CVEs published May 17, 2026
64 CVEs were published on May 17, 2026: 5 critical, 14 high.
- Published
- 64
- Critical
- 5
- High
- 14
- Medium
- 42
- Low
- 3
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 6
Most affected products
- Open5GS
- 8
- Sanluan PublicCMS
- 4
- Bylancer Zechat
- 3
- h2oai h2o-3
- 3
- Oinone Pamirs
- 3
- fishaudio Bert-VITS2
- 2
- JONASBN Crypt::OpenSSL::PKCS12
- 2
- vercel ai
- 2
- ACL Analytics
- 1
- adenhq hive
- 1
Critical 5
- CVE-2026-8721Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl truncates passwords with embedded NULLsJONASBN Crypt::OpenSSL::PKCS12
- CVE-2026-8507Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl have out-of-bounds (OOB) write flawsJONASBN Crypt::OpenSSL::PKCS12
- CVE-2018-25335WordPress Plugin Peugeot Music 1.0 Arbitrary File Uploadpeugeot-music-plugin Peugeot Music
- CVE-2018-25332GitBucket 4.23.1 Unauthenticated Remote Code ExecutionGitBucket
- CVE-2018-25320ACL Analytics 11.x - 13.0.0.579 Arbitrary Code ExecutionACL Analytics
High 14
- CVE-2026-8764H3C Magic B3 aspForm UpdateWanParams buffer overflowH3C Magic B3
- CVE-2026-46720Net::Statsd::Tiny versions before 0.3.8 for Perl allowed metric injectionsRRWO Net::Statsd::Tiny
- CVE-2018-25339Zechat 1.5 SQL Injection via v parameter (time-based blind)Bylancer Zechat
- CVE-2018-25338Zechat 1.5 SQL Injection via hashtag parameterBylancer Zechat
- CVE-2018-25333Nordex N149/4.0-4.5 Wind Turbine Web Server SQL Injectionnordex-online N149 Wind Turbine Web Server
- CVE-2018-25330Joomla! EkRishta 2.10 Persistent XSS and SQL InjectionJoomlaextensions Joomla! extension EkRishta
- CVE-2018-25329WordPress Plugin WP with Spritz 1.0 Remote File Inclusionwp-with-spritz WP with Spritz
- CVE-2018-25328VX Search 10.6.18 Local Buffer Overflow via Directory Fieldvxsearch VX Search
- CVE-2018-25326Google Drive for WordPress 2.2 Path Traversal RCE via gdrive-ajaxs.phpwp-google-drive Google Drive
- CVE-2018-25325Woocommerce CSV Importer 3.3.6 Path Traversal File Deletionwoocommerce-csvimport WooCommerce CSV-Importer
- CVE-2018-25323Allok AVI DivX MPEG to DVD Converter 2.6.1217 Buffer Overflow SEHAlloksoft Allok AVI DivX MPEG to DVD Converter
- CVE-2018-25322Allok Fast AVI MPEG Splitter 1.2 Stack Based Buffer Overflowalloksoft Fast AVI MPEG Splitter
- CVE-2018-25319Redaxo CMS Addon MyEvents 2.2.1 SQL Injection via event_add.phpwende60 Redaxo CMS Addon MyEvents
- CVE-2026-8719AI Engine 3.4.9 - Authenticated (Subscriber+) Privilege Escalation via Missing Authorization in MCP OAuth Bearer Tokentigroumeow AI Engine – The Chatbot, AI Framework & MCP for…
Medium, low and unrated 45
- CVE-2026-8772linlinjava litemall Admin Endpoint sql injectionlinlinjava litemall
- CVE-2026-8771linlinjava litemall Front-end WeChat API WxGoodsController.java list sql injectionlinlinjava litemall · org.linlinjava:litemall-wx-api
- CVE-2026-8770continuedev continue JSON-RPC Server lsTool.ts lsTool path traversalcontinuedev continue
- CVE-2026-8769vercel ai provider-utils response-handler.ts createJsonErrorResponseHandler resource consumptionvercel ai · @ai-sdk/provider-utils
- CVE-2026-8768vercel ai provider-utils download-blob.ts validateDownloadUrl server-side request forgeryvercel ai
- CVE-2026-8767vercel ai PR Branch Name Interpolation prettier-on-automerge.yml run os command injectionvercel ai
- CVE-2026-8766Kilo-Org kilocode Environment Variable config.ts load information disclosureKilo-Org kilocode · @kilocode/cli
- CVE-2026-8765Kilo-Org kilocode File Diff API Endpoint worktree-diff.ts Bun.file path traversalKilo-Org kilocode
- CVE-2026-8759xiandafu beetl SpELFunction SpELFunction.java expression language injectionxiandafu beetl · com.ibeetl:beetl-spring-classic
- CVE-2026-8758Metasoft 美特软件 MetaCRM upload3.jsp unrestricted uploadMetasoft 美特软件 MetaCRM
- CVE-2026-8757adenhq hive Delete Request routes_sessions.py _read_events_tail path traversaladenhq hive
- CVE-2026-8756fishaudio Bert-VITS2 Gradio webui_preprocess.py generate_config path traversalfishaudio Bert-VITS2
- CVE-2026-8755fishaudio Bert-VITS2 Model hiyoriUI.py _get_all_models path traversalfishaudio Bert-VITS2
- CVE-2026-8754AstrBotDevs AstrBot File Upload chat.py post_file path traversalAstrBotDevs AstrBot · astrbot
- CVE-2018-25334Zechat 1.5 Cross-Site Request Forgery (CSRF) via hashtag parameterBylancer Zechat
- CVE-2018-25337Joomla JoomOCShop 1.0 Cross-Site Request ForgeryJoomlaextensions Joomla! extension JoomOCShop
- CVE-2018-25336jCart for OpenCart 2.3.0.2 Cross-Site Request ForgeryjCart for OpenCart
- CVE-2018-25331Zenar Content Management System Cross-Site Scripting via ajax.phpZenar Content Management System
- CVE-2018-25327Joomla! Component Js Jobs 1.2.0 Cross-Site Request ForgeryJoomsky JS Jobs
- CVE-2018-25324Simple Fields 0.2-0.3.5 Local File Inclusion via wp_abspathSimple-Fields Simple Fields
- CVE-2018-25321TP-Link TL-WR720N CSRF via Administrative Interfaces (firmware V1_130719)Tp-link TL-WR720NMbps Wireless N Router
- CVE-2026-8753kalcaddle Kodbox fileThumb Plugin VideoResize.class.php parseVideoInfo command injectionkalcaddle Kodbox
- CVE-2026-8752h2oai h2o-3 Rapids setproperty Primitive AstSetProperty.java exec access controlh2oai h2o-3
- CVE-2026-8751h2oai h2o-3 JAR Model.java importBinaryModel deserializationh2oai h2o-3
- CVE-2026-8750h2oai h2o-3 ImportFile API PersistNFS.java importFiles information disclosureh2oai h2o-3
- CVE-2026-8747Z-BlogPHP Commend Approval c_system_event.php CheckComment improper authorizationZ-BlogPHP
- CVE-2026-8746Open5GS NRF nghttp2-server.c discover_handler use after freeOpen5GS
- CVE-2026-8745Open5GS AUSF nausf-handler.c ogs_timer_add denial of serviceOpen5GS
- CVE-2026-8744Open5GS NRF context.c ogs_sbi_nf_service_add denial of serviceOpen5GS
- CVE-2026-8743Open5GS AMF/MME context.c ran_ue_find_by_amf_ue_ngap_id improper authorizationOpen5GS
- CVE-2026-8741EMQX QoS 2 PUBLISH Packet emqx_persistent_session_ds.erl race conditionEMQX
- CVE-2026-8740Sanluan PublicCMS templateResult API TemplateResultDirective.java execute special elements used in a template engineSanluan PublicCMS
- CVE-2026-8739Sanluan PublicCMS SafeConfigComponent.java getSignKey hard-coded keySanluan PublicCMS
- CVE-2026-8738Sanluan PublicCMS Trade Payment Flow TradeOrderController.java AccountGatewayComponent.pay logic errorSanluan PublicCMS
- CVE-2026-8737Sanluan PublicCMS Trade Address Query TradeAddressListDirective.java execute missing authenticationSanluan PublicCMS
- CVE-2026-8736Oinone Pamirs RestController LocalFileClient.java request.getParameter path traversalOinone Pamirs
- CVE-2026-8735Oinone Pamirs appConfigQuery PamirsParserConfig.java JsonUtils.parseMap deserializationOinone Pamirs
- CVE-2026-8734Oinone Pamirs queryListByWrapper RSQLToSQLNodeConnector.makeVariable sql injectionOinone Pamirs
- CVE-2026-8733Investintech SlimPDFReader SlimPDFReader.exe sub_3B4610 stack-based overflowInvestintech SlimPDFReader
- CVE-2026-8731Open5GS NRF client.c ogs_sbi_client_add denial of serviceOpen5GS
- CVE-2026-8730Open5GS NRF context.c ogs_sbi_nf_instance_set_id denial of serviceOpen5GS
- CVE-2026-8729Open5GS NRF message.c denial of serviceOpen5GS
- CVE-2026-8728Open5GS NRF conv.c ogs_sbi_discovery_option_parse_plmn_list denial of serviceOpen5GS
- CVE-2026-8725CoreWorxLab CAAL test-hass Endpoint webhooks.py server-side request forgeryCoreWorxLab CAAL
- CVE-2026-8724Dataease Data Dashboard SqlparserUtils.java SqlparserUtils.transFilter sql injectionDataease