CVEs published April 23, 2026
183 CVEs were published on April 23, 2026: 42 critical, 55 high.
- Published
- 183
- Critical
- 42
- High
- 55
- Medium
- 75
- Low
- 10
- Unrated
- 1
- Now in CISA KEV
- 0
- Fix available
- 115
Most affected products
- OpenClaw
- 32
- FlowiseAI Flowise · flowise
- 9
- SenseLive X3050
- 7
- froxlor · froxlor/froxlor
- 6
- FlowiseAI Flowise · FlowiseAI flowise-components +2
- 5
- Red Hat Enterprise Linux
- 5
- FlowiseAI Flowise · flowise +1
- 4
- BorG Technology Borg SPM
- 3
- cure53 DOMPurify · dompurify
- 3
- Google Chrome
- 3
Critical 42
- CVE-2026-27843SenseLive X3050 Missing authentication for critical functionSenseLive X3050
- CVE-2026-39462SenseLive X3050 Insufficiently Protected CredentialsSenseLive X3050
- CVE-2026-35503SenseLive X3050 Use of Hard-coded CredentialsSenseLive X3050
- CVE-2026-40630SenseLive X3050 Authentication bypass using an alternate path or channelSenseLive X3050
- CVE-2026-35431Microsoft Entra ID Entitlement Management Spoofing VulnerabilityMicrosoft Entra
- CVE-2026-24303Microsoft Partner Center Elevation of Privilege VulnerabilityMicrosoft Partner Center
- CVE-2026-33819Microsoft Bing Remote Code Execution VulnerabilityMicrosoft Bing
- CVE-2026-33102Microsoft 365 Copilot Elevation of Privilege VulnerabilityMicrosoft 365 Copilot
- CVE-2026-32210Microsoft Dynamics 365 (online) Spoofing VulnerabilityMicrosoft Dynamics
- CVE-2026-26210KTransformers Unsafe Deserialization RCE via balance_servekvcache-ai ktransformers
- CVE-2026-41274Flowise: Cypher Injection in GraphCypherQAChainFlowiseAI Flowise · FlowiseAI flowise-components +2
- CVE-2026-6942radare2-mcp <=1.6.0 OS Command Injection via Shell Metacharacter Bypassradareorg radare2-mcp
- CVE-2026-41264Flowise: CSV Agent Prompt Injection Remote Code Execution VulnerabilityFlowiseAI Flowise · flowise +1
- CVE-2026-41265Flowise: Airtable_Agent Code Injection Remote Code Execution VulnerabilityFlowiseAI Flowise · flowise +1
- CVE-2026-25874LeRobot Unsafe Deserialization Remote Code Execution via gRPCHugging Face LeRobot
- CVE-2026-41137Flowise: Code Injection in CSVAgent leads to Authenticated RCEFlowiseAI Flowise · FlowiseAI flowise-components +2
- CVE-2026-6074Path traversal: '.../...//' in Intrado 911 Emergency Gateway (EGW)Intrado 911 Emergency Gateway
- CVE-2026-6920Out of bounds read in GPU in Google Chrome on Android prior to 147.0.7727.117 allowed a remote attacker who had compromised the renderer proGoogle Chrome
- CVE-2026-6919Use after free in DevTools in Google Chrome prior to 147.0.7727.117 allowed a remote attacker who had compromised the renderer process to poGoogle Chrome
- CVE-2026-31533net/tls: fix use-after-free in -EBUSY error path of tls_do_encryptionLinux
- CVE-2026-40472Hackage package metadata stored XSS vulnerabilityhackage-server
- CVE-2026-40471Hackage CSRF vulnerabilityhackage-server
- CVE-2026-40470Hackage package and doc upload stored XSS vulnerabilityhackage-server
- CVE-2026-23751Kofax Capture 6.0.0.0 Unauthenticated File Read/Write & SMB Coercion via .NET RemotingTungsten Automation Tungsten Capture
- CVE-2025-62373Pipecat vulnerable to Remote Code Execution by Pickle Deserialization via LivekitFrameSerializerpipecat-ai pipecat · pipecat-ai
- CVE-2026-41460SocialEngine <= 7.8.0 SQL Injection via activity/index/get-memberallSocialEngine
- CVE-2026-39440WordPress FunnelFormsPro plugin <= 3.8.1 - Remote Code Execution (RCE) vulnerabilityFunnelFormsPro
- CVE-2026-6887BorG Technology Corporation｜Borg SPM 2007 - SQL InjectionBorG Technology Borg SPM
- CVE-2026-6886BorG Technology Corporation｜Borg SPM 2007 - Authentication BypassBorG Technology Borg SPM
- CVE-2026-6885BorG Technology Corporation｜Borg SPM 2007 - Arbitrary File UploadBorG Technology Borg SPM
- CVE-2026-41229Froxlor has a PHP Code Injection via Unescaped Single Quotes in userdata.inc.php Generation (MysqlServer API)froxlor · froxlor/froxlor
- CVE-2026-41228Froxlor has Local File Inclusion via path traversal in API `def_language` parameter that leads to Remote Code Executionfroxlor · froxlor/froxlor
- CVE-2026-3844Breeze Cache <= 2.4.4 - Unauthenticated Arbitrary File Upload via fetch_gravatar_from_remotecloudways Breeze Cache
- CVE-2026-41679Paperclip Vulnerable to Unauthenticated Remote Code Execution via Import Authorization Bypasspaperclipai paperclip · @paperclipai/server +1
- CVE-2026-41197Brillig: Heap corruption in foreign call results with nested tuple arraysnoir-lang noir · brillig
- CVE-2026-41196Luanti has a mod security sandbox escapeluanti-org luanti
- CVE-2026-41179RClone: Unauthenticated operations/fsinfo allows attacker-controlled backend instantiation and local command executionrclone · github.com/rclone/rclone +1
- CVE-2025-50229Jizhicms v2.5.4 is vulnerable to SQL injection in the product editing module.
- CVE-2026-31175An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunEna
- CVE-2026-31177An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunMin
- CVE-2026-31178An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunMax
- CVE-2026-31181An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunSer
High 55
- CVE-2026-40623SenseLive X3050 Missing AuthorizationSenseLive X3050
- CVE-2026-41359OpenClaw < 2026.3.28 - Privilege Escalation via operator.write to Admin-Class Telegram Config and Cron PersistenceOpenClaw
- CVE-2026-41353OpenClaw < 2026.3.22 - allowProfiles Bypass via Profile Mutation and Runtime SelectionOpenClaw
- CVE-2026-41352OpenClaw < 2026.3.31 - Remote Code Execution via Node Scope Gate BypassOpenClaw
- CVE-2026-41349OpenClaw < 2026.3.28 - Agentic Consent Bypass via config.patchOpenClaw
- CVE-2026-41342OpenClaw < 2026.3.28 - Unauthenticated Discovery Endpoint Credential Exfiltration via Remote OnboardingOpenClaw
- CVE-2026-41336OpenClaw < 2026.3.31 - Arbitrary Hook Code Execution via OPENCLAW_BUNDLED_HOOKS_DIR Environment Variable OverrideOpenClaw
- CVE-2026-41334OpenClaw < 2026.3.31 - Decompression Bomb Denial of Service via Image Pixel-Limit Guard BypassOpenClaw
- CVE-2026-32172Microsoft Power Apps Remote Code Execution VulnerabilityMicrosoft Power Apps
- CVE-2026-26150Microsoft Purview eDiscovery Elevation of Privilege VulnerabilityMicrosoft Purview eDiscovery
- CVE-2026-28525SWUpdate Integer Underflow in Multipart Upload Parsersbabic swupdate
- CVE-2026-6376Missing authentication for critical function in SpiceJet Online Booking SystemSpiceJet Online Booking System
- CVE-2026-6375Authorization bypass through User-Controlled key in SpiceJet Online Booking SystemSpiceJet Online Booking System
- CVE-2026-41279Flowise: Unauthenticated TTS endpoint accepts arbitrary credential IDs — enables API credit abuse via stored credentialsFlowiseAI Flowise · flowise
- CVE-2026-41278Flowise: Public chatflow endpoints return unsanitized flowData including plaintext API keys, passwords, and credential IDsFlowiseAI Flowise · flowise
- CVE-2026-41276Flowise: AccountService resetPassword Authentication Bypass VulnerabilityFlowiseAI Flowise · flowise
- CVE-2026-41277Flowise: Mass Assignment in DocumentStore Create Endpoint Leads to Cross-Workspace Object Takeover (IDOR)FlowiseAI Flowise · flowise
- CVE-2026-41275Flowise: Password Reset Link Sent Over Unsecured HTTPFlowiseAI Flowise · flowise
- CVE-2026-41273Flowise: Unauthenticated OAuth 2.0 Access Token Disclosure via Public ChatflowFlowiseAI Flowise · flowise
- CVE-2026-41271Flowise: APIChain Prompt Injection SSRF in GET/POST API ChainsFlowiseAI Flowise · FlowiseAI flowise-components +2
- CVE-2026-41272Flowise: SSRF Protection Bypass (TOCTOU & Default Insecure)FlowiseAI Flowise · FlowiseAI flowise-components +2
- CVE-2026-41270Flowise: SSRF Protection Bypass via Unprotected Built-in HTTP Modules in Custom Function SandboxFlowiseAI Flowise · FlowiseAI flowise-components +2
- CVE-2026-41269Flowise: File Upload Validation Bypass in createAttachmentFlowiseAI Flowise · flowise
- CVE-2026-41268Flowise: Flowise Parameter Override Bypass Remote Command ExecutionFlowiseAI Flowise · flowise +1
- CVE-2026-41267Flowise: Improper Mass Assignment in Account Registration Enables Unauthorized Organization AssociationFlowiseAI Flowise · flowise
- CVE-2026-41266Flowise: Sensitive Data Leak in public-chatbotConfigFlowiseAI Flowise · flowise
- CVE-2026-41138Flowise: Remote code execution vulnerability in AirtableAgent.ts caused by lack of input verification when using Pandas.FlowiseAI Flowise · flowise +1
- CVE-2026-41259Mastodon: Insufficient verification of email addressesmastodon
- CVE-2026-41205Mako: Path traversal via double-slash URI prefix in TemplateLookupsqlalchemy mako · mako
- CVE-2026-41247elFinder: Command injection in resize background color parameter when using ImageMagick CLIStudio-42 elFinder · studio-42/elfinder
- CVE-2026-41246Contour: Lua code injection via Cookie Path Rewrite Policyprojectcontour contour · github.com/projectcontour/contour
- CVE-2026-41241pretalx: Stored cross-site scripting in organiser search typeaheadpretalx
- CVE-2026-40886Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows controllerargoproj argo-workflows · github.com/argoproj/argo-workf… +3
- CVE-2026-33694Junction File ManipulationTenable Nessus, Tenable Nessus Agent
- CVE-2026-6921Race in GPU in Google Chrome on Windows prior to 147.0.7727.117 allowed a remote attacker to potentially perform a sandbox escape via a crafGoogle Chrome
- CVE-2026-34003Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory accessRed Hat Enterprise Linux
- CVE-2026-34001Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruptionRed Hat Enterprise Linux
- CVE-2026-33999Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handlingRed Hat Enterprise Linux
- CVE-2026-35225Improper timeout handling in CODESYS EtherNetIPCODESYS EtherNetIP
- CVE-2026-31532can: raw: fix ro->uniq use-after-free in raw_rcv()Linux
- CVE-2026-6903Path Traversal Vulnerability in LabOne User InterfaceZurich Instruments LabOne
- CVE-2026-3259Sensitive Data Disclosure in BigQuery via Materialized View Error MessagesGoogle Cloud BigQuery
- CVE-2026-5464ExactMetrics <= 9.1.2 - Authenticated (Editor+) Arbitrary Plugin Installation/Activation via exactmetrics_connect_processsmub ExactMetrics – Google Analytics Dashboard for WordPress
- CVE-2026-41564CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forkingMIK CryptX
- CVE-2026-41040GROWI provided by GROWI, Inc.GROWI
- CVE-2026-34488IP Setting Software contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries.i-PRO Co. IP Setting Software
- CVE-2026-41231Froxlor has Incomplete Symlink Validation in DataDump.add() that Allows Arbitrary Directory Ownership Takeover via Cronfroxlor · froxlor/froxlor
- CVE-2026-41230Froxlor has a BIND Zone File Injection via Unsanitized DNS Record Content in DomainZones::add()froxlor · froxlor/froxlor
- CVE-2026-41211`vite-plus/binding` has path traversal `downloadPackageManager()` that leads to writes outside of `VP_HOME`voidzero-dev vite-plus · vite-plus
- CVE-2026-41208Paperclip: Privilege Escalation via Agent-Controlled workspaceStrategy.provisionCommand Leading to OS Command Execution@paperclipai/server
- CVE-2026-41200STIG Manager has reflected XSS vulnerability in the Web AppNUWCDIVNPT stig-manager
- CVE-2026-41180PsiTransfer: Upload PATCH path traversal can create `config.<NODE_ENV>.js` and lead to code execution on restartpsi-4ward psitransfer · psitransfer
- CVE-2026-32679The installers of LiveOn Meet Client for Windows (Downloader5Installer.exe and Downloader5InstallerForAdmin.exe) and the installers of CanonJapan Media Systems Downloader5Installer.exe · Japan Med… +2
- CVE-2026-40062A path Traversal vulnerability exists in Ziostation2 v2.9.8.7 and earlier.Ziosoft Ziostation2
- CVE-2025-70994Yadea T5 Electric Bicycles (models manufactured in/after 2024) have a weak authentication mechanism in their keyless entry system.
Medium, low and unrated 86
- CVE-2026-29050melange has Path Traversal When Resolving External Pipelines via Unvalidated pipeline[].useschainguard-dev melange · chainguard.dev/melange
- CVE-2026-40431SenseLive X3050 Cleartext transmission of sensitive informationSenseLive X3050
- CVE-2026-25720SenseLive X3050 Insufficient session expirationSenseLive X3050
- CVE-2026-1789A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device viCanon imagePRESS Series · Canon imageFORCE Series +13
- CVE-2026-29197In versions <8.4.0, <8.3.2, <8.2.2, <8.1.3, <8.0.4, <7.13.6, <7.12.7, <7.11.7, and <7.10.10, the endpoints /api/apps/logs and /api/apps/:id/Rocket.Chat
- CVE-2026-6732Libxml2: libxml2: denial of service via crafted xsd-validated documentRed Hat Hardened Images · Red Hat Enterprise Linux +2
- CVE-2026-41361OpenClaw < 2026.3.28 - SSRF Guard Bypass via IPv6 Special-Use RangesOpenClaw
- CVE-2026-41360OpenClaw < 2026.4.2 - Approval Integrity Bypass in pnpm dlx Local Script BindingOpenClaw
- CVE-2026-41358OpenClaw < 2026.4.2 - Sender Allowlist Bypass via Slack Thread ContextOpenClaw
- CVE-2026-41357OpenClaw < 2026.3.31 - Unsanitized Environment Variable Leakage in SSH Sandbox BackendsOpenClaw
- CVE-2026-41356OpenClaw < 2026.3.31 - Incomplete WebSocket Session Termination in device.token.rotateOpenClaw
- CVE-2026-41355OpenClaw < 2026.3.28 - Arbitrary Code Execution via Mirror Mode Sandbox File ConversionOpenClaw
- CVE-2026-41354OpenClaw < 2026.4.2 - Insufficient Scope in Zalo Webhook Replay Dedupe KeysOpenClaw
- CVE-2026-41351OpenClaw < 2026.3.31 - Webhook Replay Detection Bypass via Base64 Signature Re-encodingOpenClaw
- CVE-2026-41350OpenClaw < 2026.3.31 - Session Visibility Bypass via session_status in Unsandboxed InvocationsOpenClaw
- CVE-2026-41348OpenClaw < 2026.3.31 - Group DM Channel Allowlist Bypass via Discord Slash CommandsOpenClaw
- CVE-2026-41347OpenClaw < 2026.3.31 - Cross-Site Request Forgery via Missing Browser-Origin Validation in HTTP Operator EndpointsOpenClaw
- CVE-2026-41346OpenClaw 2026.2.26 < 2026.3.31 - Denial of Service via Improper Pending Pairing Request Cap EnforcementOpenClaw
- CVE-2026-41345OpenClaw < 2026.3.31 - Authorization Header Leak via Cross-Origin Redirect in Media DownloadOpenClaw
- CVE-2026-41344OpenClaw < 2026.3.28 - Privilege Escalation via chat.send /verbose ParameterOpenClaw
- CVE-2026-41343OpenClaw < 2026.3.31 - Denial of Service via LINE Webhook Handler Pre-Auth ConcurrencyOpenClaw
- CVE-2026-41341OpenClaw < 2026.3.31 - Component Interaction Misclassification in Discord ExtensionOpenClaw
- CVE-2026-41340OpenClaw < 2026.3.31 - Authentication Boundary Bypass via Telegram Legacy allowFrom MigrationOpenClaw
- CVE-2026-41339OpenClaw < 2026.4.2 - Information Disclosure via Gateway Connect SnapshotOpenClaw
- CVE-2026-41338OpenClaw < 2026.3.31 - Time-of-Check-Time-of-Use (TOCTOU) Vulnerability in Sandbox File OperationsOpenClaw
- CVE-2026-41337OpenClaw < 2026.3.31 - Callback Origin Mutation in Plivo Voice-call ReplayOpenClaw
- CVE-2026-41335OpenClaw < 2026.3.31 - Information Disclosure via Control UI Bootstrap JSONOpenClaw
- CVE-2026-41333OpenClaw < 2026.3.31 - Authentication Rate Limiting Bypass via Fake DeviceTokenOpenClaw
- CVE-2026-41332OpenClaw < 2026.3.28 - Code Execution via Missing Environment Variable BlocklistOpenClaw
- CVE-2026-2708Libsoup: libsoup: http request smuggling via duplicate content-length headersRed Hat Enterprise Linux
- CVE-2026-6941radare2 < 6.1.4 Project Notes Path Traversal via Symlinkradareorg radare2
- CVE-2026-6940radare2 < 6.1.4 Project Deletion Path Traversal Directory Deletionradareorg radare2
- CVE-2026-41213@node-oauth/oauth2-server: PKCE code_verifier ABNF not enforced in token exchange allows brute-force redemption of intercepted authorization codesnode-oauth2-server · @node-oauth/oauth2-server
- CVE-2026-41173Unbounded HTTP response body read in OpenTelemetry.Sampler.AWSopen-telemetry opentelemetry-dotnet-contrib · OpenTeleme… +1
- CVE-2026-41078OpenTelemetry dotnet: Potential memory exhaustion via unbounded pooled-list sizing in Jaeger exporter conversion pathopen-telemetry opentelemetry-dotnet · open-telemetry Ope… +1
- CVE-2026-40894OpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headersopen-telemetry opentelemetry-dotnet · open-telemetry Ope… +3
- CVE-2026-40891OpenTelemetry dotnet: Unbounded `grpc-status-details-bin` parsing in OTLP/gRPC retry handlingopen-telemetry opentelemetry-dotnet · open-telemetry Ope… +1
- CVE-2026-41909OpenClaw < 2026.4.20 - Improper Authorization in Paired-Device Pairing ActionsOpenClaw
- CVE-2026-41908OpenClaw < 2026.4.20 - Scope Enforcement Bypass in Assistant-Media RouteOpenClaw
- CVE-2026-40182OpenTelemetry dotnet: OTLP exporter reads unbounded HTTP response bodiesopen-telemetry opentelemetry-dotnet · OpenTelemetry.Exporte…
- CVE-2026-5039Predictable Default Cryptographic Key Used for DES Encryption in TP-Link TL-WL841NTP-Link Systems TL-WL841N
- CVE-2026-41240DOMPurify: FORBID_TAGS bypassed by function-based ADD_TAGS predicate (asymmetry with FORBID_ATTR fix)cure53 DOMPurify · dompurify
- CVE-2026-41239DOMPurify has a SAFE_FOR_TEMPLATES bypass in RETURN_DOM modecure53 DOMPurify · dompurify
- CVE-2026-41238DOMPurify: Prototype Pollution to XSS Bypass via CUSTOM_ELEMENT_HANDLING Fallbackcure53 DOMPurify · dompurify
- CVE-2026-41461SocialEngine <= 7.8.0 Blind SSRF via /core/link/previewSocialEngine
- CVE-2025-66286Webkitgtk: authorization bypass through webpage::send-request signal handlerRed Hat Enterprise Linux
- CVE-2025-13763Libopensc: opensc: multiple uses of uninitialized variableOpenSC · Red Hat Enterprise Linux
- CVE-2026-31531ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop()Linux
- CVE-2025-62110WordPress Rescue Shortcodes plugin <= 3.3 - Cross Site Scripting (XSS) vulnerabilityRescue Themes Rescue Shortcodes
- CVE-2025-62104WordPress ACF Galerie 4 plugin <= 1.4.2 - Broken Access Control vulnerabilityNavneil Naicker ACF Galerie
- CVE-2026-28040WordPress Taxi Booking Manager for WooCommerce plugin <= 2.0.0 - Cross Site Scripting (XSS) vulnerabilityMagepeople Taxi Booking Manager for WooCommerce
- CVE-2026-3960Remote Code Execution in h2oai/h2o-3h2oai/h2o-3 · h2o +1
- CVE-2025-10549DLL Hijacking in EfficientLab Controlio Leads to Local Privilege EscalationEfficientLab Controlio
- CVE-2026-4512WP reCaptcha by WebDesignBy < 2.0 – Admin+ Stored XSSreCaptcha by WebDesignBy
- CVE-2026-4106HT Mega < 3.0.7 – Unauthenticated PII DisclosureHT Mega Addons for Elementor
- CVE-2026-41990Libgcrypt before 1.12.2 mishandles Dilithium signing.gnupg Libgcrypt
- CVE-2026-41989Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.gnupg Libgcrypt
- CVE-2026-40529CMS ALAYA provided by KANATA Limited contains an SQL injection vulnerability.KANATA Limited CMS ALAYA
- CVE-2026-41988uuid before 14.0.0 can make unexpected writes when external output buffers are used, and the UUID version is 3, 5, or 6.uuidjs uuid · uuid
- CVE-2026-41233Froxlor has a Reseller Domain Quota Bypass via Unvalidated adminid Parameter in Domains.add()froxlor · froxlor/froxlor
- CVE-2026-41232Froxlor has an Email Sender Alias Domain Ownership Bypass via Wrong Array Index that Allows Cross-Customer Email Spoofingfroxlor · froxlor/froxlor
- CVE-2026-3361WP Store Locator <= 2.2.261 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpsl_address' Post Metatijmensmit WP Store Locator
- CVE-2026-3007Stored Cross-Site Scripting (XSS) VulnerabilityThree Learning Koollab Learning Management System
- CVE-2026-2951Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor <= 3.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gutentor Block HTMLGutentor – Gutenberg Blocks – Page Builder for Gutenberg Ed…
- CVE-2026-1923Social Rocket – Social Sharing Plugin <= 1.3.4.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via idsocialrocket Social Rocket – Social Sharing Plugin
- CVE-2026-41206PySpector has a Plugin Code Execution Bypass via Incomplete Static Analysis in PluginSecurity.validate_plugin_codeParzivalHack PySpector · pyspector
- CVE-2026-41182LangSmith SDK: Streaming token events bypass output redactionlangchain-ai langsmith-sdk · langsmith
- CVE-2026-41243OpenLearn's pending forum posts remain publicly readable by direct ID when moderation mode is enabledsiemvk OpenLearn
- CVE-2026-6878ByteDance verl grader.py math_equal sandboxByteDance verl · verl
- CVE-2026-31159An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the passwor
- CVE-2026-31160An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the provide
- CVE-2026-31162An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the ttlWay
- CVE-2026-31163An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the dhcpMtu
- CVE-2026-31164An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the pppoeMt
- CVE-2026-31165An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the pppoeSe
- CVE-2026-31166An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the hour pa
- CVE-2026-31167An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the mode pa
- CVE-2026-31168An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the recHour
- CVE-2026-31169An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the week pa
- CVE-2026-31171An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the url par
- CVE-2026-31172An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the user pa
- CVE-2026-31173An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the interva
- CVE-2026-31174An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the informE
- CVE-2026-31176An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stun_us
- CVE-2026-31179An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunPor
- CVE-2026-39087ntfy before 2.22.0 allows SSRF because of an unanchored regular expression for web push endpoint URLs.ntfy · heckel.io/ntfy/v2 +1