CVEs published May 7, 2026
203 CVEs were published on May 7, 2026: 26 critical, 85 high. 1 is now in CISA KEV.
- Published
- 203
- Critical
- 26
- High
- 85
- Medium
- 84
- Low
- 8
- Unrated
- 0
- Now in CISA KEV
- 1
- Fix available
- 133
Most affected products
- admidio · admidio/admidio
- 13
- ci4-cms-erp ci4ms · ci4-cms-erp/ci4ms
- 6
- torproject Tor
- 6
- DivvyDrive Information Technologies DivvyDrive
- 5
- freescout-help-desk freescout
- 5
- Ivanti Endpoint Manager Mobile
- 5
- Mozilla Firefox · Mozilla Thunderbird
- 5
- GitHub Enterprise Server
- 4
- gitpython-developers GitPython · gitpython
- 4
- Open Notebook
- 4
Critical 26
- CVE-2026-42880ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extractionargoproj argo-cd · github.com/argoproj/argo-cd/v3 +2
- CVE-2026-42826Azure DevOps Information Disclosure VulnerabilityMicrosoft Azure DevOps
- CVE-2026-35428Azure Cloud Shell Spoofing VulnerabilityMicrosoft Azure Cloud Shell
- CVE-2026-33844Azure Managed Instance for Apache Cassandra Remote Code Execution VulnerabilityMicrosoft Azure Managed Instance for Apache Cassandra
- CVE-2026-33823Microsoft Team Events Portal Information Disclosure VulnerabilityMicrosoft Teams
- CVE-2026-33109Azure Managed Instance for Apache Cassandra Remote Code Execution VulnerabilityMicrosoft Azure Managed Instance for Apache Cassandra
- CVE-2026-41902FreeScout's user invitation hash never expires: permanent unauthenticated account takeover if invite link leaksfreescout-help-desk freescout
- CVE-2026-7415Open MQTT orchestration without read/write ACLs in Yarbo robot firmwareYarbo Firmware
- CVE-2026-7414Hardcoded credentials in Yarbo robot firmwareYarbo Firmware
- CVE-2026-41589Wish has SCP Path Traversal that allows arbitrary file read/writecharmbracelet wish · charm.land/wish/v2 +1
- CVE-2026-6795Open Redirect in DivvyDrive Information Technologies' DivvyDriveDivvyDrive Information Technologies DivvyDrive
- CVE-2026-8094Other issue in the WebRTC componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-8091Incorrect boundary conditions in the Audio/Video: Playback componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-6508RCE in TUBITAK BILGEM's LiderahenkTUBITAK BILGEM Software Technologies Research Institute Lid…
- CVE-2026-33587Remote Code Execution (RCE) via Server-Side Template Injection (SSTI)Open Notebook
- CVE-2026-41586ObjectInputStream.readObject() without ObjectInputFilter in fabric-sdk-java allows Java deserialization RCEhyperledger fabric · org.hyperledger.fabric-sdk-java:fabric…
- CVE-2026-40982Spring Cloud Config allows applications to serve arbitrary text and binary files through the spring-cloud-config-server module.Spring Cloud Config · org.springframework.cloud:spring-clou…
- CVE-2026-41203ci4ms Theme::upload is vulnerable to Zip Slip leading to RCEci4-cms-erp ci4ms · ci4-cms-erp/ci4ms
- CVE-2026-41202ci4ms Backup::restore is vulnerable to Zip Slip leading to RCEci4-cms-erp ci4ms · ci4-cms-erp/ci4ms
- CVE-2026-41201CI4MS: Backup Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM Blind XSS Version 2ci4-cms-erp ci4ms · ci4-cms-erp/ci4ms
- CVE-2025-63703npm package parse-ini v1.0.6 is vulnerable to Prototype Pollution in index.js().parse-ini
- CVE-2025-63704NPM package query-parser-string 1.0.0 is vulnerable to Prototype Pollution.query-string-parser
- CVE-2025-63706NPM package next-npm-version1.0.1 is vulnerable to Command injection.@jswork/next-npm-version
- CVE-2026-30496The Optoma CinemaX P2 projector (firmware TVOS-04.24.010.04.01, Android 8.0.0) exposes an HTTP API on TCP port 2345 that allows full unauthe
- CVE-2026-36458ChestnutCMS v1.5.10 has a SQL injection vulnerability.
- CVE-2026-37709Insecure Permissions vulnerability in grokability snipe-it v.8.4.0 and before and fixed after 2026-03-10 commit 676a9958 allows a remote attsnipe/snipe-it
High 85
- CVE-2026-6411MAXHUB Pivot Client Application Use of a Broken or Risky Cryptographic AlgorithmMAXHUB Pivot client application
- CVE-2026-8034Server-side request forgery vulnerability in GitHub Enterprise Server notebook viewer via URL parser confusionGitHub Enterprise Server
- CVE-2026-35435Azure AI Foundry Elevation of Privilege VulnerabilityMicrosoft Azure AI Foundry
- CVE-2026-34327Microsoft Partner Center Spoofing VulnerabilityMicrosoft Partner Center
- CVE-2026-32207Azure Machine Learning Notebook Spoofing VulnerabilityMicrosoft Azure Machine Learning
- CVE-2026-33111Copilot Chat (Microsoft Edge) Information Disclosure VulnerabilityCopilot Chat
- CVE-2026-41105Azure Monitor Action Group Notification System Elevation of Privilege VulnerabilityMicrosoft Azure Monitor Action Group notification system
- CVE-2026-26129M365 Copilot Information Disclosure VulnerabilityMicrosoft 365 Copilot's Business Chat
- CVE-2026-26164M365 Copilot Information Disclosure VulnerabilityMicrosoft 365 Copilot's Business Chat
- CVE-2026-42449n8n-MCP: IPv4-mapped IPv6 addresses bypass SSRF protection in validateUrlSync(), enabling full SSRF for SDK embeddersczlonkowski n8n-mcp · n8n-mcp
- CVE-2026-42047Inngest TypeScript SDK exposes environment variables via serve() handler on unhandled HTTP methodsinngest-js · inngest
- CVE-2026-39820Quadratic string concatentation in consumeComment in net/mailGo standard library net/mail · stdlib
- CVE-2026-42501Malicious module proxy can bypass checksum database in cmd/goGo toolchain cmd/go · toolchain
- CVE-2026-33811Crash when handling long CNAME response in netGo standard library net · stdlib
- CVE-2026-42499Quadratic string concatenation in consumePhrase in net/mailGo standard library net/mail · stdlib
- CVE-2026-39836Panic in Dial and LookupPort when handling NUL byte on Windows in netGo standard library net · stdlib
- CVE-2026-33814Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/netgolang.org/x/net/http2 · Go standard library net/http +2
- CVE-2026-42239Budibase auth session cookies are set with httpOnly:false — any XSS can lead to full account takeoverbudibase · @budibase/backend-core
- CVE-2026-42225GnuTLS backend silently skips certificate chain verification when verify_peer is falsepjsip pjproject
- CVE-2026-41653BentoPDF: Stored XSS via Markdown Editor Leading to Persistent File Exfiltrationalam00000 bentopdf
- CVE-2026-44243GitPython: Path traversal in GitPython reference APIs allows arbitrary file write and delete outside the repositorygitpython-developers GitPython · gitpython
- CVE-2026-44244GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPathgitpython-developers GitPython · gitpython
- CVE-2026-42284GitPython: Unsafe option check validates multi_options before shlex.split transforms itgitpython-developers GitPython · gitpython
- CVE-2026-42215GitPython: Command injection via Git options bypassgitpython-developers GitPython · gitpython
- CVE-2026-42214Improper Control of Generation of Code ('Code Injection') in dail8859/NotepadNextdail8859 NotepadNext
- CVE-2026-41906FreeScout: Conversation Change-Customer Cross-Mailbox Authorization Bypassfreescout-help-desk freescout
- CVE-2026-44742Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the wildPostorius project Postorius · postorius
- CVE-2026-41905FreeScout vulnerable to SSRF via Helper::sanitizeRemoteUrl: redirect destination not re-validated, allowing internal HTTP / cloud-metadata accessfreescout-help-desk freescout
- CVE-2026-41904FreeScout Stored XSS vulnerability in mailbox auto-reply: payload reaches every customer's email client (no CSP), bypassing strip_tags validator with mixed text+HTML contentfreescout-help-desk freescout
- CVE-2026-7413Persistent undocumented backdoor access in Yarbo robotYarbo Firmware
- CVE-2026-5787An Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker Ivanti Endpoint Manager Mobile
- CVE-2026-5788An Improper Access Control in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to invokIvanti Endpoint Manager Mobile
- CVE-2026-7821Improper certificate validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to Ivanti Endpoint Manager Mobile
- CVE-2026-6973An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenticated user with adminIvanti Endpoint Manager Mobile
- CVE-2026-5786An Improper Access Control vulnerability in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote authenticated attacIvanti Endpoint Manager Mobile
- CVE-2026-44349Daptin fuzzy search injects unvalidated column name into raw SQLdaptin · github.com/daptin/daptin
- CVE-2026-41422Daptin vulnerable to SQL injection via unvalidated goqu.L() calls in aggregate APIdaptin · github.com/daptin/daptin
- CVE-2026-41688Incomplete fix for CVE-2026-33399: SSRF in Wallosellite Wallos
- CVE-2026-42011Gnutls: gnutls: security bypass due to incorrect name constraint handlinggnutls · Red Hat Enterprise Linux +6
- CVE-2026-41505RELATE: Predictable Token Generation in auth.py and exam.pyinducer relate
- CVE-2026-41554WordPress Bricks Builder theme 1.9.2-2.2 - Cross Site Scripting (XSS) vulnerabilityBricks Builder
- CVE-2026-41490Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrationsdagster-io dagster · dagster-duckdb +5
- CVE-2025-14341Input Data Manipulation in DivvyDrive Information Technologies' DivvyDriveDivvyDrive Information Technologies DivvyDrive
- CVE-2026-5784Stored XSS in DivvyDrive Information Technologies' DivvyDriveDivvyDrive Information Technologies DivvyDrive
- CVE-2026-6002HTML Injection in DivvyDrive Information Technologies' DivvyDriveDivvyDrive Information Technologies DivvyDrive
- CVE-2026-8093Memory safety bugs fixed in Thunderbird 150.0.2Mozilla Firefox · Mozilla Thunderbird
- CVE-2026-8092Memory safety bugs fixed in Thunderbird ESR 140.10.2 and Thunderbird 150.0.2Mozilla Firefox · Mozilla Thunderbird
- CVE-2026-8090Use-after-free in the DOM: Networking componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-42010Gnutls: gnutls: authentication bypass via nul character in usernamegnutls · Red Hat Enterprise Linux +7
- CVE-2026-41644monetr is vulnerable to server-side request forgery in Lunch Flow link creation and refreshmonetr · github.com/monetr/monetr
- CVE-2026-41643GoBGP: Remote Denial of Service (Panic) in UpdatePathAttrs4ByteAs via Malformed BGP UPDATEosrg gobgp · github.com/osrg/gobgp/v4
- CVE-2026-42285GoBGP: Panic in AdjRib.Update via malformed BGP Update message (Nil Pointer Dereference)osrg gobgp · github.com/osrg/gobgp/v4
- CVE-2026-41642GoBGP: Remote Denial of Service (Panic) via Malformed Well-known Path Attributeosrg gobgp · github.com/osrg/gobgp/v4
- CVE-2026-3953Reflected XSS in Gosoft Software's Proticaret E-CommerceGosoft Software Industry and Trade Ltd. Proticaret E-Commer…
- CVE-2026-33589Arbitrary File Read via Local File Inclusion (LFI)Open Notebook
- CVE-2026-33588Arbitrary File Write Through Path TraversalOpen Notebook
- CVE-2026-28201SurrealDB Injection on Open NotebookOpen Notebook
- CVE-2024-43384Phoenix Contact: Improper removal of sensitive information in MGUARD productsPHOENIX CONTACT FL MGUARD · PHOENIX CONTACT TC MGUARD RS… +7
- CVE-2025-1978Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance consoleHitachi Virtual Storage Platform G130, G150, G350, G370,… +1
- CVE-2025-68060WordPress Team Member plugin <= 8.5 - SQL Injection vulnerabilityWPMart Team Member
- CVE-2025-9661OS command injection vulneravility in the management gui (maintenance utility) of Hitachi Virtual Storage Platform One Block 23/24/26/28Hitachi Virtual Storage Platform One Block
- CVE-2026-41143YesWiki vulnerable to authenticated SQL Injection via id_fiche in EntryManager::formatDataBeforeSave()yeswiki · yeswiki/yeswiki
- CVE-2026-41139Unsafe array index getter in mathjsjosdejong mathjs · mathjs
- CVE-2026-7252WP-Optimize <= 4.5.2 - Authenticated (Author+) Arbitrary File Deletion via 'original-file' Post Metadavidanderson WP-Optimize – Cache, Compress images, Minify…
- CVE-2026-6692Slider Revolution 7.0.0 - 7.0.10 - Authenticated (Subscriber+) Arbitrary File Upload via _get_media_urlRevolution Slider Slider Revolution
- CVE-2026-4348BetterDocs Pro <= 3.7.0 - Unauthenticated SQL Injection via Encyclopedia 'limit' ParameterBetterDocs Pro
- CVE-2026-41641NocoBase Vulnerable to SQL Validation Bypass via `sqlCollection:update` Missing `checkSQL` Callnocobase · @nocobase/plugin-collection-sql
- CVE-2026-8063Post-auth null pointer dereference when aggregating against a view with empty search pipelineMongoDB Server
- CVE-2026-41640NocoBase Vulnerable to SQL Injection via String Concatenation in Recursive Eager Loadingnocobase · @nocobase/database
- CVE-2026-42216OpenEXR: Out-of-bounds read in `IDManifest::init()` during prefix expansionAcademySoftwareFoundation openexr
- CVE-2026-41142OpenEXR is Vulnerable to Integer overflow in ImageChannel::resize leads to heap OOB write via OpenEXRUtil public APIAcademySoftwareFoundation openexr
- CVE-2026-40981When using Google Secrets Manager as a backend for the Spring Cloud Config server a client can craft a request to the config server potentiaSpring Cloud Config · org.springframework.cloud:spring-clou…
- CVE-2026-41002The base directory (`spring.cloud.config.server.git.basedir`) used by the Spring Cloud Config Server to clone Git repositories to is susceptSpring Cloud Config · org.springframework.cloud:spring-clou…
- CVE-2026-41675xmldom: XML node injection through unvalidated processing instruction serializationxmldom · @xmldom/xmldom
- CVE-2026-41674xmldom: XML injection through unvalidated DocumentType serializationxmldom · @xmldom/xmldom
- CVE-2026-41673xmldom: Denial of service via uncontrolled recursion in XML serializationxmldom · @xmldom/xmldom
- CVE-2026-41672xmldom: XML node injection through unvalidated comment serializationxmldom · @xmldom/xmldom
- CVE-2026-41587CI4MS: Unrestricted PHP File Upload via Theme Installation Leads to Authenticated Remote Code Executionci4-cms-erp ci4ms · ci4-cms-erp/ci4ms
- CVE-2026-41670Admidio: SAML Response Sent to Unvalidated Assertion Consumer Service URL from AuthnRequestadmidio · admidio/admidio
- CVE-2026-41669Admidio: SAML Signature Validation Result Ignored — Forged AuthnRequests and LogoutRequests Processedadmidio · admidio/admidio
- CVE-2026-41660Admidio: Inverted 2FA Reset Authorization Check Lets Group Leaders Strip Admin TOTPadmidio · admidio/admidio
- CVE-2025-63705NPM package node-ts-ocr 1.0.15 is vulnerable to OS Command Injection via the invokeImageOcr function in src/index.js.node-ts-ocr
- CVE-2025-65122Regex Denial of Service in youtube-regex npm package through version 1.0.5.youtube-regex
- CVE-2026-30495The Optoma CinemaX P2 projector (firmware TVOS-04.24.010.04.01, Android 8.0.0) exposes Android Debug Bridge (ADB) on TCP port 5555 over the
- CVE-2026-40213OpenStack Cyborg before 16.0.1 uses rule:allow (check_str='@') as the default policy for multiple API endpoints.OpenStack Cyborg · openstack-cyborg
Medium, low and unrated 92
- CVE-2026-8117SourceCodester Pizzafy Ecommerce System index.php cross site scriptingSourceCodester Pizzafy Ecommerce System
- CVE-2026-8116huangjunsen0406 xiaozhi-mcphub dxtController.ts path traversalhuangjunsen0406 xiaozhi-mcphub
- CVE-2026-8115gyoridavid short-video-maker REST API rest.ts path traversalgyoridavid short-video-maker · short-video-maker
- CVE-2026-8114JeecgBoot JSON Object loadTreeData sql injectionJeecgBoot
- CVE-2026-8106Reflected HTML injection vulnerability in GitHub Enterprise Server Management Console login page allowed credential theftGitHub Enterprise Server
- CVE-2026-7541Denial of service vulnerability in GitHub Enterprise Server allowed service disruption via unauthenticated API endpointGitHub Enterprise Server
- CVE-2026-81138421bit MiniClaw executeSkillScript kernel.ts isPathInside path traversal8421bit MiniClaw
- CVE-2026-6736Authentication bypass vulnerability in GitHub Enterprise Server allowed creation of local user accounts bypassing the configured external identity providerGitHub Enterprise Server
- CVE-2026-41928Vvveb < 1.0.8.2 Information Disclosure via Cron Controllergivanz Vvveb
- CVE-2026-41929Vvveb < 1.0.8.2 Unauthenticated Reflected XSS via Visual Editorgivanz Vvveb
- CVE-2026-81128421bit MiniClaw kernel.ts executeCognitivePulse os command injection8421bit MiniClaw
- CVE-2026-8098code-projects Feedback System checklogin.php sql injectioncode-projects Feedback System
- CVE-2026-8097CodeAstro Online Classroom askquery.php sql injectionCodeAstro Online Classroom
- CVE-2026-41691i18next-http-backend has Path Traversal & URL Injection via Unsanitised lng/nsi18next-http-backend
- CVE-2026-41692i18nextify is vulnerable to DOM XSS via javascript:/data: URL schemes in translated href/src attributesi18nextify
- CVE-2026-8142CVE-2026-8142CERT/CC VINCE
- CVE-2026-39823Bypass of meta content URL escaping causes XSS in html/templateGo standard library html/template · stdlib
- CVE-2026-39826Escaper bypass leads to XSS in html/templateGo standard library html/template · stdlib
- CVE-2026-39817Invoking "go tool pack" does not sanitize output paths in cmd/goGo toolchain cmd/go · toolchain
- CVE-2026-39819Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/goGo toolchain cmd/go · toolchain
- CVE-2026-39825ReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputilGo standard library net/http/httputil · stdlib
- CVE-2026-8088OSGeo gdal GDapi.c GDfieldinfo out-of-boundsOSGeo gdal · gdal
- CVE-2026-8087OSGeo gdal GDapi.c GDnentries heap-based overflowOSGeo gdal · gdal
- CVE-2026-42259Saltcorn: Open Redirect in `POST /auth/login` due to incomplete `is_relative_url` validation (backslash bypass)saltcorn · @saltcorn/server
- CVE-2026-42241ParquetSharp: Possible Stack Overflow When Reading a ParquetFile with Large Decimal Type WidthG-Research ParquetSharp · ParquetSharp
- CVE-2026-43510CISA manage.get.gov insecure portfolio administrative privilegesCISA manage.get.gov
- CVE-2026-8086OSGeo gdal SWapi.c SWnentries heap-based overflowOSGeo gdal · gdal
- CVE-2026-8084OSGeo gdal HDF-EOS Grid File SWapi.c memmove out-of-boundsOSGeo gdal · gdal
- CVE-2026-8083SourceCodester Pharmacy Sales and Inventory System ajax.php save_user sql injectionSourceCodester Pharmacy Sales and Inventory System
- CVE-2026-41903FreeScout IDOR Vulnerability: PERM_EDIT_USERS allows modifying any user's notification subscriptions (incomplete fix of CVE-2025-48472)freescout-help-desk freescout
- CVE-2026-8081router-for-me CLIProxyAPI api_tools.go server-side request forgeryrouter-for-me CLIProxyAPI
- CVE-2025-4397Medtronic MyCareLink Patient Monitor Data Encryption WeaknessMedtronic MyCareLink Patient Monitor
- CVE-2025-4386Medtronic MyCareLink Patient Monitor Hardware Debug PortMedtronic MyCareLink Patient Monitor
- CVE-2026-32686Unbounded exponent in decimal enables unauthenticated DoSericmj decimal
- CVE-2026-41689Wallos: Shared local webhook allowlist lets low-privilege users send arbitrary requests to allowlisted internal servicesellite Wallos
- CVE-2026-41687Wallos: SSRF CGNAT Bypass in subscription/payments Logo URL — is_cgnat_ip() Not Used in Inline Checksellite Wallos
- CVE-2026-44264Weblate is vulnerable to XSS via crafted MarkdownWeblateOrg weblate · weblate
- CVE-2026-44263Weblate: Private Translation Enumeration via Screenshot APIWeblateOrg weblate · weblate
- CVE-2026-41519Weblate's API Token Not Invalidated on Password ChangeWeblateOrg weblate · weblate
- CVE-2026-41654Weblate is Vulnerable to Authenticated SSRF via Project Backup Import bypassing validate_repo_urlWeblateOrg weblate · weblate
- CVE-2026-41650fast-xml-parser XMLBuilder: XML Comment and CDATA Injection via Unescaped DelimitersNaturalIntelligence fast-xml-parser · fast-xml-parser
- CVE-2026-41685Incus: Unbounded binary import disk exhaustionlxc incus · github.com/lxc/incus/v6/cmd/incusd +2
- CVE-2026-41684Incus: Nil Dereferences on Restore via Malformed YAMLlxc incus · github.com/lxc/incus/v6/cmd/incusd +2
- CVE-2026-41648Incus: Unbounded YAML Metadata Decode via Parsinglxc incus · github.com/lxc/incus +2
- CVE-2026-41647Incus: Nil-Pointer Dereference via S3 Bucket Importlxc incus · github.com/lxc/incus +2
- CVE-2026-5791CSRF in DivvyDrive Information Technologies' DivvyDriveDivvyDrive Information Technologies DivvyDrive
- CVE-2026-8080MISP core - Stored XSS in MISP template (old engine) element attribute typemisp
- CVE-2026-27415WordPress BEAR plugin <= 1.1.5 - Cross Site Request Forgery (CSRF) vulnerabilityPluginUs.Net BEAR
- CVE-2026-6805Vulnerability on Cryptobox external sharing featureErcom Cryptobox
- CVE-2026-27416WordPress PDF Poster plugin <= 2.4.1 - Broken Access Control vulnerabilitybPlugins PDF Poster
- CVE-2025-62127WordPress WEN Logo Slider plugin <= 3.4.0 - Cross Site Scripting (XSS) vulnerabilityWEN Themes WEN Logo Slider
- CVE-2025-66105WordPress Bus Ticket Booking with Seat Reservation plugin < 5.6.8 - Broken Access Control vulnerabilityMagepeople Bus Ticket Booking with Seat Reservation
- CVE-2025-68604WordPress WPGraphQL plugin <= 2.5.3 - Cross Site Request Forgery (CSRF) vulnerabilityWPGraphQL
- CVE-2026-25468WordPress Happy Addons for Elementor plugin <= 3.20.8 - Sensitive Data Exposure vulnerabilityweDevs Happy Addons for Elementor
- CVE-2026-27329WordPress YITH WooCommerce Wishlist plugin <= 4.12.0 - Insecure Direct Object References (IDOR) vulnerabilityYITH WooCommerce Wishlist
- CVE-2026-25436WordPress Royal Elementor Addons plugin < 1.7.1053 - Broken Access Control vulnerabilityWProyal Royal Elementor Addons
- CVE-2026-44407Remote Denial of Service Vulnerability Exists in ZTE Cloud PC Client uSmartviewZTE ZXCLOUD iRAI
- CVE-2026-27421WordPress Royal Elementor Addons plugin < 1.7.1053 - Cross Site Scripting (XSS) vulnerabilityWProyal Royal Elementor Addons
- CVE-2025-2514Improper Restriction of Excessive Authentication Attempts vulnerability in Hitachi Virtual Storage PlatformHitachi Virtual Storage Platform G130, G150, G350, G370,… +1
- CVE-2026-4430Heap Buffer Overflow in AgileEngineThe Document Foundation LibreOffice
- CVE-2026-44406DLL Hijacking Vulnerability in ZTE Cloud PC Client uSmartviewZTE ZXCLOUD iRAI
- CVE-2026-41413Istio Vulnerable to SSRF via RequestAuthentication jwksUriistio · istio.io/istio
- CVE-2026-42217OpenEXR: Shift exponent overflow in `readVariableLengthInteger()` (`ImfIDManifest.cpp`)AcademySoftwareFoundation openexr
- CVE-2026-41004When enabling trace logging in Spring Cloud Config Server sensitive information was placed in plain text in the logs.Spring Cloud Config · org.springframework.cloud:spring-clou…
- CVE-2026-40004openssl.cnf Privilege Escalation Vulnerability in ZTE Cloud PC Client uSmartviewZTE ZXCLOUD iRAI
- CVE-2026-6214Forminator Forms <= 1.53.0 - Missing Authorization to Authenticated (Subscriber+) Scheduled Form Submission Export via forminator_export_entries Action on wp_loaded Hookwpmudev Forminator Forms – Contact Form, Payment Form & Cus…
- CVE-2026-41891CI4MS: Deactivated User Session Bypass (active=0)ci4-cms-erp ci4ms · ci4-cms-erp/ci4ms
- CVE-2026-41890CI4MS: Arbitrary Database Table Drop via Theme deleteProcessci4-cms-erp ci4ms · ci4-cms-erp/ci4ms
- CVE-2026-44603Tor before 0.4.9.7 has an out-of-bounds read by one byte via a malformed BEGIN cell, aka TROVE-2026-007.torproject Tor
- CVE-2026-44602Tor before 0.4.9.7 has a NULL pointer dereference when a CERT cell is received out of order, aka TROVE-2026-006.torproject Tor
- CVE-2026-44601Tor before 0.4.9.7, when circuit queue memory pressure exists, can experience a client crash because of a double close of a circuit, aka TROtorproject Tor
- CVE-2026-42194Incomplete fix for CVE-2026-32812: SSRF in admidioadmidio · admidio/admidio
- CVE-2026-41671Admidio: OIDC Token Introspection Endpoint Returns Active for All Tokens Without Validationadmidio · admidio/admidio
- CVE-2026-41663Admidio: CSRF on Admin Preferences Triggers Unauthorized Backup, .htaccess Write, and Email Sendadmidio · admidio/admidio
- CVE-2026-41662Admidio: Missing Minimum Administrator Check in Role Membership Removaladmidio · admidio/admidio
- CVE-2026-41661Admidio: Reflected XSS in msg_window.php via Square Bracket to HTML Tag Conversionadmidio · admidio/admidio
- CVE-2026-41659Admidio: Hidden Profile Field Values Leaked via Blind Search Oracle in Member Assignmentadmidio · admidio/admidio
- CVE-2026-41658Admidio: Missing Authorization on Inventory Module Destructive Endpoints Allows Any Authenticated User to Delete Itemsadmidio · admidio/admidio
- CVE-2026-41657Admidio: Cross-Organization Member Data Exposure via Permission Check Mismatch in contacts_data.phpadmidio · admidio/admidio
- CVE-2026-41656Admidio: Path Traversal via Unvalidated `name` Parameter in Document Add Mode Enables Arbitrary Server File Readadmidio · admidio/admidio
- CVE-2026-41655Admidio: Path Traversal in ECard Preview Allows Reading Arbitrary Server Files Including Database Credentialsadmidio · admidio/admidio
- CVE-2026-4807Appointment Booking Calendar <= 1.6.10.6 - Unauthenticated Arbitrary Appointment View, Modification and Deletioncroixhaug Appointment Booking Calendar — Simply Schedule Ap…
- CVE-2026-44600Tor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the clearing of a queue, aka TROVE-2026-010.torproject Tor
- CVE-2026-44599Tor before 0.4.9.7 can attempt or accept BEGIN_DIR via conflux legs, aka TROVE-2026-008.torproject Tor
- CVE-2026-6222Forminator Forms <= 1.51.1 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via 'forminator_action' Parameterwpmudev Forminator Forms – Contact Form, Payment Form & Cus…
- CVE-2026-40003USB-based arbitrary memory write vulnerability in ZTE ZX297520V3 soc BootROMZTE ZX297520V3 BootROM
- CVE-2026-44597Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell lacks a reason in its payload, aka TROVE-2026-011.torproject Tor
- CVE-2025-67202Sidekiq-cron thru 2.3.1, an open-source scheduling add-on for Sidekiq, is vulnerable to a cross-site scripting (xss) vulnerability via craftsidekiq-cron
- CVE-2026-36341Cross-Site Scripting (XSS) vulnerability exists in Webkul Krayin CRM v2.1.5.krayin/laravel-crm
- CVE-2026-36387A Remote Code Execution vulnerability was found in CODEASTRO Membership Management System v1.0 in /add_members.php.
- CVE-2026-36388A Cross-Site Scripting (XSS) vulnerability was found in PHPGurukal Hospital Management System v4.0 in the /hospital/hms/edit-profile.php pag
- CVE-2026-40214In OpenStack Cyborg before 16.0.1, the Accelerator Request (ARQ) API does not enforce project ownership at any layer.OpenStack Cyborg · openstack-cyborg