CVEs published May 31, 2026
51 CVEs were published on May 31, 2026: 1 critical, 19 high.
- Published
- 51
- Critical
- 1
- High
- 19
- Medium
- 31
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 7
Most affected products
- TRENDnet TEW-432BRP
- 10
- Assimp
- 5
- Tenda W12
- 5
- Edimax BR-6478AC
- 4
- OFCMS
- 4
- OUSL-GROUP-BrinaryBrains School Student Management System
- 3
- Aider-AI Aider
- 2
- Aider-AI Aider · aider-chat
- 2
- code-projects Online Music Site
- 2
- OpenCATS
- 2
Critical 1
High 19
- CVE-2026-8796Sereal::Decoder versions before 5.005 for Perl allow heap out-of-bounds read via crafted inputYVES Sereal::Decoder
- CVE-2026-10192Tenda W12 httpd set_local_time_0 stack-based overflowTenda W12
- CVE-2026-10191Tenda W12 httpd cgiWifiMacFilterSet stack-based overflowTenda W12
- CVE-2026-10190Tenda W12 Web Management httpd cgiSysWebTimeoutSet denial of serviceTenda W12
- CVE-2026-10189Tenda W12 httpd cgiSysTimeInfoSet stack-based overflowTenda W12
- CVE-2026-10188Tenda W12 httpd cgistaKickOff stack-based overflowTenda W12
- CVE-2026-10183TRENDnet TEW-432BRP formWlanSetup stack-based overflowTRENDnet TEW-432BRP
- CVE-2026-10181TRENDnet TEW-432BRP formSysCmd stack-based overflowTRENDnet TEW-432BRP
- CVE-2026-49490OpenCATS - SQL Injection in DataGrid Filter Handling for Tags ColumnOpenCATS
- CVE-2026-49489OpenCATS - SQL Injection in DataGrid sortDirection ParameterOpenCATS
- CVE-2026-10179TRENDnet TEW-432BRP formSetWlanEncrypt stack-based overflowTRENDnet TEW-432BRP
- CVE-2026-10165Edimax BR-6478AC POST Request formWanTcpipSetup stack-based overflowEdimax BR-6478AC
- CVE-2026-10164Edimax BR-6478AC POST Request formUSBFolder buffer overflowEdimax BR-6478AC
- CVE-2026-10163Edimax BR-6478AC POST Request formUSBAccount buffer overflowEdimax BR-6478AC
- CVE-2026-10162TRENDnet TEW-432BRP formSetPassword stack-based overflowTRENDnet TEW-432BRP
- CVE-2026-10161TRENDnet TEW-432BRP formResetStatistic stack-based overflowTRENDnet TEW-432BRP
- CVE-2026-10160TRENDnet TEW-432BRP formSetEnableWizard stack-based overflowTRENDnet TEW-432BRP
- CVE-2026-10159TRENDnet TEW-432BRP formSysLog stack-based overflowTRENDnet TEW-432BRP
- CVE-2026-10158TRENDnet TEW-432BRP formPortFw stack-based overflowTRENDnet TEW-432BRP
Medium, low and unrated 31
- CVE-2026-10204OFCMS JSON Query SysUserController.java query sql injectionOFCMS
- CVE-2026-10203OFCMS JSON Query SystemParamController.java query sql injectionOFCMS
- CVE-2026-10202OFCMS JSON Query SystemDictController.java query sql injectionOFCMS
- CVE-2026-10201Assimp UV Channel FBXExporter.cpp WriteObjects divide by zeroAssimp
- CVE-2026-10200Assimp 4x4 Matrix glTFCommon.h CopyValue heap-based overflowAssimp
- CVE-2026-10199Assimp glTF2Asset.h LazyDict null pointer dereferenceAssimp
- CVE-2026-10198Assimp glTFImporter glTFImporter.cpp ImportMeshes null pointer dereferenceAssimp
- CVE-2026-10197Assimp TF File glTF2Importer.cpp ImportEmbeddedTextures null pointer dereferenceAssimp
- CVE-2026-48210Possible information disclosure via External InterfaceOTRS AG OTRS
- CVE-2026-10194OFFIS DCMTK dcmqrscp dcmqrdbi.cc deleteOldestImages heap-based overflowOFFIS DCMTK
- CVE-2026-10193OFCMS ComnController ComnController.java query sql injectionOFCMS
- CVE-2026-10186code-projects Online Hospital Management System patient.php sql injectioncode-projects Online Hospital Management System
- CVE-2026-10185SourceCodester Hospitals Patient Records Management System Users.php save sql injectionSourceCodester Hospitals Patient Records Management System
- CVE-2026-10184SourceCodester Hospitals Patient Records Management System Users.php delete sql injectionSourceCodester Hospitals Patient Records Management System
- CVE-2026-10182TRENDnet TEW-432BRP formWlanSetup command injectionTRENDnet TEW-432BRP
- CVE-2026-10180TRENDnet TEW-432BRP formSysCmd command injectionTRENDnet TEW-432BRP
- CVE-2026-10178code-projects Online Music Site AdminEditAlbum.php sql injectioncode-projects Online Music Site
- CVE-2026-10177Aider-AI Aider AWS EC2 Metadata Endpoint api_docs.py requests.get server-side request forgeryAider-AI Aider · aider-chat
- CVE-2026-10176Aider-AI Aider Code Generation Workflow sql injectionAider-AI Aider
- CVE-2026-10175Aider-AI Aider Architect Mode auth.py editor_coder.run code injectionAider-AI Aider · aider-chat
- CVE-2026-10174Aider-AI Aider Pre-commit Hook args.py protection mechanismAider-AI Aider
- CVE-2026-10173Orthanc Explorer 2 URL StudyList.vue cross site scriptingOrthanc Explorer
- CVE-2026-10172Bdtask Multi-Store Inventory Management System Component Module.php upload unrestricted uploadBdtask Multi-Store Inventory Management System
- CVE-2026-10171code-projects Online Music Site AdminUpdateAlbum.php sql injectioncode-projects Online Music Site
- CVE-2026-10170code-projects Visitor Management System phone_0.php sql injectioncode-projects Visitor Management System
- CVE-2026-10169OUSL-GROUP-BrinaryBrains School Student Management System Forgot Password Endpoint Login.php ajax_forgot_password password recoveryOUSL-GROUP-BrinaryBrains School Student Management System
- CVE-2026-10168OUSL-GROUP-BrinaryBrains School Student Management System Parents.php marks resource injectionOUSL-GROUP-BrinaryBrains School Student Management System
- CVE-2026-10167OUSL-GROUP-BrinaryBrains School Student Management System MY_Controller Login.php sign_auth_cookie improper authenticationOUSL-GROUP-BrinaryBrains School Student Management System
- CVE-2026-10166Edimax BR-6478AC POST Request formWlbasic command injectionEdimax BR-6478AC
- CVE-2026-8382Advanced Custom Fields (ACF®) <= 6.8.1 - Unauthenticated Arbitrary Post Modification via Front-End Form '_post_title' and '_post_content' Parameterswpengine Advanced Custom Fields
- CVE-2026-10157Open5GS NGAP PathSwitchRequest Message ngap-handler.c improper authenticationOpen5GS