# CVEs published 2026-02-27

184 CVEs were published on February 27, 2026: 24 critical, 77 high. Days are UTC.

- [CVE-2026-28426](https://cve.now/CVE-2026-28426.md): Statamic vulnerable to privilege escalation via stored cross-site scripting (CVSS 8.7, statamic cms · statamic/cms)
- [CVE-2026-28425](https://cve.now/CVE-2026-28425.md): Statamic vulnerable to remote code execution via Antlers-enabled control panel inputs (CVSS 8.0, statamic cms · statamic/cms)
- [CVE-2026-27759](https://cve.now/CVE-2026-27759.md): Featured Image from Content \< 1.7 Authenticated SSRF via save\_post (CVSS 5.3, Dhrumil Kumbhani Featured Image from Content)
- [CVE-2026-28424](https://cve.now/CVE-2026-28424.md): Statamic's missing authorization allows access to email addresses (CVSS 6.5, statamic cms · statamic/cms)
- [CVE-2026-28517](https://cve.now/CVE-2026-28517.md): openDCIM \<= 23.04 OS Command Injection via dot Configuration Parameter (CVSS 9.3, openDCIM)
- [CVE-2026-28423](https://cve.now/CVE-2026-28423.md): Statamic Vulnerable to Server-Side Request Forgery via Glide (CVSS 6.8, statamic cms · statamic/cms)
- [CVE-2026-28516](https://cve.now/CVE-2026-28516.md): openDCIM \<= 23.04 SQL Injection in Config::UpdateParameter (CVSS 9.3, openDCIM)
- [CVE-2026-28515](https://cve.now/CVE-2026-28515.md): openDCIM \<= 23.04 Missing Authorization in install.php (CVSS 9.3, openDCIM)
- [CVE-2026-28422](https://cve.now/CVE-2026-28422.md): Vim has stack-buffer-overflow in build\_stl\_str\_hl() (CVSS 2.2, vim)
- [CVE-2026-28421](https://cve.now/CVE-2026-28421.md): Vim has a heap-buffer-overflow and a segmentation fault (CVSS 5.3, vim)
- [CVE-2026-28420](https://cve.now/CVE-2026-28420.md): Vim has Heap-based Buffer Overflow and OOB Read in :terminal (CVSS 4.4, vim)
- [CVE-2026-28419](https://cve.now/CVE-2026-28419.md): Vim has Heap-based Buffer Underflow in Emacs tags parsing (CVSS 5.3, vim)
- [CVE-2026-28418](https://cve.now/CVE-2026-28418.md): Vim has Heap-based Buffer Overflow in Emacs tags parsing (CVSS 4.4, vim)
- [CVE-2026-28417](https://cve.now/CVE-2026-28417.md): Vim has OS Command Injection in netrw (CVSS 4.4, vim)
- [CVE-2026-28411](https://cve.now/CVE-2026-28411.md): WeGIA Vulnerable to Authentication Bypass via \`extract($\_REQUEST)\` (CVSS 9.8, LabRedesCefetRJ WeGIA)
- [CVE-2026-28409](https://cve.now/CVE-2026-28409.md): WeGIA Vulnerable to Remote Code Execution (RCE) via OS Command Injection (CVSS 10.0, LabRedesCefetRJ WeGIA)
- [CVE-2026-28408](https://cve.now/CVE-2026-28408.md): WeGIA lacks authentication verification in adicionar\_tipo\_docs\_atendido.php (CVSS 9.8, LabRedesCefetRJ WeGIA)
- [CVE-2026-28416](https://cve.now/CVE-2026-28416.md): Gradio has SSRF via Malicious \`proxy\_url\` Injection in \`gr.load()\` Config Processing (CVSS 8.2, gradio-app gradio · gradio)
- [CVE-2026-28415](https://cve.now/CVE-2026-28415.md): Gradio has Open Redirect in OAuth Flow (CVSS 4.3, gradio-app gradio · gradio)
- [CVE-2026-28414](https://cve.now/CVE-2026-28414.md): Gradio has Absolute Path Traversal on Windows with Python 3.13+ (CVSS 7.5, gradio-app gradio · gradio)
- [CVE-2026-27167](https://cve.now/CVE-2026-27167.md): Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret (CVSS 0.0, gradio-app gradio · gradio)
- [CVE-2026-27939](https://cve.now/CVE-2026-27939.md): Statamic allows Authenticated Control Panel users to escalate privileges via elevated session bypass (CVSS 8.8, statamic cms · statamic/cms)
- [CVE-2026-28407](https://cve.now/CVE-2026-28407.md): malcontent's nested archive extraction failure can drop content from scan inputs (CVSS 6.9, chainguard-dev malcontent · github.com/chainguard-dev/malco…)
- [CVE-2026-28406](https://cve.now/CVE-2026-28406.md): kaniko has tar archive path traversal in build context extraction allows writing files outside destination directory (CVSS 8.2, chainguard-forks kaniko · github.com/chainguard-dev/kaniko)
- [CVE-2026-28402](https://cve.now/CVE-2026-28402.md): nimiq/core-rs-albatross's nimiq-blockchain missing proposal body root verification (CVSS 7.1, nimiq core-rs-albatross)
- [CVE-2026-28400](https://cve.now/CVE-2026-28400.md): Docker Model Runner Unauthenticated Runtime Flag Injection via \_configure Endpoint (CVSS 7.6, docker model-runner)
- [CVE-2026-28355](https://cve.now/CVE-2026-28355.md): "PWA" Canarytoken Vulnerable to Stored Self Cross-Site Scripting (CVSS 1.3, thinkst canarytokens)
- [CVE-2026-28352](https://cve.now/CVE-2026-28352.md): Indico missing access check in event series management API (CVSS 6.5, indico)
- [CVE-2026-28351](https://cve.now/CVE-2026-28351.md): Manipulated RunLengthDecode streams can exhaust RAM (CVSS 6.9, py-pdf pypdf · pypdf)
- [CVE-2026-28338](https://cve.now/CVE-2026-28338.md): PMD Designer has Stored XSS in VBHTMLRenderer and YAHTMLRenderer via unescaped violation messages (CVSS 6.8, pmd · net.sourceforge.pmd:pmd-core)
- [CVE-2026-28288](https://cve.now/CVE-2026-28288.md): Dify has a user enumeration issue (CVSS 5.5, langgenius dify)
- [CVE-2026-28272](https://cve.now/CVE-2026-28272.md): Kiteworks Email Protection Gateway has a Cross-site Scripting vulnerability (CVSS 8.1, kiteworks security-advisories)
- [CVE-2026-28271](https://cve.now/CVE-2026-28271.md): Kiteworks Core is vulnerable to Server-Side Request Forgery (SSRF) (CVSS 6.5, kiteworks security-advisories)
- [CVE-2026-28270](https://cve.now/CVE-2026-28270.md): Kiteworks Core has an Unrestricted Upload of File with Dangerous Type (CVSS 4.9, kiteworks security-advisories)
- [CVE-2026-28268](https://cve.now/CVE-2026-28268.md): Vikunja Vulnerable to Account Takeover via Password Reset Token Reuse (CVSS 9.8, go-vikunja vikunja · code.vikunja.io/api)
- [CVE-2018-25160](https://cve.now/CVE-2018-25160.md): HTTP::Session2 versions through 1.09 for Perl does not validate the format of user provided session ids, enabling code injection or other impact depending on session backend (CVSS 6.5, TOKUHIROM HTTP::Session2)
- [CVE-2026-28231](https://cve.now/CVE-2026-28231.md): pillow\_heif Has Integer Overflow in Encode Path Buffer Validation that Leads to Heap Out-of-Bounds Read (CVSS 5.5, bigcat88 pillow\_heif · pi-heif +1)
- [CVE-2026-3255](https://cve.now/CVE-2026-3255.md): HTTP::Session2 versions before 1.12 for Perl may generate weak session ids using the rand() function (CVSS 6.5, TOKUHIROM HTTP::Session2)
- [CVE-2026-27836](https://cve.now/CVE-2026-27836.md): phpMyFAQ Allows Unauthenticated Account Creation via WebAuthn Prepare Endpoint (CVSS 7.5, thorsten phpMyFAQ · thorsten/phpmyfaq)
- [CVE-2026-27947](https://cve.now/CVE-2026-27947.md): Group-Office Vulnerable to Remote Code Execution (RCE) (CVSS 9.4, Intermesh groupoffice)
- [CVE-2026-27832](https://cve.now/CVE-2026-27832.md): Group-Office Has Authenticated SQL Injection in advancedQueryData.comparator (CVSS 7.1, Intermesh groupoffice)
- [CVE-2026-27824](https://cve.now/CVE-2026-27824.md): calibre has IP Ban Bypass via X-Forwarded-For Header Spoofing (CVSS 5.3, kovidgoyal calibre)
- [CVE-2026-27810](https://cve.now/CVE-2026-27810.md): calibre Vulnerable to HTTP Response Header Injection (CVSS 6.4, kovidgoyal calibre)
- [CVE-2026-27734](https://cve.now/CVE-2026-27734.md): Beszel Vulnerable to Docker API Path Traversal via Unsanitized Container ID (CVSS 6.5, henrygd beszel · github.com/henrygd/beszel)
- [CVE-2026-27793](https://cve.now/CVE-2026-27793.md): Seerr has Broken Object-Level Authorization in User Profile Endpoint that Exposes Third-Party Notification Credentials (CVSS 6.5, seerr-team seerr)
- [CVE-2026-27792](https://cve.now/CVE-2026-27792.md): Seerr missing authentication on pushSubscription endpoints (CVSS 5.4, seerr-team seerr)
- [CVE-2026-27707](https://cve.now/CVE-2026-27707.md): Plex-configured Seerr instances vulnerable to unauthenticated account registration via Jellyfin authentication endpoint (CVSS 7.3, seerr-team seerr)
- [CVE-2026-28354](https://cve.now/CVE-2026-28354.md): ClipBucket v5 has IDOR in Collection Item Management (CVSS 5.7, MacWarrior clipbucket-v5)
- [CVE-2026-26997](https://cve.now/CVE-2026-26997.md): ClipBucket v5 has Stored XSS via Collection name (CVSS 2.0, MacWarrior clipbucket-v5)
- [CVE-2026-22717](https://cve.now/CVE-2026-22717.md): VMware Workstation out-of-bound read vulnerability (CVSS 2.7, VMware Workstation)
- [CVE-2026-22716](https://cve.now/CVE-2026-22716.md): VMware Workstation out-of-bounds write vulnerability (CVSS 5.0, VMware Workstation)
- [CVE-2026-2880](https://cve.now/CVE-2026-2880.md): @fastify/middie has an improper path normalization vulnerability (CVSS 8.2, @fastify/middie)
- [CVE-2026-27758](https://cve.now/CVE-2026-27758.md): SODOLA SL902-SWTGW124AS \<= 200.1.20 Missing CSRF Protections (CVSS 5.1, Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks…)
- [CVE-2026-27757](https://cve.now/CVE-2026-27757.md): SODOLA SL902-SWTGW124AS \<= 200.1.20 Unverified Password Change (CVSS 7.1, Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks…)
- [CVE-2026-27756](https://cve.now/CVE-2026-27756.md): SODOLA SL902-SWTGW124AS \<= 200.1.20 Reflected XSS in Management Interface (CVSS 5.1, Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks…)
- [CVE-2026-27755](https://cve.now/CVE-2026-27755.md): SODOLA SL902-SWTGW124AS \<= 200.1.20 Predictable Session ID (CVSS 9.3, Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks…)
- [CVE-2026-27754](https://cve.now/CVE-2026-27754.md): SODOLA SL902-SWTGW124AS \<= 200.1.20 MD5 Session Token Generation (CVSS 6.9, Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks…)
- [CVE-2026-27753](https://cve.now/CVE-2026-27753.md): SODOLA SL902-SWTGW124AS \<= 200.1.20 Improper Login Rate Limiting (CVSS 6.9, Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks…)
- [CVE-2026-27752](https://cve.now/CVE-2026-27752.md): SODOLA SL902-SWTGW124AS \<= 200.1.20 Cleartext Credential Transmission (CVSS 8.2, Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks…)
- [CVE-2026-27751](https://cve.now/CVE-2026-27751.md): SODOLA SL902-SWTGW124AS \<= 200.1.20 Use of Default Credentials (CVSS 9.3, Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks…)
- [CVE-2026-21619](https://cve.now/CVE-2026-21619.md): Unsafe Deserialization of Erlang Terms in hex\_core (CVSS 2.0, hexpm hex\_core · hexpm hex +1)
- [CVE-2019-25497](https://cve.now/CVE-2019-25497.md): osCommerce 2.3.4.1 SQL Injection via currency Parameter (CVSS 8.8, osCommerce)
- [CVE-2019-25496](https://cve.now/CVE-2019-25496.md): osCommerce 2.3.4.1 SQL Injection via products\_id Parameter (CVSS 8.8, osCommerce)
- [CVE-2019-25495](https://cve.now/CVE-2019-25495.md): osCommerce 2.3.4.1 SQL Injection via reviews\_id Parameter (CVSS 8.8, osCommerce)
- [CVE-2019-25494](https://cve.now/CVE-2019-25494.md): Homey BNB V4 SQL Injection Authentication Bypass via Admin Panel (CVSS 8.8, Doditsolutions Homey BNB)
- [CVE-2019-25493](https://cve.now/CVE-2019-25493.md): Homey BNB V4 SQL Injection via getrecord.php (CVSS 8.8, Doditsolutions Homey BNB)
- [CVE-2019-25492](https://cve.now/CVE-2019-25492.md): Homey BNB V4 SQL Injection via getcmsdata.php (CVSS 8.8, Doditsolutions Homey BNB)
- [CVE-2019-25491](https://cve.now/CVE-2019-25491.md): Homey BNB V4 SQL Injection via cms\_getpagetitle.php (CVSS 8.8, Doditsolutions Homey BNB)
- [CVE-2019-25490](https://cve.now/CVE-2019-25490.md): Homey BNB V4 SQL Injection via admin edit.php (CVSS 8.8, Doditsolutions Homey BNB)
- [CVE-2019-25489](https://cve.now/CVE-2019-25489.md): Homey BNB V4 SQL Injection via ajax\_refresh\_subtotal (CVSS 8.8, Doditsolutions Homey BNB)
- [CVE-2026-25147](https://cve.now/CVE-2026-25147.md): OpenEMR's Portal Payment Endpoint Trusts User-Controlled pid (CVSS 7.1, openemr)
- [CVE-2026-24488](https://cve.now/CVE-2026-24488.md): OpenEMR Vulnerable to Arbitrary File Exfiltration via Fax Endpoint (CVSS 6.5, openemr)
- [CVE-2026-2293](https://cve.now/CVE-2026-2293.md): NestJS 11.1.13 - Lack of data validation allowing authentication/authorization bypass (CVSS 8.2, nest.js · @nestjs/platform-fastify)
- [CVE-2026-3304](https://cve.now/CVE-2026-3304.md): Multer vulnerable to Denial of Service via incomplete cleanup (CVSS 8.7, expressjs multer · multer)
- [CVE-2026-2359](https://cve.now/CVE-2026-2359.md): Multer vulnerable to Denial of Service via resource exhaustion (CVSS 8.7, expressjs multer · multer)
- [CVE-2026-3277](https://cve.now/CVE-2026-3277.md): The OpenID Connect (OIDC) authentication configuration in PowerShell Universal before 2026.1.3 stores the OIDC client secret in cleartext i (CVSS 5.5, Devolutions PowerShell Universal)
- [CVE-2026-2749](https://cve.now/CVE-2026-2749.md): Path traversal in Centreon Open Tickets (CVSS 9.9, Centreon Open Tickets on Central Server)
- [CVE-2026-2750](https://cve.now/CVE-2026-2750.md): Command Injection via CLAPI generatetraps (CVSS 9.1, Centreon Open Tickets on Central Server)
- [CVE-2026-3327](https://cve.now/CVE-2026-3327.md): Authenticated DatoCMS Web Previews Plugin Iframe Injection (CVSS 4.8, DatoCMS Web Previews)
- [CVE-2025-15498](https://cve.now/CVE-2025-15498.md): SQL Injection in Pro3W CMS (CVSS 9.3, Pro3W CMS)
- [CVE-2026-2751](https://cve.now/CVE-2026-2751.md): Blind SQL Injection (CVSS 8.3, Centreon Web on Central Server)
- [CVE-2025-10990](https://cve.now/CVE-2025-10990.md): Rexml: rexml: denial of service via inefficient regex parsing (CVSS 7.5, Red Hat Satellite · rexml)
- [CVE-2026-3223](https://cve.now/CVE-2026-3223.md): Zip Slip leading to Arbitrary File Write and Privilege Escalation in Google Web Designer (CVSS 8.4, Google Web Designer)
- [CVE-2025-11950](https://cve.now/CVE-2025-11950.md): Reflected XSS in Knowhy's EduAsist (CVSS 6.3, KNOWHY Advanced Technology Trading Ltd. EduAsist)
- [CVE-2025-11252](https://cve.now/CVE-2025-11252.md): SQLi in Signum Technologies' windesk.fm (CVSS 9.8, Signum Technology Promotion and Training windesk.fm)
- [CVE-2025-11251](https://cve.now/CVE-2025-11251.md): SQLi in Dayneks Software's E-Commerce Platform (CVSS 9.8, Dayneks Software Industry and Trade E-Commerce Platform)
- [CVE-2026-24352](https://cve.now/CVE-2026-24352.md): Session Fixation in PluXml CMS (CVSS 4.8, PluXml CMS)
- [CVE-2026-24351](https://cve.now/CVE-2026-24351.md): Stored XSS in PluXml CMS (CVSS 5.1, PluXml CMS)
- [CVE-2026-24350](https://cve.now/CVE-2026-24350.md): Stored XSS in PluXml CMS (CVSS 5.1, PluXml CMS)
- [CVE-2026-2831](https://cve.now/CVE-2026-2831.md): MailArchiver \<= 4.5.0 - Authenticated (Admininistrator+) SQL Injection via 'logid' Parameter (CVSS 4.9, pierrelannoy MailArchiver)
- [CVE-2026-1434](https://cve.now/CVE-2026-1434.md): Reflected XSS in Omega-PSIR (CVSS 5.1, Politechnika Warszawska Omega-PSIR)
- [CVE-2026-1305](https://cve.now/CVE-2026-1305.md): Japanized for WooCommerce \<= 2.8.4 - Missing Authorization to Unauthenticated Paidy Order Manipulation (CVSS 5.3, shoheitanaka Japanized for WooCommerce)
- [CVE-2025-14142](https://cve.now/CVE-2025-14142.md): Electric Enquiries \<= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button' Shortcode Attribute (CVSS 6.4, electriccode Electric Enquiries)
- [CVE-2024-10938](https://cve.now/CVE-2024-10938.md): OVRI Payment 1.7.0 - Malicious .htaccess directive (CVSS 6.5, moneytigo OVRI Payment)
- [CVE-2026-21660](https://cve.now/CVE-2026-21660.md): Johnson Controls-Frick Quantum HD-Hardcoded Email Credentials Saved as Plaintext in Firmware (CVSS 6.9, Johnson Controls Frick Controls Quantum HD)
- [CVE-2026-21659](https://cve.now/CVE-2026-21659.md): Johnson Controls -Frick Quantum HD-Unauthenticated Remote Code Execution and Information Disclosure due to Local File Inclusion (CVSS 8.7, Johnson Controls Frick Controls Quantum HD)
- [CVE-2026-21658](https://cve.now/CVE-2026-21658.md): Johnson Controls -Frick Quantum HD- Unauthenticated Remote Code Execution (CVSS 8.8, Johnson Controls Frick Controls Quantum HD)
- [CVE-2026-21657](https://cve.now/CVE-2026-21657.md): Johnson Controls -Frick Quantum HD- Unauthenticated Remote Code Execution (CVSS 8.8, Johnson Controls Frick Controls Quantum HD)
- [CVE-2026-21656](https://cve.now/CVE-2026-21656.md): Johnson Controls -Frick Quantum HD- Unauthenticated Remote Code Execution (CVSS 8.8, Johnson Controls Frick Controls Quantum HD)
- [CVE-2026-1627](https://cve.now/CVE-2026-1627.md): An attacker may exploit the use of outdated and weak MAC algorithms in the device’s SSH service to potentially compromise the integrity of t (CVSS 6.5, SICK AG SICK LMS1000 · SICK AG SICK MRS1000)
- [CVE-2026-1626](https://cve.now/CVE-2026-1626.md): An attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to potentially observe or manipulate parts of th (CVSS 6.5, SICK AG SICK LMS1000 · SICK AG SICK MRS1000)
- [CVE-2026-21654](https://cve.now/CVE-2026-21654.md): Johnson Controls -Frick Quantum HD- Unauthenticated Remote Code Execution (CVSS 8.8, Johnson Controls Frick Controls Quantum HD)
- [CVE-2026-2362](https://cve.now/CVE-2026-2362.md): WP Accessibility \<= 2.3.1 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via 'alt' Attribute (CVSS 6.4, joedolson WP Accessibility)
- [CVE-2026-2383](https://cve.now/CVE-2026-2383.md): Simple Download Monitor \<= 4.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field (CVSS 6.4, mra13 Simple Download Monitor)
- [CVE-2026-2252](https://cve.now/CVE-2026-2252.md): XML External Entity (XXE) vulnerability resulting in Server-Side Request Forgery (SSRF) (CVSS 7.5, Xerox FreeFlow Core)
- [CVE-2025-12150](https://cve.now/CVE-2025-12150.md): Org.keycloak/keycloak-services: webauthn attestation statement verification bypass (CVSS 3.1, keycloak · Red Hat build of Keycloak +1)
- [CVE-2026-2251](https://cve.now/CVE-2026-2251.md): Path Traversal leading to Remote Code Execution (RCE) (CVSS 9.8, Xerox FreeFlow Core)
- [CVE-2026-27776](https://cve.now/CVE-2026-27776.md): IM-LogicDesigner module of intra-mart Accel Platform contains insecure deserialization issue. (CVSS 7.2, NTT DATA INTRAMART intra-mart Accel Platform)
- [CVE-2026-0980](https://cve.now/CVE-2026-0980.md): Rubyipmi: red hat satellite: remote code execution in rubyipmi via malicious bmc username (CVSS 8.3, Red Hat Satellite 6.16 for RHEL · Red Hat Satellite 6.17… +3)
- [CVE-2026-0871](https://cve.now/CVE-2026-0871.md): Org.keycloak/keycloak-services: keycloak: unauthorized modification of unmanaged user attributes by administrators (CVSS 4.9, Red Hat build of Keycloak · Red Hat JBoss Enterprise App… +2)
- [CVE-2025-13327](https://cve.now/CVE-2025-13327.md): Uv: uv: specially crafted zip archives lead to arbitrary code execution due to parsing differentials (CVSS 6.3, astral-sh uv · Red Hat OpenShift AI +2)
- [CVE-2025-9909](https://cve.now/CVE-2025-9909.md): Aap-gateway: improper path validation in gateway allows credential exfiltration (CVSS 6.7, Red Hat Ansible Automation Platform 2.5 for RHEL · Red H… +1)
- [CVE-2025-9908](https://cve.now/CVE-2025-9908.md): Event-driven-ansible: sensitive internal headers disclosure in aap eda event streams (CVSS 6.7, Red Hat Ansible Automation Platform 2.5 for RHEL · Red H… +1)
- [CVE-2025-9907](https://cve.now/CVE-2025-9907.md): Event-driven-ansible: event stream test mode exposes sensitive headers in aap eda (CVSS 6.7, Red Hat Ansible Automation Platform 2.5 for RHEL · Red H… +1)
- [CVE-2025-9572](https://cve.now/CVE-2025-9572.md): Foreman: satellite: graphql api permission bypass leads to information disclosure (CVSS 5.0, The Foreman Foreman · Red Hat Satellite 6.15 for RHEL +3)
- [CVE-2025-15567](https://cve.now/CVE-2025-15567.md): Insufficient protection mechanisms in the Health Module may lead to partial information disclosure. (CVSS 5.1, vivo Health)
- [CVE-2025-15509](https://cve.now/CVE-2025-15509.md): The SmartRemote module has insufficient restrictions on loading URLs, which may lead to some information leakage. (CVSS 7.1, vivo SmartRemote)
- [CVE-2025-12981](https://cve.now/CVE-2025-12981.md): Listee \<= 1.1.6 - Unauthenticated Privilege Escalation (CVSS 9.8, dreamstechnologies Listee)
- [CVE-2025-14149](https://cve.now/CVE-2025-14149.md): Xpro Addons — 140+ Widgets for Elementor \<= 1.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Scroller Widget box link (CVSS 6.4, Xpro Addons — 140+ Widgets for Elementor)
- [CVE-2025-14040](https://cve.now/CVE-2025-14040.md): Automotive Car Dealership Business WordPress Theme \<= 13.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Call to Action Fields (CVSS 6.4, themesuite Automotive Car Dealership Business WordPress The…)
- [CVE-2026-3302](https://cve.now/CVE-2026-3302.md): SourceCodester Doctor Appointment System Sign Up register.php cross site scripting (CVSS 5.3, SourceCodester Doctor Appointment System)
- [CVE-2026-27653](https://cve.now/CVE-2026-27653.md): The installers for multiple products provided by Soliton Systems K.K. (CVSS 6.7, Soliton Systems K.K. Soliton SecureBrowser for OneGate ·… +1)
- [CVE-2026-3301](https://cve.now/CVE-2026-3301.md): Totolink N300RH Web Management cstecgi.cgi setWebWlanIdx os command injection (CVSS 9.3, Totolink N300RH)
- [CVE-2026-3293](https://cve.now/CVE-2026-3293.md): snowflakedb snowflake-jdbc JDBC URL SdkProxyRoutePlanner.java SdkProxyRoutePlanner redos (CVSS 4.8, snowflakedb snowflake-jdbc · net.snowflake:snowflake-jdbc)
- [CVE-2026-28372](https://cve.now/CVE-2026-28372.md): telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added (CVSS 7.4, GNU inetutils)
- [CVE-2026-3292](https://cve.now/CVE-2026-3292.md): jizhiCMS Batch Model.php findAll sql injection (CVSS 5.3, jizhiCMS)
- [CVE-2026-28370](https://cve.now/CVE-2026-28370.md): In the query parser in OpenStack Vitrage before 12.0.1, 13.0.0, 14.0.0, and 15.0.0, a user allowed to access the Vitrage API may trigger cod (CVSS 9.1, OpenStack Vitrage · vitrage)
- [CVE-2026-1558](https://cve.now/CVE-2026-1558.md): WP Recipe Maker \<= 10.3.2 - Insecure Direct Object Reference to Unauthenticated Arbitrary Post Metadata Modification via 'recipeId' Parameter (CVSS 5.3, brechtvds WP Recipe Maker)
- [CVE-2026-3289](https://cve.now/CVE-2026-3289.md): Sanluan PublicCMS Template Cache Generation TemplateCacheComponent.java saveMetadata path traversal (CVSS 5.3, Sanluan PublicCMS)
- [CVE-2026-1442](https://cve.now/CVE-2026-1442.md): Unitree UPK files Hard-Coded Key (CVSS 7.8, Unitree UPK)
- [CVE-2026-3287](https://cve.now/CVE-2026-3287.md): youlaitech youlai-mall App-side Product Pagination Endpoint SpuController.java listPagedSpuForApp sql injection (CVSS 5.3, youlaitech youlai-mall)
- [CVE-2026-28364](https://cve.now/CVE-2026-28364.md): In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables remote code execution (CVSS 7.9, OCaml)
- [CVE-2026-3286](https://cve.now/CVE-2026-3286.md): itwanger paicoding Image Save Endpoint ImageRestController.java save server-side request forgery (CVSS 5.3, itwanger paicoding)
- [CVE-2026-2428](https://cve.now/CVE-2026-2428.md): Fluent Forms Pro Add On Pack \<= 6.1.17 - Missing Authorization to Unauthenticated Payment Status modification (CVSS 7.5, techjewel Fluent Forms Pro Add On Pack)
- [CVE-2026-28363](https://cve.now/CVE-2026-28363.md): In OpenClaw before 2026.2.23, tools.exec.safeBins validation for sort could be bypassed via GNU long-option abbreviations (such as --compres (CVSS 9.9, OpenClaw)
- [CVE-2026-3285](https://cve.now/CVE-2026-3285.md): berry-lang berry be\_lexer.c scan\_string out-of-bounds (CVSS 4.8, berry-lang berry)
- [CVE-2026-3284](https://cve.now/CVE-2026-3284.md): libvips extract.c vips\_extract\_area\_build integer overflow (CVSS 4.8, libvips)
- [CVE-2026-3283](https://cve.now/CVE-2026-3283.md): libvips extract.c vips\_extract\_band\_build out-of-bounds (CVSS 4.8, libvips)
- [CVE-2026-3282](https://cve.now/CVE-2026-3282.md): libvips unpremultiply.c vips\_unpremultiply\_build out-of-bounds (CVSS 4.8, libvips)
- [CVE-2026-3281](https://cve.now/CVE-2026-3281.md): libvips bandrank.c vips\_bandrank\_build heap-based overflow (CVSS 4.8, libvips)
- [CVE-2026-24498](https://cve.now/CVE-2026-24498.md): Exposure of Sensitive Information to an Unauthorized Actor vulnerability in EFM-Networks, Inc. (CVSS 6.0, EFM-Networks ipTIME T5008 · EFM-Networks ipTIME AX2004M +2)
- [CVE-2026-24497](https://cve.now/CVE-2026-24497.md): Stack-based Buffer Overflow vulnerability in SimTech Systems, Inc. (CVSS 8.4, SimTech Systems ThinkWise)
- [CVE-2026-3275](https://cve.now/CVE-2026-3275.md): Tenda F453 httpd addressNat fromAddressNat buffer overflow (CVSS 8.7, Tenda F453)
- [CVE-2026-3037](https://cve.now/CVE-2026-3037.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 8.0, Copeland XWEB 300D PRO · Copeland XWEB 500D PRO +1)
- [CVE-2026-20797](https://cve.now/CVE-2026-20797.md): Copeland XWEB and XWEB Pro Stack-based Buffer Overflow (CVSS 4.3, Copeland XWEB 300D PRO · Copeland XWEB 500D PRO +1)
- [CVE-2026-3274](https://cve.now/CVE-2026-3274.md): Tenda F453 httpd L7Prot frmL7ProtForm buffer overflow (CVSS 8.7, Tenda F453)
- [CVE-2026-22877](https://cve.now/CVE-2026-22877.md): Copeland XWEB and XWEB Pro Path Traversal (CVSS 3.7, Copeland XWEB 300D PRO · Copeland XWEB 500D PRO +1)
- [CVE-2026-25037](https://cve.now/CVE-2026-25037.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 8.0, Copeland XWEB 300D PRO · Copeland XWEB 500D PRO +1)
- [CVE-2026-25196](https://cve.now/CVE-2026-25196.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 8.0, Copeland XWEB 300D PRO · Copeland XWEB 500D PRO +1)
- [CVE-2026-20764](https://cve.now/CVE-2026-20764.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 8.0, Copeland XWEB 300D PRO · Copeland XWEB 500D PRO +1)
- [CVE-2026-25721](https://cve.now/CVE-2026-25721.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 8.0, Copeland XWEB 300D PRO · Copeland XWEB 500D PRO +1)
- [CVE-2026-23702](https://cve.now/CVE-2026-23702.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 8.0, Copeland XWEB 300D PRO · Copeland XWEB 500D PRO +1)
- [CVE-2026-24452](https://cve.now/CVE-2026-24452.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 8.0, Copeland XWEB 300D PRO · Copeland XWEB 500D PRO +1)
- [CVE-2026-25105](https://cve.now/CVE-2026-25105.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 8.0, Copeland XWEB 300D PRO · Copeland XWEB 500D PRO +1)
- [CVE-2026-24695](https://cve.now/CVE-2026-24695.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 8.0, Copeland XWEB 300D PRO · Copeland XWEB 500D PRO +1)
- [CVE-2026-20902](https://cve.now/CVE-2026-20902.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 8.0, Copeland XWEB 300D PRO · Copeland XWEB 500D PRO +1)
- [CVE-2026-25109](https://cve.now/CVE-2026-25109.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 8.0, Copeland XWEB 300D PRO · Copeland XWEB 500D PRO +1)
- [CVE-2026-24689](https://cve.now/CVE-2026-24689.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 8.0, Copeland XWEB 300D PRO · Copeland XWEB 500D PRO +1)
- [CVE-2026-20910](https://cve.now/CVE-2026-20910.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 8.0, Copeland XWEB 300D PRO · Copeland XWEB 500D PRO +1)
- [CVE-2026-25195](https://cve.now/CVE-2026-25195.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 8.0, Copeland XWEB 300D PRO · Copeland XWEB 500D PRO +1)
- [CVE-2026-24517](https://cve.now/CVE-2026-24517.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 8.0, Copeland XWEB 300D PRO · Copeland XWEB 500D PRO +1)
- [CVE-2026-20742](https://cve.now/CVE-2026-20742.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 8.0, Copeland XWEB 300D PRO · Copeland XWEB 500D PRO +1)
- [CVE-2026-25111](https://cve.now/CVE-2026-25111.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 8.0, Copeland XWEB 300D PRO · Copeland XWEB 500D PRO +1)
- [CVE-2026-21389](https://cve.now/CVE-2026-21389.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 8.0, Copeland XWEB 300D PRO · Copeland XWEB 500D PRO +1)
- [CVE-2026-24663](https://cve.now/CVE-2026-24663.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 9.0, Copeland XWEB 300D PRO · Copeland XWEB 500D PRO +1)
- [CVE-2026-21718](https://cve.now/CVE-2026-21718.md): Copeland XWEB and XWEB Pro Use of a Broken or Risky Cryptographic Algorithm (CVSS 10.0, Copeland XWEB 300D PRO · Copeland XWEB 500D PRO +1)
- [CVE-2026-25085](https://cve.now/CVE-2026-25085.md): Copeland XWEB and XWEB Pro Unexpected Status Code or Return Value (CVSS 8.6, Copeland XWEB 300D PRO · Copeland XWEB 500D PRO +1)
- [CVE-2026-3273](https://cve.now/CVE-2026-3273.md): Tenda F453 httpd AdvSetWrlsafeset formWrlsafeset buffer overflow (CVSS 8.7, Tenda F453)
- [CVE-2026-22878](https://cve.now/CVE-2026-22878.md): Mobility46 mobility46.se Insufficiently Protected Credentials (CVSS 6.5, mobility46.se)
- [CVE-2026-27647](https://cve.now/CVE-2026-27647.md): Mobility46 mobility46.se Insufficient Session Expiration (CVSS 7.3, mobility46.se)
- [CVE-2026-26305](https://cve.now/CVE-2026-26305.md): Mobility46 mobility46.se Improper Restriction of Excessive Authentication Attempts (CVSS 7.5, mobility46.se)
- [CVE-2026-27028](https://cve.now/CVE-2026-27028.md): Mobility46 mobility46.se Missing Authentication for Critical Function (CVSS 9.4, mobility46.se)
- [CVE-2021-4456](https://cve.now/CVE-2021-4456.md): Net::CIDR versions before 0.24 for Perl mishandle leading zeros in IP CIDR addresses, which may have unspecified impact (CVSS 6.5, MRSAM Net::CIDR)
- [CVE-2026-25774](https://cve.now/CVE-2026-25774.md): EV Energy ev.energy Insufficiently Protected Credentials (CVSS 6.5, EV Energy ev.energy)
- [CVE-2026-26290](https://cve.now/CVE-2026-26290.md): EV Energy ev.energy Insufficient Session Expiration (CVSS 7.3, EV Energy ev.energy)
- [CVE-2026-24445](https://cve.now/CVE-2026-24445.md): EV Energy ev.energy Improper Restriction of Excessive Authentication Attempts (CVSS 7.5, EV Energy ev.energy)
- [CVE-2026-27772](https://cve.now/CVE-2026-27772.md): EV Energy ev.energy Missing Authentication for Critical Function (CVSS 9.4, EV Energy ev.energy)
- [CVE-2026-27773](https://cve.now/CVE-2026-27773.md): SWITCH EV swtchenergy.com Insufficiently Protected Credentials (CVSS 6.5, SWITCH EV swtchenergy.com)
- [CVE-2026-25778](https://cve.now/CVE-2026-25778.md): SWITCH EV swtchenergy.com Insufficient Session Expiration (CVSS 7.3, SWITCH EV swtchenergy.com)
- [CVE-2026-3272](https://cve.now/CVE-2026-3272.md): Tenda F453 httpd DhcpListClient fromDhcpListClient buffer overflow (CVSS 8.7, Tenda F453)
- [CVE-2026-3271](https://cve.now/CVE-2026-3271.md): Tenda F453 httpd P2pListFilterof fromP2pListFilter buffer overflow (CVSS 8.7, Tenda F453)
- [CVE-2025-69437](https://cve.now/CVE-2025-69437.md): PublicCMS v5.202506.d and earlier is vulnerable to stored XSS. (CVSS 8.7)
- [CVE-2026-26861](https://cve.now/CVE-2026-26861.md): CleverTap Web SDK version 1.15.2 and earlier is vulnerable to Cross-Site Scripting (XSS) via window.postMessage. (CVSS 8.3, clevertap-web-sdk)
- [CVE-2026-26862](https://cve.now/CVE-2026-26862.md): CleverTap Web SDK version 1.15.2 and earlier is vulnerable to DOM-based Cross-Site Scripting (XSS) via window.postMessage in the Visual Buil (CVSS 8.3, clevertap-web-sdk)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-02-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.