CVEs published May 21, 2026
187 CVEs were published on May 21, 2026: 15 critical, 72 high. 2 are now in CISA KEV.
- Published
- 187
- Critical
- 15
- High
- 72
- Medium
- 68
- Low
- 31
- Unrated
- 1
- Now in CISA KEV
- 2
- Fix available
- 126
Most affected products
- Concrete CMS · concrete5/concrete5
- 41
- Open ISES Tickets
- 37
- Netatalk
- 33
- Trend Micro TrendAI Apex One
- 16
- Linux
- 8
- FreeBSD
- 7
- PowerDNS Authoritative
- 5
- BerriAI litellm · litellm
- 2
- Honeywell International Control Network Module
- 2
- themefusion Avada (Fusion) Builder
- 2
Critical 15
- CVE-2026-6960BookingPress Pro <= 5.6 - Unauthenticated Arbitrary File Upload via Signature Custom FieldRepute Infosystems BookingPress Appointment Booking Pro
- CVE-2026-8134Concrete CMS 9.5.0 and below is vulnerable to Authenticated RCE via Composer customTemplate Path Traversal leading to PHP File InclusionConcrete CMS · concrete5/concrete5
- CVE-2026-48242Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in import_mdb.phpOpen ISES Tickets
- CVE-2026-48241Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in loader.phpOpen ISES Tickets
- CVE-2026-48207Apache Fory: PyFory ReduceSerializer Incomplete Policy EnforcementApache Software Foundation Apache Fory · pyfory
- CVE-2026-39531WordPress WP Directory Kit plugin <= 1.5.0 - SQL Injection vulnerabilityWP Directory Kit
- CVE-2025-71211A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands oTrend Micro TrendAI Apex One
- CVE-2025-71210A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands oTrend Micro TrendAI Apex One
- CVE-2026-43501ipv6: rpl: reserve mac_len headroom when recompressed SRH growsLinux
- CVE-2026-5118Divi Form Builder <= 5.1.2 - Unauthenticated Privilege Escalation via 'role'Divi Engine Divi Form Builder
- CVE-2026-5433Improper sanitizationHoneywell International Control Network Module
- CVE-2026-44050Heap buffer overflow in CNID daemon comm_rcv()Netatalk
- CVE-2026-6279Avada (Fusion) Builder <= 3.15.2 - Unauthenticated Remote Code Execution via PHP Function Injection via 'render_logics' Shortcode Attribute via Widget AJAX Handlerthemefusion Avada (Fusion) Builder
- CVE-2026-9152Unauthenticated SOAP Endpoint in Altium 365 SearchService Allows Cross-Tenant Data Exfiltration and Index DestructionAltium
- CVE-2026-48172LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026.LiteSpeed Technologies cPanel Plugin · LiteSpeed Technologi…
High 72
- CVE-2026-47102LiteLLM < 1.83.10 Privilege Escalation via User UpdateBerriAI litellm · litellm
- CVE-2026-47101LiteLLM < 1.83.14 Privilege Escalation via API Key GenerationBerriAI litellm · litellm
- CVE-2026-8203Concrete CMS 9.5.0 and below has Stored XSS on the height parameterConcrete CMS · concrete5/concrete5
- CVE-2026-8197Concrete CMS 9.5.0 and below is vulnerable to Stored XSS via OAuth integration nameConcrete CMS · concrete5/concrete5
- CVE-2026-8350Concrete CMS 9.5.0 and below is vulnerable to missing authorization in the bulk_user_assignment.php which can lead to privilege escalation to Administrative GroupConcrete CMS · concrete5/concrete5
- CVE-2026-8421Concrete CMS 9.5.0 and below is vulnerable to CSRF on install_package() with conditional token bypass leading to RCEConcrete CMS · concrete5/concrete5
- CVE-2026-8428CSRF token is not validated in the core CMS update controller for Concrete CMS 9.5.0 and belowConcrete CMS · concrete5/concrete5
- CVE-2026-8426Concrete CMS 9.5.0 and below is vulnerable to CSRF on prepare_remote_upgrade() leading to one-request RCE via package overwriteConcrete CMS · concrete5/concrete5
- CVE-2026-8140Concrete CMS 9.5.0 and below is vulnerable to CSRF on download() in the package install controllerConcrete CMS · concrete5/concrete5
- CVE-2026-8417Concrete CMS 9.5.0 and below is vulnerable to CSRF in do_update() in the package update controllerConcrete CMS · concrete5/concrete5
- CVE-2026-8135Concrete CMS 9.5.0 and below is vulnerable to RCE due to insecure deserialization occurring in the ExpressEntryList block controller.Concrete CMS · concrete5/concrete5
- CVE-2026-47114IINA < 1.4.3 Command Execution via iina://open URL Schemeiina
- CVE-2026-46473Authen::TOTP versions before 0.1.1 for Perl generate secrets using randTCHATZI Authen::TOTP
- CVE-2026-48249Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in rm/incs/mobile_login.inc.phpOpen ISES Tickets
- CVE-2026-48248Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/login.inc.phpOpen ISES Tickets
- CVE-2026-48247Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/functions.inc.phpOpen ISES Tickets
- CVE-2026-48246Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in ajax/reports.phpOpen ISES Tickets
- CVE-2026-48240Open ISES Tickets < 3.44.2 SQL Injection via ajax/statistics.php tick_id and f_tick_id ParametersOpen ISES Tickets
- CVE-2026-48239Open ISES Tickets < 3.44.2 SQL Injection via ajax/reports.php tick_id ParameterOpen ISES Tickets
- CVE-2026-48238Open ISES Tickets < 3.44.2 SQL Injection via ajax/mobile_main.php id ParameterOpen ISES Tickets
- CVE-2026-48237Open ISES Tickets < 3.44.2 SQL Injection via message.php frm_ticket_id and frm_resp_id ParametersOpen ISES Tickets
- CVE-2026-48236Open ISES Tickets < 3.44.2 SQL Injection via db_loader.php Multiple ParametersOpen ISES Tickets
- CVE-2026-48235Open ISES Tickets < 3.44.2 SQL Injection in incs/remotes.inc.php via External GPS Tracker DataOpen ISES Tickets
- CVE-2026-48234Open ISES Tickets < 3.44.2 SQL Injection via portal/ajax/list_requests.php sort and dir ParametersOpen ISES Tickets
- CVE-2026-48233Open ISES Tickets < 3.44.2 SQL Injection via ajax/sit_incidents.php offset ParameterOpen ISES Tickets
- CVE-2026-48232Open ISES Tickets < 3.44.2 SQL Injection via ajax/fullsit_incidents.php offset ParameterOpen ISES Tickets
- CVE-2026-48231Open ISES Tickets < 3.44.2 SQL Injection via tables.php Multiple ParametersOpen ISES Tickets
- CVE-2026-9089The ConnectWise Automate™ Agent does not fully verify the authenticity of components obtained during plugin loading and self-update operatioConnectWise Automate
- CVE-2025-13479IDOR in PosCube's QR MenuPosCube Hardware Software and Consulting QR Menu
- CVE-2026-45208A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installaTrend Micro TrendAI Apex One
- CVE-2026-45207An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.Trend Micro TrendAI Apex One
- CVE-2026-45206An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.Trend Micro TrendAI Apex One
- CVE-2026-34930An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.Trend Micro TrendAI Apex One
- CVE-2026-34929An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.Trend Micro TrendAI Apex One
- CVE-2026-34928An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.Trend Micro TrendAI Apex One
- CVE-2026-34927An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.Trend Micro TrendAI Apex One
- CVE-2025-71217An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism could allow a local attacker to eTrend Micro TrendAI Apex One
- CVE-2025-71216A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local attacker to escalate pTrend Micro TrendAI Apex One
- CVE-2025-71215A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature verification could allow a local aTrend Micro TrendAI Apex One
- CVE-2025-71214An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local attacker to escalate privTrend Micro TrendAI Apex One
- CVE-2025-71213An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installatioTrend Micro TrendAI Apex One
- CVE-2025-71212A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected instaTrend Micro TrendAI Apex One
- CVE-2025-13477OTP Bypass in Digital Operation Services' WifiBuradaDigital Operations Services WifiBurada
- CVE-2026-2740Remote Code ExecutionZohocorp ManageEngine ADSelfService Plus · Zohocorp Mana… +1
- CVE-2026-43502net/rds: handle zerocopy send cleanup before the message is queuedLinux
- CVE-2026-43499rtmutex: Use waiter::task instead of current in remove_waiter()Linux
- CVE-2026-43498accel/ivpu: Disallow re-exporting imported GEM objectsLinux
- CVE-2026-43497fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-freeLinux
- CVE-2026-43495net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handlerLinux
- CVE-2026-45760Apache Camel K: Camel K Cross-Namespace Build Deputy AttackApache Software Foundation Apache Camel K · github.com/a… +1
- CVE-2026-43494net/rds: reset op_nents when zerocopy page pin failsLinux
- CVE-2026-45255Remote code execution via installer Wi-Fi access point scansFreeBSD
- CVE-2026-42001Insufficient Validation of Autoprimary SOA QueriesPowerDNS Authoritative
- CVE-2026-39461select(2) file descriptor set overflow causes stack overflowFreeBSD
- CVE-2026-45253Missing validation in ptrace(PT_SC_REMOTE)FreeBSD
- CVE-2026-45251Kernel use-after-free via file descriptor syscallsFreeBSD
- CVE-2026-28764A heap-based buffer overflow vulnerability exists in the LXF element parsing functionality of MediaInfoLib (version(s): 26.01).MediaArea MediaInfoLib
- CVE-2026-45250Stack buffer overflow via setcred(2)FreeBSD
- CVE-2026-4858Path traversal in integration action URL leading to arbitrary API execution via system admin’s auth token.Mattermost · github.com/mattermost/mattermost-server
- CVE-2026-9157Remote Code Execution in Gmission Web FAXGmission Web Fax
- CVE-2026-44068EA path traversal via incomplete sanitizationNetatalk
- CVE-2026-44066Heap out-of-bounds reads in Spotlight RPC unmarshallingNetatalk
- CVE-2026-44064ASP session ID out-of-bounds accessNetatalk
- CVE-2026-44062Missing o_len bounds check in pull_charset_flags()Netatalk
- CVE-2026-44060Integer underflow in dsi_writeinit() leads to denial of serviceNetatalk
- CVE-2026-44055Bitwise OR logic bug enables shell injectionNetatalk
- CVE-2026-44053Weak cryptography in DHCAST128 UAMNetatalk
- CVE-2026-44052LDAP simple-bind password exposure in log outputNetatalk
- CVE-2026-44051Arbitrary file read via attacker-controlled symlink creationNetatalk
- CVE-2026-44049Out-of-bounds write in convert_charset() null terminationNetatalk
- CVE-2026-44048Stack buffer overflow via UCS-2 type confusion in convert_charset()Netatalk
- CVE-2026-44047SQL injection in MySQL CNID backendNetatalk
Medium, low and unrated 100
- CVE-2026-4093Stored XSS in Drupal 7 Term Reference Tree module (token display templates and term labels)Drupal Term Reference Tree
- CVE-2026-4929Simple Hierarchical Select (Drupal 7) XSS in term-derived outputDrupal Simple Hierarchical Select
- CVE-2026-8139Concrete CMS 9.5.0 and below is vulnerable to Stored XSS via external-link page cvNameConcrete CMS · concrete5/concrete5
- CVE-2026-7890Concrete CMS 9.5.0 is vulnerable to SSRF via RSS Displayer BlockConcrete CMS · concrete5/concrete5
- CVE-2026-8409Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/logs/deleteConcrete CMS · concrete5/concrete5
- CVE-2026-8410Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/logs/bulk/deleteConcrete CMS · concrete5/concrete5
- CVE-2026-8411Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/deleteConcrete CMS · concrete5/concrete5
- CVE-2026-8412Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/cacheConcrete CMS · concrete5/concrete5
- CVE-2026-8413Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/designConcrete CMS · concrete5/concrete5
- CVE-2026-8414Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/event/duplicateConcrete CMS · concrete5/concrete5
- CVE-2026-8415Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/express/association/reorderConcrete CMS · concrete5/concrete5
- CVE-2026-8416Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file addFavoriteFolder($id)Concrete CMS · concrete5/concrete5
- CVE-2026-8427Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file removeFavoriteFolder($id)Concrete CMS · concrete5/concrete5
- CVE-2026-8432Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file star()Concrete CMS · concrete5/concrete5
- CVE-2026-8433Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file rescan()Concrete CMS · concrete5/concrete5
- CVE-2026-8434Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file rescanMultiple()Concrete CMS · concrete5/concrete5
- CVE-2026-8435Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file approveVersion()Concrete CMS · concrete5/concrete5
- CVE-2026-7887For Concrete CMS 9.5.0 and below, OAuth 2.0 Authorization-Code Handler Bypasses Account StatusConcrete CMS · concrete5/concrete5
- CVE-2026-7886Concrete CMS 9.5.0 and below is vulnerable to IDOR in AddMessage/UpdateMessage via attachments[] parameterConcrete CMS · concrete5/concrete5
- CVE-2026-7882Concrete CMS 9.5.0 and below is vulnerable to CSRF via the DeleteFile controllerConcrete CMS · concrete5/concrete5
- CVE-2026-8327Concrete CMS below 9.5.0 and below is vulnerable to password change without reauthorization and session-hardening bypass.Concrete CMS · concrete5/concrete5
- CVE-2026-8245Concrete CMS 9.5.0 and below is vulnerable to Reflected XSS in Legacy Pagination via HTML attribute injectionConcrete CMS · concrete5/concrete5
- CVE-2026-8337Concrete CMS 9.5.0 and below is vulnerable to IDOR in surveys when sites are running concurrent public surveys and private surveysConcrete CMS · concrete5/concrete5
- CVE-2026-8240Concrete CMS 9.5.0 and below is vulnerable to unauthenticated page metadata disclosure in Backend\SummaryTemplateConcrete CMS · concrete5/concrete5
- CVE-2026-7881Concrete CMS 9.5.0 and below is vulnerable to IDOR in the Express Entry Detail blockConcrete CMS · concrete5/concrete5
- CVE-2026-7879Concrete CMS 9.5.0 and below is vulnerable to File Download Authorization Bypass in submit_password()Concrete CMS · concrete5/concrete5
- CVE-2026-5091Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacksJJNAPIORK Catalyst::Plugin::Authentication
- CVE-2026-8238Concrete CMS 9.5.0 and below is vulnerable to IDOR in '/ccm/frontend/conversations/message_page' allowing unauthenticated read of any conversation messageConcrete CMS · concrete5/concrete5
- CVE-2026-8237Concrete CMS 9.5.0 and below is vulnerable to IDOR in the`/ccm/frontend/conversations/message_detail` endpointConcrete CMS · concrete5/concrete5
- CVE-2026-8239Concrete CMS 9.5.0 and below is vulnerable to IDOR in '/ccm/frontend/conversations/get_rating'Concrete CMS · concrete5/concrete5
- CVE-2026-22678Webmin < 2.641 Stored XSS via System and Server StatusWebmin
- CVE-2026-8236Concrete CMS 9.5.0 and below is vulnerable to IDOR combined with a missing authentication gate for endpoint /ccm/system/dialogs/file/usage/{fID}Concrete CMS · concrete5/concrete5
- CVE-2026-8205Concrete CMS 9.5.0 and below is vulnerable to authorization bypass in Calendar Block since action_get_events does not check canView on the calendarConcrete CMS · concrete5/concrete5
- CVE-2026-8204Concrete CMS 9.5.0 and below is vulnerable to Authorization Bypass in the Calendar Event Frontend DialogConcrete CMS · concrete5/concrete5
- CVE-2026-6826Concrete 9.5.0 and below has file usage disclosure via missing permission check in Usage controllerConcrete CMS · concrete5/concrete5
- CVE-2026-4843GSheet For Woo Importer <= 2.3.1 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Resetmrdollar4444 GSheet For Woo Importer
- CVE-2026-48245Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in tables.phpOpen ISES Tickets
- CVE-2026-48244Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in settings.inc.phpOpen ISES Tickets
- CVE-2026-48243Open ISES Tickets < 3.44.2 Hardcoded WhitePages API Key in wp1.phpOpen ISES Tickets
- CVE-2026-48230Open ISES Tickets < 3.44.2 Reflected XSS via ticketsmdb_import.php Multiple POST ParametersOpen ISES Tickets
- CVE-2026-48229Open ISES Tickets < 3.44.2 Reflected XSS via routes_i.php ticket_id ParameterOpen ISES Tickets
- CVE-2026-48228Open ISES Tickets < 3.44.2 Reflected XSS via patient_w.php id and ticket_id ParametersOpen ISES Tickets
- CVE-2026-48227Open ISES Tickets < 3.44.2 Reflected XSS via patient.php id and ticket_id ParametersOpen ISES Tickets
- CVE-2026-48226Open ISES Tickets < 3.44.2 Reflected XSS via os_watch.php ref and mode_orig ParametersOpen ISES Tickets
- CVE-2026-48225Open ISES Tickets < 3.44.2 Reflected XSS via landb.php _type ParameterOpen ISES Tickets
- CVE-2026-48224Open ISES Tickets < 3.44.2 Reflected XSS via ics214.php frm_add_str ParameterOpen ISES Tickets
- CVE-2026-48223Open ISES Tickets < 3.44.2 Reflected XSS via ics213rr.php frm_add_str ParameterOpen ISES Tickets
- CVE-2026-48222Open ISES Tickets < 3.44.2 Reflected XSS via ics213.php frm_add_str ParameterOpen ISES Tickets
- CVE-2026-48221Open ISES Tickets < 3.44.2 Reflected XSS via ics205a.php frm_add_str ParameterOpen ISES Tickets
- CVE-2026-48220Open ISES Tickets < 3.44.2 Reflected XSS via ics205.php frm_add_str ParameterOpen ISES Tickets
- CVE-2026-48219Open ISES Tickets < 3.44.2 Reflected XSS via ics202.php frm_add_str ParameterOpen ISES Tickets
- CVE-2026-48218Open ISES Tickets < 3.44.2 Reflected XSS via icons/buttons/landb.php frm_name and frm_id ParametersOpen ISES Tickets
- CVE-2026-48217Open ISES Tickets < 3.44.2 Reflected XSS via delete_module.php Multiple POST ParametersOpen ISES Tickets
- CVE-2026-48216Open ISES Tickets < 3.44.2 Reflected XSS via db_loader.php Multiple POST ParametersOpen ISES Tickets
- CVE-2026-48215Open ISES Tickets < 3.44.2 Reflected XSS via circle.php frm_id ParameterOpen ISES Tickets
- CVE-2026-48214Open ISES Tickets < 3.44.2 Reflected XSS via add_nm.php ticket_id ParameterOpen ISES Tickets
- CVE-2026-39593WordPress HAPPY plugin <= 1.0.10 - Broken Access Control vulnerabilityVillaTheme HAPPY
- CVE-2026-48213Open ISES Tickets < 3.44.2 Reflected XSS via add.php ticket_id ParameterOpen ISES Tickets
- CVE-2026-1816OTP Bypass in TEİAŞ's Mobile ApplicationTurkiye Electricity Transmission Corporation (TEİAŞ) Mobile…
- CVE-2026-1815Session Hijacking in TEİAŞ's Mobile ApplicationTurkiye Electricity Transmission Corporation (TEİAŞ) Mobile…
- CVE-2026-34926A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key tableTrend Micro TrendAI Apex One
- CVE-2026-43496net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peekedLinux
- CVE-2026-6841Reflected XSS in Request TrackerBest Practical Request Tracker
- CVE-2026-0393CODESYS Visualization - Insufficiently Protected CredentialsCODESYS Visualization
- CVE-2026-45254Incorrect libcap_net limitation list manipulationFreeBSD
- CVE-2026-41999Incorrect Behaviour of Views with TCP PROXY RequestsPowerDNS Authoritative
- CVE-2026-42002Concurrency and locking defects in GSS-TSIGPowerDNS Authoritative
- CVE-2026-42000Insufficient Validation of Names During AXFRPowerDNS Authoritative
- CVE-2026-42396Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to FailPowerDNS Authoritative
- CVE-2026-45252Heap overflow in FUSE_LISTXATTRFreeBSD
- CVE-2026-5434Improper storage of sensitive informationHoneywell International Control Network Module
- CVE-2026-27393WordPress CF7 WOW Styler plugin <= 1.7.6 - Broken Access Control vulnerabilityTobias CF7 WOW Styler
- CVE-2026-22880Mobile SSO authentication flow allows credential theft via malicious serverMattermost
- CVE-2026-27349WordPress Mail Mint plugin <= 1.19.5 - Sensitive Data Exposure vulnerabilityWPFunnels Team Mail Mint
- CVE-2026-7837TOCTOU with root privilege in ad_flushNetatalk
- CVE-2026-44075Missing break in DSI OpenSessionNetatalk
- CVE-2026-44074Bitwise OR of errno valuesNetatalk
- CVE-2026-44071FORTIFY_SOURCE disabledNetatalk
- CVE-2026-44057Dead bounds check in Spotlight RPC unmarshallerNetatalk
- CVE-2026-7836hextoint macro uppercase bugNetatalk
- CVE-2026-7835Format string argument mismatchNetatalk
- CVE-2026-44076Shell injection via volume pathNetatalk
- CVE-2026-44073seteuid failure ignored in auth modulesNetatalk
- CVE-2026-44072system() after failed chdir()Netatalk
- CVE-2026-44070Unbounded realloc in charset conversionNetatalk
- CVE-2026-44069Integer underflow in volxlateNetatalk
- CVE-2026-44067EA header parsing heap over-readNetatalk
- CVE-2026-44065Off-by-two in papd lp_write()Netatalk
- CVE-2026-44063LDAP filter injectionNetatalk
- CVE-2026-44061DES-ECB auth with timing side channelNetatalk
- CVE-2026-44059Non-reentrant privilege toggleNetatalk
- CVE-2026-44058Authentication bypass via admin auth userNetatalk
- CVE-2026-44056Stack buffer overflow in desktop.cNetatalk
- CVE-2026-44054Predictable afpd session tokenNetatalk
- CVE-2026-4055Insufficient permission validation on cross-team playbook run creationMattermost · github.com/mattermost/mattermost/server/v8 +3
- CVE-2026-1543Avada (Fusion) Builder <= 3.15.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Multiple Shortcodesthemefusion Avada (Fusion) Builder
- CVE-2026-2734Authorization Bypass in SearchModelVersions in mlflow/mlflowmlflow/mlflow · mlflow
- CVE-2026-4811WPB Floating Menu or Categories – Sticky Floating Side Menu & Categories with Icons <= 1.0.8 - Authenticated (Editor+) Stored Cross-Site Scripting via 'Icon CSS Class' Category Fieldwpbean WPB Floating Menu or Categories – Sticky Floating Si…
- CVE-2026-1881Broadstreet <= 1.52.2 - Authenticated (Subscriber+) Private Post Meta Disclosure via get_sponsored_metabroadstreetads Broadstreet
- CVE-2026-36189Buffer Overflow vulnerability in Uncrustify Project Affected v.Uncrustify_d-0.82.0-132-bcc41cbdc and Fixed in commit 68e67b9a1435a1bb173b106