CVEs published April 28, 2026
221 CVEs were published on April 28, 2026: 18 critical, 81 high.
- Published
- 221
- Critical
- 18
- High
- 81
- Medium
- 108
- Low
- 14
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 125
Most affected products
- OpenClaw
- 53
- Google Chrome
- 30
- SourceCodester Pizzafy Ecommerce System
- 15
- Totolink A8000RU
- 7
- Apache Software Foundation Apache Thrift
- 5
- Mozilla Firefox · Mozilla Thunderbird
- 5
- SourceCodester Pharmacy Sales and Inventory System
- 4
- BinSoft mpGabinet · BinSoft mpFirma +5
- 3
- Hanwha Vision QND-8080R
- 3
- MphRx Minerva
- 3
Critical 18
- CVE-2026-7333Use after free in GPU in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially perform a sandbox escape via a craftGoogle Chrome
- CVE-2026-41446WattBox 800 & 820 Series < 2.10.0.0 RCE via Diagnostic EndpointsSnap One WattBox
- CVE-2026-41386OpenClaw < 2026.3.22 - Privilege Escalation via Unbound Bootstrap Setup CodesOpenClaw
- CVE-2026-24178NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authentication system where an unauthenticated attacker may cauNVIDIA FLARE SDK · nvflare
- CVE-2026-3893Carlson Software VASCO-B GNSS Receiver Missing Authentication for Critical FunctionCarlson Software VASCO-B GNSS Receiver
- CVE-2026-41873Pony Mail: Admin account takeover via request smugglingApache Software Foundation Pony Mail
- CVE-2026-7321Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-27760OpenCATS PHP Code Injection via installer AJAX endpointOpenCATS
- CVE-2026-5779Multiple vulnerabilities in MphRx's MinervaMphRx Minerva
- CVE-2026-7248D-Link DI-8100 CGI Endpoint tgfile.htm tgfile_htm buffer overflowD-Link DI-8100
- CVE-2026-7244Totolink A8000RU CGI cstecgi.cgi setWiFiEasyGuestCfg os command injectionTotolink A8000RU
- CVE-2026-7243Totolink A8000RU CGI cstecgi.cgi setRadvdCfg os command injectionTotolink A8000RU
- CVE-2026-7242Totolink A8000RU CGI cstecgi.cgi setOpenVpnClientCfg os command injectionTotolink A8000RU
- CVE-2026-7241Totolink A8000RU CGI cstecgi.cgi setWiFiBasicCfg os command injectionTotolink A8000RU
- CVE-2026-7240Totolink A8000RU CGI cstecgi.cgi setVpnAccountCfg os command injectionTotolink A8000RU
- CVE-2026-7204Totolink A8000RU CGI cstecgi.cgi setPptpServerCfg os command injectionTotolink A8000RU
- CVE-2026-7203Totolink A8000RU CGI cstecgi.cgi setUrlFilterRules os command injectionTotolink A8000RU
- CVE-2025-60889Insecure deserialization of untrusted input in StellarGroup HPX 1.11.0 under certain conditions may allow attackers to execute arbitrary cod
High 81
- CVE-2026-40560Starman versions before 0.4018 for Perl allows HTTP Request Smuggling via Improper Header PrecedenceMIYAGAWA Starman
- CVE-2026-7355Use after free in Media in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a Google Chrome
- CVE-2026-7339Heap buffer overflow in WebRTC in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially exploit heap corruption viaGoogle Chrome
- CVE-2026-7341Use after free in WebRTC in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via aGoogle Chrome
- CVE-2026-7342Use after free in WebView in Google Chrome on Android prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sGoogle Chrome
- CVE-2026-7338Use after free in Cast in Google Chrome prior to 147.0.7727.138 allowed an attacker on the local network segment to potentially exploit heapGoogle Chrome
- CVE-2026-7345Insufficient validation of untrusted input in Feedback in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromiseGoogle Chrome
- CVE-2026-7346Inappropriate implementation in Tint in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to perform out of bounds memory acceGoogle Chrome
- CVE-2026-7347Use after free in Chromoting in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code via malicious netwGoogle Chrome
- CVE-2026-7337Type Confusion in V8 in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a craGoogle Chrome
- CVE-2026-7336Use after free in WebRTC in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via aGoogle Chrome
- CVE-2026-7335Use after free in media in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a Google Chrome
- CVE-2026-7348Use after free in Codecs in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via aGoogle Chrome
- CVE-2026-7349Use after free in Cast in Google Chrome prior to 147.0.7727.138 allowed an attacker on the local network segment to execute arbitrary code iGoogle Chrome
- CVE-2026-7350Use after free in WebMIDI in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potGoogle Chrome
- CVE-2026-7352Use after free in Media in Google Chrome on Android prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer proceGoogle Chrome
- CVE-2026-7353Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to Google Chrome
- CVE-2026-7354Out of bounds read and write in Angle in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially perform a sandbox esGoogle Chrome
- CVE-2026-7356Use after free in Navigation in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code via a crafted HTMLGoogle Chrome
- CVE-2026-7357Use after free in GPU in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentiGoogle Chrome
- CVE-2026-7334Use after free in Views in Google Chrome on Mac prior to 147.0.7727.138 allowed a remote attacker to potentially exploit heap corruption viaGoogle Chrome
- CVE-2026-7358Use after free in Animation in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox viGoogle Chrome
- CVE-2026-7359Use after free in ANGLE in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potenGoogle Chrome
- CVE-2026-7343Use after free in Views in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer proceGoogle Chrome
- CVE-2026-7344Use after free in Accessibility in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderGoogle Chrome
- CVE-2026-7361Use after free in iOS in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially exploit heap corruption via a crafteGoogle Chrome
- CVE-2026-7363Use after free in Canvas in Google Chrome on Linux, ChromeOS prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code insGoogle Chrome
- CVE-2026-41649Outline has IDOR in document share creation that allows unauthorized access to private documents across workspacesoutline
- CVE-2026-42432OpenClaw < 2026.4.8 - Command Escalation via Node Pairing Reconnect BypassOpenClaw
- CVE-2026-42431OpenClaw < 2026.4.8 - Persistent Profile Mutation via node.invoke(browser.proxy) BypassOpenClaw
- CVE-2026-42428OpenClaw < 2026.4.8 - Missing Integrity Verification in Package DownloadsOpenClaw
- CVE-2026-42426OpenClaw < 2026.4.8 - Improper Authorization in node.pair.approve via operator.write ScopeOpenClaw
- CVE-2026-42423OpenClaw < 2026.4.8 - strictInlineEval Approval Boundary Bypass via Approval-Timeout FallbackOpenClaw
- CVE-2026-42422OpenClaw < 2026.4.8 - Role Bypass in device.token.rotate FunctionOpenClaw
- CVE-2026-41405OpenClaw < 2026.3.31 - Resource Exhaustion via Unauthenticated MS Teams Webhook Body ParsingOpenClaw
- CVE-2026-41404OpenClaw < 2026.3.31 - Operator Admin Privilege Escalation via Trusted-Proxy AuthenticationOpenClaw
- CVE-2026-41399OpenClaw < 2026.3.28 - Denial of Service via Unbounded Pre-auth WebSocket UpgradesOpenClaw
- CVE-2026-41397OpenClaw < 2026.3.31 - Sandbox Escape via Unrestricted File Sync and Symlink TraversalOpenClaw
- CVE-2026-41396OpenClaw < 2026.3.31 - Environment Variable Override of Plugin Trust RootOpenClaw
- CVE-2026-41395OpenClaw < 2026.3.28 - Webhook Replay via Query Parameter Reordering in Plivo V3OpenClaw
- CVE-2026-41394OpenClaw < 2026.3.31 - Unauthorized Operator Scope Access in Unauthenticated Plugin-Auth RoutesOpenClaw
- CVE-2026-41390OpenClaw < 2026.3.28 - Exec Allowlist Bypass via Unregistered /usr/bin/script WrapperOpenClaw
- CVE-2026-41387OpenClaw < 2026.3.22 - Supply Chain Redirection via Incomplete Host Environment SanitizationOpenClaw
- CVE-2026-41385OpenClaw < 2026.3.31 - Nostr Private Key Exposure via config.get Redaction BypassOpenClaw
- CVE-2026-41384OpenClaw < 2026.3.24 - Environment Variable Injection via Workspace Config in CLI BackendOpenClaw
- CVE-2026-41380OpenClaw < 2026.3.28 - Arbitrary Execution Allowlist via Wrapper Carrier ExecutablesOpenClaw
- CVE-2026-41379OpenClaw < 2026.3.28 - Privilege Escalation via chat.send to Admin-Class Talk Voice ConfigOpenClaw
- CVE-2026-41378OpenClaw < 2026.3.31 - Privilege Escalation to Remote Code Execution via Unrestricted node.event Agent DispatchOpenClaw
- CVE-2026-41375OpenClaw < 2026.3.28 - Authorization Bypass in /phone arm and /phone disarm EndpointsOpenClaw
- CVE-2026-24222NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, where a remote attacker could cause improper aNVIDIA NemoClaw
- CVE-2026-24186NVIDIA FLARE SDK contains a vulnerability in FOBS, where an attacker may cause deserialization of untrusted data by sending a malicious FOBNVIDIA FLARE SDK
- CVE-2026-7289D-Link DIR-825M formWanConfigSetup sub_414BA8 buffer overflowD-Link DIR-825M
- CVE-2026-7288D-Link DIR-825M formVpnConfigSetup sub_4151FC buffer overflowD-Link DIR-825M
- CVE-2026-7324Memory safety bugs fixed in Thunderbird 150.0.1Mozilla Firefox · Mozilla Thunderbird
- CVE-2026-7323Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1Mozilla Firefox · Mozilla Thunderbird
- CVE-2026-7322Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1Mozilla Firefox · Mozilla Thunderbird
- CVE-2026-7320Information disclosure due to incorrect boundary conditions in the Audio/Video componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-40551Use of Client-Side Authentication in multiple BinSoft productsBinSoft mpGabinet · BinSoft mpFirma +5
- CVE-2026-5435Potential buffer overflow in ns_sprintrrf TSIG handling pathThe GNU C Library glibc
- CVE-2026-5781Multiple vulnerabilities in MphRx's MinervaMphRx Minerva
- CVE-2026-5780Multiple vulnerabilities in MphRx's MinervaMphRx Minerva
- CVE-2026-3323VEGA: Privilege escalation through unsecured configuration interface in VEGAPULS devicesVEGA Grieshaber VEGAPULS 6X Two-wire PROFINET, Modbus TCP,…
- CVE-2026-7280eMPIA Technology｜AVACAST - Unquoted Service PatheMPIA Technology AVACAST
- CVE-2026-7279eMPIA Technology｜AVACAST - DLL HijackingeMPIA Technology AVACAST
- CVE-2026-41636Apache Thrift: Node.js skip() recursionApache Software Foundation Apache Thrift · thrift
- CVE-2026-41605Apache Thrift: Swift Compact Protocol integer overflowApache Software Foundation Apache Thrift
- CVE-2026-41604Apache Thrift: Swift Range crash in skip()Apache Software Foundation Apache Thrift
- CVE-2026-41602Apache Thrift: Go TFramedTransport uint32 overflowApache Software Foundation Apache Thrift · github.com/apach…
- CVE-2025-48431Apache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.Apache Software Foundation Apache Thrift
- CVE-2026-7247D-Link DI-8100 File Extension file_exten.asp file_exten_asp buffer overflowD-Link DI-8100
- CVE-2026-40978SQL injection vulnerability in Spring AI's `CosmosDBVectorStore` allows attackers to execute arbitrary SQL queries via crafted document IDs.Spring AI · org.springframework.ai:spring-ai-azure-cosmos-d…
- CVE-2024-54013Authentication BypassHanwha Vision QND-8080R
- CVE-2024-54012Command InjectionHanwha Vision QND-8080R
- CVE-2026-40967In Spring AI, various FilterExpressionConverter implementations accept a filter expression object and translate them to specific vector storSpring AI · org.springframework.ai:spring-ai-vector-store
- CVE-2026-7219Totolink N300RT formIpQoS buffer overflowTotolink N300RT
- CVE-2026-7218Totolink N300RT libapmib.so formWsc is_cmd_string_valid buffer overflowTotolink N300RT
- CVE-2026-1460A post-authentication command injection vulnerability in the “DomainName” parameter of the DHCP configuration file in Zyxel DX3301-T0 and EXZyxel DX3301-T0 firmware · Zyxel EX3301-T0 firmware
- CVE-2025-67223The Aranda File Server (AFS) component in Aranda Software Aranda Service Desk before 8.3.12 stores daily activity logs with predictable name
- CVE-2026-38651Authentication Bypass vulnerability exists in Netmaker versions prior to 1.5.0.github.com/gravitl/netmaker
- CVE-2026-38949Cross-Site Scripting (XSS) vulnerability exists in HTMLy version 3.1.1 in the content creation functionality at the /add/content?type=image
- CVE-2026-42167mod_sql in ProFTPD before 1.3.9a allows remote attackers to execute arbitrary code via a username, in scenarios where there is logging of USProFTPD
Medium, low and unrated 122
- CVE-2026-7340Integer overflow in ANGLE in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker to perform an out of bounds memory rGoogle Chrome
- CVE-2026-7351Race in MHTML in Google Chrome prior to 147.0.7727.138 allowed an attacker who convinced a user to install a malicious extension to leak croGoogle Chrome
- CVE-2026-7360Insufficient validation of untrusted input.Google Chrome
- CVE-2026-33467Improper Verification of Cryptographic Signature in Elastic Package Registry Leading to Package Integrity BypassElastic Package Registry · github.com/elastic/package-regis…
- CVE-2026-7319elinsky execution-system-mcp add_action Tool server.py _get_context_file_path path traversalelinsky execution-system-mcp
- CVE-2026-7318elie mcp-project research_server.py search_papers path traversalelie mcp-project
- CVE-2026-7317Grav CMS Cache Value FileCache.php doGet deserializationGrav CMS · getgrav/grav
- CVE-2026-7316eiliyaabedini aider-mcp code_with_ai aider_mcp.py command injectioneiliyaabedini aider-mcp
- CVE-2026-7315eiceblue spire-pdf-mcp-server PDF File server.py get_pdf_path path traversaleiceblue spire-pdf-mcp-server
- CVE-2026-7314eiceblue spire-doc-mcp-server base.py get_doc_path path traversaleiceblue spire-doc-mcp-server
- CVE-2026-7306Xuxueli xxl-job OpenAPI Endpoint OpenApiController.java hard-coded keyXuxueli xxl-job
- CVE-2026-7305Xuxueli xxl-job trigger Endpoint XxlJobServiceImpl.java triggerJob server-side request forgeryXuxueli xxl-job
- CVE-2026-7303Xuxueli xxl-job Execution Log JobLogController.java logDetailCat resource injectionXuxueli xxl-job · com.xuxueli:xxl-job-admin
- CVE-2026-7297SourceCodester Pizzafy Ecommerce System ajax.php save_user cross site scriptingSourceCodester Pizzafy Ecommerce System
- CVE-2026-7296SourceCodester Pizzafy Ecommerce System ajax.php save_order cross site scriptingSourceCodester Pizzafy Ecommerce System
- CVE-2026-7295SourceCodester Pizzafy Ecommerce System ajax.php save_menu cross site scriptingSourceCodester Pizzafy Ecommerce System
- CVE-2026-42430OpenClaw < 2026.4.8 - Strict Browser SSRF Bypass via Playwright Redirect HandlingOpenClaw
- CVE-2026-42429OpenClaw < 2026.4.8 - Privilege Escalation via Gateway Plugin HTTP AuthenticationOpenClaw
- CVE-2026-42427OpenClaw < 2026.4.8 - Remote Code Execution via Build Tool Environment Variable InjectionOpenClaw
- CVE-2026-42424OpenClaw < 2026.4.8 - Local File Exfiltration via Shared Reply MEDIA PathsOpenClaw
- CVE-2026-42421OpenClaw < 2026.4.8 - WebSocket Session Persistence via Shared Gateway Token RotationOpenClaw
- CVE-2026-42420OpenClaw < 2026.4.8 - Improper Base64 Decoding Size ValidationOpenClaw
- CVE-2026-41916OpenClaw < 2026.4.8 - Stale Authentication State via Config ReloadOpenClaw
- CVE-2026-41915OpenClaw < 2026.4.8 - Git Environment Variable Injection via Unfiltered Exec EnvironmentOpenClaw
- CVE-2026-41914OpenClaw < 2026.4.8 - Server-Side Request Forgery in QQ Bot Media Fetch PathsOpenClaw
- CVE-2026-41913OpenClaw < 2026.4.4 - Rate-Limit Bypass via Concurrent Async Authentication AttemptsOpenClaw
- CVE-2026-41912OpenClaw < 2026.4.8 - Server-Side Request Forgery Policy Bypass via Interaction-Triggered NavigationOpenClaw
- CVE-2026-41911OpenClaw < 2026.4.8 - Workspace-Only Filesystem Policy Bypass via docx upload_file/upload_imageOpenClaw
- CVE-2026-41910OpenClaw < 2026.4.8 - Missing Owner-Only Enforcement in /allowlist Cross-Channel WritesOpenClaw
- CVE-2026-41408OpenClaw < 2026.3.31 - Disk Exhaustion via Media Download BypassOpenClaw
- CVE-2026-41407OpenClaw < 2026.4.2 - Timing Side Channel in Shared-Secret ComparisonOpenClaw
- CVE-2026-41406OpenClaw < 2026.3.31 - Sender Allowlist Bypass via Thread History and Quoted MessagesOpenClaw
- CVE-2026-41403OpenClaw < 2026.3.31 - Access Control Bypass via Proxied Remote Request MisclassificationOpenClaw
- CVE-2026-41402OpenClaw < 2026.3.31 - Webhook Replay Cache Cross-Target messageId Scope BypassOpenClaw
- CVE-2026-41400OpenClaw < 2026.3.31 - Resource Consumption via Oversized WebSocket Frames in voice-callOpenClaw
- CVE-2026-41398OpenClaw - Unauthorized Agent Request Dispatch via Untrusted Local-Network Pages in iOS A2UI BridgeOpenClaw
- CVE-2026-41393OpenClaw < 2026.3.31 - Arbitrary DNS Authority Acceptance and Credential Exfiltration via Wide-Area DiscoveryOpenClaw
- CVE-2026-41392OpenClaw < 2026.3.31 - Exec Allowlist Bypass via Shell Init-File OptionsOpenClaw
- CVE-2026-41391OpenClaw < 2026.3.31 - Environment Variable Bypass in Package Index URL HandlingOpenClaw
- CVE-2026-41388OpenClaw < 2026.3.31 - Configuration Rehydration via Empty-Array Revocation HandlingOpenClaw
- CVE-2026-41383OpenClaw < 2026.4.2 - Arbitrary Remote Directory Deletion via Mis-scoped Mirror Mode PathsOpenClaw
- CVE-2026-41382OpenClaw < 2026.3.31 - Discord Voice Ingress Authorization Bypass via Channel and Role Validation GapsOpenClaw
- CVE-2026-41381OpenClaw < 2026.3.31 - Access Control Bypass in Discord Voice Manager via Channel AllowlistOpenClaw
- CVE-2026-41377OpenClaw < 2026.3.31 - Fail-Open Security Scan Bypass in Plugin InstallationOpenClaw
- CVE-2026-41376OpenClaw < 2026.3.31 - Matrix Thread Context Allowlist Bypass via Sender ValidationOpenClaw
- CVE-2026-41374OpenClaw < 2026.3.31 - Resource Consumption via Discord Audio Preflight Before Member AuthorizationOpenClaw
- CVE-2026-41373OpenClaw < 2026.3.31 - Compiler Binary Substitution via Environment Variable Override in Host Execution PolicyOpenClaw
- CVE-2026-7294SourceCodester Pizzafy Ecommerce System index.php save_settings cross site scriptingSourceCodester Pizzafy Ecommerce System
- CVE-2026-24231NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl() SSRF protection component, where an attacker could cause a server-sideNVIDIA NemoClaw
- CVE-2026-24204NVIDIA Flare SDK contains a vulnerability where an Attacker may cause an Improper Input Validation by path traversing.NVIDIA FLARE SDK
- CVE-2026-7293SourceCodester Pizzafy Ecommerce System ajax.php delete_category sql injectionSourceCodester Pizzafy Ecommerce System
- CVE-2026-6807NSA GRASSMARLIN Improper Restriction of XML External Entity ReferenceNSA GRASSMARLIN
- CVE-2026-7292o2oa NodeAgent NodeAgent.java syncFile improper authorizationo2oa
- CVE-2026-7291o2oa URL Fetching FileAction.java FileAction server-side request forgeryo2oa
- CVE-2026-5794Vulnerability in Cryptobox allows an authenticated user to trigger an account lockoutErcom Cryptobox
- CVE-2026-6238Buffer overread in ns_printrrf with corrupted RDATA fieldThe GNU C Library glibc
- CVE-2026-7290JeecgBoot loadDict Endpoint SqlInjectionUtil.java SqlInjectionUtil sql injectionJeecgBoot
- CVE-2026-40969Spring gRPC AuthenticationException message reflected to remote clientSpring gRPC · org.springframework.grpc:spring-grpc
- CVE-2026-7283SourceCodester Pharmacy Sales and Inventory System ajax.php save_expired sql injectionSourceCodester Pharmacy Sales and Inventory System
- CVE-2026-40968Spring gRPC SecurityContext leaks across requests on authorization failureSpring gRPC · org.springframework.grpc:spring-grpc
- CVE-2026-7282SourceCodester Pharmacy Sales and Inventory System ajax.php delete_expired sql injectionSourceCodester Pharmacy Sales and Inventory System
- CVE-2026-7281SourceCodester Pharmacy Sales and Inventory System index.php supplier cross site scriptingSourceCodester Pharmacy Sales and Inventory System
- CVE-2026-40552Remote Code Execution in multiple BinSoft productsBinSoft mpGabinet · BinSoft mpFirma +5
- CVE-2026-40550Privilege Escalation in multiple BinSoft productsBinSoft mpGabinet · BinSoft mpFirma +5
- CVE-2026-6706Improper access control in the vault documentation feature in Devolutions Server allows an authenticated attacker to read documentation coDevolutions Server
- CVE-2026-5944Cisco Intersight Device Connector for Nutanix Prism Central Unauthenticated API AccessNutanix Cisco Intersight Device Connector for Prism Central
- CVE-2026-7272WilliamCloudQi matlab-mcp-server MCP index.ts execute_matlab_code path traversalWilliamCloudQi matlab-mcp-server
- CVE-2026-7309Openshift-controller-manager: openshift container platform: information disclosure via environment variable injectionRed Hat OpenShift Container Platform
- CVE-2026-7271DV0x creative-ad-agent creative-ad-agent-server sdk-server.ts path traversalDV0x creative-ad-agent
- CVE-2026-7269SourceCodester Pharmacy Sales and Inventory System index.php cross site scriptingSourceCodester Pharmacy Sales and Inventory System
- CVE-2026-7268SourceCodester Pizzafy Ecommerce System ajax.php save_category sql injectionSourceCodester Pizzafy Ecommerce System
- CVE-2026-7267SourceCodester Pizzafy Ecommerce System view_prod.php sql injectionSourceCodester Pizzafy Ecommerce System
- CVE-2026-7266SourceCodester Pizzafy Ecommerce System ajax.php save_order sql injectionSourceCodester Pizzafy Ecommerce System
- CVE-2026-7265SourceCodester Pizzafy Ecommerce System index.php category sql injectionSourceCodester Pizzafy Ecommerce System
- CVE-2026-7264SourceCodester Pizzafy Ecommerce System ajax.php get_cart_items sql injectionSourceCodester Pizzafy Ecommerce System
- CVE-2026-41607Apache Thrift: C++ JSON OOB readApache Software Foundation Apache Thrift
- CVE-2026-41606Apache Thrift: c_glib dispatch stack overflowApache Software Foundation Apache Thrift
- CVE-2025-10539Improper TLS Certificate Validation RCE via Malicious Update in DeskTime Time Tracking AppDeskTime Time Tracking App
- CVE-2026-40980In Spring AI, a malicious PDF file can be crafted that triggers the allocation of unreasonable amounts of memory when handled by `ForkPDFLaySpring AI · org.springframework.ai:spring-ai-pdf-document-r…
- CVE-2026-40979In Spring AI, having access to a shared environment can expose the ONNX model used by the application.Spring AI · org.springframework.ai:spring-ai-transformers
- CVE-2026-7238code-projects Online Music Site AdminUpdateAlbum.php unrestricted uploadcode-projects Online Music Site
- CVE-2024-54011Missing Error/Exception HandlingHanwha Vision QND-8080R
- CVE-2026-4805Woostify <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lity.js Library via data-lity Attribute in Custom HTML Blockduongancol Woostify
- CVE-2026-4911Booking Package <= 1.7.06 - Unauthenticated Price Manipulation via 'amount' Parametermasaakitanaka Booking Package
- CVE-2026-7237AgiFlow scaffold-mcp write-to-file Tool index.ts path traversalAgiFlow scaffold-mcp
- CVE-2026-40966VectorStoreChatMemoryAdvisor conversation scoping can lead to cross-tenant memory exfiltrationVMware Spring AI · org.springframework.ai:spring-ai-advisor…
- CVE-2026-7235ErlichLiu claude-agent-sdk-master route.ts path traversalErlichLiu claude-agent-sdk-master
- CVE-2026-7234BrowserOperator browser-operator-core server.js startsWith path traversalBrowserOperator browser-operator-core
- CVE-2026-7233Artifex MuPDF CFF Index subset-cff.c fz_subset_cff_for_gids out-of-boundsArtifex MuPDF
- CVE-2026-5306Check & Log Email < 2.0.13 - Unauthenticated Stored XSSCheck & Log Email
- CVE-2026-7230SourceCodester Safety Anger Pad cross site scriptingSourceCodester Safety Anger Pad
- CVE-2026-7229code-projects Coaching Management System POST reply.php sql injectioncode-projects Coaching Management System
- CVE-2026-7228SourceCodester Pizzafy Ecommerce System ajax.php get_cart_count sql injectionSourceCodester Pizzafy Ecommerce System
- CVE-2026-7227SourceCodester Pizzafy Ecommerce System ajax.php login sql injectionSourceCodester Pizzafy Ecommerce System
- CVE-2026-42510OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface.OpenStack Ironic · ironic
- CVE-2026-7226SourceCodester Pizzafy Ecommerce System ajax.php login2 sql injectionSourceCodester Pizzafy Ecommerce System
- CVE-2026-7225SourceCodester Pizzafy Ecommerce System ajax.php delete_menu sql injectionSourceCodester Pizzafy Ecommerce System
- CVE-2026-6725WPC Smart Messages for WooCommerce <= 4.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributewpclever WPC Smart Messages for WooCommerce
- CVE-2026-6809Social Post Embed <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Threads Embeddartiss Social Post Embed
- CVE-2026-6551Timeline Blocks for Gutenberg <= 1.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleTag' Block Attributetecheshta Timeline Blocks for Gutenberg
- CVE-2026-7224SourceCodester Pizzafy Ecommerce System ajax.php delete_cart sql injectionSourceCodester Pizzafy Ecommerce System
- CVE-2026-7223BigSweetPotatoStudio HyperChat AI Proxy Middleware aiProxyMiddleware.mts fetch server-side request forgeryBigSweetPotatoStudio HyperChat · @dadigua/hyperchat
- CVE-2026-7222code-projects Coaching Management System Complaint Form complaint.php cross site scriptingcode-projects Coaching Management System
- CVE-2026-7221TencentCloudBase CloudBase-MCP open-url API Endpoint interactive-server.ts openUrl server-side request forgeryTencentCloudBase CloudBase-MCP
- CVE-2026-7220jackwrichards FastlyMCP fastly_cli Tool fastly-mcp.mjs os command injectionjackwrichards FastlyMCP
- CVE-2026-7217Deepractice PromptX Document File index.ts read_pdf absolute path traversalDeepractice PromptX
- CVE-2026-7216donchelo processing-claude-mcp-bridge create_sketch Tool processing_server.py path traversaldonchelo processing-claude-mcp-bridge
- CVE-2026-7215egtai gmx-vmd-mcp VMD Launch mcp_server.py launch_vmd_gui_tool command injectionegtai gmx-vmd-mcp
- CVE-2026-0711A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50(ABVY.7.Zyxel DX3300-T0 firmware
- CVE-2026-7214eghuzefa engineer-your-data server.py file_inf path traversaleghuzefa engineer-your-data
- CVE-2026-7213ef10007 MLOps_MCP save_file Tool fastmcp_server.py path traversalef10007 MLOps_MCP
- CVE-2026-7212edvardlindelof notes-mcp notes_mcp.py path traversaledvardlindelof notes-mcp · notes-mcp
- CVE-2026-7211dvladimirov MCP Git Search API mcp_server.py GitSearchRequest command injectiondvladimirov MCP
- CVE-2026-7206dubydu sqlite-mcp entry.py extract_to_json sql injectiondubydu sqlite-mcp · sqlite-mcp
- CVE-2026-7205duartium papers-mcp-server main.py search_papers path traversalduartium papers-mcp-server
- CVE-2025-60887An issue was discovered in Cista v0.15 and below.
- CVE-2026-37750A reflected Cross-Site Scripting (XSS) vulnerability in School Management System by mahmoudai1 allows unauthenticated remote attackers to ex
- CVE-2026-38948Cross-Site Scripting (XSS) vulnerability exists in FUEL CMS v1.5.2 and before within the asset upload functionality.
- CVE-2026-40355In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a systemMIT Kerberos
- CVE-2026-40356In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accepMIT Kerberos
- CVE-2026-41525KDE Dolphin before 25.12.3 allows applications in a Flatpak (or with AppArmor confinement) to open folders outside of the application sandboKDE Dolphin
- CVE-2026-41526In KDE KCoreAddons before 6.25, KShell::quoteArgs is intended to safely quote arguments so that they can be passed to a shell command.KDE KCoreAddons