CVEs published April 2, 2026
257 CVEs were published on April 2, 2026: 21 critical, 100 high.
- Published
- 257
- Critical
- 21
- High
- 100
- Medium
- 125
- Low
- 9
- Unrated
- 2
- Now in CISA KEV
- 0
- Fix available
- 162
Most affected products
- Endian Firewall
- 34
- SEPPmail Secure Email Gateway
- 14
- rack
- 13
- Apple macOS
- 11
- Trendnet TEW-657BRM
- 7
- Linux
- 6
- OISF suricata
- 6
- MB connect line mbCONNECT24 · MB connect line mymbCONNECT24
- 5
- OpenBSD OpenSSH
- 5
- TP-Link Systems Tapo C520WS
- 5
Critical 21
- CVE-2026-32211Azure MCP Server Information Disclosure VulnerabilityMicrosoft Azure Web Apps
- CVE-2026-33105Microsoft Azure Kubernetes Service Elevation of Privilege VulnerabilityMicrosoft Azure Kubernetes Service
- CVE-2026-26135Azure Custom Locations Resource Provider (RP) Elevation of Privilege VulnerabilityMicrosoft Azure Custom Locations Resource Provider
- CVE-2026-33107Azure Databricks Elevation of Privilege VulnerabilityMicrosoft Azure Databricks
- CVE-2026-32213Azure AI Foundry Elevation of Privilege VulnerabilityMicrosoft Azure AI Foundry
- CVE-2024-14034Hirschmann HiEOS Authentication Bypass via HTTP Management ModuleBelden Hirschmann HiEOS LRS11
- CVE-2026-34838Group-Office: Authenticated Remote Code Execution via PHP Insecure Deserialization in `AbstractSettingsCollection`Intermesh groupoffice
- CVE-2026-35053OneUptime: Unauthenticated Workflow Execution via ManualAPIoneuptime
- CVE-2026-34759OneUptime: Unauthenticated notification API endpoints - financial abuse via phone number purchase, service disruption, and SMTP credential exposureoneuptime
- CVE-2026-34758OneUptime: Missing Authentication on Notification Endpointsoneuptime
- CVE-2026-34745Unauthenticated Path Traversal Arbitrary File Write in /api/uploadChunked/publicShaneIsrael fireshare
- CVE-2026-34717OpenProject: SQL Injection in Cost Reporting =n Operator via parse_number_stringopf openproject
- CVE-2026-33950signalk-server: Privilege Escalation by Admin Role Injection via /enableSecuritysignalk-server
- CVE-2026-33746Convoy: JWT Signature Verification Bypass Allows Authentication as Arbitrary UsersConvoyPanel panel
- CVE-2026-32871FastMCP OpenAPI Provider has an SSRF & Path Traversal VulnerabilityPrefectHQ fastmcp · fastmcp
- CVE-2026-35002Agno < 2.3.24 field_type Eval Injection Arbitrary Code ExecutionAgno
- CVE-2026-2701RCE vulnerability in Progress ShareFile Storage Zones Controller (SZC)Progress ShareFile Storage Zones Controller
- CVE-2026-2699EAR vulnerability in Progress ShareFile Storage Zones Controller (SZC)Progress ShareFile Storage Zones Controller
- CVE-2026-33615MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the setinfo EndpointMB connect line mbCONNECT24 · MB connect line mymbCONNECT24
- CVE-2026-25212An issue was discovered in Percona PMM before 3.7.
- CVE-2026-34877An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0.
High 100
- CVE-2026-32173Azure SRE Agent Information Disclosure VulnerabilityMicrosoft Azure SRE Agent Gateway - SignalR Hub
- CVE-2022-4986Hirschmann EagleSDV Denial of Service via TLSBelden Hirschmann EagleSDV
- CVE-2024-14033Hirschmann EagleSDV Denial of Service via TLSBelden Hirschmann EagleSDV
- CVE-2025-15620HiOS Switch Platform Denial-of-Service via Web InterfaceBelden Hirschmann HiOS Switch Platform
- CVE-2026-35467Private Key stored as extractable in browser IndexeDBCERT/CC cveClient/encrypt-storage.js
- CVE-2023-7343Belden Industrial HiVision Arbitrary Code Execution via Malicious Project FileBelden Hirschmann Industrial HiVision
- CVE-2026-34931hoppscotch: Improper loopback redirect_uri validation in device-login flowhoppscotch
- CVE-2026-34932hoppscotch: Stored XSS via mock server responses on backend originhoppscotch
- CVE-2026-34834Bulwark Webmail: Authentication Bypass in verifyIdentity() due to missing cookie validationbulwarkmail webmail
- CVE-2026-34833Bulwark Webmail: Information Exposure: password returned in /api/auth/sessionbulwarkmail webmail
- CVE-2026-34825NocoBase Has SQL Injection via template variable substitution in workflow SQL nodenocobase · @nocobase/plugin-workflow-sql
- CVE-2026-34840OneUptime SSO: Multi-Assertion Identity Injection via Decoupled Signature Verificationoneuptime
- CVE-2026-34752Haraka affected by DoS via `__proto__` email headerHaraka
- CVE-2026-5429Kiro IDE Webview Cross-Site Scripting via Workspace Color ThemeAWS Kiro IDE
- CVE-2026-34742Model Context Protocol Go SDK: DNS Rebinding Protection Disabled by Default for Servers Running on Localhostmodelcontextprotocol go-sdk · github.com/modelcontextprotoc…
- CVE-2023-7342Belden HiSecOS Web Server Privilege EscalationBelden Hirschmann HiSecOS EAGLE
- CVE-2025-43257This issue was addressed with improved handling of symlinks.Apple macOS
- CVE-2026-34735Hytale Modding Vulnerable to Remote Code Execution via File Upload Bypass in `FileController`HytaleModding wiki
- CVE-2024-40849A race condition was addressed with additional validation.Apple macOS
- CVE-2024-44303The issue was addressed with improved checks.Apple macOS
- CVE-2024-44250A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2024-40858A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2025-43264The issue was addressed with improved memory handling.Apple macOS
- CVE-2024-44286This issue was addressed through improved state management.Apple macOS
- CVE-2024-44219A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2025-43202This issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS
- CVE-2025-43219The issue was addressed with improved memory handling.Apple macOS
- CVE-2026-34581goshs has Auth Bypass via Share Tokenpatrickhener goshs · github.com/patrickhener/goshs
- CVE-2026-34725dbgate-web: Stored XSS in applicationIcon leads to potential RCE in Electron due to unsafe renderer configurationdbgate · dbgate-web
- CVE-2026-34601xmldom: XML injection via unsafe CDATA serialization allows attacker-controlled markup insertionxmldom · @xmldom/xmldom
- CVE-2026-34593Ash Framework: Ash.Type.Module.cast_input/2 atom exhaustion via unchecked Module.concat allows BEAM VM crashash-project ash
- CVE-2026-34598YesWiki has Persistant Blind XSS at "/?BazaR&vue=consulter"yeswiki · yeswiki/yeswiki
- CVE-2026-34591Poetry Has Wheel Path Traversal Which Can Lead to Arbitrary File Writepython-poetry poetry · poetry
- CVE-2026-34828listmonk: Active sessions remain valid after password reset and password changeknadh listmonk · github.com/knadh/listmonk
- CVE-2026-34577Postiz: Unauthenticated Full-Read SSRF via /public/stream Endpoint with Trivially Bypassable Extension Checkgitroomhq postiz-app
- CVE-2026-34576Postiz: SSRF in upload-from-url endpoint allows fetching internal resources and cloud metadatagitroomhq postiz-app
- CVE-2026-34124Denial of Service via Path Expansion Overflow in HTTP Service in TP-Link Tapo C520WSTP-Link Systems Tapo C520WS
- CVE-2026-34122Stack-based Buffer Overflow Leading to Denial of Service in TP-Link Tapo C520WSTP-Link Systems Tapo C520WS
- CVE-2026-34121Authentication Bypass in DS Configuration Service via HTTP Request Parsing Differential of TP-Link Tapo C520WSTP-Link Systems Tapo C520WS
- CVE-2026-34120Heap-based Buffer Overflow Vulnerability Leading to Denial-of-Service in TP-Link Tapo C520WSTP-Link Systems Tapo C520WS
- CVE-2026-34119Heap-based Buffer Overflow Vulnerability Leading to Denial-of-Service in TP-Link Tapo C520WSTP-Link Systems Tapo C520WS
- CVE-2026-34118Heap-based Buffer Overflow Vulnerability Leading to Denial-of-Service in TP-Link Tapo C100, C101, C210 & C520WSTP-Link Systems Tapo C520WS · TP Link Systems Tapo C100 +2
- CVE-2026-34524SillyTavern: Path traversal in `/api/chats/export` and `/api/chats/delete` allows arbitrary file read/delete within user data rootSillyTavern
- CVE-2026-34522SillyTavern: Path traversal in `/api/chats/import` allows arbitrary file write outside intended chat directorySillyTavern
- CVE-2026-34827Rack: Algorithmic-Complexity DoS in Rack::Multipart::Parserrack
- CVE-2026-34829Rack: Denial of Service via Unbounded Multipart File Upload Without Content-Lengthrack
- CVE-2026-34785Rack: Local file inclusion in `Rack::Static` via URL Prefix Matchingrack
- CVE-2026-35385In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the OpenBSD OpenSSH
- CVE-2025-65114Apache Traffic Server: Malformed chunked message body allows request smugglingApache Software Foundation Apache Traffic Server
- CVE-2025-58136Apache Traffic Server: A simple legitimate POST request causes a crashApache Software Foundation Apache Traffic Server
- CVE-2026-5350Trendnet TEW-657BRM setup.cgi update_pcdb stack-based overflowTrendnet TEW-657BRM
- CVE-2026-5349Trendnet TEW-657BRM setup.cgi add_apcdb stack-based overflowTrendnet TEW-657BRM
- CVE-2026-33544Tinyauth has OAuth account confusion via shared mutable state on singleton service instancessteveiliop56 tinyauth · github.com/steveiliop56/tinyauth
- CVE-2026-33641Glances Vulnerable to Command Injection via Dynamic Configuration Valuesnicolargo glances · glances
- CVE-2026-33533Glances Vulnerable to Cross-Origin System Information Disclosure via XML-RPC Server CORS Wildcardnicolargo glances · glances
- CVE-2026-34797Endian Firewall /cgi-bin/logs_smtp.cgi DATE Perl Command InjectionEndian Firewall
- CVE-2026-34796Endian Firewall /cgi-bin/logs_openvpn.cgi DATE Perl Command InjectionEndian Firewall
- CVE-2026-34795Endian Firewall /cgi-bin/logs_log.cgi DATE Perl Command InjectionEndian Firewall
- CVE-2026-34794Endian Firewall /cgi-bin/logs_ids.cgi DATE Perl Command InjectionEndian Firewall
- CVE-2026-34793Endian Firewall /cgi-bin/logs_firewall.cgi DATE Perl Command InjectionEndian Firewall
- CVE-2026-34792Endian Firewall /cgi-bin/logs_clamav.cgi DATE Perl Command InjectionEndian Firewall
- CVE-2026-34791Endian Firewall /cgi-bin/logs_proxy.cgi DATE Perl Command InjectionEndian Firewall
- CVE-2026-34790Endian Firewall /cgi-bin/backup.cgi remove ARCHIVE Directory TraversalEndian Firewall
- CVE-2026-34728phpMyFAQ: Path Traversal - Arbitrary File Deletion in MediaBrowserControllerthorsten phpMyFAQ · phpmyfaq/phpmyfaq
- CVE-2026-31937Suricata dcerpc: quadratic complexity in dcerpc bufferingOISF suricata
- CVE-2026-31935Suricata http2: unbounded resource consumptionOISF suricata
- CVE-2026-31934Suricata smtp/mine: quadratic complexity in extracting urlsOISF suricata
- CVE-2026-31933Suricata stream: quadratic complexity in stream inspectionOISF suricata
- CVE-2026-31932Suricata krb5: quadratic complexity in krb5 bufferingOISF suricata
- CVE-2026-26928Lack of Dynamic Library Validation in SzafirHostKrajowa Izba Rozliczeniowa SzafirHost
- CVE-2026-31931Suricata tls: null dereference in tls.alpn rule keywordOISF suricata
- CVE-2026-35168OpenSTAManager: SQL Injection via Aggiornamenti Moduledevcode-it openstamanager · devcode-it/openstamanager
- CVE-2026-28805OpenSTAManager: Time-Based Blind SQL Injection via `options[stato]` Parameterdevcode-it openstamanager · devcode-it/openstamanager
- CVE-2026-29782OpenSTAManager: Remote Code Execution via Insecure Deserialization in OAuth2devcode-it openstamanager · devcode-it/openstamanager
- CVE-2026-2737Possibility of unintended actions when an administrator clicks a malicious link in the Progress Flowmon web applicationProgress Software Flowmon
- CVE-2026-3692Unintended command execution during report generation in Progress FlowmonProgress Software Flowmon
- CVE-2026-4636Keycloak: keycloak: uma policy bypass allows authenticated users to gain unauthorized access to victim-owned resources.Red Hat build of Keycloak · org.keycloak:keycloak-services
- CVE-2026-4634Keycloak: keycloak: denial of service via excessive processing of openid connect scope parametersRed Hat build of Keycloak · Red Hat Single Sign-On +2
- CVE-2026-4282Keycloak: keycloak: privilege escalation via forged authorization codes due to singleuseobjectprovider isolation flawRed Hat build of Keycloak · org.keycloak:keycloak-services
- CVE-2026-3872Keycloak: keycloak: information disclosure due to redirect_uri validation bypassRed Hat build of Keycloak · org.keycloak:keycloak-services
- CVE-2026-23415futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy()Linux
- CVE-2026-23414tls: Purge async_hold in tls_decrypt_async_wait()Linux
- CVE-2026-23413clsact: Fix use-after-free in init/destroy rollback asymmetryLinux
- CVE-2026-23412netfilter: bpf: defer hook memory release until rcu readers are doneLinux
- CVE-2026-32145Multipart form body parser bypasses body size limits in wispgleam-wisp wisp
- CVE-2026-33616MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the mb24api EndpointMB connect line mbCONNECT24 · MB connect line mymbCONNECT24
- CVE-2026-33614MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the getinfo endpointMB connect line mbCONNECT24 · MB connect line mymbCONNECT24
- CVE-2026-33613MB connect line mbCONNECT24 vulnerable to RCE in generateSrpArrayMB connect line mbCONNECT24 · MB connect line mymbCONNECT24
- CVE-2026-29139GINA State Confusion Account TakeoverSEPPmail Secure Email Gateway
- CVE-2026-29144Unicode Subject TagsSEPPmail Secure Email Gateway
- CVE-2026-29143S/MIME Decryption ImpersonationSEPPmail Secure Email Gateway
- CVE-2026-0634Code Execution in AssistFeedbackService on TECNO Pova7 Pro 5GTECNO Mobile TECNO Pova7 Pro
- CVE-2026-29141Bounded Subject Tag SanitizationSEPPmail Secure Email Gateway
- CVE-2026-29140S/MIME Signature Additional CertificateSEPPmail Secure Email Gateway
- CVE-2026-5032W3 Total Cache <= 2.9.3 - Unauthenticated Security Token Exposure via User-Agent Headerboldgrid W3 Total Cache
- CVE-2026-0686Webmention <= 5.6.2 - Unauthenticated Blind Server-Side Request Forgerypfefferle Webmention
- CVE-2026-1540Spam Protect for Contact Form 7 < 1.2.10 - Editor+ Remote Code ExecutionSpam Protect for Contact Form
- CVE-2026-4347MW WP Form <= 5.1.0 - Unauthenticated Arbitrary File Move via move_temp_file_to_upload_dirinc2734 MW WP Form
- CVE-2026-30332A Time-of-Check to Time-of-Use (TOCTOU) race condition vulnerability in Balena Etcher for Windows prior to v2.1.4 allows attackers to escala
- CVE-2026-34876An issue was discovered in Mbed TLS 3.x before 3.6.6.
Medium, low and unrated 136
- CVE-2026-35466Stored XSS via unsanitized input from remote serviceCERT/CC cveClient/cveInterface.js
- CVE-2026-34848hoppscotch: Stored XSS in team member overflow tooltip via display namehoppscotch
- CVE-2026-34847hoppscotch: Open redirect via `/enter?redirect=`hoppscotch
- CVE-2026-34832Scoold: Cross-Account Feedback Deletion (IDOR)Erudika scoold
- CVE-2026-35383Bentley Systems iTwin Platform exposed access tokenBentley Systems iTwin Platform
- CVE-2026-34762Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriberellanetworks core · github.com/ellanetworks/core
- CVE-2026-34761Ella Core Panics Upon NGAP handover failureellanetworks core · github.com/ellanetworks/core
- CVE-2026-5420Shinrays Games Goods Triple App cats.goods.sort.sorting.games jRwTX.java hard-coded keyShinrays Games Goods Triple App
- CVE-2026-34760vLLM: Downmix Implementation Differences as Attack Vectors Against Audio AI Modelsvllm-project vllm · vllm
- CVE-2026-34743XZ Utils: Buffer overflow in lzma_index_append()tukaani-project xz
- CVE-2026-5418appsmithorg appsmith Dashboard WebClientUtils.java computeDisallowedHosts server-side request forgeryappsmithorg appsmith
- CVE-2026-34736Open edX Platform: Account Activation Bypass via activation_key Exposure in REST APIopenedx-platform
- CVE-2025-43236A type confusion issue was addressed with improved memory handling.Apple macOS
- CVE-2026-34426OpenClaw - Approval Bypass via Environment Variable NormalizationOpenClaw
- CVE-2025-43210An out-of-bounds access issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple iPadOS +4
- CVE-2026-5417Dataease SQLbot Elasticsearch es_engine.py get_es_data_by_http server-side request forgeryDataease SQLbot
- CVE-2026-34425OpenClaw - Shell-Bleed Protection Preflight Validation BypassOpenClaw
- CVE-2025-43238An integer overflow was addressed with improved input validation.Apple macOS
- CVE-2026-34730Copier `_external_data` allows path traversal and absolute-path local file read without unsafe modecopier-org copier · copier
- CVE-2026-34726Copier `_subdirectory` allows template root escape via parent-directory traversalcopier-org copier · copier
- CVE-2026-5414Newgen OmniDocs WebApiRequestRedirection resource injectionNewgen OmniDocs
- CVE-2026-34715ewe Has Improper Neutralization of CRLF Sequences in HTTP Headers (HTTP Request/Response Splitting)vshakitskiy ewe
- CVE-2026-34610leancrypto: Integer truncation in X.509 name parser enables certificate identity impersonationsmuellerDD leancrypto
- CVE-2026-34608nanomq: Heap-Buffer-Overflow in webhook_inproc.c via cJSON_Parse OOB Readnanomq
- CVE-2026-34606Stored XSS in Frappe LMSfrappe lms
- CVE-2026-5413Newgen OmniDocs GetWebApiConfiguration information disclosureNewgen OmniDocs
- CVE-2026-34584listmonk: Broken Access Control in CSV Import (Unauthorized List Assignment)knadh listmonk
- CVE-2026-5370krayin laravel-crm Activities Module/Notes inbox.spec.ts composeMail cross site scriptingkrayin laravel-crm · krayin/laravel-crm
- CVE-2026-34590Postiz: SSRF via Webhook Creation Endpoint Missing URL Safety Validationgitroomhq postiz-app
- CVE-2026-34526SillyTavern: Incomplete IP validation in /api/search/visit allows SSRF via localhost and IPv6SillyTavern
- CVE-2026-5368projectworlds Car Rental Project Parameter login.php sql injectionprojectworlds Car Rental Project
- CVE-2026-34523SillyTavern: Path traversal allows file existence oracleSillyTavern
- CVE-2026-26962Rack: Header injection in multipart requestsrack
- CVE-2026-34835Rack: `Rack::Request` accepts invalid Host characters, enabling host allowlist bypass.rack
- CVE-2026-35414OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with aOpenBSD OpenSSH
- CVE-2026-32762Rack: Forwarded Header semicolon injection enables Host and Scheme spoofingrack
- CVE-2026-33271Local privilege escalation due to insecure folder permissions.Acronis True Image
- CVE-2026-27774Local privilege escalation due to DLL hijacking vulnerability.Acronis True Image
- CVE-2026-28728Local privilege escalation due to DLL hijacking vulnerability.Acronis True Image
- CVE-2026-5360Free5GC aper type confusionFree5GC
- CVE-2026-35388OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.OpenBSD OpenSSH
- CVE-2026-35387OpenSSH before 10.3 can use unintended ECDSA algorithms.OpenBSD OpenSSH
- CVE-2026-34830Rack: Rack::Sendfile regex injection via HTTP_X_ACCEL_MAPPING header allows arbitrary file reads through nginxrack
- CVE-2026-34826Rack: Unbounded Range Count in get_byte_ranges Enables DoSrack
- CVE-2026-5355Trendnet TEW-657BRM setup.cgi vpn_drop os command injectionTrendnet TEW-657BRM
- CVE-2026-34786Rack: Rack::Static header_rules bypass via URL-encoded pathsrack
- CVE-2026-35386In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line.OpenBSD OpenSSH
- CVE-2026-34763Rack: Rack::Directory info disclosure and DoS via unescaped regex interpolationrack
- CVE-2026-34831Rack: Content-Length mismatch in Rack::Files error responsesrack
- CVE-2026-26961Rack: Multipart Boundary Parsing Ambiguity allowing WAF Bypassrack
- CVE-2026-34230Rack: Quadratic complexity in Rack::Utils.select_best_encoding via wildcard Accept-Encoding headerrack
- CVE-2026-5354Trendnet TEW-657BRM setup.cgi vpn_connect os command injectionTrendnet TEW-657BRM
- CVE-2026-35038signalk-server: Arbitrary Prototype Read via `from` Field Bypasssignalk-server
- CVE-2026-5353Trendnet TEW-657BRM setup.cgi ping_test os command injectionTrendnet TEW-657BRM
- CVE-2026-34083signalk-server: OAuth Authorization Code Theft via Unvalidated Host Header in OIDC Flowsignalk-server
- CVE-2026-33951signalk-server: Unauthenticated Source Priorities Manipulationsignalk-server
- CVE-2026-5352Trendnet TEW-657BRM setup.cgi edit os command injectionTrendnet TEW-657BRM
- CVE-2026-5351Trendnet TEW-657BRM setup.cgi add_wps_client os command injectionTrendnet TEW-657BRM
- CVE-2026-33691OWASP CRS: Whitespace padding in filenames bypasses file upload extension checkscoreruleset
- CVE-2026-5346huimeicloud hm_editor image-to-base64 Endpoint mcp-server.js client.get server-side request forgeryhuimeicloud hm_editor
- CVE-2026-34974phpMyFAQ: SVG Sanitizer Bypass via HTML Entity Encoding leads to Stored XSS and Privilege Escalationthorsten phpMyFAQ · thorsten/phpmyfaq
- CVE-2026-34973phpMyFAQ has a LIKE Wildcard Injection in Search.php — Unescaped % and _ Metacharacters Enable Broad Content Disclosurethorsten phpMyFAQ · thorsten/phpmyfaq
- CVE-2026-34729phpMyFAQ: Stored XSS via Regex Bypass in Filter::removeAttributes()thorsten phpMyFAQ · phpmyfaq/phpmyfaq
- CVE-2026-34823Endian Firewall /manage/password/web/ remark Stored Cross-Site ScriptingEndian Firewall
- CVE-2026-34822Endian Firewall /manage/ca/certificate/ new_cert_name Stored Cross-Site ScriptingEndian Firewall
- CVE-2026-34821Endian Firewall /manage/vpnauthentication/user/ remark Stored Cross-Site ScriptingEndian Firewall
- CVE-2026-34820Endian Firewall /manage/ipsec/ remark Stored Cross-Site ScriptingEndian Firewall
- CVE-2026-34819Endian Firewall /cgi-bin/openvpnclient.cgi REMARK Stored Cross-Site ScriptingEndian Firewall
- CVE-2026-34818Endian Firewall /manage/dnsmasq/localdomains/ remark Stored Cross-Site ScriptingEndian Firewall
- CVE-2026-34817Endian Firewall /cgi-bin/smtprouting.cgi ADDRESS BCC Stored Cross-Site ScriptingEndian Firewall
- CVE-2026-34816Endian Firewall /manage/smtpscan/domainrouting/ domain Stored Cross-Site ScriptingEndian Firewall
- CVE-2026-34815Endian Firewall /cgi-bin/smtpdomains.cgi DOMAIN Stored Cross-Site ScriptingEndian Firewall
- CVE-2026-34814Endian Firewall /cgi-bin/proxygroup.cgi group Stored Cross-Site ScriptingEndian Firewall
- CVE-2026-34813Endian Firewall /cgi-bin/proxyuser.cgi user Stored Cross-Site ScriptingEndian Firewall
- CVE-2026-34812Endian Firewall /cgi-bin/proxypolicy.cgi mimetypes Stored Cross-Site ScriptingEndian Firewall
- CVE-2026-34811Endian Firewall /cgi-bin/xtaccess.cgi remark Stored Cross-Site ScriptingEndian Firewall
- CVE-2026-34810Endian Firewall /cgi-bin/vpnfw.cgi remark Stored Cross-Site ScriptingEndian Firewall
- CVE-2026-34809Endian Firewall /cgi-bin/zonefw.cgi remark Stored Cross-Site ScriptingEndian Firewall
- CVE-2026-34808Endian Firewall /cgi-bin/outgoingfw.cgi remark Stored Cross-Site ScriptingEndian Firewall
- CVE-2026-34807Endian Firewall /cgi-bin/incoming.cgi remark Stored Cross-Site ScriptingEndian Firewall
- CVE-2026-34806Endian Firewall /cgi-bin/snat.cgi remark Stored Cross-Site ScriptingEndian Firewall
- CVE-2026-34805Endian Firewall /cgi-bin/dnat.cgi remark Stored Cross-Site ScriptingEndian Firewall
- CVE-2026-34804Endian Firewall /manage/qos/rules/ dscp Stored Cross-Site ScriptingEndian Firewall
- CVE-2026-34803Endian Firewall /manage/qos/classes/ name Stored Cross-Site ScriptingEndian Firewall
- CVE-2026-34802Endian Firewall /cgi-bin/salearn.cgi remark user ham spam Stored Cross-Site ScriptingEndian Firewall
- CVE-2026-34801Endian Firewall /manage/dhcp/fixed_leases/ remark Stored Cross-Site ScriptingEndian Firewall
- CVE-2026-34800Endian Firewall /cgi-bin/uplinkeditor.cgi NAME Stored Cross-Site ScriptingEndian Firewall
- CVE-2026-34799Endian Firewall /manage/dnsmasq/hosts/ remark Stored Cross-Site ScriptingEndian Firewall
- CVE-2026-34798Endian Firewall /cgi-bin/routing.cgi remark Stored Cross-Site ScriptingEndian Firewall
- CVE-2026-5344Textpattern XML-RPC TXP_RPCServer.php mt_uploadImage path traversalTextpattern
- CVE-2026-32629phpMyFAQ: Stored XSS via Unsanitized Email Field in Admin FAQ Editorthorsten phpMyFAQ · thorsten/phpmyfaq +1
- CVE-2026-5342LibRaw TIFF/NEF decoders_libraw.cpp nikon_load_padded_packed_raw out-of-boundsLibRaw
- CVE-2026-5339Tenda G103 Setting gpon.lua action_set_net_settings command injectionTenda G103
- CVE-2026-26927URL (HTTP Origin) call location spoofing in Szafir SDK WebKrajowa Izba Rozliczeniowa Szafir SDK Web
- CVE-2026-5338Tenda G103 Setting system.lua action_set_system_settings command injectionTenda G103
- CVE-2026-30867CocoaMQTT: Denial of Service via Reachable Assertion in `PUBLISH` Packet Parsingemqx CocoaMQTT
- CVE-2026-5334itsourcecode Online Enrollment System Parameter index.php sql injectionitsourcecode Online Enrollment System
- CVE-2026-5333DefaultFuction Content-Management-System tools.php command injectionDefaultFuction Content-Management-System
- CVE-2026-5332Xiaopi Panel WAF Firewall demo.php cross site scriptingXiaopi Panel
- CVE-2026-5331OpenCart Extension Installer installer.php path traversalOpenCart
- CVE-2026-34890WordPress MSTW League Manager plugin <= 2.10 - Cross Site Scripting (XSS) vulnerabilityMark O’Donnell MSTW League Manager
- CVE-2026-5330SourceCodester/mayuri_k Best Courier Management System User Delete ajax.php access controlSourceCodester Best Courier Management System · mayuri_k Be…
- CVE-2026-4325Keycloak: keycloak: replay of action tokens via improper handling of single-use entriesRed Hat build of Keycloak · org.keycloak:keycloak-services
- CVE-2026-5328shsuishang modulithshop ProductItemDao ProductIndexServiceImpl.java listItem sql injectionshsuishang modulithshop
- CVE-2026-5327efforthye fast-filesystem-mcp index.ts handleGetDiskUsage command injectionefforthye fast-filesystem-mcp · fast-filesystem-mcp
- CVE-2026-23417bpf: Fix constant blinding for PROBE_MEM32 storesLinux
- CVE-2026-23416mm/mseal: update VMA end correctly on mergeLinux
- CVE-2026-5326SourceCodester Leave Application System User Information index.php authorizationSourceCodester Leave Application System
- CVE-2026-5246Cesanta Mongoose P-384 Public Key mongoose.c mg_tls_verify_cert_signature authorizationCesanta Mongoose
- CVE-2026-5245Cesanta Mongoose mDNS Record mongoose.c handle_mdns_record stack-based overflowCesanta Mongoose
- CVE-2026-33617MB connect line mbCONNECT24 vulnerable to an unauthenticated information disclosure in the data24 EndpointMB connect line mbCONNECT24 · MB connect line mymbCONNECT24
- CVE-2026-29136CA Notification HTML InjectionSEPPmail Secure Email Gateway
- CVE-2026-29138PGP Decryption Sender LDAP InjectionSEPPmail Secure Email Gateway
- CVE-2026-29131PGP Decryption Recipient LDAP InjectionSEPPmail Secure Email Gateway
- CVE-2026-29142Plaintext secure-mail.htmlSEPPmail Secure Email Gateway
- CVE-2026-29137Long Subject UntaggingSEPPmail Secure Email Gateway
- CVE-2026-29135Webmail Password Tag Sanitization BypassSEPPmail Secure Email Gateway
- CVE-2026-29134GINA Domain SwitchSEPPmail Secure Email Gateway
- CVE-2026-29133UID Regex BypassSEPPmail Secure Email Gateway
- CVE-2026-29132ESWmail-Verify BypassSEPPmail Secure Email Gateway
- CVE-2026-5244Cesanta Mongoose TLS 1.3 mongoose.c mg_tls_recv_cert heap-based overflowCesanta Mongoose
- CVE-2026-0688Webmention <= 5.6.2 - Authenticated (Subscriber+) Server-Side Request Forgerypfefferle Webmention
- CVE-2026-5325SourceCodester Simple Customer Relationship Management System Create Ticket create-ticket.php cross site scriptingSourceCodester Simple Customer Relationship Management Syst…
- CVE-2026-5323priyankark a11y-mcp index.js A11yServer server-side request forgerypriyankark a11y-mcp · a11y-mcp
- CVE-2026-5322AlejandroArciniegas mcp-data-vis MCP server.js request sql injectionAlejandroArciniegas mcp-data-vis
- CVE-2026-5321vanna-ai vanna FastAPI/Flask Server cross-domain policyvanna-ai vanna
- CVE-2026-5320vanna-ai vanna Chat API Endpoint v2 missing authenticationvanna-ai vanna
- CVE-2026-5319itsourcecode Payroll Management System navbar.php cross site scriptingitsourcecode Payroll Management System
- CVE-2026-5318LibRaw JPEG DHT losslessjpeg.cpp initval out-of-bounds writeLibRaw
- CVE-2026-5317Nothings stb stb_vorbis.c start_decoder out-of-bounds writeNothings stb
- CVE-2026-1243IBM Content Navigator is affected by , a Cross-Site Scripting (XSS) vulnerabilityIBM Content Navigator
- CVE-2026-5316Nothings stb stb_vorbis.c setup_free allocation of resourcesNothings stb
- CVE-2026-26895User enumeration vulnerability in /pwreset.php in osTicket v1.18.2 allows remote attackers to enumerate valid usernames registered in the pl
- CVE-2026-30251A reflected cross-site scripting (XSS) vulnerability in the login_newpwd.php endpoint of Interzen Consulting S.r.l ZenShare Suite v17.0 allo
- CVE-2026-30252Multiple reflected cross-site scripting (XSS) vulnerabilities in the login.php endpoint of Interzen Consulting S.r.l ZenShare Suite v17.0 al
- CVE-2026-30603An issue in the firmware update mechanism of Qianniao QN-L23PA0904 v20250721.1640 allows attackers to gain root access, install backdoors, a