# CVEs published 2026-04-27

197 CVEs were published on April 27, 2026: 30 critical, 56 high. Days are UTC.

- [CVE-2026-20766](https://cve.now/CVE-2026-20766.md): Milesight Cameras Heap-based Buffer Overflow (CVSS 8.6, Milesight MS-Cxx63-PD · Milesight MS-Cxx64-xPD +80)
- [CVE-2026-7202](https://cve.now/CVE-2026-7202.md): Totolink A8000RU CGI cstecgi.cgi setWiFiWpsStart os command injection (CVSS 9.3, Totolink A8000RU)
- [CVE-2026-32649](https://cve.now/CVE-2026-32649.md): Milesight Cameras OS Command Injection (CVSS 7.3, Milesight MS-Cxx63-PD · Milesight MS-Cxx64-xPD +80)
- [CVE-2026-32644](https://cve.now/CVE-2026-32644.md): Milesight Cameras Use of Hard-coded Cryptographic Key (CVSS 9.2, Milesight MS-Cxx63-PD · Milesight MS-Cxx64-xPD +80)
- [CVE-2026-27785](https://cve.now/CVE-2026-27785.md): Milesight Cameras Use of Hard-coded Credentials (CVSS 7.7, Milesight MS-Cxx63-PD · Milesight MS-Cxx64-xPD +80)
- [CVE-2026-40977](https://cve.now/CVE-2026-40977.md): When an application is configured to use \`ApplicationPidFileWriter\`, a local attacker with write access to the PID file's location can corru (CVSS 4.7, Spring Boot · org.springframework.boot:spring-boot-cassandra)
- [CVE-2026-40976](https://cve.now/CVE-2026-40976.md): In certain circumstances, Spring Boot's default web security is ineffective allowing unauthorized access to all endpoints. (CVSS 9.1, Spring Boot · org.springframework.boot:spring-boot)
- [CVE-2026-40975](https://cve.now/CVE-2026-40975.md): Values produced by ${random.value} are not suitable for use as secrets. (CVSS 4.8, Spring Boot · org.springframework.boot:spring-boot-cassandra)
- [CVE-2026-40974](https://cve.now/CVE-2026-40974.md): Spring Boot's Cassandra auto-configuration does not perform hostname verification when establishing an SSL connection to Cassandra. (CVSS 5.0, Spring Boot · org.springframework.boot:spring-boot-cassandra)
- [CVE-2026-7200](https://cve.now/CVE-2026-7200.md): SourceCodester Pharmacy Sales and Inventory System index.php cross site scripting (CVSS 5.3, SourceCodester Pharmacy Sales and Inventory System)
- [CVE-2026-40973](https://cve.now/CVE-2026-40973.md): A local attacker on the same host as the application may be able to take control of the directory used by \`ApplicationTemp\`. (CVSS 7.0, Spring Boot · org.springframework.boot:spring-boot)
- [CVE-2026-41372](https://cve.now/CVE-2026-41372.md): OpenClaw \< 2026.4.2 - Loopback Protection Bypass via Trailing-Dot Localhost in CDP Discovery (CVSS 6.9, OpenClaw)
- [CVE-2026-41371](https://cve.now/CVE-2026-41371.md): OpenClaw \< 2026.3.28 - Privilege Escalation via chat.send Reset Command (CVSS 8.4, OpenClaw)
- [CVE-2026-41370](https://cve.now/CVE-2026-41370.md): OpenClaw \< 2026.3.31 - Path Traversal via Inbound Channel Attachment Path in ACP Dispatch (CVSS 7.1, OpenClaw)
- [CVE-2026-41369](https://cve.now/CVE-2026-41369.md): OpenClaw \< 2026.3.31 - Insufficient Environment Variable Sanitization in Host Execution (CVSS 7.1, OpenClaw)
- [CVE-2026-41368](https://cve.now/CVE-2026-41368.md): OpenClaw \< 2026.3.28 - Environment Variable Disclosure via jq $ENV Filter Bypass (CVSS 7.1, OpenClaw)
- [CVE-2026-41367](https://cve.now/CVE-2026-41367.md): OpenClaw 2026.2.14 \< 2026.3.28 - Policy Enforcement Bypass in Discord Component Interactions (CVSS 5.3, OpenClaw)
- [CVE-2026-41366](https://cve.now/CVE-2026-41366.md): OpenClaw \< 2026.3.31 - Arbitrary Host File Read via appendLocalMediaParentRoots Self-Whitelisting (CVSS 6.0, OpenClaw)
- [CVE-2026-41365](https://cve.now/CVE-2026-41365.md): OpenClaw \< 2026.3.31 - Sender Allowlist Bypass via Graph API Thread History (CVSS 5.3, OpenClaw)
- [CVE-2026-41364](https://cve.now/CVE-2026-41364.md): OpenClaw \< 2026.3.31 - Arbitrary File Write via Symlink Following in SSH Sandbox Tar Upload (CVSS 7.2, OpenClaw)
- [CVE-2026-41363](https://cve.now/CVE-2026-41363.md): OpenClaw 2026.2.6 \< 2026.3.28 - Arbitrary File Read via Feishu upload\_image Parameter (CVSS 6.0, OpenClaw)
- [CVE-2026-41362](https://cve.now/CVE-2026-41362.md): OpenClaw 2026.2.19 through 2026.3.30 - Webhook Replay Dedupe Cache Event Suppression via Shared Authentication (CVSS 2.3, OpenClaw)
- [CVE-2026-40972](https://cve.now/CVE-2026-40972.md): An attacker on the same network as the remote application may be able to utilize a timing attack to discover information about the remote se (CVSS 7.5, Spring Boot · org.springframework.boot:spring-boot-devtools)
- [CVE-2026-7199](https://cve.now/CVE-2026-7199.md): SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection (CVSS 6.9, SourceCodester Pharmacy Sales and Inventory System)
- [CVE-2026-7196](https://cve.now/CVE-2026-7196.md): CodeAstro Online Classroom guestdetails sql injection (CVSS 5.3, CodeAstro Online Classroom)
- [CVE-2026-40971](https://cve.now/CVE-2026-40971.md): When configured to use an SSL bundle, Spring Boot's RabbitMQ auto-configuration does not perform hostname verification when connecting to th (CVSS 5.0, Spring Boot · org.springframework.boot:spring-boot-rabbitmq)
- [CVE-2026-7194](https://cve.now/CVE-2026-7194.md): SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection (CVSS 6.9, SourceCodester Pharmacy Sales and Inventory System)
- [CVE-2026-28747](https://cve.now/CVE-2026-28747.md): Milesight Cameras Authorization Bypass Through User-Controlled Key (CVSS 7.3, Milesight MS-Cxx63-PD · Milesight MS-Cxx64-xPD +80)
- [CVE-2026-7183](https://cve.now/CVE-2026-7183.md): aligungr UERANSIM Radio Link Simulation Layer rls\_pdu.cpp DecodeRlsMessage uncaught exception (CVSS 6.9, aligungr UERANSIM)
- [CVE-2026-7179](https://cve.now/CVE-2026-7179.md): OSPG binwalk WinCE Extraction Plugin winceextract.py read\_null\_terminated\_string path traversal (CVSS 4.8, OSPG binwalk)
- [CVE-2026-7178](https://cve.now/CVE-2026-7178.md): ChatGPTNextWeb NextChat Artifacts Endpoint route.ts storeUrl server-side request forgery (CVSS 6.9, ChatGPTNextWeb NextChat)
- [CVE-2026-7177](https://cve.now/CVE-2026-7177.md): ChatGPTNextWeb NextChat route.ts proxyHandler server-side request forgery (CVSS 6.9, ChatGPTNextWeb NextChat)
- [CVE-2026-7160](https://cve.now/CVE-2026-7160.md): Tenda HG3 formTracert command injection (CVSS 8.7, Tenda HG3)
- [CVE-2026-7159](https://cve.now/CVE-2026-7159.md): douinc mkdocs-mcp-plugin server.py list\_documents path traversal (CVSS 6.9, douinc mkdocs-mcp-plugin · mkdocs-mcp-plugin)
- [CVE-2026-7158](https://cve.now/CVE-2026-7158.md): dmitryglhf mcp-url-downloader server.py \_validate\_url\_safe server-side request forgery (CVSS 6.9, dmitryglhf mcp-url-downloader · mcp-url-downloader)
- [CVE-2026-3087](https://cve.now/CVE-2026-3087.md): shutil.unpack\_archive() doesn't check for Windows absolute paths in ZIPs (CVSS 6.0, Python Software Foundation CPython)
- [CVE-2026-7157](https://cve.now/CVE-2026-7157.md): disler aider-mcp-server aider\_ai\_code server.py command injection (CVSS 6.9, disler aider-mcp-server)
- [CVE-2026-7156](https://cve.now/CVE-2026-7156.md): Totolink A8000RU CGI cstecgi.cgi CsteSystem os command injection (CVSS 9.3, Totolink A8000RU)
- [CVE-2026-5362](https://cve.now/CVE-2026-5362.md): Pimcore Platform v12.3.3 - Stored XSS in Document Editable Embed rendering (CVSS 4.8, pimcore · pimcore/pimcore)
- [CVE-2026-7155](https://cve.now/CVE-2026-7155.md): Totolink A8000RU CGI cstecgi.cgi setLoginPasswordCfg os command injection (CVSS 9.3, Totolink A8000RU)
- [CVE-2026-7191](https://cve.now/CVE-2026-7191.md): Arbitrary Code Execution via Sandbox Bypass in the open source solution QnABot on AWS (CVSS 7.2, QnABot on AWS)
- [CVE-2026-7154](https://cve.now/CVE-2026-7154.md): Totolink A8000RU CGI cstecgi.cgi setAdvancedInfoShow os command injection (CVSS 9.3, Totolink A8000RU)
- [CVE-2026-7153](https://cve.now/CVE-2026-7153.md): Totolink A8000RU CGI cstecgi.cgi setMiniuiHomeInfoShow os command injection (CVSS 9.3, Totolink A8000RU)
- [CVE-2026-6741](https://cve.now/CVE-2026-6741.md): LatePoint \<= 5.4.1 - Authenticated (Agent+) Privilege Escalation to Administrator via 'connect-customer-to-wp-user' Ability (CVSS 8.8, LatePoint – Calendar Booking Plugin for Appointments and Ev…)
- [CVE-2026-7152](https://cve.now/CVE-2026-7152.md): Totolink A8000RU CGI cstecgi.cgi setTelnetCfg os command injection (CVSS 9.3, Totolink A8000RU)
- [CVE-2026-7151](https://cve.now/CVE-2026-7151.md): Tenda HG3 formIPv6Routing formUploadConfig stack-based overflow (CVSS 8.7, Tenda HG3)
- [CVE-2026-5394](https://cve.now/CVE-2026-5394.md): Pimcore Platform v12.3.3 - SQL Injection in DataObject composite index handling (CVSS 7.0, pimcore · pimcore/pimcore)
- [CVE-2026-40970](https://cve.now/CVE-2026-40970.md): When configured to use an SSL bundle, Spring Boot's Elasticsearch auto-configuration does not perform hostname verification when connecting (CVSS 5.0, Spring Boot · org.springframework.boot:spring-boot-elastics…)
- [CVE-2026-7150](https://cve.now/CVE-2026-7150.md): dh1011 auto-favicon MCP Tool server.py generate\_favicon\_from\_url server-side request forgery (CVSS 5.3, dh1011 auto-favicon · auto-favicon)
- [CVE-2026-7149](https://cve.now/CVE-2026-7149.md): dexhunter kaggle-mcp server.py prepare\_kaggle\_dataset path traversal (CVSS 6.9, dexhunter kaggle-mcp · kaggle-mcp)
- [CVE-2026-7148](https://cve.now/CVE-2026-7148.md): CodeAstro Online Classroom addnewfaculty sql injection (CVSS 5.3, CodeAstro Online Classroom)
- [CVE-2026-7147](https://cve.now/CVE-2026-7147.md): JoeCastrom mcp-chat-studio LLM Models API llm.js server-side request forgery (CVSS 6.9, JoeCastrom mcp-chat-studio)
- [CVE-2026-32655](https://cve.now/CVE-2026-32655.md): Dell Alienware Command Center (AWCC), versions prior to 6.13.8.0, contain a Least Privilege Violation vulnerability. (CVSS 5.3, Dell Alienware Command Center)
- [CVE-2026-25908](https://cve.now/CVE-2026-25908.md): Dell Alienware Command Center (AWCC), versions prior to 6.13.8.0, contain an Execution with Unnecessary Privileges vulnerability in the AWCC (CVSS 6.7, Dell Alienware Command Center)
- [CVE-2026-7146](https://cve.now/CVE-2026-7146.md): AlejandroArciniegas mcp-data-vis HTTP Request server.js axios server-side request forgery (CVSS 6.9, AlejandroArciniegas mcp-data-vis)
- [CVE-2026-7145](https://cve.now/CVE-2026-7145.md): mettle sendportal Invitation WorkspaceInvitationsController.php destroy authorization (CVSS 5.3, mettle sendportal)
- [CVE-2026-31691](https://cve.now/CVE-2026-31691.md): igb: remove napi\_synchronize() in igb\_down() (no CVSS, Linux)
- [CVE-2026-31690](https://cve.now/CVE-2026-31690.md): firmware: thead: Fix buffer overflow and use standard endian macros (no CVSS, Linux)
- [CVE-2026-31689](https://cve.now/CVE-2026-31689.md): EDAC/mc: Fix error path ordering in edac\_mc\_alloc() (no CVSS, Linux)
- [CVE-2026-31687](https://cve.now/CVE-2026-31687.md): gpio: omap: do not register driver in probe() (no CVSS, Linux)
- [CVE-2026-31686](https://cve.now/CVE-2026-31686.md): mm/kasan: fix double free for kasan pXds (no CVSS, Linux)
- [CVE-2026-7144](https://cve.now/CVE-2026-7144.md): 1000 Projects Portfolio Management System MCA update\_passwd\_process.php authorization (CVSS 5.3, 1000 Projects Portfolio Management System MCA)
- [CVE-2026-7143](https://cve.now/CVE-2026-7143.md): 1000 Projects Portfolio Management System MCA block\_status.php sql injection (CVSS 5.3, 1000 Projects Portfolio Management System MCA)
- [CVE-2026-7142](https://cve.now/CVE-2026-7142.md): Wooey API Endpoint scripts.py add\_or\_update\_script improper authorization (CVSS 5.3, Wooey)
- [CVE-2026-7141](https://cve.now/CVE-2026-7141.md): vLLM KV Block kv\_cache\_interface.py has\_mamba\_layers uninitialized resource (CVSS 6.3, vLLM)
- [CVE-2026-7140](https://cve.now/CVE-2026-7140.md): Totolink A8000RU CGI cstecgi.cgi CsteSystem os command injection (CVSS 9.3, Totolink A8000RU)
- [CVE-2026-7139](https://cve.now/CVE-2026-7139.md): Totolink A8000RU CGI cstecgi.cgi setWiFiAclRules os command injection (CVSS 9.3, Totolink A8000RU)
- [CVE-2026-7138](https://cve.now/CVE-2026-7138.md): Totolink A8000RU CGI cstecgi.cgi setNtpCfg os command injection (CVSS 9.3, Totolink A8000RU)
- [CVE-2026-7137](https://cve.now/CVE-2026-7137.md): Totolink A8000RU CGI cstecgi.cgi setStorageCfg os command injection (CVSS 9.3, Totolink A8000RU)
- [CVE-2026-7136](https://cve.now/CVE-2026-7136.md): Totolink A8000RU CGI cstecgi.cgi setDmzCfg os command injection (CVSS 9.3, Totolink A8000RU)
- [CVE-2026-6970](https://cve.now/CVE-2026-6970.md): authd Denial of Service and Local Privilege Escalation (CVSS 7.3, Canonical authd · github.com/canonical/authd)
- [CVE-2025-54505](https://cve.now/CVE-2025-54505.md): A transient execution vulnerability within AMD CPUs may allow a local user-privileged attacker to leak data via the floating point divisor u (CVSS 2.0, AMD EPYC™ 7001 Series Processors · AMD EPYC™ Embedded 3000…)
- [CVE-2026-7135](https://cve.now/CVE-2026-7135.md): GPAC MP4Box box\_code\_base.c elng\_box\_read out-of-bounds (CVSS 4.8, GPAC)
- [CVE-2026-41467](https://cve.now/CVE-2026-41467.md): ProjeQtor \< 12.4.4 Stored XSS via checkValidFileName() (CVSS 5.1, ProjeQtor)
- [CVE-2026-41466](https://cve.now/CVE-2026-41466.md): ProjeQtor \< 12.4.4 Stored XSS via checkValidHtmlText() (CVSS 5.1, ProjeQtor)
- [CVE-2026-41465](https://cve.now/CVE-2026-41465.md): ProjeQtor \< 12.4.4 Path Traversal via dynamicDialog.php (CVSS 7.1, ProjeQtor)
- [CVE-2026-41464](https://cve.now/CVE-2026-41464.md): ProjeQtor \< 12.4.4 Missing Authorization via objectDetail.php (CVSS 7.1, ProjeQtor)
- [CVE-2026-41463](https://cve.now/CVE-2026-41463.md): ProjeQtor \< 12.4.4 ZipSlip Path Traversal via uploadPlugin.php (CVSS 8.7, ProjeQtor)
- [CVE-2026-41462](https://cve.now/CVE-2026-41462.md): ProjeQtor \< 12.4.4 Unauthenticated SQL Injection via Login (CVSS 9.3, ProjeQtor)
- [CVE-2026-7134](https://cve.now/CVE-2026-7134.md): code-projects Online Lot Reservation System edithousepic.php unrestricted upload (CVSS 5.1, code-projects Online Lot Reservation System)
- [CVE-2026-7133](https://cve.now/CVE-2026-7133.md): code-projects Online Lot Reservation System activity.php unrestricted upload (CVSS 5.1, code-projects Online Lot Reservation System)
- [CVE-2026-7132](https://cve.now/CVE-2026-7132.md): code-projects Online Lot Reservation System download.php readfile path traversal (CVSS 6.9, code-projects Online Lot Reservation System)
- [CVE-2026-40514](https://cve.now/CVE-2026-40514.md): SmarterTools SmarterMail \< Build 9610 Cryptographic Weakness via Weak RNG (CVSS 8.2, SmarterTools SmarterMail)
- [CVE-2026-6357](https://cve.now/CVE-2026-6357.md): pip self-update functionality can import newly installed modules after wheel installation (CVSS 5.3, Pip maintainers pip · pip)
- [CVE-2026-7131](https://cve.now/CVE-2026-7131.md): code-projects Online Lot Reservation System loginuser.php sql injection (CVSS 6.9, code-projects Online Lot Reservation System)
- [CVE-2026-7130](https://cve.now/CVE-2026-7130.md): SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection (CVSS 6.9, SourceCodester Pharmacy Sales and Inventory System)
- [CVE-2026-32688](https://cve.now/CVE-2026-32688.md): Atom table exhaustion via HTTP/2 :scheme pseudo-header in plug\_cowboy (CVSS 8.7, elixir-plug plug\_cowboy)
- [CVE-2026-7129](https://cve.now/CVE-2026-7129.md): SourceCodester Pharmacy Sales and Inventory System index.php cross site scripting (CVSS 5.3, SourceCodester Pharmacy Sales and Inventory System)
- [CVE-2026-7128](https://cve.now/CVE-2026-7128.md): SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection (CVSS 6.9, SourceCodester Pharmacy Sales and Inventory System)
- [CVE-2026-7127](https://cve.now/CVE-2026-7127.md): SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection (CVSS 6.9, SourceCodester Pharmacy Sales and Inventory System)
- [CVE-2026-40557](https://cve.now/CVE-2026-40557.md): Apache Storm Prometheus Reporter: Disabling TLS verification for Prometheus Reporter also disables it for all other connections (CVSS 4.8, Apache Software Foundation Apache Storm Prometheus Reporter…)
- [CVE-2026-41081](https://cve.now/CVE-2026-41081.md): Apache Storm Client: Anonymous principal assigned on TLS client certificate verification failure (CVSS 6.5, Apache Software Foundation Apache Storm Client · org.apache…)
- [CVE-2026-7126](https://cve.now/CVE-2026-7126.md): SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection (CVSS 6.9, SourceCodester Pharmacy Sales and Inventory System)
- [CVE-2026-6265](https://cve.now/CVE-2026-6265.md): Local Privilege Escalation in Cerberus FTP Server =\< 2025.4.2 (CVSS 7.3, Cerberus FTP Server)
- [CVE-2025-15626](https://cve.now/CVE-2025-15626.md): Authenticated user can bypass authorization in Ribblr - Crochet & Knitting iOS application (CVSS 5.3, Ribblr Crotchet and Knitting)
- [CVE-2026-7125](https://cve.now/CVE-2026-7125.md): Totolink A8000RU CGI cstecgi.cgi setWiFiEasyCfg os command injection (CVSS 9.3, Totolink A8000RU)
- [CVE-2026-7124](https://cve.now/CVE-2026-7124.md): Totolink A8000RU CGI cstecgi.cgi setIpv6LanCfg os command injection (CVSS 9.3, Totolink A8000RU)
- [CVE-2026-7040](https://cve.now/CVE-2026-7040.md): Text::Minify::XS versions from 0.3.0 before 0.7.8 for Perl have heap overflow when processing some malformed UTF-8 characters (CVSS 7.5, RRWO Text::Minify::XS)
- [CVE-2026-7123](https://cve.now/CVE-2026-7123.md): Totolink A8000RU CGI cstecgi.cgi setIptvCfg os command injection (CVSS 9.3, Totolink A8000RU)
- [CVE-2026-7122](https://cve.now/CVE-2026-7122.md): Totolink A8000RU CGI cstecgi.cgi setUPnPCfg os command injection (CVSS 9.3, Totolink A8000RU)
- [CVE-2026-7121](https://cve.now/CVE-2026-7121.md): Totolink A8000RU CGI cstecgi.cgi setWizardCfg os command injection (CVSS 9.3, Totolink A8000RU)
- [CVE-2026-7119](https://cve.now/CVE-2026-7119.md): Tenda HG3 formCountrystr os command injection (CVSS 8.7, Tenda HG3)
- [CVE-2026-7118](https://cve.now/CVE-2026-7118.md): code-projects Employee Management System cancel.php sql injection (CVSS 5.3, code-projects Employee Management System)
- [CVE-2026-5937](https://cve.now/CVE-2026-5937.md): Foxit PDF Editor/Reader's insufficient parameter validation leads to denial-of-service vulnerability (CVSS 5.5, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-5938](https://cve.now/CVE-2026-5938.md): Foxit PDF Editor/Reader Infinite Loop Denial-of-Service Vulnerability (CVSS 5.5, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-5940](https://cve.now/CVE-2026-5940.md): Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-5942](https://cve.now/CVE-2026-5942.md): Foxit PDF Editor/Reader AcroForm Signature Use-After-Free Vulnerability (CVSS 5.5, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-5943](https://cve.now/CVE-2026-5943.md): Foxit PDF Editor/Reader AcroForm Annotation Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-5939](https://cve.now/CVE-2026-5939.md): UAF in Foxit PDF Editor/Reader via XFA calculate event (CVSS 5.5, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-5941](https://cve.now/CVE-2026-5941.md): Foxit PDF Editor/Reader AcroForm Signature Remote Code Execution Vulnerability (CVSS 7.8, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-7117](https://cve.now/CVE-2026-7117.md): code-projects Employee Management System approve.php sql injection (CVSS 5.3, code-projects Employee Management System)
- [CVE-2026-7116](https://cve.now/CVE-2026-7116.md): code-projects Employee Management System mark.php cross site scripting (CVSS 5.3, code-projects Employee Management System)
- [CVE-2026-42410](https://cve.now/CVE-2026-42410.md): WordPress TheGem theme Elements (for Elementor) plugin \< 5.12.1.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, CodexThemes TheGem Theme Elements)
- [CVE-2026-22337](https://cve.now/CVE-2026-22337.md): WordPress Directorist Social Login plugin \< 2.1.4 - Privilege Escalation vulnerability (CVSS 9.8, Directorist Social Login)
- [CVE-2026-7115](https://cve.now/CVE-2026-7115.md): code-projects Employee Management System delete.php sql injection (CVSS 5.3, code-projects Employee Management System)
- [CVE-2026-22336](https://cve.now/CVE-2026-22336.md): WordPress Directorist Booking plugin \< 3.0.2 - SQL Injection vulnerability (CVSS 9.3, Directorist Booking)
- [CVE-2026-7114](https://cve.now/CVE-2026-7114.md): code-projects Employee Management System edit.php sql injection (CVSS 5.3, code-projects Employee Management System)
- [CVE-2026-7113](https://cve.now/CVE-2026-7113.md): NousResearch hermes-agent Webhooks Endpoint webhook.py missing authentication (CVSS 6.3, NousResearch hermes-agent)
- [CVE-2026-27172](https://cve.now/CVE-2026-27172.md): Apache Camel: Unsafe Java deserialization in camel-consul ConsulRegistry allows arbitrary code execution via malicious values read from the Consul KV store (CVSS 8.8, Apache Software Foundation Apache Camel · org.apache.camel:…)
- [CVE-2026-33453](https://cve.now/CVE-2026-33453.md): Apache Camel: CoAP URI Query Parameter to Exchange Header Injection in camel-coap Allows Single-Packet Pre-Auth Remote Code Execution (CVSS 10.0, Apache Software Foundation Apache Camel · org.apache.camel:…)
- [CVE-2026-7112](https://cve.now/CVE-2026-7112.md): NousResearch hermes-agent API\_SERVER\_KEY api\_server.py \_check\_auth improper authentication (CVSS 6.3, NousResearch hermes-agent)
- [CVE-2026-33454](https://cve.now/CVE-2026-33454.md): Apache Camel: Inbound Header Filter Missing in MailHeaderFilterStrategy Allows Remote Code Execution via MIME Header Injection (CVE-2025-30177 Variant) (CVSS 9.4, Apache Software Foundation Apache Camel · org.apache.camel:…)
- [CVE-2026-40022](https://cve.now/CVE-2026-40022.md): Apache Camel Platform HTTP Main: Authentication Bypass on Non-Root Context Paths in camel main runtime (CVSS 8.2, Apache Software Foundation Apache Camel Platform HTTP Main…)
- [CVE-2026-40858](https://cve.now/CVE-2026-40858.md): Apache Camel: Camel-Infinispan: Unsafe Deserialization in Remote Aggregation Repository (CVSS 8.8, Apache Software Foundation Apache Camel · org.apache.camel:…)
- [CVE-2026-7110](https://cve.now/CVE-2026-7110.md): code-projects Invoice System in Laravel item cross site scripting (CVSS 5.1, code-projects Invoice System in Laravel)
- [CVE-2026-41409](https://cve.now/CVE-2026-41409.md): Apache MINA: CWE-502 Deserialization of Untrusted Data (CVSS 9.8, Apache Software Foundation Apache MINA · org.apache.mina:mi…)
- [CVE-2026-7109](https://cve.now/CVE-2026-7109.md): code-projects Invoice System in Laravel API Endpoint item improper authorization (CVSS 6.9, code-projects Invoice System in Laravel)
- [CVE-2026-7108](https://cve.now/CVE-2026-7108.md): code-projects Invoice System in Laravel cross-site request forgery (CVSS 5.3, code-projects Invoice System in Laravel)
- [CVE-2026-41635](https://cve.now/CVE-2026-41635.md): Apache MINA: AbstractIoBuffer.resolveClass() null-clazz Branch Skips acceptMatchers Filter — Full Object Deserialization RCE (CVSS 9.8, Apache Software Foundation Apache MINA · org.apache.mina:mi…)
- [CVE-2026-7107](https://cve.now/CVE-2026-7107.md): code-projects Invoice System in Laravel company unrestricted upload (CVSS 5.3, code-projects Invoice System in Laravel)
- [CVE-2026-7103](https://cve.now/CVE-2026-7103.md): code-projects Chat System MD5 Hash update\_user.php weak hash (CVSS 6.3, code-projects Chat System)
- [CVE-2026-42379](https://cve.now/CVE-2026-42379.md): WordPress Templately plugin \<= 3.6.1 - Sensitive Data Exposure vulnerability (CVSS 7.7, WPDeveloper Templately)
- [CVE-2026-40453](https://cve.now/CVE-2026-40453.md): Apache Camel JMS, Apache Camel CoAP, Apache Camel Google PubSub: Incomplete fix for CVE-2025-27636 in non-HTTP HeaderFilterStrategies (camel-jms, camel-sjms, camel-coap, camel-google-pubsub) allows case-variant header injection (CVSS 9.9, Apache Software Foundation Apache Camel JMS · Apache Sof… +5)
- [CVE-2026-7102](https://cve.now/CVE-2026-7102.md): Tenda F456 httpd WriteFacMac FromWriteFacMac command injection (CVSS 5.3, Tenda F456)
- [CVE-2026-40860](https://cve.now/CVE-2026-40860.md): Apache Camel: Unsafe Deserialization of JMS ObjectMessage in camel-jms, camel-sjms, camel-sjms2 and camel-amqp (CVSS 9.8, Apache Software Foundation Apache Camel · org.apache.cam… +5)
- [CVE-2026-7101](https://cve.now/CVE-2026-7101.md): Tenda F456 httpd WrlclientSet fromWrlclientSet buffer overflow (CVSS 8.7, Tenda F456)
- [CVE-2026-40048](https://cve.now/CVE-2026-40048.md): Apache Camel PQC: Unsafe Deserialization from FileBasedKeyLifecycleManager (CVSS 7.8, Apache Software Foundation Apache Camel PQC · org.apache.ca…)
- [CVE-2026-40473](https://cve.now/CVE-2026-40473.md): Apache Camel Mina: Unsafe Deserialization in MinaConverter.toObjectInput() via TCP/UDP (CVSS 8.8, Apache Software Foundation Apache Camel Mina · org.apache.c…)
- [CVE-2026-7100](https://cve.now/CVE-2026-7100.md): Tenda F456 httpd Natlimit fromNatlimitof buffer overflow (CVSS 8.7, Tenda F456)
- [CVE-2026-7099](https://cve.now/CVE-2026-7099.md): Tenda F456 httpd QuickIndex formQuickIndex buffer overflow (CVSS 8.7, Tenda F456)
- [CVE-2026-7098](https://cve.now/CVE-2026-7098.md): Tenda F456 httpd DhcpListClient fromDhcpListClient buffer overflow (CVSS 8.7, Tenda F456)
- [CVE-2026-7097](https://cve.now/CVE-2026-7097.md): Tenda F456 httpd webExcptypemanFilter fromwebExcptypemanFilter buffer overflow (CVSS 8.7, Tenda F456)
- [CVE-2026-7096](https://cve.now/CVE-2026-7096.md): Tenda HG3 formgponConf os command injection (CVSS 8.7, Tenda HG3)
- [CVE-2026-22077](https://cve.now/CVE-2026-22077.md): Sensitive Information Disclosure Vulnerability Caused by Trusted Domain Bypass in OPPO Wallet (CVSS 5.6, OPPO Wallet APP)
- [CVE-2026-7095](https://cve.now/CVE-2026-7095.md): code-projects Employee Management System edit.php cross site scripting (CVSS 5.3, code-projects Employee Management System)
- [CVE-2026-7094](https://cve.now/CVE-2026-7094.md): ShadowCloneLabs GlutamateMCPServers puppeteer\_navigate index.ts server-side request forgery (CVSS 6.9, ShadowCloneLabs GlutamateMCPServers)
- [CVE-2026-3008](https://cve.now/CVE-2026-3008.md): Vulnerability in Notepad++ (CVSS 6.6, Notepad++)
- [CVE-2026-7093](https://cve.now/CVE-2026-7093.md): code-projects Invoice System in Laravel Invoice Endpoint invoice improper authorization (CVSS 5.3, code-projects Invoice System in Laravel)
- [CVE-2026-42371](https://cve.now/CVE-2026-42371.md): uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes. (CVSS 5.1, uriparser)
- [CVE-2026-7092](https://cve.now/CVE-2026-7092.md): code-projects Invoice System in Laravel Profile profile improper authorization (CVSS 5.3, code-projects Invoice System in Laravel)
- [CVE-2026-7091](https://cve.now/CVE-2026-7091.md): code-projects Invoice System in Laravel User Management user improper authorization (CVSS 5.3, code-projects Invoice System in Laravel)
- [CVE-2026-7090](https://cve.now/CVE-2026-7090.md): code-projects Chat System send\_message.php cross site scripting (CVSS 4.8, code-projects Chat System)
- [CVE-2026-7089](https://cve.now/CVE-2026-7089.md): code-projects Home Service System Appointment Booking booking.php cross site scripting (CVSS 5.3, code-projects Home Service System)
- [CVE-2026-7088](https://cve.now/CVE-2026-7088.md): SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection (CVSS 6.9, SourceCodester Pharmacy Sales and Inventory System)
- [CVE-2026-7087](https://cve.now/CVE-2026-7087.md): SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection (CVSS 6.9, SourceCodester Pharmacy Sales and Inventory System)
- [CVE-2026-7086](https://cve.now/CVE-2026-7086.md): HBAI-Ltd Toonflow-app Storyboard Export replaceUrl.ts updateStoryboardUrl path traversal (CVSS 5.3, HBAI-Ltd Toonflow-app)
- [CVE-2026-7085](https://cve.now/CVE-2026-7085.md): HBAI-Ltd Toonflow-app downloadApp Endpoint downloadApp.ts z.url path traversal (CVSS 2.3, HBAI-Ltd Toonflow-app)
- [CVE-2026-7084](https://cve.now/CVE-2026-7084.md): HBAI-Ltd Toonflow-app getCodeByLink Endpoint getCodeByLink.ts fetch server-side request forgery (CVSS 5.3, HBAI-Ltd Toonflow-app)
- [CVE-2026-7083](https://cve.now/CVE-2026-7083.md): likeadmin-likeshop likeadmin\_php dataTable Admin API DataTableLists.php queryResult sql injection (CVSS 5.1, likeadmin-likeshop likeadmin\_php)
- [CVE-2026-7082](https://cve.now/CVE-2026-7082.md): Tenda F456 httpd WrlExtraSet formWrlExtraSet buffer overflow (CVSS 8.7, Tenda F456)
- [CVE-2026-7081](https://cve.now/CVE-2026-7081.md): Tenda F456 httpd GstDhcpSetSer fromGstDhcpSetSer buffer overflow (CVSS 8.7, Tenda F456)
- [CVE-2026-3868](https://cve.now/CVE-2026-3868.md): An improper handling of the length parameter inconsistency vulnerability has been identified in Moxa’s Secure Router. (CVSS 8.7, Moxa EDR-8010 Series · Moxa EDR-G9010 Series)
- [CVE-2026-3867](https://cve.now/CVE-2026-3867.md): An improper ownership management vulnerability has been identified in Moxa’s Secure Router. (CVSS 6.0, Moxa EDR-8010 Series · Moxa EDR-G9010 Series)
- [CVE-2026-7080](https://cve.now/CVE-2026-7080.md): Tenda F456 httpd PPTPUserSetting fromPPTPUserSetting buffer overflow (CVSS 8.7, Tenda F456)
- [CVE-2026-3006](https://cve.now/CVE-2026-3006.md): Race Condition Vulnerability (CVSS 7.0, WinFSP)
- [CVE-2026-7079](https://cve.now/CVE-2026-7079.md): Tenda F456 httpd AdvSetWan fromAdvSetWan buffer overflow (CVSS 8.7, Tenda F456)
- [CVE-2026-7106](https://cve.now/CVE-2026-7106.md): Highland Software Custom Role Manager \<= 1.0.0 - Authenticated (Subscriber+) Privilege Escalation (CVSS 8.8, jgrodgers Highland Software Custom Role Manager)
- [CVE-2026-7078](https://cve.now/CVE-2026-7078.md): Tenda F456 httpd SetIpBind fromSetIpBind buffer overflow (CVSS 8.7, Tenda F456)
- [CVE-2026-7077](https://cve.now/CVE-2026-7077.md): itsourcecode Courier Management System edit\_parcel.php sql injection (CVSS 6.9, itsourcecode Courier Management System)
- [CVE-2026-7076](https://cve.now/CVE-2026-7076.md): itsourcecode Courier Management System edit\_branch.php sql injection (CVSS 6.9, itsourcecode Courier Management System)
- [CVE-2026-7075](https://cve.now/CVE-2026-7075.md): itsourcecode Construction Management System locations.php sql injection (CVSS 6.9, itsourcecode Construction Management System)
- [CVE-2026-7074](https://cve.now/CVE-2026-7074.md): itsourcecode Construction Management System execute1.php sql injection (CVSS 6.9, itsourcecode Construction Management System)
- [CVE-2026-7073](https://cve.now/CVE-2026-7073.md): itsourcecode Construction Management System execute.php sql injection (CVSS 6.9, itsourcecode Construction Management System)
- [CVE-2026-7072](https://cve.now/CVE-2026-7072.md): CodePanda Source canteen\_management\_system login.php sql injection (CVSS 6.9, CodePanda Source canteen\_management\_system)
- [CVE-2026-7071](https://cve.now/CVE-2026-7071.md): CodeAstro Online Job Portal user-cvs file information disclosure (CVSS 6.9, CodeAstro Online Job Portal)
- [CVE-2026-7070](https://cve.now/CVE-2026-7070.md): code-projects Inventory Management System Login sql injection (CVSS 6.9, code-projects Inventory Management System)
- [CVE-2026-33566](https://cve.now/CVE-2026-33566.md): There is a cypher injection issue in LogonTracer prior to v2.0.0. (CVSS 4.3, Japan Computer Emergency Response Team Coordination Center…)
- [CVE-2026-33277](https://cve.now/CVE-2026-33277.md): An OS command Injection issue exists in LogonTracer prior to v2.0.0. (CVSS 8.8, Japan Computer Emergency Response Team Coordination Center…)
- [CVE-2026-7069](https://cve.now/CVE-2026-7069.md): D-Link DIR-825 miniupnpd upnpsoap.c AddPortMapping buffer overflow (CVSS 8.6, D-Link DIR-825)
- [CVE-2021-36438](https://cve.now/CVE-2021-36438.md): SQL Injection vulnerability exists in Sourcecodester Online Job Portal phppdo 1.0 ivia the category parameter in /jobportal/index.php. (CVSS 6.5)
- [CVE-2024-46636](https://cve.now/CVE-2024-46636.md): NASA Earth Observing System Data and Information System (EOSDIS) MODAPS v8.1 was discovered to contain a SQL injection vulnerability in the (CVSS 9.4)
- [CVE-2025-69428](https://cve.now/CVE-2025-69428.md): An issue in Pro-Bit before v1.77.4 allows unauthenticated attackers to directly access sensitive directory and its subdirectories. (CVSS 7.5)
- [CVE-2025-69689](https://cve.now/CVE-2025-69689.md): The Fan Control application V251 contains an improper privilege handling vulnerability in its Open File Dialog. (CVSS 8.8)
- [CVE-2026-29971](https://cve.now/CVE-2026-29971.md): A reflected cross-site scripting (XSS) vulnerability exists in WebFileSys version before 2.32.0 and fixed in v.2.32.0. (CVSS 6.1)
- [CVE-2026-30346](https://cve.now/CVE-2026-30346.md): An open redirect in the /api/google/authorize endpoint of hunvreus DevPush v0.3.2 allows attackers to redirect users to malicious sites via (CVSS 4.3)
- [CVE-2026-30350](https://cve.now/CVE-2026-30350.md): An issue in the /store/items/search endpoint of Agent Protocol server commit e9a89f allows attackers to cause a Denial of Service (DoS) via (CVSS 7.5)
- [CVE-2026-30351](https://cve.now/CVE-2026-30351.md): A path traversal vulnerability in the UI/static component of leonvanzyl autocoder commit 79d02a allows attackers to read arbitrary files via (CVSS 7.5)
- [CVE-2026-30352](https://cve.now/CVE-2026-30352.md): A remote code execution (RCE) vulnerability in the /devserver/start endpoint of leonvanzyl autocoder commit 79d02a allows attackers to execu (CVSS 9.8)
- [CVE-2026-30462](https://cve.now/CVE-2026-30462.md): A path traversal vulnerability in the Blocks module of Daylight Studio FuelCMS v1.5.2 allows attackers to execute a directory traversal. (CVSS 4.3)
- [CVE-2026-31255](https://cve.now/CVE-2026-31255.md): A command injection vulnerability exists in Tenda AC18 V15.03.05.05\_multi. (CVSS 5.4)
- [CVE-2026-31256](https://cve.now/CVE-2026-31256.md): A null pointer dereference vulnerability exists in the RTSP service of the MERCURY MIPC252W 1.0.5 Build 230306 Rel.79931n. (CVSS 7.5)
- [CVE-2026-35901](https://cve.now/CVE-2026-35901.md): A handling issue in the RTSP service of the Mercury MIPC252W 1.0.5 Build 230306 Rel.79931n allows an authenticated attacker to trigger sessi (CVSS 4.4)
- [CVE-2026-35902](https://cve.now/CVE-2026-35902.md): The RTSP service of MERCURY IP camera MIPC252W 1.0.5 Build 230306 has an issue handling failed Digest authentication attempts. (CVSS 6.2)
- [CVE-2026-35903](https://cve.now/CVE-2026-35903.md): MERCURY MIPC252W IP camera 1.0.5 Build 230306 Rel.79931n contains an improper authentication vulnerability in the RTSP service. (CVSS 9.8)
- [CVE-2026-38934](https://cve.now/CVE-2026-38934.md): Cross Site Request Forgery vulnerability in diskoverdata diskover-community v.2.3.5. (CVSS 8.8)
- [CVE-2026-38935](https://cve.now/CVE-2026-38935.md): A reflected cross-site scripting (XSS) vulnerability exists in diskover-community \<= 2.3.5 in public/view.php via the doctype parameter (CVSS 6.1)
- [CVE-2026-38936](https://cve.now/CVE-2026-38936.md): A reflected cross-site scripting (XSS) vulnerability exists in diskover-community \<= 2.3.5 in public/selectindices.php via the namecontains (CVSS 6.1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-04-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.