# CVEs published 2026-05-26

275 CVEs were published on May 26, 2026: 23 critical, 94 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2026-8606](https://cve.now/CVE-2026-8606.md): Server-Side Request Forgery in GitHub Enterprise Server via Advisory Package URL Endpoint (CVSS 7.0, GitHub Enterprise Server)
- [CVE-2026-9606](https://cve.now/CVE-2026-9606.md): itsourcecode Courier Management System manage\_user.php sql injection (CVSS 6.9, itsourcecode Courier Management System)
- [CVE-2026-9605](https://cve.now/CVE-2026-9605.md): GNU libredwg Dwgbmp Utility bits.c bit\_read\_RC heap-based overflow (CVSS 6.9, GNU libredwg)
- [CVE-2026-8647](https://cve.now/CVE-2026-8647.md): Crypt::ScryptKDF versions through 0.010 for Perl uses insecure random number source when no CSPRNG module is available (CVSS 4.8, MIK Crypt::ScryptKDF)
- [CVE-2026-46740](https://cve.now/CVE-2026-46740.md): Mojolicious::Plugin::Statsd versions through 0.04 for Perl allowed metric injections (CVSS 5.3, RRWO Mojolicious::Plugin::Statsd)
- [CVE-2026-9604](https://cve.now/CVE-2026-9604.md): JeecgBoot AiragModelController access control (CVSS 5.3, JeecgBoot)
- [CVE-2026-45298](https://cve.now/CVE-2026-45298.md): Dozzle: Pre-auth SSRF with response-body reflection via POST /api/notifications/test-webhook (default no-auth deploy) (CVSS 8.6, amir20 dozzle · github.com/amir20/dozzle)
- [CVE-2026-9603](https://cve.now/CVE-2026-9603.md): SourceCodester eDoc Doctor Appointment System delete-session.php authorization (CVSS 6.9, SourceCodester eDoc Doctor Appointment System)
- [CVE-2026-44985](https://cve.now/CVE-2026-44985.md): Dozzle: Cross-Site WebSocket Hijacking (CSWSH) on exec/attach endpoints bypasses authentication (CVSS 8.7, amir20 dozzle · github.com/amir20/dozzle)
- [CVE-2026-48710](https://cve.now/CVE-2026-48710.md): Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks (CVSS 6.5, KEV, Kludex starlette · starlette)
- [CVE-2026-44983](https://cve.now/CVE-2026-44983.md): smallbitvec: Safe API Triggered Heap Buffer Overflow via Integer Overflow (CVSS 7.3, servo smallbitvec · smallbitvec)
- [CVE-2026-44213](https://cve.now/CVE-2026-44213.md): OpenTelemetry.Exporter.Instana bypasses TLS certificate validation when a proxy is configured (CVSS 6.5, open-telemetry opentelemetry-dotnet-contrib · OpenTelemetry…)
- [CVE-2025-43451](https://cve.now/CVE-2025-43451.md): A permissions issue was addressed by removing the vulnerable code. (CVSS 5.5, Apple macOS)
- [CVE-2025-46307](https://cve.now/CVE-2025-46307.md): A logic issue was addressed with improved restrictions. (CVSS 5.5, Apple macOS)
- [CVE-2025-46280](https://cve.now/CVE-2025-46280.md): An out-of-bounds read was addressed with improved bounds checking. (CVSS 5.5, Apple macOS)
- [CVE-2025-43289](https://cve.now/CVE-2025-43289.md): A logic issue was addressed with improved validation. (CVSS 5.5, Apple macOS)
- [CVE-2025-43290](https://cve.now/CVE-2025-43290.md): A permissions issue was addressed with additional restrictions. (CVSS 5.5, Apple macOS)
- [CVE-2025-46284](https://cve.now/CVE-2025-46284.md): A race condition was addressed with additional validation. (CVSS 7.0, Apple macOS)
- [CVE-2025-43306](https://cve.now/CVE-2025-43306.md): A logic issue was addressed with improved checks. (CVSS 7.8, Apple macOS)
- [CVE-2026-44788](https://cve.now/CVE-2026-44788.md): SharpCompress: Directory traversal via directory entries in WriteToDirectory (zip slip variant) (CVSS 5.9, adamhathcock sharpcompress · SharpCompress)
- [CVE-2026-42015](https://cve.now/CVE-2026-42015.md): Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling (CVSS 5.3, gnutls · Red Hat Enterprise Linux +6)
- [CVE-2026-42013](https://cve.now/CVE-2026-42013.md): Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name (CVSS 8.2, gnutls · Red Hat Enterprise Linux +6)
- [CVE-2026-42012](https://cve.now/CVE-2026-42012.md): Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans (CVSS 7.1, gnutls · Red Hat Enterprise Linux +6)
- [CVE-2026-5260](https://cve.now/CVE-2026-5260.md): Gnutls: gnutls: information disclosure via heap overread in rsa key exchange (CVSS 8.2, gnutls · Red Hat Enterprise Linux +6)
- [CVE-2026-44903](https://cve.now/CVE-2026-44903.md): Prometheus: Stored XSS via crafted histogram bucket label values in the heatmap display of the old Prometheus web UI (CVSS 5.1, prometheus · github.com/prometheus/prometheus)
- [CVE-2026-44966](https://cve.now/CVE-2026-44966.md): Velocity.js: Prototype Pollution in #set path assignment (CVSS 8.3, shepherdwind velocity.js · velocityjs)
- [CVE-2026-44905](https://cve.now/CVE-2026-44905.md): Vanetza: Remote Denial of Service via Uncaught OER Encoding Exception in Cryptographic Verification (CVSS 7.5, riebl vanetza)
- [CVE-2026-43988](https://cve.now/CVE-2026-43988.md): Vanetza: Remote Denial of Service via Uncaught Exception in ASN.1/OER Parsing (CVSS 7.5, riebl vanetza)
- [CVE-2026-9584](https://cve.now/CVE-2026-9584.md): code-projects Project Management System Login chk.php sql injection (CVSS 6.9, code-projects Project Management System)
- [CVE-2026-44895](https://cve.now/CVE-2026-44895.md): GitLab MCP Server: SSE transport has no authentication and wildcard CORS, exposing all GitLab tools (CVSS 9.2, yoda-digital mcp-gitlab-server · @yoda.digital/gitlab-mcp-s…)
- [CVE-2026-44900](https://cve.now/CVE-2026-44900.md): epa4all-client: VAU Signature bypass (CVSS 8.1, oviva-ag epa4all-client · com.oviva.telematik epa4all-cl… +1)
- [CVE-2026-45574](https://cve.now/CVE-2026-45574.md): epa4all-client: TLS Certificate Validation Disabled in Production (CVSS 8.1, oviva-ag epa4all-client · com.oviva.telematik epa4all-cl… +1)
- [CVE-2026-45575](https://cve.now/CVE-2026-45575.md): epa4all-client: Improper Verification of Cryptographic Signature (CVSS 7.4, oviva-ag epa4all-client · com.oviva.telematik epa4all-cl… +1)
- [CVE-2026-9583](https://cve.now/CVE-2026-9583.md): SourceCodester CET Automated Grading System with AI Predictive Analytics SQL index.php information exposure (CVSS 5.3, SourceCodester CET Automated Grading System with AI Predict…)
- [CVE-2026-47672](https://cve.now/CVE-2026-47672.md): epa4all-client: Unauthenticated REST API for Patient Record Writes (CVSS 6.5, oviva-ag epa4all-client · com.oviva.telematik:epa4all-rest-…)
- [CVE-2025-14361](https://cve.now/CVE-2025-14361.md): WordPress Woocommerce Envato Affiliates plugin \<= 1.2.1 - Settings Change vulnerability (CVSS 7.1, AA-Team Woocommerce Envato Affiliates)
- [CVE-2026-44209](https://cve.now/CVE-2026-44209.md): Banks: Critical Remote Code Execution (RCE) via Jinja2 SSTI (CVSS 7.5, masci banks · banks)
- [CVE-2026-9582](https://cve.now/CVE-2026-9582.md): SourceCodester CET Automated Grading System with AI Predictive Analytics cross-site request forgery (CVSS 5.3, SourceCodester CET Automated Grading System with AI Predict…)
- [CVE-2026-44898](https://cve.now/CVE-2026-44898.md): Mistune TOC Anchor Injection XSS (CVSS 6.1, lepture mistune · mistune)
- [CVE-2026-44897](https://cve.now/CVE-2026-44897.md): Mistune Heading ID Attribute Injection XSS (CVSS 6.1, lepture mistune · mistune)
- [CVE-2026-44708](https://cve.now/CVE-2026-44708.md): Mistune Math Plugin XSS Escape Bypass (CVSS 6.1, lepture mistune · mistune)
- [CVE-2026-44899](https://cve.now/CVE-2026-44899.md): Mistune Image Directive CSS Injection Vulnerability (CVSS 4.7, lepture mistune · mistune)
- [CVE-2026-44896](https://cve.now/CVE-2026-44896.md): Mistune: XSS via unescaped figclass/figwidth in Figure directive (CVSS 5.3, lepture mistune · mistune)
- [CVE-2026-9581](https://cve.now/CVE-2026-9581.md): JeecgBoot add access control (CVSS 5.3, JeecgBoot)
- [CVE-2026-42336](https://cve.now/CVE-2026-42336.md): MaxKB: SSRF Bypass via DNS Rebinding in MaxKB OSS URL Fetch (CVSS 5.1, 1Panel-dev MaxKB)
- [CVE-2026-42337](https://cve.now/CVE-2026-42337.md): MaxKB: Broken Access Control in MaxKB OSS URL Fetch API (CVSS 5.3, 1Panel-dev MaxKB)
- [CVE-2026-44847](https://cve.now/CVE-2026-44847.md): MaxKB: Webhook Trigger Authentication Bypass (CVSS 7.5, 1Panel-dev MaxKB)
- [CVE-2026-9580](https://cve.now/CVE-2026-9580.md): JeecgBoot selectDepart LoginController.selectDepart access control (CVSS 6.9, JeecgBoot)
- [CVE-2026-45412](https://cve.now/CVE-2026-45412.md): MaxKB: Unauthenticated SSRF via Workflow Template Import (CVSS 6.3, 1Panel-dev MaxKB)
- [CVE-2026-45413](https://cve.now/CVE-2026-45413.md): MaxKB: Unsalted MD5 Password Hashing (CVSS 6.9, 1Panel-dev MaxKB)
- [CVE-2026-42335](https://cve.now/CVE-2026-42335.md): MaxKB: SSRF Bypass in MaxKB OSS URL Fetch due to URL Parsing Discrepancy (CVSS 6.3, 1Panel-dev MaxKB)
- [CVE-2026-44443](https://cve.now/CVE-2026-44443.md): Lumiverse: Sign-up nonce race condition allows unauthorized account registration (CVSS 4.8, prolix-oc Lumiverse)
- [CVE-2026-44444](https://cve.now/CVE-2026-44444.md): Lumiverse: Spindle extension install runs untrusted lifecycle scripts before security scan (CVSS 9.1, prolix-oc Lumiverse)
- [CVE-2026-44449](https://cve.now/CVE-2026-44449.md): Lumiverse: SMB \`exists()\` basename injection via smbclient \`!cmd\` escape (CVSS 9.1, prolix-oc Lumiverse)
- [CVE-2026-44451](https://cve.now/CVE-2026-44451.md): Lumiverse: TSX component sandbox escape via DOM ref and string-split identifier bypass (CVSS 9.3, prolix-oc Lumiverse)
- [CVE-2026-44450](https://cve.now/CVE-2026-44450.md): Lumiverse: RCE via MCP stdio argument injection (CVSS 9.9, prolix-oc Lumiverse)
- [CVE-2026-44844](https://cve.now/CVE-2026-44844.md): eml\_parser: Recursion DoS via nested message/rfc822 attachments (CVSS 6.3, GOVCERT-LU eml\_parser · eml-parser)
- [CVE-2026-44843](https://cve.now/CVE-2026-44843.md): LangChain: Unsafe deserialization of attacker-controlled LangChain objects through overly broad \`load()\` allowlists (CVSS 8.2, langchain-ai langchain · langchain-core)
- [CVE-2026-48592](https://cve.now/CVE-2026-48592.md): Missing authorization check on save-job event handler in oban\_web (CVSS 5.3, oban-bg oban\_web)
- [CVE-2026-48593](https://cve.now/CVE-2026-48593.md): Unbounded range expansion in cron describe causes memory exhaustion in oban\_web (CVSS 5.9, oban-bg oban\_web)
- [CVE-2026-9579](https://cve.now/CVE-2026-9579.md): JeecgBoot SysUser userEdit user.getUsername access control (CVSS 5.3, JeecgBoot)
- [CVE-2026-44836](https://cve.now/CVE-2026-44836.md): view\_component: Preview Route Can Dispatch Inherited Helper Methods (CVSS 6.5, ViewComponent view\_component · view\_component)
- [CVE-2026-44837](https://cve.now/CVE-2026-44837.md): view\_component: System Test Entry Point Path Check Allows Sibling Directory Escape (CVSS 5.9, ViewComponent view\_component · view\_component)
- [CVE-2026-8676](https://cve.now/CVE-2026-8676.md): An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bonded device and crea (CVSS 8.8, silabs.com Simplicity SDK)
- [CVE-2026-44214](https://cve.now/CVE-2026-44214.md): eventsource-encoder: SSE event injection via unsanitized event and id fields (CVSS 5.8, rexxars eventsource-encoder · eventsource-encoder)
- [CVE-2026-25426](https://cve.now/CVE-2026-25426.md): WordPress Taxi Booking Manager for WooCommerce plugin \<= 2.0.1 - Broken Access Control vulnerability (CVSS 5.3, Magepeople Taxi Booking Manager for WooCommerce)
- [CVE-2026-24520](https://cve.now/CVE-2026-24520.md): WordPress Tiktok Feed plugin \<= 1.0.24 - Broken Access Control vulnerability (CVSS 4.3, bPlugins Tiktok Feed)
- [CVE-2026-44833](https://cve.now/CVE-2026-44833.md): Snipe-IT: Open redirect vulnerability (CVSS 5.9, grokability snipe-it · snipe/snipe-it)
- [CVE-2026-25444](https://cve.now/CVE-2026-25444.md): WordPress WpBookingly plugin \<= 1.2.9 - Broken Access Control vulnerability (CVSS 4.3, Magepeople WpBookingly)
- [CVE-2026-9575](https://cve.now/CVE-2026-9575.md): itsourcecode Student Transcript Processing System index.php sql injection (CVSS 6.9, itsourcecode Student Transcript Processing System)
- [CVE-2026-44832](https://cve.now/CVE-2026-44832.md): Snipe-IT: Privilege Escalation via API Permissions Assignment (CVSS 8.7, grokability snipe-it · snipe/snipe-it)
- [CVE-2026-27331](https://cve.now/CVE-2026-27331.md): WordPress WpTravelly plugin \<= 2.1.5 - Broken Access Control vulnerability (CVSS 6.3, Magepeople WpTravelly)
- [CVE-2026-44831](https://cve.now/CVE-2026-44831.md): Snipe-IT: XSS vulnerability in component notes (CVSS 4.8, grokability snipe-it · snipe/snipe-it)
- [CVE-2026-9574](https://cve.now/CVE-2026-9574.md): itsourcecode Student Transcript Processing System trans.php sql injection (CVSS 6.9, itsourcecode Student Transcript Processing System)
- [CVE-2026-9573](https://cve.now/CVE-2026-9573.md): itsourcecode Student Transcript Processing System index.php sql injection (CVSS 6.9, itsourcecode Student Transcript Processing System)
- [CVE-2026-9572](https://cve.now/CVE-2026-9572.md): GPAC MP4Box media.c Media\_GetSample memory leak (CVSS 4.8, GPAC)
- [CVE-2026-3660](https://cve.now/CVE-2026-3660.md): IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to Authentication Bypass (CVSS 9.8, IBM Engineering Lifecycle Management)
- [CVE-2026-8890](https://cve.now/CVE-2026-8890.md): code100x Mobile API Authentication Bypass via Header Spoofing (CVSS 8.2, code100x)
- [CVE-2026-3603](https://cve.now/CVE-2026-3603.md): IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to XML external entity injection (XXE) attack (CVSS 7.1, IBM Engineering Lifecycle Management)
- [CVE-2026-4051](https://cve.now/CVE-2026-4051.md): IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to Server Post-Auth Remote Code Execution (CVSS 7.2, IBM Engineering Lifecycle Management)
- [CVE-2026-9568](https://cve.now/CVE-2026-9568.md): ThingsBoard YAML provision getGatewayDockerComposeFile code injection (CVSS 2.3, ThingsBoard)
- [CVE-2026-42448](https://cve.now/CVE-2026-42448.md): wormhole receive, with --output pointing at an existing directory can be path-traversed (CVSS 3.5, magic-wormhole)
- [CVE-2026-44728](https://cve.now/CVE-2026-44728.md): Improper Control of Generation of Code when compiling specifically crafted malicious code with @babel/plugin-transform-modules-systemjs (CVSS 8.2, babel · @babel plugin-transform-modules-systemjs +1)
- [CVE-2026-9567](https://cve.now/CVE-2026-9567.md): GPAC MP4Box isom\_intern.c MergeFragment null pointer dereference (CVSS 4.8, GPAC)
- [CVE-2026-44668](https://cve.now/CVE-2026-44668.md): Faction: Unauthenticated Read, Modify, and Delete of Boilerplate Templates (CVSS 9.8, factionsecurity faction)
- [CVE-2026-44669](https://cve.now/CVE-2026-44669.md): Faction: Stored XSS in Assessment Attachment Filename Preview Rendering (CVSS 8.7, factionsecurity faction)
- [CVE-2026-44667](https://cve.now/CVE-2026-44667.md): Faction: Stored XSS in Remediation Verification Attachment Filename Preview Rendering (CVSS 8.7, factionsecurity faction)
- [CVE-2026-9560](https://cve.now/CVE-2026-9560.md): Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary commands w (CVSS 9.4, OpenVPN Connect)
- [CVE-2026-41164](https://cve.now/CVE-2026-41164.md): nuts-node: JWT type confusion in v1 access token introspection allows VP replay as access token (CVSS 4.4, nuts-foundation nuts-node · github.com/nuts-foundation/nuts…)
- [CVE-2026-9170](https://cve.now/CVE-2026-9170.md): IBM HTTP Server is affected by multiple vulnerabilities (CVSS 9.8, IBM HTTP Server)
- [CVE-2026-47202](https://cve.now/CVE-2026-47202.md): Kavita: Pre-Auth Account Takeover (CVSS 9.3, Kareadita Kavita)
- [CVE-2026-44776](https://cve.now/CVE-2026-44776.md): Kavita: IDOR in /api/Download/\* (CVSS 5.9, Kareadita Kavita)
- [CVE-2026-44775](https://cve.now/CVE-2026-44775.md): Kavita: No authentication at /api/Reader/image (CVSS 6.9, Kareadita Kavita)
- [CVE-2025-33221](https://cve.now/CVE-2025-33221.md): NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel driver, where a user could cause an incorrect permission (CVSS 4.4, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-24201](https://cve.now/CVE-2026-24201.md): NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause an out-of-bound access. (CVSS 5.8, NVIDIA Virtual GPU Manager)
- [CVE-2026-24200](https://cve.now/CVE-2026-24200.md): NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause a use-after-free for stack memory. (CVSS 7.0, NVIDIA Virtual GPU Manager)
- [CVE-2026-44749](https://cve.now/CVE-2026-44749.md): Information Disclosure vulnerability in SAP Gateway (CVSS 4.3, SAP\_SE SAP Gateway)
- [CVE-2026-24194](https://cve.now/CVE-2026-24194.md): NVIDIA Display Driver for Linux contains a vulnerability in a kernel mode layer handler, where a user could cause improper permission handli (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-24191](https://cve.now/CVE-2026-24191.md): NVIDIA Display Driver for Windows contains a vulnerability where an attacker could cause a time-of-check time-of-use issue. (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +3)
- [CVE-2026-24190](https://cve.now/CVE-2026-24190.md): NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause improper access to G (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-24193](https://cve.now/CVE-2026-24193.md): NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write. (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-24196](https://cve.now/CVE-2026-24196.md): NVIDIA Display Driver for Linux contains a vulnerability where a user could cause an out-of-bounds read. (CVSS 7.1, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-8633](https://cve.now/CVE-2026-8633.md): IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when using when using Web Server Plug-ins (CVSS 9.8, IBM Web Server Plug-ins for WebSphere Application Server an…)
- [CVE-2026-24197](https://cve.now/CVE-2026-24197.md): NVIDIA Display Driver for Linux contains a vulnerability in the Multi-Instance GPU (MIG) partition management, where an insecure default ini (CVSS 6.5, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-24199](https://cve.now/CVE-2026-24199.md): NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering compile (CVSS 4.7, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +3)
- [CVE-2026-24198](https://cve.now/CVE-2026-24198.md): NVIDIA GPU Display Driver for Linux contains a vulnerability where an advanced attacker could use a race condition to leak sensitive memory (CVSS 5.6, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-24182](https://cve.now/CVE-2026-24182.md): NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could leak held driver locks. (CVSS 6.5, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +3)
- [CVE-2026-24195](https://cve.now/CVE-2026-24195.md): NVIDIA Display Driver for Linux contains a vulnerability in UVM, where a user could cause improper input validation. (CVSS 7.1, NVIDIA Guest driver)
- [CVE-2026-8620](https://cve.now/CVE-2026-8620.md): IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when using when using Web Server Plug-ins (CVSS 7.5, IBM Web Server Plug-ins for WebSphere Application Server an…)
- [CVE-2026-24192](https://cve.now/CVE-2026-24192.md): NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause an incorrect conversion between numeric types, leadin (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-24187](https://cve.now/CVE-2026-24187.md): NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. (CVSS 8.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +3)
- [CVE-2026-8835](https://cve.now/CVE-2026-8835.md): IBM HTTP Server is affected by multiple vulnerabilities (CVSS 7.3, IBM HTTP Server)
- [CVE-2026-8834](https://cve.now/CVE-2026-8834.md): IBM HTTP Server is affected by multiple vulnerabilities (CVSS 8.0, IBM HTTP Server)
- [CVE-2026-44707](https://cve.now/CVE-2026-44707.md): Chatwoot: Pre-Account Takeover via OAuth on Unconfirmed Accounts (CVSS 6.8, chatwoot)
- [CVE-2026-7454](https://cve.now/CVE-2026-7454.md): WRL File Parsing Memory Corruption in Autodesk 3ds Max (CVSS 7.8, Autodesk 3ds Max)
- [CVE-2026-7453](https://cve.now/CVE-2026-7453.md): WRL File Parsing Memory Exhaustion in Autodesk 3ds Max (CVSS 5.5, Autodesk 3ds Max)
- [CVE-2026-44706](https://cve.now/CVE-2026-44706.md): Chatwoot: SQL Injection in Conversation/Contact Filter API via Custom Attribute Values (CVSS 8.5, chatwoot)
- [CVE-2026-7251](https://cve.now/CVE-2026-7251.md): Eppendorf BioFlo 320 Use of hard-coded password (CVSS 9.3, Eppendorf BioFlo)
- [CVE-2026-7452](https://cve.now/CVE-2026-7452.md): WRL File Parsing Memory Corruption in Autodesk 3ds Max (CVSS 7.8, Autodesk 3ds Max)
- [CVE-2026-7451](https://cve.now/CVE-2026-7451.md): TIF File Parsing Out-of-Bounds Write in Autodesk 3ds Max (CVSS 7.8, Autodesk 3ds Max)
- [CVE-2026-7450](https://cve.now/CVE-2026-7450.md): PAR File Parsing NULL Pointer Dereference in Autodesk 3ds Max (CVSS 5.5, Autodesk 3ds Max)
- [CVE-2026-44730](https://cve.now/CVE-2026-44730.md): OpenCTI: Privilege escalation via graphQL API abusable by organization admins, due to incorrect ACL on userEdit relationAdd (CVSS 7.2, OpenCTI-Platform opencti · pycti)
- [CVE-2026-46624](https://cve.now/CVE-2026-46624.md): Twenty: SQL Injection via the timeZone field (CVSS 9.9, twentyhq twenty)
- [CVE-2026-9566](https://cve.now/CVE-2026-9566.md): teableio teable Sign-up LoginPage.tsx cross site scripting (CVSS 5.3, teableio teable)
- [CVE-2026-8855](https://cve.now/CVE-2026-8855.md): IBM HTTP Server is affected by multiple vulnerabilities (CVSS 8.1, IBM HTTP Server)
- [CVE-2026-8854](https://cve.now/CVE-2026-8854.md): IBM HTTP Server is affected by multiple vulnerabilities (CVSS 7.5, IBM HTTP Server)
- [CVE-2026-8856](https://cve.now/CVE-2026-8856.md): IBM HTTP Server is affected by multiple vulnerabilities (CVSS 7.7, IBM HTTP Server)
- [CVE-2026-8852](https://cve.now/CVE-2026-8852.md): IBM HTTP Server is affected by multiple vulnerabilities (CVSS 6.2, IBM HTTP Server)
- [CVE-2026-44729](https://cve.now/CVE-2026-44729.md): Twenty: Stored Cross-Site Scripting via Unsanitized File Serving (Missing Content-Type/Content-Disposition Headers) (CVSS 8.7, twentyhq twenty)
- [CVE-2026-8850](https://cve.now/CVE-2026-8850.md): IBM HTTP Server is affected by multiple vulnerabilities (CVSS 7.5, IBM HTTP Server)
- [CVE-2026-44680](https://cve.now/CVE-2026-44680.md): MikroORM: SQL injection via runtime-controlled identifiers and JSON-path keys (CVSS 7.6, mikro-orm · @mikro-orm knex +3)
- [CVE-2026-35221](https://cve.now/CVE-2026-35221.md): Joomla! Core - \[20260506\] - Authenticated blind SQLi in com\_finder (CVSS 6.9, Joomla! Project Joomla! CMS)
- [CVE-2026-48903](https://cve.now/CVE-2026-48903.md): Joomla! Framework - \[20260519\] - Inadequate content filtering within the checkAttribute filter code. (CVSS 6.9, Joomla! Project Joomla! Framework Filter package)
- [CVE-2026-48896](https://cve.now/CVE-2026-48896.md): Joomla! Core - \[20260511\] - MFA Authentication Bypass (CVSS 8.2, Joomla! Project Joomla! CMS)
- [CVE-2026-35220](https://cve.now/CVE-2026-35220.md): Joomla! Core - \[20260505\] - CSRF in user activation endpoint (CVSS 4.6, Joomla! Project Joomla! CMS)
- [CVE-2026-40383](https://cve.now/CVE-2026-40383.md): Joomla! Core - \[20260509\] - LFI in HTMLView layout parameter (CVSS 7.5, Joomla! Project Joomla! CMS)
- [CVE-2026-35222](https://cve.now/CVE-2026-35222.md): Joomla! Core - \[20260507\] - Authenticated blind SQLi in com\_tags (CVSS 6.9, Joomla! Project Joomla! CMS)
- [CVE-2026-9565](https://cve.now/CVE-2026-9565.md): haojing8312 WorkClaw Blacklist bash.rs is\_dangerous os command injection (CVSS 5.3, haojing8312 WorkClaw)
- [CVE-2026-40384](https://cve.now/CVE-2026-40384.md): Joomla! Core - \[20260510\] - Path traversal in com\_media webservice endpoint (CVSS 5.9, Joomla! Project Joomla! CMS)
- [CVE-2026-48905](https://cve.now/CVE-2026-48905.md): Joomla! Framework - \[20260520\] - Inadequate content filtering within the cleanAttributes filter code. (CVSS 6.9, Joomla! Project Joomla! Framework Filter package)
- [CVE-2026-48897](https://cve.now/CVE-2026-48897.md): Joomla! Core - \[20260512\] - MFA Authentication Bypass (CVSS 8.2, Joomla! Project Joomla! CMS)
- [CVE-2026-25901](https://cve.now/CVE-2026-25901.md): Joomla! Core - \[20260502\] - XSS in com\_associations (CVSS 6.9, Joomla! Project Joomla! CMS)
- [CVE-2026-48126](https://cve.now/CVE-2026-48126.md): Algernon: Host header path traversal in --domain mode reads files and runs Lua from parent dir (CVSS 8.2, xyproto algernon · github.com/xyproto/algernon)
- [CVE-2026-48899](https://cve.now/CVE-2026-48899.md): Joomla! Core - \[20260515\] - Incorrect Access Control in sample data plugins (CVSS 5.3, Joomla! Project Joomla! CMS)
- [CVE-2026-48900](https://cve.now/CVE-2026-48900.md): Joomla! Core - \[20260516\] - Incorrect Access Control in com\_scheduler (CVSS 6.4, Joomla! Project Joomla! CMS)
- [CVE-2026-48902](https://cve.now/CVE-2026-48902.md): Joomla! Core - \[20260518\] - Transport encryption downgrade for password and username reset links (CVSS 9.8, Joomla! Project Joomla! CMS)
- [CVE-2026-35223](https://cve.now/CVE-2026-35223.md): Joomla! Core - \[20260508\] - Improper access check in com\_config webservice endpoints (CVSS 8.6, Joomla! Project Joomla! CMS)
- [CVE-2026-25900](https://cve.now/CVE-2026-25900.md): Joomla! Core - \[20260501\] - XSS in feed modules (CVSS 6.9, Joomla! Project Joomla! CMS)
- [CVE-2026-48904](https://cve.now/CVE-2026-48904.md): Joomla! Core - \[20260514\] - Privilege escalation through com\_users webservice endpoints (CVSS 8.2, Joomla! Project Joomla! CMS)
- [CVE-2026-30895](https://cve.now/CVE-2026-30895.md): Joomla! Core - \[20260504\] - XSS in readmore links (CVSS 6.9, Joomla! Project Joomla! CMS)
- [CVE-2026-48898](https://cve.now/CVE-2026-48898.md): Joomla! Core - \[20260513\] - Privilege escalation through com\_users batch task (CVSS 8.2, Joomla! Project Joomla! CMS)
- [CVE-2026-30894](https://cve.now/CVE-2026-30894.md): Joomla! Core - \[20260503\] - XSS in com\_contenthistory (CVSS 6.9, Joomla! Project Joomla! CMS)
- [CVE-2026-48901](https://cve.now/CVE-2026-48901.md): Joomla! Core - \[20260517\] - Incorrect Cache Key Construction for InputFilter objects (CVSS 7.5, Joomla! Project Joomla! CMS)
- [CVE-2026-46431](https://cve.now/CVE-2026-46431.md): Algernon: Auto-refresh SSE event server sets Access-Control-Allow-Origin: \* (CVSS 4.3, xyproto algernon · github.com/xyproto/algernon)
- [CVE-2026-46430](https://cve.now/CVE-2026-46430.md): Algernon: Auto-refresh SSE event server binds to all interfaces by default on Linux/macOS (CVSS 4.3, xyproto algernon · github.com/xyproto/algernon)
- [CVE-2026-45728](https://cve.now/CVE-2026-45728.md): Algernon: Single-file mode unconditionally enables debug mode (CVSS 7.5, xyproto algernon · github.com/xyproto/algernon)
- [CVE-2026-45721](https://cve.now/CVE-2026-45721.md): Algernon: handler.lua discovery walks parent directories above the server root (CVSS 9.0, xyproto algernon · github.com/xyproto/algernon)
- [CVE-2026-43981](https://cve.now/CVE-2026-43981.md): Algernon: Race Condition in handle() shared LState (CVSS 8.2, xyproto algernon)
- [CVE-2026-2264](https://cve.now/CVE-2026-2264.md): Server-Side Request Forgery and Credential Exfiltration in Google Cloud Apigee via SetIntegrationRequest Policy. (CVSS 9.2, Google Cloud Apigee-X)
- [CVE-2026-9564](https://cve.now/CVE-2026-9564.md): SourceCodester/oretnom23 Hospitals Patient Records Management System view\_patient cross site scripting (CVSS 4.8, SourceCodester Hospitals Patient Records Management System…)
- [CVE-2026-43982](https://cve.now/CVE-2026-43982.md): Algernon: Path traversal file write via savein() (CVSS 8.7, xyproto algernon)
- [CVE-2026-47716](https://cve.now/CVE-2026-47716.md): Bugsink: Issue bulk actions can affect another project’s issue if its UUID is known (CVSS 3.1, bugsink)
- [CVE-2026-47715](https://cve.now/CVE-2026-47715.md): Bugsink: Issue event views can show an event from another project if its UUID is known (CVSS 3.1, bugsink)
- [CVE-2026-47728](https://cve.now/CVE-2026-47728.md): Bugsink: Project scoping missing in sourcemap and debug-file lookup (CVSS 4.3, bugsink)
- [CVE-2026-48864](https://cve.now/CVE-2026-48864.md): Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data (CVSS 7.8, Red Hat Enterprise Linux · Red Hat OpenShift Container P… +7)
- [CVE-2026-45836](https://cve.now/CVE-2026-45836.md): Bluetooth: L2CAP: Fix null-ptr-deref in l2cap\_sock\_get\_sndtimeo\_cb() (no CVSS, Linux)
- [CVE-2026-45835](https://cve.now/CVE-2026-45835.md): Bluetooth: L2CAP: Fix null-ptr-deref in l2cap\_sock\_new\_connection\_cb() (no CVSS, Linux)
- [CVE-2026-45834](https://cve.now/CVE-2026-45834.md): Bluetooth: L2CAP: Fix null-ptr-deref in l2cap\_sock\_state\_change\_cb() (no CVSS, Linux)
- [CVE-2026-44502](https://cve.now/CVE-2026-44502.md): Bugsink: SSRF bypass in \`validate\_webhook\_url\` (CVSS 4.3, bugsink)
- [CVE-2026-24162](https://cve.now/CVE-2026-24162.md): NVIDIA Transformers4Rec for Linux contains a vulnerability where an attacker could cause improper deserialization of untrusted data. (CVSS 7.8, NVIDIA Merlin Transformers4Rec)
- [CVE-2026-24212](https://cve.now/CVE-2026-24212.md): NVIDIA Isaac Launchable for Linux contains a vulnerability where sensitive information is transmitted in clear text. (CVSS 7.5, NVIDIA Isaac Launchable)
- [CVE-2026-44314](https://cve.now/CVE-2026-44314.md): Traccar: Missing edit authorization on device image upload allows read-only users to write files (CVSS 5.3, traccar)
- [CVE-2025-36221](https://cve.now/CVE-2025-36221.md): Vulnerabilities exists in IBM Cloud Pak for Data System (CPDS 1.0) - Cyclops. (CVSS 5.3, IBM Cloud Pak for Data System - Cyclops)
- [CVE-2025-36220](https://cve.now/CVE-2025-36220.md): Vulnerabilities exists in IBM Cloud Pak for Data System (CPDS 1.0) - Cyclops. (CVSS 4.3, IBM Cloud Pak for Data System - Cyclops)
- [CVE-2025-36126](https://cve.now/CVE-2025-36126.md): IBM Cognos Analytics is affected by Cross-site scripting. (CVSS 6.4, IBM Cognos Analytics · IBM Cognos Transformer)
- [CVE-2025-36148](https://cve.now/CVE-2025-36148.md): IBM Financial Transaction Manager for SWIFT Services for Multiplatforms is vulnerable to cross-site scripting. (CVSS 5.4, IBM Financial Transaction Manager for SWIFT Services for Mu…)
- [CVE-2025-36145](https://cve.now/CVE-2025-36145.md): Multiple Vulnerabilities in watsonx.data (CVSS 5.4, IBM watsonx.data)
- [CVE-2025-14290](https://cve.now/CVE-2025-14290.md): IBM webMethods Integration Sever is vulnerable to server-side request forgery (CVSS 5.4, IBM webMethods Integration (on prem) -Integration Server)
- [CVE-2026-44723](https://cve.now/CVE-2026-44723.md): Vowpal Wabbit: Shell injection via crafted PR title in python\_checks.yml allows arbitrary command execution on CI runner (CVSS 5.0, VowpalWabbit vowpal\_wabbit)
- [CVE-2025-13755](https://cve.now/CVE-2025-13755.md): IBM® Db2® is vulnerable to credential exposure in db2diag when executing specific testcase buckets (CVSS 5.5, IBM Db2)
- [CVE-2026-9562](https://cve.now/CVE-2026-9562.md): sambitraj STUDENT-MANAGEMENT-SYSTEM Dashboard access control (CVSS 6.9, sambitraj STUDENT-MANAGEMENT-SYSTEM)
- [CVE-2026-46620](https://cve.now/CVE-2026-46620.md): e107: CSRF in comment.php moderation endpoints via token-optional validation in session\_handler::check() (CVSS 6.5, e107inc e107)
- [CVE-2026-43935](https://cve.now/CVE-2026-43935.md): e107: Host Header Injection in e107 password reset enables phishing (CVSS 8.1, e107inc e107)
- [CVE-2026-43934](https://cve.now/CVE-2026-43934.md): e107: Broken Access Control in e107 comment edit allows cross-user comment modification (CVSS 6.5, e107inc e107)
- [CVE-2026-25112](https://cve.now/CVE-2026-25112.md): A high-severity vulnerability in the deployment of Genetec RabbitMQ that allows a privilege escalation attack. (CVSS 7.8, Genetec RabbitMQ · Genetec Mission Control +5)
- [CVE-2026-43936](https://cve.now/CVE-2026-43936.md): e107: Server-Side Request Forgery (SSRF) in the remote file fetcher (CVSS 4.3, e107inc e107)
- [CVE-2026-40564](https://cve.now/CVE-2026-40564.md): Apache Flink Kubernetes Operator: Server-Side Request Forgery and local file access in Kubernetes Operator (CVSS 6.5, Apache Software Foundation Apache Flink Kubernetes Operator)
- [CVE-2026-45247](https://cve.now/CVE-2026-45247.md): Mirasvit Cache Warmer for Magento \< 1.11.12 PHP Object Injection (CVSS 9.3, KEV, Mirasvit Full Page Cache Warmer for Magento)
- [CVE-2026-46368](https://cve.now/CVE-2026-46368.md): luci-app-https-dns-proxy Authenticated Command Injection via setInitAction (CVSS 8.7, mossdef-org luci-app-https-dns-proxy)
- [CVE-2026-42785](https://cve.now/CVE-2026-42785.md): OpenKM 6.3.12 Remote Code Execution via Administrative Scripting (CVSS 8.6, OpenKM Community Edition · OpenKM Professional Edition)
- [CVE-2026-42425](https://cve.now/CVE-2026-42425.md): OpenKM 6.3.12 Unrestricted SQL Execution via DatabaseQuery (CVSS 8.6, OpenKM Community Edition · OpenKM Professional Edition)
- [CVE-2026-41917](https://cve.now/CVE-2026-41917.md): OpenKM 6.3.12 Local File Inclusion via Admin Scripting (CVSS 6.9, OpenKM Community Edition · OpenKM Professional Edition)
- [CVE-2026-41401](https://cve.now/CVE-2026-41401.md): libyang - Heap Use-After-Free Write in XML Metadata Parsing (CVSS 6.9, libyang)
- [CVE-2026-40034](https://cve.now/CVE-2026-40034.md): gitoxide - Command Injection via Partial .gitmodules Override in gix-submodule (CVSS 7.3, gitoxide · gix)
- [CVE-2026-40033](https://cve.now/CVE-2026-40033.md): FreeRDP - Heap-buffer-overflow in gdi\_CacheToSurface via rectangle validation bypass (CVSS 8.6, FreeRDP)
- [CVE-2026-9552](https://cve.now/CVE-2026-9552.md): Das Parking Management System 停车场管理系统 Search API Endpoint sql injection (CVSS 6.9, Das Parking Management System 停车场管理系统)
- [CVE-2026-4480](https://cve.now/CVE-2026-4480.md): Samba: samba: remote code execution in printing subsystem via unescaped job description (CVSS 9.0, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-9551](https://cve.now/CVE-2026-9551.md): Das Parking Management System 停车场管理系统 API Endpoint ExportParkingRecords xp\_cmdshell sql injection (CVSS 6.9, Das Parking Management System 停车场管理系统)
- [CVE-2026-45082](https://cve.now/CVE-2026-45082.md): Karakeep has a SSRF Protection Bypass via Redirect Handling (CVSS 7.6, karakeep-app karakeep)
- [CVE-2026-9550](https://cve.now/CVE-2026-9550.md): Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform upfile path traversal (CVSS 6.9, Acrel Electrical EEMS Enterprise Power Operation and Mainte…)
- [CVE-2026-7374](https://cve.now/CVE-2026-7374.md): Kubevirt: kubevirt virt-handler: privilege escalation and node compromise via symlink following vulnerability (CVSS 9.9, kubevirt · Red Hat Container Native Virtualization +1)
- [CVE-2026-48136](https://cve.now/CVE-2026-48136.md): Authenticated Administrator Role-Based Access Control Bypass in Compliance (CVSS 4.1, checkpoint Quantum Security Management)
- [CVE-2026-48135](https://cve.now/CVE-2026-48135.md): HTTP service can incorrectly process malformed HTTP requests (CVSS 5.3, checkpoint Quantum Security Gateway)
- [CVE-2026-48134](https://cve.now/CVE-2026-48134.md): SQL injection issue in UserCheck Portal when DLP Software Blade is active (CVSS 5.6, checkpoint Quantum Security Gateway)
- [CVE-2026-48133](https://cve.now/CVE-2026-48133.md): Identity Awareness Captive Portal - Unauthenticated Local File Inclusion (CVSS 7.5, checkpoint Quantum Security Gateway)
- [CVE-2026-48132](https://cve.now/CVE-2026-48132.md): VPN service may restart unexpectedly when processing IKE traffic over NAT-T 4500/UDP (CVSS 8.1, checkpoint Quantum Security Gateway)
- [CVE-2026-48131](https://cve.now/CVE-2026-48131.md): VPND IKE Fragment Reassembly - Heap Out-of-Bounds Write via Sequence Number Zero (CVSS 8.1, checkpoint Quantum Security Gateway)
- [CVE-2026-9544](https://cve.now/CVE-2026-9544.md): Shenzhen Sixun Software Sixun Shanghui Group Business Management System PayConfig sql injection (CVSS 6.9, Shenzhen Sixun Software Sixun Shanghui Group Business Manag…)
- [CVE-2026-9543](https://cve.now/CVE-2026-9543.md): Totolink N300RH Web Management cstecgi.cgi setPasswordCfg os command injection (CVSS 9.3, Totolink N300RH)
- [CVE-2026-9542](https://cve.now/CVE-2026-9542.md): CodeAstro Leave Management System add\_staff.php sql injection (CVSS 5.3, CodeAstro Leave Management System)
- [CVE-2026-8479](https://cve.now/CVE-2026-8479.md): IEC 60870-5-104 used in bidirectional mode in RTU500 is vulnerable for a NULL pointer dereferencing, if a specially crafted sequence of mess (CVSS 6.9, Hitachi Energy RTU500 series CMU firmware)
- [CVE-2026-9541](https://cve.now/CVE-2026-9541.md): Squirrel Cnut File sqobject.cpp ReadObject heap-based overflow (CVSS 4.8, Squirrel)
- [CVE-2026-7310](https://cve.now/CVE-2026-7310.md): A heap-based buffer overflow vulnerability exists in XML parser functionality in the HiDraw. (CVSS 4.4, Hitachi Energy MACH HiDraw)
- [CVE-2025-11482](https://cve.now/CVE-2025-11482.md): Allocation of Resources Without Limits or Throttling in the OPC-UA Server (CVSS 7.5, B&R Industrial Automation PPT30 Operating System)
- [CVE-2026-8174](https://cve.now/CVE-2026-8174.md): Cross-site Request Forgery (CVSS 5.7, Zohocorp Zoho Mail wordpress plugin)
- [CVE-2026-9540](https://cve.now/CVE-2026-9540.md): vllm-project vllm OpenAI-compatible Serving Path denial of service (CVSS 6.9, vllm-project vllm · vllm)
- [CVE-2026-44410](https://cve.now/CVE-2026-44410.md): Function Abusement Vulnerability in ZTE ZXUniPOS NDS-LTE (CVSS 3.8, ZTE ZXUniPOS NDS-LTE)
- [CVE-2026-25104](https://cve.now/CVE-2026-25104.md): A heap-based buffer overflow vulnerability exists in the LXF parsing functionality of MediaInfoLib (version(s): 26.01). (CVSS 7.8, MediaArea MediaInfoLib)
- [CVE-2026-25713](https://cve.now/CVE-2026-25713.md): A heap-based buffer overflow vulnerability exists in the ID3v2 parsing functionality of MediaInfoLib (version(s): 26.01). (CVSS 7.8, MediaArea MediaInfoLib)
- [CVE-2026-24590](https://cve.now/CVE-2026-24590.md): WordPress Paid Videochat Turnkey Site plugin \<= 7.3.23 - Broken Access Control vulnerability (CVSS 5.3, VideoWhisper.com Paid Videochat Turnkey Site)
- [CVE-2026-24638](https://cve.now/CVE-2026-24638.md): WordPress RepairBuddy plugin \<= 4.1121 - Broken Access Control vulnerability (CVSS 4.3, Webful Creations RepairBuddy)
- [CVE-2026-27427](https://cve.now/CVE-2026-27427.md): WordPress Geo Mashup plugin \<= 1.13.18 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Dylan Kuhn Geo Mashup)
- [CVE-2026-39642](https://cve.now/CVE-2026-39642.md): WordPress Nyla theme \<= 1.7 - Arbitrary Shortcode Execution vulnerability (CVSS 5.3, SpabRice Nyla)
- [CVE-2026-39661](https://cve.now/CVE-2026-39661.md): WordPress SW Core plugin \<= 1.7.18 - Local File Inclusion vulnerability (CVSS 7.5, Magentech SW Core)
- [CVE-2026-39655](https://cve.now/CVE-2026-39655.md): WordPress Mayosis Core plugin \<= 5.4.7 - Broken Access Control vulnerability (CVSS 5.3, TeconceTheme Mayosis Core)
- [CVE-2026-8047](https://cve.now/CVE-2026-8047.md): Out-of-bounds Write in CODESYS Control (CVSS 8.7, CODESYS Control RTE · CODESYS Control Win +13)
- [CVE-2026-8046](https://cve.now/CVE-2026-8046.md): Incorrect Authorization in CODESYS Control (CVSS 7.2, CODESYS Control RTE · CODESYS Control Win +13)
- [CVE-2026-44469](https://cve.now/CVE-2026-44469.md): Incorrect Default Permissions in CODESYS Development System (CVSS 8.5, CODESYS Development System)
- [CVE-2026-44468](https://cve.now/CVE-2026-44468.md): Incorrect Default Permissions in CODESYS Development System (CVSS 8.5, CODESYS Development System)
- [CVE-2026-3314](https://cve.now/CVE-2026-3314.md): Missing Password Masking in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer and Hitachi Ops Center Analyzer viewpoint (CVSS 4.6, Hitachi Ops Center Analyzer · Hitachi Infrastructure Analyt…)
- [CVE-2026-9534](https://cve.now/CVE-2026-9534.md): Totolink CA750-PoE Setting cstecgi.cgi setWiFiWpsConfig os command injection (CVSS 5.3, Totolink CA750-PoE)
- [CVE-2026-9533](https://cve.now/CVE-2026-9533.md): Totolink CA750-PoE Setting cstecgi.cgi recvUpgradeNewFw os command injection (CVSS 5.3, Totolink CA750-PoE)
- [CVE-2026-9532](https://cve.now/CVE-2026-9532.md): Totolink CA750-PoE Setting cstecgi.cgi setUploadUserData os command injection (CVSS 5.3, Totolink CA750-PoE)
- [CVE-2026-9496](https://cve.now/CVE-2026-9496.md): Versions of the package pacote from 11.2.7 and before 21.5.1 are vulnerable to Denial of Service (DoS) via the addGitSha function. (CVSS 8.7, pacote · org.webjars.npm:pacote)
- [CVE-2026-9495](https://cve.now/CVE-2026-9495.md): Versions of the package @koa/router from 14.0.0 and before 15.0.0 are vulnerable to Access Control Bypass due to the middleware being silent (CVSS 6.9, @koa/router)
- [CVE-2026-9531](https://cve.now/CVE-2026-9531.md): Totolink CA750-PoE Setting cstecgi.cgi setUpgradeUboot os command injection (CVSS 5.3, Totolink CA750-PoE)
- [CVE-2026-9530](https://cve.now/CVE-2026-9530.md): GNU LibreDWG Dwgbmp Utility decode.c read\_2004\_compressed\_section out-of-bounds (CVSS 4.8, GNU LibreDWG)
- [CVE-2026-9529](https://cve.now/CVE-2026-9529.md): GNU LibreDWG Dwggrep Utility dwggrep.c match\_BLOCK\_HEADER null pointer dereference (CVSS 4.8, GNU LibreDWG)
- [CVE-2026-9528](https://cve.now/CVE-2026-9528.md): itsourcecode Electronic Judging System delete\_judge.php sql injection (CVSS 6.9, itsourcecode Electronic Judging System)
- [CVE-2026-9527](https://cve.now/CVE-2026-9527.md): itsourcecode Electronic Judging System judges.php cross site scripting (CVSS 5.3, itsourcecode Electronic Judging System)
- [CVE-2026-9526](https://cve.now/CVE-2026-9526.md): itsourcecode Electronic Judging System edit\_team.php sql injection (CVSS 6.9, itsourcecode Electronic Judging System)
- [CVE-2026-9525](https://cve.now/CVE-2026-9525.md): itsourcecode Electronic Judging System edit\_judge.php sql injection (CVSS 6.9, itsourcecode Electronic Judging System)
- [CVE-2026-9524](https://cve.now/CVE-2026-9524.md): xianrendzw EasyReport REST Endpoint execute sql injection (CVSS 5.3, xianrendzw EasyReport)
- [CVE-2026-9523](https://cve.now/CVE-2026-9523.md): Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform getCalcmeterDetailDayListTree sql injection (CVSS 6.9, Acrel Electrical EEMS Enterprise Power Operation and Mainte…)
- [CVE-2026-9521](https://cve.now/CVE-2026-9521.md): fraillt bitsery std\_smart\_ptr.h loadFromSharedState improper validation of specified type of input (CVSS 6.3, fraillt bitsery)
- [CVE-2026-4795](https://cve.now/CVE-2026-4795.md): A missing authorization vulnerability in Zyxel GS1200-5v3 firmware versions through 1.00(ACPS.2)C0, GS1200-8v3 firmware versions through 1.0 (CVSS 6.5, Zyxel GS1200-5v3 firmware · Zyxel GS1200-8v3 firmware +3)
- [CVE-2026-9520](https://cve.now/CVE-2026-9520.md): blitz-js blitz Sign-in LoginForm.tsx cross site scripting (CVSS 5.3, blitz-js blitz · blitz)
- [CVE-2025-71310](https://cve.now/CVE-2025-71310.md): The GDPR cookies module for Backdrop CMS (before 1.x-1.3.5) doesn't sufficiently protect visitors from Cross Site Scripting (XSS) if a mal (CVSS 1.8, BackdropCMS GDPR cookies module for Backdrop CMS)
- [CVE-2026-9519](https://cve.now/CVE-2026-9519.md): stonith404 pingvin-share Sign-in Auto-Redirect signIn.tsx getServerSideProps cross site scripting (CVSS 5.3, stonith404 pingvin-share)
- [CVE-2026-9518](https://cve.now/CVE-2026-9518.md): hemant6488 CodeIgniter-StudentManagementSystem Students Controller view\_students.php addStudent cross site scripting (CVSS 5.3, hemant6488 CodeIgniter-StudentManagementSystem)
- [CVE-2026-9538](https://cve.now/CVE-2026-9538.md): Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header (CVSS 7.5, BINGOS Archive::Tar)
- [CVE-2026-42497](https://cve.now/CVE-2026-42497.md): Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directory (CVSS 7.5, BINGOS Archive::Tar)
- [CVE-2026-42496](https://cve.now/CVE-2026-42496.md): Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory (CVSS 9.1, BINGOS Archive::Tar)
- [CVE-2026-9517](https://cve.now/CVE-2026-9517.md): hemant6488 CodeIgniter-StudentManagementSystem Student Management addStudentView access control (CVSS 6.9, hemant6488 CodeIgniter-StudentManagementSystem)
- [CVE-2025-68708](https://cve.now/CVE-2025-68708.md): SailingLab AppLock (aka com.alpha.applock) 4.3.8 for Android allows a local attacker with physical access to bypass the PIN lock. (CVSS 2.4)
- [CVE-2025-68709](https://cve.now/CVE-2025-68709.md): SailingLab AppLock (aka com.alpha.applock) 4.3.8 for Android allows a local attacker to trigger arbitrary JavaScript execution via BrowserMa (CVSS 5.2)
- [CVE-2025-68710](https://cve.now/CVE-2025-68710.md): Easyelife App lock (aka Fingerprint,Applock or locker.app.safe.applocker) 1.9.2 for Android allows a local attacker with physical access to (CVSS 2.4)
- [CVE-2025-68711](https://cve.now/CVE-2025-68711.md): AppLockZ App Lock and Fingerprint Lock (applock.passwordfingerprint.applockz) 4.2.11 for Android allows a local attacker with physical acces (CVSS 2.4)
- [CVE-2026-36239](https://cve.now/CVE-2026-36239.md): PbootCMS v.3.2.11 contains a code injection vulnerability in its site configuration functionality (CVSS 4.3)
- [CVE-2026-38587](https://cve.now/CVE-2026-38587.md): An Insecure Direct Object Reference (IDOR) vulnerability was discovered in ONLYOFFICE DocSpace before 3.2.1. (CVSS 4.3)
- [CVE-2026-48683](https://cve.now/CVE-2026-48683.md): FastNetMon Community Edition through 1.2.9 contains an out-of-bounds read vulnerability in the NetFlow v9 data flowset processor. (CVSS 6.5)
- [CVE-2026-48684](https://cve.now/CVE-2026-48684.md): FastNetMon Community Edition through 1.2.9 contains an out-of-bounds read in the NetFlow v9 options template parser. (CVSS 6.5)
- [CVE-2026-48685](https://cve.now/CVE-2026-48685.md): FastNetMon Community Edition through 1.2.9 has out-of-bounds memory access because it incorrectly parses BGP path attributes with the extend (CVSS 6.5)
- [CVE-2026-48686](https://cve.now/CVE-2026-48686.md): FastNetMon Community Edition through 1.2.9 contains a stack-based buffer overflow in the BGP NLRI (Network Layer Reachability Information) d (CVSS 9.8)
- [CVE-2026-48687](https://cve.now/CVE-2026-48687.md): FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the Juniper router integration plugin. (CVSS 8.1)
- [CVE-2026-48688](https://cve.now/CVE-2026-48688.md): FastNetMon Community Edition through 1.2.9 contains multiple out-of-bounds reads in the BGP MP\_REACH\_NLRI IPv6 attribute decoder. (CVSS 7.5)
- [CVE-2026-48689](https://cve.now/CVE-2026-48689.md): FastNetMon Community Edition through 1.2.9 contains an off-by-one heap-based buffer overflow in the dynamic\_binary\_buffer\_t class (src/dynam (CVSS 9.8)
- [CVE-2026-48690](https://cve.now/CVE-2026-48690.md): FastNetMon Community Edition through 1.2.9 contains an integer overflow vulnerability in the packet capture buffer allocation. (CVSS 7.1)
- [CVE-2026-48691](https://cve.now/CVE-2026-48691.md): FastNetMon Community Edition through 1.2.9 contains an integer overflow in the BGP AS\_PATH attribute encoder. (CVSS 7.3)
- [CVE-2026-48692](https://cve.now/CVE-2026-48692.md): FastNetMon Community Edition through 1.2.9 exposes a gRPC API server on port 50052 with no authentication mechanism. (CVSS 8.1)
- [CVE-2026-48693](https://cve.now/CVE-2026-48693.md): FastNetMon Community Edition through 1.2.9 is vulnerable to a local symlink attack via predictable file paths in /tmp. (CVSS 5.5)
- [CVE-2026-48694](https://cve.now/CVE-2026-48694.md): FastNetMon Community Edition through 1.2.9 contains a configuration injection vulnerability in the Juniper router integration plugin. (CVSS 8.1)
- [CVE-2026-48695](https://cve.now/CVE-2026-48695.md): FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the MikroTik router integration plugin. (CVSS 8.1)
- [CVE-2026-48696](https://cve.now/CVE-2026-48696.md): FastNetMon Community Edition through 1.2.9 has a buffer overflow, a different vulnerability than CVE-2026-48686 and CVE-2026-48689. (CVSS 6.2)
- [CVE-2026-48697](https://cve.now/CVE-2026-48697.md): FastNetMon Community Edition through 1.2.9 does not verify TLS certificates on outbound HTTPS connections. (CVSS 7.4)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-05-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.