowloris) (CVSS 8.7, maximmasiutin TinyWeb)
- [CVE-2026-3209](https://cve.now/CVE-2026-3209.md): fosrl Pangolin Role verifyApiKeyRoleAccess access control (CVSS 5.3, fosrl Pangolin)
- [CVE-2026-27613](https://cve.now/CVE-2026-27613.md): CGI Parameter Injection (Bypass of STRICT\_CGI\_PARAMS and EscapeShellParam) (CVSS 10.0, maximmasiutin TinyWeb)
- [CVE-2026-27498](https://cve.now/CVE-2026-27498.md): n8n has Arbitrary Command Execution via File Write and Git Operations (CVSS 9.0, n8n-io n8n · n8n)
- [CVE-2026-27578](https://cve.now/CVE-2026-27578.md): n8n Vulnerable to Stored XSS via Various Nodes (CVSS 8.5, n8n-io n8n · n8n)
- [CVE-2026-27577](https://cve.now/CVE-2026-27577.md): n8n: Expression Sandbox Escape Leads to RCE (CVSS 9.4, n8n-io n8n · n8n)
- [CVE-2026-27497](https://cve.now/CVE-2026-27497.md): n8n has Potential Remote Code Execution via Merge Node (CVSS 9.4, n8n-io n8n · n8n)
- [CVE-2026-27495](https://cve.now/CVE-2026-27495.md): n8n has a Sandbox Escape in its JavaScript Task Runner (CVSS 9.4, n8n-io n8n · n8n)
- [CVE-2026-27494](https://cve.now/CVE-2026-27494.md): n8n has Arbitrary File Read via Python Code Node Sandbox Escape (CVSS 7.1, n8n-io n8n · n8n)
- [CVE-2026-27493](https://cve.now/CVE-2026-27493.md): n8n has Unauthenticated Expression Evaluation via Form Node (CVSS 9.5, n8n-io n8n · n8n)
- [CVE-2026-27148](https://cve.now/CVE-2026-27148.md): Storybook Dev Server Vulnerable to WebSocket Hijacking (CVSS 8.9, storybookjs storybook · storybook)
- [CVE-2026-27819](https://cve.now/CVE-2026-27819.md): Vikunja has Path Traversal in CLI Restore (CVSS 7.2, go-vikunja vikunja · code.vikunja.io/api)
- [CVE-2026-27616](https://cve.now/CVE-2026-27616.md): Vikunja Vulnerable to Stored Cross-Site Scripting (XSS) via Unsanitized SVG Attachment Upload Leading to Token Exposure (CVSS 7.3, go-vikunja vikunja · code.vikunja.io/api)
- [CVE-2026-27575](https://cve.now/CVE-2026-27575.md): Vijkunja has Weak Password Policy Combined with Persistent Sessions After Password Change (CVSS 9.1, go-vikunja vikunja · code.vikunja.io/api)
- [CVE-2026-27116](https://cve.now/CVE-2026-27116.md): Vikunja has Reflected HTML Injection via filter Parameter in Projects Module (CVSS 6.1, go-vikunja vikunja · code.vikunja.io/api)
- [CVE-2026-26985](https://cve.now/CVE-2026-26985.md): LORIS vulnerable to path traversal in electrophysiology\_browser (CVSS 8.1, aces Loris)
- [CVE-2026-2694](https://cve.now/CVE-2026-2694.md): The Events Calendar \<= 6.15.16 - Improper Authorization to Authenticated (Contributor+) Event/Organizer/Venue Update/Trash via REST API (CVSS 5.4, stellarwp The Events Calendar)
- [CVE-2026-26984](https://cve.now/CVE-2026-26984.md): LORIS media module vulnerable to remote code execution (CVSS 8.7, aces Loris)
- [CVE-2026-27951](https://cve.now/CVE-2026-27951.md): FreeRDP has possible Integer overflow in Stream\_EnsureCapacity (CVSS 5.3, FreeRDP)
- [CVE-2026-27950](https://cve.now/CVE-2026-27950.md): FreeRDP heap-use-after-free in update\_pointer\_new(SDL): Fix Applied in the Wrong File (CVSS 5.5, FreeRDP)
- [CVE-2026-26986](https://cve.now/CVE-2026-26986.md): FreeRDP has heap-use-after-free in rail\_window\_free (CVSS 5.5, FreeRDP)
- [CVE-2026-26965](https://cve.now/CVE-2026-26965.md): FreeRDP has Out-of-bounds Write (CVSS 8.8, FreeRDP)
- [CVE-2026-3172](https://cve.now/CVE-2026-3172.md): pgvector buffer overflow in parallel HNSW index build (CVSS 8.1, pgvector)
- [CVE-2026-26955](https://cve.now/CVE-2026-26955.md): FreeRDP has Out-of-bounds Write (CVSS 8.8, FreeRDP)
- [CVE-2026-27015](https://cve.now/CVE-2026-27015.md): FreeRDP: Smartcard NDR Alignment Padding Triggers Reachable WINPR\_ASSERT Abort (Client DoS) (CVSS 5.0, FreeRDP)
- [CVE-2026-26271](https://cve.now/CVE-2026-26271.md): Buffer Overread in FreeRDP Icon Processing (CVSS 5.5, FreeRDP)
- [CVE-2026-25997](https://cve.now/CVE-2026-25997.md): FreeRDP has heap-use-after-free in xf\_clipboard\_format\_equal (CVSS 5.5, FreeRDP)
- [CVE-2026-25959](https://cve.now/CVE-2026-25959.md): FreeRDP has heap-use-after-free in xf\_cliprdr\_provide\_data\_ (CVSS 5.5, FreeRDP)
- [CVE-2026-0542](https://cve.now/CVE-2026-0542.md): Remote Code Execution in ServiceNow AI Platform (CVSS 9.2, ServiceNow AI Platform)
- [CVE-2026-25955](https://cve.now/CVE-2026-25955.md): FreeRDP has heap-use-after-free in xf\_AppUpdateWindowFromSurface (stale XImage) (CVSS 5.5, FreeRDP)
- [CVE-2026-25954](https://cve.now/CVE-2026-25954.md): FreeRDP has heap-use-after-free in xf\_rail\_server\_local\_move\_size (CVSS 5.5, FreeRDP)
- [CVE-2026-25953](https://cve.now/CVE-2026-25953.md): FreeRDP has heap-use-after-free in xf\_AppUpdateWindowFromSurface (freed appWindow) (CVSS 5.5, FreeRDP)
- [CVE-2026-25952](https://cve.now/CVE-2026-25952.md): FreeRDP has heap-use-after-free in xf\_SetWindowMinMaxInfo (CVSS 5.5, FreeRDP)
- [CVE-2025-14511](https://cve.now/CVE-2025-14511.md): Improper Validation of Specified Quantity in Input in GitLab (CVSS 7.5, GitLab)
- [CVE-2026-0752](https://cve.now/CVE-2026-0752.md): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.0, GitLab)
- [CVE-2026-1388](https://cve.now/CVE-2026-1388.md): Inefficient Regular Expression Complexity in GitLab (CVSS 7.5, GitLab)
- [CVE-2026-1662](https://cve.now/CVE-2026-1662.md): Allocation of Resources Without Limits or Throttling in GitLab (CVSS 7.5, GitLab)
- [CVE-2026-1747](https://cve.now/CVE-2026-1747.md): Authentication Bypass Using an Alternate Path or Channel in GitLab (CVSS 4.3, GitLab)
- [CVE-2026-1725](https://cve.now/CVE-2026-1725.md): Allocation of Resources Without Limits or Throttling in GitLab (CVSS 5.3, GitLab)
- [CVE-2026-2845](https://cve.now/CVE-2026-2845.md): Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5, GitLab)
- [CVE-2026-3200](https://cve.now/CVE-2026-3200.md): z-9527 admin user.js getUsers sql injection (CVSS 6.9, z-9527 admin)
- [CVE-2026-25942](https://cve.now/CVE-2026-25942.md): FreeRDP has global-buffer-overflow in xf\_rail\_server\_execute\_result (CVSS 5.5, FreeRDP)
- [CVE-2026-22721](https://cve.now/CVE-2026-22721.md): VMware Aria Operations privilege escalation vulnerability (CVSS 6.2, VMware Aria Operations · VMware Cloud Foundation +2)
- [CVE-2026-25941](https://cve.now/CVE-2026-25941.md): FreeRDP: vuln\_1\_15\_1 RDPGFX WIRE\_TO\_SURFACE\_2 Out-of-Bounds Read (CVSS 4.3, FreeRDP)
- [CVE-2026-25736](https://cve.now/CVE-2026-25736.md): Rucio WebUI has a Stored Cross-site Scripting (XSS) Vulnerability in its Custom RSE Attribute (CVSS 6.1, rucio · rucio-webui)
- [CVE-2026-25735](https://cve.now/CVE-2026-25735.md): Rucio WebUI has a Stored Cross-site Scripting (XSS) vulnerability its Identity Name (CVSS 6.1, rucio · rucio-webui)
- [CVE-2025-3525](https://cve.now/CVE-2025-3525.md): Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5, GitLab)
- [CVE-2026-25734](https://cve.now/CVE-2026-25734.md): Rucio WebUI has Stored Cross-site Scripting (XSS) in RSE Metadata (CVSS 6.1, rucio · rucio-webui)
- [CVE-2025-14103](https://cve.now/CVE-2025-14103.md): Missing Authorization in GitLab (CVSS 4.3, GitLab)
- [CVE-2026-22720](https://cve.now/CVE-2026-22720.md): VMware Aria Operations stored cross-site scripting vulnerability (CVSS 8.0, VMware Aria Operations · VMware Cloud Foundation Operati… +2)
- [CVE-2026-25733](https://cve.now/CVE-2026-25733.md): Rucio WebUI Vulnerable to Stored Cross-site Scripting (XSS) through Custom Rule Function (CVSS 7.3, rucio · rucio-webui)
- [CVE-2026-25138](https://cve.now/CVE-2026-25138.md): Rucio WebUI has Username Enumeration via Login Error Message (CVSS 5.3, rucio · rucio-webui)
- [CVE-2026-22719](https://cve.now/CVE-2026-22719.md): VMware Aria Operations command injection vulnerability (CVSS 8.1, KEV, VMware Aria Operations · VMware Cloud Foundation Operati… +2)
- [CVE-2026-25136](https://cve.now/CVE-2026-25136.md): Rucio WebUI has a Reflected Cross-site Scripting Vulnerability (CVSS 8.1, rucio · rucio-webui)
- [CVE-2026-2636](https://cve.now/CVE-2026-2636.md): Denial of Service in Microsoft OS (CVSS 5.5, Microsoft Windows OS)
- [CVE-2026-24005](https://cve.now/CVE-2026-24005.md): OpenKruise PodProbeMarker is Vulnerable to SSRF via Unrestricted Host Field (CVSS 0.0, openkruise kruise · github.com/openkruise/kruise)
- [CVE-2026-25930](https://cve.now/CVE-2026-25930.md): OpenEMR's Printable LBF Endpoint Leaks Arbitrary Patient Forms (CVSS 6.5, openemr)
- [CVE-2026-25929](https://cve.now/CVE-2026-25929.md): OpenEMR Patient Picture Context Allows Arbitrary Patient Photo Retrieval (CVSS 6.5, openemr)
- [CVE-2026-25927](https://cve.now/CVE-2026-25927.md): OpenEMR Missing Authorization Checks in DICOM Viewer State API (CVSS 7.1, openemr)
- [CVE-2026-25746](https://cve.now/CVE-2026-25746.md): OpenEMR has SQL Injection Vulnerability (CVSS 8.8, openemr)
- [CVE-2026-25743](https://cve.now/CVE-2026-25743.md): OpenEMR has Stored XSS in Questionnaire answers (CVSS 7.2, openemr)
- [CVE-2026-3221](https://cve.now/CVE-2026-3221.md): Sensitive user account information is not encrypted in the database in Devolutions Server 2025.3.14 and earlier, which allows an attacker w (CVSS 4.9, Devolutions Server)
- [CVE-2026-25476](https://cve.now/CVE-2026-25476.md): OpenEMR has Session Timeout Bypass via skip\_timeout\_reset (CVSS 7.5, openemr)
- [CVE-2026-25220](https://cve.now/CVE-2026-25220.md): OpenEMR Messages "Show All" Not Restricted to Admins (CVSS 5.7, openemr)
- [CVE-2026-25164](https://cve.now/CVE-2026-25164.md): OpenEMR's Document and Insurance REST Endpoints Skip ACL (CVSS 8.1, openemr)
- [CVE-2026-24908](https://cve.now/CVE-2026-24908.md): OpenEMR has SQL Injection in Patient API Sort Parameter (CVSS 10.0, openemr)
- [CVE-2026-24890](https://cve.now/CVE-2026-24890.md): OpenEMR Portal Users Can Forge Provider Signatures (CVSS 8.1, openemr)
- [CVE-2026-24487](https://cve.now/CVE-2026-24487.md): OpenEMR has FHIR Patient Compartment Bypass in CareTeam Resource (CVSS 5.7, openemr)
- [CVE-2026-23627](https://cve.now/CVE-2026-23627.md): OpenEMR has SQL Injection in Immunization Search/Report (CVSS 7.4, openemr)
- [CVE-2026-27795](https://cve.now/CVE-2026-27795.md): LangChain Community: redirect chaining can lead to SSRF bypass via RecursiveUrlLoader (CVSS 4.1, langchain-ai langchainjs · @langchain/community)
- [CVE-2026-3194](https://cve.now/CVE-2026-3194.md): Chia Blockchain RPC Server Master Passphrase get\_private\_key missing authentication (CVSS 2.0, Chia Blockchain)
- [CVE-2026-21902](https://cve.now/CVE-2026-21902.md): Junos OS Evolved: PTX Series: A vulnerability allows a unauthenticated, network-based attacker to execute code as root (CVSS 9.8, Juniper Networks Junos OS Evolved)
- [CVE-2026-27850](https://cve.now/CVE-2026-27850.md): Improper verification in Linksys MR9600, Linksys MX4200 (CVSS 7.5, Linksys MR9600 · Linksys MX4200)
- [CVE-2026-25554](https://cve.now/CVE-2026-25554.md): OpenSIPS 3.1 \<= 3.6.4 auth\_jwt SQL Injection Enables JWT Authentication Bypass (CVSS 8.3, OpenSIPS)
- [CVE-2026-27794](https://cve.now/CVE-2026-27794.md): LangGraph: BaseCache Deserialization of Untrusted Data may lead to Remote Code Execution (CVSS 6.6, langchain-ai langgraph-checkpoint · langgraph-checkpoint)
- [CVE-2026-27739](https://cve.now/CVE-2026-27739.md): Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline (CVSS 9.2, angular-cli · angular @nguniversal/common +4)
- [CVE-2026-27738](https://cve.now/CVE-2026-27738.md): Angular SSR has an Open Redirect via X-Forwarded-Prefix (CVSS 6.9, angular-cli · @angular/ssr)
- [CVE-2026-3193](https://cve.now/CVE-2026-3193.md): Chia Blockchain send\_transaction cross-site request forgery (CVSS 2.3, Chia Blockchain)
- [CVE-2026-27736](https://cve.now/CVE-2026-27736.md): BigBlueButton has Open Redirect vulnerability in ApiController (CVSS 6.1, bigbluebutton)
- [CVE-2026-20033](https://cve.now/CVE-2026-20033.md): Cisco NX-OS Software Denial of Service Vulnerability (CVSS 7.4, Cisco NX-OS System Software in ACI Mode)
- [CVE-2026-20048](https://cve.now/CVE-2026-20048.md): Cisco NX-OS Software SNMP Denial of Service Vulnerability (CVSS 7.7, Cisco NX-OS System Software in ACI Mode)
- [CVE-2026-20099](https://cve.now/CVE-2026-20099.md): Cisco UCS Manager and FXOS Software Command Injection Vulnerability (CVSS 6.7, Cisco Firepower Extensible Operating System · Cisco Secu… +1)
- [CVE-2026-27728](https://cve.now/CVE-2026-27728.md): OneUptime: OS Command Injection in Probe NetworkPathMonitor via unsanitized destination in traceroute exec() (CVSS 10.0, oneuptime · @oneuptime/common)
- [CVE-2026-20091](https://cve.now/CVE-2026-20091.md): Cisco UCS Manager and FXOS Software Stored Cross-Site Scripting Vulnerability (CVSS 4.8, Cisco Firepower Extensible Operating System · Cisco Secu… +1)
- [CVE-2026-20037](https://cve.now/CVE-2026-20037.md): Cisco UCS Manager File Write Vulnerability (CVSS 4.4, Cisco Unified Computing System)
- [CVE-2026-27849](https://cve.now/CVE-2026-27849.md): Missing neutralization in Linksys MR9600, Linksys MX4200 (CVSS 9.8, Linksys MR9600 · Linksys MX4200)
- [CVE-2026-20010](https://cve.now/CVE-2026-20010.md): Cisco Nexus 3000 and 9000 Series Switches Link Layer Discovery Protocol Denial of Service Vulnerability (CVSS 7.4, Cisco NX-OS Software · Cisco NX-OS System Software in AC… +1)
- [CVE-2026-20036](https://cve.now/CVE-2026-20036.md): Cisco UCS Manager Software Command Injection Vulnerability (CVSS 6.5, Cisco Unified Computing System)
- [CVE-2026-20107](https://cve.now/CVE-2026-20107.md): Cisco Application Policy Infrastructure Controller Denial of Service Vulnerability (CVSS 5.5, Cisco Application Policy Infrastructure Controller)
- [CVE-2026-20051](https://cve.now/CVE-2026-20051.md): Cisco Nexus 3600-R and 9500-R Series Switching Platforms Layer 2 Loop Denial of Service Vulnerability (CVSS 7.4, Cisco NX-OS Software)
- [CVE-2026-20122](https://cve.now/CVE-2026-20122.md): Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability (CVSS 5.4, KEV, Cisco Catalyst SD-WAN Manager)
- [CVE-2026-20127](https://cve.now/CVE-2026-20127.md): Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability (CVSS 10.0, KEV, Cisco Catalyst SD-WAN Manager)
- [CVE-2026-20128](https://cve.now/CVE-2026-20128.md): Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability (CVSS 7.5, KEV, Cisco Catalyst SD-WAN Manager)
- [CVE-2026-20129](https://cve.now/CVE-2026-20129.md): Cisco Catayst SD-WAN Authentication Bypass Vulnerability (CVSS 9.8, Cisco Catalyst SD-WAN Manager)
- [CVE-2026-20126](https://cve.now/CVE-2026-20126.md): Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability (CVSS 8.8, Cisco Catalyst SD-WAN Manager)
- [CVE-2026-20133](https://cve.now/CVE-2026-20133.md): A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affect (CVSS 6.5, KEV, Cisco Catalyst SD-WAN Manager)
- [CVE-2026-3192](https://cve.now/CVE-2026-3192.md): Chia Blockchain RPC Credential rpc\_server\_base.py \_authenticate improper authentication (CVSS 6.3, Chia Blockchain)
- [CVE-2026-3189](https://cve.now/CVE-2026-3189.md): feiyuchuixue sz-boot-parent download server-side request forgery (CVSS 2.3, feiyuchuixue sz-boot-parent)
- [CVE-2026-27727](https://cve.now/CVE-2026-27727.md): mchange-commons-java: Remote Code Execution via JNDI Reference Resolution (CVSS 8.9, swaldman mchange-commons-java · com.mchange:mchange-commons…)
- [CVE-2026-27706](https://cve.now/CVE-2026-27706.md): Plane Vulnerable to Full Read SSRF via Favicon Fetching in "Add Link" Feature (CVSS 7.7, makeplane plane)
- [CVE-2026-27705](https://cve.now/CVE-2026-27705.md): Plane Vulnerable to Cross-Workspace/Cross-Project Asset Modification via IDOR in ProjectAssetEndpoint.patch (CVSS 4.9, makeplane plane)
- [CVE-2026-22866](https://cve.now/CVE-2026-22866.md): ENS DNSSEC Oracle Vulnerable to RSA Signature Forgery via Missing PKCS#1 v1.5 Padding Validation (CVSS 2.7, ensdomains ens-contracts · @ensdomains/ens-contracts)
- [CVE-2026-27730](https://cve.now/CVE-2026-27730.md): esm.sh has SSRF localhost/private-network bypass in \`/http(s)\` module route (CVSS 8.6, esm-dev esm.sh · github.com/esm-dev/esm.sh)
- [CVE-2025-50180](https://cve.now/CVE-2025-50180.md): esm.sh is vulnerable to full-response SSRF (CVSS 8.7, esm-dev esm.sh · github.com/esm-dev/esm.sh)
- [CVE-2026-3188](https://cve.now/CVE-2026-3188.md): feiyuchuixue sz-boot-parent API templates path traversal (CVSS 5.3, feiyuchuixue sz-boot-parent)
- [CVE-2025-1242](https://cve.now/CVE-2025-1242.md): Administrative Credentials Can Be Extracted Through Gardyn API Responses (CVSS 9.3, Gardyn Home Kit)
- [CVE-2026-27704](https://cve.now/CVE-2026-27704.md): Dart SDK and Flutter SDK have Zip slip in Dart Pub package extraction (CVSS 6.6, dart-lang sdk · dart-lang flutter)
- [CVE-2026-27848](https://cve.now/CVE-2026-27848.md): Missing neutralization in Linksys MR9600, Linksys MX4200 (CVSS 9.8, Linksys MR9600 · Linksys MX4200)
- [CVE-2026-3206](https://cve.now/CVE-2026-3206.md): Improper management of context cancelations (CVSS 1.3, KrakenD-CE · KrakenD-EE)
- [CVE-2026-27702](https://cve.now/CVE-2026-27702.md): Budibase Vulnerable to Remote Code Execution via Unsafe eval() in View Filter Map Function (Budibase Cloud) (CVSS 9.9, budibase)
- [CVE-2026-27847](https://cve.now/CVE-2026-27847.md): Missing authentication in Linksys MR9600, Linksys MX4200 (CVSS 9.8, Linksys MR9600 · Linksys MX4200)
- [CVE-2026-27701](https://cve.now/CVE-2026-27701.md): LiveCodes vulnerable to JavaScript Injection via untrusted PR title in i18n-update-pull workflow (CVSS 8.8, live-codes livecodes)
- [CVE-2026-27846](https://cve.now/CVE-2026-27846.md): Missing authentication in Linksys MR9600, Linksys MX4200 (CVSS 6.2, Linksys MR9600 · Linksys MX4200)
- [CVE-2026-27700](https://cve.now/CVE-2026-27700.md): Hono is Vulnerable to Authentication Bypass by IP Spoofing in AWS Lambda ALB conninfo (CVSS 8.2, honojs hono · hono)
- [CVE-2026-27699](https://cve.now/CVE-2026-27699.md): Basic FTP has Path Traversal Vulnerability in its downloadToDir() method (CVSS 9.1, patrickjuchli basic-ftp · basic-ftp)
- [CVE-2026-27695](https://cve.now/CVE-2026-27695.md): zae-limiter: DynamoDB hot partition throttling enables per-entity Denial of Service (CVSS 4.3, zeroae zae-limiter · zae-limiter)
- [CVE-2026-2878](https://cve.now/CVE-2026-2878.md): Insufficient Entropy Vulnerability in Telerik UI for ASP.NET AJAX (CVSS 5.3, Progress Software Telerik UI for ASP.NET AJAX)
- [CVE-2026-27692](https://cve.now/CVE-2026-27692.md): iccDEV has HBO in CIccTagTextDescription::Release() (CVSS 7.1, InternationalColorConsortium iccDEV)
- [CVE-2026-27691](https://cve.now/CVE-2026-27691.md): iccDEV has SIO in parse3DTable() at iccFromCube.cpp Line 218 (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-3203](https://cve.now/CVE-2026-3203.md): Buffer Over-read in Wireshark (CVSS 5.5, Wireshark Foundation Wireshark)
- [CVE-2026-3202](https://cve.now/CVE-2026-3202.md): NULL Pointer Dereference in Wireshark (CVSS 4.7, Wireshark Foundation Wireshark)
- [CVE-2026-3201](https://cve.now/CVE-2026-3201.md): Improperly Controlled Sequential Memory Allocation in Wireshark (CVSS 4.7, Wireshark Foundation Wireshark)
- [CVE-2026-3187](https://cve.now/CVE-2026-3187.md): feiyuchuixue sz-boot-parent API Endpoint upload unrestricted upload (CVSS 5.3, feiyuchuixue sz-boot-parent)
- [CVE-2026-3186](https://cve.now/CVE-2026-3186.md): feiyuchuixue sz-boot-parent Password Reset password default password (CVSS 5.3, feiyuchuixue sz-boot-parent)
- [CVE-2026-3185](https://cve.now/CVE-2026-3185.md): feiyuchuixue sz-boot-parent API Endpoint sys-message authorization (CVSS 6.9, feiyuchuixue sz-boot-parent)
- [CVE-2026-28196](https://cve.now/CVE-2026-28196.md): In JetBrains TeamCity before 2025.11.3 disabling versioned settings left a credentials config on disk (CVSS 2.3, JetBrains TeamCity)
- [CVE-2026-28195](https://cve.now/CVE-2026-28195.md): In JetBrains TeamCity before 2025.11.3 missing authorization allowed project developers to add parameters to build configurations (CVSS 4.3, JetBrains TeamCity)
- [CVE-2026-28194](https://cve.now/CVE-2026-28194.md): In JetBrains TeamCity before 2025.11.3 open redirect was possible in the React project creation flow (CVSS 4.3, JetBrains TeamCity)
- [CVE-2026-28193](https://cve.now/CVE-2026-28193.md): In JetBrains YouTrack before 2025.3.121962 apps were able to send requests to the app permissions endpoint (CVSS 8.8, JetBrains YouTrack)
- [CVE-2026-2624](https://cve.now/CVE-2026-2624.md): Authentication Bypass in ePati's Antikor NGFW (CVSS 9.8, ePati Cyber ​​Security Technologies Antikor Next Generation…)
- [CVE-2026-21725](https://cve.now/CVE-2026-21725.md): Authorization Bypass via TOCTOU in Grafana Datasource Deletion by Name (CVSS 2.6, Grafana)
- [CVE-2026-0704](https://cve.now/CVE-2026-0704.md): In affected version of Octopus Deploy it was possible to remove files and/or contents of files on the host using an API endpoint. (CVSS 5.9, Octopus Deploy Octopus Server)
- [CVE-2026-3118](https://cve.now/CVE-2026-3118.md): Rhdh: graphql injection leading to platform-wide denial of service (dos) in rh developer hub orchestrator plugin (CVSS 6.5, Red Hat Developer Hub)
- [CVE-2026-25701](https://cve.now/CVE-2026-25701.md): An Insecure Temporary File vulnerability in openSUSE sdbootutil allows local users to pre-create a directory to achieve various effects like (CVSS 7.0, openSUSE sdbootutil)
- [CVE-2026-26104](https://cve.now/CVE-2026-26104.md): Udisks: missing authorization check allows unprivileged users to back up luks headers via udisks d-bus api (CVSS 5.5, Red Hat Enterprise Linux)
- [CVE-2025-62878](https://cve.now/CVE-2025-62878.md): Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern (CVSS 9.9, SUSE Rancher · github.com/rancher/local-path-provisioner)
- [CVE-2025-67601](https://cve.now/CVE-2025-67601.md): Rancher CLI skips TLS verification on Rancher CLI login command (CVSS 8.3, SUSE rancher · github.com/rancher/rancher)
- [CVE-2025-67860](https://cve.now/CVE-2025-67860.md): NeuVector scanner insecurely handles passwords as command arguments (CVSS 3.8, SUSE harvester · github.com/neuvector/scanner)
- [CVE-2026-26103](https://cve.now/CVE-2026-26103.md): Udisks: missing authorization check allows unprivileged users to restore luks headers via udisks d-bus api (CVSS 7.1, Red Hat Enterprise Linux)
- [CVE-2026-2367](https://cve.now/CVE-2026-2367.md): Secure Copy Content Protection and Content Locking \<= 5.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attribute (CVSS 6.4, ays-pro Secure Copy Content Protection and Content Locking)
- [CVE-2026-2301](https://cve.now/CVE-2026-2301.md): Post Duplicator \<= 3.0.8 - Missing Authorization to Authenticated (Contributor+) Protected Post Meta Insertion via 'customMetaData' Parameter (CVSS 4.3, metaphorcreations Post Duplicator)
- [CVE-2026-2410](https://cve.now/CVE-2026-2410.md): Disable Admin Notices – Hide Dashboard Notifications \<= 1.4.2 - Cross-Site Request Forgery to Plugin Settings Update (CVSS 4.3, themeisle Disable Admin Notices – Hide Dashboard Notificati…)
- [CVE-2025-14742](https://cve.now/CVE-2025-14742.md): WP Recipe Maker \<= 10.2.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure (CVSS 4.3, brechtvds WP Recipe Maker)
- [CVE-2026-3171](https://cve.now/CVE-2026-3171.md): SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System queue.php cross site scripting (CVSS 5.1, SourceCodester Patients Waiting Area Queue Management Syste…)
- [CVE-2026-1929](https://cve.now/CVE-2026-1929.md): Advanced Woo Labels \<= 2.37 - Authenticated (Contributor+) Remote Code Execution via 'callback' Parameter (CVSS 8.8, mihail-barinov Advanced Woo Labels – Product Labels & Badge…)
- [CVE-2026-2416](https://cve.now/CVE-2026-2416.md): Geo Mashup \<= 1.13.17 - Unauthenticated SQL Injection via 'sort' Parameter (CVSS 7.5, cyberhobo Geo Mashup)
- [CVE-2026-1916](https://cve.now/CVE-2026-1916.md): WPGSI: Spreadsheet Integration \<= 3.8.3 - Missing Authorization to Unauthenticated Arbitrary Post Creation and Deletion via Forged Base64 Token (CVSS 7.5, javmah WPGSI: Spreadsheet Integration)
- [CVE-2026-2479](https://cve.now/CVE-2026-2479.md): Responsive Lightbox & Gallery \<= 2.7.1 - Authenticated (Author+) Server-Side Request Forgery via Remote Library Image Upload (CVSS 5.0, dfactory Responsive Lightbox & Gallery)
- [CVE-2026-3170](https://cve.now/CVE-2026-3170.md): SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System patient-search.php cross site scripting (CVSS 4.8, SourceCodester Patients Waiting Area Queue Management Syste…)
- [CVE-2026-3169](https://cve.now/CVE-2026-3169.md): Tenda F453 httpd SafeEmailFilter fromSafeEmailFilter buffer overflow (CVSS 8.7, Tenda F453)
- [CVE-2025-11563](https://cve.now/CVE-2025-11563.md): wcurl path traversal with percent-encoded slashes (CVSS 4.6, curl)
- [CVE-2026-3168](https://cve.now/CVE-2026-3168.md): Tenda F453 httpd NatStaticSetting fromNatStaticSetting buffer overflow (CVSS 8.7, Tenda F453)
- [CVE-2026-3167](https://cve.now/CVE-2026-3167.md): Tenda F453 httpd webtypelibrary formWebTypeLibrary buffer overflow (CVSS 8.7, Tenda F453)
- [CVE-2026-1614](https://cve.now/CVE-2026-1614.md): Rise Blocks – A Complete Gutenberg Page Builder \<= 3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Identity Block Attributes (CVSS 6.4, eaglethemes Rise Blocks – A Complete Gutenberg Page Builder)
- [CVE-2026-3166](https://cve.now/CVE-2026-3166.md): Tenda F453 httpd RouteStatic fromRouteStatic buffer overflow (CVSS 8.7, Tenda F453)
- [CVE-2026-3165](https://cve.now/CVE-2026-3165.md): Tenda F453 httpd AdvSetWrlsafeset fromSetWifiGusetBasic buffer overflow (CVSS 8.7, Tenda F453)
- [CVE-2026-3164](https://cve.now/CVE-2026-3164.md): itsourcecode News Portal Project contactus.php sql injection (CVSS 6.9, itsourcecode News Portal Project)
- [CVE-2026-25785](https://cve.now/CVE-2026-25785.md): Path traversal vulnerability exists in Lanscope Endpoint Manager (On-Premises) Sub-Manager Server Ver.9.4.7.3 and earlier, which may allow a (CVSS 9.8, MOTEX Lanscope Endpoint Manager (On-Premises) Sub-Manager S…)
- [CVE-2026-3179](https://cve.now/CVE-2026-3179.md): A path traversal vulnerability was found in the FTP Backup on the ADM. (CVSS 9.2, ASUSTOR ADM)
- [CVE-2026-3100](https://cve.now/CVE-2026-3100.md): An improper certificate validation vulnerability was found in the FTP Backup on the ADM. (CVSS 8.3, ASUSTOR ADM)
- [CVE-2026-3163](https://cve.now/CVE-2026-3163.md): SourceCodester Website Link Extractor URL file\_get\_contents server-side request forgery (CVSS 5.3, SourceCodester Website Link Extractor)
- [CVE-2026-3153](https://cve.now/CVE-2026-3153.md): itsourcecode Document Management System register.php sql injection (CVSS 6.9, itsourcecode Document Management System)
- [CVE-2026-3152](https://cve.now/CVE-2026-3152.md): itsourcecode College Management System teacher-salary.php sql injection (CVSS 6.9, itsourcecode College Management System)
- [CVE-2026-3151](https://cve.now/CVE-2026-3151.md): itsourcecode College Management System login.php sql injection (CVSS 6.9, itsourcecode College Management System)
- [CVE-2026-3150](https://cve.now/CVE-2026-3150.md): itsourcecode College Management System display-teacher.php sql injection (CVSS 5.3, itsourcecode College Management System)
- [CVE-2025-0976](https://cve.now/CVE-2025-0976.md): Information Exposure Vulnerability in Hitachi Configuration Manager, Hitachi Ops Center API Configuration Manager (CVSS 4.7, Hitachi Ops Center API Configuration Manager · Hitachi Conf…)
- [CVE-2026-27696](https://cve.now/CVE-2026-27696.md): changedetection.io Vulnerable to Server-Side Request Forgery (SSRF) via Watch URLs (CVSS 8.6, dgtlmoon changedetection.io · changedetection-io)
- [CVE-2026-27645](https://cve.now/CVE-2026-27645.md): changedetection.io Vulnerable to Reflected XSS in RSS Single Watch Error Response (CVSS 6.1, dgtlmoon changedetection.io · changedetection-io)
- [CVE-2026-27624](https://cve.now/CVE-2026-27624.md): Coturn: IPv4-mapped IPv6 (::ffff:0:0/96) bypasses denied-peer-ip ACL (CVSS 7.2, coturn)
- [CVE-2026-3149](https://cve.now/CVE-2026-3149.md): itsourcecode College Management System asign-single-student-subjects.php sql injection (CVSS 5.3, itsourcecode College Management System)
- [CVE-2026-3148](https://cve.now/CVE-2026-3148.md): SourceCodester Simple and Nice Shopping Cart Script signup.php sql injection (CVSS 6.9, SourceCodester Simple and Nice Shopping Cart Script)
- [CVE-2026-27597](https://cve.now/CVE-2026-27597.md): @enclave-vm/core is vulnerable to Sandbox Escape (CVSS 10.0, agentfront enclave · @enclave-vm/core)
- [CVE-2026-27641](https://cve.now/CVE-2026-27641.md): Flask-Reuploaded vulnerable to Remote Code Execution via Server-Side Template Injection (CVSS 9.8, jugmac00 flask-reuploaded · flask-reuploaded)
- [CVE-2026-27640](https://cve.now/CVE-2026-27640.md): tfplan2md has Sensitive Value Exposure in Generated Reports (CVSS 8.5, oocx tfplan2md)
- [CVE-2026-27627](https://cve.now/CVE-2026-27627.md): Karakeep's Reddit plugin content bypasses DOMPurify sanitization, enabling stored XSS (CVSS 8.2, karakeep-app karakeep)
- [CVE-2026-27639](https://cve.now/CVE-2026-27639.md): Mercator vulnerable to stored XSS via unescaped Blade directives in display templates (CVSS 8.5, dbarzin mercator)
- [CVE-2026-27636](https://cve.now/CVE-2026-27636.md): FreeScout: Missing .htaccess in Restricted File Extensions Allows Remote Code Execution on Apache (CVSS 8.8, freescout-help-desk freescout)
- [CVE-2026-27637](https://cve.now/CVE-2026-27637.md): FreeScout's Predictable Authentication Token Enables Account Takeover (CVSS 9.8, freescout-help-desk freescout)
- [CVE-2026-3147](https://cve.now/CVE-2026-3147.md): libvips csvload.c vips\_foreign\_load\_csv\_build heap-based overflow (CVSS 4.8, libvips)
- [CVE-2026-27743](https://cve.now/CVE-2026-27743.md): SPIP referer\_spam \< 1.3.0 Unauthenticated SQL Injection (CVSS 9.3, SPIP referer\_spam)
- [CVE-2026-27744](https://cve.now/CVE-2026-27744.md): SPIP tickets \< 4.3.3 Unauthenticated RCE (CVSS 9.3, SPIP tickets)
- [CVE-2026-27745](https://cve.now/CVE-2026-27745.md): SPIP interface\_traduction\_objets \< 2.2.2 Authenticated RCE (CVSS 8.7, SPIP interface\_traduction\_objets)
- [CVE-2026-27746](https://cve.now/CVE-2026-27746.md): SPIP jeux \< 4.1.1 Reflected XSS via index Parameters (CVSS 5.1, SPIP jeux)
- [CVE-2026-27747](https://cve.now/CVE-2026-27747.md): SPIP interface\_traduction\_objets \< 2.2.2 Authenticated SQL Injection (CVSS 7.1, SPIP interface\_traduction\_objets)
- [CVE-2026-3146](https://cve.now/CVE-2026-3146.md): libvips matrixload.c vips\_foreign\_load\_matrix\_header null pointer dereference (CVSS 4.8, libvips)
- [CVE-2025-5781](https://cve.now/CVE-2025-5781.md): Information Exposure Vulnerability in Hitachi Configuration Manager, Hitachi Ops Center API Configuration Manager (CVSS 5.2, Hitachi Ops Center API Configuration Manager · Hitachi C… +1)
- [CVE-2026-27632](https://cve.now/CVE-2026-27632.md): Talishar Vulnerable to Cross-Site Request Forgery (CSRF) (CVSS 2.6, Talishar)
- [CVE-2026-27629](https://cve.now/CVE-2026-27629.md): InvenTree Vulnerable to Server Side Template Injection (SSTI) (CVSS 5.9, InvenTree)
- [CVE-2026-27628](https://cve.now/CVE-2026-27628.md): pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams (CVSS 1.2, py-pdf pypdf · pypdf)
- [CVE-2026-27626](https://cve.now/CVE-2026-27626.md): OliveTin vulnerable to OS Command Injection via \`password\` argument type and webhook JSON extraction bypasses shell safety checks (CVSS 10.0, OliveTin · github.com/OliveTin/OliveTin)
- [CVE-2026-27612](https://cve.now/CVE-2026-27612.md): Repostat Vulnerable to Reflected Cross-Site Scripting (XSS) via repo prop in RepoCard (CVSS 6.1, denpiligrim repostat · repostat)
- [CVE-2026-27621](https://cve.now/CVE-2026-27621.md): TypiCMS Core has Stored Cross-Site Scripting (XSS) via SVG File Upload (CVSS 6.8, TypiCMS Core · typicms/core)
- [CVE-2026-27615](https://cve.now/CVE-2026-27615.md): ADB-Explorer: UNC Path Support in ManualAdbPath Leads to Remote Code Execution (RCE) (CVSS 8.8, Alex4SSB ADB-Explorer)
- [CVE-2026-27614](https://cve.now/CVE-2026-27614.md): Bugsink is vulnerable to Stored XSS via Pygments fallback in stacktrace rendering (CVSS 9.3, bugsink)
- [CVE-2026-27611](https://cve.now/CVE-2026-27611.md): FileBrowser Quantum: Password Protection Not Enforced on Shared File Links (CVSS 7.1, gtsteffaniak filebrowser · github.com/gtsteffaniak/filebrow…)
- [CVE-2026-27595](https://cve.now/CVE-2026-27595.md): Parse Dashboard has incomplete authentication on AI Agent endpoint (CVSS 9.9, parse-community parse-dashboard · parse-dashboard)
- [CVE-2026-27610](https://cve.now/CVE-2026-27610.md): Parse Dashboard Has a Cache Key Collision that Leaks Master Key to Read-Only Sessions (CVSS 7.0, parse-community parse-dashboard · parse-dashboard)
- [CVE-2026-27609](https://cve.now/CVE-2026-27609.md): Parse Dashboard Missing CSRF Protection on Agent Endpoint (CVSS 8.3, parse-community parse-dashboard · parse-dashboard)
- [CVE-2026-27608](https://cve.now/CVE-2026-27608.md): Parse Dashboard Missing Authorization on Agent Endpoint (CVSS 9.3, parse-community parse-dashboard · parse-dashboard)
- [CVE-2026-27822](https://cve.now/CVE-2026-27822.md): Rust has Critical Stored XSS in Preview Modal, leading to Administrative Account Takeover (CVSS 9.1, rustfs)
- [CVE-2026-27607](https://cve.now/CVE-2026-27607.md): RustFS's Missing Post Policy Validation leads to Arbitrary Object Write (CVSS 8.1, rustfs)
- [CVE-2026-27606](https://cve.now/CVE-2026-27606.md): Rollup 4 has Arbitrary File Write via Path Traversal (CVSS 8.8, rollup)
- [CVE-2026-25135](https://cve.now/CVE-2026-25135.md): OpenEMR's location resource for Group.$export operation returns entire patient/user population contact information (CVSS 4.5, openemr)
- [CVE-2026-3145](https://cve.now/CVE-2026-3145.md): libvips matrixload.c vips\_foreign\_load\_matrix\_header memory corruption (CVSS 4.8, libvips)
- [CVE-2026-25131](https://cve.now/CVE-2026-25131.md): OpenEMR has Broken Access Control in Procedures Configuration (CVSS 8.8, openemr)
- [CVE-2026-25127](https://cve.now/CVE-2026-25127.md): OpenEMR has Broken Access Control on Care Coordination Module (CVSS 7.0, openemr)
- [CVE-2026-25124](https://cve.now/CVE-2026-25124.md): OpenEMR has Broken Access Control in Report/Clients/Message List CSV Export (CVSS 6.5, openemr)
- [CVE-2026-24896](https://cve.now/CVE-2026-24896.md): OpenEMR has Broken Access Control that allows unauthorized access to EDI Logs (CVSS 6.5, openemr)
- [CVE-2026-24849](https://cve.now/CVE-2026-24849.md): OpenEMR Arbitrary File Read Vulnerability (CVSS 10.0, openemr)
- [CVE-2026-24847](https://cve.now/CVE-2026-24847.md): OpenEMR has Open Redirect in Eye Exam Form (CVSS 6.1, openemr)
- [CVE-2026-2914](https://cve.now/CVE-2026-2914.md): CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized privilege elevation leveraging CyberArk el (CVSS 8.5, CyberArk Software, a Palo Alto Networks Company Endpoint Pr…)
- [CVE-2026-21443](https://cve.now/CVE-2026-21443.md): OpenEMR allows inconsistent escaping of translation function output (CVSS 1.2, openemr)
- [CVE-2025-69231](https://cve.now/CVE-2025-69231.md): OpenEMR has a Stored XSS in GAD-7 Form that Enables Session Hijacking and Privilege Escalation (CVSS 8.7, openemr)
- [CVE-2025-68277](https://cve.now/CVE-2025-68277.md): OpenEMR allows links sent via Secure Messaging to be opened in OpenEMR and Portal (CVSS 7.2, openemr)
- [CVE-2025-67752](https://cve.now/CVE-2025-67752.md): OpenEMR Has Disabled SSL Certificate Verification in HTTP Client (CVSS 8.1, openemr)
- [CVE-2026-3137](https://cve.now/CVE-2026-3137.md): CodeAstro Food Ordering System food\_ordering.exe stack-based overflow (CVSS 4.8, CodeAstro Food Ordering System)
- [CVE-2025-67491](https://cve.now/CVE-2025-67491.md): OpenEMR has Stored XSS in ub04 helper (CVSS 8.5, openemr)
- [CVE-2026-27598](https://cve.now/CVE-2026-27598.md): Dagu: Path traversal in DAG creation allows arbitrary YAML file write outside DAGs directory (CVSS 7.1, dagu-org dagu · github.com/dagu-org/dagu)
- [CVE-2026-3135](https://cve.now/CVE-2026-3135.md): itsourcecode News Portal Project add-category.php sql injection (CVSS 6.9, itsourcecode News Portal Project)
- [CVE-2025-69771](https://cve.now/CVE-2025-69771.md): Cross-Site Scripting (XSS) vulnerability in the subtitle loading function of the asbplayer Chrome Extension version 1.14.0 allows attackers (CVSS 9.6)
- [CVE-2026-26717](https://cve.now/CVE-2026-26717.md): An issue in OpenFUN Richie (LMS) in src/richie/apps/courses/api.py. (CVSS 4.8, richie)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-02-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.