# CVEs published 2026-05-12

553 CVEs were published on May 12, 2026: 72 critical, 285 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2026-8053](https://cve.now/CVE-2026-8053.md): FlatBSON Duplicate Field Index Drift (CVSS 8.7, MongoDB Server)
- [CVE-2026-42158](https://cve.now/CVE-2026-42158.md): Flowsint: Broken Access Control allows modification of investigation metadata from any user (CVSS 2.3, reconurge flowsint)
- [CVE-2026-42156](https://cve.now/CVE-2026-42156.md): Flowsint: Cypher query injection in node type on node creation (CVSS 7.1, reconurge flowsint)
- [CVE-2026-42157](https://cve.now/CVE-2026-42157.md): Flowsint: Stored XSS on map node marker in map page (CVSS 5.1, reconurge flowsint)
- [CVE-2026-44352](https://cve.now/CVE-2026-44352.md): Flowsint: Broken Access Control allows reading of sketch logs from any user (CVSS 5.3, reconurge flowsint)
- [CVE-2026-44245](https://cve.now/CVE-2026-44245.md): Kyverno: \[policy-reporter-ui\] XSS via Stored Property Values in PropertyCard Component (CVSS 6.1, kyverno · github.com/kyverno/policy-reporter-ui)
- [CVE-2026-44347](https://cve.now/CVE-2026-44347.md): Warpgate: SSO CSRF -- State Token Not Validated on Return (CVSS 5.8, warp-tech warpgate)
- [CVE-2026-44341](https://cve.now/CVE-2026-44341.md): GoJobs: Insecure Direct Object Reference (IDOR) in Job Retrieval Endpoint (CVSS 5.3, karnop gojobs)
- [CVE-2026-41901](https://cve.now/CVE-2026-41901.md): Thymeleaf: Improper recognition of unauthorized syntax patterns in sandboxed Thymeleaf expressions (CVSS 9.0, thymeleaf · org.thymeleaf:thymeleaf +2)
- [CVE-2026-44548](https://cve.now/CVE-2026-44548.md): ChurchCRM: CSRF via legacy GET-delete pages (FundRaiserDelete.php, PropertyTypeDelete.php, NoteDelete.php) (CVSS 8.1, ChurchCRM CRM)
- [CVE-2026-44547](https://cve.now/CVE-2026-44547.md): ChurchCRM: Incomplete fix for CVE-2026-40582: public API login still bypasses 2FA and account lockout in ChurchCRM 7.2.2 (CVSS 9.6, ChurchCRM CRM)
- [CVE-2026-8108](https://cve.now/CVE-2026-8108.md): Fuji Electric Tellus Exposed Dangerous Method or Function (CVSS 7.8, Fuji Electric Tellus)
- [CVE-2026-42288](https://cve.now/CVE-2026-42288.md): ChurchCRM: Incomplete fix for CVE-2026-39337: Unauthenticated RCE in Setup Wizard via unsanitized DB\_PASSWORD (CVSS 10.0, ChurchCRM CRM)
- [CVE-2026-43680](https://cve.now/CVE-2026-43680.md): A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to bypass a front-end restricti (CVSS 7.2, Claris FileMaker Cloud)
- [CVE-2026-43685](https://cve.now/CVE-2026-43685.md): A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to inject arbitrary operating s (CVSS 7.2, Claris FileMaker Cloud)
- [CVE-2025-15463](https://cve.now/CVE-2025-15463.md): Advanced Custom Fields: Extended \<= 0.9.2.3 - Unauthenticated Arbitrary Shortcode Execution (CVSS 6.5, hwk-fr Advanced Custom Fields: Extended)
- [CVE-2026-1250](https://cve.now/CVE-2026-1250.md): Court Reservation – Manage Your Court Bookings Online \<= 1.10.11 - Unauthenticated SQL Injection (CVSS 7.5, webmuehle Court Reservation – Manage Your Court Bookings On…)
- [CVE-2026-5371](https://cve.now/CVE-2026-5371.md): MonsterInsights \<= 10.1.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure And Plugin Integration Reset (CVSS 7.1, chriscct7 MonsterInsights – Google Analytics Dashboard for…)
- [CVE-2026-42289](https://cve.now/CVE-2026-42289.md): ChurchCRM: Cross-Site Request Forgery (CSRF) Leading to Admin Privilege Escalation (CVSS 8.8, ChurchCRM CRM)
- [CVE-2026-40863](https://cve.now/CVE-2026-40863.md): PhpSpreadsheet: CPU Denial of Service via Unbounded Row Index in SpreadsheetML XML Reader (CVSS 7.5, PHPOffice PhpSpreadsheet · phpoffice/phpspreadsheet)
- [CVE-2026-40902](https://cve.now/CVE-2026-40902.md): PhpSpreadsheet: CPU Denial of Service via Unbounded Row Number in XLSX Row Dimensions (CVSS 7.5, PHPOffice PhpSpreadsheet · phpoffice/phpspreadsheet)
- [CVE-2026-42854](https://cve.now/CVE-2026-42854.md): arduino-esp32: Stack buffer overflow in WebServer multipart boundary parsing leads to remote crash potential RCE (CVSS 9.8, espressif arduino-esp32)
- [CVE-2026-42855](https://cve.now/CVE-2026-42855.md): arduino-esp32: Digest authentication URI mismatch bypass in WebServer allows cross-resource replay attack (CVSS 7.5, espressif arduino-esp32)
- [CVE-2026-44307](https://cve.now/CVE-2026-44307.md): Mako: Path traversal via backslash URI on Windows in TemplateLookup (CVSS 8.7, sqlalchemy mako · mako)
- [CVE-2026-42545](https://cve.now/CVE-2026-42545.md): Granian: DoS via WSGI response header panic (CVSS 5.9, emmett-framework granian · granian)
- [CVE-2026-42544](https://cve.now/CVE-2026-42544.md): Granian: Unauthenticated DoS via WebSocket subprotocol header panic (CVSS 7.5, emmett-framework granian · granian)
- [CVE-2026-42844](https://cve.now/CVE-2026-42844.md): Grav: Low-privileged API users can create super-admin accounts via blueprint-upload (CVSS 8.7, getgrav grav · getgrav/grav)
- [CVE-2026-42268](https://cve.now/CVE-2026-42268.md): ModSecurity: Unsigned integer underflow in @verifySSN / @verifyCPF / @verifySVNR operators (CVSS 8.2, owasp-modsecurity ModSecurity)
- [CVE-2026-44301](https://cve.now/CVE-2026-44301.md): Hugo: Node tool execution allows file system access outside the project directory (CVSS 6.2, gohugoio hugo · github.com/gohugoio/hugo)
- [CVE-2026-44302](https://cve.now/CVE-2026-44302.md): Snappier: Infinite loop in SnappyStream decompression on malformed framed input (CVSS 7.5, brantburnett Snappier · Snappier)
- [CVE-2026-44306](https://cve.now/CVE-2026-44306.md): Statamic: Email enumeration via forgot password endpoint (CVSS 5.3, statamic cms · statamic/cms)
- [CVE-2026-44305](https://cve.now/CVE-2026-44305.md): Lemur: LDAP TLS certificate verification globally disabled enables credential interception (CVSS 6.8, Netflix lemur · lemur)
- [CVE-2026-44304](https://cve.now/CVE-2026-44304.md): Lemur: LDAP Filter Injection enables post-authentication privilege escalation (CVSS 8.1, Netflix lemur · lemur)
- [CVE-2026-41195](https://cve.now/CVE-2026-41195.md): mosparo: Rule package source URL stored SSRF enables internal HTTP probing (CVSS 5.0, mosparo)
- [CVE-2026-44241](https://cve.now/CVE-2026-44241.md): Micronaut Framework: Unbounded formattersCache in TimeConverterRegistrar Allows Memory Exhaustion via Accept-Language Header (CVSS 7.5, micronaut-projects micronaut-core · io.micronaut:micronaut-…)
- [CVE-2026-45227](https://cve.now/CVE-2026-45227.md): Heym \< 0.0.21 Sandbox Escape via Python Introspection (CVSS 8.7, heymrun heym)
- [CVE-2026-44242](https://cve.now/CVE-2026-44242.md): Micronaut Framework: Unbounded bundleCache in ResourceBundleMessageSource Allows Memory Exhaustion via Accept-Language Header (CVSS 3.7, micronaut-projects micronaut-core · io.micronaut:micronaut-…)
- [CVE-2026-45226](https://cve.now/CVE-2026-45226.md): Heym \< 0.0.21 Authorization Bypass in Workflow Execution (CVSS 7.6, heymrun heym)
- [CVE-2026-44260](https://cve.now/CVE-2026-44260.md): efw4.X: readonly Flag Not Enforced Server-Side (CVSS 8.1, efwGrp efw4.X)
- [CVE-2026-45225](https://cve.now/CVE-2026-45225.md): Heym \< 0.0.21 Path Traversal File Upload via upload\_file() (CVSS 7.2, heymrun heym)
- [CVE-2026-44259](https://cve.now/CVE-2026-44259.md): efw4.X: Stored XSS via previewServlet (CVSS 4.6, efwGrp efw4.X)
- [CVE-2026-44257](https://cve.now/CVE-2026-44257.md): efw4.X: RCE via zipslip (CVSS 9.3, efwGrp efw4.X)
- [CVE-2026-44871](https://cve.now/CVE-2026-44871.md): Authenticated Command Injection Vulnerabilities in Command Line Interface (CLI) Service Accessed by PAPI Protocol of AOS-8 and AOS-10 Operating Systems (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-44258](https://cve.now/CVE-2026-44258.md): efw4.X: Path Traversal via Unchecked dst Parameter leads to Remote Code Execution (CVSS 9.3, efwGrp efw4.X)
- [CVE-2026-26289](https://cve.now/CVE-2026-26289.md): Subnet Solutions PowerSYSTEM Center Incorrect Authorization (CVSS 8.4, Subnet Solutions PowerSYSTEM Center)
- [CVE-2026-33570](https://cve.now/CVE-2026-33570.md): Subnet Solutions PowerSYSTEM Center Incorrect Authorization (CVSS 6.9, Subnet Solutions PowerSYSTEM Center)
- [CVE-2026-42196](https://cve.now/CVE-2026-42196.md): django-s3file: Relative path traversal (CVSS 9.9, codingjoe django-s3file · django-s3file)
- [CVE-2026-44262](https://cve.now/CVE-2026-44262.md): Scramble: Remote code execution via evaluation of user-controlled input in validation rules (CVSS 9.4, dedoc scramble · dedoc/scramble)
- [CVE-2026-44296](https://cve.now/CVE-2026-44296.md): Deskflow: TLS multiplexer DoS on failed \`SSL\_accept\` (CVSS 7.5, deskflow)
- [CVE-2026-44015](https://cve.now/CVE-2026-44015.md): Nginx UI: Server-Side Request Forgery (SSRF) via Cluster Proxy Middleware Allows Access to Internal Services (CVSS 8.5, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-35555](https://cve.now/CVE-2026-35555.md): Subnet Solutions PowerSYSTEM Center Incorrect Authorization (CVSS 7.0, Subnet Solutions PowerSYSTEM Center)
- [CVE-2026-43948](https://cve.now/CVE-2026-43948.md): wger: cross-tenant password reset and plaintext disclosure via gym=None bypass (CVSS 9.9, wger-project wger · wger)
- [CVE-2026-44403](https://cve.now/CVE-2026-44403.md): Wing FTP Server \< 8.1.3 Authenticated Remote Code Execution via Session Serialization (CVSS 7.2, Wing FTP Server)
- [CVE-2026-44246](https://cve.now/CVE-2026-44246.md): nnU-Net: Agentic workflow injection in \`.github/workflows/issue-triage.yml\` of \`MIC-DKFZ/nnUNet\` (CVSS 7.2, MIC-DKFZ nnUNet)
- [CVE-2026-44240](https://cve.now/CVE-2026-44240.md): basic-ftp allows a malicious FTP server to cause client-side denial of service via unbounded multiline control response buffering (CVSS 7.5, patrickjuchli basic-ftp · basic-ftp)
- [CVE-2026-44224](https://cve.now/CVE-2026-44224.md): Wiki.js: Privilege Escalation via Missing Group Validation in users.update (CVSS 8.6, requarks wiki)
- [CVE-2026-44232](https://cve.now/CVE-2026-44232.md): dssrf: every IPv6 category bypasses is\_url\_safe (CVSS 8.7, HackingRepo dssrf-js · dssrf)
- [CVE-2025-65088](https://cve.now/CVE-2025-65088.md): Out-of-bounds read in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share (CVSS 8.4, Ashlar-Vellum Cobalt · Ashlar-Vellum Xenon +2)
- [CVE-2025-65087](https://cve.now/CVE-2025-65087.md): Out-of-bounds read in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share (CVSS 8.4, Ashlar-Vellum Cobalt · Ashlar-Vellum Xenon +2)
- [CVE-2026-44011](https://cve.now/CVE-2026-44011.md): Craft CMS: Potential authenticated Remote Code Execution via malicious attached Behavior (CVSS 8.6, craftcms cms · craftcms/cms)
- [CVE-2025-65086](https://cve.now/CVE-2025-65086.md): Out-of-bounds write in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share (CVSS 8.4, Ashlar-Vellum Cobalt · Ashlar-Vellum Xenon +2)
- [CVE-2026-35504](https://cve.now/CVE-2026-35504.md): Subnet Solutions PowerSYSTEM Center CRLF injection (CVSS 5.1, Subnet Solutions PowerSYSTEM Center)
- [CVE-2026-44012](https://cve.now/CVE-2026-44012.md): Craft CMS: Missing Volume Permission Check in AssetsController::actionShowInFolder Allows Information Disclosure (CVSS 7.1, craftcms cms · craftcms/cms)
- [CVE-2026-44010](https://cve.now/CVE-2026-44010.md): Craft CMS: Missing Authorization in GraphQL Address Resolver Allows Cross-Scope PII Disclosure (CVSS 7.1, craftcms cms · craftcms/cms)
- [CVE-2026-34672](https://cve.now/CVE-2026-34672.md): CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191) (CVSS 6.2, Adobe Content Credentials JS SDK · Adobe Content Credential…)
- [CVE-2026-34671](https://cve.now/CVE-2026-34671.md): CAI Content Credentials | Integer Overflow or Wraparound (CWE-190) (CVSS 6.2, Adobe Content Credentials JS SDK · Adobe Content Credential…)
- [CVE-2026-34669](https://cve.now/CVE-2026-34669.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 6.2, Adobe Content Credentials JS SDK · Adobe Content Credential…)
- [CVE-2026-34678](https://cve.now/CVE-2026-34678.md): CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) (CVSS 6.2, Adobe Content Credentials JS SDK · Adobe Content Credential…)
- [CVE-2026-34688](https://cve.now/CVE-2026-34688.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 6.2, Adobe Content Credentials JS SDK · Adobe Content Credential…)
- [CVE-2026-34680](https://cve.now/CVE-2026-34680.md): CAI Content Credentials | Integer Overflow or Wraparound (CWE-190) (CVSS 6.2, Adobe Content Credentials JS SDK · Adobe Content Credential…)
- [CVE-2026-34668](https://cve.now/CVE-2026-34668.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 6.2, Adobe Content Credentials JS SDK · Adobe Content Credential…)
- [CVE-2026-34673](https://cve.now/CVE-2026-34673.md): CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) (CVSS 6.2, Adobe Content Credentials JS SDK · Adobe Content Credential…)
- [CVE-2026-34667](https://cve.now/CVE-2026-34667.md): CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191) (CVSS 6.2, Adobe Content Credentials JS SDK · Adobe Content Credential…)
- [CVE-2026-34665](https://cve.now/CVE-2026-34665.md): CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) (CVSS 7.5, Adobe Content Credentials JS SDK · Adobe Content Credential…)
- [CVE-2026-34670](https://cve.now/CVE-2026-34670.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 6.2, Adobe Content Credentials JS SDK · Adobe Content Credential…)
- [CVE-2026-34679](https://cve.now/CVE-2026-34679.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 6.2, Adobe Content Credentials JS SDK · Adobe Content Credential…)
- [CVE-2026-34666](https://cve.now/CVE-2026-34666.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 6.2, Adobe Content Credentials JS SDK · Adobe Content Credential…)
- [CVE-2026-34677](https://cve.now/CVE-2026-34677.md): CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) (CVSS 6.2, Adobe Content Credentials JS SDK · Adobe Content Credential…)
- [CVE-2026-44225](https://cve.now/CVE-2026-44225.md): Pulpy: Incomplete filesystem sandbox in pulpy.fs bridge allows packaged web apps to read arbitrary user files (CVSS 9.3, enesgkky Pulpy)
- [CVE-2026-44223](https://cve.now/CVE-2026-44223.md): vLLM: extract\_hidden\_states speculative decoding crashes server on any request with penalty parameters (CVSS 6.5, vllm-project vllm · vllm)
- [CVE-2026-44222](https://cve.now/CVE-2026-44222.md): vLLM: Remote DoS via Special-Token Placeholders (CVSS 6.5, vllm-project vllm · vllm)
- [CVE-2026-44221](https://cve.now/CVE-2026-44221.md): ArcadeDB: Cross-database authorization bypass and unsecured newly-created databases (CVSS 9.0, ArcadeData arcadedb · com.arcadedb:arcadedb-server)
- [CVE-2026-44217](https://cve.now/CVE-2026-44217.md): sse-channel: SSE Injection via unsanitized event fields (CVSS 6.6, rexxars sse-channel · sse-channel)
- [CVE-2026-34656](https://cve.now/CVE-2026-34656.md): Adobe Commerce | Improper Authorization (CWE-285) (CVSS 4.3, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-34658](https://cve.now/CVE-2026-34658.md): Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 4.8, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-34650](https://cve.now/CVE-2026-34650.md): Adobe Commerce | Uncontrolled Resource Consumption (CWE-400) (CVSS 7.5, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-34686](https://cve.now/CVE-2026-34686.md): Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 8.7, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-34647](https://cve.now/CVE-2026-34647.md): Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918) (CVSS 7.4, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-34685](https://cve.now/CVE-2026-34685.md): Adobe Commerce | Improper Input Validation (CWE-20) (CVSS 3.4, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-34653](https://cve.now/CVE-2026-34653.md): Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) (CVSS 8.7, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-34652](https://cve.now/CVE-2026-34652.md): Adobe Commerce | Dependency on Vulnerable Third-Party Component (CWE-1395) (CVSS 7.5, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-34645](https://cve.now/CVE-2026-34645.md): Adobe Commerce | Incorrect Authorization (CWE-863) (CVSS 7.5, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-34648](https://cve.now/CVE-2026-34648.md): Adobe Commerce | Uncontrolled Resource Consumption (CWE-400) (CVSS 7.5, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-34649](https://cve.now/CVE-2026-34649.md): Adobe Commerce | Uncontrolled Resource Consumption (CWE-400) (CVSS 7.5, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-34655](https://cve.now/CVE-2026-34655.md): Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 4.8, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-34654](https://cve.now/CVE-2026-34654.md): Adobe Commerce | Dependency on Vulnerable Third-Party Component (CWE-1395) (CVSS 5.3, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-34651](https://cve.now/CVE-2026-34651.md): Adobe Commerce | Uncontrolled Resource Consumption (CWE-400) (CVSS 7.5, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-34646](https://cve.now/CVE-2026-34646.md): Adobe Commerce | Incorrect Authorization (CWE-863) (CVSS 7.5, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-42338](https://cve.now/CVE-2026-42338.md): ip-address: XSS in Address6 HTML-emitting methods (CVSS 5.3, beaugunderson ip-address · ip-address)
- [CVE-2026-44219](https://cve.now/CVE-2026-44219.md): ciguard: SCA HTTP client reads response body without size cap (CVSS 3.7, Jo-Jo98 ciguard · ciguard)
- [CVE-2026-44218](https://cve.now/CVE-2026-44218.md): ciguard: Container image runs as root (no USER directive) (CVSS 3.0, Jo-Jo98 ciguard · ciguard)
- [CVE-2026-44220](https://cve.now/CVE-2026-44220.md): ciguard: discover\_pipeline\_files follows symlinks out of scan root (CVSS 3.2, Jo-Jo98 ciguard · ciguard)
- [CVE-2026-42889](https://cve.now/CVE-2026-42889.md): Relay Server WebSocket authentication bypass when token is omitted (CVSS 9.1, No-Instructions relay-server)
- [CVE-2026-34690](https://cve.now/CVE-2026-34690.md): After Effects | Stack-based Buffer Overflow (CWE-121) (CVSS 7.8, Adobe After Effects)
- [CVE-2026-44215](https://cve.now/CVE-2026-44215.md): NanaZip: Heap out-of-bounds write in NanaZip UFS directory parser (CVSS 4.4, M2Team NanaZip)
- [CVE-2026-42445](https://cve.now/CVE-2026-42445.md): NanaZip: Uncontrolled recursion in NanaZip UFS directory traversal causes stack exhaustion (CVSS 3.3, M2Team NanaZip)
- [CVE-2026-42444](https://cve.now/CVE-2026-42444.md): NanaZip: Unbounded resource consumption in NanaZip littlefs parser via attacker-controlled BlockCount (CVSS 3.3, M2Team NanaZip)
- [CVE-2026-42443](https://cve.now/CVE-2026-42443.md): NanaZip: Integer divide-by-zero in NanaZip UFS inode offset calculation (CVSS 3.3, M2Team NanaZip)
- [CVE-2026-42442](https://cve.now/CVE-2026-42442.md): NanaZip: Null-pointer dereference in NanaZip UFS parser when root inode is a symlink (CVSS 3.3, M2Team NanaZip)
- [CVE-2026-42355](https://cve.now/CVE-2026-42355.md): NanaZip: Uncontrolled recursion in NanaZip Electron ASAR parser causes stack exhaustion (CVSS 3.3, M2Team NanaZip)
- [CVE-2026-44873](https://cve.now/CVE-2026-44873.md): Insufficient Session Invalidation on User Account Deactivation in AOS-8 Operating System (CVSS 5.4, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-42446](https://cve.now/CVE-2026-42446.md): NanaZip: Stack out-of-bounds read in NanaZip ZealFS bitmap parser (CVSS 4.4, M2Team NanaZip)
- [CVE-2026-44874](https://cve.now/CVE-2026-44874.md): Authenticated Arbitrary File Download via AOS-10 Web-Based Management Interface (CVSS 4.9, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-44872](https://cve.now/CVE-2026-44872.md): Authenticated Arbitrary File Upload via Command Injection in AOS-8 AND AOS-10 Web-Based Management Interface (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-44870](https://cve.now/CVE-2026-44870.md): Authenticated Command Injection Vulnerabilities in Command Line Interface (CLI) Service Accessed by PAPI Protocol of AOS-8 and AOS-10 Operating Systems (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-44869](https://cve.now/CVE-2026-44869.md): Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-44868](https://cve.now/CVE-2026-44868.md): Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-44867](https://cve.now/CVE-2026-44867.md): Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-44866](https://cve.now/CVE-2026-44866.md): Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-42191](https://cve.now/CVE-2026-42191.md): OpenTelemetry.Exporter.OpenTelemetryProtocol: Disk retry default temp path enables local blob injection for OTLP Exporter (CVSS 6.5, open-telemetry opentelemetry-dotnet · OpenTelemetry.Exporte…)
- [CVE-2026-44865](https://cve.now/CVE-2026-44865.md): Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-44864](https://cve.now/CVE-2026-44864.md): Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-7474](https://cve.now/CVE-2026-7474.md): Nomad vulnerable to path traversal in dynamic host volume which may lead to code execution (CVSS 8.8, HashiCorp Nomad · github.com/hashicorp/nomad)
- [CVE-2026-44863](https://cve.now/CVE-2026-44863.md): Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-8052](https://cve.now/CVE-2026-8052.md): Nomad's exec2 task driver vulnerable to arbitrary file read/write on client host through symlink attack (CVSS 6.0, HashiCorp Shared library · github.com/hashicorp/nomad-drive…)
- [CVE-2026-44862](https://cve.now/CVE-2026-44862.md): Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-44861](https://cve.now/CVE-2026-44861.md): Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-44860](https://cve.now/CVE-2026-44860.md): Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-44859](https://cve.now/CVE-2026-44859.md): Authenticated Stack-Based Buffer Overflow in PAPI Services (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-44858](https://cve.now/CVE-2026-44858.md): Authenticated Stack-Based Buffer Overflow in PAPI Services (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-44857](https://cve.now/CVE-2026-44857.md): Authenticated Stack-Based Buffer Overflow in PAPI Services (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-44856](https://cve.now/CVE-2026-44856.md): Authenticated Stack-Based Buffer Overflow in PAPI Services (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-44855](https://cve.now/CVE-2026-44855.md): Authenticated Stack-Based Buffer Overflow in PAPI Services (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-6959](https://cve.now/CVE-2026-6959.md): Nomad vulnerable to arbitrary file read/write on client host through symlink attack (CVSS 6.0, HashiCorp Nomad · github.com/hashicorp/nomad)
- [CVE-2026-44854](https://cve.now/CVE-2026-44854.md): Authenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-44853](https://cve.now/CVE-2026-44853.md): Authenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-44852](https://cve.now/CVE-2026-44852.md): Authenticated Remote Code Execution via Arbitrary File Overwrite in the AOS-8 and AOS-10 Web-Based Management Interface (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-23827](https://cve.now/CVE-2026-23827.md): Unauthenticated Remote Code Execution via Heap Buffer Overflow in Network Management Service (CVSS 7.5, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-23826](https://cve.now/CVE-2026-23826.md): Unauthenticated Denial of Service in AOS-8 Network Management Service (CVSS 7.5, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-23825](https://cve.now/CVE-2026-23825.md): Unauthenticated Denial-of-Service via Crafted Messages in a Network Protocol Handling Component (CVSS 7.5, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-23824](https://cve.now/CVE-2026-23824.md): Unauthenticated Denial-of-Service via Crafted Messages in a Network Protocol Handling Component (CVSS 7.5, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wirel…)
- [CVE-2026-8430](https://cve.now/CVE-2026-8430.md): SPIP \< 4.4.14 Remote Code Execution via nginx (CVSS 8.1, SPIP)
- [CVE-2026-23823](https://cve.now/CVE-2026-23823.md): Authenticated Command Injection leads to RCE in AOS-10 CLI Command (CVSS 7.2, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-8431](https://cve.now/CVE-2026-8431.md): Ops Manager RCE via webhook body (CVSS 9.4, MongoDB Ops Manager)
- [CVE-2026-23822](https://cve.now/CVE-2026-23822.md): Unauthenticated XML External Entity Injection in AOS-8 Instant allows Denial of Service (CVSS 5.3, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-23821](https://cve.now/CVE-2026-23821.md): Inconsistent input filtering allows Authenticated Command Injection in AOS-10 CLI (CVSS 7.2, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-34659](https://cve.now/CVE-2026-34659.md): Adobe Connect | Deserialization of Untrusted Data (CWE-502) (CVSS 9.6, Adobe Connect)
- [CVE-2026-34660](https://cve.now/CVE-2026-34660.md): Adobe Connect | Incorrect Authorization (CWE-863) (CVSS 9.3, Adobe Connect)
- [CVE-2026-23820](https://cve.now/CVE-2026-23820.md): Inconsistent input filtering allows Authenticated Command Injection in AOS-8 Instant and AOS-10 CLI (CVSS 7.2, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-8429](https://cve.now/CVE-2026-8429.md): SPIP \< 4.4.14 Remote Code Execution via Private Space (CVSS 8.8, SPIP)
- [CVE-2026-23819](https://cve.now/CVE-2026-23819.md): Error in SSID Processing allows Stored XSS in Web Management Interface (CVSS 8.8, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-34682](https://cve.now/CVE-2026-34682.md): Substance3D - Designer | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance 3D Designer)
- [CVE-2026-34681](https://cve.now/CVE-2026-34681.md): Substance3D - Designer | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance 3D Designer)
- [CVE-2026-34684](https://cve.now/CVE-2026-34684.md): Substance3D - Designer | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance 3D Designer)
- [CVE-2026-34683](https://cve.now/CVE-2026-34683.md): Substance3D - Designer | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance 3D Designer)
- [CVE-2026-34664](https://cve.now/CVE-2026-34664.md): Substance3D - Designer | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) (CVSS 6.3, Adobe Substance 3D Designer)
- [CVE-2026-42348](https://cve.now/CVE-2026-42348.md): OpAMP client reads unbounded HTTP response bodies (CVSS 5.9, open-telemetry opentelemetry-dotnet-contrib · OpenTelemetry…)
- [CVE-2026-42541](https://cve.now/CVE-2026-42541.md): Kubewarden: RBAC Reconnaissance via unchecked can\_i host capability call (CVSS 4.3, kubewarden-controller · github.com/kubewarden/kubewarden-co…)
- [CVE-2026-42175](https://cve.now/CVE-2026-42175.md): requests-hardened: Server-Side Request Forgery (SSRF) in requests-hardened RFC 6598 (CVSS 6.5, saleor requests-hardened · requests-hardened)
- [CVE-2026-34662](https://cve.now/CVE-2026-34662.md): Illustrator | NULL Pointer Dereference (CWE-476) (CVSS 5.5, Adobe Illustrator Desktop)
- [CVE-2026-34687](https://cve.now/CVE-2026-34687.md): Illustrator | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Illustrator Desktop)
- [CVE-2026-34663](https://cve.now/CVE-2026-34663.md): Illustrator | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Illustrator Desktop)
- [CVE-2026-34661](https://cve.now/CVE-2026-34661.md): Illustrator | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Illustrator Desktop)
- [CVE-2026-43929](https://cve.now/CVE-2026-43929.md): ssrfcheck: Server-Side Request Forgery (SSRF) and Incomplete List of Disallowed Inputs (CVSS 8.2, felippe-regazio ssrfcheck · ssrfcheck)
- [CVE-2026-29204](https://cve.now/CVE-2026-29204.md): Insufficient ownership check in \`clientarea.php\` allows an authenticated client area user to submit requests using another user’s \`addonId\` (CVSS 9.1, WebPros WHMCS)
- [CVE-2026-44204](https://cve.now/CVE-2026-44204.md): Shelf: SQL Injection via sortBy Parameter (CVSS 6.5, Shelf-nu shelf.nu)
- [CVE-2026-43892](https://cve.now/CVE-2026-43892.md): AntSword: Incomplete noxss() sanitization leads to 1-click RCE via jquery.terminal format code injection (CVSS 8.8, AntSwordProject antSword)
- [CVE-2026-34676](https://cve.now/CVE-2026-34676.md): Substance3D - Painter | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance3D - Painter)
- [CVE-2026-34675](https://cve.now/CVE-2026-34675.md): Substance3D - Painter | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance3D - Painter)
- [CVE-2026-44196](https://cve.now/CVE-2026-44196.md): Pingvin Share X: TOTP Authentication Bypass via Password-only Login (CVSS 9.1, smp46 pingvin-share-x)
- [CVE-2026-42048](https://cve.now/CVE-2026-42048.md): Langflow: Path Traversal in Langflow Knowledge Bases API (CVSS 9.6, langflow-ai langflow · langflow)
- [CVE-2025-46311](https://cve.now/CVE-2025-46311.md): An inconsistent user interface issue was addressed with improved state management. (CVSS 7.5, Apple iOS and iPadOS)
- [CVE-2025-43524](https://cve.now/CVE-2025-43524.md): An access issue was addressed with additional sandbox restrictions. (CVSS 8.8, Apple macOS Sequoia · Apple macOS Sonoma +1)
- [CVE-2026-44184](https://cve.now/CVE-2026-44184.md): Cleanuparr: Reflective CORS combined with trusted-network auth allows cross-origin admin API reads (CVSS 8.0, Cleanuparr)
- [CVE-2026-20767](https://cve.now/CVE-2026-20767.md): Improper input validation for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow (CVSS 8.5, Intel(R) QAT software drivers for Windows)
- [CVE-2026-44183](https://cve.now/CVE-2026-44183.md): Cleanuparr: X-Forwarded-For leftmost parsing allows remote unauthenticated admin takeover when reverse-proxy mode is enabled (CVSS 9.8, Cleanuparr)
- [CVE-2026-20714](https://cve.now/CVE-2026-20714.md): Out-of-bounds write for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a esca (CVSS 8.5, Intel(R) QAT software drivers for Windows)
- [CVE-2026-42303](https://cve.now/CVE-2026-42303.md): Fides: Privacy Request Identity Verification Bypass Vulnerability via Duplicate Detection (CVSS 6.1, ethyca fides · ethyca-fides)
- [CVE-2026-5146](https://cve.now/CVE-2026-5146.md): Improper access control in the notification management endpoints in Devolutions Server allows an unauthenticated attacker to modify or delet (CVSS 4.3, Devolutions Server)
- [CVE-2026-42300](https://cve.now/CVE-2026-42300.md): DevGuard: Unauthenticated identity assertion via \`X-Admin-Token\` header (CVSS 9.3, l3montree-dev devguard · github.com/l3montree-dev/devguard)
- [CVE-2026-44167](https://cve.now/CVE-2026-44167.md): phpseclib: CVE-2024-27355 mitigation bypass — OID amplification DoS in ASN1::decodeOID() (CVSS 7.5, phpseclib · phpseclib/phpseclib)
- [CVE-2026-34644](https://cve.now/CVE-2026-34644.md): After Effects | Integer Overflow or Wraparound (CWE-190) (CVSS 7.8, Adobe After Effects)
- [CVE-2026-34643](https://cve.now/CVE-2026-34643.md): After Effects | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe After Effects)
- [CVE-2026-34642](https://cve.now/CVE-2026-34642.md): After Effects | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe After Effects)
- [CVE-2026-44166](https://cve.now/CVE-2026-44166.md): Pocketbase: Account pre-hijacking via OAuth2 unverfied-\>verified autolinking upgrade (CVSS 6.1, pocketbase · github.com/pocketbase/pocketbase)
- [CVE-2026-34640](https://cve.now/CVE-2026-34640.md): Media Encoder | Integer Overflow or Wraparound (CWE-190) (CVSS 7.8, Adobe Media Encoder)
- [CVE-2026-34639](https://cve.now/CVE-2026-34639.md): Media Encoder | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Media Encoder)
- [CVE-2026-42141](https://cve.now/CVE-2026-42141.md): Xibo: Authenticated Server-Side Request Forgery (SSRF) in Library Upload via URL functionality (CVSS 7.7, xibosignage xibo-cms)
- [CVE-2026-42177](https://cve.now/CVE-2026-42177.md): linux-entra-sso: PRT SSO cookie can leak to attacker-controlled hosts when broad host permissions are granted (CVSS 5.3, siemens linux-entra-sso)
- [CVE-2026-34637](https://cve.now/CVE-2026-34637.md): Premiere Pro | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Premiere)
- [CVE-2026-34638](https://cve.now/CVE-2026-34638.md): Premiere Pro | Use After Free (CWE-416) (CVSS 7.8, Adobe Premiere)
- [CVE-2026-34636](https://cve.now/CVE-2026-34636.md): Premiere Pro | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Premiere)
- [CVE-2026-33821](https://cve.now/CVE-2026-33821.md): Microsoft Dynamics 365 Customer Insights Elevation of Privilege Vulnerability (CVSS 7.7, Microsoft Dynamics)
- [CVE-2026-42893](https://cve.now/CVE-2026-42893.md): Microsoft Outlook for iOS Tampering Vulnerability (CVSS 7.4, Microsoft Outlook for iOS)
- [CVE-2026-42838](https://cve.now/CVE-2026-42838.md): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CVSS 5.4, Microsoft Edge)
- [CVE-2026-40416](https://cve.now/CVE-2026-40416.md): Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability (CVSS 4.3, Microsoft Edge)
- [CVE-2026-42833](https://cve.now/CVE-2026-42833.md): Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability (CVSS 9.1, Microsoft Dynamics 365 (on-premises))
- [CVE-2026-42832](https://cve.now/CVE-2026-42832.md): Microsoft Office Spoofing Vulnerability (CVSS 7.7, Microsoft Excel for Android · Microsoft Office LTSC for… +1)
- [CVE-2026-42830](https://cve.now/CVE-2026-42830.md): Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability (CVSS 6.5, Microsoft Azure Monitor Agent Metrics Extension)
- [CVE-2026-42823](https://cve.now/CVE-2026-42823.md): Azure Logic Apps Elevation of Privilege Vulnerability (CVSS 9.9, Microsoft Azure Logic Apps)
- [CVE-2026-41613](https://cve.now/CVE-2026-41613.md): Visual Studio Code Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Visual Studio Code)
- [CVE-2026-41103](https://cve.now/CVE-2026-41103.md): Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege Vulnerability (CVSS 9.1, Microsoft Confluence SAML SSO plugin · Microsoft JIRA SAML…)
- [CVE-2026-40381](https://cve.now/CVE-2026-40381.md): Azure Connected Machine Agent Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Azure Connected Machine Agent)
- [CVE-2026-41097](https://cve.now/CVE-2026-41097.md): Secure Boot Security Feature Bypass Vulnerability (CVSS 6.7, Microsoft Windows)
- [CVE-2026-41086](https://cve.now/CVE-2026-41086.md): Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows Admin Center in Azure Portal)
- [CVE-2026-40420](https://cve.now/CVE-2026-40420.md): Microsoft Office Click-To-Run Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2026-35436](https://cve.now/CVE-2026-35436.md): Microsoft Office Click-To-Run Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2026-40418](https://cve.now/CVE-2026-40418.md): Microsoft Office Click-To-Run Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2026-40413](https://cve.now/CVE-2026-40413.md): Windows TCP/IP Denial of Service Vulnerability (CVSS 7.4, Microsoft Windows)
- [CVE-2026-40403](https://cve.now/CVE-2026-40403.md): Windows Graphics Component Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-40402](https://cve.now/CVE-2026-40402.md): Windows Hyper-V Elevation of Privilege Vulnerability (CVSS 9.3, Microsoft Windows)
- [CVE-2026-40401](https://cve.now/CVE-2026-40401.md): Windows TCP/IP Denial of Service Vulnerability (CVSS 7.1, Microsoft Windows)
- [CVE-2026-40398](https://cve.now/CVE-2026-40398.md): Windows Remote Desktop Services Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-32209](https://cve.now/CVE-2026-32209.md): Windows Filtering Platform (WFP) Security Feature Bypass Vulnerability (CVSS 4.4, Microsoft Windows)
- [CVE-2026-40397](https://cve.now/CVE-2026-40397.md): Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-40382](https://cve.now/CVE-2026-40382.md): Windows Telephony Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-40369](https://cve.now/CVE-2026-40369.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-40370](https://cve.now/CVE-2026-40370.md): SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SQL Server 2016 Service Pack · Microsoft SQL Serv…)
- [CVE-2026-40367](https://cve.now/CVE-2026-40367.md): Microsoft Word Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise · Microsoft Office +3)
- [CVE-2026-40365](https://cve.now/CVE-2026-40365.md): Microsoft SharePoint Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-40362](https://cve.now/CVE-2026-40362.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2026-40361](https://cve.now/CVE-2026-40361.md): Microsoft Outlook and Word Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise · Microsoft Office +1)
- [CVE-2026-40359](https://cve.now/CVE-2026-40359.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2026-40358](https://cve.now/CVE-2026-40358.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2026-40357](https://cve.now/CVE-2026-40357.md): Microsoft SharePoint Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-34341](https://cve.now/CVE-2026-34341.md): Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-34340](https://cve.now/CVE-2026-34340.md): Windows Projected File System Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-34339](https://cve.now/CVE-2026-34339.md): Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-34338](https://cve.now/CVE-2026-34338.md): Windows Telephony Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-34337](https://cve.now/CVE-2026-34337.md): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-34336](https://cve.now/CVE-2026-34336.md): Windows DWM Core Library Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-34334](https://cve.now/CVE-2026-34334.md): Windows TCP/IP Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-34332](https://cve.now/CVE-2026-34332.md): Windows Kernel-Mode Driver Remote Code Execution Vulnerability (CVSS 8.0, Microsoft Windows Server)
- [CVE-2026-33838](https://cve.now/CVE-2026-33838.md): Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-33837](https://cve.now/CVE-2026-33837.md): Windows TCP/IP Local Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-33835](https://cve.now/CVE-2026-33835.md): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-33833](https://cve.now/CVE-2026-33833.md): Azure Machine Learning Notebook Spoofing Vulnerability (CVSS 8.2, Microsoft Azure Machine Learning)
- [CVE-2026-33112](https://cve.now/CVE-2026-33112.md): Microsoft SharePoint Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-33110](https://cve.now/CVE-2026-33110.md): Microsoft SharePoint Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-42899](https://cve.now/CVE-2026-42899.md): ASP.NET Core Denial of Service Vulnerability (CVSS 7.5, Microsoft .NET · Microsoft.AspNetCore.App.Runtime.win-a… +11)
- [CVE-2026-42898](https://cve.now/CVE-2026-42898.md): Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability (CVSS 9.9, Microsoft Dynamics 365 (on-premises))
- [CVE-2026-42896](https://cve.now/CVE-2026-42896.md): Windows DWM Core Library Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-35429](https://cve.now/CVE-2026-35429.md): Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability (CVSS 4.3, Microsoft Edge for Android)
- [CVE-2026-42891](https://cve.now/CVE-2026-42891.md): Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability (CVSS 6.5, Microsoft Edge for Android)
- [CVE-2026-42825](https://cve.now/CVE-2026-42825.md): Windows Telephony Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-41107](https://cve.now/CVE-2026-41107.md): Microsoft Edge (Chromium-based) Information Disclosure Vulnerability (CVSS 7.4, Microsoft Edge)
- [CVE-2026-32175](https://cve.now/CVE-2026-32175.md): .NET Core Tampering Vulnerability (CVSS 4.3, Microsoft .NET · Microsoft Visual Studio +4)
- [CVE-2026-42831](https://cve.now/CVE-2026-42831.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Office for Android · Microsoft Office LTSC for Mac)
- [CVE-2026-32185](https://cve.now/CVE-2026-32185.md): Microsoft Teams Spoofing Vulnerability (CVSS 5.5, Microsoft Teams for Android)
- [CVE-2026-32170](https://cve.now/CVE-2026-32170.md): Windows Rich Text Edit Elevation of Privilege Vulnerability (CVSS 6.7, Microsoft Windows)
- [CVE-2026-32161](https://cve.now/CVE-2026-32161.md): Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-41614](https://cve.now/CVE-2026-41614.md): M365 Copilot for Desktop Spoofing Vulnerability (CVSS 6.2, Microsoft M365 Copilot for Desktop)
- [CVE-2026-41612](https://cve.now/CVE-2026-41612.md): Visual Studio Code Information Disclosure Vulnerability (CVSS 5.5, Microsoft Visual Studio Code - Live Preview extension)
- [CVE-2026-41611](https://cve.now/CVE-2026-41611.md): Visual Studio Code Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Visual Studio Code)
- [CVE-2026-41610](https://cve.now/CVE-2026-41610.md): Visual Studio Code Security Feature Bypass Vulnerability (CVSS 6.3, Microsoft Visual Studio Code)
- [CVE-2026-41109](https://cve.now/CVE-2026-41109.md): GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability (CVSS 8.8, Microsoft Visual Studio Code)
- [CVE-2026-41102](https://cve.now/CVE-2026-41102.md): Microsoft PowerPoint for Android Spoofing Vulnerability (CVSS 7.1, Microsoft PowerPoint for Android)
- [CVE-2026-41101](https://cve.now/CVE-2026-41101.md): Microsoft Word for Android Spoofing Vulnerability (CVSS 7.1, Microsoft Word for Android)
- [CVE-2026-41100](https://cve.now/CVE-2026-41100.md): Microsoft 365 Copilot for Android Spoofing Vulnerability (CVSS 4.4, Microsoft 365 Copilot for Android · Microsoft Excel for… +4)
- [CVE-2026-41096](https://cve.now/CVE-2026-41096.md): Windows DNS Client Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-41095](https://cve.now/CVE-2026-41095.md): Data Deduplication Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows Server 2012 R2 · Microsoft Windows Server)
- [CVE-2026-41094](https://cve.now/CVE-2026-41094.md): Microsoft Data Formulator Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Data Formulator)
- [CVE-2026-41089](https://cve.now/CVE-2026-41089.md): Windows Netlogon Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows Server)
- [CVE-2026-41088](https://cve.now/CVE-2026-41088.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-40421](https://cve.now/CVE-2026-40421.md): Microsoft Word Information Disclosure Vulnerability (CVSS 4.3, Microsoft 365 Apps for Enterprise · Microsoft Office +1)
- [CVE-2026-40419](https://cve.now/CVE-2026-40419.md): Microsoft Office Click-To-Run Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2026-40417](https://cve.now/CVE-2026-40417.md): Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Dynamics 365 Business Central 2024 Release Wav… +2)
- [CVE-2026-40415](https://cve.now/CVE-2026-40415.md): Windows TCP/IP Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-40414](https://cve.now/CVE-2026-40414.md): Windows TCP/IP Denial of Service Vulnerability (CVSS 7.4, Microsoft Windows)
- [CVE-2026-40410](https://cve.now/CVE-2026-40410.md): Windows SMB Client Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-40408](https://cve.now/CVE-2026-40408.md): Windows WAN ARP Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-40407](https://cve.now/CVE-2026-40407.md): Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-40406](https://cve.now/CVE-2026-40406.md): Windows TCP/IP Information Disclosure Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-40405](https://cve.now/CVE-2026-40405.md): Windows TCP/IP Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-40399](https://cve.now/CVE-2026-40399.md): Windows TCP/IP Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-40380](https://cve.now/CVE-2026-40380.md): Windows Volume Manager Extension Driver Remote Code Execution Vulnerability (CVSS 6.2, Microsoft Windows)
- [CVE-2026-40377](https://cve.now/CVE-2026-40377.md): Microsoft Cryptographic Services Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-40374](https://cve.now/CVE-2026-40374.md): Microsoft Power Automate Desktop Information Disclosure Vulnerability (CVSS 6.5, Microsoft Power Automate for Desktop)
- [CVE-2026-40368](https://cve.now/CVE-2026-40368.md): Microsoft SharePoint Server Remote Code Execution Vulnerability (CVSS 8.0, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-40366](https://cve.now/CVE-2026-40366.md): Microsoft Word Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise · Microsoft Office +1)
- [CVE-2026-40364](https://cve.now/CVE-2026-40364.md): Microsoft Word Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise · Microsoft Office +1)
- [CVE-2026-40363](https://cve.now/CVE-2026-40363.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2026-40360](https://cve.now/CVE-2026-40360.md): Microsoft Excel Information Disclosure Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2026-35440](https://cve.now/CVE-2026-35440.md): Microsoft Word Information Disclosure Vulnerability (CVSS 5.5, Microsoft 365 Apps for Enterprise · Microsoft Office +1)
- [CVE-2026-35439](https://cve.now/CVE-2026-35439.md): Microsoft SharePoint Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-35438](https://cve.now/CVE-2026-35438.md): Windows Admin Center Elevation of Privilege Vulnerability (CVSS 8.3, Microsoft Windows Admin Center)
- [CVE-2026-35433](https://cve.now/CVE-2026-35433.md): .NET Elevation of Privilege Vulnerability (CVSS 7.3, Microsoft .NET · Microsoft.WindowsDesktop.App.Runtime.wi… +2)
- [CVE-2026-35424](https://cve.now/CVE-2026-35424.md): Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-35423](https://cve.now/CVE-2026-35423.md): Windows 11 Telnet Client Information Disclosure Vulnerability (CVSS 5.4, Microsoft Windows)
- [CVE-2026-35422](https://cve.now/CVE-2026-35422.md): Windows TCP/IP Driver Security Feature Bypass Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-35421](https://cve.now/CVE-2026-35421.md): Windows GDI Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-35420](https://cve.now/CVE-2026-35420.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows Server)
- [CVE-2026-35419](https://cve.now/CVE-2026-35419.md): Windows DWM Core Library Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-35418](https://cve.now/CVE-2026-35418.md): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-35417](https://cve.now/CVE-2026-35417.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-35416](https://cve.now/CVE-2026-35416.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-35415](https://cve.now/CVE-2026-35415.md): Windows Storage Spaces Controller Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-34351](https://cve.now/CVE-2026-34351.md): Windows TCP/IP Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-34350](https://cve.now/CVE-2026-34350.md): Windows Storport Miniport Driver Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows Server)
- [CVE-2026-34347](https://cve.now/CVE-2026-34347.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-34345](https://cve.now/CVE-2026-34345.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-34344](https://cve.now/CVE-2026-34344.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-34343](https://cve.now/CVE-2026-34343.md): Windows Application Identity (AppID) Subsystem Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-34342](https://cve.now/CVE-2026-34342.md): Windows Print Spooler Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-34333](https://cve.now/CVE-2026-34333.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-34331](https://cve.now/CVE-2026-34331.md): Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-34330](https://cve.now/CVE-2026-34330.md): Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-34329](https://cve.now/CVE-2026-34329.md): Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-33841](https://cve.now/CVE-2026-33841.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-33840](https://cve.now/CVE-2026-33840.md): Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-33839](https://cve.now/CVE-2026-33839.md): Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-33834](https://cve.now/CVE-2026-33834.md): Windows Event Logging Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-33117](https://cve.now/CVE-2026-33117.md): Azure SDK for Java Security Feature Bypass Vulnerability (CVSS 9.1, Microsoft Azure SDK for Java · com.azure:azure-security-key…)
- [CVE-2026-21530](https://cve.now/CVE-2026-21530.md): Windows Rich Text Edit Elevation of Privilege Vulnerability (CVSS 6.7, Microsoft 365 Apps for Enterprise · Microsoft Office +1)
- [CVE-2026-32177](https://cve.now/CVE-2026-32177.md): .NET Elevation of Privilege Vulnerability (CVSS 7.3, Microsoft .NET · Microsoft Visual Studio)
- [CVE-2026-32204](https://cve.now/CVE-2026-32204.md): Azure Monitor Agent Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Azure Monitor)
- [CVE-2026-40379](https://cve.now/CVE-2026-40379.md): Azure Entra ID Spoofing Vulnerability (CVSS 9.3, Microsoft Entra)
- [CVE-2026-43891](https://cve.now/CVE-2026-43891.md): changedetection.io: Arbitrary Local File Read via crafted backup restore (CVSS 7.5, dgtlmoon changedetection.io · changedetection-io)
- [CVE-2025-53870](https://cve.now/CVE-2025-53870.md): An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAP 7.6.0 throug (CVSS 6.5, Fortinet FortiAP · Fortinet FortiAP-W2)
- [CVE-2025-53680](https://cve.now/CVE-2025-53680.md): An improper neutralization of special elements used in an OS command ("OS Command Injection") vulnerability \[CWE-78\] vulnerability in Fortin (CVSS 6.1, Fortinet FortiAP-U · Fortinet FortiAP-W2 +1)
- [CVE-2025-67604](https://cve.now/CVE-2025-67604.md): A use of potentially dangerous function vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, Fort (CVSS 5.2, Fortinet FortiAnalyzer · Fortinet FortiManager)
- [CVE-2025-53681](https://cve.now/CVE-2025-53681.md): An improper neutralization of special elements used in an SQL Command ("SQL Injection&") vulnerability \[CWE-89\] vulnerability in Fortinet Fo (CVSS 6.3, Fortinet FortiMail)
- [CVE-2026-25690](https://cve.now/CVE-2026-25690.md): An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.0.0 through (CVSS 4.0, Fortinet FortiDeceptor)
- [CVE-2025-53844](https://cve.now/CVE-2025-53844.md): A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11 allow (CVSS 8.3, Fortinet FortiOS)
- [CVE-2026-44279](https://cve.now/CVE-2026-44279.md): An improper export of android application components vulnerability in Fortinet FortiTokenAndroid 6.2 all versions, FortiTokenAndroid 6.1 all (CVSS 5.0, Fortinet FortiTokenAndroid)
- [CVE-2026-44278](https://cve.now/CVE-2026-44278.md): A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.2, FortiClientWindows 7.2 all versions (CVSS 2.1, Fortinet FortiClientWindows)
- [CVE-2026-25088](https://cve.now/CVE-2026-25088.md): An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiNDR 7.6.0 through 7.6 (CVSS 5.1, Fortinet FortiNDR)
- [CVE-2026-44277](https://cve.now/CVE-2026-44277.md): A improper access control vulnerability in Fortinet FortiAuthenticator 8.0.2, FortiAuthenticator 8.0.0, FortiAuthenticator 6.6.0 through 6.6 (CVSS 9.1, Fortinet FortiAuthenticator)
- [CVE-2026-26083](https://cve.now/CVE-2026-26083.md): A missing authorization vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0 (CVSS 9.1, Fortinet FortiSandbox)
- [CVE-2026-41895](https://cve.now/CVE-2026-41895.md): changedetection.io: XXE vulnerability in the changedetection.io project (CVSS 8.2, dgtlmoon changedetection.io · changedetection-io)
- [CVE-2026-42045](https://cve.now/CVE-2026-42045.md): LobeHub: Cross-Site Scripting(XSS) escalate to Remote Code Execution(RCE) (CVSS 6.2, lobehub · @lobehub/lobehub)
- [CVE-2026-41513](https://cve.now/CVE-2026-41513.md): Horilla: Open Redirect via Unvalidated \`next\` Parameter in Notification Endpoints (CVSS 4.8, horilla-hr)
- [CVE-2026-44343](https://cve.now/CVE-2026-44343.md): WGDashboard: Critical Vulnerability in 4.3.2 (CVSS 9.3, WGDashboard)
- [CVE-2025-36515](https://cve.now/CVE-2025-36515.md): Uncontrolled search path for some AI Playground software before version 3.0.0 alpha within Ring 3: User Applications may allow an escalation (CVSS 5.4, AI Playground software)
- [CVE-2025-36510](https://cve.now/CVE-2025-36510.md): Improper buffer restrictions for some Display Virtualization for Windows OS driver software within Ring 2: Device Drivers may allow a denial (CVSS 6.8, Display Virtualization for Windows OS driver software)
- [CVE-2025-35991](https://cve.now/CVE-2025-35991.md): Improper initialization in the UEFI firmware for some Intel platforms within Ring 0: Bare Metal OS may allow an information disclosure. (CVSS 5.6, Intel platforms)
- [CVE-2025-35990](https://cve.now/CVE-2025-35990.md): Improper input validation for some Intel Endpoint Management Assistant (EMA) software before version 1.14.5 within Ring 3: User Applications (CVSS 8.7, Intel Endpoint Management Assistant (EMA) software)
- [CVE-2025-35979](https://cve.now/CVE-2025-35979.md): Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) (CVSS 6.8, Intel(R) Processors)
- [CVE-2025-35969](https://cve.now/CVE-2025-35969.md): Uncontrolled search path for some Intel(R) Server Firmware Update Utility Software before version 16.0.12. (CVSS 5.4, Intel(R) Server Firmware Update Utility Software)
- [CVE-2025-27723](https://cve.now/CVE-2025-27723.md): Use after free for some Linux kernel driver for the Intel(R) Ethernet 800 series before version 2.3.14 within Ring 0: Kernel may allow a den (CVSS 6.8, Intel(R) Ethernet 800 series)
- [CVE-2026-20914](https://cve.now/CVE-2026-20914.md): Null pointer dereference for some Intel(R) QAT software drivers for Windows before version 2.6.0 within Ring 3: User Applications may allow (CVSS 6.8, Intel(R) QAT software drivers for Windows)
- [CVE-2026-20905](https://cve.now/CVE-2026-20905.md): Improper input validation for some Intel(R) QAT software drivers for Windows before version 2.6 within Ring 3: User Applications may allow a (CVSS 6.9, Intel(R) QAT software drivers for Windows)
- [CVE-2026-20887](https://cve.now/CVE-2026-20887.md): Improper access control for some Intel Vision software for all versions within Ring 3: User Applications may allow a denial of service. (CVSS 8.8, Intel Vision software)
- [CVE-2026-20881](https://cve.now/CVE-2026-20881.md): Divide by zero for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of (CVSS 6.8, Intel(R) QAT software drivers for Windows)
- [CVE-2026-20879](https://cve.now/CVE-2026-20879.md): Out-of-bounds write for the Intel(R) Data Center Graphics Driver for VMware ESXi software before version 2.0.2 within Ring 1: Device Drivers (CVSS 8.3, Intel(R) Data Center Graphics Driver for VMware ESXi softwa…)
- [CVE-2026-20794](https://cve.now/CVE-2026-20794.md): Buffer overflow for the Intel(R) Data Center Graphics Driver for VMware ESXi software before version 2.0.2 within Ring 1: Device Drivers may (CVSS 9.3, Intel(R) Data Center Graphics Driver for VMware ESXi softwa…)
- [CVE-2026-20793](https://cve.now/CVE-2026-20793.md): Unchecked return value for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a d (CVSS 4.8, Intel(R) QAT software drivers for Windows)
- [CVE-2026-20782](https://cve.now/CVE-2026-20782.md): Buffer overflow for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial o (CVSS 6.9, Intel(R) QAT software drivers for Windows)
- [CVE-2026-20772](https://cve.now/CVE-2026-20772.md): Uncontrolled search path for some Intel(R) Connectivity Performance Suite software installers before version 50.25.1121.193 within Ring 3: U (CVSS 5.4, Intel(R) Connectivity Performance Suite software installers)
- [CVE-2026-20771](https://cve.now/CVE-2026-20771.md): Null pointer dereference for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a (CVSS 6.9, Intel(R) QAT software drivers for Windows)
- [CVE-2026-20754](https://cve.now/CVE-2026-20754.md): Improper conditions check in some firmware for some Intel(R) NPU Drivers within Ring 1: Device Drivers may allow a denial of service. (CVSS 6.9, Intel(R) NPU Drivers)
- [CVE-2026-20753](https://cve.now/CVE-2026-20753.md): Integer overflow in the UEFI firmware for the Slim Bootloader may allow an escalation of privilege. (CVSS 8.7, Slim Bootloader may allow an escalation of privilege. Syste…)
- [CVE-2026-20751](https://cve.now/CVE-2026-20751.md): Out-of-bounds read for the Intel(R) Data Center Graphics Driver for VMware ESXi software before version 2.0.2 within Ring 1: Device Drivers (CVSS 8.3, Intel(R) Data Center Graphics Driver for VMware ESXi softwa…)
- [CVE-2026-20738](https://cve.now/CVE-2026-20738.md): Untrusted pointer dereference for some Intel(R) QuickAssist Adapter 8960 software before version 1.13 within Ring 3: User Applications may a (CVSS 8.5, Intel(R) QuickAssist Adapter 8960 software)
- [CVE-2026-20718](https://cve.now/CVE-2026-20718.md): Incorrect default permissions for some Intel(R) NPU Driver software installers before version 32.0.100.4511 within Ring 3: User Applications (CVSS 5.4, Intel(R) NPU Driver software installers)
- [CVE-2026-20717](https://cve.now/CVE-2026-20717.md): Improper input validation for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow (CVSS 6.9, Intel(R) QAT software drivers for Windows)
- [CVE-2026-40300](https://cve.now/CVE-2026-40300.md): Zulip: Message edit history visible in "moves only" policy through /api/v1/messages/{id}/history (CVSS 6.0, zulip)
- [CVE-2026-25431](https://cve.now/CVE-2026-25431.md): WordPress Hustle plugin \<= 7.8.10.1 - Broken Access Control vulnerability (CVSS 5.3, WPMU DEV Hustle)
- [CVE-2026-43993](https://cve.now/CVE-2026-43993.md): JunoClaw: SSRF in WAVS computeDataVerify allows cloud-metadata and internal-service access (CVSS 8.2, Dragonmonk111 junoclaw)
- [CVE-2026-43992](https://cve.now/CVE-2026-43992.md): JunoClaw: MCP write tools exposed raw BIP-39 mnemonic as a tool-call parameter (CVSS 9.8, Dragonmonk111 junoclaw)
- [CVE-2026-43990](https://cve.now/CVE-2026-43990.md): JunoClaw: plugin-shell shell-metacharacter injection via shell wrapper (CVSS 8.4, Dragonmonk111 junoclaw)
- [CVE-2026-43989](https://cve.now/CVE-2026-43989.md): JunoClaw: upload\_wasm accepted arbitrary filesystem paths without validation (CVSS 8.5, Dragonmonk111 junoclaw)
- [CVE-2026-43991](https://cve.now/CVE-2026-43991.md): JunoClaw: plugin-shell shell-injection bypass via substring blocklist (CVSS 8.4, Dragonmonk111 junoclaw)
- [CVE-2026-8407](https://cve.now/CVE-2026-8407.md): Missing authorization in the PAM module in Devolutions Server allows an authenticated user with a PAM license but no additional permissions (CVSS 4.3, Devolutions Server)
- [CVE-2026-5089](https://cve.now/CVE-2026-5089.md): YAML::Syck versions before 1.38 for Perl has an out-of-bounds read (CVSS 7.3, TODDR YAML::Syck)
- [CVE-2026-43515](https://cve.now/CVE-2026-43515.md): Apache Tomcat: Security constraints not correctly applied (CVSS 9.1, Apache Software Foundation Apache Tomcat · org.apache.to… +2)
- [CVE-2026-43514](https://cve.now/CVE-2026-43514.md): Apache Tomcat: AJP secret compared in non-constant time (CVSS 3.7, Apache Software Foundation Apache Tomcat · org.apache.to… +2)
- [CVE-2026-43513](https://cve.now/CVE-2026-43513.md): Apache Tomcat: LockOutRealm treats user names as case-sensitive (CVSS 7.5, Apache Software Foundation Apache Tomcat · org.apache.to… +2)
- [CVE-2026-43512](https://cve.now/CVE-2026-43512.md): Apache Tomcat: Digest authenticator will authenticate any unknown user (CVSS 9.8, Apache Software Foundation Apache Tomcat · org.apache.to… +2)
- [CVE-2026-41293](https://cve.now/CVE-2026-41293.md): Apache Tomcat: HTTP/2 request headers not validated (CVSS 9.8, Apache Software Foundation Apache Tomcat · org.apache.to… +2)
- [CVE-2026-42498](https://cve.now/CVE-2026-42498.md): Apache Tomcat: WebSocket authentication header exposure (CVSS 7.3, Apache Software Foundation Apache Tomcat · org.apache.to… +2)
- [CVE-2026-41284](https://cve.now/CVE-2026-41284.md): Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling (CVSS 7.5, Apache Software Foundation Apache Tomcat · org.apache.to… +2)
- [CVE-2026-34187](https://cve.now/CVE-2026-34187.md): SQL Injection in Graph Container Parameter (CVSS 7.6, Pandora FMS)
- [CVE-2026-30810](https://cve.now/CVE-2026-30810.md): Server-Side Request Forgery in API Checker leads to Privilege Escalation (CVSS 7.1, Pandora FMS)
- [CVE-2026-30808](https://cve.now/CVE-2026-30808.md): Session Fixation in Authentication leads to Session Hijacking (CVSS 7.6, Pandora FMS)
- [CVE-2026-30807](https://cve.now/CVE-2026-30807.md): Cross-Site Request Forgery on Extension Pages (CVSS 7.1, Pandora FMS)
- [CVE-2026-30805](https://cve.now/CVE-2026-30805.md): Insecure Default Initialization in API Authentication leads to Authentication Bypass (CVSS 9.1, Pandora FMS)
- [CVE-2026-8111](https://cve.now/CVE-2026-8111.md): SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to achieve remote (CVSS 8.8, ivanti Endpoint Manager)
- [CVE-2026-8110](https://cve.now/CVE-2026-8110.md): Incorrect permissions assignment in the agent of Ivanti Endpoint Manager before version 2024 SU6 allows a local authenticated attacker to es (CVSS 7.8, ivanti Endpoint Manager)
- [CVE-2026-8109](https://cve.now/CVE-2026-8109.md): An exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to (CVSS 6.5, ivanti Endpoint Manager)
- [CVE-2026-8051](https://cve.now/CVE-2026-8051.md): OS command injection in Ivanti Virtual Traffic Manager before version 22.9r4 allows a remote authenticated attacker with admin privileges to (CVSS 7.2, ivanti Virtual Traffic Manager)
- [CVE-2026-8401](https://cve.now/CVE-2026-8401.md): Sandbox escape in the Profile Backup component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-7432](https://cve.now/CVE-2026-7432.md): A race condition in Ivanti Secure Access Client before 22.8R6 allows a locally authenticated user to escalate privileges to SYSTEM (CVSS 7.8, ivanti Secure Access Client)
- [CVE-2026-43983](https://cve.now/CVE-2026-43983.md): Pocket ID: OIDC refresh token flow bypasses authorization revocation, account disabling, and group restrictions (CVSS 8.5, pocket-id · github.com/pocket-id/pocket-id/backend)
- [CVE-2026-7431](https://cve.now/CVE-2026-7431.md): An incorrect permission assignment for critical resource of Ivanti Secure Access Client before 22.8R6 allows a local authenticated user to (CVSS 4.4, ivanti Secure Access Client)
- [CVE-2026-32687](https://cve.now/CVE-2026-32687.md): SQL injection via channel name in Postgrex.Notifications.listen/3 and unlisten/3 (CVSS 7.5, elixir-ecto postgrex)
- [CVE-2026-8043](https://cve.now/CVE-2026-8043.md): External control of a file name in Ivanti Xtraction before version 2026.2 allows a remote authenticated attacker to read sensitive files and (CVSS 9.6, ivanti Xtraction)
- [CVE-2026-42260](https://cve.now/CVE-2026-42260.md): Open-WebSearch: SSRF in \`fetchWebContent\` MCP tool: bracketed IPv6 literals and non-resolving hostname check bypass \`isPrivateOrLocalHostname\` (CVSS 8.2, Aas-ee open-webSearch · open-websearch)
- [CVE-2026-8368](https://cve.now/CVE-2026-8368.md): LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirects (CVSS 6.5, OALDERS LWP::UserAgent)
- [CVE-2026-43937](https://cve.now/CVE-2026-43937.md): YAF.NET: Pre-Handler Authorization Bypass on Admin Pages Enabling Blind SQL Execution via \`/Admin/RunSql\` (CVSS 8.8, YAFNET · YAFNET.Core)
- [CVE-2026-6866](https://cve.now/CVE-2026-6866.md): Initialization of a Resource with an Insecure Default vulnerability on EcoStruxure™ Panel Server (CVSS 8.2, Schneider Electric EcoStruxure™ Panel Server)
- [CVE-2026-5061](https://cve.now/CVE-2026-5061.md): Consul-template vulnerable to sandbox path bypass in file helper via a symlink attack (CVSS 4.7, HashiCorp Tooling)
- [CVE-2026-43938](https://cve.now/CVE-2026-43938.md): YAF.NET: Unauthenticated Stored Second-Order XSS in Admin Event Log via Reflected \`User-Agent\` Header (CVSS 8.1, YAFNET · YAFNET.Core)
- [CVE-2026-43939](https://cve.now/CVE-2026-43939.md): YAF.NET: Stored XSS in Forum Thread Posts/Replies Allowing Arbitrary JavaScript Execution for All Thread Viewers (CVSS 7.3, YAFNET · YAFNET.Core)
- [CVE-2026-43930](https://cve.now/CVE-2026-43930.md): Parse Server: MFA SMS one-time password accepted twice under concurrent login (CVSS 2.1, parse-community parse-server · parse-server)
- [CVE-2026-43916](https://cve.now/CVE-2026-43916.md): pam\_authnft: Heap buffer overflow in NETLINK\_SOCK\_DIAG reply walker (CVSS 8.7, identd-ng pam\_authnft)
- [CVE-2026-40638](https://cve.now/CVE-2026-40638.md): Dell PowerScale InsightIQ, versions 5.0.0 through 6.2.0, contains an execution with unnecessary privileges vulnerability. (CVSS 6.7, Dell PowerScale InsightIQ)
- [CVE-2026-42006](https://cve.now/CVE-2026-42006.md): An attacker can cause uncontrolled memory usage with excessive bracing over IMAP. (CVSS 4.3, Open-Xchange OX Dovecot Pro)
- [CVE-2026-40020](https://cve.now/CVE-2026-40020.md): Attacker can use the IMAP SETACL command to inject the anyone permission to user's dovecot-acl file even if imap\_acl\_allow\_anyone=no. (CVSS 3.1, Open-Xchange OX Dovecot Pro)
- [CVE-2026-40016](https://cve.now/CVE-2026-40016.md): Attacker can upload a malicious Sieve script over ManageSieve service (or locally) to bypass configured CPU time limits for Sieve up to 130 (CVSS 5.3, Open-Xchange OX Dovecot Pro)
- [CVE-2026-33603](https://cve.now/CVE-2026-33603.md): Attacker can use a specially crafted base64 exchange between Dovecot and Client to fake SCRAM TLS channel binding. (CVSS 6.8, Open-Xchange OX Dovecot Pro)
- [CVE-2026-27851](https://cve.now/CVE-2026-27851.md): When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly interpreted as safe too, enabli (CVSS 7.4, Open-Xchange OX Dovecot Pro)
- [CVE-2026-35071](https://cve.now/CVE-2026-35071.md): Dell PowerScale InsightIQ, versions 6.0.0 through 6.2.0, contains an improper neutralization of special elements used in an OS command ('OS (CVSS 8.2, Dell PowerScale InsightIQ)
- [CVE-2026-45091](https://cve.now/CVE-2026-45091.md): sealed-env: TOTP secret embedded in unseal token payload (enterprise mode) (CVSS 9.1, davidalmeidac sealed-env · sealed-env +1)
- [CVE-2026-8391](https://cve.now/CVE-2026-8391.md): Other issue in the JavaScript Engine component (CVSS 5.3, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-8390](https://cve.now/CVE-2026-8390.md): Use-after-free in the JavaScript: WebAssembly component (CVSS 7.3, Mozilla Firefox)
- [CVE-2026-8389](https://cve.now/CVE-2026-8389.md): JIT miscompilation in the JavaScript Engine: JIT component (CVSS 8.8, Mozilla Firefox)
- [CVE-2026-8388](https://cve.now/CVE-2026-8388.md): Incorrect boundary conditions in the JavaScript Engine: JIT component (CVSS 6.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-12659](https://cve.now/CVE-2025-12659.md): Heap-based buffer overflow in Siemens Simcenter Femap (CVSS 7.3, Siemens Simcenter Femap)
- [CVE-2026-6865](https://cve.now/CVE-2026-6865.md): Improper Limitation of a Pathname to a Restricted Directory Vulnerability on Multiple Products (CVSS 7.1, Schneider Electric EasyLogic T150 (formerly Saitel DR) Remo…)
- [CVE-2026-4827](https://cve.now/CVE-2026-4827.md): Insufficient Entropy vulnerability on Multiple Products (CVSS 8.7, Schneider Electric Easergy MiCOM C264 · Schneider Elect… +12)
- [CVE-2026-45215](https://cve.now/CVE-2026-45215.md): WordPress WP EasyPay plugin \<= 4.3.0 - Sensitive Data Exposure vulnerability (CVSS 5.3, Saad Iqbal WP EasyPay)
- [CVE-2026-45218](https://cve.now/CVE-2026-45218.md): WordPress WP Travel plugin \<= 11.4.0 - SQL Injection vulnerability (CVSS 7.7, WP Travel)
- [CVE-2026-45214](https://cve.now/CVE-2026-45214.md): WordPress Xpro Elementor Addons plugin \<= 1.5.1 - SQL Injection vulnerability (CVSS 8.5, Xpro Elementor Addons)
- [CVE-2026-45213](https://cve.now/CVE-2026-45213.md): WordPress BEAR plugin \<= 1.1.7.1 - SQL Injection vulnerability (CVSS 7.6, RealMag777 BEAR)
- [CVE-2026-45211](https://cve.now/CVE-2026-45211.md): WordPress APIExperts Square for WooCommerce plugin \<= 4.7.1 - SQL Injection vulnerability (CVSS 8.5, Saad Iqbal APIExperts Square for WooCommerce)
- [CVE-2026-42742](https://cve.now/CVE-2026-42742.md): WordPress Views for WPForms plugin \<= 3.4.6 - SQL Injection vulnerability (CVSS 8.5, Aman Views for WPForms)
- [CVE-2026-45212](https://cve.now/CVE-2026-45212.md): WordPress Asset CleanUp: Page Speed Booster plugin \<= 1.4.0.3 - Broken Access Control vulnerability (CVSS 5.3, Gabe Livan Asset CleanUp: Page Speed Booster)
- [CVE-2026-45210](https://cve.now/CVE-2026-45210.md): WordPress Broadstreet Ads plugin \<= 1.52.2 - Broken Access Control vulnerability (CVSS 5.4, Broadstreet Ads)
- [CVE-2026-42741](https://cve.now/CVE-2026-42741.md): WordPress Ninja Forms Views – Display & Edit Ninja Forms Submissions on your site frontend plugin \<= 3.3.2 - SQL Injection vulnerability (CVSS 8.5, Aman Ninja Forms Views &#8211; Display &amp; Edit Ninja For…)
- [CVE-2026-32684](https://cve.now/CVE-2026-32684.md): The application does not impose strict enough restrictions on directory access permissions, posing a risk that other malicious applications (CVSS 2.9, Hikvision Hik-Connect APP)
- [CVE-2026-2465](https://cve.now/CVE-2026-2465.md): Improper Authorization in E-Kalite's Turboard FOR-S (CVSS 8.8, E-Kalite Software Hardware Engineering Design and Internet…)
- [CVE-2026-41713](https://cve.now/CVE-2026-41713.md): Prompt Injection via Memory Poisoning in PromptChatMemoryAdvisor (CVSS 8.2, VMware Spring AI · org.springframework.ai:spring-ai-client-…)
- [CVE-2026-41712](https://cve.now/CVE-2026-41712.md): ChatMemory DEFAULT\_CONVERSATION\_ID causes unintended cross-user data leakage (CVSS 7.5, VMware Spring AI · org.springframework.ai:spring-ai-clie… +2)
- [CVE-2026-8072](https://cve.now/CVE-2026-8072.md): Insecure generation of SAT access credentials in Ingecon EMS Board (CVSS 9.2, Ingeteam Ingecon Sun EMS Board)
- [CVE-2026-6001](https://cve.now/CVE-2026-6001.md): IDOR in Abis Technology's BAPSİS (CVSS 8.8, ABIS Technology Ltd. BAPSİS)
- [CVE-2025-6577](https://cve.now/CVE-2025-6577.md): SQLi in Akilli Commerce's E-Commerce Website (CVSS 9.8, Akilli Commerce Software Technologies Ltd. E-Commerce Websi…)
- [CVE-2026-6813](https://cve.now/CVE-2026-6813.md): Continually \<= 4.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'continually\_embed\_code' Parameter (CVSS 4.4, Continually)
- [CVE-2026-6800](https://cve.now/CVE-2026-6800.md): FastBots \<= 1.0.12 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings (CVSS 4.4, FastBots)
- [CVE-2026-7428](https://cve.now/CVE-2026-7428.md): Insecure default administrative credentials in AlloyDB for PostgreSQL (CVSS 9.2, Google Cloud AlloyDB for PostgreSQL)
- [CVE-2026-8162](https://cve.now/CVE-2026-8162.md): multiparty vulnerable to Denial of Service via Uncaught Exception in filename\* parameter parsing (CVSS 7.5, multiparty)
- [CVE-2026-5029](https://cve.now/CVE-2026-5029.md): RCE in Code Runner MCP Server (CVSS 8.7, Code Runner MCP Server)
- [CVE-2026-8161](https://cve.now/CVE-2026-8161.md): multiparty vulnerable to Denial of Service via Prototype Pollution leading to Uncaught Exception (CVSS 7.5, multiparty)
- [CVE-2026-8159](https://cve.now/CVE-2026-8159.md): multiparty vulnerable to ReDoS via filename parsing (CVSS 7.5, multiparty)
- [CVE-2026-1934](https://cve.now/CVE-2026-1934.md): Motors – Car Dealership & Classified Listings Plugin \<= 1.4.103 - Missing Authorization to Authenticated (Subscriber+) Payment Bypass via 'stm\_payment\_status' Parameter (CVSS 4.3, stylemix Motors – Car Dealership & Classified Listings Plug…)
- [CVE-2026-44412](https://cve.now/CVE-2026-44412.md): A vulnerability has been identified in Solid Edge SE2026 (All versions \< V226.0 Update 5). (CVSS 7.8, Siemens Solid Edge SE2026)
- [CVE-2026-44411](https://cve.now/CVE-2026-44411.md): A vulnerability has been identified in Solid Edge SE2026 (All versions \< V226.0 Update 5). (CVSS 7.8, Siemens Solid Edge SE2026)
- [CVE-2026-41551](https://cve.now/CVE-2026-41551.md): A vulnerability has been identified in ROS# (All versions \< V2.2.2). (CVSS 9.1, Siemens ROS#)
- [CVE-2026-41125](https://cve.now/CVE-2026-41125.md): A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions), blueplanet 105 TL3 (All (CVSS 6.0, Siemens blueplanet 100 NX3 M8 · Siemens blueplanet 100… +20)
- [CVE-2026-33893](https://cve.now/CVE-2026-33893.md): A vulnerability has been identified in Teamcenter V2312 (All versions \< V2312.0014), Teamcenter V2406 (All versions \< V2406.0012), Teamcente (CVSS 7.5, Siemens Teamcenter)
- [CVE-2026-33862](https://cve.now/CVE-2026-33862.md): A vulnerability has been identified in Teamcenter V2312 (All versions \< V2312.0014), Teamcenter V2406 (All versions \< V2406.0012), Teamcente (CVSS 7.3, Siemens Teamcenter)
- [CVE-2026-27662](https://cve.now/CVE-2026-27662.md): Affected devices do not properly restrict access to the web browser via the Control Panel when no corresponding security mechanisms are in p (CVSS 7.7, Siemens SIMATIC HMI MTP1000 Unified Comfort Panel · Sie… +35)
- [CVE-2026-25789](https://cve.now/CVE-2026-25789.md): Affected devices do not properly validate and sanitize filenames on the Firmware Update page. (CVSS 7.1, Siemens SIMATIC Drive Controller CPU 1504D TF · Siemens… +77)
- [CVE-2026-25787](https://cve.now/CVE-2026-25787.md): Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control Diagnostics" page of the (CVSS 9.1, Siemens SIMATIC Drive Controller CPU 1504D TF · Siemens… +77)
- [CVE-2026-25786](https://cve.now/CVE-2026-25786.md): Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters page of the web interface (CVSS 9.1, Siemens SIMATIC Drive Controller CPU 1504D TF · Siemens… +77)
- [CVE-2026-22925](https://cve.now/CVE-2026-22925.md): A vulnerability has been identified in SIMATIC CN 4100 (All versions \< V5.0). (CVSS 7.5, Siemens SIMATIC CN)
- [CVE-2026-22924](https://cve.now/CVE-2026-22924.md): A vulnerability has been identified in SIMATIC CN 4100 (All versions \< V5.0). (CVSS 9.1, Siemens SIMATIC CN)
- [CVE-2025-40949](https://cve.now/CVE-2025-40949.md): A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions \< V2.17.1), RUGGEDCOM ROX MX5000RE (All versions \< V2.17.1), RUGGE (CVSS 9.1, Siemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9)
- [CVE-2025-40948](https://cve.now/CVE-2025-40948.md): A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions \< V2.17.1), RUGGEDCOM ROX MX5000RE (All versions \< V2.17.1), RUGGE (CVSS 6.8, Siemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9)
- [CVE-2025-40947](https://cve.now/CVE-2025-40947.md): A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions \< V2.17.1), RUGGEDCOM ROX MX5000RE (All versions \< V2.17.1), RUGGE (CVSS 7.5, Siemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9)
- [CVE-2025-40946](https://cve.now/CVE-2025-40946.md): A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions \< V6.1.4.9), blueplanet 1 (CVSS 8.3, Siemens blueplanet 100 NX3 M8 · Siemens blueplanet 100… +21)
- [CVE-2025-40833](https://cve.now/CVE-2025-40833.md): The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. (CVSS 7.5, Siemens IE/PB LINK HA · Siemens IE/PB link PN IO +165)
- [CVE-2024-54017](https://cve.now/CVE-2024-54017.md): A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions \< V11.0), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 (CVSS 5.3, Siemens SIPROTEC 5 6MD84 · Siemens SIPROTEC 5 6MD85 +36)
- [CVE-2026-39432](https://cve.now/CVE-2026-39432.md): WordPress Timetics plugin \<= 1.0.53 - Broken Access Control vulnerability (CVSS 8.2, Arraytics Timetics)
- [CVE-2026-2300](https://cve.now/CVE-2026-2300.md): BJ Lazy Load \<= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom HTML Block (CVSS 6.4, bjornjohansen BJ Lazy Load)
- [CVE-2026-6247](https://cve.now/CVE-2026-6247.md): scratchblocks for WP \<= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'element' Shortcode Attribute (CVSS 6.4, tkc49 scratchblocks for WP)
- [CVE-2026-5028](https://cve.now/CVE-2026-5028.md): Eight Day Week Print Workflow \<= 1.2.6 - Authenticated (Subscriber+) SQL Injection via 'title' Parameter (CVSS 6.5, 10up Eight Day Week Print Workflow)
- [CVE-2026-7464](https://cve.now/CVE-2026-7464.md): WP Google Maps Integration \<= 1.2 - Reflected Cross-Site Scripting via 'page' Parameter (CVSS 6.1, trapesium WP Google Maps Integration)
- [CVE-2026-6710](https://cve.now/CVE-2026-6710.md): Skysa Text Ticker App \<= 1.4 - Cross-Site Request Forgery to Settings Modification via 'Save Settings' Form (CVSS 4.3, davidskysa Skysa Text Ticker App)
- [CVE-2026-6256](https://cve.now/CVE-2026-6256.md): Credits Shortcode \<= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link' Shortcode Attribute (CVSS 6.4, jashjacob Credits Shortcode)
- [CVE-2026-6932](https://cve.now/CVE-2026-6932.md): Woo Commerce Minimum Weight \<= 3.0.1 - Cross-Site Request Forgery via Settings Update Form (CVSS 4.3, hemant29 Woo Commerce Minimum Weight)
- [CVE-2026-5693](https://cve.now/CVE-2026-5693.md): Smart Appointment & Booking \<= 1.0.8 - Missing Authorization to Unauthenticated Arbitrary Booking Cancellation (CVSS 5.3, zealopensource Smart Appointment & Booking)
- [CVE-2026-6709](https://cve.now/CVE-2026-6709.md): Coinbase Commerce for Contact Form 7 \<= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) API Key Modification via 'cccf7\_api\_key' Parameter (CVSS 4.3, coderpress Coinbase Commerce for Contact Form)
- [CVE-2026-7659](https://cve.now/CVE-2026-7659.md): Advanced Social Media Icons \<= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'social' Shortcode (CVSS 6.4, riotweb Advanced Social Media Icons)
- [CVE-2026-5715](https://cve.now/CVE-2026-5715.md): Voyage Plus \<= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'post-content' Shortcode (CVSS 6.4, scui2 Voyage Plus)
- [CVE-2026-4920](https://cve.now/CVE-2026-4920.md): Next Date \<= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'default' Shortcode Attribute (CVSS 6.4, jeremyshapiro Next Date)
- [CVE-2026-7616](https://cve.now/CVE-2026-7616.md): Zawgyi Embed \<= 2.1.1 - Cross-Site Request Forgery via 'zawgyi\_forceCSS' Parameter (CVSS 4.3, saturngod Zawgyi Embed)
- [CVE-2026-7561](https://cve.now/CVE-2026-7561.md): Tm – WordPress Redirection \<= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting (CVSS 6.1, tienrocker Tm – WordPress Redirection)
- [CVE-2026-7050](https://cve.now/CVE-2026-7050.md): Forms Rb \<= 1.1.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via 'form\_id' Parameter (CVSS 4.3, rbplugins Forms Rb)
- [CVE-2026-2993](https://cve.now/CVE-2026-2993.md): AI Chatbot & Workflow Automation by AIWU \<= 1.4.17 - Unauthenticated SQL Injection in getListForTbl() (CVSS 7.5, wupsales AI Chatbot & Workflow Automation by AIWU)
- [CVE-2026-4859](https://cve.now/CVE-2026-4859.md): SP Blog Designer \<= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'design' Attribute (CVSS 6.4, softpulseinfotech SP Blog Designer)
- [CVE-2026-6237](https://cve.now/CVE-2026-6237.md): Quick Table \<= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute (CVSS 6.4, rdcravens Quick Table)
- [CVE-2026-6690](https://cve.now/CVE-2026-6690.md): LifePress \<= 2.2.2 - Unauthenticated Stored Cross-Site Scripting via 'n' Parameter via lp\_update\_mds AJAX Action (CVSS 7.2, ashanjay LifePress)
- [CVE-2026-6663](https://cve.now/CVE-2026-6663.md): GWD Connect \<= 2.9 - Unauthenticated Limited Code Execution via update\_agent (CVSS 4.8, thewebsitesupply GWD Conex)
- [CVE-2026-7437](https://cve.now/CVE-2026-7437.md): AzonPost \<= 1.3 - Reflected Cross-Site Scripting (CVSS 6.1, moch-a AzonPost)
- [CVE-2026-7626](https://cve.now/CVE-2026-7626.md): Slek Gateway for WooCommerce \<= 1.0 - Unauthenticated Insufficiently Protected Credentials via Payment Redirect Form Hidden Fields (CVSS 5.3, qqqjus Slek Gateway for WooCommerce)
- [CVE-2026-3604](https://cve.now/CVE-2026-3604.md): WP SEO Structured Data Schema \<= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via '\_kcseo\_ative\_tab' Parameter (CVSS 4.9, kcseopro WP SEO Structured Data Schema)
- [CVE-2026-7661](https://cve.now/CVE-2026-7661.md): Bootstrap Shortcode \<= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'box' Shortcode (CVSS 6.4, shamim\_d Bootstrap Shortcode)
- [CVE-2026-7562](https://cve.now/CVE-2026-7562.md): WP-Redirection \<= 1.0.3 - Cross-Site Request Forgery to Settings Update (CVSS 4.3, phkcorp2005 WP-Redirection)
- [CVE-2026-5340](https://cve.now/CVE-2026-5340.md): Fancy Image Show \<= 9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes (CVSS 6.4, gopi\_plus Fancy Image Show)
- [CVE-2026-4301](https://cve.now/CVE-2026-4301.md): Rate Star Review Vote \<= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification via 'rating\_id' Parameter (CVSS 4.3, videowhisper Rate Star Review Vote – AJAX Reviews, Votes, S…)
- [CVE-2026-6808](https://cve.now/CVE-2026-6808.md): Pricing Tables for WP \<= 1.1.0 - Reflected Cross-Site Scripting via 'page' Parameter (CVSS 6.1, optimalplugins Pricing Tables for WP)
- [CVE-2026-6913](https://cve.now/CVE-2026-6913.md): Shortcodely \<= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'widget\_area' Shortcode Attribute (CVSS 6.4, patilswapnilv Shortcodely)
- [CVE-2026-6708](https://cve.now/CVE-2026-6708.md): HEL Online Classroom: AI-powered Online Classrooms \<= 1.0.3 - Missing Authorization to Unauthenticated Arbitrary Classroom Deletion via 'id' Parameter (CVSS 5.3, higheredlab HEL Online Classroom: AI-powered Online Classro…)
- [CVE-2026-6402](https://cve.now/CVE-2026-6402.md): webpack-dev-server vulnerable to cross-origin source code exposure on non-HTTPS origins (CVSS 5.3, webpack-dev-server)
- [CVE-2026-35227](https://cve.now/CVE-2026-35227.md): Improper resource management in CODESYS Modbus TCP Server (CVSS 8.2, CODESYS Modbus)
- [CVE-2026-1185](https://cve.now/CVE-2026-1185.md): A configuration file on the local file system had improper input validation which could allow code execution and potentially lead to privile (CVSS 5.4, Axis Communications AB AXIS OS)
- [CVE-2026-0804](https://cve.now/CVE-2026-0804.md): An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege esca (CVSS 6.7, Axis Communications AB AXIS OS)
- [CVE-2026-0802](https://cve.now/CVE-2026-0802.md): An ACAP configuration file lacked sufficient input validation, which could allow command injection and potentially lead to privilege escalat (CVSS 6.0, Axis Communications AB AXIS OS)
- [CVE-2026-0541](https://cve.now/CVE-2026-0541.md): ACAP applications can gain elevated privileges due to improper input validation during the installation process, potentially leading to priv (CVSS 6.7, Axis Communications AB AXIS OS)
- [CVE-2026-1681](https://cve.now/CVE-2026-1681.md): net: Stack Overflow with Ping (to own IP Address) via Shell (CVSS 6.1, zephyrproject-rtos Zephyr)
- [CVE-2026-41872](https://cve.now/CVE-2026-41872.md): "Kura Sushi Official App" provided by EPG, Inc. (CVSS 7.4, EPG "Kura Sushi Official App" for Android · EPG "Kura Sushi…)
- [CVE-2026-41530](https://cve.now/CVE-2026-41530.md): The automatic folder creation feature of Lhaz and Lhaz+ provided by Chitora soft contains a path traversal vulnerability. (CVSS 3.3, Chitora soft Lhaz · Chitora soft Lhaz+)
- [CVE-2026-45430](https://cve.now/CVE-2026-45430.md): The Salesforce module before 1.x-1.0.1 for Backdrop CMS does not properly use a random state parameter to protect the authorization flow aga (CVSS 7.1, Backdrop CMS contributed projects backdrop-contrib/salesfor…)
- [CVE-2026-7287](https://cve.now/CVE-2026-7287.md): \*\* UNSUPPORTED WHEN ASSIGNED \*\* A buffer overflow vulnerability in the formWep(), formWlAc(), formPasswordSetup(), formUpgradeCert(), and fo (CVSS 7.5, Zyxel NWA1100-N firmware)
- [CVE-2026-7257](https://cve.now/CVE-2026-7257.md): \*\* UNSUPPORTED WHEN ASSIGNED \*\* An insecure storage of sensitive information vulnerability in the configuration file of Zyxel WRE6505 v2 fir (CVSS 4.4, Zyxel WRE6505 v2 firmware)
- [CVE-2026-7256](https://cve.now/CVE-2026-7256.md): \*\* UNSUPPORTED WHEN ASSIGNED \*\* A command injection vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 co (CVSS 8.8, Zyxel WRE6505 v2 firmware)
- [CVE-2026-7255](https://cve.now/CVE-2026-7255.md): \*\* UNSUPPORTED WHEN ASSIGNED \*\* An improper restriction of excessive authentication attempts vulnerability in the web management interface o (CVSS 6.5, Zyxel WRE6505 v2 firmware)
- [CVE-2026-40137](https://cve.now/CVE-2026-40137.md): Cross-Site Scripting (XSS) vulnerability in Business Server Pages Application (TAF\_APPLAUNCHER) (CVSS 6.1, SAP\_SE Business Server Pages Application)
- [CVE-2026-40136](https://cve.now/CVE-2026-40136.md): Denial of service (DoS) in SAP Financial Consolidation (CVSS 4.3, SAP\_SE SAP Financial Consolidation)
- [CVE-2026-40135](https://cve.now/CVE-2026-40135.md): OS Command Injection vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform (CVSS 6.5, SAP\_SE SAP NetWeaver Application Server for ABAP and ABAP P…)
- [CVE-2026-40134](https://cve.now/CVE-2026-40134.md): Missing Authorization Check in SAP Incentive and Commission Management (CVSS 4.3, SAP\_SE SAP Incentive and Commission Management)
- [CVE-2026-40133](https://cve.now/CVE-2026-40133.md): Missing Authorization check in SAP S/4HANA Condition Maintenance (CVSS 6.3, SAP\_SE SAP S/4HANA Condition Maintenance)
- [CVE-2026-40132](https://cve.now/CVE-2026-40132.md): Missing Authorization Check in SAP Strategic Enterprise Management (BSP application Balanced Scorecard Wizard) (CVSS 5.4, SAP\_SE SAP Strategic Enterprise Management)
- [CVE-2026-40131](https://cve.now/CVE-2026-40131.md): SQL Injection vulnerability in SAP HANA Deployment Infrastructure (HDI) deploy library (CVSS 3.4, SAP\_SE SAP HANA Deployment Infrastructure (HDI) deploy libr…)
- [CVE-2026-40129](https://cve.now/CVE-2026-40129.md): Code Injection vulnerability in SAP Application Server ABAP for SAP NetWeaver and ABAP Platform (CVSS 4.3, SAP\_SE SAP Application Server ABAP for SAP NetWeaver and AB…)
- [CVE-2026-34263](https://cve.now/CVE-2026-34263.md): Missing authentication check in SAP Commerce cloud configuration (CVSS 9.6, SAP\_SE SAP Commerce cloud configuration)
- [CVE-2026-34260](https://cve.now/CVE-2026-34260.md): SQL injection vulnerability in SAP S/4HANA (SAP Enterprise Search for ABAP) (CVSS 9.6, SAP\_SE SAP S/4HANA)
- [CVE-2026-34259](https://cve.now/CVE-2026-34259.md): OS Command Injection Vulnerability in SAP Forecasting & Replenishment (CVSS 8.2, SAP\_SE SAP Forecasting & Replenishment)
- [CVE-2026-34258](https://cve.now/CVE-2026-34258.md): Content Spoofing vulnerability in SAPUI5 (Search UI) (CVSS 4.7, SAP\_SE SAPUI5)
- [CVE-2026-27682](https://cve.now/CVE-2026-27682.md): Reflected Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages) (CVSS 4.7, SAP\_SE SAP NetWeaver Application Server ABAP)
- [CVE-2026-0502](https://cve.now/CVE-2026-0502.md): Cross Site Request Forgery (CSRF) in SAP BusinessObjects Business Intelligence Platform (CVSS 5.4, SAP\_SE SAP BusinessObjects Business Intelligence Platform)
- [CVE-2026-45393](https://cve.now/CVE-2026-45393.md): Local privilege escalation to SYSTEM in Cribl Edge for Windows (CVSS 8.5, Cribl Edge)
- [CVE-2026-45392](https://cve.now/CVE-2026-45392.md): DOM-based XSS in Cribl Stream (CVSS 7.1, Cribl Stream)
- [CVE-2026-45391](https://cve.now/CVE-2026-45391.md): Local privilege escalation in Cribl Edge for Linux (CVSS 8.5, Cribl Edge)
- [CVE-2026-45362](https://cve.now/CVE-2026-45362.md): Sangoma Switchvox before 8.4 places cleartext SIP authentication credentials in a backup file. (CVSS 3.2, Sangoma Switchvox)
- [CVE-2026-45321](https://cve.now/CVE-2026-45321.md): Malware in 42 @tanstack/\* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys (CVSS 9.6, KEV, @tanstack arktype-adapter · @tanstack eslint-plugin-rou… +82)
- [CVE-2023-27753](https://cve.now/CVE-2023-27753.md): An arbitrary file upload vulnerability in MK-Auth 23.01K4.9 allows attackers to execute arbitrary code via uploading a crafted PHP file. (CVSS 8.0)
- [CVE-2023-30059](https://cve.now/CVE-2023-30059.md): An insecure direct object reference in MK-Auth 23.01K4.9 allows attackers to access and send support calls for other users via manipulation (CVSS 5.4)
- [CVE-2025-65719](https://cve.now/CVE-2025-65719.md): An issue in Open Source Kubectl MCP Server v1.1.1 allows attackers to execute arbitrary code on a victim system via user interaction with a (CVSS 9.8, kubectl-mcp-server)
- [CVE-2025-70842](https://cve.now/CVE-2025-70842.md): A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the File Management module of FluentCMS 1.2.3. (CVSS 5.4)
- [CVE-2026-31214](https://cve.now/CVE-2026-31214.md): The torch-checkpoint-shrink.py script in the ml-engineering project in commit 0099885db36a8f06556efe1faf552518852cb1e0 (2025-20-27) contains (CVSS 9.8)
- [CVE-2026-31215](https://cve.now/CVE-2026-31215.md): The nexent v1.7.5.2 backend service contains an unauthorized arbitrary file deletion vulnerability in its ElasticSearch service interface. (CVSS 9.1)
- [CVE-2026-31216](https://cve.now/CVE-2026-31216.md): The nexent v1.7.5.2 backend service contains an unauthorized arbitrary storage file deletion vulnerability in its file management API. (CVSS 9.1)
- [CVE-2026-31217](https://cve.now/CVE-2026-31217.md): The \_load\_model() function in the neural\_magic\_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f (CVSS 9.8)
- [CVE-2026-31218](https://cve.now/CVE-2026-31218.md): The \_load\_model() function in the neural\_magic\_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f (CVSS 8.8)
- [CVE-2026-31219](https://cve.now/CVE-2026-31219.md): The \_load\_model() function in the neural\_magic\_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f (CVSS 8.8)
- [CVE-2026-31220](https://cve.now/CVE-2026-31220.md): PySyft (Syft Datasite/Server) versions 0.9.5 and earlier are vulnerable to remote code execution due to insufficient validation and sandboxi (CVSS 9.8, syft)
- [CVE-2026-31221](https://cve.now/CVE-2026-31221.md): PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism (CVSS 8.8, lightning · pytorch-lightning)
- [CVE-2026-31222](https://cve.now/CVE-2026-31222.md): The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability (CWE-502) in the Trainer.load() method of the Trainer cl (CVSS 8.8, snorkel)
- [CVE-2026-31223](https://cve.now/CVE-2026-31223.md): The snorkel library thru v0.10.0 contains a critical insecure deserialization vulnerability (CWE-502) in the BaseLabeler.load() method of th (CVSS 8.8, snorkel)
- [CVE-2026-31224](https://cve.now/CVE-2026-31224.md): The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability (CWE-502) in the MultitaskClassifier.load() method of th (CVSS 8.8, snorkel)
- [CVE-2026-31225](https://cve.now/CVE-2026-31225.md): The superduper project thru v0.10.0 contains a critical remote code execution vulnerability in its query parsing component. (CVSS 8.8, superduper-framework)
- [CVE-2026-31226](https://cve.now/CVE-2026-31226.md): The TinyZero project thru commit 6652a63c57fa7e5ccde3fc9c598c7176ff15b839 (2025-58-24) contains a critical command injection vulnerability ( (CVSS 9.8)
- [CVE-2026-31228](https://cve.now/CVE-2026-31228.md): The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a remote code execution vulnerability in its Kubeflow component. (CVSS 9.8)
- [CVE-2026-31229](https://cve.now/CVE-2026-31229.md): The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains an insecure deserialization vulnerability (CWE-502) in its Kubeflow component' (CVSS 9.8)
- [CVE-2026-31230](https://cve.now/CVE-2026-31230.md): The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a command-line argument injection vulnerability in its Kubeflow component (rob (CVSS 9.8)
- [CVE-2026-31231](https://cve.now/CVE-2026-31231.md): Cognee thru v0.4.0 contains a critical remote code execution vulnerability in its notebook cell execution API endpoint. (CVSS 9.8)
- [CVE-2026-31232](https://cve.now/CVE-2026-31232.md): The CosyVoice project thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability ( (CVSS 8.8)
- [CVE-2026-31233](https://cve.now/CVE-2026-31233.md): Guardrails AI thru 0.6.7 contains a code injection vulnerability (CWE-94) in its Hub package installation mechanism. (CVSS 9.8, guardrails-ai)
- [CVE-2026-31234](https://cve.now/CVE-2026-31234.md): Horovod thru 0.28.1 contains an insecure deserialization vulnerability (CWE-502) in its KVStore HTTP server component. (CVSS 9.8, horovod)
- [CVE-2026-31235](https://cve.now/CVE-2026-31235.md): The imgaug library thru 0.4.0 contains an insecure deserialization vulnerability in its BackgroundAugmenter class within the multicore.py mo (CVSS 9.8, imgaug)
- [CVE-2026-31236](https://cve.now/CVE-2026-31236.md): The llm CLI tool thru 0.27.1 contains a critical code injection vulnerability via its --functions command-line argument. (CVSS 9.8, llm)
- [CVE-2026-31237](https://cve.now/CVE-2026-31237.md): The Ludwig framework thru 0.10.4 is vulnerable to insecure deserialization (CWE-502) through its predict() method. (CVSS 9.8, ludwig)
- [CVE-2026-31238](https://cve.now/CVE-2026-31238.md): The Ludwig framework thru 0.10.4 is vulnerable to insecure deserialization (CWE-502) in its model serving component. (CVSS 9.8, ludwig)
- [CVE-2026-31239](https://cve.now/CVE-2026-31239.md): The mamba language model framework thru 2.2.6 is vulnerable to insecure deserialization (CWE-502) when loading pre-trained models from Huggi (CVSS 9.8, mamba-ssm)
- [CVE-2026-31240](https://cve.now/CVE-2026-31240.md): The mem0 1.0.0 server lacks authentication and authorization controls for its memory management API endpoints. (CVSS 7.5, mem0ai)
- [CVE-2026-31241](https://cve.now/CVE-2026-31241.md): The mem0 1.0.0 server lacks authentication and authorization controls for its memory deletion API endpoint (DELETE /memories). (CVSS 6.5, mem0ai)
- [CVE-2026-31242](https://cve.now/CVE-2026-31242.md): The mem0 v1.0.0 server lacks authentication and authorization controls for its memory reset functionality accessible via the DELETE /memorie (CVSS 9.1)
- [CVE-2026-31243](https://cve.now/CVE-2026-31243.md): The mem0 1.0.0 server lacks authentication and authorization controls for its memory reset and table re-creation functionality accessible vi (CVSS 6.5)
- [CVE-2026-31244](https://cve.now/CVE-2026-31244.md): The mem0 1.0.0 server lacks authentication and authorization controls for its memory deletion API endpoint (DELETE /memories/{memory\_id}). (CVSS 6.5)
- [CVE-2026-31245](https://cve.now/CVE-2026-31245.md): The mem0 1.0.0 server lacks authentication and authorization controls for its memory creation API endpoint (POST /memories). (CVSS 5.3, mem0ai)
- [CVE-2026-45185](https://cve.now/CVE-2026-45185.md): Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing path. (CVSS 9.8, Exim)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-05-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.