# CVEs published 2026-05-13

346 CVEs were published on May 13, 2026: 26 critical, 132 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2026-41281](https://cve.now/CVE-2026-41281.md): Android App "あんしんフィルター for au" provided by KDDI CORPORATION contains Cleartext Transmission of Sensitive Information (CWE-319) vulnerability (CVSS 4.8, KDDI あんしんフィルター for au)
- [CVE-2026-8500](https://cve.now/CVE-2026-8500.md): Web::Passwd versions through 0.03 for Perl is vulnerable to RCE (CVSS 9.8, EVANK Web::Passwd)
- [CVE-2026-29206](https://cve.now/CVE-2026-29206.md): Insufficient sanitization of SQL queries in the \`sqloptimizer\` utility script allows SQL Injections on behalf of the root user if Slow Query (CVSS 8.1, WebPros cPanel · WebPros WP Squared)
- [CVE-2026-32991](https://cve.now/CVE-2026-32991.md): Improper authorization checks of team members privileges allow a team member to escalate privileges to the team owner account. (CVSS 7.1, WebPros cPanel · WebPros WP Squared)
- [CVE-2026-29205](https://cve.now/CVE-2026-29205.md): Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpdavd attachment downloa (CVSS 8.6, WebPros cPanel · WebPros WP Squared)
- [CVE-2026-32992](https://cve.now/CVE-2026-32992.md): SSL verification is disabled in the DNS Cluster system. (CVSS 8.2, WebPros cPanel · WebPros WP Squared)
- [CVE-2026-32993](https://cve.now/CVE-2026-32993.md): Improper sanitization of the \`status\` query parameter of the \`/unprotected/nova\_error\` endpoint allows unauthenticated attacker to inject ar (CVSS 8.3, WebPros cPanel · WebPros WP Squared)
- [CVE-2026-45158](https://cve.now/CVE-2026-45158.md): OPNsense: Command Injection via Attacker-Controlled DHCP Config (CVSS 9.1, opnsense core)
- [CVE-2026-44194](https://cve.now/CVE-2026-44194.md): OPNsense: RCE on user managment (CVSS 9.1, opnsense core)
- [CVE-2026-44195](https://cve.now/CVE-2026-44195.md): OPNsense: Authentication lockout bypass (CVSS 5.3, opnsense core)
- [CVE-2026-44193](https://cve.now/CVE-2026-44193.md): OPNsense: RCE via XMLRPC endpoint using \`opnsense.restore\_config\_section\` method (CVSS 9.1, opnsense core)
- [CVE-2026-44478](https://cve.now/CVE-2026-44478.md): hoppscotch: Unauthenticated Onboarding Config Disclosure via Empty Recovery Token (CVSS 7.5, hoppscotch)
- [CVE-2026-44471](https://cve.now/CVE-2026-44471.md): gitoxide: Symlink prefix-reuse allows worktree escape during checkout (CVSS 7.8, GitoxideLabs gitoxide · gix-fs)
- [CVE-2026-44369](https://cve.now/CVE-2026-44369.md): CVAT: Stored XSS via annotation guides (CVSS 8.5, cvat-ai cvat)
- [CVE-2026-44439](https://cve.now/CVE-2026-44439.md): LookyLoo - PlaywrightCapture permits access to local files and internal network resources during page capture (CVSS 6.6, Lookyloo PlaywrightCapture · playwrightcapture)
- [CVE-2026-42463](https://cve.now/CVE-2026-42463.md): SQLBot: Unauthorized Access Vulnerability (CVSS 8.6, dataease SQLBot)
- [CVE-2026-44437](https://cve.now/CVE-2026-44437.md): Angular SSR: Open Redirect and Request Steering via Encoded X-Forwarded-Prefix (CVSS 6.9, angular-cli · @angular/ssr)
- [CVE-2026-44448](https://cve.now/CVE-2026-44448.md): ERPNext: Unauthorised Document modification due to missing validation (CVSS 5.9, frappe erpnext)
- [CVE-2026-44447](https://cve.now/CVE-2026-44447.md): ERPNext: Possibility of SQL Injection due to missing validation (CVSS 8.8, frappe erpnext)
- [CVE-2026-44446](https://cve.now/CVE-2026-44446.md): ERPNext: Possibility of SQL Injection due to missing validation (CVSS 8.8, frappe erpnext)
- [CVE-2026-44445](https://cve.now/CVE-2026-44445.md): ERPNext: XML External Entity (XEE) Reference Vulnerability in the EDI Module (CVSS 5.3, frappe erpnext)
- [CVE-2026-44441](https://cve.now/CVE-2026-44441.md): ERPNext: Possible SSRF by any authenticated user (CVSS 5.0, frappe erpnext)
- [CVE-2026-44440](https://cve.now/CVE-2026-44440.md): ERPNext: Path Traversal Leading to Sensitive File Exposure (CVSS 6.5, frappe erpnext)
- [CVE-2026-44442](https://cve.now/CVE-2026-44442.md): ERPNext: Unauthorised Document modification due to missing validation (CVSS 9.9, frappe erpnext)
- [CVE-2026-44423](https://cve.now/CVE-2026-44423.md): ShellHub: Cross-tenant IDOR in \`GET /api/sessions/:uid\` discloses SSH session data (CVSS 6.5, shellhub-io shellhub · github.com/shellhub-io/shellhub)
- [CVE-2026-44424](https://cve.now/CVE-2026-44424.md): ShellHub: Cross-tenant IDOR in \`GET /api/devices/:uid\` discloses device data of any namespace (CVSS 6.5, shellhub-io shellhub · github.com/shellhub-io/shellhub)
- [CVE-2026-44426](https://cve.now/CVE-2026-44426.md): ShellHub: Cross-tenant IDOR in \`GET /api/namespaces/:tenant\` via API Key bypasses membership check (CVSS 6.5, shellhub-io shellhub · github.com/shellhub-io/shellhub)
- [CVE-2026-44425](https://cve.now/CVE-2026-44425.md): ShellHub: Crash-DoS via field injection in filter and sort-by parameters (CVSS 5.4, shellhub-io shellhub · github.com/shellhub-io/shellhub)
- [CVE-2026-44418](https://cve.now/CVE-2026-44418.md): Incomplete fix for CVE-2026-35184: SQL Injection in phili67/ecclesiacrm (CVSS 8.7, phili67 ecclesiacrm)
- [CVE-2026-42561](https://cve.now/CVE-2026-42561.md): Python-Multipart: Denial of Service via unbounded multipart part headers (CVSS 7.5, Kludex python-multipart · python-multipart)
- [CVE-2026-44379](https://cve.now/CVE-2026-44379.md): MISP: Improper UUID validation in MISP Collections (CVSS 5.3, MISP)
- [CVE-2026-44380](https://cve.now/CVE-2026-44380.md): MISP: Improper access control in auth key reset allows privilege escalation to site administrator (CVSS 8.6, MISP)
- [CVE-2026-44381](https://cve.now/CVE-2026-44381.md): MISP: SQL injection via unvalidated ordering parameters in event and shadow attribute listings (CVSS 9.3, MISP)
- [CVE-2026-45708](https://cve.now/CVE-2026-45708.md): CubeCart: Authenticated RCE via Invoice Template → Order Print (CVSS 7.2, cubecart)
- [CVE-2026-45055](https://cve.now/CVE-2026-45055.md): CubeCart: Pre-Authenticated Password Reset Link Poisoning via HTTP Host Header (CVSS 8.1, cubecart)
- [CVE-2026-45714](https://cve.now/CVE-2026-45714.md): CubeCart: Server-Side Template Injection (SSTI) in Smarty Templates leading to RCE (CVSS 9.1, cubecart)
- [CVE-2026-45054](https://cve.now/CVE-2026-45054.md): CubeCart: Authenticated SQL Injection via \`sort\[\]\` Parameter in Admin Orders Transactions Listing (CVSS 4.9, cubecart)
- [CVE-2026-45053](https://cve.now/CVE-2026-45053.md): CubeCart: Authenticated Arbitrary File Upload to RCE in REST Files API (CVSS 9.1, cubecart)
- [CVE-2026-44376](https://cve.now/CVE-2026-44376.md): CubeCart: Reflected XSS in Store Search Bar (CVSS 6.1, cubecart)
- [CVE-2026-39428](https://cve.now/CVE-2026-39428.md): CubeCart: Stored Cross-Site Scripting (XSS) (CVSS 4.8, cubecart)
- [CVE-2026-39358](https://cve.now/CVE-2026-39358.md): CubeCart: Time-based Blind SQL Injection (CVSS 7.2, cubecart)
- [CVE-2026-44377](https://cve.now/CVE-2026-44377.md): CubeCart: Server-Side Template Injection (SSTI) in Smarty Templates leading to RCE (CVSS 9.1, cubecart)
- [CVE-2026-44372](https://cve.now/CVE-2026-44372.md): Nitro: Open Redirect via Protocol-Relative URL Bypass in Wildcard Route Rules (CVSS 5.3, nitrojs nitro · nitrojs nitropack +2)
- [CVE-2026-44373](https://cve.now/CVE-2026-44373.md): Nitro: Proxy scope bypass via percent-encoded path traversal in \`routeRules\` (CVSS 5.3, nitrojs nitro · nitrojs nitropack +2)
- [CVE-2026-42304](https://cve.now/CVE-2026-42304.md): Twisted: Denial of Service (DoS) in twisted.names via Crafted DNS Compression Pointer Chains (CVSS 7.5, twisted)
- [CVE-2026-44368](https://cve.now/CVE-2026-44368.md): PyQuorum: Timing side‑channel in mul\_mod (CVSS 6.9, svvqt pyquorum · pyquorum)
- [CVE-2026-8328](https://cve.now/CVE-2026-8328.md): FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address (CVSS 5.9, Python Software Foundation CPython)
- [CVE-2026-42602](https://cve.now/CVE-2026-42602.md): azureauthextension Authenticate method does not validate bearer tokens, allowing auth bypass via replay (CVSS 8.1, open-telemetry opentelemetry-collector-contrib · github.com…)
- [CVE-2026-45228](https://cve.now/CVE-2026-45228.md): Quark Drive (quark-auto-save) \< 0.8.5 Stored XSS via System Configuration (CVSS 5.1, Cp0204 quark-auto-save)
- [CVE-2026-45229](https://cve.now/CVE-2026-45229.md): Quark Drive (quark-auto-save) \< 0.8.5 Mass Assignment via POST /update (CVSS 8.7, Cp0204 quark-auto-save)
- [CVE-2026-21821](https://cve.now/CVE-2026-21821.md): HCL BigFix SCM Reporting is affected by vulnerabilities in jQuery (CVSS 8.3, HCLSoftware BigFix SCM Reporting)
- [CVE-2026-28374](https://cve.now/CVE-2026-28374.md): IDOR in Annotations API allows unprivileged users to DELETE annotation (CVSS 4.3, Grafana OSS)
- [CVE-2026-33378](https://cve.now/CVE-2026-33378.md): Grafana Data Source Plugin: DoS (OOM) via Negative Interval Injection in $\_\_timeGroup Macro (CVSS 6.5, Grafana OSS)
- [CVE-2026-28383](https://cve.now/CVE-2026-28383.md): Grafana plugin resources can lead to unbounded memory allocation (CVSS 6.5, Grafana OSS)
- [CVE-2026-33376](https://cve.now/CVE-2026-33376.md): Auth Proxy IPv6 whitelist bypass (CVSS 7.4, Grafana OSS)
- [CVE-2026-33380](https://cve.now/CVE-2026-33380.md): SQL Expressions Read File From Disk (CVSS 6.3, Grafana OSS · github.com/grafana/grafana)
- [CVE-2026-28380](https://cve.now/CVE-2026-28380.md): BAC in Snapshot API allows deletion of unauthorized dashboard snapshots (CVSS 6.5, Grafana OSS)
- [CVE-2026-33381](https://cve.now/CVE-2026-33381.md): Users can generate Service Account tokens after permissions removal (CVSS 5.9, Grafana OSS · github.com/grafana/grafana)
- [CVE-2026-33377](https://cve.now/CVE-2026-33377.md): Dashboard Import Overwrites ACL — Editor Privilege Escalation to Dashboard Admin (CVSS 7.1, Grafana OSS)
- [CVE-2026-28376](https://cve.now/CVE-2026-28376.md): Grafana Live push endpoint allows unbounded memory allocation leading to OOM (CVSS 6.5, Grafana OSS)
- [CVE-2026-28379](https://cve.now/CVE-2026-28379.md): Viewer-triggered race condition in Grafana Live leads to complete server crash (CVSS 6.5, Grafana OSS)
- [CVE-2026-42552](https://cve.now/CVE-2026-42552.md): Flight: Sensitive information disclosure via default error handler in flightphp/core (CVSS 7.5, flightphp core · flightphp/core)
- [CVE-2026-42551](https://cve.now/CVE-2026-42551.md): Flight: HTTP method override enabled by default enables CSRF escalation and middleware bypass in flightphp/core (CVSS 7.5, flightphp core · flightphp/core)
- [CVE-2026-42550](https://cve.now/CVE-2026-42550.md): Flight: SQL Injection via unvalidated identifiers in SimplePdo::insert / update / delete (CVSS 8.8, flightphp core · flightphp/core)
- [CVE-2026-42549](https://cve.now/CVE-2026-42549.md): Flight: Path traversal in \`make:controller\` CLI creates arbitrary directories outside project root (CVSS 4.4, flightphp core · flightphp/core)
- [CVE-2026-42548](https://cve.now/CVE-2026-42548.md): Flight: Reflected XSS via unvalidated JSONP callback in Flight::jsonp() (CVSS 8.6, flightphp core · flightphp/core)
- [CVE-2026-44363](https://cve.now/CVE-2026-44363.md): Unsafe remote resource fetching in expansion misp-modules (CVSS 5.8, misp-modules)
- [CVE-2026-44364](https://cve.now/CVE-2026-44364.md): misp-modules website - Missing CSRF protection in the website home blueprint (CVSS 9.3, misp-modules)
- [CVE-2026-44351](https://cve.now/CVE-2026-44351.md): fast-jwt: Empty HMAC secret accepted via async key resolver - JWT auth bypass (CVSS 9.1, nearform fast-jwt · fast-jwt)
- [CVE-2026-0243](https://cve.now/CVE-2026-0243.md): Prisma SD-WAN: Denial of Service (DoS) Vulnerability Through IPv6 Crafted Packet (CVSS 4.9, Palo Alto Networks Prisma SD-WAN ION)
- [CVE-2026-22677](https://cve.now/CVE-2026-22677.md): Hermes WebUI \< 0.51.44 Path Traversal via Session Import Endpoint (CVSS 6.0, nesquena hermes-webui)
- [CVE-2026-0248](https://cve.now/CVE-2026-0248.md): Prisma Access Agent: Improper Certificate Validation Vulnerability (CVSS 6.2, Palo Alto Networks Prisma Access Agent)
- [CVE-2026-0242](https://cve.now/CVE-2026-0242.md): Trust Protection Foundation: SQL Injection Vulnerability (CVSS 6.1, Palo Alto Networks Trust Protection Foundation)
- [CVE-2026-0244](https://cve.now/CVE-2026-0244.md): Prisma SD-WAN: Improper Certificate Validation Vulnerability (CVSS 5.2, Palo Alto Networks Prisma SD-WAN ION)
- [CVE-2026-0241](https://cve.now/CVE-2026-0241.md): Trust Protection Foundation: Multiple Authorization Bypass Vulnerabilities (CVSS 5.1, Palo Alto Networks Trust Protection Foundation)
- [CVE-2026-42032](https://cve.now/CVE-2026-42032.md): CKAN: Unauthenticated Authorization Bypass in \`datastore\_search\_sql\` (CVSS 6.7, ckan)
- [CVE-2026-41255](https://cve.now/CVE-2026-41255.md): CKAN: CSRF exemption primed by anonymous requests (CVSS 6.1, ckan)
- [CVE-2026-0245](https://cve.now/CVE-2026-0245.md): Prisma Access Agent: Information Disclosure Vulnerabilities (CVSS 4.3, Palo Alto Networks Prisma Access Agent)
- [CVE-2026-0240](https://cve.now/CVE-2026-0240.md): Trust Protection Foundation: Sensitive Information Disclosure Vulnerability (CVSS 4.5, Palo Alto Networks Trust Protection Foundation)
- [CVE-2026-41132](https://cve.now/CVE-2026-41132.md): CKAN: No certificate validation on STMP connection (CVSS 6.6, ckan)
- [CVE-2026-42031](https://cve.now/CVE-2026-42031.md): CKAN: Unauthenticated SQL Injection and Authorization Bypass in \`datastore\_search\_sql\` (CVSS 8.3, ckan)
- [CVE-2026-0246](https://cve.now/CVE-2026-0246.md): Prisma Access Agent: Local Privilege Escalation Vulnerability (CVSS 5.9, Palo Alto Networks Prisma Access Agent)
- [CVE-2026-0247](https://cve.now/CVE-2026-0247.md): Prisma Access Agent Endpoint DLP: Authorization Bypass Vulnerabilities (CVSS 5.9, Palo Alto Networks Prisma Access Agent)
- [CVE-2026-33585](https://cve.now/CVE-2026-33585.md): Arqit SKA-Platform Improper Handling of Parameters Vulnerability (CVSS 3.8, Arqit Symmetric Key Agreement Platform)
- [CVE-2026-43970](https://cve.now/CVE-2026-43970.md): Decompression Bomb in cow\_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame (CVSS 8.2, ninenines cowlib)
- [CVE-2026-0249](https://cve.now/CVE-2026-0249.md): GlobalProtect App: Certificate Validation Bypass Vulnerabilities (CVSS 4.9, Palo Alto Networks GlobalProtect App)
- [CVE-2026-33584](https://cve.now/CVE-2026-33584.md): Arqit SKA-Platform Enables Access to Debug Information (CVSS 5.3, Arqit Symmetric Key Agreement Platform)
- [CVE-2026-0239](https://cve.now/CVE-2026-0239.md): Chronosphere Chronocollector Information Disclosure Vulnerability (CVSS 4.9, Palo Alto Networks Chronosphere Chronocollector)
- [CVE-2026-0250](https://cve.now/CVE-2026-0250.md): GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway (CVSS 5.2, Palo Alto Networks GlobalProtect App · Palo Alto Networks G…)
- [CVE-2026-8466](https://cve.now/CVE-2026-8466.md): Unbounded buffer accumulation in multipart header parsing causes denial of service in cowboy (CVSS 8.2, ninenines cowboy)
- [CVE-2026-44248](https://cve.now/CVE-2026-44248.md): Netty: Resource exhaustion in MqttDecoder (CVSS 5.3, netty · io.netty netty-codec-mqtt +1)
- [CVE-2026-42587](https://cve.now/CVE-2026-42587.md): Netty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS (CVSS 7.5, netty · io.netty netty-codec-http +3)
- [CVE-2026-0238](https://cve.now/CVE-2026-0238.md): Broker VM: Improper Input Validation in Broker VM Certificate and Key Fields (CVSS 1.1, Palo Alto Networks Broker VM)
- [CVE-2026-42586](https://cve.now/CVE-2026-42586.md): Netty: CRLF Injection in Netty Redis Codec Encoder (CVSS 6.8, netty · io.netty netty-codec-redis +1)
- [CVE-2026-0251](https://cve.now/CVE-2026-0251.md): GlobalProtect App: Local Privilege Escalation Vulnerabilities (CVSS 5.9, Palo Alto Networks GlobalProtect App · Palo Alto Networks G…)
- [CVE-2026-33583](https://cve.now/CVE-2026-33583.md): Arqit SKA-Platform Vulnerable to Key Exposure (CVSS 8.7, Arqit Symmetric Key Agreement Platform)
- [CVE-2026-0256](https://cve.now/CVE-2026-0256.md): PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface (CVSS 4.4, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0257](https://cve.now/CVE-2026-0257.md): PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities (CVSS 7.8, KEV, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0235](https://cve.now/CVE-2026-0235.md): Prisma Browser: Access and Data Rule Bypass (CVSS 5.8, Palo Alto Networks Prisma Browser)
- [CVE-2026-42585](https://cve.now/CVE-2026-42585.md): Netty: HTTP Request Smuggling due to malformed Transfer-Encoding (CVSS 6.5, netty · io.netty netty-codec-http +1)
- [CVE-2026-42584](https://cve.now/CVE-2026-42584.md): Netty: HttpClientCodec response desynchronization (CVSS 7.3, netty · io.netty netty-codec-http +1)
- [CVE-2026-42583](https://cve.now/CVE-2026-42583.md): Netty: Lz4FrameDecoder resource exhaustion (CVSS 7.5, netty · io.netty netty-codec +3)
- [CVE-2026-0258](https://cve.now/CVE-2026-0258.md): PAN-OS: Server-Side Request Forgery (SSRF) in IKEv2 Certificate URL Fetching (CVSS 4.8, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-42582](https://cve.now/CVE-2026-42582.md): Netty: HTTP/3 QPACK literal unbounded allocation (CVSS 7.5, netty · io.netty netty-codec-http3 +1)
- [CVE-2026-0259](https://cve.now/CVE-2026-0259.md): WildFire WF-500 and WF-500-B: Arbitrary File Read and Delete Vulnerability in WildFire Appliance (WF-500, WF-500-B) (CVSS 5.0, Palo Alto Networks WildFire WF-500 and WF-500-B)
- [CVE-2026-42580](https://cve.now/CVE-2026-42580.md): Netty: HTTP Request Smuggling due to incorrect chunk size parsing (CVSS 6.5, netty · io.netty netty-codec-http +1)
- [CVE-2026-30906](https://cve.now/CVE-2026-30906.md): Untrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may allow an authenticated user to enable an escalati (CVSS 7.8, Zoom Communications Zoom Rooms)
- [CVE-2026-8496](https://cve.now/CVE-2026-8496.md): A cross-site scripting (XSS) vulnerability in Alinto SOGo, version 5.12.7 (CVSS 6.1, Alinto SOGo SOGo)
- [CVE-2026-42579](https://cve.now/CVE-2026-42579.md): Netty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder) (CVSS 7.5, netty · io.netty:netty-codec-dns)
- [CVE-2026-42577](https://cve.now/CVE-2026-42577.md): Netty: epoll transport denial of service via RST on half-closed TCP connection (CVSS 7.5, netty · io.netty:netty-transport-classes-epoll)
- [CVE-2026-30905](https://cve.now/CVE-2026-30905.md): External Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal Installer before version 6.6.11 may allow an authen (CVSS 7.8, Zoom Communications Zoom Workplace VDI Plugin)
- [CVE-2026-0261](https://cve.now/CVE-2026-0261.md): PAN-OS: Authenticated Admin Command Injection Vulnerability (CVSS 6.1, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-42578](https://cve.now/CVE-2026-42578.md): Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation (CVSS 2.9, netty · io.netty:netty-handler-proxy)
- [CVE-2026-0236](https://cve.now/CVE-2026-0236.md): Prisma Browser: Code Injection Enables Security Controls Bypass (CVSS 7.3, Palo Alto Networks Prisma Browser)
- [CVE-2026-42581](https://cve.now/CVE-2026-42581.md): Netty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization (CVSS 5.8, netty · io.netty:netty-codec-http)
- [CVE-2026-30904](https://cve.now/CVE-2026-30904.md): Protection Mechanism Failure in Zoom Workplace for iOS before version 7.0.0 may allow an authenticated user to conduct a disclosure of infor (CVSS 1.8, Zoom Communications Zoom Workplace)
- [CVE-2026-0262](https://cve.now/CVE-2026-0262.md): PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing (CVSS 6.6, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0237](https://cve.now/CVE-2026-0237.md): Prisma Browser: Improperly Restricted Automation Bridge Allows Security Bypass (CVSS 7.3, Palo Alto Networks Prisma Browser)
- [CVE-2026-0263](https://cve.now/CVE-2026-0263.md): PAN-OS: Remote Code Execution (RCE) in IKEv2 Processing (CVSS 7.2, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-44005](https://cve.now/CVE-2026-44005.md): vm2: Sandbox escape (CVSS 10.0, patriksimek vm2 · vm2)
- [CVE-2026-0264](https://cve.now/CVE-2026-0264.md): PAN-OS: Heap-Based Buffer Overflow in DNS Proxy and DNS Server Allows Unauthenticated Remote Code Execution (CVSS 7.2, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-45411](https://cve.now/CVE-2026-45411.md): vm2: Sandbox Breakout Using Async Generator (CVSS 9.8, patriksimek vm2 · vm2)
- [CVE-2026-0265](https://cve.now/CVE-2026-0265.md): PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled (CVSS 7.2, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-44009](https://cve.now/CVE-2026-44009.md): vm2: Sandbox Breakout Through Null Proto Exception (CVSS 9.8, patriksimek vm2 · vm2)
- [CVE-2026-44008](https://cve.now/CVE-2026-44008.md): vm2: Snabox breakout via \`neutralizeArraySpeciesBatch\` (CVSS 9.8, patriksimek vm2 · vm2)
- [CVE-2026-44007](https://cve.now/CVE-2026-44007.md): vm2: nesting: true bypasses require: false, allowing sandbox escape to arbitrary OS command execution (CVSS 9.1, patriksimek vm2 · vm2)
- [CVE-2026-44006](https://cve.now/CVE-2026-44006.md): vm2: Sandbox Escape (CVSS 10.0, patriksimek vm2 · vm2)
- [CVE-2026-44004](https://cve.now/CVE-2026-44004.md): vm2: Host Process OOM DoS via Buffer.alloc (Timeout Bypass) (CVSS 7.5, patriksimek vm2 · vm2)
- [CVE-2026-44003](https://cve.now/CVE-2026-44003.md): vm2: Transformer Fast-Path Bypass Exposes Internal State Variable (CVSS 5.3, patriksimek vm2 · vm2)
- [CVE-2026-44002](https://cve.now/CVE-2026-44002.md): vm2: Host File Path Disclosure via Stack Trace Information Leak (CVSS 5.8, patriksimek vm2 · vm2)
- [CVE-2026-44001](https://cve.now/CVE-2026-44001.md): vm2: Sandbox Escape via Promise Constructor Unhandled Rejection (Process Crash DoS) (CVSS 8.6, patriksimek vm2 · vm2)
- [CVE-2026-44000](https://cve.now/CVE-2026-44000.md): vm2: sandbox boundary bypass via host Promise resolution preserving host object identity (CVSS 6.5, patriksimek vm2 · vm2)
- [CVE-2026-43999](https://cve.now/CVE-2026-43999.md): vm2: NodeVM builtin allowlist bypass via \`module\` builtin's \`Module.\_load\` allows sandbox escape (CVSS 9.9, patriksimek vm2 · vm2)
- [CVE-2026-43998](https://cve.now/CVE-2026-43998.md): vm2: NodeVM require.root bypass via symlink traversal allows sandbox escape (CVSS 8.5, patriksimek vm2 · vm2)
- [CVE-2026-43997](https://cve.now/CVE-2026-43997.md): vm2: Sandbox Escape (CVSS 10.0, patriksimek vm2 · vm2)
- [CVE-2026-45109](https://cve.now/CVE-2026-45109.md): Next.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routes (CVSS 7.5, vercel next.js · next)
- [CVE-2026-44582](https://cve.now/CVE-2026-44582.md): Next.js: Cache poisoning via collisions in React Server Component cache-busting (CVSS 3.7, vercel next.js · next)
- [CVE-2026-44581](https://cve.now/CVE-2026-44581.md): Next.js: Cross-site scripting in App Router applications using CSP nonces (CVSS 4.7, vercel next.js · next)
- [CVE-2026-44580](https://cve.now/CVE-2026-44580.md): Next.js: Cross-site scripting in beforeInteractive scripts with untrusted input (CVSS 6.1, vercel next.js · next)
- [CVE-2026-44579](https://cve.now/CVE-2026-44579.md): Next.js: Denial of Service via connection exhaustion in applications using Cache Components (CVSS 7.5, vercel next.js · next)
- [CVE-2026-44578](https://cve.now/CVE-2026-44578.md): Next.js: Server-side request forgery in applications using WebSocket upgrades (CVSS 8.6, vercel next.js · next)
- [CVE-2026-44577](https://cve.now/CVE-2026-44577.md): Next.js: Denial of Service in the Image Optimization API (CVSS 5.9, vercel next.js · next)
- [CVE-2026-44576](https://cve.now/CVE-2026-44576.md): Next.js: Cache poisoning in React Server Component responses (CVSS 5.4, vercel next.js · next)
- [CVE-2026-44574](https://cve.now/CVE-2026-44574.md): Next.js: Middleware / Proxy bypass through dynamic route parameter injection (CVSS 8.1, vercel next.js · next)
- [CVE-2026-44575](https://cve.now/CVE-2026-44575.md): Next.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routes (CVSS 7.5, vercel next.js · next)
- [CVE-2026-44573](https://cve.now/CVE-2026-44573.md): Next.js: Middleware / Proxy bypass in Pages Router applications using i18n (CVSS 7.5, vercel next.js · next)
- [CVE-2026-2695](https://cve.now/CVE-2026-2695.md): Lack of Server-side validation in Instruction Input in TeamViewer DEX Platform (On-Premises) (CVSS 6.3, TeamViewer DEX)
- [CVE-2026-44572](https://cve.now/CVE-2026-44572.md): Next.js: Middleware / Proxy redirects can be cache-poisoned (CVSS 3.7, vercel next.js · next)
- [CVE-2025-32425](https://cve.now/CVE-2025-32425.md): AutoGPT has missing Docker log rotation on platform containers that allows host disk-exhaustion DoS (CVSS 5.1, Significant-Gravitas AutoGPT)
- [CVE-2026-45028](https://cve.now/CVE-2026-45028.md): Astro: Server island encrypted parameters vulnerable to cross-component replay (CVSS 2.9, withastro astro · astro)
- [CVE-2026-45033](https://cve.now/CVE-2026-45033.md): GitHub Copilot CLI: Nested Bare Repository Can Execute Arbitrary Commands via core.fsmonitor (CVSS 8.5, github copilot-cli · @github/copilot)
- [CVE-2026-44470](https://cve.now/CVE-2026-44470.md): Claude Desktop: Local Privilege Escalation via Directory Junction in CoworkVMService (CVSS 8.5, anthropics claude-code)
- [CVE-2026-44467](https://cve.now/CVE-2026-44467.md): Claude Desktop: SSH Host Key Verification Bypass Allows Man-in-the-Middle Attack on Remote Sessions (CVSS 7.4, anthropics claude-code)
- [CVE-2026-44479](https://cve.now/CVE-2026-44479.md): Vercel: Non-interactive mode includes CLI arguments in suggested command output (CVSS 5.5, vercel)
- [CVE-2026-44664](https://cve.now/CVE-2026-44664.md): fast-xml-builder: Comment Value bypass regex (CVSS 6.1, NaturalIntelligence fast-xml-builder · fast-xml-builder)
- [CVE-2026-44665](https://cve.now/CVE-2026-44665.md): fast-xml-builder: Attribute values with unwanted quotes can bypass malicious or unwanted attributes (CVSS 6.1, NaturalIntelligence fast-xml-builder · fast-xml-builder)
- [CVE-2026-44431](https://cve.now/CVE-2026-44431.md): urllib3: Sensitive headers forwarded across origins in proxied low-level redirects (CVSS 8.2, urllib3)
- [CVE-2026-44432](https://cve.now/CVE-2026-44432.md): urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API (CVSS 8.9, urllib3)
- [CVE-2026-42266](https://cve.now/CVE-2026-42266.md): JupyterLab has an Extension Manager API/GUI Policy Discrepancy allowing 3rd party (malicious) extensions install via POST request. (CVSS 8.8, jupyterlab)
- [CVE-2026-43489](https://cve.now/CVE-2026-43489.md): liveupdate: luo\_file: remember retrieve() status (no CVSS, Linux)
- [CVE-2026-43488](https://cve.now/CVE-2026-43488.md): usb: xhci: Prevent interrupt storm on host controller error (HCE) (no CVSS, Linux)
- [CVE-2026-43487](https://cve.now/CVE-2026-43487.md): ata: libata-core: Disable LPM on ST1000DM010-2EP102 (no CVSS, Linux)
- [CVE-2026-43486](https://cve.now/CVE-2026-43486.md): arm64: contpte: fix set\_access\_flags() no-op check for SMMU/ATS faults (no CVSS, Linux)
- [CVE-2026-43485](https://cve.now/CVE-2026-43485.md): nouveau/gsp: drop WARN\_ON in ACPI probes (no CVSS, Linux)
- [CVE-2026-43484](https://cve.now/CVE-2026-43484.md): mmc: core: Avoid bitfield RMW for claim/retune flags (no CVSS, Linux)
- [CVE-2026-43483](https://cve.now/CVE-2026-43483.md): KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (no CVSS, Linux)
- [CVE-2026-43482](https://cve.now/CVE-2026-43482.md): sched\_ext: Disable preemption between scx\_claim\_exit() and kicking helper work (no CVSS, Linux)
- [CVE-2026-43481](https://cve.now/CVE-2026-43481.md): net-shapers: don't free reply skb after genlmsg\_reply() (CVSS 7.8, Linux)
- [CVE-2026-43480](https://cve.now/CVE-2026-43480.md): ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition (no CVSS, Linux)
- [CVE-2026-43479](https://cve.now/CVE-2026-43479.md): net: usb: lan78xx: fix WARN in \_\_netif\_napi\_del\_locked on disconnect (no CVSS, Linux)
- [CVE-2026-43478](https://cve.now/CVE-2026-43478.md): ASoC: codecs: rt1011: Use component to get the dapm context in spk\_mode\_put (no CVSS, Linux)
- [CVE-2026-43477](https://cve.now/CVE-2026-43477.md): drm/i915/vrr: Configure VRR timings after enabling TRANS\_DDI\_FUNC\_CTL (no CVSS, Linux)
- [CVE-2026-43476](https://cve.now/CVE-2026-43476.md): iio: chemical: sps30\_i2c: fix buffer size in sps30\_i2c\_read\_meas() (CVSS 7.8, Linux)
- [CVE-2026-42557](https://cve.now/CVE-2026-42557.md): jupyterlab: Command linker attributes in HTML enable one-click command execution from untrusted content (CVSS 8.6, jupyterlab · jupyter notebook +1)
- [CVE-2026-44459](https://cve.now/CVE-2026-44459.md): Hono: Improper validation of NumericDate claims (exp, nbf, iat) in JWT verify() (CVSS 3.8, honojs hono · hono)
- [CVE-2026-44458](https://cve.now/CVE-2026-44458.md): Hono: CSS Declaration Injection via Style Object Values in JSX SSR (CVSS 4.3, honojs hono · hono)
- [CVE-2026-44457](https://cve.now/CVE-2026-44457.md): Hono: Cache Middleware ignores Vary: Authorization / Vary: Cookie leading to cross-user cache leakage (CVSS 5.3, honojs hono · hono)
- [CVE-2026-44456](https://cve.now/CVE-2026-44456.md): Hono: bodyLimit() can be bypassed for chunked / unknown-length requests (CVSS 6.5, honojs hono · hono)
- [CVE-2026-44455](https://cve.now/CVE-2026-44455.md): Hono: Unvalidated JSX Tag Names in hono/jsx May Allow HTML Injection (CVSS 4.7, honojs hono · hono)
- [CVE-2026-8367](https://cve.now/CVE-2026-8367.md): aria2c Improper Certificate Validation (CVSS 4.8, aria2\_project aria2c)
- [CVE-2026-44295](https://cve.now/CVE-2026-44295.md): protobufjs-cli: Code injection in pbjs static output from crafted schema names (CVSS 8.7, protobufjs protobuf.js · protobufjs-cli)
- [CVE-2026-42290](https://cve.now/CVE-2026-42290.md): protobufjs-cli: OS Command Injection (CVSS 7.8, protobufjs protobuf.js · protobufjs-cli)
- [CVE-2026-45740](https://cve.now/CVE-2026-45740.md): protobufjs: Denial of Service via unbounded recursive JSON descriptor expansion (CVSS 5.3, protobufjs protobuf.js · protobufjs)
- [CVE-2026-44294](https://cve.now/CVE-2026-44294.md): protobufjs: Denial of service from crafted field names in generated code (CVSS 5.3, protobufjs protobuf.js · protobufjs)
- [CVE-2026-44293](https://cve.now/CVE-2026-44293.md): protobufjs: Code injection through bytes field defaults in generated toObject code (CVSS 7.7, protobufjs protobuf.js · protobufjs)
- [CVE-2026-44292](https://cve.now/CVE-2026-44292.md): protobufjs: Prototype injection in generated message constructors (CVSS 5.3, protobufjs protobuf.js · protobufjs)
- [CVE-2026-44291](https://cve.now/CVE-2026-44291.md): protobufjs: Code generation gadget after prototype pollution (CVSS 8.1, protobufjs protobuf.js · protobufjs)
- [CVE-2026-44290](https://cve.now/CVE-2026-44290.md): protobufjs: Process-wide denial of service through unsafe option paths (CVSS 7.5, protobufjs protobuf.js · protobufjs)
- [CVE-2026-44289](https://cve.now/CVE-2026-44289.md): protobufjs: Denial of service through unbounded protobuf recursion (CVSS 7.5, protobufjs protobuf.js · protobufjs)
- [CVE-2026-44288](https://cve.now/CVE-2026-44288.md): protobufjs: Overlong UTF-8 decoding (CVSS 5.3, protobufjs protobuf.js · protobufjs +1)
- [CVE-2020-37226](https://cve.now/CVE-2020-37226.md): Joomla J2 JOBS 1.3.0 Authenticated SQL Injection via sortby (CVSS 7.1, Joomsky J2 JOBS)
- [CVE-2020-37225](https://cve.now/CVE-2020-37225.md): Powie's WHOIS Domain Check 0.9.31 Persistent Cross-Site Scripting (CVSS 5.1, Powie WHOIS Domain Check)
- [CVE-2020-37224](https://cve.now/CVE-2020-37224.md): Joomla J2 JOBS 1.3.0 Authenticated SQL Injection via sortby (CVSS 7.1, Joomsky J2 JOBS)
- [CVE-2020-37223](https://cve.now/CVE-2020-37223.md): IObit Uninstaller 9.5.0.15 Unquoted Service Path Privilege Escalation (CVSS 8.5, IObit Uninstaller)
- [CVE-2020-37222](https://cve.now/CVE-2020-37222.md): Kuicms Php EE 2.0 Persistent Cross-Site Scripting via bbs reply (CVSS 5.1, Kuicms Php EE)
- [CVE-2020-37221](https://cve.now/CVE-2020-37221.md): Atomic Alarm Clock 6.3 Stack Overflow via SEH Unicode (CVSS 8.6, Drive-software Atomic Alarm Clock)
- [CVE-2020-37220](https://cve.now/CVE-2020-37220.md): Huawei HG630 V2 Router Authentication Bypass via Serial Number (CVSS 8.7, www.huawei.com HG630 V2 Router)
- [CVE-2020-37219](https://cve.now/CVE-2020-37219.md): Joomla com\_fabrik 3.9.11 Directory Traversal via image.php (CVSS 8.7, Fabrikar com\_fabrik)
- [CVE-2020-37218](https://cve.now/CVE-2020-37218.md): Joomla com\_hdwplayer 4.2 SQL Injection via search.php (CVSS 8.8, com\_hdwplayer)
- [CVE-2020-37217](https://cve.now/CVE-2020-37217.md): Easy2Pilot 7 Cross-Site Request Forgery via admin.php (CVSS 5.1, Easy2Pilot)
- [CVE-2020-37174](https://cve.now/CVE-2020-37174.md): WOOF / Products Filter Professional for WooCommerce 1.2.3 Persistent XSS (CVSS 4.8, HUSKY Products Filter Professional for WooCommerce)
- [CVE-2020-37169](https://cve.now/CVE-2020-37169.md): WordPress Plugin ultimate-member 2.1.3 Local File Inclusion (CVSS 6.8, Ultimate Member ultimate-member)
- [CVE-2020-37168](https://cve.now/CVE-2020-37168.md): Ecommerce Systempay 1.0 Production Key Brute Force (CVSS 9.3, Paiement Ecommerce Systempay)
- [CVE-2026-6282](https://cve.now/CVE-2026-6282.md): A potential improper file path validation vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote (CVSS 8.6, Lenovo Personal Cloud T2s · Lenovo Personal Cloud T2Pro +8)
- [CVE-2026-6281](https://cve.now/CVE-2026-6281.md): A potential vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote authenticated user on the loc (CVSS 8.7, Lenovo Personal Cloud T2s · Lenovo Personal Cloud T2Pro +8)
- [CVE-2026-42926](https://cve.now/CVE-2026-42926.md): NGINX ngx\_http\_proxy\_v2\_module vulnerability (CVSS 5.8, F5 NGINX Open Source)
- [CVE-2026-40460](https://cve.now/CVE-2026-40460.md): NGINX ngx\_quic\_module vulnerability (CVSS 6.5, F5 NGINX Plus · F5 NGINX Open Source)
- [CVE-2026-42946](https://cve.now/CVE-2026-42946.md): NGINX ngx\_http\_scgi\_module and ngx\_http\_uwsgi\_module vulnerability (CVSS 6.5, F5 NGINX Plus · F5 NGINX Open Source)
- [CVE-2026-42934](https://cve.now/CVE-2026-42934.md): NGINX ngx\_http\_charset\_module vulnerability (CVSS 4.8, F5 NGINX Plus · F5 NGINX Open Source)
- [CVE-2026-42945](https://cve.now/CVE-2026-42945.md): NGINX ngx\_http\_rewrite\_module vulnerability (CVSS 8.1, F5 NGINX Plus · F5 NGINX Open Source)
- [CVE-2026-40701](https://cve.now/CVE-2026-40701.md): NGINX ngx\_http\_ssl\_module vulnerability (CVSS 4.8, F5 NGINX Plus · F5 NGINX Open Source)
- [CVE-2026-40423](https://cve.now/CVE-2026-40423.md): BIG-IP SIP profile vulnerability (CVSS 7.5, F5 BIG-IP)
- [CVE-2026-42930](https://cve.now/CVE-2026-42930.md): Appliance mode iControl REST vulnerability (CVSS 8.7, F5 BIG-IP)
- [CVE-2026-24464](https://cve.now/CVE-2026-24464.md): Appliance mode iControl REST vulnerability (CVSS 6.8, F5 BIG-IP)
- [CVE-2026-39458](https://cve.now/CVE-2026-39458.md): BIG-IP DNS Cache vulnerability (CVSS 7.5, F5 BIG-IP)
- [CVE-2026-41959](https://cve.now/CVE-2026-41959.md): iControl and tmsh REST vulnerability (CVSS 6.5, F5 BIG-IP · F5 BIG-IQ)
- [CVE-2026-42406](https://cve.now/CVE-2026-42406.md): BIG-IP and BIG-IQ privilege escalation vulnerability (CVSS 8.7, F5 BIG-IP · F5 BIG-IQ)
- [CVE-2026-42058](https://cve.now/CVE-2026-42058.md): BIG-IP iControl REST vulnerability (CVSS 4.3, F5 BIG-IP)
- [CVE-2026-32643](https://cve.now/CVE-2026-32643.md): BIG-IP and BIG-IQ privilege escalation vulnerability (CVSS 8.7, F5 BIG-IP · F5 BIG-IQ)
- [CVE-2026-42937](https://cve.now/CVE-2026-42937.md): iControl REST and tmsh vulnerability (CVSS 6.5, F5 BIG-IP · F5 BIG-IQ)
- [CVE-2026-39455](https://cve.now/CVE-2026-39455.md): BIG-IP Configuration utility vulnerability (CVSS 7.5, F5 BIG-IP)
- [CVE-2026-32673](https://cve.now/CVE-2026-32673.md): BIG-IP scripted monitor vulnerability (CVSS 6.5, F5 BIG-IP)
- [CVE-2026-41217](https://cve.now/CVE-2026-41217.md): BIG-IP tmsh vulnerability (CVSS 6.0, F5 BIG-IP)
- [CVE-2026-34176](https://cve.now/CVE-2026-34176.md): Knowledge Appliance mode iControl REST vulnerability (CVSS 8.7, F5 BIG-IP)
- [CVE-2026-42063](https://cve.now/CVE-2026-42063.md): iControl SOAP vulnerability (CVSS 4.9, F5 BIG-IP)
- [CVE-2026-41225](https://cve.now/CVE-2026-41225.md): iControl REST vulnerability (CVSS 7.2, F5 BIG-IP)
- [CVE-2026-39459](https://cve.now/CVE-2026-39459.md): iControl REST and tmsh vulnerability (CVSS 7.2, F5 BIG-IP)
- [CVE-2026-41953](https://cve.now/CVE-2026-41953.md): BIG-IP Privilege Escalation vulnerability (CVSS 8.7, F5 BIG-IP)
- [CVE-2026-40631](https://cve.now/CVE-2026-40631.md): BIG-IP iControl SOAP vulnerability (CVSS 8.7, F5 BIG-IP)
- [CVE-2026-40698](https://cve.now/CVE-2026-40698.md): iControl REST and TMSH vulnerability (CVSS 8.7, F5 BIG-IP · F5 BIG-IQ)
- [CVE-2026-42924](https://cve.now/CVE-2026-42924.md): BIG-IP iControl SOAP vulnerability (CVSS 8.7, F5 BIG-IP)
- [CVE-2026-40060](https://cve.now/CVE-2026-40060.md): BIG-IP Advanced WAF and ASM vulnerability (CVSS 7.5, F5 BIG-IP)
- [CVE-2026-42409](https://cve.now/CVE-2026-42409.md): BIG-IP HTTP/2 vulnerability (CVSS 7.5, F5 BIG-IP)
- [CVE-2026-41227](https://cve.now/CVE-2026-41227.md): BIG-IP HTTP/2 Layer 7 Dos Protection vulnerability (CVSS 7.5, F5 BIG-IP)
- [CVE-2026-40061](https://cve.now/CVE-2026-40061.md): iControl REST and tmsh vulnerability (CVSS 6.5, F5 BIG-IP)
- [CVE-2026-35062](https://cve.now/CVE-2026-35062.md): iControl SOAP vulnerability (CVSS 6.5, F5 BIG-IP)
- [CVE-2026-40618](https://cve.now/CVE-2026-40618.md): BIG-IP SSL/TLS vulnerability (CVSS 7.5, F5 BIG-IP)
- [CVE-2026-41956](https://cve.now/CVE-2026-41956.md): BIG-IP TMM Vulnerability (CVSS 7.5, F5 BIG-IP)
- [CVE-2026-42920](https://cve.now/CVE-2026-42920.md): BIG-IP DTLS Vulnerability (CVSS 7.5, F5 BIG-IP)
- [CVE-2026-40629](https://cve.now/CVE-2026-40629.md): BIG-IP SSL/TLS vulnerability (CVSS 7.5, F5 BIG-IP)
- [CVE-2026-42919](https://cve.now/CVE-2026-42919.md): F5 BIG-IP Appliance Mode Vulnerability (CVSS 6.7, F5 BIG-IP)
- [CVE-2026-41218](https://cve.now/CVE-2026-41218.md): BIG-IP PEM iRules vulnerability (CVSS 7.5, F5 BIG-IP)
- [CVE-2026-42781](https://cve.now/CVE-2026-42781.md): BIG-IP FastL4 virtual server vulnerability (CVSS 6.5, F5 BIG-IP)
- [CVE-2026-20916](https://cve.now/CVE-2026-20916.md): BIG-IQ iControl REST vulnerability (CVSS 8.1, F5 BIG-IQ)
- [CVE-2026-41957](https://cve.now/CVE-2026-41957.md): BIG-IP and BIG-IQ Configuration utility vulnerability (CVSS 8.8, F5 BIG-IP · F5 BIG-IQ)
- [CVE-2026-42408](https://cve.now/CVE-2026-42408.md): BIG-IP DNS tmsh vulnerability (CVSS 4.4, F5 BIG-IP)
- [CVE-2026-40067](https://cve.now/CVE-2026-40067.md): BIG-IP APM Vulnerability (CVSS 7.5, F5 BIG-IP)
- [CVE-2026-40699](https://cve.now/CVE-2026-40699.md): BIG-IP Configuration utility vulnerability (CVSS 6.5, F5 BIG-IP)
- [CVE-2026-34019](https://cve.now/CVE-2026-34019.md): BIG-IP BFD vulnerability (CVSS 6.3, F5 BIG-IP)
- [CVE-2026-42780](https://cve.now/CVE-2026-42780.md): BIG-IP SSL Orchestrator vulnerability (CVSS 4.9, F5 BIG-IP · F5 SSL Orchestrator)
- [CVE-2026-41219](https://cve.now/CVE-2026-41219.md): BIG-IP QKView vulnerability (CVSS 6.5, F5 BIG-IP · F5 BIG-IQ)
- [CVE-2026-40462](https://cve.now/CVE-2026-40462.md): iControl REST and tmsh vulnerability (CVSS 6.5, F5 BIG-IP)
- [CVE-2026-28758](https://cve.now/CVE-2026-28758.md): BIG-IP iControl REST vulnerability (CVSS 4.4, F5 BIG-IP)
- [CVE-2026-41954](https://cve.now/CVE-2026-41954.md): iControl REST and tmsh vulnerability (CVSS 4.9, F5 BIG-IP · F5 BIG-IQ)
- [CVE-2026-40435](https://cve.now/CVE-2026-40435.md): BIG-IP httpd access control vulnerability (CVSS 5.3, F5 BIG-IP)
- [CVE-2026-40703](https://cve.now/CVE-2026-40703.md): BIG-IP Configuration utility CSRF vulnerability (CVSS 5.4, F5 BIG-IP)
- [CVE-2026-39806](https://cve.now/CVE-2026-39806.md): HTTP/1 chunked decoder infinite loop on requests with trailer fields in bandit (CVSS 8.7, mtrudel bandit)
- [CVE-2026-39803](https://cve.now/CVE-2026-39803.md): HTTP/1 chunked body reader ignores length cap in bandit (CVSS 8.7, mtrudel bandit)
- [CVE-2026-8369](https://cve.now/CVE-2026-8369.md): Improper Input Validation in OpenThread NAT64 Translator (CVSS 6.0, The OpenThread Authors OpenThread)
- [CVE-2026-4609](https://cve.now/CVE-2026-4609.md): ProfileGrid \<= 5.9.8.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Group Joining (CVSS 7.1, metagauss ProfileGrid – User Profiles, Groups and Communiti…)
- [CVE-2026-4607](https://cve.now/CVE-2026-4607.md): ProfileGrid \<= 5.9.8.4 - Missing Authorization to Authenticated (Subscriber+) Group Settings Modification (CVSS 4.3, metagauss ProfileGrid – User Profiles, Groups and Communiti…)
- [CVE-2026-4608](https://cve.now/CVE-2026-4608.md): ProfileGrid \<= 5.9.8.4 - Authenticated (Subscriber+) SQL Injection via 'rid' Parameter (CVSS 6.5, metagauss ProfileGrid – User Profiles, Groups and Communiti…)
- [CVE-2026-8463](https://cve.now/CVE-2026-8463.md): Crypt::Argon2 versions from 0.017 before 0.031 for Perl perform a heap out-of-bounds read in argon2\_verify on empty encoded input (CVSS 5.3, LEONT Crypt::Argon2)
- [CVE-2026-6177](https://cve.now/CVE-2026-6177.md): Custom Twitter Feeds \<= 2.5.4 - Unauthenticated Stored Cross-Site Scripting via Cached Tweet Text (CVSS 7.2, smub Custom Twitter Feeds – A Tweets Widget or X Feed Widget)
- [CVE-2026-3426](https://cve.now/CVE-2026-3426.md): RTMKit Addons for Elementor \<= 2.0.2 - Authenticated (Author+) Missing Authorization to Widget Configuration Modification (CVSS 4.3, rometheme RTMKit)
- [CVE-2026-3425](https://cve.now/CVE-2026-3425.md): RTMKit Addons for Elementor \<= 2.0.2 - Authenticated (Author+) Local File Inclusion via 'path' (CVSS 8.8, rometheme RTMKit)
- [CVE-2026-42961](https://cve.now/CVE-2026-42961.md): ELECOM wireless LAN access point devices implement CSRF protection mechanism, but with inadequate handling of CSRF tokens. (CVSS 4.3, ELECOM CO. WAB-BE187-M · ELECOM CO. WAB-BE72-M +2)
- [CVE-2026-42950](https://cve.now/CVE-2026-42950.md): ELECOM wireless LAN access point devices do not check if language parameter has an appropriate value. (CVSS 4.3, ELECOM CO. WAB-BE187-M · ELECOM CO. WAB-BE72-M +2)
- [CVE-2026-42948](https://cve.now/CVE-2026-42948.md): Stored cross-site scripting vulnerability exists in ELECOM wireless LAN access point devices. (CVSS 4.8, ELECOM CO. WAB-BE187-M · ELECOM CO. WAB-BE72-M +2)
- [CVE-2026-42062](https://cve.now/CVE-2026-42062.md): ELECOM wireless LAN access point devices contain an OS command injection in processing of username parameter. (CVSS 9.8, ELECOM CO. WRC-BE72XSD-B · ELECOM CO. WRC-BE72XSD-BA +2)
- [CVE-2026-40621](https://cve.now/CVE-2026-40621.md): ELECOM wireless LAN access point devices do not require authentication to access some specific URLs. (CVSS 9.8, ELECOM CO. WRC-BE72XSD-B · ELECOM CO. WRC-BE72XSD-BA +2)
- [CVE-2026-35506](https://cve.now/CVE-2026-35506.md): ELECOM wireless LAN access point devices contain an OS command injection vulnerability in processing of ping\_ip\_addr parameter. (CVSS 7.2, ELECOM CO. WRC-BE72XSD-B · ELECOM CO. WRC-BE72XSD-BA +2)
- [CVE-2026-25107](https://cve.now/CVE-2026-25107.md): ELECOM wireless LAN access point devices use a hard-coded cryptographic key when creating backups of configuration files. (CVSS 6.5, ELECOM CO. WRC-X1800GS-B · ELECOM CO. WRC-X3000GS2-B +11)
- [CVE-2026-4782](https://cve.now/CVE-2026-4782.md): Avada Builder \<= 3.15.2 - Authenticated (Subscriber+) Arbitrary File Read via 'custom\_svg' Shortcode Parameter (CVSS 6.5, themefusion Avada (Fusion) Builder)
- [CVE-2026-4798](https://cve.now/CVE-2026-4798.md): Avada Builder \<= 3.15.1 - Unauthenticated SQL Injection via 'product\_order' Parameter (CVSS 7.5, themefusion Avada (Fusion) Builder)
- [CVE-2026-25710](https://cve.now/CVE-2026-25710.md): The new upstream added a privileged D-Bus helper called plasmaloginauthhelper, which suffers from multiple issues, e.g.aA compromised plasma (CVSS 7.0, KDE plasma-login-manager)
- [CVE-2026-41051](https://cve.now/CVE-2026-41051.md): csync2 uses insecure temporary directories when compiled with C99 or later (CVSS 5.1, openSUSE Tumbleweed)
- [CVE-2024-47091](https://cve.now/CVE-2024-47091.md): Privilege escalation via mk\_mysql agent plugin on Windows (CVSS 5.2, Checkmk)
- [CVE-2026-44931](https://cve.now/CVE-2026-44931.md): malcontent: Disk Space Exhaustion via Globally Accessible D-Bus API (CVSS 5.1, gnome malcontent)
- [CVE-2026-7168](https://cve.now/CVE-2026-7168.md): cross-proxy Digest auth state leak (CVSS 5.3, curl)
- [CVE-2026-7009](https://cve.now/CVE-2026-7009.md): OCSP stapling bypass with Apple SecTrust (CVSS 5.3, curl)
- [CVE-2026-6429](https://cve.now/CVE-2026-6429.md): netrc credential leak with reused proxy connection (CVSS 5.3, curl)
- [CVE-2026-6276](https://cve.now/CVE-2026-6276.md): stale custom cookie host causes cookie leak (CVSS 7.5, curl)
- [CVE-2026-6253](https://cve.now/CVE-2026-6253.md): proxy credentials leak over redirect-to proxy (CVSS 5.9, curl)
- [CVE-2026-5773](https://cve.now/CVE-2026-5773.md): wrong reuse of SMB connection (CVSS 7.5, curl)
- [CVE-2026-5545](https://cve.now/CVE-2026-5545.md): wrong reuse of HTTP Negotiate connection (CVSS 6.5, curl)
- [CVE-2026-4873](https://cve.now/CVE-2026-4873.md): connection reuse ignores TLS requirement (CVSS 5.9, curl)
- [CVE-2026-2515](https://cve.now/CVE-2026-2515.md): Hostinger Reach \<= 1.3.8 - Missing Authorization to Authenticated (Subscriber+) Integration API Key Update (CVSS 5.3, Hostinger Reach – AI-Powered Email Marketing for WordPress)
- [CVE-2026-41050](https://cve.now/CVE-2026-41050.md): Helm impersonation bypass of \`RESTClientGetter\` retains \`cluster-admin\` during template rendering (CVSS 9.9, SUSE Rancher · github.com/rancher/fleet)
- [CVE-2026-25705](https://cve.now/CVE-2026-25705.md): Rancher Extensions have arbitrary file access via path traversal (CVSS 8.4, SUSE rancher · github.com/rancher/rancher)
- [CVE-2026-3004](https://cve.now/CVE-2026-3004.md): Snow Monkey Blocks \<= 24.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-slick' Attribute (CVSS 6.4, inc2734 Snow Monkey Blocks)
- [CVE-2025-14767](https://cve.now/CVE-2025-14767.md): WPC Badge Management for WooCommerce \<= 3.1.6 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'text' Attribute (CVSS 5.5, wpclever WPC Badge Management for WooCommerce)
- [CVE-2026-44612](https://cve.now/CVE-2026-44612.md): Bytello Share (Windows Edition) installer executable provided by Bytello insecurely loads Dynamic Link Libraries. (CVSS 7.8, Bytello Share (Windows Edition) installer executable)
- [CVE-2025-11159](https://cve.now/CVE-2025-11159.md): Hitachi Vantara Pentaho Data Integration & Analytics - Dependency on Vulnerable Third-Party Component (CVSS 9.1, Hitachi Vantara Pentaho Data Integration and Analytics)
- [CVE-2026-2725](https://cve.now/CVE-2026-2725.md): Improper Authorization in Gerrit allowing Code Review Bypass via "Submitted Together" (CVSS 6.0, Gerrit)
- [CVE-2026-6965](https://cve.now/CVE-2026-6965.md): Tutor LMS \<= 3.9.9 - Insecure Direct Object Reference to Authenticated (Instructor+) Arbitrary Post Deletion via 'course' GET Parameter (CVSS 5.3, themeum Tutor LMS – eLearning and online course solution)
- [CVE-2025-14033](https://cve.now/CVE-2025-14033.md): ilGhera Support System for WooCommerce \<= 1.3.0 - Missing Authorization to Unauthenticated Sensitive Information Exposure (CVSS 5.3, ghera74 ilGhera Support System for WooCommerce)
- [CVE-2026-6929](https://cve.now/CVE-2026-6929.md): JoomSport \<= 5.7.7 - Unauthenticated SQL Injection via 'sortf' Parameter (CVSS 7.5, beardev JoomSport – for Sports: Team & League, Football, Ho…)
- [CVE-2026-32661](https://cve.now/CVE-2026-32661.md): Stack-based buffer overflow vulnerability exists in GUARDIANWALL MailSuite and GUARDIANWALL Mail Security Cloud (SaaS version). (CVSS 9.8, Canon Marketing Japan GUARDIANWALL MailSuite · Canon Market…)
- [CVE-2026-21024](https://cve.now/CVE-2026-21024.md): Improper privilege management in Samsung System Support Service prior to version 8.0.8.0 allows local attackers to trigger privileged functi (CVSS 6.3, Samsung Mobile Samsung System Support Service)
- [CVE-2026-21022](https://cve.now/CVE-2026-21022.md): Improper handling of insufficient permissions in Routines prior to SMR May-2026 Release 1 allows local attackers to access sensitive informa (CVSS 6.9, Samsung Mobile Devices)
- [CVE-2026-21021](https://cve.now/CVE-2026-21021.md): Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical attackers to launch privileged activity. (CVSS 5.1, Samsung Mobile Devices)
- [CVE-2026-21020](https://cve.now/CVE-2026-21020.md): Improper export of android application components in OmaCP prior to SMR May-2026 Release 1 allows local attackers to trigger privileged func (CVSS 5.1, Samsung Mobile Devices)
- [CVE-2026-21019](https://cve.now/CVE-2026-21019.md): Improper input validation in FacAtFunction in Galaxy Watch prior to SMR May-2026 Release 1 allows local attacker to execute arbitrary code w (CVSS 8.9, Samsung Mobile Devices)
- [CVE-2026-21018](https://cve.now/CVE-2026-21018.md): Out-of-bounds write in SveService prior to SMR May-2026 Release 1 allows local privileged attackers to execute arbitrary code. (CVSS 6.8, Samsung Mobile Devices)
- [CVE-2026-21016](https://cve.now/CVE-2026-21016.md): Incorrect privilege assignment in LocationManager prior to SMR May-2026 Release 1 allows local attackers to access sensitive information. (CVSS 5.1, Samsung Mobile Devices)
- [CVE-2026-21015](https://cve.now/CVE-2026-21015.md): Incorrect default permissions in FactoryCamera prior to SMR May-2026 Release 1 allows local attacker to access unique identifier. (CVSS 6.8, Samsung Mobile Devices)
- [CVE-2025-9989](https://cve.now/CVE-2025-9989.md): Broadstreet \<= 1.53.1 - Authenticated (Admin+) Stored Cross-Site Scripting (CVSS 4.4, broadstreetads Broadstreet)
- [CVE-2026-7051](https://cve.now/CVE-2026-7051.md): Blog2Social: Social Media Auto Post & Scheduler \<= 8.9.0 - Missing Authorization to Authenticated (Subscriber+) Delete Arbitrary B2S Post Records via 'postId' Parameter (CVSS 5.4, pr-gateway Blog2Social: Social Media Auto Post & Scheduler)
- [CVE-2026-6828](https://cve.now/CVE-2026-6828.md): Fluent Forms \<= 6.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'permission\_message' Shortcode Attribute (CVSS 6.4, techjewel Fluent Forms – Customizable Contact Forms, Survey…)
- [CVE-2025-9987](https://cve.now/CVE-2025-9987.md): Broadstreet \<= 1.53.1 - Authenticated (Subscriber+) Information Disclosure (CVSS 5.3, broadstreetads Broadstreet)
- [CVE-2026-6962](https://cve.now/CVE-2026-6962.md): Cost of Goods: Product Cost & Profit Calculator for WooCommerce \<= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, wpcodefactory Cost of Goods: Product Cost & Profit Calculat…)
- [CVE-2026-7619](https://cve.now/CVE-2026-7619.md): Charitable \<= 1.8.10.4 - Authenticated (Custom+) SQL Injection via 's' Search Parameter (CVSS 6.5, smub Charitable – Donation Plugin for WordPress – Fundraisi…)
- [CVE-2026-7635](https://cve.now/CVE-2026-7635.md): coreActivity: Activity Logging for WordPress \<= 3.0 - Unauthenticated PHP Object Injection via 'user\_agent' Log Meta Field (CVSS 8.1, gdragon coreActivity: Activity Logging for WordPress)
- [CVE-2025-9988](https://cve.now/CVE-2025-9988.md): Broadstreet \<= 1.53.1 - Missing Authorization to Authenticated (Subscriber+) Advertiser Creation (CVSS 4.3, broadstreetads Broadstreet)
- [CVE-2025-14755](https://cve.now/CVE-2025-14755.md): Cost Calculator Builder \<= 4.0.1 - Unauthenticated Price Manipulation and Insecure Direct Object Reference (CVSS 5.3, stylemix Cost Calculator Builder)
- [CVE-2026-6888](https://cve.now/CVE-2026-6888.md): SQL Injection Vulnerability (CVSS 7.2, Advantech SaaS Composer · Advantech IoTSuite Growth Linu… +6)
- [CVE-2024-36315](https://cve.now/CVE-2024-36315.md): Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and potentially disclose sens (CVSS 5.7, AMD EPYC™ Series 9004 Processors · AMD EPYC™Series 4004… +12)
- [CVE-2025-61972](https://cve.now/CVE-2025-61972.md): Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System Management Network (SM (CVSS 8.5, AMD EPYC™ 9004 Series Processors · AMD EPYC™ 9005 Series… +5)
- [CVE-2025-61971](https://cve.now/CVE-2025-61971.md): Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing configurations, potentia (CVSS 5.9, AMD EPYC™ 9004 Series Processors · AMD EPYC™ 7003 Series… +7)
- [CVE-2025-62627](https://cve.now/CVE-2025-62627.md): An untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could allow an attacker with an unprivileged VM to read kernel me (CVSS 7.2, ESXi 8.x and ESXi 9.x hosts using AMD-Pensando DPU products)
- [CVE-2025-62624](https://cve.now/CVE-2025-62624.md): A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially (CVSS 8.8, ESXi 8.x and ESXi 9.x hosts using AMD-Pensando DPU products)
- [CVE-2025-62623](https://cve.now/CVE-2025-62623.md): A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially (CVSS 8.8, ESXi 8.x and ESXi 9.x hosts using AMD-Pensando DPU products)
- [CVE-2026-8202](https://cve.now/CVE-2026-8202.md): Post-authentication CPU utilization DoS via $trim/$ltrim/$rtrim operators (CVSS 5.3, MongoDB Server)
- [CVE-2026-8336](https://cve.now/CVE-2026-8336.md): Post-authentication use-after-free error in $\_internalJsEmit and mapreduce commands (CVSS 7.7, MongoDB Server)
- [CVE-2026-8201](https://cve.now/CVE-2026-8201.md): Use-After-Free in MongoDB FLE Query Analysis When Processing Positional Projections on Encrypted Fields (CVSS 6.1, MongoDB Server)
- [CVE-2026-8200](https://cve.now/CVE-2026-8200.md): Schema validation log messages may not redact user data (CVSS 4.8, MongoDB Server)
- [CVE-2026-8199](https://cve.now/CVE-2026-8199.md): Post-auth memory exhaustion via bitwise match expressions (CVSS 7.1, MongoDB Server)
- [CVE-2024-48519](https://cve.now/CVE-2024-48519.md): Buffer Overflow vulnerability in Ardupilot rover commit v.c56439b045162058df0ff136afea3081fcd06d38 allows a local attacker to cause a denial (CVSS 6.2)
- [CVE-2024-51394](https://cve.now/CVE-2024-51394.md): Buffer Overflow vulnerability in Ardupiot Copter Latest commit 92693e023793133e49a035daf37c14433e484778 allows a local attacker to cause a d (CVSS 5.5)
- [CVE-2024-51395](https://cve.now/CVE-2024-51395.md): Buffer Overflow vulnerability in Ardupiot Copter Latest commit 92693e023793133e49a035daf37c14433e484778 allows a local attacker to cause a d (CVSS 6.2)
- [CVE-2024-55045](https://cve.now/CVE-2024-55045.md): Firmament-Autopilot FMT-Firmware commit de5aec was discovered to contain a buffer overflow via the task\_mavobc\_entry function at /comm/task\_ (CVSS 7.3)
- [CVE-2025-27850](https://cve.now/CVE-2025-27850.md): The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a symlink attack. (CVSS 7.5)
- [CVE-2025-27851](https://cve.now/CVE-2025-27851.md): The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a cross-site origin WebSocket hijacking attack. (CVSS 9.3)
- [CVE-2025-27852](https://cve.now/CVE-2025-27852.md): The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a reflected cross site scripting (XSS) attack. (CVSS 5.0)
- [CVE-2025-27853](https://cve.now/CVE-2025-27853.md): The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows its authentication to be bypassed. (CVSS 7.3)
- [CVE-2025-28343](https://cve.now/CVE-2025-28343.md): striso-control-firmware 54c9722 is vulnerable to Buffer Overflow in function ThreadReadButtons. (CVSS 7.5)
- [CVE-2025-28344](https://cve.now/CVE-2025-28344.md): striso-control-firmware 54c9722 is vulnerable to Buffer Overflow in function AuxJack. (CVSS 7.5)
- [CVE-2025-29338](https://cve.now/CVE-2025-29338.md): NXP moal.ko Wi-Fi driver 5.1.7.10 FW version from v17.92.1.p149.43 To v17.92.1.p149.157 was discovered to contain a buffer overflow via the (CVSS 5.6)
- [CVE-2026-31156](https://cve.now/CVE-2026-31156.md): A path injection vulnerability exists in OpenPLC v3 (2c82b0e79c53f8c1f1458eee15fec173400d6e1a) as the binary program compiled from glue\_gene (CVSS 6.5)
- [CVE-2026-36738](https://cve.now/CVE-2026-36738.md): U-SPEED AC1200 Gigabit Wi-Fi Router (Model: T18-21K) V1.0 is vulnerable to Incorrect Access Control. (CVSS 6.8)
- [CVE-2026-36741](https://cve.now/CVE-2026-36741.md): U-SPEED AC1200 Gigabit Wi-Fi Router (Model: T18-21K) V1.0 is vulnerable to Command Injection. (CVSS 7.2)
- [CVE-2026-36742](https://cve.now/CVE-2026-36742.md): Hiseeu C90 v5.7.15 is vulnerable to Insecure Permissions. (CVSS 6.8)
- [CVE-2026-37428](https://cve.now/CVE-2026-37428.md): qihang-wms commit 75c15a was discovered to contain a SQL injection vulnerability via the datascope parameter in the SysDeptMapper.xml file. (CVSS 6.5)
- [CVE-2026-37429](https://cve.now/CVE-2026-37429.md): qihang-wms commit 75c15a was discovered to contain a SQL injection vulnerability via the datascope parameter in the SysUserMapper.xml file. (CVSS 6.5)
- [CVE-2026-37430](https://cve.now/CVE-2026-37430.md): An arbitrary file upload vulnerability in the ShopOrderImportController.java component of qihang-wms commit 75c15a allows attackers to execu (CVSS 7.3)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-05-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.