CVEs published May 26, 2026
275 CVEs were published on May 26, 2026: 23 critical, 94 high. 2 are now in CISA KEV.
- Published
- 275
- Critical
- 23
- High
- 94
- Medium
- 146
- Low
- 9
- Unrated
- 3
- Now in CISA KEV
- 2
- Fix available
- 141
Most affected products
- Joomla! Project Joomla! CMS
- 18
- IBM HTTP Server
- 8
- Apple macOS
- 7
- 1Panel-dev MaxKB
- 6
- Autodesk 3ds Max
- 5
- checkpoint Quantum Security Gateway
- 5
- lepture mistune · mistune
- 5
- NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2
- 5
- prolix-oc Lumiverse
- 5
- xyproto algernon · github.com/xyproto/algernon
- 5
Critical 23
- CVE-2026-44895GitLab MCP Server: SSE transport has no authentication and wildcard CORS, exposing all GitLab toolsyoda-digital mcp-gitlab-server · @yoda.digital/gitlab-mcp-s…
- CVE-2026-44444Lumiverse: Spindle extension install runs untrusted lifecycle scripts before security scanprolix-oc Lumiverse
- CVE-2026-44449Lumiverse: SMB `exists()` basename injection via smbclient `!cmd` escapeprolix-oc Lumiverse
- CVE-2026-44451Lumiverse: TSX component sandbox escape via DOM ref and string-split identifier bypassprolix-oc Lumiverse
- CVE-2026-44450Lumiverse: RCE via MCP stdio argument injectionprolix-oc Lumiverse
- CVE-2026-3660IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to Authentication BypassIBM Engineering Lifecycle Management
- CVE-2026-44668Faction: Unauthenticated Read, Modify, and Delete of Boilerplate Templatesfactionsecurity faction
- CVE-2026-9560Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary commands wOpenVPN Connect
- CVE-2026-9170IBM HTTP Server is affected by multiple vulnerabilitiesIBM HTTP Server
- CVE-2026-47202Kavita: Pre-Auth Account TakeoverKareadita Kavita
- CVE-2026-8633IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when using when using Web Server Plug-insIBM Web Server Plug-ins for WebSphere Application Server an…
- CVE-2026-7251Eppendorf BioFlo 320 Use of hard-coded passwordEppendorf BioFlo
- CVE-2026-46624Twenty: SQL Injection via the timeZone fieldtwentyhq twenty
- CVE-2026-48902Joomla! Core - [20260518] - Transport encryption downgrade for password and username reset linksJoomla! Project Joomla! CMS
- CVE-2026-45721Algernon: handler.lua discovery walks parent directories above the server rootxyproto algernon · github.com/xyproto/algernon
- CVE-2026-2264Server-Side Request Forgery and Credential Exfiltration in Google Cloud Apigee via SetIntegrationRequest Policy.Google Cloud Apigee-X
- CVE-2026-45247Mirasvit Cache Warmer for Magento < 1.11.12 PHP Object InjectionMirasvit Full Page Cache Warmer for Magento
- CVE-2026-4480Samba: samba: remote code execution in printing subsystem via unescaped job descriptionRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-7374Kubevirt: kubevirt virt-handler: privilege escalation and node compromise via symlink following vulnerabilitykubevirt · Red Hat Container Native Virtualization +1
- CVE-2026-9543Totolink N300RH Web Management cstecgi.cgi setPasswordCfg os command injectionTotolink N300RH
- CVE-2026-42496Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directoryBINGOS Archive::Tar
- CVE-2026-48686FastNetMon Community Edition through 1.2.9 contains a stack-based buffer overflow in the BGP NLRI (Network Layer Reachability Information) d
- CVE-2026-48689FastNetMon Community Edition through 1.2.9 contains an off-by-one heap-based buffer overflow in the dynamic_binary_buffer_t class (src/dynam
High 94
- CVE-2026-8606Server-Side Request Forgery in GitHub Enterprise Server via Advisory Package URL EndpointGitHub Enterprise Server
- CVE-2026-45298Dozzle: Pre-auth SSRF with response-body reflection via POST /api/notifications/test-webhook (default no-auth deploy)amir20 dozzle · github.com/amir20/dozzle
- CVE-2026-44985Dozzle: Cross-Site WebSocket Hijacking (CSWSH) on exec/attach endpoints bypasses authenticationamir20 dozzle · github.com/amir20/dozzle
- CVE-2026-44983smallbitvec: Safe API Triggered Heap Buffer Overflow via Integer Overflowservo smallbitvec · smallbitvec
- CVE-2025-46284A race condition was addressed with additional validation.Apple macOS
- CVE-2025-43306A logic issue was addressed with improved checks.Apple macOS
- CVE-2026-42013Gnutls: gnutls: certificate validation bypass due to oversized subject alternative namegnutls · Red Hat Enterprise Linux +6
- CVE-2026-42012Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sansgnutls · Red Hat Enterprise Linux +6
- CVE-2026-5260Gnutls: gnutls: information disclosure via heap overread in rsa key exchangegnutls · Red Hat Enterprise Linux +6
- CVE-2026-44966Velocity.js: Prototype Pollution in #set path assignmentshepherdwind velocity.js · velocityjs
- CVE-2026-44905Vanetza: Remote Denial of Service via Uncaught OER Encoding Exception in Cryptographic Verificationriebl vanetza
- CVE-2026-43988Vanetza: Remote Denial of Service via Uncaught Exception in ASN.1/OER Parsingriebl vanetza
- CVE-2026-44900epa4all-client: VAU Signature bypassoviva-ag epa4all-client · com.oviva.telematik epa4all-cl… +1
- CVE-2026-45574epa4all-client: TLS Certificate Validation Disabled in Productionoviva-ag epa4all-client · com.oviva.telematik epa4all-cl… +1
- CVE-2026-45575epa4all-client: Improper Verification of Cryptographic Signatureoviva-ag epa4all-client · com.oviva.telematik epa4all-cl… +1
- CVE-2025-14361WordPress Woocommerce Envato Affiliates plugin <= 1.2.1 - Settings Change vulnerabilityAA-Team Woocommerce Envato Affiliates
- CVE-2026-44209Banks: Critical Remote Code Execution (RCE) via Jinja2 SSTImasci banks · banks
- CVE-2026-44847MaxKB: Webhook Trigger Authentication Bypass1Panel-dev MaxKB
- CVE-2026-44843LangChain: Unsafe deserialization of attacker-controlled LangChain objects through overly broad `load()` allowlistslangchain-ai langchain · langchain-core
- CVE-2026-8676An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bonded device and creasilabs.com Simplicity SDK
- CVE-2026-44832Snipe-IT: Privilege Escalation via API Permissions Assignmentgrokability snipe-it · snipe/snipe-it
- CVE-2026-8890code100x Mobile API Authentication Bypass via Header Spoofingcode100x
- CVE-2026-3603IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to XML external entity injection (XXE) attackIBM Engineering Lifecycle Management
- CVE-2026-4051IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to Server Post-Auth Remote Code ExecutionIBM Engineering Lifecycle Management
- CVE-2026-44728Improper Control of Generation of Code when compiling specifically crafted malicious code with @babel/plugin-transform-modules-systemjsbabel · @babel plugin-transform-modules-systemjs +1
- CVE-2026-44669Faction: Stored XSS in Assessment Attachment Filename Preview Renderingfactionsecurity faction
- CVE-2026-44667Faction: Stored XSS in Remediation Verification Attachment Filename Preview Renderingfactionsecurity faction
- CVE-2026-24200NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause a use-after-free for stack memory.NVIDIA Virtual GPU Manager
- CVE-2026-24194NVIDIA Display Driver for Linux contains a vulnerability in a kernel mode layer handler, where a user could cause improper permission handliNVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2
- CVE-2026-24191NVIDIA Display Driver for Windows contains a vulnerability where an attacker could cause a time-of-check time-of-use issue.NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +3
- CVE-2026-24190NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause improper access to GNVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1
- CVE-2026-24193NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write.NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1
- CVE-2026-24196NVIDIA Display Driver for Linux contains a vulnerability where a user could cause an out-of-bounds read.NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2
- CVE-2026-24195NVIDIA Display Driver for Linux contains a vulnerability in UVM, where a user could cause improper input validation.NVIDIA Guest driver
- CVE-2026-8620IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when using when using Web Server Plug-insIBM Web Server Plug-ins for WebSphere Application Server an…
- CVE-2026-24192NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause an incorrect conversion between numeric types, leadinNVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2
- CVE-2026-24187NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free.NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +3
- CVE-2026-8835IBM HTTP Server is affected by multiple vulnerabilitiesIBM HTTP Server
- CVE-2026-8834IBM HTTP Server is affected by multiple vulnerabilitiesIBM HTTP Server
- CVE-2026-7454WRL File Parsing Memory Corruption in Autodesk 3ds MaxAutodesk 3ds Max
- CVE-2026-44706Chatwoot: SQL Injection in Conversation/Contact Filter API via Custom Attribute Valueschatwoot
- CVE-2026-7452WRL File Parsing Memory Corruption in Autodesk 3ds MaxAutodesk 3ds Max
- CVE-2026-7451TIF File Parsing Out-of-Bounds Write in Autodesk 3ds MaxAutodesk 3ds Max
- CVE-2026-44730OpenCTI: Privilege escalation via graphQL API abusable by organization admins, due to incorrect ACL on userEdit relationAddOpenCTI-Platform opencti · pycti
- CVE-2026-8855IBM HTTP Server is affected by multiple vulnerabilitiesIBM HTTP Server
- CVE-2026-8854IBM HTTP Server is affected by multiple vulnerabilitiesIBM HTTP Server
- CVE-2026-8856IBM HTTP Server is affected by multiple vulnerabilitiesIBM HTTP Server
- CVE-2026-44729Twenty: Stored Cross-Site Scripting via Unsanitized File Serving (Missing Content-Type/Content-Disposition Headers)twentyhq twenty
- CVE-2026-8850IBM HTTP Server is affected by multiple vulnerabilitiesIBM HTTP Server
- CVE-2026-44680MikroORM: SQL injection via runtime-controlled identifiers and JSON-path keysmikro-orm · @mikro-orm knex +3
- CVE-2026-48896Joomla! Core - [20260511] - MFA Authentication BypassJoomla! Project Joomla! CMS
- CVE-2026-40383Joomla! Core - [20260509] - LFI in HTMLView layout parameterJoomla! Project Joomla! CMS
- CVE-2026-48897Joomla! Core - [20260512] - MFA Authentication BypassJoomla! Project Joomla! CMS
- CVE-2026-48126Algernon: Host header path traversal in --domain mode reads files and runs Lua from parent dirxyproto algernon · github.com/xyproto/algernon
- CVE-2026-35223Joomla! Core - [20260508] - Improper access check in com_config webservice endpointsJoomla! Project Joomla! CMS
- CVE-2026-48904Joomla! Core - [20260514] - Privilege escalation through com_users webservice endpointsJoomla! Project Joomla! CMS
- CVE-2026-48898Joomla! Core - [20260513] - Privilege escalation through com_users batch taskJoomla! Project Joomla! CMS
- CVE-2026-48901Joomla! Core - [20260517] - Incorrect Cache Key Construction for InputFilter objectsJoomla! Project Joomla! CMS
- CVE-2026-45728Algernon: Single-file mode unconditionally enables debug modexyproto algernon · github.com/xyproto/algernon
- CVE-2026-43981Algernon: Race Condition in handle() shared LStatexyproto algernon
- CVE-2026-43982Algernon: Path traversal file write via savein()xyproto algernon
- CVE-2026-48864Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page dataRed Hat Enterprise Linux · Red Hat OpenShift Container P… +7
- CVE-2026-24162NVIDIA Transformers4Rec for Linux contains a vulnerability where an attacker could cause improper deserialization of untrusted data.NVIDIA Merlin Transformers4Rec
- CVE-2026-24212NVIDIA Isaac Launchable for Linux contains a vulnerability where sensitive information is transmitted in clear text.NVIDIA Isaac Launchable
- CVE-2026-43935e107: Host Header Injection in e107 password reset enables phishinge107inc e107
- CVE-2026-25112A high-severity vulnerability in the deployment of Genetec RabbitMQ that allows a privilege escalation attack.Genetec RabbitMQ · Genetec Mission Control +5
- CVE-2026-46368luci-app-https-dns-proxy Authenticated Command Injection via setInitActionmossdef-org luci-app-https-dns-proxy
- CVE-2026-42785OpenKM 6.3.12 Remote Code Execution via Administrative ScriptingOpenKM Community Edition · OpenKM Professional Edition
- CVE-2026-42425OpenKM 6.3.12 Unrestricted SQL Execution via DatabaseQueryOpenKM Community Edition · OpenKM Professional Edition
- CVE-2026-40034gitoxide - Command Injection via Partial .gitmodules Override in gix-submodulegitoxide · gix
- CVE-2026-40033FreeRDP - Heap-buffer-overflow in gdi_CacheToSurface via rectangle validation bypassFreeRDP
- CVE-2026-45082Karakeep has a SSRF Protection Bypass via Redirect Handlingkarakeep-app karakeep
- CVE-2026-48133Identity Awareness Captive Portal - Unauthenticated Local File Inclusioncheckpoint Quantum Security Gateway
- CVE-2026-48132VPN service may restart unexpectedly when processing IKE traffic over NAT-T 4500/UDPcheckpoint Quantum Security Gateway
- CVE-2026-48131VPND IKE Fragment Reassembly - Heap Out-of-Bounds Write via Sequence Number Zerocheckpoint Quantum Security Gateway
- CVE-2025-11482Allocation of Resources Without Limits or Throttling in the OPC-UA ServerB&R Industrial Automation PPT30 Operating System
- CVE-2026-25104A heap-based buffer overflow vulnerability exists in the LXF parsing functionality of MediaInfoLib (version(s): 26.01).MediaArea MediaInfoLib
- CVE-2026-25713A heap-based buffer overflow vulnerability exists in the ID3v2 parsing functionality of MediaInfoLib (version(s): 26.01).MediaArea MediaInfoLib
- CVE-2026-39661WordPress SW Core plugin <= 1.7.18 - Local File Inclusion vulnerabilityMagentech SW Core
- CVE-2026-8047Out-of-bounds Write in CODESYS ControlCODESYS Control RTE · CODESYS Control Win +13
- CVE-2026-8046Incorrect Authorization in CODESYS ControlCODESYS Control RTE · CODESYS Control Win +13
- CVE-2026-44469Incorrect Default Permissions in CODESYS Development SystemCODESYS Development System
- CVE-2026-44468Incorrect Default Permissions in CODESYS Development SystemCODESYS Development System
- CVE-2026-9496Versions of the package pacote from 11.2.7 and before 21.5.1 are vulnerable to Denial of Service (DoS) via the addGitSha function.pacote · org.webjars.npm:pacote
- CVE-2026-9538Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar headerBINGOS Archive::Tar
- CVE-2026-42497Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directoryBINGOS Archive::Tar
- CVE-2026-48687FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the Juniper router integration plugin.
- CVE-2026-48688FastNetMon Community Edition through 1.2.9 contains multiple out-of-bounds reads in the BGP MP_REACH_NLRI IPv6 attribute decoder.
- CVE-2026-48690FastNetMon Community Edition through 1.2.9 contains an integer overflow vulnerability in the packet capture buffer allocation.
- CVE-2026-48691FastNetMon Community Edition through 1.2.9 contains an integer overflow in the BGP AS_PATH attribute encoder.
- CVE-2026-48692FastNetMon Community Edition through 1.2.9 exposes a gRPC API server on port 50052 with no authentication mechanism.
- CVE-2026-48694FastNetMon Community Edition through 1.2.9 contains a configuration injection vulnerability in the Juniper router integration plugin.
- CVE-2026-48695FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the MikroTik router integration plugin.
- CVE-2026-48697FastNetMon Community Edition through 1.2.9 does not verify TLS certificates on outbound HTTPS connections.
Medium, low and unrated 158
- CVE-2026-9606itsourcecode Courier Management System manage_user.php sql injectionitsourcecode Courier Management System
- CVE-2026-9605GNU libredwg Dwgbmp Utility bits.c bit_read_RC heap-based overflowGNU libredwg
- CVE-2026-8647Crypt::ScryptKDF versions through 0.010 for Perl uses insecure random number source when no CSPRNG module is availableMIK Crypt::ScryptKDF
- CVE-2026-46740Mojolicious::Plugin::Statsd versions through 0.04 for Perl allowed metric injectionsRRWO Mojolicious::Plugin::Statsd
- CVE-2026-9604JeecgBoot AiragModelController access controlJeecgBoot
- CVE-2026-9603SourceCodester eDoc Doctor Appointment System delete-session.php authorizationSourceCodester eDoc Doctor Appointment System
- CVE-2026-48710Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checksKludex starlette · starlette
- CVE-2026-44213OpenTelemetry.Exporter.Instana bypasses TLS certificate validation when a proxy is configuredopen-telemetry opentelemetry-dotnet-contrib · OpenTelemetry…
- CVE-2025-43451A permissions issue was addressed by removing the vulnerable code.Apple macOS
- CVE-2025-46307A logic issue was addressed with improved restrictions.Apple macOS
- CVE-2025-46280An out-of-bounds read was addressed with improved bounds checking.Apple macOS
- CVE-2025-43289A logic issue was addressed with improved validation.Apple macOS
- CVE-2025-43290A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2026-44788SharpCompress: Directory traversal via directory entries in WriteToDirectory (zip slip variant)adamhathcock sharpcompress · SharpCompress
- CVE-2026-42015Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handlinggnutls · Red Hat Enterprise Linux +6
- CVE-2026-44903Prometheus: Stored XSS via crafted histogram bucket label values in the heatmap display of the old Prometheus web UIprometheus · github.com/prometheus/prometheus
- CVE-2026-9584code-projects Project Management System Login chk.php sql injectioncode-projects Project Management System
- CVE-2026-9583SourceCodester CET Automated Grading System with AI Predictive Analytics SQL index.php information exposureSourceCodester CET Automated Grading System with AI Predict…
- CVE-2026-47672epa4all-client: Unauthenticated REST API for Patient Record Writesoviva-ag epa4all-client · com.oviva.telematik:epa4all-rest-…
- CVE-2026-9582SourceCodester CET Automated Grading System with AI Predictive Analytics cross-site request forgerySourceCodester CET Automated Grading System with AI Predict…
- CVE-2026-44898Mistune TOC Anchor Injection XSSlepture mistune · mistune
- CVE-2026-44897Mistune Heading ID Attribute Injection XSSlepture mistune · mistune
- CVE-2026-44708Mistune Math Plugin XSS Escape Bypasslepture mistune · mistune
- CVE-2026-44899Mistune Image Directive CSS Injection Vulnerabilitylepture mistune · mistune
- CVE-2026-44896Mistune: XSS via unescaped figclass/figwidth in Figure directivelepture mistune · mistune
- CVE-2026-9581JeecgBoot add access controlJeecgBoot
- CVE-2026-42336MaxKB: SSRF Bypass via DNS Rebinding in MaxKB OSS URL Fetch1Panel-dev MaxKB
- CVE-2026-42337MaxKB: Broken Access Control in MaxKB OSS URL Fetch API1Panel-dev MaxKB
- CVE-2026-9580JeecgBoot selectDepart LoginController.selectDepart access controlJeecgBoot
- CVE-2026-45412MaxKB: Unauthenticated SSRF via Workflow Template Import1Panel-dev MaxKB
- CVE-2026-45413MaxKB: Unsalted MD5 Password Hashing1Panel-dev MaxKB
- CVE-2026-42335MaxKB: SSRF Bypass in MaxKB OSS URL Fetch due to URL Parsing Discrepancy1Panel-dev MaxKB
- CVE-2026-44443Lumiverse: Sign-up nonce race condition allows unauthorized account registrationprolix-oc Lumiverse
- CVE-2026-44844eml_parser: Recursion DoS via nested message/rfc822 attachmentsGOVCERT-LU eml_parser · eml-parser
- CVE-2026-48592Missing authorization check on save-job event handler in oban_weboban-bg oban_web
- CVE-2026-48593Unbounded range expansion in cron describe causes memory exhaustion in oban_weboban-bg oban_web
- CVE-2026-9579JeecgBoot SysUser userEdit user.getUsername access controlJeecgBoot
- CVE-2026-44836view_component: Preview Route Can Dispatch Inherited Helper MethodsViewComponent view_component · view_component
- CVE-2026-44837view_component: System Test Entry Point Path Check Allows Sibling Directory EscapeViewComponent view_component · view_component
- CVE-2026-44214eventsource-encoder: SSE event injection via unsanitized event and id fieldsrexxars eventsource-encoder · eventsource-encoder
- CVE-2026-25426WordPress Taxi Booking Manager for WooCommerce plugin <= 2.0.1 - Broken Access Control vulnerabilityMagepeople Taxi Booking Manager for WooCommerce
- CVE-2026-24520WordPress Tiktok Feed plugin <= 1.0.24 - Broken Access Control vulnerabilitybPlugins Tiktok Feed
- CVE-2026-44833Snipe-IT: Open redirect vulnerabilitygrokability snipe-it · snipe/snipe-it
- CVE-2026-25444WordPress WpBookingly plugin <= 1.2.9 - Broken Access Control vulnerabilityMagepeople WpBookingly
- CVE-2026-9575itsourcecode Student Transcript Processing System index.php sql injectionitsourcecode Student Transcript Processing System
- CVE-2026-27331WordPress WpTravelly plugin <= 2.1.5 - Broken Access Control vulnerabilityMagepeople WpTravelly
- CVE-2026-44831Snipe-IT: XSS vulnerability in component notesgrokability snipe-it · snipe/snipe-it
- CVE-2026-9574itsourcecode Student Transcript Processing System trans.php sql injectionitsourcecode Student Transcript Processing System
- CVE-2026-9573itsourcecode Student Transcript Processing System index.php sql injectionitsourcecode Student Transcript Processing System
- CVE-2026-9572GPAC MP4Box media.c Media_GetSample memory leakGPAC
- CVE-2026-9568ThingsBoard YAML provision getGatewayDockerComposeFile code injectionThingsBoard
- CVE-2026-42448wormhole receive, with --output pointing at an existing directory can be path-traversedmagic-wormhole
- CVE-2026-9567GPAC MP4Box isom_intern.c MergeFragment null pointer dereferenceGPAC
- CVE-2026-41164nuts-node: JWT type confusion in v1 access token introspection allows VP replay as access tokennuts-foundation nuts-node · github.com/nuts-foundation/nuts…
- CVE-2026-44776Kavita: IDOR in /api/Download/*Kareadita Kavita
- CVE-2026-44775Kavita: No authentication at /api/Reader/imageKareadita Kavita
- CVE-2025-33221NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel driver, where a user could cause an incorrect permission NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2
- CVE-2026-24201NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause an out-of-bound access.NVIDIA Virtual GPU Manager
- CVE-2026-44749Information Disclosure vulnerability in SAP GatewaySAP_SE SAP Gateway
- CVE-2026-24197NVIDIA Display Driver for Linux contains a vulnerability in the Multi-Instance GPU (MIG) partition management, where an insecure default iniNVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2
- CVE-2026-24199NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering compileNVIDIA GeForce · NVIDIA RTX, Quadro, NVS +3
- CVE-2026-24198NVIDIA GPU Display Driver for Linux contains a vulnerability where an advanced attacker could use a race condition to leak sensitive memoryNVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1
- CVE-2026-24182NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could leak held driver locks.NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +3
- CVE-2026-44707Chatwoot: Pre-Account Takeover via OAuth on Unconfirmed Accountschatwoot
- CVE-2026-7453WRL File Parsing Memory Exhaustion in Autodesk 3ds MaxAutodesk 3ds Max
- CVE-2026-7450PAR File Parsing NULL Pointer Dereference in Autodesk 3ds MaxAutodesk 3ds Max
- CVE-2026-9566teableio teable Sign-up LoginPage.tsx cross site scriptingteableio teable
- CVE-2026-8852IBM HTTP Server is affected by multiple vulnerabilitiesIBM HTTP Server
- CVE-2026-35221Joomla! Core - [20260506] - Authenticated blind SQLi in com_finderJoomla! Project Joomla! CMS
- CVE-2026-48903Joomla! Framework - [20260519] - Inadequate content filtering within the checkAttribute filter code.Joomla! Project Joomla! Framework Filter package
- CVE-2026-35220Joomla! Core - [20260505] - CSRF in user activation endpointJoomla! Project Joomla! CMS
- CVE-2026-35222Joomla! Core - [20260507] - Authenticated blind SQLi in com_tagsJoomla! Project Joomla! CMS
- CVE-2026-9565haojing8312 WorkClaw Blacklist bash.rs is_dangerous os command injectionhaojing8312 WorkClaw
- CVE-2026-40384Joomla! Core - [20260510] - Path traversal in com_media webservice endpointJoomla! Project Joomla! CMS
- CVE-2026-48905Joomla! Framework - [20260520] - Inadequate content filtering within the cleanAttributes filter code.Joomla! Project Joomla! Framework Filter package
- CVE-2026-25901Joomla! Core - [20260502] - XSS in com_associationsJoomla! Project Joomla! CMS
- CVE-2026-48899Joomla! Core - [20260515] - Incorrect Access Control in sample data pluginsJoomla! Project Joomla! CMS
- CVE-2026-48900Joomla! Core - [20260516] - Incorrect Access Control in com_schedulerJoomla! Project Joomla! CMS
- CVE-2026-25900Joomla! Core - [20260501] - XSS in feed modulesJoomla! Project Joomla! CMS
- CVE-2026-30895Joomla! Core - [20260504] - XSS in readmore linksJoomla! Project Joomla! CMS
- CVE-2026-30894Joomla! Core - [20260503] - XSS in com_contenthistoryJoomla! Project Joomla! CMS
- CVE-2026-46431Algernon: Auto-refresh SSE event server sets Access-Control-Allow-Origin: *xyproto algernon · github.com/xyproto/algernon
- CVE-2026-46430Algernon: Auto-refresh SSE event server binds to all interfaces by default on Linux/macOSxyproto algernon · github.com/xyproto/algernon
- CVE-2026-9564SourceCodester/oretnom23 Hospitals Patient Records Management System view_patient cross site scriptingSourceCodester Hospitals Patient Records Management System…
- CVE-2026-47716Bugsink: Issue bulk actions can affect another project’s issue if its UUID is knownbugsink
- CVE-2026-47715Bugsink: Issue event views can show an event from another project if its UUID is knownbugsink
- CVE-2026-47728Bugsink: Project scoping missing in sourcemap and debug-file lookupbugsink
- CVE-2026-45836Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()Linux
- CVE-2026-45835Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb()Linux
- CVE-2026-45834Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()Linux
- CVE-2026-44502Bugsink: SSRF bypass in `validate_webhook_url`bugsink
- CVE-2026-44314Traccar: Missing edit authorization on device image upload allows read-only users to write filestraccar
- CVE-2025-36221Vulnerabilities exists in IBM Cloud Pak for Data System (CPDS 1.0) - Cyclops.IBM Cloud Pak for Data System - Cyclops
- CVE-2025-36220Vulnerabilities exists in IBM Cloud Pak for Data System (CPDS 1.0) - Cyclops.IBM Cloud Pak for Data System - Cyclops
- CVE-2025-36126IBM Cognos Analytics is affected by Cross-site scripting.IBM Cognos Analytics · IBM Cognos Transformer
- CVE-2025-36148IBM Financial Transaction Manager for SWIFT Services for Multiplatforms is vulnerable to cross-site scripting.IBM Financial Transaction Manager for SWIFT Services for Mu…
- CVE-2025-36145Multiple Vulnerabilities in watsonx.dataIBM watsonx.data
- CVE-2025-14290IBM webMethods Integration Sever is vulnerable to server-side request forgeryIBM webMethods Integration (on prem) -Integration Server
- CVE-2026-44723Vowpal Wabbit: Shell injection via crafted PR title in python_checks.yml allows arbitrary command execution on CI runnerVowpalWabbit vowpal_wabbit
- CVE-2025-13755IBM® Db2® is vulnerable to credential exposure in db2diag when executing specific testcase bucketsIBM Db2
- CVE-2026-9562sambitraj STUDENT-MANAGEMENT-SYSTEM Dashboard access controlsambitraj STUDENT-MANAGEMENT-SYSTEM
- CVE-2026-46620e107: CSRF in comment.php moderation endpoints via token-optional validation in session_handler::check()e107inc e107
- CVE-2026-43934e107: Broken Access Control in e107 comment edit allows cross-user comment modificatione107inc e107
- CVE-2026-43936e107: Server-Side Request Forgery (SSRF) in the remote file fetchere107inc e107
- CVE-2026-40564Apache Flink Kubernetes Operator: Server-Side Request Forgery and local file access in Kubernetes OperatorApache Software Foundation Apache Flink Kubernetes Operator
- CVE-2026-41917OpenKM 6.3.12 Local File Inclusion via Admin ScriptingOpenKM Community Edition · OpenKM Professional Edition
- CVE-2026-41401libyang - Heap Use-After-Free Write in XML Metadata Parsinglibyang
- CVE-2026-9552Das Parking Management System 停车场管理系统 Search API Endpoint sql injectionDas Parking Management System 停车场管理系统
- CVE-2026-9551Das Parking Management System 停车场管理系统 API Endpoint ExportParkingRecords xp_cmdshell sql injectionDas Parking Management System 停车场管理系统
- CVE-2026-9550Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform upfile path traversalAcrel Electrical EEMS Enterprise Power Operation and Mainte…
- CVE-2026-48136Authenticated Administrator Role-Based Access Control Bypass in Compliancecheckpoint Quantum Security Management
- CVE-2026-48135HTTP service can incorrectly process malformed HTTP requestscheckpoint Quantum Security Gateway
- CVE-2026-48134SQL injection issue in UserCheck Portal when DLP Software Blade is activecheckpoint Quantum Security Gateway
- CVE-2026-9544Shenzhen Sixun Software Sixun Shanghui Group Business Management System PayConfig sql injectionShenzhen Sixun Software Sixun Shanghui Group Business Manag…
- CVE-2026-9542CodeAstro Leave Management System add_staff.php sql injectionCodeAstro Leave Management System
- CVE-2026-8479IEC 60870-5-104 used in bidirectional mode in RTU500 is vulnerable for a NULL pointer dereferencing, if a specially crafted sequence of messHitachi Energy RTU500 series CMU firmware
- CVE-2026-9541Squirrel Cnut File sqobject.cpp ReadObject heap-based overflowSquirrel
- CVE-2026-7310A heap-based buffer overflow vulnerability exists in XML parser functionality in the HiDraw.Hitachi Energy MACH HiDraw
- CVE-2026-8174Cross-site Request ForgeryZohocorp Zoho Mail wordpress plugin
- CVE-2026-9540vllm-project vllm OpenAI-compatible Serving Path denial of servicevllm-project vllm · vllm
- CVE-2026-44410Function Abusement Vulnerability in ZTE ZXUniPOS NDS-LTEZTE ZXUniPOS NDS-LTE
- CVE-2026-24590WordPress Paid Videochat Turnkey Site plugin <= 7.3.23 - Broken Access Control vulnerabilityVideoWhisper.com Paid Videochat Turnkey Site
- CVE-2026-24638WordPress RepairBuddy plugin <= 4.1121 - Broken Access Control vulnerabilityWebful Creations RepairBuddy
- CVE-2026-27427WordPress Geo Mashup plugin <= 1.13.18 - Cross Site Scripting (XSS) vulnerabilityDylan Kuhn Geo Mashup
- CVE-2026-39642WordPress Nyla theme <= 1.7 - Arbitrary Shortcode Execution vulnerabilitySpabRice Nyla
- CVE-2026-39655WordPress Mayosis Core plugin <= 5.4.7 - Broken Access Control vulnerabilityTeconceTheme Mayosis Core
- CVE-2026-3314Missing Password Masking in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer and Hitachi Ops Center Analyzer viewpointHitachi Ops Center Analyzer · Hitachi Infrastructure Analyt…
- CVE-2026-9534Totolink CA750-PoE Setting cstecgi.cgi setWiFiWpsConfig os command injectionTotolink CA750-PoE
- CVE-2026-9533Totolink CA750-PoE Setting cstecgi.cgi recvUpgradeNewFw os command injectionTotolink CA750-PoE
- CVE-2026-9532Totolink CA750-PoE Setting cstecgi.cgi setUploadUserData os command injectionTotolink CA750-PoE
- CVE-2026-9495Versions of the package @koa/router from 14.0.0 and before 15.0.0 are vulnerable to Access Control Bypass due to the middleware being silent@koa/router
- CVE-2026-9531Totolink CA750-PoE Setting cstecgi.cgi setUpgradeUboot os command injectionTotolink CA750-PoE
- CVE-2026-9530GNU LibreDWG Dwgbmp Utility decode.c read_2004_compressed_section out-of-boundsGNU LibreDWG
- CVE-2026-9529GNU LibreDWG Dwggrep Utility dwggrep.c match_BLOCK_HEADER null pointer dereferenceGNU LibreDWG
- CVE-2026-9528itsourcecode Electronic Judging System delete_judge.php sql injectionitsourcecode Electronic Judging System
- CVE-2026-9527itsourcecode Electronic Judging System judges.php cross site scriptingitsourcecode Electronic Judging System
- CVE-2026-9526itsourcecode Electronic Judging System edit_team.php sql injectionitsourcecode Electronic Judging System
- CVE-2026-9525itsourcecode Electronic Judging System edit_judge.php sql injectionitsourcecode Electronic Judging System
- CVE-2026-9524xianrendzw EasyReport REST Endpoint execute sql injectionxianrendzw EasyReport
- CVE-2026-9523Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform getCalcmeterDetailDayListTree sql injectionAcrel Electrical EEMS Enterprise Power Operation and Mainte…
- CVE-2026-9521fraillt bitsery std_smart_ptr.h loadFromSharedState improper validation of specified type of inputfraillt bitsery
- CVE-2026-4795A missing authorization vulnerability in Zyxel GS1200-5v3 firmware versions through 1.00(ACPS.2)C0, GS1200-8v3 firmware versions through 1.0Zyxel GS1200-5v3 firmware · Zyxel GS1200-8v3 firmware +3
- CVE-2026-9520blitz-js blitz Sign-in LoginForm.tsx cross site scriptingblitz-js blitz · blitz
- CVE-2025-71310The GDPR cookies module for Backdrop CMS (before 1.x-1.3.5) doesn't sufficiently protect visitors from Cross Site Scripting (XSS) if a malBackdropCMS GDPR cookies module for Backdrop CMS
- CVE-2026-9519stonith404 pingvin-share Sign-in Auto-Redirect signIn.tsx getServerSideProps cross site scriptingstonith404 pingvin-share
- CVE-2026-9518hemant6488 CodeIgniter-StudentManagementSystem Students Controller view_students.php addStudent cross site scriptinghemant6488 CodeIgniter-StudentManagementSystem
- CVE-2026-9517hemant6488 CodeIgniter-StudentManagementSystem Student Management addStudentView access controlhemant6488 CodeIgniter-StudentManagementSystem
- CVE-2025-68708SailingLab AppLock (aka com.alpha.applock) 4.3.8 for Android allows a local attacker with physical access to bypass the PIN lock.
- CVE-2025-68709SailingLab AppLock (aka com.alpha.applock) 4.3.8 for Android allows a local attacker to trigger arbitrary JavaScript execution via BrowserMa
- CVE-2025-68710Easyelife App lock (aka Fingerprint,Applock or locker.app.safe.applocker) 1.9.2 for Android allows a local attacker with physical access to
- CVE-2025-68711AppLockZ App Lock and Fingerprint Lock (applock.passwordfingerprint.applockz) 4.2.11 for Android allows a local attacker with physical acces
- CVE-2026-36239PbootCMS v.3.2.11 contains a code injection vulnerability in its site configuration functionality
- CVE-2026-38587An Insecure Direct Object Reference (IDOR) vulnerability was discovered in ONLYOFFICE DocSpace before 3.2.1.
- CVE-2026-48683FastNetMon Community Edition through 1.2.9 contains an out-of-bounds read vulnerability in the NetFlow v9 data flowset processor.
- CVE-2026-48684FastNetMon Community Edition through 1.2.9 contains an out-of-bounds read in the NetFlow v9 options template parser.
- CVE-2026-48685FastNetMon Community Edition through 1.2.9 has out-of-bounds memory access because it incorrectly parses BGP path attributes with the extend
- CVE-2026-48693FastNetMon Community Edition through 1.2.9 is vulnerable to a local symlink attack via predictable file paths in /tmp.
- CVE-2026-48696FastNetMon Community Edition through 1.2.9 has a buffer overflow, a different vulnerability than CVE-2026-48686 and CVE-2026-48689.