# CVEs published 2026-04-21

352 CVEs were published on April 21, 2026: 34 critical, 129 high. Days are UTC.

- [CVE-2026-41144](https://cve.now/CVE-2026-41144.md): F´ (F Prime) has Integer Overflow in FileUplink (CVSS 0.0, nasa fprime)
- [CVE-2026-41136](https://cve.now/CVE-2026-41136.md): free5GC AMF missing default case in Content-Type switch in HTTPUEContextTransfer (CVSS 5.5, free5gc amf · github.com/free5gc/amf)
- [CVE-2026-41135](https://cve.now/CVE-2026-41135.md): free5GC PCF: Memory Leak via CORS Middleware Registration in HTTP Handler Leads to Denial of Service (CVSS 7.5, free5gc pcf · github.com/free5gc/pcf)
- [CVE-2026-40343](https://cve.now/CVE-2026-40343.md): free5GC UDR: Fail-open handling in PolicyDataSubsToNotifyPost allows unintended subscription creation (CVSS 6.9, free5gc udr · github.com/free5gc/udr)
- [CVE-2026-41133](https://cve.now/CVE-2026-41133.md): pyLoad has Stale Session Privilege After Role/Permission Change (Privilege Revocation Bypass) (CVSS 8.8, pyload · pyload-ng)
- [CVE-2026-41131](https://cve.now/CVE-2026-41131.md): OpenFGA has Improper Policy Enforcement (CVSS 5.0, openfga · github.com/openfga/openfga)
- [CVE-2026-41130](https://cve.now/CVE-2026-41130.md): Craft CMS has a host header injection leading to SSRF via resource-js endpoint (CVSS 5.5, craftcms cms · craftcms/cms)
- [CVE-2026-41129](https://cve.now/CVE-2026-41129.md): Craft CMS has Server-Side Request Forgery (SSRF) with Asset Uploads Mutations (CVSS 5.5, craftcms cms · craftcms/cms)
- [CVE-2026-41128](https://cve.now/CVE-2026-41128.md): Craft CMS has a Missing Authorization Check on User Group Removal via save-permissions Action (CVSS 5.3, craftcms cms · craftcms/cms)
- [CVE-2026-41127](https://cve.now/CVE-2026-41127.md): BigBlueButton's missing authorization allows viewer to inject/overwrite captions (CVSS 6.5, bigbluebutton)
- [CVE-2026-41126](https://cve.now/CVE-2026-41126.md): BigBlueButton has Open Redirect through bigbluebutton/api/join via get-parameter "logoutURL" (CVSS 4.3, bigbluebutton)
- [CVE-2026-40575](https://cve.now/CVE-2026-40575.md): OAuth2 Proxy has an Authentication Bypass via X-Forwarded-Uri Header Spoofing (CVSS 9.1, oauth2-proxy · github.com/oauth2-proxy/oauth2-proxy/v7 +1)
- [CVE-2026-41059](https://cve.now/CVE-2026-41059.md): OAuth2 Proxy has an Authentication Bypass via Fragment Confusion in skip\_auth\_routes and skip\_auth\_regex (CVSS 8.2, oauth2-proxy · github.com/oauth2-proxy/oauth2-proxy +1)
- [CVE-2026-41304](https://cve.now/CVE-2026-41304.md): WWBN AVideo vulnerable to RCE caused by clonesite plugin (CVSS 8.9, WWBN AVideo · wwbn/avideo)
- [CVE-2026-41064](https://cve.now/CVE-2026-41064.md): AVideo has an incomplete fix for CVE-2026-33502 (Command Injection) (CVSS 9.3, WWBN AVideo · wwbn/avideo)
- [CVE-2026-41063](https://cve.now/CVE-2026-41063.md): WWBN AVideo has incomplete fix for CVE-2026-33500 (XSS) (CVSS 5.4, WWBN AVideo · wwbn/avideo)
- [CVE-2026-41062](https://cve.now/CVE-2026-41062.md): WWBN/AVideo has an incomplete fix for a directory traversal bypass via query string in ReceiveImage downloadURL parameters (CVSS 6.5, WWBN AVideo · wwbn/avideo)
- [CVE-2026-41061](https://cve.now/CVE-2026-41061.md): WWBN AVideo Vulnerable to stored XSS via Unanchored Duration Regex in Video Encoder Receiver (CVSS 5.4, WWBN AVideo · wwbn/avideo)
- [CVE-2026-41060](https://cve.now/CVE-2026-41060.md): AVideo's SSRF via same-domain hostname with alternate port bypasses isSSRFSafeURL (CVSS 7.7, WWBN AVideo · wwbn/avideo)
- [CVE-2026-41058](https://cve.now/CVE-2026-41058.md): AVideo has an incomplete fix for CVE-2026-33293 (Path Traversal) in AVideo (CVSS 8.1, WWBN AVideo · wwbn/avideo)
- [CVE-2026-5845](https://cve.now/CVE-2026-5845.md): Improper authorization fallback allows scoped user-to-server token installation escape in GitHub Enterprise Server (CVSS 7.2, GitHub Enterprise Server)
- [CVE-2026-41057](https://cve.now/CVE-2026-41057.md): AVideo has CORS Origin Reflection Bypass via plugin/API/router.php and allowOrigin(true) that Exposes Authenticated API Responses (CVSS 7.1, WWBN AVideo · wwbn/avideo)
- [CVE-2026-41056](https://cve.now/CVE-2026-41056.md): AVideos has CORS Origin Reflection with Credentials on Sensitive API Endpoints that Enables Cross-Origin Account Takeover (CVSS 8.1, WWBN AVideo · wwbn/avideo)
- [CVE-2026-41055](https://cve.now/CVE-2026-41055.md): AVideo has an incomplete fix for CVE-2026-33039 (SSRF) (CVSS 8.6, WWBN AVideo · wwbn/avideo)
- [CVE-2026-3307](https://cve.now/CVE-2026-3307.md): Authorization bypass in GitHub Enterprise Server secret scanning push protection allows cross-repository modification of delegated bypass reviewers (CVSS 5.3, GitHub Enterprise Server)
- [CVE-2026-40935](https://cve.now/CVE-2026-40935.md): WWBN/AVideo has CAPTCHA Bypass via Attacker-Controlled Length Parameter and Missing Token Invalidation on Failure (CVSS 5.3, WWBN AVideo · wwbn/avideo)
- [CVE-2026-40929](https://cve.now/CVE-2026-40929.md): WWBN AVideo's missing CSRF protection in objects/commentDelete.json.php enables mass comment deletion against moderators and content creators (CVSS 5.4, WWBN AVideo · wwbn/avideo)
- [CVE-2026-40928](https://cve.now/CVE-2026-40928.md): AVideo: Missing CSRF Protection on State-Changing JSON Endpoints Enables Forced Comment Creation, Vote Manipulation, and Category Asset Deletion (CVSS 5.4, WWBN AVideo · wwbn/avideo)
- [CVE-2026-5512](https://cve.now/CVE-2026-5512.md): Improper authorization vulnerability in GitHub Enterprise Server allowed disclosure of private repository names via mobile upload policy API (CVSS 5.3, GitHub Enterprise Server)
- [CVE-2026-4296](https://cve.now/CVE-2026-4296.md): Incorrect Regular Expression vulnerability in GitHub Enterprise Server allowed unauthorized access to user accounts via OAuth callback URL validation bypass (CVSS 7.5, GitHub Enterprise Server)
- [CVE-2026-40926](https://cve.now/CVE-2026-40926.md): WWBN AVideo Vulnerable to CSRF in Admin JSON Endpoints (Category CRUD, Plugin Update Script) (CVSS 7.1, WWBN AVideo · wwbn/avideo)
- [CVE-2026-5921](https://cve.now/CVE-2026-5921.md): Server-Side Request Forgery in GitHub Enterprise Server allowed extraction of sensitive environment variables via timing side-channel attack (CVSS 8.9, GitHub Enterprise Server)
- [CVE-2026-6832](https://cve.now/CVE-2026-6832.md): Nesquena Hermes WebUI Arbitrary File Deletion via Unvalidated session\_id (CVSS 7.2, nesquena hermes-webui)
- [CVE-2026-1354](https://cve.now/CVE-2026-1354.md): Zero Motorcycles Firmware Key Exchange without Entity Authentication (CVSS 6.4, Zero Motorcycles firmware)
- [CVE-2026-6830](https://cve.now/CVE-2026-6830.md): Nesquena Hermes WebUI Environment Variable Credential Leakage via Profile Switch (CVSS 4.8, nesquena hermes-webui)
- [CVE-2026-40946](https://cve.now/CVE-2026-40946.md): Oxia: OIDC token audience validation bypass via SkipClientIDCheck (CVSS 9.2, oxia-db oxia · github.com/oxia-db/oxia)
- [CVE-2026-40945](https://cve.now/CVE-2026-40945.md): Oxia: Bearer token exposed in debug log messages on authentication failure (CVSS 8.7, oxia-db oxia · github.com/oxia-db/oxia)
- [CVE-2026-40944](https://cve.now/CVE-2026-40944.md): Oxia: TLS CA certificate chain validation fails with multi-certificate PEM bundles (CVSS 6.9, oxia-db oxia · github.com/oxia-db/oxia)
- [CVE-2026-40943](https://cve.now/CVE-2026-40943.md): Oxia: Server crash via race condition in session heartbeat handling (CVSS 8.7, oxia-db oxia · github.com/oxia-db/oxia)
- [CVE-2026-6829](https://cve.now/CVE-2026-6829.md): nesquena hermes-webui Arbitrary Workspace Directory Access (CVSS 5.3, nesquena hermes-webui)
- [CVE-2026-40942](https://cve.now/CVE-2026-40942.md): DSF: Inverted Time Comparison in OIDC JWKS and Token Cache (CVSS 6.3, datasharingframework dsf · dev.dsf dsf-bpe-process-api-v2 +3)
- [CVE-2026-40939](https://cve.now/CVE-2026-40939.md): DSF: Missing Session Timeout for OIDC Sessions (CVSS 6.8, datasharingframework dsf · dev.dsf dsf-bpe-server +5)
- [CVE-2026-40933](https://cve.now/CVE-2026-40933.md): Flowise: Authenticated RCE Via MCP Adapters (CVSS 10.0, FlowiseAI Flowise · FlowiseAI flowise-components +2)
- [CVE-2026-6799](https://cve.now/CVE-2026-6799.md): Comfast CF-N1-S Endpoint mbox-config command injection (CVSS 5.3, Comfast CF-N1-S)
- [CVE-2026-40931](https://cve.now/CVE-2026-40931.md): Complete Bypass of CVE-2026-24884 Patch via Git-Delivered Symlink Poisoning in compressing (CVSS 8.4, node-modules compressing · compressing)
- [CVE-2026-40927](https://cve.now/CVE-2026-40927.md): Docmost: XSS in Comments with JavaScript URI (CVSS 5.4, docmost)
- [CVE-2026-40923](https://cve.now/CVE-2026-40923.md): Tekton Pipelines: VolumeMount path restriction bypass via missing filepath.Clean in /tekton/ check (CVSS 5.4, tektoncd pipeline · github.com/tektoncd/pipeline)
- [CVE-2026-40924](https://cve.now/CVE-2026-40924.md): Tekton Pipelines: HTTP Resolver Unbounded Response Body Read Enables Denial of Service via Memory Exhaustion (CVSS 6.5, tektoncd pipeline · github.com/tektoncd/pipeline)
- [CVE-2026-40938](https://cve.now/CVE-2026-40938.md): Tekton Pipelines: Git Resolver Unsanitized Revision Parameter Enables git Argument Injection Leading to RCE (CVSS 7.5, tektoncd pipeline · github.com/tektoncd/pipeline)
- [CVE-2026-6797](https://cve.now/CVE-2026-6797.md): Sanluan PublicCMS DocToHtmlUtils.java ZipSecureFile.setMinflateRatio resource consumption (CVSS 5.3, Sanluan PublicCMS)
- [CVE-2026-33519](https://cve.now/CVE-2026-33519.md): Incorrect privilege assignment in Portal for ArcGIS (CVSS 9.8, Esri Portal for ArcGIS)
- [CVE-2026-33518](https://cve.now/CVE-2026-33518.md): Incorrect privilege assignment in Portal for ArcGIS (CVSS 9.8, Esri Portal for ArcGIS)
- [CVE-2026-6823](https://cve.now/CVE-2026-6823.md): HKUDS OpenHarness Insecure Default Remote Channel Allowlist (CVSS 8.3, HKUDS OpenHarness)
- [CVE-2026-35252](https://cve.now/CVE-2026-35252.md): Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: C Oracle SSL API). (CVSS 6.4, Oracle Security Service)
- [CVE-2026-35251](https://cve.now/CVE-2026-35251.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2026-35250](https://cve.now/CVE-2026-35250.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 2.3, Oracle VM VirtualBox)
- [CVE-2026-35249](https://cve.now/CVE-2026-35249.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 3.2, Oracle VM VirtualBox)
- [CVE-2026-35248](https://cve.now/CVE-2026-35248.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 5.0, Oracle VM VirtualBox)
- [CVE-2026-35247](https://cve.now/CVE-2026-35247.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2026-35246](https://cve.now/CVE-2026-35246.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2026-35245](https://cve.now/CVE-2026-35245.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2026-35244](https://cve.now/CVE-2026-35244.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management). (CVSS 5.2, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-35243](https://cve.now/CVE-2026-35243.md): Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: ADF Faces). (CVSS 7.8, Oracle Application Development Framework)
- [CVE-2026-35242](https://cve.now/CVE-2026-35242.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2026-35241](https://cve.now/CVE-2026-35241.md): Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Research Tracking). (CVSS 5.7, Oracle PeopleSoft Enterprise CS Student Records)
- [CVE-2026-35240](https://cve.now/CVE-2026-35240.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2026-35239](https://cve.now/CVE-2026-35239.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2026-35238](https://cve.now/CVE-2026-35238.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2026-35237](https://cve.now/CVE-2026-35237.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2026-35236](https://cve.now/CVE-2026-35236.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2026-35235](https://cve.now/CVE-2026-35235.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: GIS). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2026-35234](https://cve.now/CVE-2026-35234.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Partition). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2026-35232](https://cve.now/CVE-2026-35232.md): Vulnerability in Oracle Fusion Middleware (component: Dynamic Monitoring Service). (CVSS 5.4, Oracle Fusion Middleware)
- [CVE-2026-35231](https://cve.now/CVE-2026-35231.md): Vulnerability in the Oracle Financial Services Transaction Filtering product of Oracle Financial Services Applications (component: User Inte (CVSS 7.5, Oracle Financial Services Transaction Filtering)
- [CVE-2026-35230](https://cve.now/CVE-2026-35230.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2026-35229](https://cve.now/CVE-2026-35229.md): Vulnerability in the Java VM component of Oracle Database Server. (CVSS 7.5, Oracle Database Server)
- [CVE-2026-34325](https://cve.now/CVE-2026-34325.md): Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (com (CVSS 6.8, Oracle Financial Services Analytical Applications Infrastru…)
- [CVE-2026-34324](https://cve.now/CVE-2026-34324.md): Vulnerability in the Oracle Life Sciences InForm product of Oracle Life Science Applications (component: App Server). (CVSS 6.5, Oracle Life Sciences InForm)
- [CVE-2026-34323](https://cve.now/CVE-2026-34323.md): Vulnerability in the Oracle Life Sciences InForm product of Oracle Life Science Applications (component: IDM Authentication). (CVSS 6.3, Oracle Life Sciences InForm)
- [CVE-2026-34321](https://cve.now/CVE-2026-34321.md): Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (com (CVSS 4.8, Oracle Financial Services Analytical Applications Infrastru…)
- [CVE-2026-34320](https://cve.now/CVE-2026-34320.md): Vulnerability in the Oracle Financial Services Customer Screening product of Oracle Financial Services Applications (component: User Interfa (CVSS 7.5, Oracle Financial Services Customer Screening)
- [CVE-2026-34319](https://cve.now/CVE-2026-34319.md): Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). (CVSS 5.0, Oracle MySQL Shell)
- [CVE-2026-34318](https://cve.now/CVE-2026-34318.md): Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). (CVSS 5.8, Oracle MySQL Shell)
- [CVE-2026-34317](https://cve.now/CVE-2026-34317.md): Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). (CVSS 5.0, Oracle MySQL Shell)
- [CVE-2026-34315](https://cve.now/CVE-2026-34315.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). (CVSS 6.5, Oracle WebLogic Server)
- [CVE-2026-34314](https://cve.now/CVE-2026-34314.md): Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (com (CVSS 6.8, Oracle Financial Services Analytical Applications Infrastru…)
- [CVE-2026-34313](https://cve.now/CVE-2026-34313.md): Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (com (CVSS 6.5, Oracle Financial Services Analytical Applications Infrastru…)
- [CVE-2026-34312](https://cve.now/CVE-2026-34312.md): Vulnerability in the RDBMS component of Oracle Database Server. (CVSS 2.4, Oracle Database Server)
- [CVE-2026-34310](https://cve.now/CVE-2026-34310.md): Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (com (CVSS 7.5, Oracle Financial Services Analytical Applications Infrastru…)
- [CVE-2026-34309](https://cve.now/CVE-2026-34309.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). (CVSS 8.1, Oracle PeopleSoft Enterprise PeopleTools)
- [CVE-2026-34308](https://cve.now/CVE-2026-34308.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: JSON). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2026-34307](https://cve.now/CVE-2026-34307.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Workflow). (CVSS 5.4, Oracle PeopleSoft Enterprise PeopleTools)
- [CVE-2026-34306](https://cve.now/CVE-2026-34306.md): Vulnerability in the PeopleSoft Enterprise FIN Project Costing product of Oracle PeopleSoft (component: Projects). (CVSS 6.5, Oracle PeopleSoft Enterprise FIN Project Costing)
- [CVE-2026-34305](https://cve.now/CVE-2026-34305.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). (CVSS 7.5, Oracle WebLogic Server)
- [CVE-2026-34304](https://cve.now/CVE-2026-34304.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2026-34303](https://cve.now/CVE-2026-34303.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2026-34302](https://cve.now/CVE-2026-34302.md): Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Loader). (CVSS 5.5, Oracle Workflow)
- [CVE-2026-34301](https://cve.now/CVE-2026-34301.md): Vulnerability in the PeopleSoft Enterprise FIN Maintenance Management product of Oracle PeopleSoft (component: Work Order Management). (CVSS 6.5, Oracle PeopleSoft Enterprise FIN Maintenance Management)
- [CVE-2026-34300](https://cve.now/CVE-2026-34300.md): Vulnerability in the PeopleSoft Enterprise FIN Contracts product of Oracle PeopleSoft (component: Contracts). (CVSS 6.5, Oracle PeopleSoft Enterprise FIN Contracts)
- [CVE-2026-34299](https://cve.now/CVE-2026-34299.md): Vulnerability in the PeopleSoft Enterprise FIN Maintenance Management product of Oracle PeopleSoft (component: Work Order Management). (CVSS 6.5, Oracle PeopleSoft Enterprise FIN Maintenance Management)
- [CVE-2026-34298](https://cve.now/CVE-2026-34298.md): Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). (CVSS 4.7, Oracle Applications Framework)
- [CVE-2026-34297](https://cve.now/CVE-2026-34297.md): Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Knowledge Integration). (CVSS 7.5, Oracle HCM Common Architecture)
- [CVE-2026-34296](https://cve.now/CVE-2026-34296.md): Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage (CVSS 4.3, Oracle Agile Product Lifecycle Management for Process)
- [CVE-2026-34295](https://cve.now/CVE-2026-34295.md): Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Purchasing). (CVSS 6.5, Oracle PeopleSoft Enterprise SCM Purchasing)
- [CVE-2026-34294](https://cve.now/CVE-2026-34294.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Microsoft Active Directory). (CVSS 5.9, Oracle Identity Manager Connector)
- [CVE-2026-34293](https://cve.now/CVE-2026-34293.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2026-34292](https://cve.now/CVE-2026-34292.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 7.2, Oracle WebLogic Server)
- [CVE-2026-34291](https://cve.now/CVE-2026-34291.md): Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Core). (CVSS 8.7, Oracle HTTP Server)
- [CVE-2026-34290](https://cve.now/CVE-2026-34290.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). (CVSS 7.5, Oracle Identity Manager Connector)
- [CVE-2026-34289](https://cve.now/CVE-2026-34289.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). (CVSS 5.9, Oracle Identity Manager Connector)
- [CVE-2026-34288](https://cve.now/CVE-2026-34288.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). (CVSS 5.9, Oracle Identity Manager Connector)
- [CVE-2026-34287](https://cve.now/CVE-2026-34287.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). (CVSS 9.1, Oracle Identity Manager Connector)
- [CVE-2026-34286](https://cve.now/CVE-2026-34286.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). (CVSS 9.1, Oracle Identity Manager Connector)
- [CVE-2026-34285](https://cve.now/CVE-2026-34285.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). (CVSS 9.1, Oracle Identity Manager Connector)
- [CVE-2026-34284](https://cve.now/CVE-2026-34284.md): Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human workflow 11g+). (CVSS 6.1, Oracle Business Process Management Suite)
- [CVE-2026-34283](https://cve.now/CVE-2026-34283.md): Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Identity Console). (CVSS 6.1, Oracle Identity Manager)
- [CVE-2026-34282](https://cve.now/CVE-2026-34282.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Network (CVSS 7.5, Oracle Java SE · Oracle GraalVM for JDK +1)
- [CVE-2026-34281](https://cve.now/CVE-2026-34281.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). (CVSS 6.5, Oracle Solaris)
- [CVE-2026-34280](https://cve.now/CVE-2026-34280.md): Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Job Profile Manager). (CVSS 6.5, Oracle PeopleSoft Enterprise HCM Human Resources)
- [CVE-2026-34279](https://cve.now/CVE-2026-34279.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management). (CVSS 9.1, Oracle Enterprise Manager Base Platform)
- [CVE-2026-34278](https://cve.now/CVE-2026-34278.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2026-34277](https://cve.now/CVE-2026-34277.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core). (CVSS 6.6, Oracle PeopleSoft Enterprise PeopleTools)
- [CVE-2026-34276](https://cve.now/CVE-2026-34276.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2026-34275](https://cve.now/CVE-2026-34275.md): Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite (component: Setup and Administration). (CVSS 9.8, Oracle Advanced Inbound Telephony)
- [CVE-2026-34274](https://cve.now/CVE-2026-34274.md): Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: User Interface). (CVSS 6.1, Oracle Configurator)
- [CVE-2026-34273](https://cve.now/CVE-2026-34273.md): Vulnerability in Oracle GoldenGate (component: Libraries). (CVSS 5.3, Oracle GoldenGate)
- [CVE-2026-34272](https://cve.now/CVE-2026-34272.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2026-34271](https://cve.now/CVE-2026-34271.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2026-34270](https://cve.now/CVE-2026-34270.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2026-34269](https://cve.now/CVE-2026-34269.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). (CVSS 6.1, Oracle PeopleSoft Enterprise PeopleTools)
- [CVE-2026-34268](https://cve.now/CVE-2026-34268.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Securit (CVSS 2.9, Oracle Java SE · Oracle GraalVM for JDK +1)
- [CVE-2026-34267](https://cve.now/CVE-2026-34267.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2026-34266](https://cve.now/CVE-2026-34266.md): Vulnerability in the PeopleSoft Enterprise HCM Absence Management product of Oracle PeopleSoft (component: Absence Management). (CVSS 6.5, Oracle PeopleSoft Enterprise HCM Absence Management)
- [CVE-2026-22021](https://cve.now/CVE-2026-22021.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). (CVSS 5.3, Oracle Java SE · Oracle GraalVM for JDK +1)
- [CVE-2026-22019](https://cve.now/CVE-2026-22019.md): Vulnerability in the PeopleSoft Enterprise HCM Shared Components product of Oracle PeopleSoft (component: Person Search). (CVSS 5.4, Oracle PeopleSoft Enterprise HCM Shared Components)
- [CVE-2026-22018](https://cve.now/CVE-2026-22018.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Librari (CVSS 3.7, Oracle Java SE · Oracle GraalVM for JDK +1)
- [CVE-2026-22017](https://cve.now/CVE-2026-22017.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2026-22016](https://cve.now/CVE-2026-22016.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). (CVSS 7.5, Oracle Java SE · Oracle GraalVM for JDK +1)
- [CVE-2026-22015](https://cve.now/CVE-2026-22015.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). (CVSS 4.3, Oracle MySQL Server)
- [CVE-2026-22014](https://cve.now/CVE-2026-22014.md): Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Workflow and Business Events). (CVSS 3.8, Oracle User Management)
- [CVE-2026-22013](https://cve.now/CVE-2026-22013.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). (CVSS 5.3, Oracle Java SE · Oracle GraalVM for JDK +1)
- [CVE-2026-22011](https://cve.now/CVE-2026-22011.md): Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: ADPatch). (CVSS 7.6, Oracle Applications DBA)
- [CVE-2026-22010](https://cve.now/CVE-2026-22010.md): Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (com (CVSS 7.5, Oracle Financial Services Analytical Applications Infrastru…)
- [CVE-2026-22009](https://cve.now/CVE-2026-22009.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2026-22008](https://cve.now/CVE-2026-22008.md): Vulnerability in Oracle Java SE (component: Libraries). (CVSS 3.7, Oracle Java SE)
- [CVE-2026-22007](https://cve.now/CVE-2026-22007.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Securit (CVSS 2.9, Oracle Java SE · Oracle GraalVM for JDK +1)
- [CVE-2026-22006](https://cve.now/CVE-2026-22006.md): Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Employee Snapshot). (CVSS 5.4, Oracle PeopleSoft Enterprise HCM Human Resources)
- [CVE-2026-22005](https://cve.now/CVE-2026-22005.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2026-22004](https://cve.now/CVE-2026-22004.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2026-22003](https://cve.now/CVE-2026-22003.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). (CVSS 6.0, Oracle Java SE · Oracle GraalVM Enterprise Edition)
- [CVE-2026-22002](https://cve.now/CVE-2026-22002.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2026-22001](https://cve.now/CVE-2026-22001.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). (CVSS 2.7, Oracle MySQL Server)
- [CVE-2026-21999](https://cve.now/CVE-2026-21999.md): Vulnerability in the XML Database component of Oracle Database Server. (CVSS 5.3, Oracle Database Server)
- [CVE-2026-21998](https://cve.now/CVE-2026-21998.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2026-21997](https://cve.now/CVE-2026-21997.md): Vulnerability in the Oracle Life Sciences Empirica Signal product of Oracle Life Science Applications (component: Common Core). (CVSS 8.5, Oracle Life Sciences Empirica Signal)
- [CVE-2026-6796](https://cve.now/CVE-2026-6796.md): Sanluan PublicCMS Failed Login LoginAdminController.java log\_login cleartext storage in file (CVSS 5.3, Sanluan PublicCMS)
- [CVE-2026-40910](https://cve.now/CVE-2026-40910.md): frp: Authentication bypass in frp HTTP vhost routing when routeByHTTPUser is used for access control (CVSS 6.5, fatedier frp · github.com/fatedier/frp)
- [CVE-2026-40906](https://cve.now/CVE-2026-40906.md): Electric: SQL Injection via ORDER BY Parameter in Shape API (CVSS 10.0, electric-sql electric)
- [CVE-2026-40905](https://cve.now/CVE-2026-40905.md): LinkAce: Password Reset Poisoning via X-Forwarded-Host Header Injection Leading to Account Takeover (CVSS 8.1, Kovah LinkAce)
- [CVE-2026-40895](https://cve.now/CVE-2026-40895.md): follow-redirects: Custom Authentication Headers Leaked to Cross-Domain Redirect Targets (CVSS 6.9, follow-redirects)
- [CVE-2026-40925](https://cve.now/CVE-2026-40925.md): WWBN AVideo has CSRF in configurationUpdate.json.php Enables Full Site Configuration Takeover Including Encoder URL and SMTP Credentials (CVSS 8.3, WWBN AVideo · wwbn/avideo)
- [CVE-2026-40911](https://cve.now/CVE-2026-40911.md): WWBN AVideo YPTSocket WebSocket Broadcast Relay Leads to Unauthenticated Cross-User JavaScript Execution via Client-Side eval() Sinks (CVSS 10.0, WWBN AVideo · wwbn/avideo)
- [CVE-2026-40892](https://cve.now/CVE-2026-40892.md): PJSIP: Stack buffer overflow in pjsip\_auth\_create\_digest2() (CVSS 8.1, pjsip pjproject)
- [CVE-2026-40909](https://cve.now/CVE-2026-40909.md): WWBN AVideo has a Path Traversal in Locale Save Endpoint that Enables Arbitrary PHP File Write to Any Web-Accessible Directory (RCE) (CVSS 8.7, WWBN AVideo · wwbn/avideo)
- [CVE-2026-40908](https://cve.now/CVE-2026-40908.md): WWBN AVideo has an Unauthenticated Information Disclosure via git.json.php that Exposes Developer Emails and Deployed Version (CVSS 5.3, WWBN AVideo · wwbn/avideo)
- [CVE-2026-40890](https://cve.now/CVE-2026-40890.md): github.com/gomarkdown/markdown: Out-of-bounds Read in SmartypantsRenderer (CVSS 7.5, gomarkdown markdown · github.com/gomarkdown/markdown)
- [CVE-2026-40907](https://cve.now/CVE-2026-40907.md): WWBN AVideo has IDOR in Live Restreams list.json.php that Exposes Other Users' Stream Keys and OAuth Tokens (CVSS 6.5, WWBN AVideo · wwbn/avideo)
- [CVE-2026-40903](https://cve.now/CVE-2026-40903.md): Goshs - ArtiPACKED Vulnerability – GitHub Actions Credential Persistence (CVSS 9.1, patrickhener goshs)
- [CVE-2026-6819](https://cve.now/CVE-2026-6819.md): HKUDS OpenHarness Plugin Management Command Exposure (CVSS 8.7, HKUDS OpenHarness)
- [CVE-2026-40885](https://cve.now/CVE-2026-40885.md): goshs: Public collaborator feed leaks .goshs ACL credentials and enables unauthorized access (CVSS 7.7, patrickhener goshs · github.com/patrickhener/goshs +1)
- [CVE-2026-40884](https://cve.now/CVE-2026-40884.md): goshs: Empty-username SFTP password authentication bypass in goshs (CVSS 9.8, patrickhener goshs · github.com/patrickhener/goshs +1)
- [CVE-2026-40883](https://cve.now/CVE-2026-40883.md): goshs: CSRF in state-changing GET routes enables authenticated file deletion and directory creation (CVSS 6.1, patrickhener goshs · github.com/patrickhener/goshs +1)
- [CVE-2026-40876](https://cve.now/CVE-2026-40876.md): SFTP root escape via prefix-based path validation in goshs (CVSS 8.7, patrickhener goshs · github.com/patrickhener/goshs +1)
- [CVE-2026-41320](https://cve.now/CVE-2026-41320.md): Frappe HR has possibility of SQL Injection due to improper field sanitization (CVSS 6.5, frappe hrms)
- [CVE-2026-40889](https://cve.now/CVE-2026-40889.md): Frappe HR has Improper Access Control on Files (CVSS 6.5, frappe hrms)
- [CVE-2026-40888](https://cve.now/CVE-2026-40888.md): Frappe HR vulnerable to Improper Access Control (CVSS 6.5, frappe hrms)
- [CVE-2026-40887](https://cve.now/CVE-2026-40887.md): @vendure/core has a SQL Injection vulnerability (CVSS 9.1, vendurehq vendure · @vendure/core)
- [CVE-2026-40878](https://cve.now/CVE-2026-40878.md): mailcow-dockerized Login Page has Reflected Parameter Injection / Wrong-Context XSS Escaping (CVSS 2.1, mailcow-dockerized)
- [CVE-2026-33812](https://cve.now/CVE-2026-33812.md): Excessive memory allocation when decoding malicious SFNT in golang.org/x/image (CVSS 6.1, golang.org/x/image/font/sfnt · golang.org/x/image)
- [CVE-2026-33813](https://cve.now/CVE-2026-33813.md): Panic when decoding large WEBP image on 32-bit platforms in golang.org/x/image (CVSS 7.5, golang.org/x/image/webp · golang.org/x/image)
- [CVE-2026-40881](https://cve.now/CVE-2026-40881.md): Zebra: addr/addrv2 Deserialization Resource Exhaustion (CVSS 6.3, ZcashFoundation zebrad · ZcashFoundation zebra-network +2)
- [CVE-2026-40372](https://cve.now/CVE-2026-40372.md): ASP.NET Core Elevation of Privilege Vulnerability (CVSS 9.1, Microsoft ASP.NET Core · Microsoft Visual Studio +2)
- [CVE-2026-40875](https://cve.now/CVE-2026-40875.md): mailcow: dockerized vulnerable to stored XSS in user login history real\_rip (CVSS 7.0, mailcow-dockerized)
- [CVE-2026-40880](https://cve.now/CVE-2026-40880.md): Zebra: Cached Mempool Verification Bypasses Consensus Rules for Ahead-of-Tip Blocks (CVSS 7.2, ZcashFoundation zebrad · ZcashFoundation zebra-consensus +2)
- [CVE-2026-40874](https://cve.now/CVE-2026-40874.md): mailcow: dockerized missing authorization on Forwarding Hosts delete action (CVSS 6.0, mailcow-dockerized)
- [CVE-2026-40873](https://cve.now/CVE-2026-40873.md): mailcow: dockerized vulnerable to stored XSS in Quarantine attachment filenames (CVSS 8.9, mailcow-dockerized)
- [CVE-2026-40872](https://cve.now/CVE-2026-40872.md): mailcow: dockerized vulnerable to stored XSS in autodiscover logs email address field (CVSS 9.3, mailcow-dockerized)
- [CVE-2026-40879](https://cve.now/CVE-2026-40879.md): Nest: DoS via Recursive handleData in JsonSocket (TCP Transport) (CVSS 7.5, nestjs nest · @nestjs/microservices)
- [CVE-2026-40871](https://cve.now/CVE-2026-40871.md): mailcow: dockerized vulnerable to Second Order SQL Injection in quarantine category via API (CVSS 7.2, mailcow-dockerized)
- [CVE-2026-40869](https://cve.now/CVE-2026-40869.md): Decidim amendments can be accepted or rejected by anyone (CVSS 7.5, decidim · decidim-core)
- [CVE-2026-40870](https://cve.now/CVE-2026-40870.md): Decidim's comments API allows access to all commentable resources (CVSS 7.5, decidim)
- [CVE-2026-22751](https://cve.now/CVE-2026-22751.md): Spring Security JdbcOneTimeTokenService allows a one-time token to authenticate multiple sessions (CVSS 4.8, Spring Security · org.springframework.security:spring-secur…)
- [CVE-2026-6745](https://cve.now/CVE-2026-6745.md): Bagisto Custom Scripts cross site scripting (CVSS 5.1, Bagisto · bagisto/bagisto)
- [CVE-2026-40868](https://cve.now/CVE-2026-40868.md): kyverno apicall servicecall implicit bearer token injection leaks kyverno serviceaccount token (CVSS 8.1, kyverno · github.com/kyverno/kyverno)
- [CVE-2026-40867](https://cve.now/CVE-2026-40867.md): Horilla: Unauthorized Helpdesk Attachment Access via Attachment ID Manipulation (CVSS 7.1, horilla-opensource horilla)
- [CVE-2026-40866](https://cve.now/CVE-2026-40866.md): Horilla: Unauthorized Document Overwrite via File Upload Endpoint (CVSS 8.6, horilla-opensource horilla)
- [CVE-2026-40865](https://cve.now/CVE-2026-40865.md): Horilla: Insecure Direct Object Reference at \`/employee/view-file/\<int:id\> (CVSS 7.1, horilla-opensource horilla)
- [CVE-2026-40614](https://cve.now/CVE-2026-40614.md): PJSIP: Heap buffer overflow in Opus codec decoding (CVSS 8.5, pjsip pjproject)
- [CVE-2026-41456](https://cve.now/CVE-2026-41456.md): Bludit CMS Reflected XSS via Search Plugin (CVSS 5.1, bludit)
- [CVE-2026-40613](https://cve.now/CVE-2026-40613.md): Coturn: Misaligned Memory Access in coturn STUN Attribute Parser (Remote DoS on ARM64) (CVSS 7.5, coturn)
- [CVE-2026-6744](https://cve.now/CVE-2026-6744.md): Bagisto Downloadable Link copy server-side request forgery (CVSS 5.3, Bagisto · bagisto/bagisto)
- [CVE-2026-40611](https://cve.now/CVE-2026-40611.md): Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider (CVSS 8.8, go-acme lego · github.com/go-acme/lego/v4 +2)
- [CVE-2026-40608](https://cve.now/CVE-2026-40608.md): Next AI Draw.io: Unbounded HTTP Body — Denial of Service (CVSS 6.2, DayuanJiang next-ai-draw-io)
- [CVE-2026-40606](https://cve.now/CVE-2026-40606.md): ProxyAuth Addon LDAP Injection in mitmproxy (CVSS 4.8, mitmproxy)
- [CVE-2026-40604](https://cve.now/CVE-2026-40604.md): ClearanceKit: opfilter system extension can be suspended or signalled by a root process, disabling file-access policy enforcement (CVSS 8.2, craigjbass clearancekit)
- [CVE-2026-40602](https://cve.now/CVE-2026-40602.md): hass-cli: Handling of user-supplied Jinja2 templates (CVSS 5.6, home-assistant-ecosystem home-assistant-cli · homeassistant…)
- [CVE-2026-40599](https://cve.now/CVE-2026-40599.md): ClearanceKit: Ad-hoc signed binaries can spoof Apple process identities in the global allowlist (CVSS 8.4, craigjbass clearancekit)
- [CVE-2026-41194](https://cve.now/CVE-2026-41194.md): FreeScout's Mailbox OAuth disconnect uses a state-changing GET and is CSRFable (CVSS 5.4, freescout-help-desk freescout)
- [CVE-2026-41193](https://cve.now/CVE-2026-41193.md): FreeScout has Zip Slip path traversal in module installation that allows arbitrary file write leading to RCE (CVSS 9.1, freescout-help-desk freescout)
- [CVE-2026-40594](https://cve.now/CVE-2026-40594.md): pyLoad: Session Cookie Security Downgrade via Untrusted X-Forwarded-Proto Header Spoofing (Global State Race Condition) (CVSS 4.8, pyload · pyload-ng)
- [CVE-2026-41192](https://cve.now/CVE-2026-41192.md): FreeScout's client-controlled attachment IDs allow deletion of existing conversation attachments (CVSS 7.1, freescout-help-desk freescout)
- [CVE-2026-40588](https://cve.now/CVE-2026-40588.md): blueprintUE: Authenticated Password Change Does Not Verify Current Password (CVSS 8.1, blueprintue-self-hosted-edition)
- [CVE-2026-40587](https://cve.now/CVE-2026-40587.md): blueprintUE: Active Sessions Are Not Invalidated After Password Change or Reset (CVSS 6.5, blueprintue-self-hosted-edition)
- [CVE-2026-40586](https://cve.now/CVE-2026-40586.md): blueprintUE: Login Endpoint Has No Rate Limiting, Lockout, or Brute-Force Protection (CVSS 7.5, blueprintue-self-hosted-edition)
- [CVE-2026-41191](https://cve.now/CVE-2026-41191.md): FreeScout's signature only mailbox permission allows unauthorized mailbox chat setting changes (CVSS 7.1, freescout-help-desk freescout)
- [CVE-2026-40585](https://cve.now/CVE-2026-40585.md): blueprintUE: Password Reset Tokens Have No Expiry Window (CVSS 7.4, blueprintue-self-hosted-edition)
- [CVE-2026-41190](https://cve.now/CVE-2026-41190.md): FreeScout has assigned-only visibility bypass via save\_draft that allows hidden conversation draft injection (CVSS 7.1, freescout-help-desk freescout)
- [CVE-2026-40584](https://cve.now/CVE-2026-40584.md): RansomLook - Improper Filtering of Private Location Entries in API Endpoints Leads to Information Exposure (CVSS 6.9, RansomLook)
- [CVE-2026-41189](https://cve.now/CVE-2026-41189.md): FreeScout has assigned-only visibility bypass that allows editing hidden customer-authored threads (CVSS 7.1, freescout-help-desk freescout)
- [CVE-2026-41183](https://cve.now/CVE-2026-41183.md): FreeScout allows non-folder conversation queries to disclose assigned-only hidden conversations (CVSS 4.3, freescout-help-desk freescout)
- [CVE-2026-21571](https://cve.now/CVE-2026-21571.md): This Critical severity OS Command Injection vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.0.0, 11.1.0, 12.0.0, (CVSS 9.4, Atlassian Bamboo Data Center)
- [CVE-2026-40583](https://cve.now/CVE-2026-40583.md): UltraDAG: SmartOp Vote Path Triggers Fatal Supply Invariant Halt (CVSS 8.8, UltraDAGcom core)
- [CVE-2026-40592](https://cve.now/CVE-2026-40592.md): FreeScout's cross-user undo reply allows mailbox peers to recall another agent's outbound reply (CVSS 5.9, freescout-help-desk freescout)
- [CVE-2026-40591](https://cve.now/CVE-2026-40591.md): FreeScout: Improper Authorization in Phone Conversation Creation Enables Cross-Mailbox Hidden Customer Modification (CVSS 7.1, freescout-help-desk freescout)
- [CVE-2026-40590](https://cve.now/CVE-2026-40590.md): FreeScout's Customer AJAX Create Modifies Hidden Existing Customer (CVSS 4.3, freescout-help-desk freescout)
- [CVE-2026-40589](https://cve.now/CVE-2026-40589.md): FreeScout has Customer Edit Cross-Mailbox Email Takeover (CVSS 7.6, freescout-help-desk freescout)
- [CVE-2026-40050](https://cve.now/CVE-2026-40050.md): CrowdStrike LogScale Unauthenticated Path Traversal (CVSS 9.8, CrowdStrike LogScale Self-Hosted)
- [CVE-2026-40570](https://cve.now/CVE-2026-40570.md): FreeScout's Missing Authorization in load\_customer\_info Allows Any Authenticated User to Access Full Customer PII (CVSS 5.7, freescout-help-desk freescout)
- [CVE-2026-40569](https://cve.now/CVE-2026-40569.md): FreeScout's Mass Assignment in Mailbox Connection Settings Enables Silent Email Exfiltration (CVSS 9.0, freescout-help-desk freescout)
- [CVE-2026-40576](https://cve.now/CVE-2026-40576.md): Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in excel-mcp-server (CVSS 9.4, haris-musa excel-mcp-server · excel-mcp-server)
- [CVE-2026-5652](https://cve.now/CVE-2026-5652.md): Authorization Bypass Through User-Controlled Key in Crafty Controller (CVSS 9.0, Arcadia Technology Crafty Controller)
- [CVE-2026-40574](https://cve.now/CVE-2026-40574.md): OAuth2 Proxy has an Authorization Bypass in Email Domain Validation via Malformed Multi-@ Email Claims (CVSS 6.8, oauth2-proxy · github.com/oauth2-proxy/oauth2-proxy +1)
- [CVE-2026-6743](https://cve.now/CVE-2026-6743.md): WebSystems WebTOTUM Calendar cross site scripting (CVSS 5.1, WebSystems WebTOTUM)
- [CVE-2026-40279](https://cve.now/CVE-2026-40279.md): BACnet Stack: Undefined-behavior signed left shift in \`decode\_signed32()\` (CVSS 3.7, bacnet-stack)
- [CVE-2026-40161](https://cve.now/CVE-2026-40161.md): Tekton Pipelines: Git resolver API mode leaks system-configured API token to user-controlled serverURL (CVSS 7.7, tektoncd pipeline · github.com/tektoncd/pipeline)
- [CVE-2026-35451](https://cve.now/CVE-2026-35451.md): Twenty: Stored XSS via BlockNote FileBlock (CVSS 5.7, twentyhq twenty)
- [CVE-2026-29179](https://cve.now/CVE-2026-29179.md): October: Editor Sub-Permission Bypass for Asset and Blueprint File Operations (CVSS 3.3, octobercms october · october/system)
- [CVE-2026-24189](https://cve.now/CVE-2026-24189.md): NVIDIA CUDA-Q contains a vulnerability in an endpoint, where an unauthenticated attacker could cause an out-of-bounds read by sending a mali (CVSS 8.2, NVIDIA CUDA-Q)
- [CVE-2026-24177](https://cve.now/CVE-2026-24177.md): NVIDIA KAI Scheduler contains a vulnerability where an attacker could access API endpoints without authorization. (CVSS 7.7, NVIDIA KAI Scheduler)
- [CVE-2026-27937](https://cve.now/CVE-2026-27937.md): October: Reflected XSS via DataTable Form Widget (CVSS 3.1, octobercms october · october/system)
- [CVE-2026-24176](https://cve.now/CVE-2026-24176.md): NVIDIA KAI Scheduler contains a vulnerability where an attacker could cause improper authorization through cross-namespace pod references. (CVSS 4.3, NVIDIA KAI Scheduler)
- [CVE-2026-26274](https://cve.now/CVE-2026-26274.md): October: Safe Mode Bypass via Twig Database Write Operations (CVSS 6.6, octobercms october · october/october)
- [CVE-2026-26067](https://cve.now/CVE-2026-26067.md): October: Safe Mode Bypass via CSS Preprocessor Compilers (CVSS 4.9, octobercms october · october/system)
- [CVE-2019-25714](https://cve.now/CVE-2019-25714.md): Seeyon Office Anywhere (OA) A8 Unauthenticated Arbitrary File Write via htmlofficeservlet (CVSS 9.3, Seeyon Internet Software A8-V5 Collaborative Management Sof…)
- [CVE-2026-40568](https://cve.now/CVE-2026-40568.md): FreeScout Vulnerable to XSS via Mailbox Signature Due to Incomplete HTML Sanitization (CVSS 8.5, freescout-help-desk freescout)
- [CVE-2026-40567](https://cve.now/CVE-2026-40567.md): FreeScout has HTML Injection in Outgoing Emails via Unsanitized Customer Name in Signature Variables (CVSS 5.8, freescout-help-desk freescout)
- [CVE-2026-25542](https://cve.now/CVE-2026-25542.md): Tekton Pipelines: VerificationPolicy regex pattern bypass via substring matching (CVSS 6.5, tektoncd pipeline · github.com/tektoncd/pipeline)
- [CVE-2026-40566](https://cve.now/CVE-2026-40566.md): FreeScout vulnerable to SSRF via IMAP/SMTP Connection Test Endpoints (CVSS 4.1, freescout-help-desk freescout)
- [CVE-2026-40565](https://cve.now/CVE-2026-40565.md): FreeScout has Stored XSS / CSS Injection via linkify() — Unescaped URL in Anchor href (CVSS 6.1, freescout-help-desk freescout)
- [CVE-2025-15638](https://cve.now/CVE-2025-15638.md): Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt (CVSS 10.0, ATRODO Net::Dropbear)
- [CVE-2017-20230](https://cve.now/CVE-2017-20230.md): Storable versions before 3.05 for Perl has a stack overflow (CVSS 10.0, NWCLARK Storable)
- [CVE-2025-41011](https://cve.now/CVE-2025-41011.md): HTML injection in PHP Point Of Sale (CVSS 5.1, PHP Point Of Sale)
- [CVE-2026-40498](https://cve.now/CVE-2026-40498.md): FreeScout has Authentication Bypass and Information Disclosure in SystemController via /system/cron (CVSS 8.9, freescout-help-desk freescout)
- [CVE-2025-41029](https://cve.now/CVE-2025-41029.md): SQL injection in Zeon Academy Pro by Zeon Global Tech (CVSS 9.3, Zeon Global Tech Zeon Academy Pro)
- [CVE-2026-3298](https://cve.now/CVE-2026-3298.md): Out-of-bounds write in Windows asyncio.ProacterEventLoop.sock\_recvfrom\_into() when using nbytes (CVSS 8.8, Python Software Foundation CPython)
- [CVE-2025-10354](https://cve.now/CVE-2025-10354.md): Reflected Cross-Site Scripting (XSS) in Semantic MediaWiki (CVSS 5.1, Semantic MediaWiki)
- [CVE-2025-31981](https://cve.now/CVE-2025-31981.md): HCL BigFix Service Management (SM) Discovery is vulnerable to unenforced encryption (CVSS 5.3, HCLSoftware BigFix Service Management)
- [CVE-2026-5789](https://cve.now/CVE-2026-5789.md): Search path without quotes in CivetWeb (CVSS 8.5, CivetWeb)
- [CVE-2026-1089](https://cve.now/CVE-2026-1089.md): User‑Controlled HTTP Header In Fortra's GoAnywhere MFT Allows Arbitrary DNS Lookups (CVSS 6.5, Fortra GoAnywhere MFT)
- [CVE-2026-0972](https://cve.now/CVE-2026-0972.md): HTML Injection possible in system generated emails in Fortra's GoAnywhere MFT (CVSS 5.4, Fortra GoAnywhere MFT)
- [CVE-2026-0971](https://cve.now/CVE-2026-0971.md): GoAnywhere MFT SAML Sessions do not redirect to logout URL on session timeout (CVSS 4.3, Fortra GoAnywhere MFT)
- [CVE-2025-14362](https://cve.now/CVE-2025-14362.md): GoAnywhere MFT SFTP Service Login Vulnerable to Brute Force Attack Under Certain Circumstances (CVSS 7.3, Fortra GoAnywhere MFT)
- [CVE-2025-1241](https://cve.now/CVE-2025-1241.md): Encryption vulnerable to brute-force decryption in GoAnywhere MFT (CVSS 5.8, Fortra GoAnywhere MFT)
- [CVE-2025-31958](https://cve.now/CVE-2025-31958.md): HCL BigFix Service Management (SM) is susceptible to HTTP Request Smuggling (CVSS 3.7, HCLSoftware BigFix Service Management)
- [CVE-2026-6786](https://cve.now/CVE-2026-6786.md): Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6785](https://cve.now/CVE-2026-6785.md): Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6784](https://cve.now/CVE-2026-6784.md): Memory safety bugs fixed in Firefox 150 and Thunderbird 150 (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6783](https://cve.now/CVE-2026-6783.md): Incorrect boundary conditions, integer overflow in the Audio/Video: Playback component (CVSS 5.3, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6782](https://cve.now/CVE-2026-6782.md): Information disclosure in the IP Protection component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6781](https://cve.now/CVE-2026-6781.md): Denial-of-service in the Audio/Video: Playback component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6780](https://cve.now/CVE-2026-6780.md): Denial-of-service in the Audio/Video: Playback component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6779](https://cve.now/CVE-2026-6779.md): Other issue in the JavaScript Engine component (CVSS 5.3, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6778](https://cve.now/CVE-2026-6778.md): Invalid pointer in the Audio/Video: Playback component (CVSS 5.3, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6777](https://cve.now/CVE-2026-6777.md): Other issue in the Networking: DNS component (CVSS 5.3, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6776](https://cve.now/CVE-2026-6776.md): Incorrect boundary conditions in the WebRTC: Networking component (CVSS 7.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6775](https://cve.now/CVE-2026-6775.md): Incorrect boundary conditions in the WebRTC component (CVSS 5.3, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6774](https://cve.now/CVE-2026-6774.md): Mitigation bypass in the DOM: Security component (CVSS 5.4, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6773](https://cve.now/CVE-2026-6773.md): Denial-of-service due to integer overflow in the Graphics: WebGPU component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-40520](https://cve.now/CVE-2026-40520.md): FreePBX api module Command Injection via GraphQL (CVSS 8.6, FreePBX api)
- [CVE-2026-6772](https://cve.now/CVE-2026-6772.md): Incorrect boundary conditions in the Libraries component in NSS (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6771](https://cve.now/CVE-2026-6771.md): Mitigation bypass in the DOM: Security component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6770](https://cve.now/CVE-2026-6770.md): Other issue in the Storage: IndexedDB component (CVSS 6.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6769](https://cve.now/CVE-2026-6769.md): Privilege escalation in the Debugger component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6768](https://cve.now/CVE-2026-6768.md): Mitigation bypass in the Networking: Cookies component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6767](https://cve.now/CVE-2026-6767.md): Other issue in the Libraries component in NSS (CVSS 5.3, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6766](https://cve.now/CVE-2026-6766.md): Incorrect boundary conditions in the Libraries component in NSS (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6765](https://cve.now/CVE-2026-6765.md): Information disclosure in the Form Autofill component (CVSS 5.3, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6764](https://cve.now/CVE-2026-6764.md): Incorrect boundary conditions in the DOM: Device Interfaces component (CVSS 6.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6763](https://cve.now/CVE-2026-6763.md): Mitigation bypass in the File Handling component (CVSS 6.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6762](https://cve.now/CVE-2026-6762.md): Spoofing issue in the DOM: Core & HTML component (CVSS 6.3, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6761](https://cve.now/CVE-2026-6761.md): Privilege escalation in the Networking component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6760](https://cve.now/CVE-2026-6760.md): Mitigation bypass in the Networking: Cookies component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6759](https://cve.now/CVE-2026-6759.md): Use-after-free in the Widget: Cocoa component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6758](https://cve.now/CVE-2026-6758.md): Use-after-free in the JavaScript: WebAssembly component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6757](https://cve.now/CVE-2026-6757.md): Invalid pointer in the JavaScript: WebAssembly component (CVSS 6.3, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6756](https://cve.now/CVE-2026-6756.md): Mitigation bypass in Firefox for Android (CVSS 7.5, Mozilla Firefox)
- [CVE-2026-6755](https://cve.now/CVE-2026-6755.md): Mitigation bypass in the DOM: postMessage component (CVSS 6.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6754](https://cve.now/CVE-2026-6754.md): Use-after-free in the JavaScript Engine component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6753](https://cve.now/CVE-2026-6753.md): Incorrect boundary conditions in the WebRTC component (CVSS 7.3, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6752](https://cve.now/CVE-2026-6752.md): Incorrect boundary conditions in the WebRTC component (CVSS 7.3, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6751](https://cve.now/CVE-2026-6751.md): Uninitialized memory in the Audio/Video: Web Codecs component (CVSS 7.3, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6750](https://cve.now/CVE-2026-6750.md): Privilege escalation in the Graphics: WebRender component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6749](https://cve.now/CVE-2026-6749.md): Information disclosure due to uninitialized memory in the Graphics: Canvas2D component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6748](https://cve.now/CVE-2026-6748.md): Uninitialized memory in the Audio/Video: Web Codecs component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6747](https://cve.now/CVE-2026-6747.md): Use-after-free in the WebRTC component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6746](https://cve.now/CVE-2026-6746.md): Use-after-free in the DOM: Core & HTML component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-32147](https://cve.now/CVE-2026-32147.md): SFTP chroot bypass via path traversal in SSH\_FXP\_FSETSTAT (CVSS 5.3, Erlang OTP)
- [CVE-2026-41039](https://cve.now/CVE-2026-41039.md): Information Disclosure Vulnerability in Quantum Networks Router QN-I-470 (CVSS 8.7, Quantum Networks Router QN-I-470)
- [CVE-2026-41038](https://cve.now/CVE-2026-41038.md): Weak Password Policy Vulnerability in Quantum Networks Router QN-I-470 (CVSS 7.6, Quantum Networks Router QN-I-470)
- [CVE-2026-41036](https://cve.now/CVE-2026-41036.md): Command Injection Vulnerability in Quantum Networks Router QN-I-470 (CVSS 8.7, Quantum Networks Router QN-I-470)
- [CVE-2026-41037](https://cve.now/CVE-2026-41037.md): Missing Rate Limiting Vulnerability in Quantum Networks Router QN-I-470 (CVSS 8.7, Quantum Networks Router QN-I-470)
- [CVE-2026-6553](https://cve.now/CVE-2026-6553.md): TYPO3 CMS Stores Cleartext Password in User Settings Module (CVSS 7.3, TYPO3 CMS · typo3/cms-backend)
- [CVE-2026-39467](https://cve.now/CVE-2026-39467.md): WordPress Responsive Slider by MetaSlider plugin \<= 3.106.0 - PHP Object Injection vulnerability (CVSS 7.2, Responsive Slider by MetaSlider)
- [CVE-2026-3317](https://cve.now/CVE-2026-3317.md): Reflected Cross-Site Scripting in Navigate CMS application (CVSS 5.1, Navigate CMS)
- [CVE-2025-13826](https://cve.now/CVE-2025-13826.md): Incorrect input validation on the Zervit portable HTTP/Web server (CVSS 8.2, Zervit portable HTTP/Web server)
- [CVE-2026-6711](https://cve.now/CVE-2026-6711.md): Website LLMs.txt \<= 8.2.6 - Reflected Cross-Site Scripting (CVSS 6.1, ryhowa Website LLMs.txt)
- [CVE-2026-6712](https://cve.now/CVE-2026-6712.md): Website LLMs.txt \<= 8.2.6 - Authenticated (Admin+) Stored Cross-Site Scripting (CVSS 4.4, ryhowa Website LLMs.txt)
- [CVE-2026-6703](https://cve.now/CVE-2026-6703.md): Responsive Blocks \<= 2.2.1 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via AJAX Actions (CVSS 4.3, cyberchimps Responsive Blocks – Page Builder for Blocks & P…)
- [CVE-2026-31368](https://cve.now/CVE-2026-31368.md): Privilege Bypass in AiAssistant (CVSS 7.8, Honor AIAssistant)
- [CVE-2026-31370](https://cve.now/CVE-2026-31370.md): Information Leak Vulnerability in Honor E (CVSS 6.3, Honor E)
- [CVE-2026-31369](https://cve.now/CVE-2026-31369.md): Privilege Bypass in PcManager (CVSS 3.2, Honor PcManager)
- [CVE-2026-5965](https://cve.now/CVE-2026-5965.md): NewSoft｜NewSoftOA - OS Command Injection (CVSS 9.3, NewSoftOA)
- [CVE-2026-6674](https://cve.now/CVE-2026-6674.md): Plugin: CMS für Motorrad Werkstätten \<= 1.0.0 - Authenticated (Subscriber+) SQL Injection via 'arttype' Parameter (CVSS 6.5, tholstkabelbwde Plugin: CMS für Motorrad Werkstätten)
- [CVE-2026-6675](https://cve.now/CVE-2026-6675.md): Responsive Blocks \<= 2.2.0 - Unauthenticated Open Email Relay via REST API 'email\_to' Parameter (CVSS 5.3, cyberchimps Responsive Blocks – Page Builder for Blocks & P…)
- [CVE-2026-40497](https://cve.now/CVE-2026-40497.md): FreeScout Vulnerable to CSS Injection via Stored Style Tag in Mailbox Signature (CSRF Token Exfiltration) (CVSS 8.1, freescout-help-desk freescout)
- [CVE-2026-6058](https://cve.now/CVE-2026-6058.md): \*\* UNSUPPORTED WHEN ASSIGNED \*\* An improper encoding or escaping vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00 (CVSS 4.5, Zyxel WRE6505 v2 firmware)
- [CVE-2026-40496](https://cve.now/CVE-2026-40496.md): FreeScout has Predictable Attachment Token that Allows Unauthenticated Private File Download via Brute Force (CVSS 8.8, freescout-help-desk freescout)
- [CVE-2026-39973](https://cve.now/CVE-2026-39973.md): Apktool: Path Traversal to Arbitrary File Write (CVSS 7.1, iBotPeaches Apktool · org.apktool:apktool-lib)
- [CVE-2026-40250](https://cve.now/CVE-2026-40250.md): OpenEXR has integer overflow in DWA decoder outBufferEnd pointer arithmetic (missed variant of CVE-2026-34589) (CVSS 8.4, AcademySoftwareFoundation openexr)
- [CVE-2026-40244](https://cve.now/CVE-2026-40244.md): OpenEXR has integer overflow in DWA setupChannelData planarUncRle pointer arithmetic (missed variant of CVE-2026-34589) (CVSS 8.4, AcademySoftwareFoundation openexr)
- [CVE-2026-39886](https://cve.now/CVE-2026-39886.md): OpenEXR has HTJ2K Signed Integer Overflow in ht\_undo\_impl() (CVSS 5.3, AcademySoftwareFoundation openexr)
- [CVE-2026-39866](https://cve.now/CVE-2026-39866.md): Lawnchair vulnerable to Command Injection via unquoted workflow dispatch input in release\_update.yml (CVSS 7.4, LawnchairLauncher lawnchair)
- [CVE-2026-39861](https://cve.now/CVE-2026-39861.md): Claude Code: Sandbox Escape via Symlink Following Allows Arbitrary File Write Outside Workspace (CVSS 7.7, anthropics claude-code · @anthropic-ai/claude-code)
- [CVE-2026-39386](https://cve.now/CVE-2026-39386.md): Neko has Self-service Privilege Escalation for Authenticated Users (CVSS 8.8, m1k1o neko · github.com/m1k1o/neko/server)
- [CVE-2026-40264](https://cve.now/CVE-2026-40264.md): OpenBao's Token Store Allows Cross-Namespace Renewal, Revocation (CVSS 2.0, openbao · github.com/openbao/openbao)
- [CVE-2026-39396](https://cve.now/CVE-2026-39396.md): OpenBao has Decompression Bomb via Unbounded Copy in OCI Plugin Extraction (DoS) (CVSS 3.1, openbao · github.com/openbao/openbao)
- [CVE-2026-39388](https://cve.now/CVE-2026-39388.md): OpenBao's Certificate Authentication Allows Token Renewal With Different Certificate (CVSS 2.0, openbao · github.com/openbao/openbao)
- [CVE-2026-39946](https://cve.now/CVE-2026-39946.md): OpenBao allows SQL Injection in PostgreSQL database secrets engine (CVSS 4.6, openbao · github.com/openbao/openbao)
- [CVE-2026-39378](https://cve.now/CVE-2026-39378.md): nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding (CVSS 6.5, jupyter nbconvert · nbconvert)
- [CVE-2026-39377](https://cve.now/CVE-2026-39377.md): nbconvert has an Arbitrary File Write via Path Traversal in Cell Attachment Filenames (CVSS 6.5, jupyter nbconvert · nbconvert)
- [CVE-2026-39320](https://cve.now/CVE-2026-39320.md): Signal K Server has an Unauthenticated Regular Expression Denial of Service (ReDoS) via WebSocket Subscription Paths (CVSS 7.5, signalk-server)
- [CVE-2026-29644](https://cve.now/CVE-2026-29644.md): XiangShan (open-source high-performance RISC-V processor) commit edb1dfaf7d290ae99724594507dc46c2c2125384 (2024-11-28) has improper gating o (CVSS 5.3)
- [CVE-2026-30452](https://cve.now/CVE-2026-30452.md): Textpattern CMS 4.9.0 contains a Broken Access Control vulnerability in the article management system that allows authenticated users with l (CVSS 6.5)
- [CVE-2026-31013](https://cve.now/CVE-2026-31013.md): Dovestones Softwares ADPhonebook \<4.0.1.1 has a reflected cross-site scripting (XSS) vulnerability in the search parameter of the /ADPhonebo (CVSS 6.1)
- [CVE-2026-31014](https://cve.now/CVE-2026-31014.md): Dovestones Softwares AD Self Update \<4.0.0.5 is vulnerable to Cross Site Request Forgery (CSRF). (CVSS 6.3)
- [CVE-2026-31018](https://cve.now/CVE-2026-31018.md): In Dolibarr ERP & CRM \<= 22.0.4, PHP code detection and editing permission enforcement in the Website module is not applied consistently to (CVSS 8.8, dolibarr/dolibarr)
- [CVE-2026-31019](https://cve.now/CVE-2026-31019.md): In the Website module of Dolibarr ERP & CRM 22.0.4 and below, the application uses blacklist-based filtering to restrict dangerous PHP funct (CVSS 8.8, dolibarr/dolibarr)
- [CVE-2026-37748](https://cve.now/CVE-2026-37748.md): Visitor Management System 1.0 by sanjay1313 is vulnerable to Unrestricted File Upload in vms/php/admin\_user\_insert.php and vms/php/update\_1. (CVSS 7.2)
- [CVE-2026-38834](https://cve.now/CVE-2026-38834.md): Tenda W30E V2.0 V16.01.0.21 was found to contain a command injection vulnerability in the do\_ping\_action function via the hostName parameter (CVSS 7.3)
- [CVE-2026-38835](https://cve.now/CVE-2026-38835.md): Tenda W30E V2.0 V16.01.0.21 was found to contain a command injection vulnerability in the formSetUSBPartitionUmount function via the usbPart (CVSS 9.8)
- [CVE-2026-40706](https://cve.now/CVE-2026-40706.md): In NTFS-3G 2022.10.3 before 2026.2.25, a heap buffer overflow exists in ntfs\_build\_permissions\_posix() in acls.c that allows an attacker to (CVSS 8.4, Tuxera NTFS-3G)
- [CVE-2026-41527](https://cve.now/CVE-2026-41527.md): KDE Kleopatra before 26.08.0 on Windows allows local users to obtain the privileges of a Kleopatra user, because there is an error in the me (CVSS 6.9, KDE Kleopatra)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-04-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.