# CVEs published 2026-05-25

187 CVEs were published on May 25, 2026: 19 critical, 58 high. Days are UTC.

- [CVE-2026-8376](https://cve.now/CVE-2026-8376.md): Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds (CVSS 7.3, perl)
- [CVE-2026-9515](https://cve.now/CVE-2026-9515.md): Totolink CA750-PoE Setting cstecgi.cgi setUnloadUserData os command injection (CVSS 5.3, Totolink CA750-PoE)
- [CVE-2026-9514](https://cve.now/CVE-2026-9514.md): Totolink CA750-PoE Setting cstecgi.cgi setNetworkDiag os command injection (CVSS 5.3, Totolink CA750-PoE)
- [CVE-2026-32389](https://cve.now/CVE-2026-32389.md): WordPress NanoCare theme \< 1.2.2 - Broken Access Control vulnerability (CVSS 5.4, Linethemes NanoCare)
- [CVE-2026-42763](https://cve.now/CVE-2026-42763.md): WordPress SePay Gateway plugin \<= 1.1.20 - Sensitive Data Exposure vulnerability (CVSS 6.5, SePay team SePay Gateway)
- [CVE-2026-42773](https://cve.now/CVE-2026-42773.md): WordPress eMagicOne Store Manager plugin \<= 1.3.2 - SQL Injection vulnerability (CVSS 9.3, eMagicOne Store Manager)
- [CVE-2026-42774](https://cve.now/CVE-2026-42774.md): WordPress JetEngine plugin \<= 3.8.8.1 - SQL Injection vulnerability (CVSS 9.3, Crocoblock JetEngine)
- [CVE-2026-42776](https://cve.now/CVE-2026-42776.md): WordPress Sunshine Photo Cart plugin \<= 3.6.7 - Broken Access Control vulnerability (CVSS 6.3, WP Sunshine Sunshine Photo Cart)
- [CVE-2026-45209](https://cve.now/CVE-2026-45209.md): WordPress MyCryptoCheckout plugin \<= 2.161 - Broken Access Control vulnerability (CVSS 7.5, edward\_plainview MyCryptoCheckout)
- [CVE-2026-45216](https://cve.now/CVE-2026-45216.md): WordPress Smart Manager plugin \<= 8.85.0 - Privilege Escalation vulnerability (CVSS 8.8, StoreApps Smart Manager)
- [CVE-2026-9513](https://cve.now/CVE-2026-9513.md): Totolink CA750-PoE Setting cstecgi.cgi NTPSyncWithHost os command injection (CVSS 5.3, Totolink CA750-PoE)
- [CVE-2026-45217](https://cve.now/CVE-2026-45217.md): WordPress Stripe Payment Gateway for WooCommerce plugin \<= 5.0.7 - Broken Authentication vulnerability (CVSS 6.5, ThemeHigh Stripe Payment Gateway for WooCommerce)
- [CVE-2026-45435](https://cve.now/CVE-2026-45435.md): WordPress WP Activity Log plugin \<= 5.6.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Melapress WP Activity Log)
- [CVE-2026-45438](https://cve.now/CVE-2026-45438.md): WordPress Smart Coupons for WooCommerce plugin \< 2.3.0 - Broken Access Control vulnerability (CVSS 7.5, WebToffee Smart Coupons for WooCommerce)
- [CVE-2026-39436](https://cve.now/CVE-2026-39436.md): WordPress CformsII plugin \<= 15.1.3 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 7.1, bgermann CformsII)
- [CVE-2026-9512](https://cve.now/CVE-2026-9512.md): Totolink CA750-PoE Setting cstecgi.cgi setPasswordCfg os command injection (CVSS 5.3, Totolink CA750-PoE)
- [CVE-2026-24937](https://cve.now/CVE-2026-24937.md): WordPress Broadcast Live Video plugin \< 7.1.3 - Remote Code Execution (RCE) vulnerability (CVSS 7.2, VideoWhisper.com Broadcast Live Video)
- [CVE-2026-48837](https://cve.now/CVE-2026-48837.md): WordPress Unlimited Elements For Elementor plugin \<= 2.0.8 - SQL Injection vulnerability (CVSS 8.5, Unlimited Elements For Elementor)
- [CVE-2026-9511](https://cve.now/CVE-2026-9511.md): Totolink CA750-PoE Setting cstecgi.cgi setWebWlanIdx os command injection (CVSS 5.3, Totolink CA750-PoE)
- [CVE-2026-27357](https://cve.now/CVE-2026-27357.md): WordPress WP Search Analytics plugin \< 1.5.0 - Broken Access Control vulnerability (CVSS 5.3, Cornel Raiu WP Search Analytics)
- [CVE-2026-27398](https://cve.now/CVE-2026-27398.md): WordPress RSVP and Event Management plugin \<= 2.7.16 - Broken Access Control vulnerability (CVSS 5.3, WP Chill RSVP and Event Management)
- [CVE-2026-27346](https://cve.now/CVE-2026-27346.md): WordPress B2BKing plugin \< 5.2.10 - Broken Access Control vulnerability (CVSS 4.9, Kings Plugins B2BKing)
- [CVE-2026-24554](https://cve.now/CVE-2026-24554.md): WordPress WPSubscription plugin \<= 1.9.1 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, Convers Lab WPSubscription)
- [CVE-2026-24527](https://cve.now/CVE-2026-24527.md): WordPress Autoship Cloud for WooCommerce Subscription Products plugin \<= 2.14.0 - Broken Access Control vulnerability (CVSS 4.3, Patterns in the cloud Autoship Cloud for WooCommerce Subscr…)
- [CVE-2025-62745](https://cve.now/CVE-2025-62745.md): WordPress Team Showcase plugin \<= 1.22.28 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, PickPlugins Team Showcase)
- [CVE-2026-24586](https://cve.now/CVE-2026-24586.md): WordPress Newses theme \<= 2.0.0.77 - Broken Access Control vulnerability (CVSS 5.4, Themeansar Newses)
- [CVE-2026-24592](https://cve.now/CVE-2026-24592.md): WordPress Auto Affiliate Links plugin \<= 6.8.8.3 - Broken Access Control vulnerability (CVSS 5.3, Lucian Apostol Auto Affiliate Links)
- [CVE-2026-9504](https://cve.now/CVE-2026-9504.md): GNU LibreDWG Dwggrep Utility dwggrep.c bit\_convert\_TU out-of-bounds (CVSS 4.8, GNU LibreDWG)
- [CVE-2026-24582](https://cve.now/CVE-2026-24582.md): WordPress FlexTable plugin \<= 3.24.0 - Broken Access Control vulnerability (CVSS 4.3, WPPOOL FlexTable)
- [CVE-2026-24545](https://cve.now/CVE-2026-24545.md): WordPress QR Redirector plugin \<= 2.0.3 - Broken Access Control vulnerability (CVSS 4.3, Nikki Blight QR Redirector)
- [CVE-2026-24574](https://cve.now/CVE-2026-24574.md): WordPress Export WP Page to Static HTML/CSS plugin \<= 6.0.0 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 6.5, Recorp Export WP Page to Static HTML/CSS)
- [CVE-2026-24597](https://cve.now/CVE-2026-24597.md): WordPress Organization chart plugin \<= 1.7.5 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, WpDevArt Organization chart)
- [CVE-2026-9503](https://cve.now/CVE-2026-9503.md): GNU LibreDWG DWG File decode.c dwg\_next\_entity null pointer dereference (CVSS 4.8, GNU LibreDWG)
- [CVE-2026-9502](https://cve.now/CVE-2026-9502.md): GNU LibreDWG Dwgread Utility decode.c decompress\_R2004\_section heap-based overflow (CVSS 4.8, GNU LibreDWG)
- [CVE-2026-9501](https://cve.now/CVE-2026-9501.md): GNU LibreDWG Dwgread Utility decode.c decompress\_R2004\_section assertion (CVSS 4.8, GNU LibreDWG)
- [CVE-2026-48589](https://cve.now/CVE-2026-48589.md): Apache Shiro: Jakarta EE open redirect via untrusted Referer in post-login redirect flow (CVSS 0.0, Apache Software Foundation Apache Shiro · org.apache.shiro:…)
- [CVE-2026-44598](https://cve.now/CVE-2026-44598.md): Apache Shiro Jakarta EE module: Open redirect and SSRF (requires valid credentials) (CVSS 5.1, Apache Software Foundation Apache Shiro Jakarta EE module ·…)
- [CVE-2026-43828](https://cve.now/CVE-2026-43828.md): Apache Shiro: Shiro's native session and rememberMe cookies do not have secure flag set by default (CVSS 5.9, Apache Software Foundation Apache Shiro · org.apache.shiro:…)
- [CVE-2026-48852](https://cve.now/CVE-2026-48852.md): PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification. (CVSS 3.7, PuTTY)
- [CVE-2026-43827](https://cve.now/CVE-2026-43827.md): Apache Shiro: Session fixation: new session is not created after login by default (CVSS 5.9, Apache Software Foundation Apache Shiro · org.apache.shiro:…)
- [CVE-2026-48851](https://cve.now/CVE-2026-48851.md): PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust indication for TELNET data but the trust status is not cleared between proxy (CVSS 3.1, PuTTY)
- [CVE-2026-9500](https://cve.now/CVE-2026-9500.md): GNU LibreDWG Dwgread Utility decode.c read\_2004\_compressed\_section heap-based overflow (CVSS 4.8, GNU LibreDWG)
- [CVE-2026-48850](https://cve.now/CVE-2026-48850.md): PuTTY 0.72 before 0.84 has a double free in RSA KEX. (CVSS 3.7, PuTTY)
- [CVE-2026-9498](https://cve.now/CVE-2026-9498.md): Dromara lamp-cloud Message Template GroovyClassLoader.parseClass special elements used in a template engine (CVSS 5.3, Dromara lamp-cloud)
- [CVE-2026-9497](https://cve.now/CVE-2026-9497.md): changmingxie tcc-transaction Fastjson AutoType REST API Fastjson.parseObject deserialization (CVSS 5.3, changmingxie tcc-transaction · org.mengyun:tcc-transaction)
- [CVE-2026-48849](https://cve.now/CVE-2026-48849.md): In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, an unsanitized subject field in the draft restored value could lead to stor (CVSS 4.4, Roundcube Webmail)
- [CVE-2026-9486](https://cve.now/CVE-2026-9486.md): SourceCodester Student Grades Management System cross-site request forgery (CVSS 5.3, SourceCodester Student Grades Management System)
- [CVE-2026-48848](https://cve.now/CVE-2026-48848.md): Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7 has insufficient HTML sanitization that could lead to Cascading Style Sheets (CSS (CVSS 7.2, Roundcube Webmail)
- [CVE-2026-24546](https://cve.now/CVE-2026-24546.md): WordPress GamiPress plugin \<= 7.6.3 - Broken Access Control vulnerability (CVSS 5.3, Ruben Garcia GamiPress)
- [CVE-2026-48847](https://cve.now/CVE-2026-48847.md): Roundcube Webmail 1.6.x before 1.6.16, and 1.7.x before 1.7.1 allows pre-authentication arbitrary file deletion via redis/memcache session p (CVSS 3.7, Roundcube Webmail)
- [CVE-2026-48846](https://cve.now/CVE-2026-48846.md): In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, the remote image blocking feature can be bypassed via a crafted CSS var() v (CVSS 6.5, Roundcube Webmail)
- [CVE-2026-48845](https://cve.now/CVE-2026-48845.md): In Roundcube Webmail 1.6.x between 1.6.14 and 1.6.16 and 1.7.x before 1.7.1, remote image blocking was not honored for URLs pointing to loca (CVSS 6.5, Roundcube Webmail)
- [CVE-2026-9485](https://cve.now/CVE-2026-9485.md): SourceCodester Student Grades Management System students.php cross site scripting (CVSS 5.1, SourceCodester Student Grades Management System)
- [CVE-2026-48844](https://cve.now/CVE-2026-48844.md): Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has insecure code evaluation logic in LDAP the autovalues option that could lea (CVSS 7.5, Roundcube Webmail)
- [CVE-2026-48843](https://cve.now/CVE-2026-48843.md): Roundcube Webmail 1.6.x between 1.6.14 and 1.6.16,and 1.7.x before 1.7.1 has Insufficient Cascading Style Sheets (CSS) sanitization in HTML (CVSS 7.2, Roundcube Webmail)
- [CVE-2026-48842](https://cve.now/CVE-2026-48842.md): Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser\_query plugin via a preg\_re (CVSS 8.1, Roundcube Webmail)
- [CVE-2026-9484](https://cve.now/CVE-2026-9484.md): SourceCodester Student Grades Management System classroom.php removeStudentFromClassroom improper authorization (CVSS 5.3, SourceCodester Student Grades Management System)
- [CVE-2026-9483](https://cve.now/CVE-2026-9483.md): SourceCodester Student Grades Management System grades.php improper authorization (CVSS 5.3, SourceCodester Student Grades Management System)
- [CVE-2026-9482](https://cve.now/CVE-2026-9482.md): Edimax EW-7438RPn formSDHCP stack-based overflow (CVSS 8.7, Edimax EW-7438RPn)
- [CVE-2026-9481](https://cve.now/CVE-2026-9481.md): Edimax EW-7438RPn formStats stack-based overflow (CVSS 8.7, Edimax EW-7438RPn)
- [CVE-2026-9480](https://cve.now/CVE-2026-9480.md): Edimax EW-7438RPn formrefresh stack-based overflow (CVSS 8.7, Edimax EW-7438RPn)
- [CVE-2026-9479](https://cve.now/CVE-2026-9479.md): Edimax EW-7438RPn formLogout stack-based overflow (CVSS 8.7, Edimax EW-7438RPn)
- [CVE-2026-9478](https://cve.now/CVE-2026-9478.md): Totolink A8000RU Web Management cstecgi.cgi setParentalRules os command injection (CVSS 9.3, Totolink A8000RU)
- [CVE-2026-9477](https://cve.now/CVE-2026-9477.md): Totolink A8000RU Web Management cstecgi.cgi setAccessDeviceCfg os command injection (CVSS 9.3, Totolink A8000RU)
- [CVE-2026-9476](https://cve.now/CVE-2026-9476.md): Totolink A8000RU Web Management cstecgi.cgi setPasswordCfg os command injection (CVSS 9.3, Totolink A8000RU)
- [CVE-2026-9475](https://cve.now/CVE-2026-9475.md): Totolink A8000RU Web Management cstecgi.cgi setIpQosRules os command injection (CVSS 9.3, Totolink A8000RU)
- [CVE-2026-9474](https://cve.now/CVE-2026-9474.md): yashpokharna2555 StudentManagementSystem studentdel.php confirm\_logged\_in sql injection (CVSS 6.9, yashpokharna2555 StudentManagementSystem)
- [CVE-2026-9473](https://cve.now/CVE-2026-9473.md): c-rick jimeng-mcp api.ts generateVideo path traversal (CVSS 5.3, c-rick jimeng-mcp)
- [CVE-2026-9472](https://cve.now/CVE-2026-9472.md): dazeb markdown-downloader index.ts create\_subdirectory path traversal (CVSS 5.3, dazeb markdown-downloader)
- [CVE-2026-9471](https://cve.now/CVE-2026-9471.md): yashpokharna2555 StudentManagementSystem student.php cross site scripting (CVSS 5.1, yashpokharna2555 StudentManagementSystem)
- [CVE-2026-27768](https://cve.now/CVE-2026-27768.md): SQL Injection affecting the Access Manager role. (CVSS 6.6, Genetec Security Center)
- [CVE-2026-9470](https://cve.now/CVE-2026-9470.md): yashpokharna2555 StudentManagementSystem student\_trans.php confirm\_logged\_in sql injection (CVSS 6.9, yashpokharna2555 StudentManagementSystem)
- [CVE-2026-9469](https://cve.now/CVE-2026-9469.md): yashpokharna2555 StudentManagementSystem success.php sql injection (CVSS 6.9, yashpokharna2555 StudentManagementSystem)
- [CVE-2026-42797](https://cve.now/CVE-2026-42797.md): Apache Syncope: JexlContextBuilder Information Disclosure (CVSS 4.9, Apache Software Foundation Apache Syncope · org.apache.sync…)
- [CVE-2026-9468](https://cve.now/CVE-2026-9468.md): dazeb cline-mcp-memory-bank index.ts handleInitializeMemoryBank path traversal (CVSS 5.3, dazeb cline-mcp-memory-bank)
- [CVE-2026-42782](https://cve.now/CVE-2026-42782.md): Apache Syncope: Post-auth RCE via Groovy static (CVSS 7.2, Apache Software Foundation Apache Syncope · org.apache.sync…)
- [CVE-2026-9467](https://cve.now/CVE-2026-9467.md): debugmcp mcp-debugger server.ts handleGetSourceContext path traversal (CVSS 5.3, debugmcp mcp-debugger)
- [CVE-2026-9466](https://cve.now/CVE-2026-9466.md): Tiandy Easy7 Integrated Management Platform API Endpoint updateUserPassword password recovery (CVSS 6.9, Tiandy Easy7 Integrated Management Platform)
- [CVE-2026-9465](https://cve.now/CVE-2026-9465.md): Tiandy Easy7 Integrated Management Platform GetDBDataEx.jsp sql injection (CVSS 6.9, Tiandy Easy7 Integrated Management Platform)
- [CVE-2018-25381](https://cve.now/CVE-2018-25381.md): Joomla Responsive Portfolio 1.6.1 SQL Injection via filter parameters (CVSS 7.1, Extro Responsive Portfolio)
- [CVE-2018-25380](https://cve.now/CVE-2018-25380.md): Joomla Component eXtroForms 2.1.5 SQL Injection via filter parameters (CVSS 7.1, eXtroForms)
- [CVE-2018-25379](https://cve.now/CVE-2018-25379.md): Collectric CMU 1.0 SQL Injection via lang Parameter (CVSS 8.8, Ourenergy Collectric CMU)
- [CVE-2018-25378](https://cve.now/CVE-2018-25378.md): Notebook Pro 2.0 Denial of Service via Notebook Name Field (CVSS 6.9, Stokedonit Notebook Pro)
- [CVE-2018-25377](https://cve.now/CVE-2018-25377.md): Flash Slideshow Maker Professional 5.20 Buffer Overflow SEH (CVSS 8.6, SocuSoft Flash Slideshow Maker Professional)
- [CVE-2018-25376](https://cve.now/CVE-2018-25376.md): Socusoft 3GP Photo Slideshow 8.05 Buffer Overflow SEH (CVSS 8.6, SocuSoft 3GP Photo Slideshow)
- [CVE-2018-25375](https://cve.now/CVE-2018-25375.md): SocuSoft iPod Photo Slideshow 8.05 Buffer Overflow SEH (CVSS 8.6, SocuSoft iPod Photo Slideshow)
- [CVE-2018-25374](https://cve.now/CVE-2018-25374.md): Softneta MedDream PACS Server Premium 6.7.1.1 Directory Traversal (CVSS 8.7, Softneta MedDream PACS Server Premium)
- [CVE-2018-25373](https://cve.now/CVE-2018-25373.md): DVD Photo Slideshow Professional 8.07 Buffer Overflow SEH (CVSS 8.6, SocuSoft DVD Photo Slideshow Professional)
- [CVE-2018-25372](https://cve.now/CVE-2018-25372.md): MedDream PACS Server Premium 6.7.1.1 SQL Injection via email (CVSS 8.8, MedDream PACS Server Premium)
- [CVE-2018-25371](https://cve.now/CVE-2018-25371.md): mooSocial Store Plugin 2.6 SQL Injection via product parameter (CVSS 8.8, mooSocial Store Plugin)
- [CVE-2018-25370](https://cve.now/CVE-2018-25370.md): Admidio 3.3.5 Cross-Site Request Forgery via roles\_function.php (CVSS 6.9, Admidio)
- [CVE-2018-25369](https://cve.now/CVE-2018-25369.md): Visual Ping 0.8.0.0 Buffer Overflow Denial of Service (CVSS 6.9, scanwith Visual Ping)
- [CVE-2018-25368](https://cve.now/CVE-2018-25368.md): Nord VPN 6.14.31 Denial of Service via Password Field (CVSS 8.7, NordVPN)
- [CVE-2018-25367](https://cve.now/CVE-2018-25367.md): NASA openVSP 3.16.1 Denial of Service via Buffer Overflow (CVSS 6.9, NASA openVSP)
- [CVE-2018-25366](https://cve.now/CVE-2018-25366.md): CuteFTP 5.0 XP Buffer Overflow via Site Manager Label Field (CVSS 8.6, globalscape CuteFTP)
- [CVE-2018-25365](https://cve.now/CVE-2018-25365.md): PCViewer vt1000 Directory Traversal via GET Request (CVSS 8.7, PCViewer)
- [CVE-2018-25364](https://cve.now/CVE-2018-25364.md): Twitter-Clone 1 SQL Injection via search.php (CVSS 8.8, Fyffe PHP-Twitter-Clone)
- [CVE-2018-25363](https://cve.now/CVE-2018-25363.md): Twitter-Clone 1 Cross-Site Request Forgery via tweetdel.php (CVSS 5.3, Fyffe PHP-Twitter-Clone)
- [CVE-2018-25362](https://cve.now/CVE-2018-25362.md): Twitter-Clone 1 SQL Injection via follow.php (CVSS 8.8, Fyffe PHP-Twitter-Clone)
- [CVE-2018-25361](https://cve.now/CVE-2018-25361.md): Soroush IM Desktop App 0.17.0 Authentication Bypass via Database Injection (CVSS 7.0, Soroush IM Desktop App)
- [CVE-2018-25360](https://cve.now/CVE-2018-25360.md): AgataSoft Auto PingMaster 1.5 Buffer Overflow SEH (CVSS 8.6, Agatasoft Auto PingMaster)
- [CVE-2018-25359](https://cve.now/CVE-2018-25359.md): Splinterware System Scheduler Pro 5.12 Privilege Escalation (CVSS 8.6, Splinterware System Scheduler Pro)
- [CVE-2026-9078](https://cve.now/CVE-2026-9078.md): Firefox iOS RTL Domain Rendering Issue in Link Preview (CVSS 5.4, Mozilla Firefox for iOS)
- [CVE-2026-47073](https://cve.now/CVE-2026-47073.md): Unbounded memory consumption in WebSocket client in hackney (CVSS 8.7, benoitc hackney)
- [CVE-2026-47067](https://cve.now/CVE-2026-47067.md): Atom table exhaustion via unrecognized URL schemes in hackney (CVSS 8.7, benoitc hackney)
- [CVE-2026-47072](https://cve.now/CVE-2026-47072.md): CRLF injection in WebSocket upgrade request in hackney (CVSS 6.9, benoitc hackney)
- [CVE-2026-47076](https://cve.now/CVE-2026-47076.md): SSRF allowlist bypass via percent-encoded host in hackney (CVSS 6.9, benoitc hackney)
- [CVE-2026-47070](https://cve.now/CVE-2026-47070.md): HTTP/3 redirect handler leaks Authorization and Cookie headers to cross-origin redirect target in hackney (CVSS 6.0, benoitc hackney)
- [CVE-2026-47075](https://cve.now/CVE-2026-47075.md): CR/LF injection in query parameter in hackney (CVSS 6.8, benoitc hackney)
- [CVE-2026-47077](https://cve.now/CVE-2026-47077.md): Unbounded body accumulation in HTTP/3 response loop in hackney (CVSS 8.2, benoitc hackney)
- [CVE-2026-47071](https://cve.now/CVE-2026-47071.md): SOCKS5 TLS upgrade ignores caller timeout in hackney (CVSS 8.2, benoitc hackney)
- [CVE-2026-47066](https://cve.now/CVE-2026-47066.md): Infinite loop in Alt-Svc header parser in hackney (CVSS 8.7, benoitc hackney)
- [CVE-2026-47069](https://cve.now/CVE-2026-47069.md): CRLF injection in cookie domain/path options in hackney (CVSS 2.1, benoitc hackney)
- [CVE-2026-9464](https://cve.now/CVE-2026-9464.md): YunaiV yudao-cloud Admin API Endpoint create IotDataSinkHttpConfig server-side request forgery (CVSS 5.1, YunaiV yudao-cloud)
- [CVE-2026-9463](https://cve.now/CVE-2026-9463.md): Edimax EW-7438RPn formLicence stack-based overflow (CVSS 8.7, Edimax EW-7438RPn)
- [CVE-2026-9462](https://cve.now/CVE-2026-9462.md): Edimax EW-7438RPn formWpsProxyEnable stack-based overflow (CVSS 8.7, Edimax EW-7438RPn)
- [CVE-2026-9058](https://cve.now/CVE-2026-9058.md): Improper Certificate Verification in Szafir SDK (CVSS 9.3, Krajowa Izba Rozliczeniowa Szafir SDK)
- [CVE-2026-9461](https://cve.now/CVE-2026-9461.md): Edimax EW-7438RPn formRadius stack-based overflow (CVSS 8.7, Edimax EW-7438RPn)
- [CVE-2026-9460](https://cve.now/CVE-2026-9460.md): Edimax EW-7438RPn formAccept stack-based overflow (CVSS 8.7, Edimax EW-7438RPn)
- [CVE-2026-9459](https://cve.now/CVE-2026-9459.md): Edimax EW-7438RPn formConnectionSetting stack-based overflow (CVSS 8.7, Edimax EW-7438RPn)
- [CVE-2026-9458](https://cve.now/CVE-2026-9458.md): Totolink A8000RU Web Management cstecgi.cgi setWanCfg os command injection (CVSS 9.3, Totolink A8000RU)
- [CVE-2026-9457](https://cve.now/CVE-2026-9457.md): Totolink A8000RU Web Management cstecgi.cgi UploadFirmwareFile os command injection (CVSS 9.3, Totolink A8000RU)
- [CVE-2026-9456](https://cve.now/CVE-2026-9456.md): Totolink A8000RU Web Management cstecgi.cgi setOpenVpnCfg os command injection (CVSS 9.3, Totolink A8000RU)
- [CVE-2026-9455](https://cve.now/CVE-2026-9455.md): Totolink A8000RU Web Management cstecgi.cgi UploadOpenVpnCert os command injection (CVSS 9.3, Totolink A8000RU)
- [CVE-2026-9454](https://cve.now/CVE-2026-9454.md): Totolink A8000RU Web Management cstecgi.cgi setOpenVpnCertGenerationCfg os command injection (CVSS 9.3, Totolink A8000RU)
- [CVE-2026-7766](https://cve.now/CVE-2026-7766.md): Path Traversal in Kenik cameras (CVSS 8.3, Kenik KG-5230TAS-IL-3 · Kenik KG-5230TAS-IL-G3 +6)
- [CVE-2026-9453](https://cve.now/CVE-2026-9453.md): FoundDream miniclawd SkillsLoader skills-loader.ts which command injection (CVSS 6.9, FoundDream miniclawd)
- [CVE-2026-9452](https://cve.now/CVE-2026-9452.md): FoundDream miniclawd exec.ts ExecTool.execute os command injection (CVSS 6.9, FoundDream miniclawd)
- [CVE-2026-9451](https://cve.now/CVE-2026-9451.md): code-projects Employee Management System applyleaveprocess.php sql injection (CVSS 5.3, code-projects Employee Management System)
- [CVE-2026-46745](https://cve.now/CVE-2026-46745.md): Apache Airflow FAB provider: LDAP Filter Injection in FAB Auth Manager \_search\_ldap reachable via /auth/token (CVSS 5.3, Apache Software Foundation Apache Airflow FAB provider · ap…)
- [CVE-2026-9450](https://cve.now/CVE-2026-9450.md): code-projects Employee Management System psubmit.php sql injection (CVSS 5.3, code-projects Employee Management System)
- [CVE-2026-40127](https://cve.now/CVE-2026-40127.md): Authorization Bypass Through User-Controlled Key in OutSystems Lifetime (CVSS 5.3, OutSystems Lifetime)
- [CVE-2026-9449](https://cve.now/CVE-2026-9449.md): code-projects Employee Management System changepassemp.php sql injection (CVSS 5.3, code-projects Employee Management System)
- [CVE-2026-9448](https://cve.now/CVE-2026-9448.md): code-projects Employee Management System applyleave.php cross site scripting (CVSS 5.3, code-projects Employee Management System)
- [CVE-2026-9447](https://cve.now/CVE-2026-9447.md): SourceCodester Simple POS and Inventory System search.php sql injection (CVSS 6.9, SourceCodester Simple POS and Inventory System)
- [CVE-2026-45361](https://cve.now/CVE-2026-45361.md): Apache Airflow Google provider: SSH host key verification disabled in ComputeEngineSSHHook (paramiko AutoAddPolicy default) (CVSS 8.1, Apache Software Foundation Apache Airflow Google provider ·…)
- [CVE-2026-9446](https://cve.now/CVE-2026-9446.md): SourceCodester Simple POS and Inventory System edit\_customer.php sql injection (CVSS 5.1, SourceCodester Simple POS and Inventory System)
- [CVE-2026-9274](https://cve.now/CVE-2026-9274.md): Information Exposure Vulnerability in CP-Plus Wi-Fi Camera (CVSS 5.2, CP Plus Wi-Fi Camera CP-E38Q, CP-E48Q, CP-E25Q, CP-E35Q, CP…)
- [CVE-2026-9445](https://cve.now/CVE-2026-9445.md): SourceCodester Simple POS and Inventory System File Extension addproduct.php unrestricted upload (CVSS 5.3, SourceCodester Simple POS and Inventory System)
- [CVE-2026-9444](https://cve.now/CVE-2026-9444.md): SourceCodester Simple POS and Inventory System GET Parameter deleteproduct.php delete sql injection (CVSS 5.1, SourceCodester Simple POS and Inventory System)
- [CVE-2026-5223](https://cve.now/CVE-2026-5223.md): Crates in third party registries can override the cached source of other crates (CVSS 6.5, Rust Project Cargo · cargo)
- [CVE-2026-5222](https://cve.now/CVE-2026-5222.md): Cargo can be coerced to share credentials between registries (CVSS 2.3, Rust Cargo · cargo)
- [CVE-2026-9443](https://cve.now/CVE-2026-9443.md): Edimax BR-6478AC POST Request formL2TPSetup buffer overflow (CVSS 8.7, Edimax BR-6478AC)
- [CVE-2026-9442](https://cve.now/CVE-2026-9442.md): Edimax BR-6478AC POST Request formiNICSiteSurvey buffer overflow (CVSS 8.7, Edimax BR-6478AC)
- [CVE-2026-9441](https://cve.now/CVE-2026-9441.md): Edimax BR-6478AC POST Request formiNICbasic command injection (CVSS 5.3, Edimax BR-6478AC)
- [CVE-2026-9440](https://cve.now/CVE-2026-9440.md): Edimax BR-6478AC POST Request formAccept command injection (CVSS 5.3, Edimax BR-6478AC)
- [CVE-2026-9439](https://cve.now/CVE-2026-9439.md): Edimax BR-6675nD stainfo command injection (CVSS 5.3, Edimax BR-6675nD)
- [CVE-2026-45249](https://cve.now/CVE-2026-45249.md): Apache ECharts: XSS in Lines series tooltip rendering (CVSS 6.1, Apache Software Foundation Apache ECharts · echarts)
- [CVE-2026-9438](https://cve.now/CVE-2026-9438.md): yashpokharna2555 StudentManagementSystem courseDel.php resource injection (CVSS 5.3, yashpokharna2555 StudentManagementSystem)
- [CVE-2026-9490](https://cve.now/CVE-2026-9490.md): Acer Care Center creates a Named Pipe with a weak Security Descriptor (CVSS 6.8, Acer Care Center)
- [CVE-2026-9437](https://cve.now/CVE-2026-9437.md): DTStack Taier REST API Runtime.exec os command injection (CVSS 5.3, DTStack Taier)
- [CVE-2026-4915](https://cve.now/CVE-2026-4915.md): Server panic via outgoing webhook responses (CVSS 6.5, Mattermost · github.com/mattermost/mattermost-server +3)
- [CVE-2026-9436](https://cve.now/CVE-2026-9436.md): Totolink A8000RU Web Management cstecgi.cgi setL2tpServerCfg os command injection (CVSS 9.3, Totolink A8000RU)
- [CVE-2026-9435](https://cve.now/CVE-2026-9435.md): Totolink A8000RU Web Management cstecgi.cgi setQosCfg os command injection (CVSS 9.3, Totolink A8000RU)
- [CVE-2026-9434](https://cve.now/CVE-2026-9434.md): Totolink A8000RU Web Management cstecgi.cgi setWiFiWpsCfg os command injection (CVSS 9.3, Totolink A8000RU)
- [CVE-2026-9433](https://cve.now/CVE-2026-9433.md): Totolink A8000RU Web Management cstecgi.cgi setMacFilterRules os command injection (CVSS 9.3, Totolink A8000RU)
- [CVE-2026-2651](https://cve.now/CVE-2026-2651.md): Missing Authorization Validation in mlflow/mlflow (CVSS 9.0, mlflow/mlflow · mlflow)
- [CVE-2026-9432](https://cve.now/CVE-2026-9432.md): Totolink A8000RU Web Management cstecgi.cgi setWiFiAdvancedCfg os command injection (CVSS 9.3, Totolink A8000RU)
- [CVE-2026-41863](https://cve.now/CVE-2026-41863.md): LLM-influenced filename used unsanitized in Path.resolve before file write in Spring AI support for Anthropic Skills API (CVSS 6.5, Spring AI · org.springframework.ai:spring-ai-anthropic)
- [CVE-2026-9431](https://cve.now/CVE-2026-9431.md): Tenda F1202 PptpUserAdd fromPptpUserAdd stack-based overflow (CVSS 8.7, Tenda F1202)
- [CVE-2026-9430](https://cve.now/CVE-2026-9430.md): Tenda F1202 GstDhcpSetSerof formGstDhcpSetSer stack-based overflow (CVSS 8.7, Tenda F1202)
- [CVE-2026-25193](https://cve.now/CVE-2026-25193.md): Insertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service installers could lead to Service Account credentia (CVSS 8.1, Gallagher Command Centre Server · Gallagher Active Dire… +12)
- [CVE-2026-9429](https://cve.now/CVE-2026-9429.md): Tenda F1202 WrlExtraSet formWrlExtraSet stack-based overflow (CVSS 8.7, Tenda F1202)
- [CVE-2026-9428](https://cve.now/CVE-2026-9428.md): Tenda F1202 PPTPUserSetting fromPPTPUserSetting stack-based overflow (CVSS 8.7, Tenda F1202)
- [CVE-2026-9427](https://cve.now/CVE-2026-9427.md): Edimax EW-7438RPn webs formWlSiteSurvey stack-based overflow (CVSS 8.7, Edimax EW-7438RPn)
- [CVE-2026-9426](https://cve.now/CVE-2026-9426.md): Edimax EW-7438RPn formHwSet stack-based overflow (CVSS 8.7, Edimax EW-7438RPn)
- [CVE-2026-9425](https://cve.now/CVE-2026-9425.md): Edimax EW-7438RPn formWlanMP stack-based overflow (CVSS 8.7, Edimax EW-7438RPn)
- [CVE-2026-9424](https://cve.now/CVE-2026-9424.md): Edimax EW-7438RPn Content-Type formWlanMP os command injection (CVSS 5.3, Edimax EW-7438RPn)
- [CVE-2026-9423](https://cve.now/CVE-2026-9423.md): Edimax BR-6675nD POST Request mp command injection (CVSS 5.1, Edimax BR-6675nD)
- [CVE-2026-9422](https://cve.now/CVE-2026-9422.md): KLiK SocialMediaWebsite HTTP POST Request Parameter injection (CVSS 6.9, KLiK SocialMediaWebsite)
- [CVE-2026-9421](https://cve.now/CVE-2026-9421.md): KLiK SocialMediaWebsite File upload.inc.php uniqid unrestricted upload (CVSS 6.9, KLiK SocialMediaWebsite)
- [CVE-2026-9420](https://cve.now/CVE-2026-9420.md): KLiK SocialMediaWebsite HTTP GET Request Parameter injection (CVSS 5.3, KLiK SocialMediaWebsite)
- [CVE-2026-9419](https://cve.now/CVE-2026-9419.md): code-projects Employee Management System empproject.php cross site scripting (CVSS 5.3, code-projects Employee Management System)
- [CVE-2026-9418](https://cve.now/CVE-2026-9418.md): code-projects Employee Management System changepassemp.php cross site scripting (CVSS 5.3, code-projects Employee Management System)
- [CVE-2026-8652](https://cve.now/CVE-2026-8652.md): An OS Command Injection vulnerability exists in Aterm. (CVSS 8.5, NEC Platforms Aterm MR51FN · NEC Platforms Aterm CM51FD)
- [CVE-2026-6059](https://cve.now/CVE-2026-6059.md): A cross-site scripting vulnerability exists in Aterm. (CVSS 4.8, NEC Platforms Aterm WX1800HP · NEC Platforms Aterm WX540… +7)
- [CVE-2026-9417](https://cve.now/CVE-2026-9417.md): code-projects Employee Management System myprofileup.php cross site scripting (CVSS 5.3, code-projects Employee Management System)
- [CVE-2026-9416](https://cve.now/CVE-2026-9416.md): code-projects Employee Management System myprofile.php cross site scripting (CVSS 5.3, code-projects Employee Management System)
- [CVE-2026-9489](https://cve.now/CVE-2026-9489.md): NitroSense V3: Local Privilege Escalation (LPE) vulnerability (CVSS 8.5, Acer NitrorSense)
- [CVE-2026-9415](https://cve.now/CVE-2026-9415.md): code-projects Employee Management System eloginwel.php cross site scripting (CVSS 5.3, code-projects Employee Management System)
- [CVE-2026-9414](https://cve.now/CVE-2026-9414.md): SourceCodester Indian Invoicing System Invoice Template Render Database-Backed add\_order.php cross site scripting (CVSS 5.1, SourceCodester Indian Invoicing System)
- [CVE-2026-9413](https://cve.now/CVE-2026-9413.md): SourceCodester Indian Invoicing System category.php cross site scripting (CVSS 5.3, SourceCodester Indian Invoicing System)
- [CVE-2026-9412](https://cve.now/CVE-2026-9412.md): SourceCodester Indian Invoicing System Backend Endpoint access control (CVSS 5.3, SourceCodester Indian Invoicing System)
- [CVE-2026-9411](https://cve.now/CVE-2026-9411.md): SourceCodester Indian Invoicing System Invoice Generation IGST\_Invoice.php sql injection (CVSS 5.3, SourceCodester Indian Invoicing System)
- [CVE-2026-9410](https://cve.now/CVE-2026-9410.md): Sushmi-pal Invoice-System Profile Workflow profile improper authorization (CVSS 5.3, Sushmi-pal Invoice-System)
- [CVE-2026-9409](https://cve.now/CVE-2026-9409.md): Sushmi-pal Invoice-System User Management user improper authorization (CVSS 5.3, Sushmi-pal Invoice-System)
- [CVE-2026-9408](https://cve.now/CVE-2026-9408.md): Totolink A8000RU Web Management cstecgi.cgi setStaticDhcpRules os command injection (CVSS 9.3, Totolink A8000RU)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-05-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.