CVEs published May 30, 2026
51 CVEs were published on May 30, 2026: 1 critical, 32 high.
- Published
- 51
- Critical
- 1
- High
- 32
- Medium
- 18
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 8
Most affected products
- AiOPMSD Final
- 8
- Open5GS
- 6
- TRENDnet TEW-432BRP
- 5
- Edimax BR-6478AC
- 3
- eNdonesia Portal
- 3
- sambitraj STUDENT-MANAGEMENT-SYSTEM
- 2
- Simpkh SIM-PKH
- 2
- Armcode Arm Whois
- 1
- Bdtask Multi-Store Inventory Management System
- 1
- brainstormforce Spectra Gutenberg Blocks – Website Builder…
- 1
Critical 1
High 32
- CVE-2026-10126Edimax BR-6478AC POST Request formQoS buffer overflowEdimax BR-6478AC
- CVE-2026-10125Edimax BR-6478AC POST Request formPPPoESetup stack-based overflowEdimax BR-6478AC
- CVE-2026-10124Shibby Tomato Zserv ripd rip_zebra_read_ipv4 stack-based overflowShibby Tomato
- CVE-2026-10123TRENDnet TEW-432BRP formSetDomainFilter stack-based overflowTRENDnet TEW-432BRP
- CVE-2026-10122TRENDnet TEW-432BRP formSetProtocolFilter stack-based overflowTRENDnet TEW-432BRP
- CVE-2026-10121TRENDnet TEW-432BRP formSetUrlFilter stack-based overflowTRENDnet TEW-432BRP
- CVE-2018-25426WinMTR 0.91 Denial of Service via Buffer OverflowWinMTR
- CVE-2018-25425Yot CMS 3.3.1 SQL Injection via aid and cid ParametersYot CMS
- CVE-2018-25424Gate Pass Management System 2.1 SQL Injection via login-exec.phpLivebms Gate Pass Management System
- CVE-2018-25422MOGG web simulator Script All Version SQL Injection via play.phpspider312 MOGG web simulator Script
- CVE-2018-25421Open STA Manager 2.3 Arbitrary File Download via Path TraversalOpenstamanager Open STA Manager
- CVE-2018-25420AiOPMSD Final 1.0.0 SQL Injection via watch.phpAiOPMSD Final
- CVE-2018-25419AiOPMSD Final 1.0.0 SQL Injection via genre.phpAiOPMSD Final
- CVE-2018-25418AiOPMSD Final 1.0.0 SQL Injection via year.phpAiOPMSD Final
- CVE-2018-25417AiOPMSD Final 1.0.0 SQL Injection via quality.phpAiOPMSD Final
- CVE-2018-25416AiOPMSD Final 1.0.0 SQL Injection via country.phpAiOPMSD Final
- CVE-2018-25415AiOPMSD Final 1.0.0 SQL Injection via director ParameterAiOPMSD Final
- CVE-2018-25414AiOPMSD Final 1.0.0 SQL Injection via actor.phpAiOPMSD Final
- CVE-2018-25413AiOPMSD Final 1.0.0 SQL Injection via search.phpAiOPMSD Final
- CVE-2018-25411MGB OpenSource Guestbook 0.7.0.2 SQL Injection via email.phpM-Gb MGB OpenSource Guestbook
- CVE-2018-25410SIM-PKH 2.4.1 SQL Injection via media.php id ParameterSimpkh SIM-PKH
- CVE-2018-25409SIM-PKH 2.4.1 Arbitrary File Upload via aksi_pengurus.phpSimpkh SIM-PKH
- CVE-2018-25408The Open ISES Project 3.30A Path Traversal Arbitrary File DownloadOpenises Open ISES Project
- CVE-2018-25407eNdonesia Portal 8.7 SQL Injection via mod.phpeNdonesia Portal
- CVE-2018-25406eNdonesia Portal 8.7 SQL Injection via mod.phpeNdonesia Portal
- CVE-2018-25405eNdonesia Portal 8.7 SQL Injection via mod.phpeNdonesia Portal
- CVE-2026-10120TRENDnet TEW-432BRP formSetFirewallRule stack-based overflowTRENDnet TEW-432BRP
- CVE-2026-10119TRENDnet TEW-432BRP formSetMACFilter stack-based overflowTRENDnet TEW-432BRP
- CVE-2026-46242eventpoll: fix ep_remove struct eventpoll / struct file UAFLinux
- CVE-2026-7459Simple History – Track, Log, and Audit WordPress Changes <= 5.26.0 - Authenticated (Subscriber+) Account Takeover via Missing Authorization on Event Reaction Endpointeskapism Simple History – Track, Log, and Audit WordPress C…
- CVE-2026-7465Spectra Gutenberg Blocks <= 2.19.25 - Authenticated (Contributor+) Remote Code Execution via Arbitrary PHP Function Call via Block Attributesbrainstormforce Spectra Gutenberg Blocks – Website Builder…
- CVE-2026-9757GEO my WP <= 4.5.5 - Unauthenticated SQL Injection via 'swlatlng' / 'nelatlng' Parametersninjew GEO my WP
Medium, low and unrated 18
- CVE-2026-10156Open5GS nf-instances Endpoint nnrf-handler.c handle_amf_info resource consumptionOpen5GS
- CVE-2026-10155Bdtask Multi-Store Inventory Management System Accounts Report Accounts.php accounts_report_search sql injectionBdtask Multi-Store Inventory Management System
- CVE-2026-10154Dolibarr ERP CRM messaging.php authorizationDolibarr ERP CRM
- CVE-2026-10153westboy CicadasCMS AbstractCacheManager.java search cross site scriptingwestboy CicadasCMS
- CVE-2026-10152TaleLin lin-cms-spring-boot book Endpoint BookController.java access controlTaleLin lin-cms-spring-boot
- CVE-2026-10127Edimax BR-6478AC POST Request formStaDrvSetup command injectionEdimax BR-6478AC
- CVE-2026-8594Text::LineFold versions through 2019.001 for Perl duplicate the output based on the number of special break charactersNEZUMI Text::LineFold
- CVE-2018-25423Arm Whois 3.11 Denial of Service via Buffer OverflowArmcode Arm Whois
- CVE-2026-10117Open5GS nghttp2-server.c ogs_pool_id_calloc denial of serviceOpen5GS
- CVE-2026-10116Open5GS ue-authentications Endpoint ogs-timer.c ogs_sbi_xact_add denial of serviceOpen5GS
- CVE-2026-10115Open5GS Shared NF-profile nnrf-handler.c denial of serviceOpen5GS
- CVE-2026-10114Open5GS Shared NF-profile nnrf-handler.c handle_scp_info out-of-bounds writeOpen5GS
- CVE-2026-10113Open5GS Shared NF-profile nnrf-handler.c denial of serviceOpen5GS
- CVE-2026-10112sambitraj STUDENT-MANAGEMENT-SYSTEM Dashboard cross site scriptingsambitraj STUDENT-MANAGEMENT-SYSTEM
- CVE-2026-10111sambitraj STUDENT-MANAGEMENT-SYSTEM Login Page sql injectionsambitraj STUDENT-MANAGEMENT-SYSTEM
- CVE-2026-5071can: Local Denial of Service via SocketCAN Sendzephyrproject-rtos Zephyr
- CVE-2026-10110code-projects Student Details Management System index.php sql injectioncode-projects Student Details Management System
- CVE-2026-48840Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to disclosure of uninitialized stack memorExim