# CVEs published 2026-05-11

353 CVEs were published on May 11, 2026: 11 critical, 139 high. Days are UTC.

- [CVE-2026-8349](https://cve.now/CVE-2026-8349.md): omec-project amf NGAP Message memory corruption (CVSS 5.3, omec-project amf · github.com/omec-project/amf)
- [CVE-2026-8346](https://cve.now/CVE-2026-8346.md): D-Link DIR-816 portForward command injection (CVSS 5.3, D-Link DIR-816)
- [CVE-2026-34963](https://cve.now/CVE-2026-34963.md): barebox EFI PE Loader Memory Safety Vulnerabilities (CVSS 8.4, barebox)
- [CVE-2026-43914](https://cve.now/CVE-2026-43914.md): Vaultwarden: Brute-force protection bypass vulnerability (CVSS 7.3, dani-garcia vaultwarden)
- [CVE-2026-43913](https://cve.now/CVE-2026-43913.md): Vaultwarden: Unconfirmed Owner Can Purge Entire Organization Vault (CVSS 8.1, dani-garcia vaultwarden)
- [CVE-2026-8345](https://cve.now/CVE-2026-8345.md): D-Link DIR-816 singlePortForward sub\_445E7C command injection (CVSS 5.3, D-Link DIR-816)
- [CVE-2026-34962](https://cve.now/CVE-2026-34962.md): barebox ext4 Directory Parsing Infinite Loop Denial of Service (CVSS 6.2, barebox)
- [CVE-2026-43912](https://cve.now/CVE-2026-43912.md): Vaultwarden: Cross-Org Group Binding Enables Unauthorized Read And Write Access Into Another Organization (CVSS 8.7, dani-garcia vaultwarden)
- [CVE-2026-43911](https://cve.now/CVE-2026-43911.md): Vaultwarden: Refresh tokens not invalidated on security stamp rotation (CVSS 6.8, dani-garcia vaultwarden)
- [CVE-2026-43901](https://cve.now/CVE-2026-43901.md): Wireshark MCP: Arbitrary file write via export\_objects when WIRESHARK\_MCP\_ALLOWED\_DIRS is not configured (CVSS 6.8, bx33661 Wireshark-MCP · wireshark-mcp)
- [CVE-2026-42554](https://cve.now/CVE-2026-42554.md): Fiber: XSS in AutoFormat Content Negotiation (CVSS 5.3, gofiber fiber · github.com/gofiber/fiber/v3 +1)
- [CVE-2026-43899](https://cve.now/CVE-2026-43899.md): DeepChat: Incomplete Fix for CVE-2025-55733 leads to Remote Code Execution via Markdown Links bypassing \`isValidExternalUrl\` (CVSS 9.6, ThinkInAIXYZ deepchat)
- [CVE-2026-43900](https://cve.now/CVE-2026-43900.md): DeepChat: Persistent DOM XSS via HTML Entity Encoding in \`\<antArtifact\>\` SVG Rendering (Bypass of \`svgSanitizer.ts\`) (CVSS 9.3, ThinkInAIXYZ deepchat)
- [CVE-2026-8344](https://cve.now/CVE-2026-8344.md): D-Link DIR-816 formDMZ.cgi sub\_445E7C command injection (CVSS 5.3, D-Link DIR-816)
- [CVE-2026-42188](https://cve.now/CVE-2026-42188.md): Geyser: Server-Side Request Forgery (SSRF) via Player Head Texture URL (CVSS 2.4, GeyserMC Geyser · org.geysermc.geyser:core)
- [CVE-2026-42046](https://cve.now/CVE-2026-42046.md): libcaca: Heap OOB write in canvas import functions caused by int overflow (CVSS 7.8, cacalabs libcaca)
- [CVE-2026-42564](https://cve.now/CVE-2026-42564.md): jotty·page: Unauthenticated Path Traversal leads to sensitive file disclosure and session-token reuse impact (CVSS 8.2, fccview jotty)
- [CVE-2026-43897](https://cve.now/CVE-2026-43897.md): Link Preview JS: vunerable to IPv6 and internal loopback attacks (CVSS 8.7, OP-Engineering link-preview-js · link-preview-js)
- [CVE-2026-7010](https://cve.now/CVE-2026-7010.md): HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values (CVSS 6.5, HAARG HTTP::Tiny)
- [CVE-2026-44695](https://cve.now/CVE-2026-44695.md): Outline: Slack OAuth state can link a victim Outline account to an attacker Slack identity (CVSS 5.8, outline)
- [CVE-2026-43889](https://cve.now/CVE-2026-43889.md): Outline: Unauthorized Document Publication via Mixed collectionId+documentId Share (CVSS 6.5, outline)
- [CVE-2026-43888](https://cve.now/CVE-2026-43888.md): Outline: Zip Extraction Path Escape via PATH\_MAX Truncation in Collection Import (CVSS 8.7, outline)
- [CVE-2026-34961](https://cve.now/CVE-2026-34961.md): barebox ext4 Extent Parsing Out-of-Bounds Read (CVSS 6.2, barebox)
- [CVE-2026-43890](https://cve.now/CVE-2026-43890.md): Outline: IDOR in subscriptions.create allows cross-tenant subscription on private documents (sibling of GHSA-23jj-rp48-w7q7) (CVSS 7.7, outline)
- [CVE-2026-43886](https://cve.now/CVE-2026-43886.md): Outline: OAuth Scope Validation Logic Error Allows Privilege Escalation to Wildcard API Access (CVSS 8.2, outline)
- [CVE-2026-43887](https://cve.now/CVE-2026-43887.md): Outline: Stored XSS via Comment Mentions (CVSS 7.3, outline)
- [CVE-2026-43893](https://cve.now/CVE-2026-43893.md): exiftool-vendored: Argument injection via newline characters in tag names (CVSS 8.2, photostructure exiftool-vendored.js · exiftool-vendored)
- [CVE-2026-42600](https://cve.now/CVE-2026-42600.md): MinIO: Path Traversal via msgpack Body in \`ReadMultiple\` Storage-REST Endpoint (CVSS 6.9, minio · github.com/minio/minio)
- [CVE-2026-34960](https://cve.now/CVE-2026-34960.md): barebox Out-of-Bounds Read in DHCP Option Parsing (CVSS 6.5, barebox)
- [CVE-2026-43885](https://cve.now/CVE-2026-43885.md): WWBN AVideo: Exposure of Sensitive Information to an Unauthorized Actor and Missing Authorization (CVSS 7.7, WWBN AVideo · wwbn/avideo)
- [CVE-2026-43884](https://cve.now/CVE-2026-43884.md): WWBN AVideo: SSRF Protection Bypass via HTTP Redirect and DNS Rebinding in isSSRFSafeURL() (CVSS 7.7, WWBN AVideo · wwbn/avideo)
- [CVE-2026-43883](https://cve.now/CVE-2026-43883.md): WWBN AVideo: IDOR in PayPalYPT agreementCancel.json.php Allows Any Authenticated User to Cancel Arbitrary PayPal Subscription Agreements (CVSS 4.2, WWBN AVideo · wwbn/avideo)
- [CVE-2026-43882](https://cve.now/CVE-2026-43882.md): WWBN AVideo: Unauthenticated CRLF/ICS Injection in Scheduler downloadICS.php Allows Calendar Event Spoofing (CVSS 4.3, WWBN AVideo · wwbn/avideo)
- [CVE-2026-43881](https://cve.now/CVE-2026-43881.md): WWBN AVideo: Unauthenticated User Enumeration in \`objects/users.json.php\` via \`isCompany\` Parameter Flips \`$ignoreAdmin = true\` and Defeats Admin-Only Listing Guard (CVSS 5.3, WWBN AVideo · wwbn/avideo)
- [CVE-2026-43880](https://cve.now/CVE-2026-43880.md): WWBN AVideo: Unauthenticated Arbitrary Email Sending via sendEmail.json.php Allows Phishing from Site's Legitimate From Address (CVSS 5.3, WWBN AVideo · wwbn/avideo)
- [CVE-2026-43879](https://cve.now/CVE-2026-43879.md): WWBN AVideo: Blind SSRF in YPTWallet Donation Webhook via Missing isSSRFSafeURL() Check and CURLOPT\_FOLLOWLOCATION Redirect Bypass (CVSS 5.4, WWBN AVideo · wwbn/avideo)
- [CVE-2026-43878](https://cve.now/CVE-2026-43878.md): WWBN AVideo: Reflected XSS in plugin/Meet/iframe.php via Unescaped \`user\`/\`pass\` Parameters Reflected into JavaScript String Literal (CVSS 6.1, WWBN AVideo · wwbn/avideo)
- [CVE-2026-43877](https://cve.now/CVE-2026-43877.md): WWBN AVideo: CSRF in userSavePhoto.php Allows Cross-Origin Overwrite of Any Logged-in User's Profile Photo with Arbitrary Bytes (CVSS 5.4, WWBN AVideo · wwbn/avideo)
- [CVE-2026-43876](https://cve.now/CVE-2026-43876.md): WWBN AVideo: HTML Injection in notifySubscribers.json.php Enables Platform-Branded Phishing Emails to Channel Subscribers (CVSS 6.4, WWBN AVideo · wwbn/avideo)
- [CVE-2026-43875](https://cve.now/CVE-2026-43875.md): WWBN AVideo: Password Hash Leaked in MobileManager OAuth Redirect URL Enables Account Takeover (CVSS 6.8, WWBN AVideo · wwbn/avideo)
- [CVE-2026-43873](https://cve.now/CVE-2026-43873.md): WWBN AVideo: Unauthenticated Disclosure of CloneSite \`myKey\` via Error Echo in \`cloneClient.json.php\` Enables Cross-Site DB Dump of the Configured Clone Server (CVSS 7.5, WWBN AVideo · wwbn/avideo)
- [CVE-2026-43874](https://cve.now/CVE-2026-43874.md): WWBN AVideo: Incomplete Fix for YPTSocket autoEvalCodeOnHTML Strip: Unauthenticated Cross-User JavaScript Execution via \`$msg\['json'\]\` Relay Bypass (CVSS 7.2, WWBN AVideo · wwbn/avideo)
- [CVE-2026-41489](https://cve.now/CVE-2026-41489.md): Pi-hole: Local privilege escalation via config-controlled path in root-executed service hooks (CVSS 8.8, pi-hole)
- [CVE-2026-42888](https://cve.now/CVE-2026-42888.md): Audiobookshelf: Path Traversal vulnerability in the audiobookshelf project (CVSS 6.9, advplyr audiobookshelf)
- [CVE-2026-28976](https://cve.now/CVE-2026-28976.md): An information leakage was addressed with additional validation. (CVSS 7.5, Apple macOS)
- [CVE-2026-28872](https://cve.now/CVE-2026-28872.md): A resource exhaustion issue was addressed with improved input validation. (CVSS 7.5, Apple iOS and iPadOS)
- [CVE-2026-43653](https://cve.now/CVE-2026-43653.md): The issue was addressed with improved memory handling. (CVSS 6.2, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-28848](https://cve.now/CVE-2026-28848.md): A buffer overflow was addressed with improved bounds checking. (CVSS 7.5, Apple macOS)
- [CVE-2026-28995](https://cve.now/CVE-2026-28995.md): A logic issue was addressed with improved restrictions. (CVSS 8.8, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-28983](https://cve.now/CVE-2026-28983.md): A type confusion issue was addressed with improved checks. (CVSS 7.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-28940](https://cve.now/CVE-2026-28940.md): The issue was addressed with improved memory handling. (CVSS 8.8, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-28917](https://cve.now/CVE-2026-28917.md): The issue was addressed with improved input validation. (CVSS 4.3, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-39869](https://cve.now/CVE-2026-39869.md): The issue was addressed with improved memory handling. (CVSS 4.3, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-28901](https://cve.now/CVE-2026-28901.md): The issue was addressed with improved memory handling. (CVSS 4.3, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-28956](https://cve.now/CVE-2026-28956.md): A memory corruption issue was addressed with improved input validation. (CVSS 6.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-28957](https://cve.now/CVE-2026-28957.md): An issue with app access to camera metadata was addressed with improved logic. (CVSS 3.3, Apple iOS and iPadOS · Apple visionOS)
- [CVE-2026-28941](https://cve.now/CVE-2026-28941.md): The issue was addressed with improved checks. (CVSS 7.1, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-28994](https://cve.now/CVE-2026-28994.md): A use after free issue was addressed with improved memory management. (CVSS 5.3, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-43668](https://cve.now/CVE-2026-43668.md): A use after free issue was addressed with improved memory management. (CVSS 7.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-43652](https://cve.now/CVE-2026-43652.md): A permissions issue was addressed with additional restrictions. (CVSS 7.5, Apple macOS)
- [CVE-2026-28936](https://cve.now/CVE-2026-28936.md): The issue was addressed with improved checks. (CVSS 7.5, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-28873](https://cve.now/CVE-2026-28873.md): This issue was addressed with additional entitlement checks. (CVSS 7.5, Apple iOS and iPadOS)
- [CVE-2026-28961](https://cve.now/CVE-2026-28961.md): This issue was addressed with improved checks. (CVSS 4.6, Apple macOS)
- [CVE-2026-28977](https://cve.now/CVE-2026-28977.md): The issue was addressed with improved bounds checks. (CVSS 6.2, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-28920](https://cve.now/CVE-2026-28920.md): An information leakage was addressed with additional validation. (CVSS 6.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-28993](https://cve.now/CVE-2026-28993.md): This issue was addressed by adding an additional prompt for user consent. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-28985](https://cve.now/CVE-2026-28985.md): A null pointer dereference was addressed with improved input validation. (CVSS 6.2, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-43659](https://cve.now/CVE-2026-43659.md): A race condition was addressed with additional validation. (CVSS 4.7, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-28897](https://cve.now/CVE-2026-28897.md): A buffer overflow was addressed with improved input validation. (CVSS 6.2, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-28946](https://cve.now/CVE-2026-28946.md): A use-after-free issue was addressed with improved memory management. (CVSS 6.5, Apple Safari · Apple macOS)
- [CVE-2026-28907](https://cve.now/CVE-2026-28907.md): The issue was addressed with improved input validation. (CVSS 8.1, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-43655](https://cve.now/CVE-2026-43655.md): An out-of-bounds read was addressed with improved bounds checking. (CVSS 7.3, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-28819](https://cve.now/CVE-2026-28819.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 5.4, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-43654](https://cve.now/CVE-2026-43654.md): The issue was addressed with improved memory handling. (CVSS 7.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-28930](https://cve.now/CVE-2026-28930.md): A permissions issue was addressed with additional restrictions. (CVSS 7.5, Apple macOS)
- [CVE-2026-28967](https://cve.now/CVE-2026-28967.md): A denial-of-service issue was addressed with improved input validation. (CVSS 4.9, Apple iOS and iPadOS)
- [CVE-2026-28988](https://cve.now/CVE-2026-28988.md): A permissions issue was addressed with additional restrictions. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-28971](https://cve.now/CVE-2026-28971.md): The issue was addressed with improved UI handling. (CVSS 4.3, Apple Safari · Apple iOS and iPadOS +2)
- [CVE-2026-20696](https://cve.now/CVE-2026-20696.md): An authorization issue was addressed with improved state management. (CVSS 5.5, Apple macOS)
- [CVE-2026-28951](https://cve.now/CVE-2026-28951.md): An authorization issue was addressed with improved state management. (CVSS 7.8, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-28906](https://cve.now/CVE-2026-28906.md): This issue was addressed through improved state management. (CVSS 7.5, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-28910](https://cve.now/CVE-2026-28910.md): This issue was addressed with improved permissions checking. (CVSS 3.3, Apple macOS)
- [CVE-2026-28947](https://cve.now/CVE-2026-28947.md): A use-after-free issue was addressed with improved memory management. (CVSS 8.8, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-43658](https://cve.now/CVE-2026-43658.md): The issue was addressed with improved memory handling. (CVSS 7.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-28992](https://cve.now/CVE-2026-28992.md): A memory corruption vulnerability was addressed with improved locking. (CVSS 4.7, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-28952](https://cve.now/CVE-2026-28952.md): An integer overflow was addressed with improved input validation. (CVSS 7.5, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-28905](https://cve.now/CVE-2026-28905.md): The issue was addressed with improved memory handling. (CVSS 7.5, Apple Safari · Apple iOS and iPadOS +3)
- [CVE-2026-28840](https://cve.now/CVE-2026-28840.md): A permissions issue was addressed with additional restrictions. (CVSS 7.8, Apple macOS)
- [CVE-2026-43661](https://cve.now/CVE-2026-43661.md): A buffer overflow issue was addressed with improved memory handling. (CVSS 7.5, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-28913](https://cve.now/CVE-2026-28913.md): The issue was addressed with improved memory handling. (CVSS 7.5, Apple Safari · Apple iOS and iPadOS +3)
- [CVE-2026-28944](https://cve.now/CVE-2026-28944.md): The issue was addressed with improved memory handling. (CVSS 7.5, Apple Safari · Apple iOS and iPadOS +2)
- [CVE-2026-28987](https://cve.now/CVE-2026-28987.md): A logging issue was addressed with improved data redaction. (CVSS 7.5, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-28991](https://cve.now/CVE-2026-28991.md): An out-of-bounds read was addressed with improved bounds checking. (CVSS 7.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-28929](https://cve.now/CVE-2026-28929.md): A logic issue was addressed with improved checks. (CVSS 7.5, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-28883](https://cve.now/CVE-2026-28883.md): A use-after-free issue was addressed with improved memory management. (CVSS 7.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-28964](https://cve.now/CVE-2026-28964.md): An inconsistent user interface issue was addressed with improved state management. (CVSS 7.5, Apple iOS and iPadOS · Apple visionOS)
- [CVE-2026-28972](https://cve.now/CVE-2026-28972.md): An out-of-bounds write issue was addressed with improved input validation. (CVSS 6.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-28860](https://cve.now/CVE-2026-28860.md): The issue was addressed with improved input validation. (CVSS 7.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-28925](https://cve.now/CVE-2026-28925.md): A buffer overflow was addressed with improved bounds checking. (CVSS 7.5, Apple macOS)
- [CVE-2026-28924](https://cve.now/CVE-2026-28924.md): A race condition was addressed with improved handling of symbolic links. (CVSS 7.5, Apple macOS)
- [CVE-2026-28965](https://cve.now/CVE-2026-28965.md): A privacy issue was addressed with improved checks. (CVSS 7.5, Apple iOS and iPadOS)
- [CVE-2026-43656](https://cve.now/CVE-2026-43656.md): An out-of-bounds write issue was addressed with improved input validation. (CVSS 7.3, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-28908](https://cve.now/CVE-2026-28908.md): A denial of service issue was addressed by removing the vulnerable code. (CVSS 7.5, Apple macOS)
- [CVE-2026-28990](https://cve.now/CVE-2026-28990.md): The issue was addressed with improved memory handling. (CVSS 7.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-28986](https://cve.now/CVE-2026-28986.md): A race condition was addressed with additional validation. (CVSS 7.5, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-28969](https://cve.now/CVE-2026-28969.md): A use after free issue was addressed with improved memory management. (CVSS 7.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-43660](https://cve.now/CVE-2026-43660.md): A validation issue was addressed with improved logic. (CVSS 7.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-28904](https://cve.now/CVE-2026-28904.md): The issue was addressed with improved memory handling. (CVSS 7.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-28953](https://cve.now/CVE-2026-28953.md): The issue was addressed with improved memory handling. (CVSS 7.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-28958](https://cve.now/CVE-2026-28958.md): This issue was addressed with improved data protection. (CVSS 5.5, Apple Safari · Apple iOS and iPadOS +2)
- [CVE-2026-39871](https://cve.now/CVE-2026-39871.md): A path handling issue was addressed with improved logic. (CVSS 7.5, Apple macOS)
- [CVE-2026-28919](https://cve.now/CVE-2026-28919.md): A consistency issue was addressed with improved state handling. (CVSS 7.8, Apple macOS)
- [CVE-2026-28962](https://cve.now/CVE-2026-28962.md): This issue was addressed with improved access restrictions. (CVSS 7.5, Apple Safari · Apple iOS and iPadOS +2)
- [CVE-2026-28974](https://cve.now/CVE-2026-28974.md): This issue was addressed with improved checks to prevent unauthorized actions. (CVSS 7.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-28923](https://cve.now/CVE-2026-28923.md): A logging issue was addressed with improved data redaction. (CVSS 8.8, Apple macOS)
- [CVE-2026-28954](https://cve.now/CVE-2026-28954.md): A file quarantine bypass was addressed with additional checks. (CVSS 7.5, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-28903](https://cve.now/CVE-2026-28903.md): The issue was addressed with improved memory handling. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-28846](https://cve.now/CVE-2026-28846.md): A buffer overflow was addressed with improved bounds checking. (CVSS 7.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-28915](https://cve.now/CVE-2026-28915.md): A parsing issue in the handling of directory paths was addressed with improved path validation. (CVSS 7.8, Apple macOS)
- [CVE-2026-28942](https://cve.now/CVE-2026-28942.md): A use-after-free issue was addressed with improved memory management. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-28978](https://cve.now/CVE-2026-28978.md): A permissions issue was addressed with additional restrictions. (CVSS 8.8, Apple macOS)
- [CVE-2026-28996](https://cve.now/CVE-2026-28996.md): A race condition was addressed with additional validation. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-28943](https://cve.now/CVE-2026-28943.md): A logging issue was addressed with improved data redaction. (CVSS 7.5, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-28914](https://cve.now/CVE-2026-28914.md): A logic issue was addressed with improved file handling. (CVSS 5.5, Apple macOS)
- [CVE-2026-43666](https://cve.now/CVE-2026-43666.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 6.2, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-28902](https://cve.now/CVE-2026-28902.md): The issue was addressed with improved memory handling. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-28847](https://cve.now/CVE-2026-28847.md): The issue was addressed with improved memory handling. (CVSS 8.8, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-28955](https://cve.now/CVE-2026-28955.md): The issue was addressed with improved memory handling. (CVSS 8.8, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-28922](https://cve.now/CVE-2026-28922.md): This issue was addressed through improved state management. (CVSS 6.5, Apple macOS)
- [CVE-2026-28830](https://cve.now/CVE-2026-28830.md): A race condition was addressed with additional validation. (CVSS 4.7, Apple macOS)
- [CVE-2026-28963](https://cve.now/CVE-2026-28963.md): A privacy issue was addressed by removing the vulnerable code. (CVSS 4.6, Apple iOS and iPadOS)
- [CVE-2026-28918](https://cve.now/CVE-2026-28918.md): An out-of-bounds access issue was addressed with improved bounds checking. (CVSS 6.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-39870](https://cve.now/CVE-2026-39870.md): The issue was addressed with improved memory handling. (CVSS 7.5, Apple macOS)
- [CVE-2026-28959](https://cve.now/CVE-2026-28959.md): A buffer overflow was addressed with improved bounds checking. (CVSS 7.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-42887](https://cve.now/CVE-2026-42887.md): Audiobookshelf: Stored Cross-Site Scripting in Login Page Custom Message (CVSS 4.5, advplyr audiobookshelf)
- [CVE-2026-42886](https://cve.now/CVE-2026-42886.md): Audiobookshelf: Memory amplification DoS via oversized compressed details entry in backup upload (CVSS 4.9, advplyr audiobookshelf)
- [CVE-2026-42885](https://cve.now/CVE-2026-42885.md): Audiobookshelf: Path prefix bypass in filesystem existence check leaks out-of-scope file existence (CVSS 4.3, advplyr audiobookshelf)
- [CVE-2026-42884](https://cve.now/CVE-2026-42884.md): Audiobookshelf: Collection endpoints bypass library access controls exposing restricted library data (CVSS 4.3, advplyr audiobookshelf)
- [CVE-2026-42883](https://cve.now/CVE-2026-42883.md): Audiobookshelf: Cross-library file exfiltration via unscoped bulk download endpoint (CVSS 6.5, advplyr audiobookshelf)
- [CVE-2026-42050](https://cve.now/CVE-2026-42050.md): ImageMagick: Stack buffer overflow in XTileImage (CVSS 5.5, ImageMagick)
- [CVE-2026-8321](https://cve.now/CVE-2026-8321.md): inkeep agents runAuth Middleware runAuth.ts createDevContext authentication bypass (CVSS 6.9, inkeep agents)
- [CVE-2026-8320](https://cve.now/CVE-2026-8320.md): jishenghua jshERP updatePlatformConfigByKey Endpoint UserService.java getUserByWeixinCode server-side request forgery (CVSS 5.1, jishenghua jshERP)
- [CVE-2026-42882](https://cve.now/CVE-2026-42882.md): oxyno-zeta/s3-proxy: Security Issues in Resource Path Matching (CVSS 9.4, oxyno-zeta s3-proxy · github.com/oxyno-zeta/s3-proxy)
- [CVE-2026-6146](https://cve.now/CVE-2026-6146.md): Amazon::Credentials versions through 1.2.0 for Perl uses rand to generate encryption keys (CVSS 5.3, BIGFOOT Amazon::Credentials)
- [CVE-2022-4988](https://cve.now/CVE-2022-4988.md): Alien::FreeImage versions through 1.001 for Perl contains several vulnerable libraries (CVSS 7.3, KMX Alien::FreeImage)
- [CVE-2026-42874](https://cve.now/CVE-2026-42874.md): Microdot: HTTP response splitting in Response.set\_cookie() (CVSS 3.7, miguelgrinberg microdot · microdot)
- [CVE-2026-2614](https://cve.now/CVE-2026-2614.md): Arbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflow (CVSS 7.5, mlflow/mlflow · mlflow)
- [CVE-2026-42565](https://cve.now/CVE-2026-42565.md): @workos/authkit-session: Open Redirect via state-derived redirect target (CVSS 4.3, workos authkit-session · @workos/authkit-session)
- [CVE-2026-42876](https://cve.now/CVE-2026-42876.md): External Secrets Operator: Privilege escalation with secret overwriting (CVSS 4.9, external-secrets · github.com/external-secrets/external-sec…)
- [CVE-2026-42875](https://cve.now/CVE-2026-42875.md): External Secrets Operator: Namespace Isolation Bypass in CAProvider ConfigMap Resolution for SecretStore (CVSS 5.3, external-secrets · github.com/external-secrets/external-sec…)
- [CVE-2026-8319](https://cve.now/CVE-2026-8319.md): aiwaves-cn agents cheshire\_cat\_core stray\_cat.py recall\_relevant\_memories\_to\_working\_memory resource consumption (CVSS 6.9, aiwaves-cn agents · ai-agents)
- [CVE-2026-42869](https://cve.now/CVE-2026-42869.md): SOCFortress CoPilot: Hardcoded JWT secret allows unauthenticated full admin compromise and lateral movement into all integrated SOC tools (CVSS 10.0, socfortress CoPilot)
- [CVE-2026-45026](https://cve.now/CVE-2026-45026.md): WeGIA: Stored XSS in html/atendido/processo\_aceitacao.php (CVSS 6.8, LabRedesCefetRJ WeGIA)
- [CVE-2026-45025](https://cve.now/CVE-2026-45025.md): WeGIA: Stored XSS in html/atendido/etapa\_processo.php (CVSS 6.8, LabRedesCefetRJ WeGIA)
- [CVE-2026-42873](https://cve.now/CVE-2026-42873.md): WeGIA: Error Handling Upload DocDependente (CVSS 0.0, LabRedesCefetRJ WeGIA)
- [CVE-2026-42872](https://cve.now/CVE-2026-42872.md): WeGIA: Reflected XSS in listar\_arquivos\_etapa.php (CVSS 6.1, LabRedesCefetRJ WeGIA)
- [CVE-2026-42870](https://cve.now/CVE-2026-42870.md): WeGIA: Cross-Site Scripting (XSS) Stored endpoint 'informacao\_adicional.php' parameter 'descricao' (CVSS 6.4, LabRedesCefetRJ WeGIA)
- [CVE-2026-42871](https://cve.now/CVE-2026-42871.md): WeGIA: Error Handling familiar\_docfamiliar (CVSS 6.9, LabRedesCefetRJ WeGIA)
- [CVE-2026-42866](https://cve.now/CVE-2026-42866.md): Tookie: Arbitrary file write via path traversal in -u username / -U userfile output filename (CVSS 6.7, Alfredredbird tookie-osint)
- [CVE-2026-42864](https://cve.now/CVE-2026-42864.md): FireFighter: Unauthenticated SSRF in Raid jira\_bot endpoint allows IAM credential theft (CVSS 9.9, ManoManoTech firefighter-incident · firefighter-incident)
- [CVE-2026-45224](https://cve.now/CVE-2026-45224.md): Crabbox \< 0.9.0 Path Traversal via Islo Provider Workspace Resolution (CVSS 6.8, openclaw crabbox · github.com/openclaw/crabbox)
- [CVE-2026-45223](https://cve.now/CVE-2026-45223.md): Crabbox \< 0.9.0 Authentication Bypass via Admin Claim Injection (CVSS 7.7, openclaw crabbox)
- [CVE-2026-43968](https://cve.now/CVE-2026-43968.md): CR Injection in SSE Encoder Enables Event Splitting via cow\_sse:event/1 (CVSS 6.3, ninenines cowlib)
- [CVE-2026-7790](https://cve.now/CVE-2026-7790.md): Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS (CVSS 8.7, ninenines cowlib)
- [CVE-2026-43969](https://cve.now/CVE-2026-43969.md): Cookie Request Header Injection via Unvalidated Encoder in cow\_cookie:cookie/1 (CVSS 2.1, ninenines cowlib · cowlib)
- [CVE-2026-45222](https://cve.now/CVE-2026-45222.md): Summarize Insecure Daemon Configuration File Permissions (CVSS 6.9, steipete summarize · @steipete/summarize)
- [CVE-2026-8318](https://cve.now/CVE-2026-8318.md): VectifyAI PageIndex PDF Table of Contents page\_index.py toc\_transformer infinite loop (CVSS 6.9, VectifyAI PageIndex)
- [CVE-2026-42865](https://cve.now/CVE-2026-42865.md): Inbox Zero: Cross-account cleaner email stream exposure (CVSS 2.3, elie222 inbox-zero)
- [CVE-2026-43995](https://cve.now/CVE-2026-43995.md): Flowise: SSRF Protection Bypass via Direct node-fetch / axios Usage (Patch Enforcement Failure) (CVSS 5.3, FlowiseAI Flowise · flowise +1)
- [CVE-2026-42856](https://cve.now/CVE-2026-42856.md): Network-AI: Missing authentication on MCP HTTP endpoint allows unauthenticated privileged tool calls (CVSS 8.7, Jovancoding Network-AI · network-ai)
- [CVE-2026-44413](https://cve.now/CVE-2026-44413.md): In JetBrains TeamCity before 2026.1 2025.11.5 authenticated users could expose server API to unauthorised access (CVSS 8.2, JetBrains TeamCity)
- [CVE-2026-42860](https://cve.now/CVE-2026-42860.md): Open edx Enterprise Service: SSRF via SAML metadata URL in sync\_provider\_data endpoint (CVSS 8.5, openedx edx-enterprise · edx-enterprise)
- [CVE-2026-42859](https://cve.now/CVE-2026-42859.md): Neat VNC: Buffer overflow due to oversized RSA public keys (CVSS 8.1, any1 neatvnc)
- [CVE-2026-42857](https://cve.now/CVE-2026-42857.md): Open edX Platform: Stored CSS Injection in Email Notifications via Incomplete HTML Sanitization (CVSS 4.6, openedx-platform)
- [CVE-2026-42858](https://cve.now/CVE-2026-42858.md): Open edX Platform: Server-Side Request Forgery (SSRF) in SAML Provider Data Sync Endpoint (CVSS 8.5, openedx-platform)
- [CVE-2026-43896](https://cve.now/CVE-2026-43896.md): jq: Stack Overflow in Recursive Object Merge (CVSS 6.2, jqlang jq)
- [CVE-2026-43895](https://cve.now/CVE-2026-43895.md): jq: Embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts (CVSS 4.4, jqlang jq)
- [CVE-2026-44777](https://cve.now/CVE-2026-44777.md): jq: stack overflow in module loading on mutual \`include\` (CVSS 5.4, jqlang jq)
- [CVE-2026-43894](https://cve.now/CVE-2026-43894.md): jq: Wild stack write via signed-integer overflow in decNumber D2U() macro (CVSS 6.2, jqlang jq)
- [CVE-2026-7210](https://cve.now/CVE-2026-7210.md): The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection (CVSS 6.3, Python Software Foundation CPython · libpython +2)
- [CVE-2026-41256](https://cve.now/CVE-2026-41256.md): jq: Embedded NUL truncates top-level jq programs loaded with -f (CVSS 5.5, jqlang jq)
- [CVE-2026-7308](https://cve.now/CVE-2026-7308.md): Nexus Repository 3 - Stored Cross-Site Scripting (XSS) via HTML Browse Page (CVSS 5.1, Sonatype Nexus Repository)
- [CVE-2026-40612](https://cve.now/CVE-2026-40612.md): jq: Stack overflow via unbounded recursion in jv\_contains (CVSS 5.4, jqlang jq)
- [CVE-2026-43640](https://cve.now/CVE-2026-43640.md): Bitwarden Server \< 2026.4.1 Authentication Bypass via SCIM API Key (CVSS 8.6, bitwarden server)
- [CVE-2026-41257](https://cve.now/CVE-2026-41257.md): jq: Signed-int overflow in \`stack\_reallocate\` (jq VM stack) (CVSS 6.4, jqlang jq)
- [CVE-2026-43639](https://cve.now/CVE-2026-43639.md): Bitwarden Server \< 2026.4.0 Missing Authorization via Provider Clients (CVSS 8.9, bitwarden server)
- [CVE-2026-43638](https://cve.now/CVE-2026-43638.md): Bitwarden Server \< 2026.4.1 Missing Authorization via Organization Cipher Import (CVSS 5.3, bitwarden server)
- [CVE-2026-3048](https://cve.now/CVE-2026-3048.md): Nexus Repository 3 - Improper LDAP Referral Handling (CVSS 5.1, Sonatype Nexus Repository)
- [CVE-2026-44659](https://cve.now/CVE-2026-44659.md): Zen Browser Mac - Address Bar Spoofing via Long Subdomain (CVSS 4.7, zen-browser desktop)
- [CVE-2026-44658](https://cve.now/CVE-2026-44658.md): Zen Browser: RSS Live-Folder Item URLs Are Not Scheme-Restricted Before Trusted Tab Creation (CVSS 2.4, zen-browser desktop)
- [CVE-2026-5266](https://cve.now/CVE-2026-5266.md): Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Echo. (CVSS 2.3, Wikimedia Foundation Echo)
- [CVE-2026-41431](https://cve.now/CVE-2026-41431.md): Zen Browser MAR updater ships with signature verification removed — unsigned updates accepted (CVSS 8.0, zen-browser desktop)
- [CVE-2026-34095](https://cve.now/CVE-2026-34095.md): action=raw with Special:Mypage subpage title responds with "Content-Type: text/html" on ctype=text/javascript request (CVSS 0.0, Wikimedia Foundation MediaWiki)
- [CVE-2026-34094](https://cve.now/CVE-2026-34094.md): Customized help link for page protection indicator is relative to subpage name, because the link target is missing the "/wiki/" prefix (CVSS 2.0, Wikimedia Foundation MediaWiki)
- [CVE-2026-41250](https://cve.now/CVE-2026-41250.md): XSS in taiga-front (CVSS 5.7, taigaio taiga-front)
- [CVE-2026-5172](https://cve.now/CVE-2026-5172.md): CVE-2026-5172 (CVSS 7.3, dnsmasq)
- [CVE-2026-34093](https://cve.now/CVE-2026-34093.md): Special:UserRights allows viewing user rights from private wiki (CVSS 1.1, Wikimedia Foundation MediaWiki)
- [CVE-2026-4893](https://cve.now/CVE-2026-4893.md): CVE-2026-4893 (CVSS 5.3, dnsmasq)
- [CVE-2026-4892](https://cve.now/CVE-2026-4892.md): CVE-2026-4892 (CVSS 8.4, dnsmasq)
- [CVE-2026-4891](https://cve.now/CVE-2026-4891.md): CVE-2026-4891 (CVSS 5.3, dnsmasq)
- [CVE-2026-4890](https://cve.now/CVE-2026-4890.md): CVE-2026-4890 (CVSS 7.5, dnsmasq)
- [CVE-2026-2291](https://cve.now/CVE-2026-2291.md): CVE-2026-2291 (CVSS 7.3, dnsmasq)
- [CVE-2026-45006](https://cve.now/CVE-2026-45006.md): OpenClaw \< 2026.4.23 - Unsafe Config Mutation via Gateway Tool Denylist Bypass (CVSS 7.7, OpenClaw)
- [CVE-2026-45005](https://cve.now/CVE-2026-45005.md): OpenClaw \< 2026.4.23 - Webhook Route Secret Cache Not Invalidated After Rotation (CVSS 5.9, OpenClaw)
- [CVE-2026-45004](https://cve.now/CVE-2026-45004.md): OpenClaw \< 2026.4.23 - Arbitrary Code Execution via setup-api.js in Current Working Directory (CVSS 8.4, OpenClaw)
- [CVE-2026-45003](https://cve.now/CVE-2026-45003.md): OpenClaw \< 2026.4.22 - Connector Endpoint Host Override via Workspace dotenv Files (CVSS 4.1, OpenClaw)
- [CVE-2026-45002](https://cve.now/CVE-2026-45002.md): OpenClaw \< 2026.4.20 - Hook Session-Key Bypass via Template Mapping (CVSS 6.3, OpenClaw)
- [CVE-2026-45001](https://cve.now/CVE-2026-45001.md): OpenClaw \< 2026.4.20 - Gateway Config Mutation Guard Bypass via Agent Tool Access (CVSS 6.0, OpenClaw)
- [CVE-2026-45000](https://cve.now/CVE-2026-45000.md): OpenClaw \< 2026.4.20 - Server-Side Request Forgery via Browser CDP Profile Creation (CVSS 2.3, OpenClaw)
- [CVE-2026-44999](https://cve.now/CVE-2026-44999.md): OpenClaw \< 2026.4.20 - Improper Trust Labeling in Isolated Cron Awareness Events (CVSS 6.3, OpenClaw)
- [CVE-2026-44998](https://cve.now/CVE-2026-44998.md): OpenClaw \< 2026.4.20 - Tool Policy Bypass via Bundled MCP/LSP Tools (CVSS 2.3, OpenClaw)
- [CVE-2026-44997](https://cve.now/CVE-2026-44997.md): OpenClaw \< 2026.4.22 - Security Envelope Constraint Bypass in ACP Child Sessions (CVSS 2.3, OpenClaw)
- [CVE-2026-44996](https://cve.now/CVE-2026-44996.md): OpenClaw \< 2026.4.15 - Arbitrary Local File Read via Webchat Audio Embedding (CVSS 6.3, OpenClaw)
- [CVE-2026-44995](https://cve.now/CVE-2026-44995.md): OpenClaw \< 2026.4.20 - Arbitrary Code Execution via MCP stdio Environment Variables (CVSS 5.4, OpenClaw)
- [CVE-2026-44994](https://cve.now/CVE-2026-44994.md): OpenClaw \< 2026.4.22 - Authentication Bypass in Gateway Control UI Bootstrap Config Endpoint (CVSS 6.3, OpenClaw)
- [CVE-2026-44993](https://cve.now/CVE-2026-44993.md): OpenClaw \< 2026.4.20 - Direct Message Misclassification in Feishu Card Actions (CVSS 2.3, OpenClaw)
- [CVE-2026-44992](https://cve.now/CVE-2026-44992.md): OpenClaw 2026.4.5 through 2026.4.19 - MiniMax API Host Override via Workspace dotenv (CVSS 4.1, OpenClaw)
- [CVE-2026-44991](https://cve.now/CVE-2026-44991.md): OpenClaw \< 2026.4.21 - Authorization Bypass in Owner-Enforced Commands via Wildcard Channel Senders (CVSS 2.3, OpenClaw)
- [CVE-2026-42316](https://cve.now/CVE-2026-42316.md): KQL injection via kusto.tables.topics.mapping in kafka-sink-azure-kusto (CVSS 5.9, kafka-sink-azure-kusto)
- [CVE-2026-44226](https://cve.now/CVE-2026-44226.md): pyLoad: Unauthenticated traceback disclosure via global exception handler in WebUI (CVSS 5.3, pyload · pyload-ng)
- [CVE-2026-42315](https://cve.now/CVE-2026-42315.md): pyLoad: Path Traversal via Package Folder Name in set\_package\_data (CVSS 8.1, pyload · pyload-ng)
- [CVE-2026-42314](https://cve.now/CVE-2026-42314.md): pyLoad: Path Traversal via Package Folder Name (CVSS 6.5, pyload · pyload-ng)
- [CVE-2026-42312](https://cve.now/CVE-2026-42312.md): pyload-ng: non-admin SETTINGS users can disable outbound TLS peer verification (CVSS 6.8, pyload · pyload-ng)
- [CVE-2026-42313](https://cve.now/CVE-2026-42313.md): pyload-ng: non-admin SETTINGS users can redirect all outbound traffic through an attacker-controlled proxy (CVSS 8.3, pyload · pyload-ng)
- [CVE-2026-8305](https://cve.now/CVE-2026-8305.md): OpenClaw bluebubbles Webhook monitor.ts handleBlueBubblesWebhookRequest improper authentication (CVSS 6.9, OpenClaw)
- [CVE-2026-2393](https://cve.now/CVE-2026-2393.md): Server-Side Request Forgery (SSRF) in mlflow/mlflow (CVSS 7.1, mlflow/mlflow · mlflow)
- [CVE-2026-3609](https://cve.now/CVE-2026-3609.md): XIGNCODE3 xhunter1.sys kernel driver contains a Privilege Escalation Vulnerability (CVSS 5.3, Wellbia XIGNCODE3)
- [CVE-2026-42603](https://cve.now/CVE-2026-42603.md): OWASP BLT: pre-commit-fix.yaml executes untrusted fork code via pull\_request\_target (CVSS 8.8, OWASP-BLT BLT)
- [CVE-2026-42349](https://cve.now/CVE-2026-42349.md): Clerk: Authorization bypass when combining organization, billing, or reverification checks (CVSS 7.6, clerk javascript · @clerk shared +32)
- [CVE-2026-33362](https://cve.now/CVE-2026-33362.md): Meari SDK hardcoded cryptographic keys (CVSS 8.6, com.meari.sdk)
- [CVE-2026-33361](https://cve.now/CVE-2026-33361.md): Meari weak XOR obfuscation (CVSS 7.5, com.meari.sdk)
- [CVE-2026-33359](https://cve.now/CVE-2026-33359.md): Meari unauthenticated alert image access in cloud object storage (CVSS 7.5, Meari Alibaba OSS Hosted)
- [CVE-2026-33357](https://cve.now/CVE-2026-33357.md): Meari OpenAPI device status IDOR (CVSS 7.5, com.meari.sdk)
- [CVE-2026-33356](https://cve.now/CVE-2026-33356.md): Meari MQTT broker missing per-device subscribe ACL (CVSS 7.7, Meari IoT Cloud MQTT Broker EMQX)
- [CVE-2026-42843](https://cve.now/CVE-2026-42843.md): grav-plugin-api: Grav API Privilege Escalation to Super Admin (CVSS 8.8, getgrav grav-plugin-api · getgrav/grav-plugin-api)
- [CVE-2026-44737](https://cve.now/CVE-2026-44737.md): grav-plugin-admin: Stored Cross-Site Scripting (XSS) Reflected endpoint /admin/pages/\[page\], parameter data\[header\]\[title\] (CVSS 6.2, getgrav grav-plugin-admin · getgrav/grav)
- [CVE-2026-44738](https://cve.now/CVE-2026-44738.md): Grav: Twig sandbox allows editor-role users to exfiltrate all plugin secrets via Config::toArray() (CVSS 7.7, getgrav grav · getgrav/grav)
- [CVE-2026-42845](https://cve.now/CVE-2026-42845.md): Grav: Anonymous Page Content Overwrite via Form File Upload filename Override (CVSS 7.7, getgrav grav-plugin-form · getgrav/grav-plugin-form)
- [CVE-2026-42842](https://cve.now/CVE-2026-42842.md): grav-plugin-form: XSS via Taxonomy Field Values in Admin Panel (CVSS 5.4, getgrav grav · getgrav grav-plugin-form +1)
- [CVE-2026-42613](https://cve.now/CVE-2026-42613.md): Grav: Privilege Escalation via Missing Server-Side Validation of groups/access (CVSS 9.4, getgrav grav · getgrav/grav)
- [CVE-2026-42612](https://cve.now/CVE-2026-42612.md): Grav: Publisher-Level Stored XSS via Unquoted Event Attributes (CVSS 8.5, getgrav grav · getgrav/grav)
- [CVE-2026-42611](https://cve.now/CVE-2026-42611.md): Grav: Stored XSS via Tag Injection (CVSS 8.9, getgrav grav · getgrav/grav)
- [CVE-2026-6815](https://cve.now/CVE-2026-6815.md): CVE-2026-6815 (CVSS 5.9, Casdoor · github.com/casdoor/casdoor)
- [CVE-2026-42610](https://cve.now/CVE-2026-42610.md): Grav: Sensitive Information Disclosure via Accounts Service Bypass (CVSS 6.5, getgrav grav · getgrav/grav)
- [CVE-2026-42609](https://cve.now/CVE-2026-42609.md): Grav: Administrative Account Disruption and Privilege De-escalation via User Overwrite Logic (CVSS 8.1, getgrav grav · getgrav/grav)
- [CVE-2026-42608](https://cve.now/CVE-2026-42608.md): Grav: Unauthenticated Path Traversal & Arbitrary File Write in FormFlash component. (CVSS 8.8, getgrav grav · getgrav/grav)
- [CVE-2026-34092](https://cve.now/CVE-2026-34092.md): Block UI elements in 'tools'-sidebar shows presence of an autoblocked IP (CVSS 2.1, Wikimedia Foundation MediaWiki)
- [CVE-2026-8292](https://cve.now/CVE-2026-8292.md): Open5GS NRF conv.c yuarel\_parse denial of service (CVSS 5.3, Open5GS)
- [CVE-2026-42607](https://cve.now/CVE-2026-42607.md): Grav: Remote Code Execution (RCE) via Malicious Plugin ZIP Upload in Direct Install Feature (CVSS 9.1, getgrav grav · getgrav/grav)
- [CVE-2026-34091](https://cve.now/CVE-2026-34091.md): User localization leaked by AbuseFilter + EventStream (CVSS 5.5, Wikimedia Foundation MediaWiki)
- [CVE-2026-42841](https://cve.now/CVE-2026-42841.md): Grav: Stored XSS via Markdown media attribute() action in Grav CMS (CVSS 6.9, getgrav grav · getgrav/grav)
- [CVE-2026-34090](https://cve.now/CVE-2026-34090.md): Suggested investigations: Handle suppressed usernames (CVSS 4.8, Wikimedia Foundation CheckUser)
- [CVE-2026-34089](https://cve.now/CVE-2026-34089.md): Memory leak in Scribunto causes runJobs.php to run out of memory (CVSS 2.3, Wikimedia Foundation Scribunto)
- [CVE-2026-34088](https://cve.now/CVE-2026-34088.md): RecentChanges entries expose suppressed content via generated log page html (CVSS 1.3, Wikimedia Foundation MediaWiki)
- [CVE-2026-44201](https://cve.now/CVE-2026-44201.md): Wagtail: Improper restriction handling on Documents and Images API (CVSS 5.3, wagtail)
- [CVE-2026-44200](https://cve.now/CVE-2026-44200.md): Wagtail: Improper permission handling when copying pages (CVSS 6.5, wagtail)
- [CVE-2026-44199](https://cve.now/CVE-2026-44199.md): Wagtail: Improper permission handling when deleting form submissions (CVSS 6.5, wagtail)
- [CVE-2026-34087](https://cve.now/CVE-2026-34087.md): Users API leaks whether privileged users have their user groups disabled for lack of 2FA (CVSS 5.1, Wikimedia Foundation OATHAuth)
- [CVE-2026-44198](https://cve.now/CVE-2026-44198.md): Wagtail: Improper permission handling when viewing page history (CVSS 4.3, wagtail)
- [CVE-2026-44197](https://cve.now/CVE-2026-44197.md): Wagtail: Improper permission handling when comparing revisions (CVSS 6.5, wagtail)
- [CVE-2026-7820](https://cve.now/CVE-2026-7820.md): pgAdmin 4: Account-lockout bypass via Flask-Security default /login view (CVSS 6.5, pgadmin.org pgAdmin · pgadmin4)
- [CVE-2026-7819](https://cve.now/CVE-2026-7819.md): pgAdmin 4: Symbolic-link path traversal in File Manager allows arbitrary file write (CVSS 8.1, pgadmin.org pgAdmin · pgadmin4)
- [CVE-2026-7818](https://cve.now/CVE-2026-7818.md): pgAdmin 4: Unsafe deserialization (CWE-502) in file-backed session manager leads to remote code execution (CVSS 7.0, pgadmin.org pgAdmin · pgadmin4)
- [CVE-2026-7817](https://cve.now/CVE-2026-7817.md): pgAdmin 4: Local file inclusion and server-side request forgery in LLM API configuration endpoints (CVSS 6.5, pgadmin.org pgAdmin · pgadmin4)
- [CVE-2026-7816](https://cve.now/CVE-2026-7816.md): pgAdmin 4: OS command injection in Import/Export query export via psql metacommand breakout (CVSS 8.8, pgadmin.org pgAdmin · pgadmin4)
- [CVE-2026-7815](https://cve.now/CVE-2026-7815.md): pgAdmin 4: SQL injection in Maintenance tool option values leading to remote code execution (CVSS 8.8, pgadmin.org pgAdmin · pgadmin4)
- [CVE-2026-7814](https://cve.now/CVE-2026-7814.md): pgAdmin 4: Stored XSS via crafted PostgreSQL object names in Browser Tree and Explain Visualizer (CVSS 4.8, pgadmin.org pgAdmin · pgadmin4)
- [CVE-2026-7813](https://cve.now/CVE-2026-7813.md): pgAdmin 4: Cross-user data access and shared-server privilege escalation in server mode (CVSS 9.9, pgadmin.org pgAdmin · pgadmin4)
- [CVE-2026-34086](https://cve.now/CVE-2026-34086.md): AbuseFilter misuses ::userCanBitfield, exposing access-controlled information (CVSS 2.1, Wikimedia Foundation AbuseFilter)
- [CVE-2026-44643](https://cve.now/CVE-2026-44643.md): Angular Expressions - Remote Code Execution using filters (CVSS 9.3, peerigon angular-expressions · angular-expressions)
- [CVE-2026-3320](https://cve.now/CVE-2026-3320.md): Multiple vulnerabilities in Cradle e-commerce (CVSS 5.1, e-commerce Cradle)
- [CVE-2026-3319](https://cve.now/CVE-2026-3319.md): Multiple vulnerabilities in Cradle e-commerce (CVSS 5.1, e-commerce Cradle)
- [CVE-2026-6093](https://cve.now/CVE-2026-6093.md): Corteza 2024.9.8 - SQL Injection in MSSQL JSON-path meta filter via incorrect T-SQL string escaping (CVSS 6.0, cortezaproject corteza)
- [CVE-2026-8291](https://cve.now/CVE-2026-8291.md): Open5GS NRF nnrf-handler.c ogs\_nnrf\_nfm\_handle\_nf\_profile denial of service (CVSS 5.3, Open5GS)
- [CVE-2026-8290](https://cve.now/CVE-2026-8290.md): Open5GS SMF nsmf-handler.c smf\_nsmf\_handle\_update\_data\_in\_vsmf denial of service (CVSS 5.3, Open5GS)
- [CVE-2026-4802](https://cve.now/CVE-2026-4802.md): Cockpit: cockpit: arbitrary command execution via crafted links in system logs ui (CVSS 8.0, Red Hat Enterprise Linux)
- [CVE-2026-8289](https://cve.now/CVE-2026-8289.md): Open5GS SMF nsmf-handler.c smf\_nsmf\_handle\_update\_data\_in\_vsmf denial of service (CVSS 5.3, Open5GS)
- [CVE-2026-8288](https://cve.now/CVE-2026-8288.md): Open5GS SMF gsm-handler.c denial of service (CVSS 5.3, Open5GS)
- [CVE-2025-10470](https://cve.now/CVE-2025-10470.md): Denial-of-Service via Magic Link Authentication in WSO2 Identity Server Allows Service Unavailability (CVSS 8.6, WSO2 Identity Server · WSO2 Carbon MagicLink Authenticator…)
- [CVE-2025-9973](https://cve.now/CVE-2025-9973.md): Authorization Bypass via Adaptive Authentication in WSO2 Identity Server Allows Cross-Organization Account Takeover (CVSS 6.4, WSO2 Identity Server · WSO2 Conditional Authentication User…)
- [CVE-2026-6956](https://cve.now/CVE-2026-6956.md): Reflected XSS in ATutor (CVSS 5.1, ATutor)
- [CVE-2026-6909](https://cve.now/CVE-2026-6909.md): Reflected XSS in ATutor (CVSS 5.1, ATutor)
- [CVE-2026-26946](https://cve.now/CVE-2026-26946.md): Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper privilege management vulnerab (CVSS 6.7, Dell ECS · Dell ObjectScale)
- [CVE-2025-8325](https://cve.now/CVE-2025-8325.md): Improper Access Control via Gateway API in Multiple WSO2 Products Allows Unauthorized Operations (CVSS 6.3, WSO2 API Control Plane · WSO2 Universal Gateway +4)
- [CVE-2026-35157](https://cve.now/CVE-2026-35157.md): Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper neutralization of formula ele (CVSS 5.8, Dell ECS · Dell ObjectScale)
- [CVE-2026-41951](https://cve.now/CVE-2026-41951.md): Path traversal vulnerability exists in GROWI v7.5.0 and earlier, which may allow an attacker to execute arbitrary EJS templates on the serve (CVSS 7.2, GROWI)
- [CVE-2025-8154](https://cve.now/CVE-2025-8154.md): HTTP Header Injection via Webhook API in Multiple WSO2 Products Allows Response Header Manipulation (CVSS 5.3, WSO2 API Manager · WSO2 Universal Gateway +4)
- [CVE-2025-43992](https://cve.now/CVE-2025-43992.md): Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an authentication bypass by assumed-immut (CVSS 5.6, Dell ECS · Dell ObjectScale)
- [CVE-2025-10908](https://cve.now/CVE-2025-10908.md): Account Lock Bypass via Magic Link or Pass Key Authentication in WSO2 Identity Server Allows Unauthorized Access (CVSS 7.3, WSO2 Identity Server · WSO2 Carbon MagicLink Authenticator…)
- [CVE-2026-40636](https://cve.now/CVE-2026-40636.md): Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains a use of hard-coded credentials vulnerabi (CVSS 9.8, Dell ECS · Dell ObjectScale)
- [CVE-2024-0391](https://cve.now/CVE-2024-0391.md): Username Enumeration via Email OTP Flow in Multiple WSO2 Products Allows User Account Discovery (CVSS 5.3, WSO2 Identity Server · WSO2 Open Banking IAM +2)
- [CVE-2026-32658](https://cve.now/CVE-2026-32658.md): Dell Automation Platform versions prior to 2.0.0.0, contains a missing authorization vulnerability. (CVSS 8.0, Dell Automation Platform)
- [CVE-2026-41018](https://cve.now/CVE-2026-41018.md): Apache Airflow Providers Elasticsearch: Elasticsearch task-log handler leaks credentials embedded in the host URL (CVSS 6.5, Apache Software Foundation Apache Airflow Providers Elastic…)
- [CVE-2026-43826](https://cve.now/CVE-2026-43826.md): Apache Airflow Providers OpenSearch: OpenSearch task-log handler leaks credentials embedded in the host URL (CVSS 6.5, Apache Software Foundation Apache Airflow Providers OpenSea…)
- [CVE-2026-5084](https://cve.now/CVE-2026-5084.md): WebDyne::Session versions before 3.003\_704 for Perl generate the session id insecurely (CVSS 6.5, ASPEER WebDyne::Session)
- [CVE-2026-43500](https://cve.now/CVE-2026-43500.md): rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (CVSS 7.8, Linux)
- [CVE-2026-6433](https://cve.now/CVE-2026-6433.md): Custom CSS JS PHP \<= 2.0.7 - Unauthenticated SQL Injection to RCE (CVSS 7.3, Custom css-js-php)
- [CVE-2026-1677](https://cve.now/CVE-2026-1677.md): net: TLS 1.2 connections allowed on TLS 1.3 sockets (CVSS 5.3, zephyrproject-rtos Zephyr)
- [CVE-2026-8276](https://cve.now/CVE-2026-8276.md): bettercap MySQL Server mysql\_server.go integer coercion (CVSS 6.3, bettercap · github.com/bettercap/bettercap/v2)
- [CVE-2026-8275](https://cve.now/CVE-2026-8275.md): bettercap zerogod IPP Service zerogod\_ipp\_primitives.go ippReadChunkedBody integer coercion (CVSS 6.3, bettercap · github.com/bettercap/bettercap +1)
- [CVE-2026-8274](https://cve.now/CVE-2026-8274.md): npitre cramfs-tools Directory cramfsck.c do\_directory path traversal (CVSS 4.8, npitre cramfs-tools)
- [CVE-2026-8273](https://cve.now/CVE-2026-8273.md): D-Link DNS-320 system\_mgr.cgi cgi\_merge\_user os command injection (CVSS 5.1, D-Link DNS-320)
- [CVE-2026-8272](https://cve.now/CVE-2026-8272.md): D-Link DNS-320 webfile\_mgr.cgi chown os command injection (CVSS 5.1, D-Link DNS-320)
- [CVE-2026-8271](https://cve.now/CVE-2026-8271.md): D-Link DNS-320 network\_mgr.cgi cgi\_upnp\_edit os command injection (CVSS 5.1, D-Link DNS-320)
- [CVE-2026-8270](https://cve.now/CVE-2026-8270.md): Open5GS SMF ogs\_nas\_parse\_qos\_rules denial of service (CVSS 5.3, Open5GS)
- [CVE-2026-8269](https://cve.now/CVE-2026-8269.md): Open5GS SMF smf\_nsmf\_handle\_create\_sm\_context denial of service (CVSS 5.3, Open5GS)
- [CVE-2026-8268](https://cve.now/CVE-2026-8268.md): Open5GS SMF OpenAPI\_list\_create denial of service (CVSS 5.3, Open5GS)
- [CVE-2026-8267](https://cve.now/CVE-2026-8267.md): Open5GS SMF smf\_nsmf\_handle\_created\_data\_in\_vsmf denial of service (CVSS 5.3, Open5GS)
- [CVE-2026-8266](https://cve.now/CVE-2026-8266.md): Open5GS SMF gsm-build.c gsm\_build\_pdu\_session\_establishment\_accept denial of service (CVSS 5.3, Open5GS)
- [CVE-2026-8265](https://cve.now/CVE-2026-8265.md): Tenda AC6 httpd getLogFile get\_log\_file os command injection (CVSS 5.1, Tenda AC6)
- [CVE-2026-8264](https://cve.now/CVE-2026-8264.md): Tenda AC6 httpd WifiApScan formWifiApScan os command injection (CVSS 5.3, Tenda AC6)
- [CVE-2026-8263](https://cve.now/CVE-2026-8263.md): Tenda AC6 httpd WifiExtraSet fromSetWirelessRepeat os command injection (CVSS 5.1, Tenda AC6)
- [CVE-2026-8262](https://cve.now/CVE-2026-8262.md): Devs Palace ERP Online chart-save cross site scripting (CVSS 4.8, Devs Palace ERP Online)
- [CVE-2026-8261](https://cve.now/CVE-2026-8261.md): Squirrel sqobject.cpp Load heap-based overflow (CVSS 5.1, Squirrel)
- [CVE-2026-8260](https://cve.now/CVE-2026-8260.md): D-Link DCS-935L HNAP Service hnap\_service SetDeviceSettings buffer overflow (CVSS 8.7, D-Link DCS-935L)
- [CVE-2026-8259](https://cve.now/CVE-2026-8259.md): Tenda AC6 httpd telnet os command injection (CVSS 5.1, Tenda AC6)
- [CVE-2026-8258](https://cve.now/CVE-2026-8258.md): Squirrel sqstdstring.cpp validate\_format stack-based overflow (CVSS 4.8, Squirrel)
- [CVE-2026-8257](https://cve.now/CVE-2026-8257.md): WebAssembly Binaryen BrOn wasm-ir-builder.cpp makeBrOn assertion (CVSS 4.8, WebAssembly Binaryen)
- [CVE-2026-8256](https://cve.now/CVE-2026-8256.md): Devs Palace ERP Online mr-save cross site scripting (CVSS 4.8, Devs Palace ERP Online)
- [CVE-2026-8255](https://cve.now/CVE-2026-8255.md): Devs Palace ERP Online add\_new\_customer cross site scripting (CVSS 4.8, Devs Palace ERP Online)
- [CVE-2025-61305](https://cve.now/CVE-2025-61305.md): A reflected cross-site scripted (XSS) vulnerability in the dfm-menu\_firmware.php component of GmbH Mecury Managed Print Services (docuForm) (CVSS 6.1)
- [CVE-2025-61306](https://cve.now/CVE-2025-61306.md): A reflected cross-site scripted (XSS) vulnerability in the dfm-menu\_coveragealerts.php component of GmbH Mecury Managed Print Services (docu (CVSS 6.1)
- [CVE-2025-61307](https://cve.now/CVE-2025-61307.md): A reflected cross-site scripted (XSS) vulnerability in the acc-menu\_papers.php component of GmbH Mecury Managed Print Services (docuForm) v1 (CVSS 6.1)
- [CVE-2025-61308](https://cve.now/CVE-2025-61308.md): A reflected cross-site scripted (XSS) vulnerability in the dfm-menu\_maintenance.php component of GmbH Mecury Managed Print Services (docuFor (CVSS 6.1)
- [CVE-2025-61309](https://cve.now/CVE-2025-61309.md): A reflected cross-site scripted (XSS) vulnerability in the dfm-menu\_departments.php component of GmbH Mecury Managed Print Services (docuFor (CVSS 6.1)
- [CVE-2025-61310](https://cve.now/CVE-2025-61310.md): A reflected cross-site scripted (XSS) vulnerability in the acc-menu\_billings.php component of GmbH Mecury Managed Print Services (docuForm) (CVSS 6.1)
- [CVE-2025-61311](https://cve.now/CVE-2025-61311.md): A reflected cross-site scripted (XSS) vulnerability in the dfm-menu\_alerts.php component of GmbH Mecury Managed Print Services (docuForm) v1 (CVSS 7.3)
- [CVE-2025-61312](https://cve.now/CVE-2025-61312.md): A reflected cross-site scripted (XSS) vulnerability in the acc-menu\_pricess.php component of GmbH Mecury Managed Print Services (docuForm) v (CVSS 7.3)
- [CVE-2025-61313](https://cve.now/CVE-2025-61313.md): A reflected cross-site scripted (XSS) vulnerability in the dfm-menu\_markeralerts.php component of GmbH Mecury Managed Print Services (docuFo (CVSS 7.3)
- [CVE-2025-61314](https://cve.now/CVE-2025-61314.md): A reflected cross-site scripted (XSS) vulnerability in the dfm-menu\_orderopt.php component of GmbH Mecury Managed Print Services (docuForm) (CVSS 7.3)
- [CVE-2025-65415](https://cve.now/CVE-2025-65415.md): docuFORM Managed Print Service Client 11.11c is vulnerable to a session fixation attack via the login page of the application. (CVSS 5.4)
- [CVE-2025-65416](https://cve.now/CVE-2025-65416.md): docuFORM Managed Print Service Client 11.11c is vulnerable to arbitrary file upload via pmupdate.php. (CVSS 6.3)
- [CVE-2025-65417](https://cve.now/CVE-2025-65417.md): docuFORM Managed Print Service Client 11.11c is vulnerable to a reflected cross site scripting attack via the login page of the application. (CVSS 6.1)
- [CVE-2025-65418](https://cve.now/CVE-2025-65418.md): docuFORM Managed Print Service Client 11.11c is vulnerable to a directory traversal allowing attackers to read arbitrary files via crafted u (CVSS 7.5)
- [CVE-2026-30635](https://cve.now/CVE-2026-30635.md): Command injection vulnerability in automagik-genie 2.5.27 MCP Server allows attackers to execute arbitrary commands via the view\_task (aka v (CVSS 8.1, automagik-genie)
- [CVE-2026-31246](https://cve.now/CVE-2026-31246.md): GPT-Pilot thru commit 0819827ce20346ef5f25b3fe29293cb448840565 (2025-09-03) contains a command injection vulnerability (CWE-78) in the Execu (CVSS 6.5, gpt-pilot)
- [CVE-2026-31247](https://cve.now/CVE-2026-31247.md): Docling's JATS XML backend is vulnerable to XML Entity Expansion (XXE) attacks thru 2.61.0. (CVSS 7.5, docling)
- [CVE-2026-31248](https://cve.now/CVE-2026-31248.md): Docling's METS GBS backend is vulnerable to XML Entity Expansion (XXE) attacks thru 2.61.0. (CVSS 7.5, docling)
- [CVE-2026-31249](https://cve.now/CVE-2026-31249.md): CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in (CVSS 7.3)
- [CVE-2026-31250](https://cve.now/CVE-2026-31250.md): CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in (CVSS 7.3)
- [CVE-2026-31251](https://cve.now/CVE-2026-31251.md): CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in (CVSS 7.3)
- [CVE-2026-31252](https://cve.now/CVE-2026-31252.md): CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in (CVSS 5.7)
- [CVE-2026-31253](https://cve.now/CVE-2026-31253.md): The flash-attention training framework thru commit e724e2588cbe754beb97cf7c011b5e7e34119e62 (2025-13-04) contains an insecure deserializatio (CVSS 7.3, flash-attn)
- [CVE-2026-31254](https://cve.now/CVE-2026-31254.md): The flash-attention project thru commit e724e2588cbe754beb97cf7c011b5e7e34119e62 (2025-13-04) contains a code injection vulnerability (CWE-9 (CVSS 7.3)
- [CVE-2026-36734](https://cve.now/CVE-2026-36734.md): EDIMAX BR-6428nS V3 1.15 is vulnerable to Command Injection. (CVSS 8.8)
- [CVE-2026-36906](https://cve.now/CVE-2026-36906.md): Cross Site Scripting vulnerability in iotgateway v.3.0.1 allows a remote attacker to execute arbitrary code via the Log Record Function (CVSS 6.1)
- [CVE-2026-36962](https://cve.now/CVE-2026-36962.md): SQL Injection in MuuCMF T6 v1.9.4.20260115 allows an unauthenticated attacker to compromise the entire database, achieve unauthorized admini (CVSS 7.3)
- [CVE-2026-36983](https://cve.now/CVE-2026-36983.md): D-Link DCS-932L v2.18.01 is vulnerable to Command Injection in the function sub\_42EF14 of the file /bin/alphapd. (CVSS 7.3)
- [CVE-2026-37630](https://cve.now/CVE-2026-37630.md): An issue in QuickJS-NG v.0.12.1 allows an attacker to execute arbitrary code via the js\_mapped\_arguments\_mark function (CVSS 7.3)
- [CVE-2026-38566](https://cve.now/CVE-2026-38566.md): HireFlow v1.2 does not implement CSRF token validation on any state-changing POST endpoint. (CVSS 8.1)
- [CVE-2026-38567](https://cve.now/CVE-2026-38567.md): HireFlow v1.2 is vulnerable to SQL injection in the /login and /search endpoints. (CVSS 9.8)
- [CVE-2026-38568](https://cve.now/CVE-2026-38568.md): HireFlow v1.2 is vulnerable to Incorrect Access Control. (CVSS 8.1)
- [CVE-2026-38569](https://cve.now/CVE-2026-38569.md): HireFlow v1.2 is vulnerable to Cross Site Scripting (XSS) in candidate\_detail.html via the Resume or Feedback Comment fields via POST /candi (CVSS 5.4)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-05-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.