CVEs published April 14, 2026
403 CVEs were published on April 14, 2026: 32 critical, 202 high. 6 are now in CISA KEV.
- Published
- 403
- Critical
- 32
- High
- 202
- Medium
- 147
- Low
- 22
- Unrated
- 0
- Now in CISA KEV
- 6
- Fix available
- 234
Most affected products
- Microsoft Windows
- 122
- Adobe Framemaker
- 11
- 1Panel-dev MaxKB
- 10
- Adobe InDesign Desktop
- 9
- Adobe Connect
- 8
- chamilo-lms
- 8
- Adobe ColdFusion
- 7
- Schneider Electric PowerChute™ Serial Shutdown
- 7
- Microsoft Windows Server
- 6
- Adobe Bridge
- 5
Critical 32
- CVE-2026-39842OpenRemote is Vulnerable to Expression Injectionopenremote · io.openremote:openremote-manager
- CVE-2026-39399NuGet Gallery: Arbitrary Blob Overwrite via Nuspec Confusion and URI Fragment TruncationNuGetGallery
- CVE-2026-35033Jellyfin: Potential SSRF + Arbitrary file read via stream argument injectionjellyfin
- CVE-2026-35031Jellyfin: Potential RCE via subtitle upload path traversal + .strm chainjellyfin
- CVE-2026-34457OAuth2 Proxy: Health Check User-Agent Matching Bypasses Authentication in auth_request Modeoauth2-proxy · github.com/oauth2-proxy/oauth2-proxy +1
- CVE-2026-27304ColdFusion | Improper Input Validation (CWE-20)Adobe ColdFusion
- CVE-2026-5752CVE-2026-5752cohere-terrarium
- CVE-2026-27303Adobe Connect | Deserialization of Untrusted Data (CWE-502)Adobe Connect
- CVE-2026-27246Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Connect
- CVE-2026-27245Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Connect
- CVE-2026-34615Adobe Connect | Deserialization of Untrusted Data (CWE-502)Adobe Connect
- CVE-2026-27243Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Connect
- CVE-2026-33824Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-26149Microsoft Power Apps Desktop Client Spoofing VulnerabilityMicrosoft Power Apps Desktop Client
- CVE-2026-39813A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow attackFortinet FortiSandbox
- CVE-2026-39808A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 thFortinet FortiSandbox
- CVE-2025-8095Recoverable obfuscation using the OECH1 prefix encoding in OpenEdgeProgress Software OpenEdge
- CVE-2026-2449Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in upKeeper Solutions upKeeper Instant PrivupKeeper Solutions upKeeper Instant Privilege Access
- CVE-2026-31908Apache APISIX: forward auth plugin allows header injectionApache Software Foundation Apache APISIX
- CVE-2026-40313PraisonAI: ArtiPACKED Vulnerability via GitHub Actions Credential PersistenceMervinPraison PraisonAI
- CVE-2026-40289PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessionsMervinPraison PraisonAI · MervinPraison praisonaiagents +2
- CVE-2026-40288PraisonAI: Critical RCE via `type: job` workflow YAMLMervinPraison PraisonAI · MervinPraison praisonaiagents +2
- CVE-2026-6264Critical Security fix for the Talend JobServer and Talend RuntimeTalend JobServer · Talend Runtime
- CVE-2026-4365LearnPress <= 4.3.2.8 - Missing Authorization to Unauthenticated Arbitrary Quiz Answer Deletionthimpress LearnPress – WordPress LMS Plugin for Create and…
- CVE-2026-27681SQL Injection vulnerability in SAP Business Planning and Consolidation and SAP Business WarehouseSAP_SE SAP Business Planning and Consolidation and SAP Busi…
- CVE-2025-61260A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code execution through malicious MCP (Model Context Proto@openai/codex
- CVE-2025-63939Improper input handling in /Grocery/search_products_itname.php, in anirudhkannan Grocery Store Management System 1.0, allows SQL injection v
- CVE-2025-65133A SQL injection vulnerability exists in the School Management System (version 1.0) by manikandan580.
- CVE-2025-65135In manikandan580 School-management-system 1.0, a time-based blind SQL injection vulnerability exists in /studentms/admin/between-date-reprts
- CVE-2025-70023An issue pertaining to CWE-843: Access of Resource Using Incompatible Type was discovered in transloadit uppy v0.25.6.
- CVE-2026-31049An issue in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to execute arbitrary code and escalate privileges via the CSV regi
- CVE-2026-38526An authenticated arbitrary file upload vulnerability in the /admin/tinymce/upload endpoint of Webkul Krayin CRM v2.2.x allows attackers to e
High 202
- CVE-2026-40090Zarf has a Path Traversal via Malicious Package Metadata.Name — Arbitrary File Writezarf-dev zarf · github.com/zarf-dev/zarf +1
- CVE-2026-39971Serendipity: Host Header Injection leads to SMTP header injection via unvalidated HTTP_HOSTs9y Serendipity · s9y/serendipity
- CVE-2026-39884MCP Server Kubernetes has Argument Injection in its port_forward tool via space-splittingFlux159 mcp-server-kubernetes · mcp-server-kubernetes
- CVE-2026-27297Adobe Framemaker | Integer Underflow (Wrap or Wraparound) (CWE-191)Adobe Framemaker
- CVE-2026-27296Adobe Framemaker | Integer Underflow (Wrap or Wraparound) (CWE-191)Adobe Framemaker
- CVE-2026-27290Adobe Framemaker | Untrusted Search Path (CWE-426)Adobe Framemaker
- CVE-2026-27298Adobe Framemaker | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)Adobe Framemaker
- CVE-2026-27294Adobe Framemaker | Out-of-bounds Read (CWE-125)Adobe Framemaker
- CVE-2026-27295Adobe Framemaker | Out-of-bounds Write (CWE-787)Adobe Framemaker
- CVE-2026-27293Adobe Framemaker | Heap-based Buffer Overflow (CWE-122)Adobe Framemaker
- CVE-2026-27292Adobe Framemaker | Use After Free (CWE-416)Adobe Framemaker
- CVE-2026-39387BoidCMS: Local File Inclusion (LFI) leads to Remote Code Execution (RCE) via tpl parameterBoidCMS
- CVE-2026-35589nanobot: Cross-Site WebSocket Hijacking in WhatsApp Bridge (CVE-2026-2577 Fix Update)HKUDS nanobot
- CVE-2026-35032Jellyfin: Potential SSRF + Arbitrary file read via LiveTV M3U tunerjellyfin
- CVE-2026-33023libsixel: Use-after-free in load_with_gdkpixbuf()saitoha libsixel
- CVE-2026-33021libsixel: Use-after-free in sixel_encoder_encode_bytes()saitoha libsixel
- CVE-2026-34619ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe ColdFusion
- CVE-2026-27282ColdFusion | Improper Input Validation (CWE-20)Adobe ColdFusion
- CVE-2026-27305ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe ColdFusion
- CVE-2026-27306ColdFusion | Improper Input Validation (CWE-20)Adobe ColdFusion
- CVE-2026-33020libsixel: Integer Overflow in write_png_to_file() leads to Heap-based Buffer Overflowsaitoha libsixel
- CVE-2026-33019libsixel: Integer overflow leads to Out-of-bounds Read in img2sixelsaitoha libsixel
- CVE-2026-33018libsixel: Use-After-Free in load_gif()saitoha libsixel
- CVE-2026-40291Chamilo LMS has Privilege Escalation via API User Role Modificationchamilo-lms
- CVE-2026-35196Chamilo LMS has OS Command Injection via export_all_certificates actionchamilo-lms
- CVE-2026-34602Chamilo LMS: IDOR in /api/course_rel_users Allows Unauthorized Enrollment of Arbitrary Users into Courseschamilo-lms
- CVE-2026-39907Unisys WebPerfect Image Suite 3.0 NTLMv2 Hash Leakage via WCF SOAPUnisys WebPerfect Image Suite
- CVE-2026-39906Unisys WebPerfect Image Suite 3.0 NTLMv2 Hash Leakage via .NET RemotingUnisys WebPerfect Image Suite
- CVE-2026-34631InCopy | Out-of-bounds Write (CWE-787)Adobe InCopy
- CVE-2026-34160Chamilo LMS: Unauthenticated SSRF via PENS Plugin allows attacker to probe internal network and reach cloud metadata serviceschamilo-lms
- CVE-2026-33715Chamilo LMS has Unauthenticated SSRF and Open Email Relay via install.ajax.php test_mailer actionchamilo-lms
- CVE-2026-33714Chamilo LMS has Authenticated SQL Injection in statistics.ajax.php users_active action (2.0 RC2)chamilo-lms
- CVE-2026-27287InCopy | Out-of-bounds Read (CWE-125)Adobe InCopy
- CVE-2026-24893openITCOCKPIT has Authenticated Command Injection Leading to Remote Code Execution via Host Address Macro ExpansionopenITCOCKPIT
- CVE-2026-40683In OpenStack Keystone before 28.0.1, the LDAP identity backend does not convert the user enabled attribute to a boolean when the user_enableOpenStack Keystone · keystone
- CVE-2026-34630Bridge | Heap-based Buffer Overflow (CWE-122)Adobe Bridge
- CVE-2026-27312Bridge | Heap-based Buffer Overflow (CWE-122)Adobe Bridge
- CVE-2026-27310Bridge | Heap-based Buffer Overflow (CWE-122)Adobe Bridge
- CVE-2026-27311Bridge | Heap-based Buffer Overflow (CWE-122)Adobe Bridge
- CVE-2026-27313Bridge | Heap-based Buffer Overflow (CWE-122)Adobe Bridge
- CVE-2026-27289Photoshop Desktop | Out-of-bounds Read (CWE-125)Adobe Photoshop Desktop
- CVE-2026-34618Illustrator | Out-of-bounds Write (CWE-787)Adobe Illustrator Desktop
- CVE-2026-0207Sensitive Information Logging Vulnerability in FlashBladePureStorage FlashBlade
- CVE-2026-5756Unauthenticated Configuration File Modification Vulnerability in DRC Central Office Services (COS)Data Recognition Central Office Services - Content Hosting…
- CVE-2026-34617Adobe Connect | Cross-site Scripting (XSS) (CWE-79)Adobe Connect
- CVE-2026-34628InDesign Desktop | Heap-based Buffer Overflow (CWE-122)Adobe InDesign Desktop
- CVE-2026-34629InDesign Desktop | Heap-based Buffer Overflow (CWE-122)Adobe InDesign Desktop
- CVE-2026-34627InDesign Desktop | Heap-based Buffer Overflow (CWE-122)Adobe InDesign Desktop
- CVE-2026-33827Windows TCP/IP Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-33115Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-33114Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-33104Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-33101Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-33100Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-33099Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-32225Windows Shell Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-32203.NET and Visual Studio Denial of Service VulnerabilityMicrosoft .NET · Microsoft Visual Studio +1
- CVE-2026-26171.NET Denial of Service VulnerabilityMicrosoft .NET · Microsoft PowerShell +1
- CVE-2026-32200Microsoft PowerPoint Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-32199Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-32198Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-32197Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-32190Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-32171Azure Logic Apps Elevation of Privilege VulnerabilityMicrosoft Azure Logic Apps
- CVE-2026-32164Windows User Interface Core Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-32163Windows User Interface Core Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-32162Windows COM Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-32155Desktop Window Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-32153Windows Speech Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-32150Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-32149Windows Hyper-V Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-32091Microsoft Brokering File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-32086Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-32080Windows WalletService Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2026-32078Windows Projected File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-32077Windows UPnP Device Host Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-32076Windows Storage Spaces Controller Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-32074Windows Projected File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-32070Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-32069Windows Projected File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-32068Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-27928Windows Hello Security Feature Bypass VulnerabilityMicrosoft Windows Server
- CVE-2026-27923Desktop Window Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-27922Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-27920Windows UPnP Device Host Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-27916Windows UPnP Device Host Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-27914Microsoft Management Console Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-27913Windows BitLocker Security Feature Bypass VulnerabilityMicrosoft Windows Server
- CVE-2026-27912Windows Kerberos Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2026-27911Windows User Interface Core Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-27910Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-27909Windows Search Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-26184Windows Projected File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-26182Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-26178Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-26177Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-26176Windows Client Side Caching driver (csc.sys) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-26173Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-26172Windows Push Notifications Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-26170PowerShell Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-26168Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-26163Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-26159Remote Desktop Licensing Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-26156Windows Hyper-V Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-26153Windows Encrypted File System (EFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-26152Microsoft Cryptographic Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-26143Microsoft PowerShell Security Feature Bypass VulnerabilityMicrosoft PowerShell · powershell
- CVE-2026-23666.NET Framework Denial of Service VulnerabilityMicrosoft .NET Framework
- CVE-2026-23657Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-33826Windows Active Directory Remote Code Execution VulnerabilityMicrosoft Windows Server 2012 R2 · Microsoft Windows Server
- CVE-2026-33825Microsoft Defender Elevation of Privilege VulnerabilityMicrosoft Defender Antimalware Platform
- CVE-2026-33120Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-33116.NET, .NET Framework, and Visual Studio Denial of Service VulnerabilityMicrosoft .NET · System.Security.Cryptography.Xml
- CVE-2026-33098Windows Container Isolation FS Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-33096HTTP.sys Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-33095Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-32224Windows Server Update Service (WSUS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-32222Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-32221Windows Graphics Component Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-32219Microsoft Brokering File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-32195Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-32192Azure Monitor Agent Elevation of Privilege VulnerabilityMicrosoft Azure Monitor
- CVE-2026-32189Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-32188Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-32184Microsoft High Performance Compute (HPC) Pack Elevation of Privilege VulnerabilityMicrosoft HPC Pack
- CVE-2026-32183Windows Snipping Tool Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-32178.NET Spoofing VulnerabilityMicrosoft .NET · Microsoft Visual Studio +12
- CVE-2026-32168Azure Monitor Agent Elevation of Privilege VulnerabilityMicrosoft Azure Monitor
- CVE-2026-32165Windows User Interface Core Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-32160Windows Push Notifications Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-32159Windows Push Notifications Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-32158Windows Push Notifications Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-32157Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Remote Desktop client for Windows Desktop · Micro…
- CVE-2026-32156Windows UPnP Device Host Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-32154Desktop Window Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-32152Desktop Window Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-32093Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-32090Windows Speech Brokered Api Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-32089Windows Speech Brokered Api Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-32087Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-32083Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-32082Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-32075Windows UPnP Device Host Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-32073Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-32071Windows Local Security Authority Subsystem Service (LSASS) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-27929Windows LUA File Virtualization Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-27927Windows Projected File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-27926Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-27924Desktop Window Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-27921Windows TDI Translation Driver (tdx.sys) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-27919Windows UPnP Device Host Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-27918Windows Shell Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-27917Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-27915Windows UPnP Device Host Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-27908Windows TDI Translation Driver (tdx.sys) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-27907Windows Storage Spaces Controller Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-26183Remote Access Management service/API (RPC server) Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2026-26181Microsoft Brokering File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-26180Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-26179Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-26174Windows Server Update Service (WSUS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-26167Windows Push Notifications Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-26166Windows Shell Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-26165Windows Shell Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-26162Windows OLE Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-26161Windows Sensor Data Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-26160Remote Desktop Licensing Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-26154Windows Server Update Service (WSUS) Tampering VulnerabilityMicrosoft Windows Server
- CVE-2026-26151Remote Desktop Spoofing VulnerabilityMicrosoft Windows
- CVE-2026-25184Applocker Filter Driver (applockerfltr.sys) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20930Windows Management Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-27284InDesign Desktop | Out-of-bounds Read (CWE-125)Adobe InDesign Desktop
- CVE-2026-27283InDesign Desktop | Use After Free (CWE-416)Adobe InDesign Desktop
- CVE-2026-27238InDesign Desktop | Heap-based Buffer Overflow (CWE-122)Adobe InDesign Desktop
- CVE-2026-27291InDesign Desktop | Out-of-bounds Write (CWE-787)Adobe InDesign Desktop
- CVE-2026-34622Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)Adobe Acrobat DC · Adobe Acrobat Reader DC +1
- CVE-2026-22828A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiManager Cloud 7.6.2 through 7.6.4 may aFortinet FortiAnalyzer Cloud · Fortinet FortiManager Cloud
- CVE-2026-39815A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiDDoS-F 7.2.1 through 7Fortinet FortiDDoS-F
- CVE-2026-4344Stored Cross-Site Scripting (XSS) Vulnerability in Assembly Component NameAutodesk Fusion
- CVE-2026-4345Stored Cross-Site Scripting (XSS) Vulnerability in Design NameAutodesk Fusion
- CVE-2026-4369Stored Cross-Site Scripting (XSS) Vulnerability in Assembly Variant NameAutodesk Fusion
- CVE-2025-7389Unauthorized Arbitrary File Read via RMI in AdminServer InterfaceProgress Software OpenEdge
- CVE-2026-2450.NET misconfiguration: use of impersonation vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Hijacking a PrivileupKeeper Solutions upKeeper Instant Privilege Access
- CVE-2026-2332HTTP Request Smuggling via Chunked Extension Quoted-String ParsingEclipse Foundation Eclipse Jetty · org.eclipse.jetty:jetty-…
- CVE-2026-33892A vulnerability has been identified in Industrial Edge Management Pro V1 (All versions >= V1.7.6 < V1.15.17), Industrial Edge Management ProSiemens Industrial Edge Management Pro · Siemens Industrial…
- CVE-2026-27668A vulnerability has been identified in RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P) (All versions < V5.8).Siemens RUGGEDCOM CROSSBOW Secure Access Manager Primary
- CVE-2026-25654A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3).Siemens SINEC NMS
- CVE-2026-24032A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3 with UMC).Siemens SINEC NMS
- CVE-2026-31923Apache APISIX: Openid-connect `tls_verify` field is disabled by defaultApache Software Foundation Apache APISIX
- CVE-2026-3017Smart Post Show – Post Grid, Post Carousel & Slider, and List Category Posts <= 3.0.12 - Authenticated (Administrator+) PHP Object Injectionshapedplugin Smart Post Show – Post Grid, Post Carousel & S…
- CVE-2026-40287PraisonAI has RCE via Automatic tools.py ImportMervinPraison PraisonAI · MervinPraison praisonaiagents +2
- CVE-2026-40315PraisonAI: SQLiteConversationStore didn't validate table_prefix when constructing SQL queriesMervinPraison PraisonAI · praisonai
- CVE-2026-4388Form Maker by 10Web <= 1.15.40 - Unauthenticated Stored Cross-Site Scripting via Matrix Field Text BoxForm Maker by 10Web – Mobile-Friendly Drag & Drop Contact F…
- CVE-2026-6227BackWPup <= 5.6.6 - Authenticated (Administrator+) Local File Inclusion via 'block_name' Parameterwp_media BackWPup – WordPress Backup & Restore Plugin
- CVE-2026-34984External Secrets Operator has DNS exfiltration via getHostByName in its v2 template engineexternal-secrets · github.com/external-secrets/external-sec…
- CVE-2026-4352JetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via '_cct_search' ParameterCrocoblock JetEngine
- CVE-2026-34256Missing Authorization check in SAP ERP and SAP S/4 HANA (Private Cloud and On-Premise)SAP_SE SAP ERP and SAP S/4 HANA
- CVE-2026-38527A Server-Side Request Forgery (SSRF) in the /settings/webhooks/create component of Webkul Krayin CRM v2.2.x allows attackers to scan internakrayin/laravel-crm
- CVE-2026-38528Krayin CRM v2.2.x was discovered to contain a SQL injection vulnerability via the rotten_lead parameter at /Lead/LeadDataGrid.php.
- CVE-2026-38529A Broken Object-Level Authorization (BOLA) in the /Settings/UserController.php endpoint of Webkul Krayin CRM v2.2.x allows authenticated attkrayin/laravel-crm
- CVE-2026-38530A Broken Object-Level Authorization (BOLA) in the /Controllers/Lead/LeadController.php endpoint of Webkul Krayin CRM v2.2.x allows authentickrayin/laravel-crm
- CVE-2026-38532A Broken Object-Level Authorization (BOLA) in the /Contact/Persons/PersonController.php endpoint of Webkul Krayin CRM v2.2.x allows authentikrayin/laravel-crm
Medium, low and unrated 169
- CVE-2026-40096immich: Open Redirect via Shared Album nameimmich-app immich
- CVE-2026-40091SpiceDB: SPICEDB_DATASTORE_CONN_URI is leaked on startup logsauthzed spicedb · github.com/authzed/spicedb
- CVE-2026-39984Sigstore Timestamp Authority has Improper Certificate Validation in verifiersigstore timestamp-authority · github.com/sigstore/times… +1
- CVE-2026-39963Serendipity: Host Header Injection enables authentication cookie scoping to an attacker-controlled domains9y Serendipity · s9y/serendipity
- CVE-2026-13143D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery <= 1.16.17 - Missing Authorization to Unauthenticated Private/Draft Flipbook Data Exposureiberezansky 3D FlipBook – PDF Embedder, PDF Flipbook Viewer…
- CVE-2026-2396List View Google Calendar <= 7.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via Event Descriptionkimipooh List View Google Calendar
- CVE-2025-15470Eleganzo <= 1.2 - Authenticated (Subscriber+) Arbitrary Directory DeletionDesigningMedia Eleganzo
- CVE-2026-27300Adobe Framemaker | Access of Uninitialized Pointer (CWE-824)Adobe Framemaker
- CVE-2026-27301Adobe Framemaker | Heap-based Buffer Overflow (CWE-122)Adobe Framemaker
- CVE-2026-27299Adobe Framemaker | Improper Input Validation (CWE-20)Adobe Framemaker
- CVE-2026-33414PowerShell Command Injection in Podman HyperV Machinecontainers podman · github.com/containers/podman +4
- CVE-2026-40688An out-of-bounds write vulnerability [CWE-787] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeFortinet FortiWeb
- CVE-2026-35034Jellyfin: Potential Application DoS from excessively large SyncPlay group namesjellyfin
- CVE-2026-34454OAuth2 Proxy: Session cookie not cleared when rendering sign-in pageoauth2-proxy · github.com/oauth2-proxy/oauth2-proxy +1
- CVE-2026-27308ColdFusion | Uncontrolled Resource Consumption (CWE-400)Adobe ColdFusion
- CVE-2026-27307ColdFusion | Uncontrolled Resource Consumption (CWE-400)Adobe ColdFusion
- CVE-2026-34213Docmost has cross-page attachment overwrite via flawed attachmentId overwrite validationdocmost
- CVE-2026-34212Docmost page content has stored XSS via unsanitized attachment URLsdocmost
- CVE-2026-33193Docmost vulnerable to stored XSS via MIME type spoofingdocmost
- CVE-2026-33146Docmost's Public Share Search Exposes Metadata of Restricted Childrendocmost
- CVE-2025-15565Nexi XPay <= 8.3.0 - Missing Authorization to Unauthenticated Order Status Modificationcartasi Nexi XPay
- CVE-2026-34370Chamilo LMS: IDOR in the Notebook Module allows an attacker to view other users' private noteschamilo-lms
- CVE-2026-34161Chamilo LMS: Stored XSS via Malicious File Upload in Social Post Attachments Leads to Arbitrary JavaScript Executionchamilo-lms
- CVE-2026-25133October CMS has Stored XSS via SVG Filter Bypassoctobercms october · october/rain
- CVE-2026-25125October CMS: Environment Variable Exfiltration via INI Parser Interpolationoctobercms october · october/rain
- CVE-2026-27222Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-34625Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2026-34623Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2026-34624Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2026-27288Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2026-0209Under certain administrative conditions, FlashArray Purity may apply snapshot retention policies earlier or later than configured.PureStorage FlashArray
- CVE-2026-5754Radware Alteon has a reflected XSS vulnerabilityRadware Alteon vADC
- CVE-2026-24907October CMS has Stored XSS via Event Log Mail Previewoctobercms october · october/system
- CVE-2026-21331Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Connect
- CVE-2026-34614Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Connect
- CVE-2026-24906October CMS has Stored XSS in its Backend Editor Markup Classesoctobercms october · october/system
- CVE-2026-27258Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-32214Universal Plug and Play (upnp.dll) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-33829Windows Snipping Tool Spoofing VulnerabilityMicrosoft Windows
- CVE-2026-33103Microsoft Dynamics 365 (On-Premises) Information Disclosure VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2026-32201Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-32196Windows Admin Center Spoofing VulnerabilityMicrosoft Windows Admin Center
- CVE-2026-32176SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server 2016 Service Pack · Microsoft SQL Serv…
- CVE-2026-32151Windows Shell Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-32088Windows Biometric Service Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-32084Windows Print Spooler Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-32079Web Account Manager Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-32072Active Directory Spoofing VulnerabilityMicrosoft Windows
- CVE-2026-27930Windows GDI Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-27925Windows UPnP Device Host Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-26169Windows Kernel Memory Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-20806Windows COM Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-20928Windows Recovery Environment Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-32212Universal Plug and Play (upnp.dll) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-33822Microsoft Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC f…
- CVE-2026-32226.NET Framework Denial of Service VulnerabilityMicrosoft .NET Framework
- CVE-2026-32223Windows USB Printing Stack (usbprint.sys) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-32220UEFI Secure Boot Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-32218Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-32217Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-32216Windows Redirected Drive Buffering System Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-32215Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-32202Windows Shell Spoofing VulnerabilityMicrosoft Windows
- CVE-2026-32181Connected User Experiences and Telemetry Service Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-32167SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server 2016 Service Pack · Microsoft SQL Serv…
- CVE-2026-0390UEFI Secure Boot Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-32085Remote Procedure Call Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-32081Package Catalog Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-27931Windows GDI Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-27906Windows Hello Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-26175Windows Boot Manager Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-26155Microsoft Local Security Authority Subsystem Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-23670Windows Virtualization-Based Security (VBS) Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-20945Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-23653GitHub Copilot and Visual Studio Code Information Disclosure VulnerabilityMicrosoft Visual Studio Code CoPilot Chat Extension
- CVE-2026-22692October CMS: Twig Sandbox Bypass via Collection Methodsoctobercms october · october/rain
- CVE-2026-27285InDesign Desktop | Heap-based Buffer Overflow (CWE-122)Adobe InDesign Desktop
- CVE-2026-27286InDesign Desktop | Heap-based Buffer Overflow (CWE-122)Adobe InDesign Desktop
- CVE-2026-34626Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)Adobe Acrobat DC · Adobe Acrobat Reader DC +1
- CVE-2025-61624An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7Fortinet FortiOS · Fortinet FortiProxy +2
- CVE-2025-68649An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.Fortinet FortiManager Cloud · Fortinet FortiManager +1
- CVE-2026-21741An URL Redirection to Untrusted Site ('Open Redirect') vulnerability [CWE-601] vulnerability in Fortinet FortiNAC-F 7.6.0 through 7.6.5, ForFortinet FortiNAC-F
- CVE-2025-61848An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 througFortinet FortiManager · Fortinet FortiAnalyzer +1
- CVE-2026-22573An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6Fortinet FortiSOAR on-premise · Fortinet FortiSOAR PaaS
- CVE-2025-61886An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet ForFortinet FortiSandbox PaaS · Fortinet FortiSandbox
- CVE-2026-39810A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5 may allow attacker to information disclosFortinet FortiClientEMS
- CVE-2026-39811A integer overflow or wraparound vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all versFortinet FortiWeb
- CVE-2024-23104An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiNDR 7.6.0, FortiNDR 7.4.0 through 7.4.8, FortiNFortinet FortiVoice · Fortinet FortiNDR
- CVE-2026-39812A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0 through Fortinet FortiSandbox
- CVE-2026-23708A improper authentication vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR on-preFortinet FortiSOAR PaaS · Fortinet FortiSOAR on-premise
- CVE-2026-39814Multiple Relative Path Traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6Fortinet FortiWeb
- CVE-2026-25691A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5,Fortinet FortiSandbox PaaS · Fortinet FortiSandbox Cloud +1
- CVE-2025-59809A server-side request forgery (ssrf) vulnerability [CWE-918] vulnerability in Fortinet FortiSOAR PaaS 7.6.4, FortiSOAR PaaS 7.6.0 through 7.Fortinet FortiSOAR on-premise · Fortinet FortiSOAR PaaS
- CVE-2026-22155A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 throughFortinet FortiSOAR PaaS · Fortinet FortiSOAR on-premise
- CVE-2026-21742A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 throughFortinet FortiSOAR on-premise · Fortinet FortiSOAR PaaS
- CVE-2026-22574A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2Fortinet FortiSOAR PaaS · Fortinet FortiSOAR on-premise
- CVE-2026-22154An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSOAR PaaS 7.6.0 throuFortinet FortiSOAR PaaS · Fortinet FortiSOAR on-premise
- CVE-2025-53847A missing authentication for critical function vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7Fortinet FortiOS
- CVE-2026-22576A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2Fortinet FortiSOAR PaaS · Fortinet FortiSOAR on-premise
- CVE-2026-27316A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4 all versions, FortiSandbFortinet FortiSandbox
- CVE-2026-2401CWE-532 Insertion of Sensitive Information into Log File vulnerability exists that could cause confidential information to be exposed when Schneider Electric PowerChute™ Serial Shutdown
- CVE-2026-2400CWE-93 Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability exists that could cause application user credentials to reSchneider Electric PowerChute™ Serial Shutdown
- CVE-2026-2403CWE-1284 Improper Validation of Specified Quantity in Input vulnerability exists that could cause Event and Data Log truncation impacting loSchneider Electric PowerChute™ Serial Shutdown
- CVE-2026-2405CWE-400 Uncontrolled Resource Consumption vulnerability exists that could cause excessive troubleshooting zip file creation and denial of seSchneider Electric PowerChute™ Serial Shutdown
- CVE-2026-2402CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker to gain access to the usSchneider Electric PowerChute™ Serial Shutdown
- CVE-2026-2404CWE-116 Improper Encoding or Escaping of Output vulnerability exists that could cause log injection and forged log when an attacker alters tSchneider Electric PowerChute™ Serial Shutdown
- CVE-2026-5713Out-of-bounds read/write during remote profiling and asyncio process introspection when connecting to malicious targetPython Software Foundation CPython
- CVE-2026-2399CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause critical files oSchneider Electric PowerChute™ Serial Shutdown
- CVE-2026-39809A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.0 througFortinet FortiClientEMS
- CVE-2026-4832CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to sensitive device information when an unauSchneider Electric Easergy MiCOM P14x · Schneider Elect… +10
- CVE-2026-37980Org.keycloak.forms.login: keycloak: keycloak: arbitrary code execution via stored cross-site scripting (xss) in organization selection login pageRed Hat build of Keycloak · org.keycloak:keycloak-services
- CVE-2026-4914Stored XSS in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to obtain limited information from other user sessiIvanti Neurons for ITSM
- CVE-2026-4913Improper protection of an alternate path in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to retain access whenIvanti Neurons for ITSM
- CVE-2026-24069Improper Enforcement of Disabled Accounts in WebUI SSO in Kiuwan SASTKiuwan SAST
- CVE-2025-13822Authentication bypass in MCPHubMCPHub · @samanhappy/mcphub
- CVE-2025-40745A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), SimcenteSiemens Software Center · Siemens Simcenter +3
- CVE-2026-33929Apache PDFBox Examples: Path Traversal in PDFBox ExtractEmbeddedFiles Example CodeApache Software Foundation Apache PDFBox Examples · org.apa…
- CVE-2026-31924Apache APISIX: Plugin tencent-cloud-cls log export uses plaintext HTTPApache Software Foundation Apache APISIX
- CVE-2026-4109Eventin – Events Calendar, Event Booking, Ticket & Registration (AI Powered) <= 4.1.8 Missing Authorization to Authenticated (Subscriber+) Order Information Exposurearraytics Eventin – Event Calendar, Event Registration, Tic…
- CVE-2026-2582Germanized for WooCommerce <= 3.20.5 - Unauthenticated Arbitrary Shortcode Executionvendidero Germanized for WooCommerce
- CVE-2026-4059ShopLentor <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button_text' Shortcode Attributedevitemsllc ShopLentor – All-in-One WooCommerce Growth & St…
- CVE-2026-4479WholeSale Products Dynamic Pricing Management WooCommerce <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settingswpcodefactory WholeSale Products Dynamic Pricing Management…
- CVE-2026-1607Surbma | Booking.com <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeSurbma | Booking.com Shortcode
- CVE-2026-34225Open WebUI has Blind Server Side Request Forgery in its Image Edit Functionalityopen-webui
- CVE-2026-39426MaxKB: Stored XSS via Unsanitized iframe_render Parsing1Panel-dev MaxKB
- CVE-2026-39425MaxKB: Stored XSS via Unsanitized html_rander Tags in Markdown Rendering1Panel-dev MaxKB
- CVE-2026-39419MaxKB: Sandbox Result Validation Bypass via Tool Output Spoofing1Panel-dev MaxKB
- CVE-2026-39424MaxKB has CSV Injection in its Application Chat Export Functionality1Panel-dev MaxKB
- CVE-2026-39423Stored XSS via Eval Injection in EchartsRander Component1Panel-dev MaxKB
- CVE-2026-39422MaxKB has Stored XSS via ChatHeadersMiddleware1Panel-dev MaxKB
- CVE-2026-39421MaxKB: Sandbox escape via ctypes and unhooked SYS_pkey_mprotect1Panel-dev MaxKB
- CVE-2026-39420MaxKB: Sandbox escape via LD_PRELOAD bypass1Panel-dev MaxKB
- CVE-2026-34264Information Disclosure vulnerability in SAP Human Capital Management for SAP S/4HANASAP_SE SAP Human Capital Management for SAP S/4HANA
- CVE-2026-34262Information Disclosure Vulnerability in SAP HANA Cockpit and HANA Database ExplorerSAP_SE SAP HANA Cockpit and HANA Database Explorer
- CVE-2026-34261Missing Authorization check in SAP Business Analytics and SAP Content ManagementSAP_SE SAP Business Analytics and SAP Content Management
- CVE-2026-39418MaxKB: SSRF via sandbox network hook bypass1Panel-dev MaxKB
- CVE-2026-34257Open Redirect vulnerability in SAP NetWeaver Application Server ABAPSAP_SE SAP NetWeaver Application Server ABAP
- CVE-2026-27683Reflected cross site scripting vulnerability in SAP BusinessObjects Business Intelligence PlatformSAP_SE SAP BusinessObjects Business Intelligence Platform
- CVE-2026-27679Missing Authorization check in SAP S/4HANA Frontend OData Service (Manage Reference Structures)SAP_SE SAP S/4HANA Frontend OData Service
- CVE-2026-27678Missing Authorization check in SAP S/4HANA Backend OData Service (Manage Reference Structures)SAP_SE SAP S/4HANA Backend OData Service
- CVE-2026-27677Missing Authorization check in SAP S/4HANA OData Service (Manage Reference Equipment)SAP_SE SAP S/4HANA OData Service
- CVE-2026-27676Missing Authorization check in SAP S/4HANA OData Service (Manage Technical Object Structures)SAP_SE SAP S/4HANA OData Service
- CVE-2026-27675Code Injection vulnerability in SAP Landscape TransformationSAP_SE SAP Landscape Transformation
- CVE-2026-27674Code Injection vulnerability in SAP NetWeaver Application Server Java (Web Dynpro Java)SAP_SE SAP NetWeaver Application Server Java
- CVE-2026-27673Missing Authorization Check in SAP S/4HANA (Private Cloud and On-Premise)SAP_SE SAP S/4HANA
- CVE-2026-27672Missing Authorization check in Material Master ApplicationSAP_SE Material Master Application
- CVE-2026-24318Insecure Session Management vulnerability in SAP BusinessObjects Business Intelligence PlatformSAP_SE SAP BusinessObjects Business Intelligence Platform
- CVE-2026-0512Cross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog)SAP_SE SAP Supplier Relationship Management
- CVE-2026-39417MaxKB: RCE via MCP stdio command injection in workflow engine1Panel-dev MaxKB
- CVE-2025-65132alandsilva26 hotel-management-php 1.0 is vulnerable to Cross Site Scripting (XSS) in /public/admin/edit_room.php which allows an attacker to
- CVE-2025-65134In manikandan580 School-management-system 1.0, a reflected cross-site scripting (XSS) vulnerability exists in /studentms/admin/contact-us.ph
- CVE-2025-65136In manikandan580 School-management-system 1.0, a reflected XSS vulnerability exists in /studentms/admin/contact-us.php via the pagedes POST
- CVE-2025-69893A side-channel vulnerability exists in the implementation of BIP-39 mnemonic processing, as observed in Trezor One v1.13.0 to v1.14.0, Trezo
- CVE-2025-69993Leaflet versions up to and including 1.9.4 are vulnerable to Cross-Site Scripting (XSS) via the bindPopup() method.
- CVE-2026-30480A Local File Inclusion (LFI) vulnerability in the NFSen module (nfsen.inc.php) of LibreNMS 22.11.0-23-gd091788f2 allows authenticated attack
- CVE-2026-37589SourceCodester Storage Unit Rental Management System v1.0 is vulnerable to SQL Injection in the file /storage/admin/maintenance/manage_stora
- CVE-2026-37590SourceCodester Storage Unit Rental Management System v1.0 is vulnerable to SQL Injection in the file /storage/admin/rents/manage_rent.php.
- CVE-2026-37591Sourcecodester Storage Unit Rental Management System v1.0 is vulnerable to SQL injection in the file /storage/admin/tenants/view_details.php
- CVE-2026-37592Sourcecodester Storage Unit Rental Management System v1.0 is vulnerable to SQL in the file /storage/admin/maintenance/manage_pricing.php.
- CVE-2026-37593SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/view_
- CVE-2026-37594SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/view_
- CVE-2026-37595SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/manag
- CVE-2026-37596SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/manag
- CVE-2026-37597SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/atten
- CVE-2026-37598SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to arbitrary code execution (RCE) via /scheduler/classes/SystemSettin
- CVE-2026-37600SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to SQL Injection in the file /scheduler/admin/appointments/view_detai
- CVE-2026-37601SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to SQL Injection in the file /scheduler/admin/appointments/manage_app
- CVE-2026-37602SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to SQL Injection in the file /scheduler/admin/user/manage_user.php.
- CVE-2026-38533An improper authorization vulnerability in the /api/v1/users/{id} endpoint of Snipe-IT v8.4.0 allows authenticated attackers with the users.