# CVEs published 2026-04-14

403 CVEs were published on April 14, 2026: 32 critical, 202 high. 6 are now in CISA KEV. Days are UTC.

- [CVE-2026-40096](https://cve.now/CVE-2026-40096.md): immich: Open Redirect via Shared Album name (CVSS 5.1, immich-app immich)
- [CVE-2026-40091](https://cve.now/CVE-2026-40091.md): SpiceDB: SPICEDB\_DATASTORE\_CONN\_URI is leaked on startup logs (CVSS 6.0, authzed spicedb · github.com/authzed/spicedb)
- [CVE-2026-40090](https://cve.now/CVE-2026-40090.md): Zarf has a Path Traversal via Malicious Package Metadata.Name — Arbitrary File Write (CVSS 7.1, zarf-dev zarf · github.com/zarf-dev/zarf +1)
- [CVE-2026-39984](https://cve.now/CVE-2026-39984.md): Sigstore Timestamp Authority has Improper Certificate Validation in verifier (CVSS 5.5, sigstore timestamp-authority · github.com/sigstore/times… +1)
- [CVE-2026-39971](https://cve.now/CVE-2026-39971.md): Serendipity: Host Header Injection leads to SMTP header injection via unvalidated HTTP\_HOST (CVSS 7.2, s9y Serendipity · s9y/serendipity)
- [CVE-2026-39963](https://cve.now/CVE-2026-39963.md): Serendipity: Host Header Injection enables authentication cookie scoping to an attacker-controlled domain (CVSS 6.9, s9y Serendipity · s9y/serendipity)
- [CVE-2026-1314](https://cve.now/CVE-2026-1314.md): 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery \<= 1.16.17 - Missing Authorization to Unauthenticated Private/Draft Flipbook Data Exposure (CVSS 5.3, iberezansky 3D FlipBook – PDF Embedder, PDF Flipbook Viewer…)
- [CVE-2026-2396](https://cve.now/CVE-2026-2396.md): List View Google Calendar \<= 7.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via Event Description (CVSS 4.4, kimipooh List View Google Calendar)
- [CVE-2025-15470](https://cve.now/CVE-2025-15470.md): Eleganzo \<= 1.2 - Authenticated (Subscriber+) Arbitrary Directory Deletion (CVSS 6.5, DesigningMedia Eleganzo)
- [CVE-2026-39884](https://cve.now/CVE-2026-39884.md): MCP Server Kubernetes has Argument Injection in its port\_forward tool via space-splitting (CVSS 8.3, Flux159 mcp-server-kubernetes · mcp-server-kubernetes)
- [CVE-2026-39842](https://cve.now/CVE-2026-39842.md): OpenRemote is Vulnerable to Expression Injection (CVSS 10.0, openremote · io.openremote:openremote-manager)
- [CVE-2026-39399](https://cve.now/CVE-2026-39399.md): NuGet Gallery: Arbitrary Blob Overwrite via Nuspec Confusion and URI Fragment Truncation (CVSS 9.6, NuGetGallery)
- [CVE-2026-27297](https://cve.now/CVE-2026-27297.md): Adobe Framemaker | Integer Underflow (Wrap or Wraparound) (CWE-191) (CVSS 7.8, Adobe Framemaker)
- [CVE-2026-27300](https://cve.now/CVE-2026-27300.md): Adobe Framemaker | Access of Uninitialized Pointer (CWE-824) (CVSS 5.5, Adobe Framemaker)
- [CVE-2026-27296](https://cve.now/CVE-2026-27296.md): Adobe Framemaker | Integer Underflow (Wrap or Wraparound) (CWE-191) (CVSS 7.8, Adobe Framemaker)
- [CVE-2026-27290](https://cve.now/CVE-2026-27290.md): Adobe Framemaker | Untrusted Search Path (CWE-426) (CVSS 8.6, Adobe Framemaker)
- [CVE-2026-27298](https://cve.now/CVE-2026-27298.md): Adobe Framemaker | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843) (CVSS 7.8, Adobe Framemaker)
- [CVE-2026-27294](https://cve.now/CVE-2026-27294.md): Adobe Framemaker | Out-of-bounds Read (CWE-125) (CVSS 7.8, Adobe Framemaker)
- [CVE-2026-27295](https://cve.now/CVE-2026-27295.md): Adobe Framemaker | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Framemaker)
- [CVE-2026-27301](https://cve.now/CVE-2026-27301.md): Adobe Framemaker | Heap-based Buffer Overflow (CWE-122) (CVSS 5.5, Adobe Framemaker)
- [CVE-2026-27299](https://cve.now/CVE-2026-27299.md): Adobe Framemaker | Improper Input Validation (CWE-20) (CVSS 6.3, Adobe Framemaker)
- [CVE-2026-27293](https://cve.now/CVE-2026-27293.md): Adobe Framemaker | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Framemaker)
- [CVE-2026-27292](https://cve.now/CVE-2026-27292.md): Adobe Framemaker | Use After Free (CWE-416) (CVSS 7.8, Adobe Framemaker)
- [CVE-2026-39387](https://cve.now/CVE-2026-39387.md): BoidCMS: Local File Inclusion (LFI) leads to Remote Code Execution (RCE) via tpl parameter (CVSS 7.2, BoidCMS)
- [CVE-2026-35589](https://cve.now/CVE-2026-35589.md): nanobot: Cross-Site WebSocket Hijacking in WhatsApp Bridge (CVE-2026-2577 Fix Update) (CVSS 8.0, HKUDS nanobot)
- [CVE-2026-33414](https://cve.now/CVE-2026-33414.md): PowerShell Command Injection in Podman HyperV Machine (CVSS 4.0, containers podman · github.com/containers/podman +4)
- [CVE-2026-40688](https://cve.now/CVE-2026-40688.md): An out-of-bounds write vulnerability \[CWE-787\] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWe (CVSS 6.7, Fortinet FortiWeb)
- [CVE-2026-35034](https://cve.now/CVE-2026-35034.md): Jellyfin: Potential Application DoS from excessively large SyncPlay group names (CVSS 6.5, jellyfin)
- [CVE-2026-35033](https://cve.now/CVE-2026-35033.md): Jellyfin: Potential SSRF + Arbitrary file read via stream argument injection (CVSS 9.3, jellyfin)
- [CVE-2026-35032](https://cve.now/CVE-2026-35032.md): Jellyfin: Potential SSRF + Arbitrary file read via LiveTV M3U tuner (CVSS 8.6, jellyfin)
- [CVE-2026-35031](https://cve.now/CVE-2026-35031.md): Jellyfin: Potential RCE via subtitle upload path traversal + .strm chain (CVSS 10.0, jellyfin)
- [CVE-2026-34457](https://cve.now/CVE-2026-34457.md): OAuth2 Proxy: Health Check User-Agent Matching Bypasses Authentication in auth\_request Mode (CVSS 9.1, oauth2-proxy · github.com/oauth2-proxy/oauth2-proxy +1)
- [CVE-2026-34454](https://cve.now/CVE-2026-34454.md): OAuth2 Proxy: Session cookie not cleared when rendering sign-in page (CVSS 3.5, oauth2-proxy · github.com/oauth2-proxy/oauth2-proxy +1)
- [CVE-2026-33023](https://cve.now/CVE-2026-33023.md): libsixel: Use-after-free in load\_with\_gdkpixbuf() (CVSS 7.8, saitoha libsixel)
- [CVE-2026-33021](https://cve.now/CVE-2026-33021.md): libsixel: Use-after-free in sixel\_encoder\_encode\_bytes() (CVSS 7.3, saitoha libsixel)
- [CVE-2026-34619](https://cve.now/CVE-2026-34619.md): ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) (CVSS 7.7, Adobe ColdFusion)
- [CVE-2026-27308](https://cve.now/CVE-2026-27308.md): ColdFusion | Uncontrolled Resource Consumption (CWE-400) (CVSS 2.4, Adobe ColdFusion)
- [CVE-2026-27282](https://cve.now/CVE-2026-27282.md): ColdFusion | Improper Input Validation (CWE-20) (CVSS 7.5, Adobe ColdFusion)
- [CVE-2026-27305](https://cve.now/CVE-2026-27305.md): ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) (CVSS 8.6, Adobe ColdFusion)
- [CVE-2026-27304](https://cve.now/CVE-2026-27304.md): ColdFusion | Improper Input Validation (CWE-20) (CVSS 9.3, Adobe ColdFusion)
- [CVE-2026-27306](https://cve.now/CVE-2026-27306.md): ColdFusion | Improper Input Validation (CWE-20) (CVSS 8.4, Adobe ColdFusion)
- [CVE-2026-27307](https://cve.now/CVE-2026-27307.md): ColdFusion | Uncontrolled Resource Consumption (CWE-400) (CVSS 2.4, Adobe ColdFusion)
- [CVE-2026-33020](https://cve.now/CVE-2026-33020.md): libsixel: Integer Overflow in write\_png\_to\_file() leads to Heap-based Buffer Overflow (CVSS 7.1, saitoha libsixel)
- [CVE-2026-34213](https://cve.now/CVE-2026-34213.md): Docmost has cross-page attachment overwrite via flawed attachmentId overwrite validation (CVSS 5.4, docmost)
- [CVE-2026-33019](https://cve.now/CVE-2026-33019.md): libsixel: Integer overflow leads to Out-of-bounds Read in img2sixel (CVSS 7.1, saitoha libsixel)
- [CVE-2026-33018](https://cve.now/CVE-2026-33018.md): libsixel: Use-After-Free in load\_gif() (CVSS 7.0, saitoha libsixel)
- [CVE-2026-34212](https://cve.now/CVE-2026-34212.md): Docmost page content has stored XSS via unsanitized attachment URLs (CVSS 5.4, docmost)
- [CVE-2026-33193](https://cve.now/CVE-2026-33193.md): Docmost vulnerable to stored XSS via MIME type spoofing (CVSS 4.6, docmost)
- [CVE-2026-40291](https://cve.now/CVE-2026-40291.md): Chamilo LMS has Privilege Escalation via API User Role Modification (CVSS 8.8, chamilo-lms)
- [CVE-2026-33146](https://cve.now/CVE-2026-33146.md): Docmost's Public Share Search Exposes Metadata of Restricted Children (CVSS 4.3, docmost)
- [CVE-2026-35196](https://cve.now/CVE-2026-35196.md): Chamilo LMS has OS Command Injection via export\_all\_certificates action (CVSS 8.8, chamilo-lms)
- [CVE-2026-34602](https://cve.now/CVE-2026-34602.md): Chamilo LMS: IDOR in /api/course\_rel\_users Allows Unauthorized Enrollment of Arbitrary Users into Courses (CVSS 7.1, chamilo-lms)
- [CVE-2025-15565](https://cve.now/CVE-2025-15565.md): Nexi XPay \<= 8.3.0 - Missing Authorization to Unauthenticated Order Status Modification (CVSS 5.3, cartasi Nexi XPay)
- [CVE-2026-34370](https://cve.now/CVE-2026-34370.md): Chamilo LMS: IDOR in the Notebook Module allows an attacker to view other users' private notes (CVSS 6.5, chamilo-lms)
- [CVE-2026-39907](https://cve.now/CVE-2026-39907.md): Unisys WebPerfect Image Suite 3.0 NTLMv2 Hash Leakage via WCF SOAP (CVSS 7.0, Unisys WebPerfect Image Suite)
- [CVE-2026-39906](https://cve.now/CVE-2026-39906.md): Unisys WebPerfect Image Suite 3.0 NTLMv2 Hash Leakage via .NET Remoting (CVSS 7.0, Unisys WebPerfect Image Suite)
- [CVE-2026-34631](https://cve.now/CVE-2026-34631.md): InCopy | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe InCopy)
- [CVE-2026-34161](https://cve.now/CVE-2026-34161.md): Chamilo LMS: Stored XSS via Malicious File Upload in Social Post Attachments Leads to Arbitrary JavaScript Execution (CVSS 5.1, chamilo-lms)
- [CVE-2026-34160](https://cve.now/CVE-2026-34160.md): Chamilo LMS: Unauthenticated SSRF via PENS Plugin allows attacker to probe internal network and reach cloud metadata services (CVSS 8.6, chamilo-lms)
- [CVE-2026-33715](https://cve.now/CVE-2026-33715.md): Chamilo LMS has Unauthenticated SSRF and Open Email Relay via install.ajax.php test\_mailer action (CVSS 7.2, chamilo-lms)
- [CVE-2026-33714](https://cve.now/CVE-2026-33714.md): Chamilo LMS has Authenticated SQL Injection in statistics.ajax.php users\_active action (2.0 RC2) (CVSS 7.1, chamilo-lms)
- [CVE-2026-27287](https://cve.now/CVE-2026-27287.md): InCopy | Out-of-bounds Read (CWE-125) (CVSS 7.8, Adobe InCopy)
- [CVE-2026-25133](https://cve.now/CVE-2026-25133.md): October CMS has Stored XSS via SVG Filter Bypass (CVSS 4.8, octobercms october · october/rain)
- [CVE-2026-25125](https://cve.now/CVE-2026-25125.md): October CMS: Environment Variable Exfiltration via INI Parser Interpolation (CVSS 4.9, octobercms october · october/rain)
- [CVE-2026-24893](https://cve.now/CVE-2026-24893.md): openITCOCKPIT has Authenticated Command Injection Leading to Remote Code Execution via Host Address Macro Expansion (CVSS 8.8, openITCOCKPIT)
- [CVE-2026-40683](https://cve.now/CVE-2026-40683.md): In OpenStack Keystone before 28.0.1, the LDAP identity backend does not convert the user enabled attribute to a boolean when the user\_enable (CVSS 7.7, OpenStack Keystone · keystone)
- [CVE-2026-34630](https://cve.now/CVE-2026-34630.md): Bridge | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Bridge)
- [CVE-2026-27312](https://cve.now/CVE-2026-27312.md): Bridge | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Bridge)
- [CVE-2026-27222](https://cve.now/CVE-2026-27222.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-27310](https://cve.now/CVE-2026-27310.md): Bridge | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Bridge)
- [CVE-2026-27311](https://cve.now/CVE-2026-27311.md): Bridge | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Bridge)
- [CVE-2026-27313](https://cve.now/CVE-2026-27313.md): Bridge | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Bridge)
- [CVE-2026-27289](https://cve.now/CVE-2026-27289.md): Photoshop Desktop | Out-of-bounds Read (CWE-125) (CVSS 7.8, Adobe Photoshop Desktop)
- [CVE-2026-34618](https://cve.now/CVE-2026-34618.md): Illustrator | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Illustrator Desktop)
- [CVE-2026-34625](https://cve.now/CVE-2026-34625.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2026-34623](https://cve.now/CVE-2026-34623.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2026-34624](https://cve.now/CVE-2026-34624.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2026-27288](https://cve.now/CVE-2026-27288.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2026-0207](https://cve.now/CVE-2026-0207.md): Sensitive Information Logging Vulnerability in FlashBlade (CVSS 8.5, PureStorage FlashBlade)
- [CVE-2026-5752](https://cve.now/CVE-2026-5752.md): CVE-2026-5752 (CVSS 9.3, cohere-terrarium)
- [CVE-2026-0209](https://cve.now/CVE-2026-0209.md): Under certain administrative conditions, FlashArray Purity may apply snapshot retention policies earlier or later than configured. (CVSS 6.9, PureStorage FlashArray)
- [CVE-2026-5756](https://cve.now/CVE-2026-5756.md): Unauthenticated Configuration File Modification Vulnerability in DRC Central Office Services (COS) (CVSS 7.5, Data Recognition Central Office Services - Content Hosting…)
- [CVE-2026-5754](https://cve.now/CVE-2026-5754.md): Radware Alteon has a reflected XSS vulnerability (CVSS 6.1, Radware Alteon vADC)
- [CVE-2026-24907](https://cve.now/CVE-2026-24907.md): October CMS has Stored XSS via Event Log Mail Preview (CVSS 5.1, octobercms october · october/system)
- [CVE-2026-27303](https://cve.now/CVE-2026-27303.md): Adobe Connect | Deserialization of Untrusted Data (CWE-502) (CVSS 9.6, Adobe Connect)
- [CVE-2026-34617](https://cve.now/CVE-2026-34617.md): Adobe Connect | Cross-site Scripting (XSS) (CWE-79) (CVSS 8.7, Adobe Connect)
- [CVE-2026-21331](https://cve.now/CVE-2026-21331.md): Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 6.1, Adobe Connect)
- [CVE-2026-27246](https://cve.now/CVE-2026-27246.md): Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 9.3, Adobe Connect)
- [CVE-2026-34614](https://cve.now/CVE-2026-34614.md): Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 6.1, Adobe Connect)
- [CVE-2026-27245](https://cve.now/CVE-2026-27245.md): Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 9.3, Adobe Connect)
- [CVE-2026-34615](https://cve.now/CVE-2026-34615.md): Adobe Connect | Deserialization of Untrusted Data (CWE-502) (CVSS 9.3, Adobe Connect)
- [CVE-2026-27243](https://cve.now/CVE-2026-27243.md): Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 9.3, Adobe Connect)
- [CVE-2026-24906](https://cve.now/CVE-2026-24906.md): October CMS has Stored XSS in its Backend Editor Markup Classes (CVSS 5.1, octobercms october · october/system)
- [CVE-2026-34628](https://cve.now/CVE-2026-34628.md): InDesign Desktop | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2026-34629](https://cve.now/CVE-2026-34629.md): InDesign Desktop | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2026-34627](https://cve.now/CVE-2026-34627.md): InDesign Desktop | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2026-27258](https://cve.now/CVE-2026-27258.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-32214](https://cve.now/CVE-2026-32214.md): Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-33829](https://cve.now/CVE-2026-33829.md): Windows Snipping Tool Spoofing Vulnerability (CVSS 4.3, Microsoft Windows)
- [CVE-2026-33824](https://cve.now/CVE-2026-33824.md): Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability (CVSS 9.8, KEV, Microsoft Windows)
- [CVE-2026-33827](https://cve.now/CVE-2026-33827.md): Windows TCP/IP Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-33115](https://cve.now/CVE-2026-33115.md): Microsoft Word Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-33114](https://cve.now/CVE-2026-33114.md): Microsoft Word Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-33104](https://cve.now/CVE-2026-33104.md): Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-33103](https://cve.now/CVE-2026-33103.md): Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability (CVSS 5.5, Microsoft Dynamics 365 (on-premises))
- [CVE-2026-33101](https://cve.now/CVE-2026-33101.md): Windows Print Spooler Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-33100](https://cve.now/CVE-2026-33100.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-33099](https://cve.now/CVE-2026-33099.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-32225](https://cve.now/CVE-2026-32225.md): Windows Shell Security Feature Bypass Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-32203](https://cve.now/CVE-2026-32203.md): .NET and Visual Studio Denial of Service Vulnerability (CVSS 7.5, Microsoft .NET · Microsoft Visual Studio +1)
- [CVE-2026-26171](https://cve.now/CVE-2026-26171.md): .NET Denial of Service Vulnerability (CVSS 7.5, Microsoft .NET · Microsoft PowerShell +1)
- [CVE-2026-32201](https://cve.now/CVE-2026-32201.md): Microsoft SharePoint Server Spoofing Vulnerability (CVSS 6.5, KEV, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-32200](https://cve.now/CVE-2026-32200.md): Microsoft PowerPoint Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office +1)
- [CVE-2026-32199](https://cve.now/CVE-2026-32199.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2026-32198](https://cve.now/CVE-2026-32198.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2026-32197](https://cve.now/CVE-2026-32197.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2026-32196](https://cve.now/CVE-2026-32196.md): Windows Admin Center Spoofing Vulnerability (CVSS 6.1, Microsoft Windows Admin Center)
- [CVE-2026-32190](https://cve.now/CVE-2026-32190.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2026-32176](https://cve.now/CVE-2026-32176.md): SQL Server Elevation of Privilege Vulnerability (CVSS 6.7, Microsoft SQL Server 2016 Service Pack · Microsoft SQL Serv…)
- [CVE-2026-32171](https://cve.now/CVE-2026-32171.md): Azure Logic Apps Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Azure Logic Apps)
- [CVE-2026-32164](https://cve.now/CVE-2026-32164.md): Windows User Interface Core Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-32163](https://cve.now/CVE-2026-32163.md): Windows User Interface Core Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-32162](https://cve.now/CVE-2026-32162.md): Windows COM Elevation of Privilege Vulnerability (CVSS 8.4, Microsoft Windows)
- [CVE-2026-32155](https://cve.now/CVE-2026-32155.md): Desktop Window Manager Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-32153](https://cve.now/CVE-2026-32153.md): Windows Speech Runtime Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-32151](https://cve.now/CVE-2026-32151.md): Windows Shell Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-32150](https://cve.now/CVE-2026-32150.md): Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-32149](https://cve.now/CVE-2026-32149.md): Windows Hyper-V Remote Code Execution Vulnerability (CVSS 7.3, Microsoft Windows)
- [CVE-2026-32091](https://cve.now/CVE-2026-32091.md): Microsoft Brokering File System Elevation of Privilege Vulnerability (CVSS 8.4, Microsoft Windows)
- [CVE-2026-32088](https://cve.now/CVE-2026-32088.md): Windows Biometric Service Security Feature Bypass Vulnerability (CVSS 6.1, Microsoft Windows)
- [CVE-2026-32086](https://cve.now/CVE-2026-32086.md): Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-32084](https://cve.now/CVE-2026-32084.md): Windows Print Spooler Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-32080](https://cve.now/CVE-2026-32080.md): Windows WalletService Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows Server)
- [CVE-2026-32079](https://cve.now/CVE-2026-32079.md): Web Account Manager Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-32078](https://cve.now/CVE-2026-32078.md): Windows Projected File System Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-32077](https://cve.now/CVE-2026-32077.md): Windows UPnP Device Host Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-32076](https://cve.now/CVE-2026-32076.md): Windows Storage Spaces Controller Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-32074](https://cve.now/CVE-2026-32074.md): Windows Projected File System Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-32072](https://cve.now/CVE-2026-32072.md): Active Directory Spoofing Vulnerability (CVSS 6.2, Microsoft Windows)
- [CVE-2026-32070](https://cve.now/CVE-2026-32070.md): Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-32069](https://cve.now/CVE-2026-32069.md): Windows Projected File System Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-32068](https://cve.now/CVE-2026-32068.md): Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-27930](https://cve.now/CVE-2026-27930.md): Windows GDI Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-27928](https://cve.now/CVE-2026-27928.md): Windows Hello Security Feature Bypass Vulnerability (CVSS 8.7, Microsoft Windows Server)
- [CVE-2026-27925](https://cve.now/CVE-2026-27925.md): Windows UPnP Device Host Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-27923](https://cve.now/CVE-2026-27923.md): Desktop Window Manager Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-27922](https://cve.now/CVE-2026-27922.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-27920](https://cve.now/CVE-2026-27920.md): Windows UPnP Device Host Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-27916](https://cve.now/CVE-2026-27916.md): Windows UPnP Device Host Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-27914](https://cve.now/CVE-2026-27914.md): Microsoft Management Console Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-27913](https://cve.now/CVE-2026-27913.md): Windows BitLocker Security Feature Bypass Vulnerability (CVSS 7.7, Microsoft Windows Server)
- [CVE-2026-27912](https://cve.now/CVE-2026-27912.md): Windows Kerberos Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Windows Server)
- [CVE-2026-27911](https://cve.now/CVE-2026-27911.md): Windows User Interface Core Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-27910](https://cve.now/CVE-2026-27910.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-27909](https://cve.now/CVE-2026-27909.md): Windows Search Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-26184](https://cve.now/CVE-2026-26184.md): Windows Projected File System Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-26182](https://cve.now/CVE-2026-26182.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-26178](https://cve.now/CVE-2026-26178.md): Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-26177](https://cve.now/CVE-2026-26177.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-26176](https://cve.now/CVE-2026-26176.md): Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-26173](https://cve.now/CVE-2026-26173.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-26172](https://cve.now/CVE-2026-26172.md): Windows Push Notifications Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-26170](https://cve.now/CVE-2026-26170.md): PowerShell Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-26169](https://cve.now/CVE-2026-26169.md): Windows Kernel Memory Information Disclosure Vulnerability (CVSS 6.1, Microsoft Windows)
- [CVE-2026-26168](https://cve.now/CVE-2026-26168.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-26163](https://cve.now/CVE-2026-26163.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-26159](https://cve.now/CVE-2026-26159.md): Remote Desktop Licensing Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-26156](https://cve.now/CVE-2026-26156.md): Windows Hyper-V Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-26153](https://cve.now/CVE-2026-26153.md): Windows Encrypted File System (EFS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-26152](https://cve.now/CVE-2026-26152.md): Microsoft Cryptographic Services Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-26143](https://cve.now/CVE-2026-26143.md): Microsoft PowerShell Security Feature Bypass Vulnerability (CVSS 7.8, Microsoft PowerShell · powershell)
- [CVE-2026-23666](https://cve.now/CVE-2026-23666.md): .NET Framework Denial of Service Vulnerability (CVSS 7.5, Microsoft .NET Framework)
- [CVE-2026-23657](https://cve.now/CVE-2026-23657.md): Microsoft Word Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-20806](https://cve.now/CVE-2026-20806.md): Windows COM Server Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-20928](https://cve.now/CVE-2026-20928.md): Windows Recovery Environment Security Feature Bypass Vulnerability (CVSS 4.6, Microsoft Windows)
- [CVE-2026-32212](https://cve.now/CVE-2026-32212.md): Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-33826](https://cve.now/CVE-2026-33826.md): Windows Active Directory Remote Code Execution Vulnerability (CVSS 8.0, Microsoft Windows Server 2012 R2 · Microsoft Windows Server)
- [CVE-2026-33825](https://cve.now/CVE-2026-33825.md): Microsoft Defender Elevation of Privilege Vulnerability (CVSS 7.8, KEV, Microsoft Defender Antimalware Platform)
- [CVE-2026-33822](https://cve.now/CVE-2026-33822.md): Microsoft Word Information Disclosure Vulnerability (CVSS 6.1, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC f…)
- [CVE-2026-33120](https://cve.now/CVE-2026-33120.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SQL Server)
- [CVE-2026-33116](https://cve.now/CVE-2026-33116.md): .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability (CVSS 7.5, Microsoft .NET · System.Security.Cryptography.Xml)
- [CVE-2026-33098](https://cve.now/CVE-2026-33098.md): Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-33096](https://cve.now/CVE-2026-33096.md): HTTP.sys Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-33095](https://cve.now/CVE-2026-33095.md): Microsoft Word Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-32226](https://cve.now/CVE-2026-32226.md): .NET Framework Denial of Service Vulnerability (CVSS 5.9, Microsoft .NET Framework)
- [CVE-2026-32224](https://cve.now/CVE-2026-32224.md): Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-32223](https://cve.now/CVE-2026-32223.md): Windows USB Printing Stack (usbprint.sys) Elevation of Privilege Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2026-32222](https://cve.now/CVE-2026-32222.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-32221](https://cve.now/CVE-2026-32221.md): Windows Graphics Component Remote Code Execution Vulnerability (CVSS 8.4, Microsoft Windows)
- [CVE-2026-32220](https://cve.now/CVE-2026-32220.md): UEFI Secure Boot Security Feature Bypass Vulnerability (CVSS 4.4, Microsoft Windows)
- [CVE-2026-32219](https://cve.now/CVE-2026-32219.md): Microsoft Brokering File System Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-32218](https://cve.now/CVE-2026-32218.md): Windows Kernel Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-32217](https://cve.now/CVE-2026-32217.md): Windows Kernel Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-32216](https://cve.now/CVE-2026-32216.md): Windows Redirected Drive Buffering System Denial of Service Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-32215](https://cve.now/CVE-2026-32215.md): Windows Kernel Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-32202](https://cve.now/CVE-2026-32202.md): Windows Shell Spoofing Vulnerability (CVSS 4.3, KEV, Microsoft Windows)
- [CVE-2026-32195](https://cve.now/CVE-2026-32195.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-32192](https://cve.now/CVE-2026-32192.md): Azure Monitor Agent Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Azure Monitor)
- [CVE-2026-32189](https://cve.now/CVE-2026-32189.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2026-32188](https://cve.now/CVE-2026-32188.md): Microsoft Excel Information Disclosure Vulnerability (CVSS 7.1, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2026-32184](https://cve.now/CVE-2026-32184.md): Microsoft High Performance Compute (HPC) Pack Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft HPC Pack)
- [CVE-2026-32183](https://cve.now/CVE-2026-32183.md): Windows Snipping Tool Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-32181](https://cve.now/CVE-2026-32181.md): Connected User Experiences and Telemetry Service Denial of Service Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-32178](https://cve.now/CVE-2026-32178.md): .NET Spoofing Vulnerability (CVSS 7.5, Microsoft .NET · Microsoft Visual Studio +12)
- [CVE-2026-32168](https://cve.now/CVE-2026-32168.md): Azure Monitor Agent Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Azure Monitor)
- [CVE-2026-32167](https://cve.now/CVE-2026-32167.md): SQL Server Elevation of Privilege Vulnerability (CVSS 6.7, Microsoft SQL Server 2016 Service Pack · Microsoft SQL Serv…)
- [CVE-2026-32165](https://cve.now/CVE-2026-32165.md): Windows User Interface Core Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-0390](https://cve.now/CVE-2026-0390.md): UEFI Secure Boot Security Feature Bypass Vulnerability (CVSS 6.7, Microsoft Windows)
- [CVE-2026-32160](https://cve.now/CVE-2026-32160.md): Windows Push Notifications Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-32159](https://cve.now/CVE-2026-32159.md): Windows Push Notifications Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-32158](https://cve.now/CVE-2026-32158.md): Windows Push Notifications Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-32157](https://cve.now/CVE-2026-32157.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Remote Desktop client for Windows Desktop · Micro…)
- [CVE-2026-32156](https://cve.now/CVE-2026-32156.md): Windows UPnP Device Host Remote Code Execution Vulnerability (CVSS 7.4, Microsoft Windows)
- [CVE-2026-32154](https://cve.now/CVE-2026-32154.md): Desktop Window Manager Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-32152](https://cve.now/CVE-2026-32152.md): Desktop Window Manager Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-32093](https://cve.now/CVE-2026-32093.md): Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-32090](https://cve.now/CVE-2026-32090.md): Windows Speech Brokered Api Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-32089](https://cve.now/CVE-2026-32089.md): Windows Speech Brokered Api Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-32087](https://cve.now/CVE-2026-32087.md): Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-32085](https://cve.now/CVE-2026-32085.md): Remote Procedure Call Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-32083](https://cve.now/CVE-2026-32083.md): Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-32082](https://cve.now/CVE-2026-32082.md): Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-32081](https://cve.now/CVE-2026-32081.md): Package Catalog Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-32075](https://cve.now/CVE-2026-32075.md): Windows UPnP Device Host Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-32073](https://cve.now/CVE-2026-32073.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-32071](https://cve.now/CVE-2026-32071.md): Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-27931](https://cve.now/CVE-2026-27931.md): Windows GDI Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-27929](https://cve.now/CVE-2026-27929.md): Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-27927](https://cve.now/CVE-2026-27927.md): Windows Projected File System Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-27926](https://cve.now/CVE-2026-27926.md): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-27924](https://cve.now/CVE-2026-27924.md): Desktop Window Manager Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-27921](https://cve.now/CVE-2026-27921.md): Windows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-27919](https://cve.now/CVE-2026-27919.md): Windows UPnP Device Host Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-27918](https://cve.now/CVE-2026-27918.md): Windows Shell Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-27917](https://cve.now/CVE-2026-27917.md): Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-27915](https://cve.now/CVE-2026-27915.md): Windows UPnP Device Host Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-27908](https://cve.now/CVE-2026-27908.md): Windows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-27907](https://cve.now/CVE-2026-27907.md): Windows Storage Spaces Controller Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-27906](https://cve.now/CVE-2026-27906.md): Windows Hello Security Feature Bypass Vulnerability (CVSS 4.4, Microsoft Windows)
- [CVE-2026-26183](https://cve.now/CVE-2026-26183.md): Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows Server)
- [CVE-2026-26181](https://cve.now/CVE-2026-26181.md): Microsoft Brokering File System Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-26180](https://cve.now/CVE-2026-26180.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-26179](https://cve.now/CVE-2026-26179.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-26175](https://cve.now/CVE-2026-26175.md): Windows Boot Manager Security Feature Bypass Vulnerability (CVSS 4.6, Microsoft Windows)
- [CVE-2026-26174](https://cve.now/CVE-2026-26174.md): Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-26167](https://cve.now/CVE-2026-26167.md): Windows Push Notifications Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-26166](https://cve.now/CVE-2026-26166.md): Windows Shell Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-26165](https://cve.now/CVE-2026-26165.md): Windows Shell Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-26162](https://cve.now/CVE-2026-26162.md): Windows OLE Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-26161](https://cve.now/CVE-2026-26161.md): Windows Sensor Data Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-26160](https://cve.now/CVE-2026-26160.md): Remote Desktop Licensing Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-26155](https://cve.now/CVE-2026-26155.md): Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-26154](https://cve.now/CVE-2026-26154.md): Windows Server Update Service (WSUS) Tampering Vulnerability (CVSS 7.5, Microsoft Windows Server)
- [CVE-2026-26151](https://cve.now/CVE-2026-26151.md): Remote Desktop Spoofing Vulnerability (CVSS 7.1, Microsoft Windows)
- [CVE-2026-26149](https://cve.now/CVE-2026-26149.md): Microsoft Power Apps Desktop Client Spoofing Vulnerability (CVSS 9.0, Microsoft Power Apps Desktop Client)
- [CVE-2026-23670](https://cve.now/CVE-2026-23670.md): Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability (CVSS 5.7, Microsoft Windows)
- [CVE-2026-20945](https://cve.now/CVE-2026-20945.md): Microsoft SharePoint Server Spoofing Vulnerability (CVSS 4.6, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-25184](https://cve.now/CVE-2026-25184.md): Applocker Filter Driver (applockerfltr.sys) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-23653](https://cve.now/CVE-2026-23653.md): GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability (CVSS 5.7, Microsoft Visual Studio Code CoPilot Chat Extension)
- [CVE-2026-20930](https://cve.now/CVE-2026-20930.md): Windows Management Services Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-22692](https://cve.now/CVE-2026-22692.md): October CMS: Twig Sandbox Bypass via Collection Methods (CVSS 4.9, octobercms october · october/rain)
- [CVE-2026-27284](https://cve.now/CVE-2026-27284.md): InDesign Desktop | Out-of-bounds Read (CWE-125) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2026-27285](https://cve.now/CVE-2026-27285.md): InDesign Desktop | Heap-based Buffer Overflow (CWE-122) (CVSS 5.5, Adobe InDesign Desktop)
- [CVE-2026-27286](https://cve.now/CVE-2026-27286.md): InDesign Desktop | Heap-based Buffer Overflow (CWE-122) (CVSS 5.5, Adobe InDesign Desktop)
- [CVE-2026-27283](https://cve.now/CVE-2026-27283.md): InDesign Desktop | Use After Free (CWE-416) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2026-27238](https://cve.now/CVE-2026-27238.md): InDesign Desktop | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2026-27291](https://cve.now/CVE-2026-27291.md): InDesign Desktop | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2026-34622](https://cve.now/CVE-2026-34622.md): Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321) (CVSS 8.6, Adobe Acrobat DC · Adobe Acrobat Reader DC +1)
- [CVE-2026-34626](https://cve.now/CVE-2026-34626.md): Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321) (CVSS 6.3, Adobe Acrobat DC · Adobe Acrobat Reader DC +1)
- [CVE-2025-61624](https://cve.now/CVE-2025-61624.md): An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') \[CWE-22\] vulnerability in Fortinet FortiOS 7.6.0 through 7 (CVSS 5.4, KEV, Fortinet FortiOS · Fortinet FortiProxy +2)
- [CVE-2025-68649](https://cve.now/CVE-2025-68649.md): An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6. (CVSS 5.4, Fortinet FortiManager Cloud · Fortinet FortiManager +1)
- [CVE-2026-21741](https://cve.now/CVE-2026-21741.md): An URL Redirection to Untrusted Site ('Open Redirect') vulnerability \[CWE-601\] vulnerability in Fortinet FortiNAC-F 7.6.0 through 7.6.5, For (CVSS 2.2, Fortinet FortiNAC-F)
- [CVE-2026-39813](https://cve.now/CVE-2026-39813.md): A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow attack (CVSS 9.1, Fortinet FortiSandbox)
- [CVE-2025-61848](https://cve.now/CVE-2025-61848.md): An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 throug (CVSS 6.5, Fortinet FortiManager · Fortinet FortiAnalyzer +1)
- [CVE-2026-22828](https://cve.now/CVE-2026-22828.md): A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiManager Cloud 7.6.2 through 7.6.4 may a (CVSS 7.3, Fortinet FortiAnalyzer Cloud · Fortinet FortiManager Cloud)
- [CVE-2026-39815](https://cve.now/CVE-2026-39815.md): A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiDDoS-F 7.2.1 through 7 (CVSS 7.9, Fortinet FortiDDoS-F)
- [CVE-2026-22573](https://cve.now/CVE-2026-22573.md): An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6 (CVSS 6.2, Fortinet FortiSOAR on-premise · Fortinet FortiSOAR PaaS)
- [CVE-2025-61886](https://cve.now/CVE-2025-61886.md): An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability \[CWE-79\] vulnerability in Fortinet For (CVSS 4.9, Fortinet FortiSandbox PaaS · Fortinet FortiSandbox)
- [CVE-2026-39810](https://cve.now/CVE-2026-39810.md): A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5 may allow attacker to information disclos (CVSS 5.2, Fortinet FortiClientEMS)
- [CVE-2026-39811](https://cve.now/CVE-2026-39811.md): A integer overflow or wraparound vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all vers (CVSS 4.4, Fortinet FortiWeb)
- [CVE-2024-23104](https://cve.now/CVE-2024-23104.md): An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiNDR 7.6.0, FortiNDR 7.4.0 through 7.4.8, FortiN (CVSS 5.4, Fortinet FortiVoice · Fortinet FortiNDR)
- [CVE-2026-39812](https://cve.now/CVE-2026-39812.md): A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0 through (CVSS 4.3, Fortinet FortiSandbox)
- [CVE-2026-23708](https://cve.now/CVE-2026-23708.md): A improper authentication vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR on-pre (CVSS 6.7, Fortinet FortiSOAR PaaS · Fortinet FortiSOAR on-premise)
- [CVE-2026-39814](https://cve.now/CVE-2026-39814.md): Multiple Relative Path Traversal vulnerabilities \[CWE-23\] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6 (CVSS 6.2, Fortinet FortiWeb)
- [CVE-2026-25691](https://cve.now/CVE-2026-25691.md): A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, (CVSS 6.2, Fortinet FortiSandbox PaaS · Fortinet FortiSandbox Cloud +1)
- [CVE-2025-59809](https://cve.now/CVE-2025-59809.md): A server-side request forgery (ssrf) vulnerability \[CWE-918\] vulnerability in Fortinet FortiSOAR PaaS 7.6.4, FortiSOAR PaaS 7.6.0 through 7. (CVSS 4.1, Fortinet FortiSOAR on-premise · Fortinet FortiSOAR PaaS)
- [CVE-2026-22155](https://cve.now/CVE-2026-22155.md): A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through (CVSS 6.2, Fortinet FortiSOAR PaaS · Fortinet FortiSOAR on-premise)
- [CVE-2026-21742](https://cve.now/CVE-2026-21742.md): A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through (CVSS 5.4, Fortinet FortiSOAR on-premise · Fortinet FortiSOAR PaaS)
- [CVE-2026-22574](https://cve.now/CVE-2026-22574.md): A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2 (CVSS 4.1, Fortinet FortiSOAR PaaS · Fortinet FortiSOAR on-premise)
- [CVE-2026-22154](https://cve.now/CVE-2026-22154.md): An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSOAR PaaS 7.6.0 throu (CVSS 4.4, Fortinet FortiSOAR PaaS · Fortinet FortiSOAR on-premise)
- [CVE-2025-53847](https://cve.now/CVE-2025-53847.md): A missing authentication for critical function vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7 (CVSS 6.2, Fortinet FortiOS)
- [CVE-2026-22576](https://cve.now/CVE-2026-22576.md): A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2 (CVSS 4.1, Fortinet FortiSOAR PaaS · Fortinet FortiSOAR on-premise)
- [CVE-2026-27316](https://cve.now/CVE-2026-27316.md): A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4 all versions, FortiSandb (CVSS 2.5, Fortinet FortiSandbox)
- [CVE-2026-39808](https://cve.now/CVE-2026-39808.md): A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 th (CVSS 9.1, KEV, Fortinet FortiSandbox)
- [CVE-2026-2401](https://cve.now/CVE-2026-2401.md): CWE-532 Insertion of Sensitive Information into Log File vulnerability exists that could cause confidential information to be exposed when (CVSS 2.4, Schneider Electric PowerChute™ Serial Shutdown)
- [CVE-2026-2400](https://cve.now/CVE-2026-2400.md): CWE-93 Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability exists that could cause application user credentials to re (CVSS 5.3, Schneider Electric PowerChute™ Serial Shutdown)
- [CVE-2026-2403](https://cve.now/CVE-2026-2403.md): CWE-1284 Improper Validation of Specified Quantity in Input vulnerability exists that could cause Event and Data Log truncation impacting lo (CVSS 5.3, Schneider Electric PowerChute™ Serial Shutdown)
- [CVE-2026-2405](https://cve.now/CVE-2026-2405.md): CWE-400 Uncontrolled Resource Consumption vulnerability exists that could cause excessive troubleshooting zip file creation and denial of se (CVSS 5.3, Schneider Electric PowerChute™ Serial Shutdown)
- [CVE-2026-2402](https://cve.now/CVE-2026-2402.md): CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker to gain access to the us (CVSS 6.9, Schneider Electric PowerChute™ Serial Shutdown)
- [CVE-2026-2404](https://cve.now/CVE-2026-2404.md): CWE-116 Improper Encoding or Escaping of Output vulnerability exists that could cause log injection and forged log when an attacker alters t (CVSS 6.9, Schneider Electric PowerChute™ Serial Shutdown)
- [CVE-2026-5713](https://cve.now/CVE-2026-5713.md): Out-of-bounds read/write during remote profiling and asyncio process introspection when connecting to malicious target (CVSS 5.3, Python Software Foundation CPython)
- [CVE-2026-2399](https://cve.now/CVE-2026-2399.md): CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause critical files o (CVSS 6.9, Schneider Electric PowerChute™ Serial Shutdown)
- [CVE-2026-39809](https://cve.now/CVE-2026-39809.md): A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.0 throug (CVSS 6.2, Fortinet FortiClientEMS)
- [CVE-2026-4832](https://cve.now/CVE-2026-4832.md): CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to sensitive device information when an unau (CVSS 6.9, Schneider Electric Easergy MiCOM P14x · Schneider Elect… +10)
- [CVE-2026-37980](https://cve.now/CVE-2026-37980.md): Org.keycloak.forms.login: keycloak: keycloak: arbitrary code execution via stored cross-site scripting (xss) in organization selection login page (CVSS 6.9, Red Hat build of Keycloak · org.keycloak:keycloak-services)
- [CVE-2026-4914](https://cve.now/CVE-2026-4914.md): Stored XSS in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to obtain limited information from other user sessi (CVSS 5.4, Ivanti Neurons for ITSM)
- [CVE-2026-4913](https://cve.now/CVE-2026-4913.md): Improper protection of an alternate path in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to retain access when (CVSS 5.7, Ivanti Neurons for ITSM)
- [CVE-2026-4344](https://cve.now/CVE-2026-4344.md): Stored Cross-Site Scripting (XSS) Vulnerability in Assembly Component Name (CVSS 7.1, Autodesk Fusion)
- [CVE-2026-4345](https://cve.now/CVE-2026-4345.md): Stored Cross-Site Scripting (XSS) Vulnerability in Design Name (CVSS 7.1, Autodesk Fusion)
- [CVE-2026-4369](https://cve.now/CVE-2026-4369.md): Stored Cross-Site Scripting (XSS) Vulnerability in Assembly Variant Name (CVSS 7.1, Autodesk Fusion)
- [CVE-2025-8095](https://cve.now/CVE-2025-8095.md): Recoverable obfuscation using the OECH1 prefix encoding in OpenEdge (CVSS 9.1, Progress Software OpenEdge)
- [CVE-2025-7389](https://cve.now/CVE-2025-7389.md): Unauthorized Arbitrary File Read via RMI in AdminServer Interface (CVSS 8.2, Progress Software OpenEdge)
- [CVE-2026-2450](https://cve.now/CVE-2026-2450.md): .NET misconfiguration: use of impersonation vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Hijacking a Privile (CVSS 7.4, upKeeper Solutions upKeeper Instant Privilege Access)
- [CVE-2026-2449](https://cve.now/CVE-2026-2449.md): Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in upKeeper Solutions upKeeper Instant Priv (CVSS 9.0, upKeeper Solutions upKeeper Instant Privilege Access)
- [CVE-2026-24069](https://cve.now/CVE-2026-24069.md): Improper Enforcement of Disabled Accounts in WebUI SSO in Kiuwan SAST (CVSS 5.4, Kiuwan SAST)
- [CVE-2026-2332](https://cve.now/CVE-2026-2332.md): HTTP Request Smuggling via Chunked Extension Quoted-String Parsing (CVSS 7.4, Eclipse Foundation Eclipse Jetty · org.eclipse.jetty:jetty-…)
- [CVE-2025-13822](https://cve.now/CVE-2025-13822.md): Authentication bypass in MCPHub (CVSS 5.3, MCPHub · @samanhappy/mcphub)
- [CVE-2026-33892](https://cve.now/CVE-2026-33892.md): A vulnerability has been identified in Industrial Edge Management Pro V1 (All versions \>= V1.7.6 \< V1.15.17), Industrial Edge Management Pro (CVSS 7.1, Siemens Industrial Edge Management Pro · Siemens Industrial…)
- [CVE-2026-27668](https://cve.now/CVE-2026-27668.md): A vulnerability has been identified in RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P) (All versions \< V5.8). (CVSS 8.8, Siemens RUGGEDCOM CROSSBOW Secure Access Manager Primary)
- [CVE-2026-25654](https://cve.now/CVE-2026-25654.md): A vulnerability has been identified in SINEC NMS (All versions \< V4.0 SP3). (CVSS 8.8, Siemens SINEC NMS)
- [CVE-2026-24032](https://cve.now/CVE-2026-24032.md): A vulnerability has been identified in SINEC NMS (All versions \< V4.0 SP3 with UMC). (CVSS 7.3, Siemens SINEC NMS)
- [CVE-2025-40745](https://cve.now/CVE-2025-40745.md): A vulnerability has been identified in Siemens Software Center (All versions \< V3.5.8.2), Simcenter 3D (All versions \< V2506.6000), Simcente (CVSS 3.7, Siemens Software Center · Siemens Simcenter +3)
- [CVE-2026-31923](https://cve.now/CVE-2026-31923.md): Apache APISIX: Openid-connect \`tls\_verify\` field is disabled by default (CVSS 7.5, Apache Software Foundation Apache APISIX)
- [CVE-2026-33929](https://cve.now/CVE-2026-33929.md): Apache PDFBox Examples: Path Traversal in PDFBox ExtractEmbeddedFiles Example Code (CVSS 4.3, Apache Software Foundation Apache PDFBox Examples · org.apa…)
- [CVE-2026-31924](https://cve.now/CVE-2026-31924.md): Apache APISIX: Plugin tencent-cloud-cls log export uses plaintext HTTP (CVSS 5.3, Apache Software Foundation Apache APISIX)
- [CVE-2026-31908](https://cve.now/CVE-2026-31908.md): Apache APISIX: forward auth plugin allows header injection (CVSS 9.1, Apache Software Foundation Apache APISIX)
- [CVE-2026-4109](https://cve.now/CVE-2026-4109.md): Eventin – Events Calendar, Event Booking, Ticket & Registration (AI Powered) \<= 4.1.8 Missing Authorization to Authenticated (Subscriber+) Order Information Exposure (CVSS 4.3, arraytics Eventin – Event Calendar, Event Registration, Tic…)
- [CVE-2026-2582](https://cve.now/CVE-2026-2582.md): Germanized for WooCommerce \<= 3.20.5 - Unauthenticated Arbitrary Shortcode Execution (CVSS 6.5, vendidero Germanized for WooCommerce)
- [CVE-2026-3017](https://cve.now/CVE-2026-3017.md): Smart Post Show – Post Grid, Post Carousel & Slider, and List Category Posts \<= 3.0.12 - Authenticated (Administrator+) PHP Object Injection (CVSS 7.2, shapedplugin Smart Post Show – Post Grid, Post Carousel & S…)
- [CVE-2026-4059](https://cve.now/CVE-2026-4059.md): ShopLentor \<= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button\_text' Shortcode Attribute (CVSS 6.4, devitemsllc ShopLentor – All-in-One WooCommerce Growth & St…)
- [CVE-2026-4479](https://cve.now/CVE-2026-4479.md): WholeSale Products Dynamic Pricing Management WooCommerce \<= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings (CVSS 4.4, wpcodefactory WholeSale Products Dynamic Pricing Management…)
- [CVE-2026-1607](https://cve.now/CVE-2026-1607.md): Surbma | Booking.com \<= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, Surbma | Booking.com Shortcode)
- [CVE-2026-40313](https://cve.now/CVE-2026-40313.md): PraisonAI: ArtiPACKED Vulnerability via GitHub Actions Credential Persistence (CVSS 9.1, MervinPraison PraisonAI)
- [CVE-2026-40289](https://cve.now/CVE-2026-40289.md): PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions (CVSS 9.1, MervinPraison PraisonAI · MervinPraison praisonaiagents +2)
- [CVE-2026-40288](https://cve.now/CVE-2026-40288.md): PraisonAI: Critical RCE via \`type: job\` workflow YAML (CVSS 9.8, MervinPraison PraisonAI · MervinPraison praisonaiagents +2)
- [CVE-2026-40287](https://cve.now/CVE-2026-40287.md): PraisonAI has RCE via Automatic tools.py Import (CVSS 8.4, MervinPraison PraisonAI · MervinPraison praisonaiagents +2)
- [CVE-2026-40315](https://cve.now/CVE-2026-40315.md): PraisonAI: SQLiteConversationStore didn't validate table\_prefix when constructing SQL queries (CVSS 7.2, MervinPraison PraisonAI · praisonai)
- [CVE-2026-4388](https://cve.now/CVE-2026-4388.md): Form Maker by 10Web \<= 1.15.40 - Unauthenticated Stored Cross-Site Scripting via Matrix Field Text Box (CVSS 7.2, Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact F…)
- [CVE-2026-6227](https://cve.now/CVE-2026-6227.md): BackWPup \<= 5.6.6 - Authenticated (Administrator+) Local File Inclusion via 'block\_name' Parameter (CVSS 7.2, wp\_media BackWPup – WordPress Backup & Restore Plugin)
- [CVE-2026-6264](https://cve.now/CVE-2026-6264.md): Critical Security fix for the Talend JobServer and Talend Runtime (CVSS 9.8, Talend JobServer · Talend Runtime)
- [CVE-2026-34984](https://cve.now/CVE-2026-34984.md): External Secrets Operator has DNS exfiltration via getHostByName in its v2 template engine (CVSS 7.1, external-secrets · github.com/external-secrets/external-sec…)
- [CVE-2026-34225](https://cve.now/CVE-2026-34225.md): Open WebUI has Blind Server Side Request Forgery in its Image Edit Functionality (CVSS 4.3, open-webui)
- [CVE-2026-39426](https://cve.now/CVE-2026-39426.md): MaxKB: Stored XSS via Unsanitized iframe\_render Parsing (CVSS 5.1, 1Panel-dev MaxKB)
- [CVE-2026-4352](https://cve.now/CVE-2026-4352.md): JetEngine \<= 3.8.6.1 - Unauthenticated SQL Injection via '\_cct\_search' Parameter (CVSS 7.5, Crocoblock JetEngine)
- [CVE-2026-4365](https://cve.now/CVE-2026-4365.md): LearnPress \<= 4.3.2.8 - Missing Authorization to Unauthenticated Arbitrary Quiz Answer Deletion (CVSS 9.1, thimpress LearnPress – WordPress LMS Plugin for Create and…)
- [CVE-2026-39425](https://cve.now/CVE-2026-39425.md): MaxKB: Stored XSS via Unsanitized html\_rander Tags in Markdown Rendering (CVSS 5.1, 1Panel-dev MaxKB)
- [CVE-2026-39419](https://cve.now/CVE-2026-39419.md): MaxKB: Sandbox Result Validation Bypass via Tool Output Spoofing (CVSS 3.1, 1Panel-dev MaxKB)
- [CVE-2026-39424](https://cve.now/CVE-2026-39424.md): MaxKB has CSV Injection in its Application Chat Export Functionality (CVSS 5.3, 1Panel-dev MaxKB)
- [CVE-2026-39423](https://cve.now/CVE-2026-39423.md): Stored XSS via Eval Injection in EchartsRander Component (CVSS 6.9, 1Panel-dev MaxKB)
- [CVE-2026-39422](https://cve.now/CVE-2026-39422.md): MaxKB has Stored XSS via ChatHeadersMiddleware (CVSS 6.9, 1Panel-dev MaxKB)
- [CVE-2026-39421](https://cve.now/CVE-2026-39421.md): MaxKB: Sandbox escape via ctypes and unhooked SYS\_pkey\_mprotect (CVSS 6.3, 1Panel-dev MaxKB)
- [CVE-2026-39420](https://cve.now/CVE-2026-39420.md): MaxKB: Sandbox escape via LD\_PRELOAD bypass (CVSS 6.3, 1Panel-dev MaxKB)
- [CVE-2026-34264](https://cve.now/CVE-2026-34264.md): Information Disclosure vulnerability in SAP Human Capital Management for SAP S/4HANA (CVSS 6.5, SAP\_SE SAP Human Capital Management for SAP S/4HANA)
- [CVE-2026-34262](https://cve.now/CVE-2026-34262.md): Information Disclosure Vulnerability in SAP HANA Cockpit and HANA Database Explorer (CVSS 5.0, SAP\_SE SAP HANA Cockpit and HANA Database Explorer)
- [CVE-2026-34261](https://cve.now/CVE-2026-34261.md): Missing Authorization check in SAP Business Analytics and SAP Content Management (CVSS 6.5, SAP\_SE SAP Business Analytics and SAP Content Management)
- [CVE-2026-39418](https://cve.now/CVE-2026-39418.md): MaxKB: SSRF via sandbox network hook bypass (CVSS 5.0, 1Panel-dev MaxKB)
- [CVE-2026-34257](https://cve.now/CVE-2026-34257.md): Open Redirect vulnerability in SAP NetWeaver Application Server ABAP (CVSS 6.1, SAP\_SE SAP NetWeaver Application Server ABAP)
- [CVE-2026-34256](https://cve.now/CVE-2026-34256.md): Missing Authorization check in SAP ERP and SAP S/4 HANA (Private Cloud and On-Premise) (CVSS 7.1, SAP\_SE SAP ERP and SAP S/4 HANA)
- [CVE-2026-27683](https://cve.now/CVE-2026-27683.md): Reflected cross site scripting vulnerability in SAP BusinessObjects Business Intelligence Platform (CVSS 4.1, SAP\_SE SAP BusinessObjects Business Intelligence Platform)
- [CVE-2026-27681](https://cve.now/CVE-2026-27681.md): SQL Injection vulnerability in SAP Business Planning and Consolidation and SAP Business Warehouse (CVSS 9.9, SAP\_SE SAP Business Planning and Consolidation and SAP Busi…)
- [CVE-2026-27679](https://cve.now/CVE-2026-27679.md): Missing Authorization check in SAP S/4HANA Frontend OData Service (Manage Reference Structures) (CVSS 6.5, SAP\_SE SAP S/4HANA Frontend OData Service)
- [CVE-2026-27678](https://cve.now/CVE-2026-27678.md): Missing Authorization check in SAP S/4HANA Backend OData Service (Manage Reference Structures) (CVSS 6.5, SAP\_SE SAP S/4HANA Backend OData Service)
- [CVE-2026-27677](https://cve.now/CVE-2026-27677.md): Missing Authorization check in SAP S/4HANA OData Service (Manage Reference Equipment) (CVSS 6.5, SAP\_SE SAP S/4HANA OData Service)
- [CVE-2026-27676](https://cve.now/CVE-2026-27676.md): Missing Authorization check in SAP S/4HANA OData Service (Manage Technical Object Structures) (CVSS 4.3, SAP\_SE SAP S/4HANA OData Service)
- [CVE-2026-27675](https://cve.now/CVE-2026-27675.md): Code Injection vulnerability in SAP Landscape Transformation (CVSS 2.0, SAP\_SE SAP Landscape Transformation)
- [CVE-2026-27674](https://cve.now/CVE-2026-27674.md): Code Injection vulnerability in SAP NetWeaver Application Server Java (Web Dynpro Java) (CVSS 6.1, SAP\_SE SAP NetWeaver Application Server Java)
- [CVE-2026-27673](https://cve.now/CVE-2026-27673.md): Missing Authorization Check in SAP S/4HANA (Private Cloud and On-Premise) (CVSS 4.9, SAP\_SE SAP S/4HANA)
- [CVE-2026-27672](https://cve.now/CVE-2026-27672.md): Missing Authorization check in Material Master Application (CVSS 4.3, SAP\_SE Material Master Application)
- [CVE-2026-24318](https://cve.now/CVE-2026-24318.md): Insecure Session Management vulnerability in SAP BusinessObjects Business Intelligence Platform (CVSS 4.2, SAP\_SE SAP BusinessObjects Business Intelligence Platform)
- [CVE-2026-0512](https://cve.now/CVE-2026-0512.md): Cross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog) (CVSS 6.1, SAP\_SE SAP Supplier Relationship Management)
- [CVE-2026-39417](https://cve.now/CVE-2026-39417.md): MaxKB: RCE via MCP stdio command injection in workflow engine (CVSS 4.6, 1Panel-dev MaxKB)
- [CVE-2025-61260](https://cve.now/CVE-2025-61260.md): A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code execution through malicious MCP (Model Context Proto (CVSS 9.8, @openai/codex)
- [CVE-2025-63939](https://cve.now/CVE-2025-63939.md): Improper input handling in /Grocery/search\_products\_itname.php, in anirudhkannan Grocery Store Management System 1.0, allows SQL injection v (CVSS 9.8)
- [CVE-2025-65132](https://cve.now/CVE-2025-65132.md): alandsilva26 hotel-management-php 1.0 is vulnerable to Cross Site Scripting (XSS) in /public/admin/edit\_room.php which allows an attacker to (CVSS 6.1)
- [CVE-2025-65133](https://cve.now/CVE-2025-65133.md): A SQL injection vulnerability exists in the School Management System (version 1.0) by manikandan580. (CVSS 9.8)
- [CVE-2025-65134](https://cve.now/CVE-2025-65134.md): In manikandan580 School-management-system 1.0, a reflected cross-site scripting (XSS) vulnerability exists in /studentms/admin/contact-us.ph (CVSS 6.1)
- [CVE-2025-65135](https://cve.now/CVE-2025-65135.md): In manikandan580 School-management-system 1.0, a time-based blind SQL injection vulnerability exists in /studentms/admin/between-date-reprts (CVSS 9.8)
- [CVE-2025-65136](https://cve.now/CVE-2025-65136.md): In manikandan580 School-management-system 1.0, a reflected XSS vulnerability exists in /studentms/admin/contact-us.php via the pagedes POST (CVSS 6.1)
- [CVE-2025-69893](https://cve.now/CVE-2025-69893.md): A side-channel vulnerability exists in the implementation of BIP-39 mnemonic processing, as observed in Trezor One v1.13.0 to v1.14.0, Trezo (CVSS 4.6)
- [CVE-2025-69993](https://cve.now/CVE-2025-69993.md): Leaflet versions up to and including 1.9.4 are vulnerable to Cross-Site Scripting (XSS) via the bindPopup() method. (CVSS 6.1)
- [CVE-2025-70023](https://cve.now/CVE-2025-70023.md): An issue pertaining to CWE-843: Access of Resource Using Incompatible Type was discovered in transloadit uppy v0.25.6. (CVSS 9.8)
- [CVE-2026-30480](https://cve.now/CVE-2026-30480.md): A Local File Inclusion (LFI) vulnerability in the NFSen module (nfsen.inc.php) of LibreNMS 22.11.0-23-gd091788f2 allows authenticated attack (CVSS 6.5)
- [CVE-2026-31049](https://cve.now/CVE-2026-31049.md): An issue in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to execute arbitrary code and escalate privileges via the CSV regi (CVSS 9.8)
- [CVE-2026-37589](https://cve.now/CVE-2026-37589.md): SourceCodester Storage Unit Rental Management System v1.0 is vulnerable to SQL Injection in the file /storage/admin/maintenance/manage\_stora (CVSS 2.7)
- [CVE-2026-37590](https://cve.now/CVE-2026-37590.md): SourceCodester Storage Unit Rental Management System v1.0 is vulnerable to SQL Injection in the file /storage/admin/rents/manage\_rent.php. (CVSS 2.7)
- [CVE-2026-37591](https://cve.now/CVE-2026-37591.md): Sourcecodester Storage Unit Rental Management System v1.0 is vulnerable to SQL injection in the file /storage/admin/tenants/view\_details.php (CVSS 2.7)
- [CVE-2026-37592](https://cve.now/CVE-2026-37592.md): Sourcecodester Storage Unit Rental Management System v1.0 is vulnerable to SQL in the file /storage/admin/maintenance/manage\_pricing.php. (CVSS 2.7)
- [CVE-2026-37593](https://cve.now/CVE-2026-37593.md): SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh\_attendance/admin/view\_ (CVSS 2.7)
- [CVE-2026-37594](https://cve.now/CVE-2026-37594.md): SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh\_attendance/admin/view\_ (CVSS 2.7)
- [CVE-2026-37595](https://cve.now/CVE-2026-37595.md): SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh\_attendance/admin/manag (CVSS 2.7)
- [CVE-2026-37596](https://cve.now/CVE-2026-37596.md): SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh\_attendance/admin/manag (CVSS 2.7)
- [CVE-2026-37597](https://cve.now/CVE-2026-37597.md): SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh\_attendance/admin/atten (CVSS 2.7)
- [CVE-2026-37598](https://cve.now/CVE-2026-37598.md): SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to arbitrary code execution (RCE) via /scheduler/classes/SystemSettin (CVSS 2.7)
- [CVE-2026-37600](https://cve.now/CVE-2026-37600.md): SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to SQL Injection in the file /scheduler/admin/appointments/view\_detai (CVSS 2.7)
- [CVE-2026-37601](https://cve.now/CVE-2026-37601.md): SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to SQL Injection in the file /scheduler/admin/appointments/manage\_app (CVSS 2.7)
- [CVE-2026-37602](https://cve.now/CVE-2026-37602.md): SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to SQL Injection in the file /scheduler/admin/user/manage\_user.php. (CVSS 2.7)
- [CVE-2026-38526](https://cve.now/CVE-2026-38526.md): An authenticated arbitrary file upload vulnerability in the /admin/tinymce/upload endpoint of Webkul Krayin CRM v2.2.x allows attackers to e (CVSS 9.9)
- [CVE-2026-38527](https://cve.now/CVE-2026-38527.md): A Server-Side Request Forgery (SSRF) in the /settings/webhooks/create component of Webkul Krayin CRM v2.2.x allows attackers to scan interna (CVSS 8.5, krayin/laravel-crm)
- [CVE-2026-38528](https://cve.now/CVE-2026-38528.md): Krayin CRM v2.2.x was discovered to contain a SQL injection vulnerability via the rotten\_lead parameter at /Lead/LeadDataGrid.php. (CVSS 7.1)
- [CVE-2026-38529](https://cve.now/CVE-2026-38529.md): A Broken Object-Level Authorization (BOLA) in the /Settings/UserController.php endpoint of Webkul Krayin CRM v2.2.x allows authenticated att (CVSS 8.8, krayin/laravel-crm)
- [CVE-2026-38530](https://cve.now/CVE-2026-38530.md): A Broken Object-Level Authorization (BOLA) in the /Controllers/Lead/LeadController.php endpoint of Webkul Krayin CRM v2.2.x allows authentic (CVSS 8.1, krayin/laravel-crm)
- [CVE-2026-38532](https://cve.now/CVE-2026-38532.md): A Broken Object-Level Authorization (BOLA) in the /Contact/Persons/PersonController.php endpoint of Webkul Krayin CRM v2.2.x allows authenti (CVSS 8.1, krayin/laravel-crm)
- [CVE-2026-38533](https://cve.now/CVE-2026-38533.md): An improper authorization vulnerability in the /api/v1/users/{id} endpoint of Snipe-IT v8.4.0 allows authenticated attackers with the users. (CVSS 6.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-04-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.