CVEs published June 2, 2026
224 CVEs were published on June 2, 2026: 14 critical, 82 high.
- Published
- 224
- Critical
- 14
- High
- 82
- Medium
- 118
- Low
- 10
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 102
Most affected products
- open-telemetry opentelemetry-ebpf-instrumentation · go.open…
- 10
- NamelessMC Nameless
- 7
- elixir-tesla tesla · tesla
- 5
- goauthentik authentik
- 5
- Progress Software Sitefinity
- 5
- danny-avila LibreChat
- 4
- DedeCMS
- 4
- elixir-mint mint
- 4
- ahujasid blender-mcp
- 3
- ARMember Premium – Membership Plugin, Content Restriction,…
- 3
Critical 14
- CVE-2026-32625LibreChat Exfiltrates Server Secrets via MCP Server URL Injectiondanny-avila LibreChat
- CVE-2026-49448authentik: SourceStage bypass via empty POSTgoauthentik authentik
- CVE-2026-42849authentik: Reflected XSS in SFE AutosubmitStage allows IDP account takeovergoauthentik authentik
- CVE-2026-5076ARMember Premium <= 7.3.1 - Insecure Password Reset Mechanism to Unauthenticated Privilege EscalationARMember Premium – Membership Plugin, Content Restriction,…
- CVE-2026-0611Spacelabs Healthcare Sentinel 10.5.x < 11.6.0 Unauthenticated RCE via .NET RemotingSpacelabs Healthcare Sentinel
- CVE-2026-42074OpenClaude: Sandbox Bypass via Model-Controlled `dangerouslyDisableSandbox` InputGitlawb openclaude · openclaude
- CVE-2026-47117OpenMed < 1.5.2 Remote Code Execution via PII Model Loadingmaziyarpanahi openmed · openmed
- CVE-2026-7312CWE‑522: Insufficiently Protected Credentials in web services in Progress SitefinityProgress Software Sitefinity
- CVE-2026-7198CWE-284: Improper Access Control in web services in Progress SitefinityProgress Software Sitefinity
- CVE-2026-42684WordPress WP Job Portal plugin <= 2.5.1 - SQL Injection vulnerabilityAhmad WP Job Portal
- CVE-2025-53209WordPress Masteriyo LMS PRO plugin <= 2.20.0 - Privilege Escalation VulnerabilityThemeisle Masteriyo LMS PRO
- CVE-2026-34906Server-Side Template Injection (SSTI) in Wirtualna UczelniaSimple SA Wirtualna Uczelnia
- CVE-2026-8206Kirki 6.0.0 - 6.0.6 - Unauthenticated Privilege Escalation via 'handle_forgot_password'themeum Kirki – Freeform Page Builder, Website Builder & Cu…
- CVE-2026-38967CrowCpp Crow through v1.3.1 HTTP is vulnerable to response header injection via unvalidated response header values.
High 82
- CVE-2026-40108GLPI Vulnerable to Stored XSS in ITIL Costsglpi-project glpi
- CVE-2026-35482alf.io has an Authenticated RCE via Extension Script Sandbox Escapealfio-event alf.io
- CVE-2026-31942LibreChat has IDOR in API Keys Management that allows any authenticated user to overwrite other users' API keysdanny-avila LibreChat
- CVE-2026-25861QloApps 1.7.0 Weak Password Hashing via MD5 in Tools.phpQloApps
- CVE-2026-42504Quadratic complexity in WordDecoder.DecodeHeader in mimeGo standard library mime
- CVE-2021-4481Dräger Protector Software Local Privilege Escalation via Insecure File PermissionsDräger Protector Software
- CVE-2021-4480Dräger Protector Software Local Privilege Escalation via Insecure File PermissionsDräger Protector Software
- CVE-2025-15653Dräger Zeus IE Anesthesia Workstation USB Interface Privilege EscalationDräger Zeus IE · Dräger Zeus RS C500
- CVE-2024-14036Dräger Core 1.0.5 Denial of Service via Malformed SDC MessageDräger Core · Dräger M540 Converter Service
- CVE-2026-8936Unbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VMDocker Desktop
- CVE-2022-4992Dräger Infinity M540 VG4.1.1 Spoofed Network Message Handling DoS/TamperingDräger Infinity Acute Care System · Dräger Standalone Infin…
- CVE-2026-49144BrowserStack Runner 0.9.5 Path Traversal via _default HTTP Handlerbrowserstack-runner
- CVE-2026-49143BrowserStack Runner 0.9.5 Unauthenticated RCE via /_log HTTP Handlerbrowserstack-runner
- CVE-2026-49443authentik: `UserSourceConnection.user` and `GroupSourceConnection.group` are changeable through the APIgoauthentik authentik
- CVE-2026-47201authentik: XML Signature Wrapping in SAML Source ACS allows authentication as arbitrary federated usergoauthentik authentik · goauthentik.io
- CVE-2026-28299SolarWinds Web Help Desk Denial-of-Service VulnerabilitySolarWinds Web Help Desk
- CVE-2021-4478Dräger CC-Vision Basic and CC-Vision E-Cal Out-of-Bounds Write via Malicious GDT FileDräger CC-Vision Basic · Dräger CC-Vision E-Cal
- CVE-2019-25724Dräger Infinity M300 VG2.x Network-Based Denial of ServiceDräger Infinity M300
- CVE-2026-48594Decompression bomb in Tesla.Middleware.DecompressResponse and Tesla.Middleware.Compressionelixir-tesla tesla · tesla
- CVE-2026-48595Authorization header leaks to third-party origin on cross-origin redirect in Tesla.Middleware.FollowRedirectselixir-tesla tesla · tesla
- CVE-2026-48597Atom table exhaustion via untrusted URL scheme in Tesla.Adapter.Mintelixir-tesla tesla · tesla
- CVE-2019-25722Dräger SC Monitoring Devices Hard-coded Credentials and DoSDräger SC 6002XL · Dräger SC6802XL +3
- CVE-2026-5385GLPI 11.0.0 - Stored XSS in knowledge baseglpi-project glpi
- CVE-2026-5073ARMember Premium <= 7.3.1 - Unauthenticated SQL Injection via 'order' ParameterARMember Premium – Membership Plugin, Content Restriction,…
- CVE-2026-42342React Router vulnerable to DoS via unbounded path expansion in __manifest endpointremix-run react-router · @remix-run/server-runtime +1
- CVE-2025-64390A privilege escalation vulnerability exists in PlayStation 4 firmware versions 13.00 through 13.02.Sony PS4
- CVE-2026-42211React Router's vendored turbo-stream v2 allows arbitrary constructor invocation via TYPE_ERROR deserialization leading to Unauth RCEremix-run react-router · react-router
- CVE-2026-34077React Router vulnerable to Denial of Service via reflected user input in single-fetchremix-run react-router · remix-run turbo-stream +2
- CVE-2019-25721Dräger Infinity M300 VG2.3.1 Network-Based Denial of ServiceDräger Infinity M300
- CVE-2026-1829Content Visibility for Divi Builder <= 4.02 - Authenticated (Contributor+) Remote Code Executionjhorowitz Content Visibility for Divi Builder
- CVE-2026-8036Local privilege escalation in NI-PALNI-PAL
- CVE-2026-10701Incorrect boundary conditions in the Graphics: Text componentMozilla Firefox
- CVE-2026-33245React Router vulnerable to XSS in unstable RSC redirect handling via javascript: redirect targetsremix-run react-router · react-router
- CVE-2026-24237NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data.NVIDIA NVTabular
- CVE-2026-24221NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data.NVIDIA NVTabular
- CVE-2026-40715Dell ThinOS 10, versions prior to ThinOS10 2602_10.0765, contain an Improper Access Control vulnerability.Dell ThinOS
- CVE-2026-1871Authenticated Stack-based Buffer Overflow in RTSP Authentication of Tapo C200TP-Link Systems Tapo C200
- CVE-2026-10591Kiro IDE Insufficient File Write Restrictions to Execution-Sensitive PathsAWS Kiro IDE
- CVE-2026-45553NiceGUI: Local file disclosure via Docutils file insertion in ui.restructured_text()zauberzeug nicegui · nicegui
- CVE-2026-45686OpenTelemetry eBPF Instrumentation: Memcached payload length overflow can crash OBIopen-telemetry opentelemetry-ebpf-instrumentation · go.open…
- CVE-2026-45685OpenTelemetry eBPF Instrumentation: MongoDB parser panics on malformed wire messagesopen-telemetry opentelemetry-ebpf-instrumentation · go.open…
- CVE-2026-45678OpenTelemetry eBPF Instrumentation: Postgres BIND parsing can panic on malformed payloadsopen-telemetry opentelemetry-ebpf-instrumentation · go.open…
- CVE-2026-33398Authenticated users can read hidden forum posts through `/forum/get_quotes`NamelessMC Nameless
- CVE-2026-40780WordPress BookIt plugin < 2.5.4.1 - Broken Authentication vulnerabilityLiquid Web / StellarWP BookIt
- CVE-2026-42654WordPress Wallet System for WooCommerce plugin <= 2.7.5 - Broken Authentication vulnerabilityWP Swings Wallet System for WooCommerce
- CVE-2026-40619A high security vulnerability affecting Security Center main server installations has been identified.Genetec Security Center
- CVE-2026-10629CVE-2026-10629Verizon VoLTE
- CVE-2026-10047Out-of-bounds write in Napoca real-mode hook handler via guest-controlled SS:SP (VA-13905)Bitdefender Napoca bare-metal hypervisor
- CVE-2026-10046Out-of-bounds write in Napoca BIOS INT 0x15 E820 memory map handler (VA-13905)Bitdefender Napoca bare-metal hypervisor
- CVE-2026-49754HTTP/2 CONTINUATION flood in Mint client via unbounded header-block accumulationelixir-mint mint
- CVE-2026-48862Unbounded conn.streams growth in Mint HTTP/2 client via unenforced PUSH_PROMISE concurrencyelixir-mint mint
- CVE-2026-10621CVE-2026-10621Collibra Platform
- CVE-2026-10622CVE-2026-10622Collibra Platform
- CVE-2019-25719Dräger Infinity M540 VG4.1.1 Spoofing and DoS via Network Message HandlingDräger Infinity Acute Care System · Dräger Standalone Infin…
- CVE-2025-68886WordPress Cookiteer theme <= 1.4.8 - Local File Inclusion vulnerabilityandroThemes Cookiteer
- CVE-2025-69369WordPress Racquet theme <= 1.12.0 - Local File Inclusion vulnerabilityAxiomthemes Racquet
- CVE-2025-58897WordPress Fermentio theme <= 1.5.0 - Local File Inclusion vulnerabilityAxiomthemes Fermentio
- CVE-2025-58707WordPress Spin theme <= 1.8 - Local File Inclusion vulnerabilityAxiomthemes Spin
- CVE-2026-39555WordPress Askka theme <= 1.3.1 - PHP Object Injection vulnerabilityElated-Themes Askka
- CVE-2026-9844Vulnerability in navify® Digital PathologyRoche Diagnostics navify Digital Pathology
- CVE-2026-7313CWE‑522: Insufficiently Protected Credentials in web services in Progress SitefinityProgress Software Sitefinity
- CVE-2026-7201CWE-639: Authorization Bypass Through User-Controlled Key in web services in Progress SitefinityProgress Software Sitefinity
- CVE-2026-7195CWE-20: Improper Input Validation in web services in Progress SitefinityProgress Software Sitefinity
- CVE-2026-10611OTP bypass via plugin-based LDAP authentication in MISP when LDAP mixed authentication is enabledmisp
- CVE-2026-39553WordPress WaveRide theme <= 1.4 - Local File Inclusion vulnerabilitySelect-Themes WaveRide
- CVE-2026-39552WordPress Blueprint theme < 1.1.5 - Local File Inclusion vulnerabilityCode Supply Blueprint
- CVE-2026-39551WordPress Töbel theme <= 1.8.1 - PHP Object Injection vulnerabilityElated-Themes Töbel
- CVE-2026-39550WordPress Aperitif theme <= 1.6 - PHP Object Injection vulnerabilityElated-Themes Aperitif
- CVE-2026-42685WordPress WP Job Portal plugin <= 2.5.1 - Cross Site Scripting (XSS) vulnerabilityAhmad WP Job Portal
- CVE-2026-42670WordPress Five Star Restaurant Reservations plugin <= 2.7.14 - Payment Bypass vulnerabilityEtoile Web Design Incorporated Five Star Restaurant Reserva…
- CVE-2026-42669WordPress EventPrime plugin <= 4.3.2.0 - Broken Access Control vulnerabilityEventPrime
- CVE-2025-58705WordPress Crafti theme <= 1.12 - Local File Inclusion vulnerabilityAxiomthemes Crafti
- CVE-2025-58024WordPress Accordion FAQ Plugin <= 2.2.1 - Local File Inclusion VulnerabilityUnboundStudio Accordion FAQ
- CVE-2025-53440WordPress Confidant theme <= 1.4 - Local File Inclusion vulnerabilityAxiomthemes Confidant
- CVE-2025-53345WordPress Thim Core plugin <= 2.3.3 - Arbitrary plugin Installation vulnerabilityThimPress Thim Core
- CVE-2025-52759WordPress Accordion FAQ plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerabilityUnboundStudio Accordion FAQ
- CVE-2026-3514Authentication Bypass in prefecthq/prefectprefecthq/prefect · prefect
- CVE-2026-1784Ose-cluster-ingress-operator: remote code execution through haproxy configuration injectionRed Hat OpenShift Container Platform
- CVE-2026-8293Really Simple Security < 9.5.10.1 - Authentication Bypass via Two-Factor OTP SkipReally Simple Security
- CVE-2026-30649Buffer Overflow vulnerability in VIVOTEK INC FD8136-VVTK-0300a allows a remote attacker to execute arbitrary code via the set_getparam.cgi c
- CVE-2026-30650A post-authentication remote buffer overflow vulnerability exists in the /cgi-bin/admin/eventtask.cgi endpoint of the admin interface of Viv
- CVE-2026-30652A remote buffer overflow vulnerability exists in the /cgi-bin/dido/setdo.cgi endpoint of the admin interface of Vivotek FD8136 cameras runni
Medium, low and unrated 128
- CVE-2026-10692johnhuang316 code-index-mcp search_code_advanced is_safe_regex_pattern redosjohnhuang316 code-index-mcp · code-index-mcp
- CVE-2026-10691wonderwhy-er DesktopCommanderMCP start_search search-manager.ts redoswonderwhy-er DesktopCommanderMCP · @wonderwhy-er/desktop-co…
- CVE-2026-9732EmergencyWP <= 1.4.2 - Cross-Site Request Forgery to Plugin Settings Updateplanetshaker EmergencyWP – Dead Man's switch & legacy deliv…
- CVE-2026-7421Passeum Ticketing <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'shop_name' SettingPasseum Ticketing
- CVE-2026-10690wonderwhy-er DesktopCommanderMCP read_file filesystem.ts readFileFromUrl server-side request forgerywonderwhy-er DesktopCommanderMCP · @wonderwhy-er/desktop-co…
- CVE-2026-41412alf.io vulnerable to Arbitrary File Read and Exfil via simpleHttpClient Extension Scriptalfio-event alf.io
- CVE-2026-44654LibreChat: Shared-agent editor can globally delete owner's file records — breaks owner's other private agentsdanny-avila LibreChat
- CVE-2026-10688ahujasid blender-mcp server.py execute_blender_code code injectionahujasid blender-mcp
- CVE-2026-44653LibreChat Shared MCP Server View Leaks Decrypted Admin Secretsdanny-avila LibreChat
- CVE-2026-10719Open Seachest/Seachest NVMe show Format Descriptors VulnerabilityopenSeaChest
- CVE-2026-10718Open Seachest/Seachest NVMe Trim (Deallocate) VulnerabilityopenSeaChest
- CVE-2026-10717Open-Seachest/Seachest show SCSI Defect List VulnerabilityopenSeaChest
- CVE-2026-42507Arbitrary inputs are included in errors without any escaping in net/textprotoGo standard library net/textproto · stdlib
- CVE-2026-27145Inefficient candidate hostname parsing in crypto/x509Go standard library crypto/x509 · stdlib
- CVE-2026-10662ahujasid blender-mcp ZIP File server.py requests.get server-side request forgeryahujasid blender-mcp
- CVE-2026-10661ahujasid blender-mcp server.py open injectionahujasid blender-mcp
- CVE-2026-35212OpenCTI has XSS in the rendering of email-message observable body dataOpenCTI-Platform opencti · pycti
- CVE-2026-10650warmcat libwebsockets SSH Protocol sshd.c lws_ssh_parse_plaintext resource consumptionwarmcat libwebsockets
- CVE-2026-45289CloudburstMC Protocol: Partially missing validation for FULL type authentication tokensCloudburstMC Protocol
- CVE-2026-41569authentik: WS-Federation wreply origin bypass can exfiltrate signed login responses to attacker-controlled endpointsgoauthentik authentik
- CVE-2026-10624SourceCodester Human Resource Management Employee View detailview.php resource injectionSourceCodester Human Resource Management
- CVE-2026-10620code-projects Student Admission System index.php sql injectioncode-projects Student Admission System
- CVE-2026-10619sayan365 student-management-system improper authenticationsayan365 student-management-system
- CVE-2021-4479Dräger Atlan A350 1.00 <= 1.01 DoS via Medibus InterfaceDräger Atlan A350
- CVE-2026-48596CRLF injection in Tesla.Multipart.add_content_type_param/2 allows HTTP header injectionelixir-tesla tesla · tesla
- CVE-2026-48598CRLF injection in Tesla.Multipart disposition parameters allows multipart part header injectionelixir-tesla tesla · tesla
- CVE-2026-10584HTTPS Fallback to HTTP in Graph ExplorerAWS Graph Explorer
- CVE-2026-35202Pterodactyl has a database resource limit bypass via race condition in Client APIpterodactyl panel · pterodactyl/panel
- CVE-2019-25723Dräger Perseus A500 2.00-2.02 DoS via Medibus InterfaceDräger Perseus A500
- CVE-2026-10617nextlevelbuilder GoClaw Webhook Verification auth.go resolveAuth missing authenticationnextlevelbuilder GoClaw
- CVE-2026-35049wire-ios has Persistent Remote DoS via Integer Underflowwireapp wire-ios
- CVE-2026-47265AIOHTTP vulnerable to cross-origin redirect with per-request cookiesaio-libs aiohttp · aiohttp
- CVE-2026-5074ARMember Premium <= 7.3.1 - Authenticated (Subscriber+) SQL Injection via 'sSortDir_0' ParameterARMember Premium – Membership Plugin, Content Restriction,…
- CVE-2026-10616nextlevelbuilder GoClaw Team Task Completion team_tasks_lifecycle.go TeamTasksTool.executeComplete authorizationnextlevelbuilder GoClaw
- CVE-2026-34993AIOHTTP Vulnerable to Deserialization of Untrusted Dataaio-libs aiohttp · aiohttp
- CVE-2026-49120Medplum < 5.1.14 SSRF via FHIR Subscription Endpointmedplum
- CVE-2026-10608DedeCMS carbuyaction.php RemoveXSS sql injectionDedeCMS
- CVE-2026-40181React Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretationremix-run react-router · @remix-run/router +1
- CVE-2026-10607DedeCMS flink.php dede_htmlspecialchars sql injectionDedeCMS
- CVE-2026-8035NULL pointer dereference in NI-PALNI-PAL
- CVE-2026-10702JIT miscompilation in the JavaScript Engine: JIT componentMozilla Firefox
- CVE-2026-41577authentik: SAML source does not validate Conditions, timing, or audience on assertionsgoauthentik authentik
- CVE-2026-33244React Router has stored XSS via unescaped Location header in prerendered redirect HTMLremix-run react-router · react-router
- CVE-2026-40571NamelessMC: Reactions on private or blocking profile posts can be modified without proper authorizationNamelessMC Nameless
- CVE-2026-35447NamelessMC: Private or blocking profile pages can be bypassed with direct POST requests, and reply handling allows cross-profile writesNamelessMC Nameless
- CVE-2026-10606DedeCMS Feedback feedback.php TrimMsg sql injectionDedeCMS
- CVE-2026-49943CZ.NIC BIRD Internet Routing Daemon through 2.19.0 contains a stack-based buffer overflow in the BGP AS_PATH mask matching implementation inNIC BIRD
- CVE-2026-40713Dell ThinOS 10, versions prior to ThinOS10 2602_10.0765, contain an Improper Access control vulnerability.Dell ThinOS
- CVE-2026-40314NamelessMC: Reactions on private or blocking profile posts can be read and modified without proper authorizationNamelessMC Nameless
- CVE-2024-42206HCL iReflection Use of Third party vulnerable and outdated components issue was detected in the web application.HCL iReflection
- CVE-2026-35443NamelessMC: Forum reactions bypass the "view own topics only" restrictionNamelessMC Nameless
- CVE-2026-42073OpenClaude's MCP OAuth Callback: State Check Bypass via error Param Leads to DoSGitlawb openclaude · @gitlawb/openclaude
- CVE-2026-45554NiceGUI: Unauthenticated log-flood DoS via trailing slash on ESM and per-component resource routeszauberzeug nicegui · nicegui
- CVE-2026-45080Klaw: Improper Access Control Allows Disclosure of Password HashAiven-Open klaw
- CVE-2026-44367Klaw: user lockout due to case sensitivity inconsistencyAiven-Open klaw
- CVE-2026-34460NamelessMC: OAuth callback `state` is not validated, allowing login CSRF / session swappingNamelessMC Nameless
- CVE-2026-45684OpenTelemetry eBPF Instrumentation: Log enricher writev path can overread and overwrite user buffersopen-telemetry opentelemetry-ebpf-instrumentation · go.open…
- CVE-2026-45683OpenTelemetry eBPF Instrumentation: Java TLS ioctl kprobe allows kernel memory disclosureopen-telemetry opentelemetry-ebpf-instrumentation · go.open…
- CVE-2026-45681OpenTelemetry eBPF Instrumentation: CPU-mismatch fallback uses 256-byte buffer with 8KB sizeopen-telemetry opentelemetry-ebpf-instrumentation · go.open…
- CVE-2026-45680OpenTelemetry eBPF Instrumentation: Unbounded BPF internal metrics replay can exhaust CPUopen-telemetry opentelemetry-ebpf-instrumentation · go.open…
- CVE-2026-45679OpenTelemetry eBPF Instrumentation: Redis error text is exported in span status messagesopen-telemetry opentelemetry-ebpf-instrumentation · go.open…
- CVE-2026-45676OpenTelemetry eBPF Instrumentation: Unsafe fastelf parsing allows malformed ELF to crash agentopen-telemetry opentelemetry-ebpf-instrumentation · go.open…
- CVE-2026-45682OpenTelemetry eBPF Instrumentation: CappedConcurrentHashMap leaks keys after removalsopen-telemetry opentelemetry-ebpf-instrumentation · go.open…
- CVE-2026-49753HTTP response smuggling in Mint HTTP/1 client via lenient Content-Length parsingelixir-mint mint
- CVE-2026-48861CRLF injection in HTTP/1 request line via unvalidated method in Mintelixir-mint mint
- CVE-2026-9522Improper access control in the PAM account discovery feature in Devolutions Server 2026.1.19 and earlier allows an authenticated user withouDevolutions Server
- CVE-2026-7299CVE-2026-7299Appsmith
- CVE-2026-9590Improper access control in the permission validation component in Devolutions Server 2026.1.19 and earlier allows an authenticated user withDevolutions Server
- CVE-2026-49782WordPress Elementor Website Builder plugin <= 4.1.0 - Broken Access Control vulnerabilityElementor Website Builder
- CVE-2026-27351WordPress Crew HRM plugin <= 1.2.2 - Broken Access Control vulnerabilitySekander Badsha Crew HRM
- CVE-2026-28116WordPress Progress Planner plugin <= 1.9.0 - Cross Site Scripting (XSS) vulnerabilityEmilia Projects Progress Planner
- CVE-2019-25717Dräger Infinity Delta/Kappa Patient Monitors Unauthenticated Log File DisclosureDräger Infinity Delta · Dräger Infinity Kappa
- CVE-2026-42795Symlink Following in Hex Package Export Allows Embedding Files Outside Project RootGleam
- CVE-2026-32685Path Traversal in gleam docs build via documentation.pages Allows Arbitrary File Read and WriteGleam
- CVE-2026-43965Path Traversal in build/packages/packages.toml Allows Arbitrary Directory DeletionGleam
- CVE-2026-32250NamelessMC has Reflected Cross-Site Scripting (XSS) in id parameter of /index.php?route=/queries/user/NamelessMC Nameless
- CVE-2026-41918A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V4.0).Siemens RUGGEDCOM RST2428P
- CVE-2026-8993Improper URL Handler Processing in D.Launcher 2 enables NTLM Credential Disclosure and SSRF attacksDitec a.s. D.Launcher
- CVE-2025-53346WordPress Thim Core Plugin <= 2.3.3 - Broken Access Control VulnerabilityThimPress Thim Core
- CVE-2025-53302WordPress Constructor theme <= 1.6.5 - Broken Access Control VulnerabilityAnton Shevchuk Constructor
- CVE-2025-52766WordPress Printeers Print & Ship plugin <= 1.17.0 - Broken Access Control vulnerabilityPrinteers Print & Ship
- CVE-2026-46718Apache Calcite: A user-controled model can load arbitrary classes, leading to code executionApache Software Foundation Apache Calcite · org.apache.calc…
- CVE-2026-5422Path Traversal in jupyter/jupyterjupyter/jupyter · jupyter-server
- CVE-2026-41115Apache Kafka: Improper Authorization in CONSUMER_GROUP_DESCRIBE APIApache Software Foundation Apache Kafka
- CVE-2026-34907Reflected Cross-Site Scripting (XSS) in Wirtualna UczelniaSimple SA Wirtualna Uczelnia
- CVE-2026-5191Tiled Gallery Carousel Without JetPack <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-image-title'raja3c Tiled Gallery Carousel Without JetPack
- CVE-2026-10549Privilege escalation in Yandex DatabaseYandex Database
- CVE-2026-9722Laiser Tag <= 1.2.5 - Cross-Site Request Forgery to Plugin Settings Update via Settings Formpcis Laiser Tag
- CVE-2026-8422Remove meta boxes per user role <= 1.01 - Cross-Site Request Forgery to Settings Updatemr_mat Remove meta boxes per user role
- CVE-2026-1451rognone <= 0.6.2 - Reflected Cross-Site Scripting via 'a' Parameterfedericocarrara rognone
- CVE-2026-9730Remove NoFollow Commenter URL <= 1.0 - Cross-Site Request Forgery to Settings Updatejamesmuga Remove NoFollow Commenter URL
- CVE-2026-3620Word Replacer <= 0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Replacement' Parametertakien Word Replacer
- CVE-2026-9599Tectite Forms <= 1.3 - Cross-Site Request Forgery to Settings Updaterussellr Tectite Forms
- CVE-2026-8885DeMomentSomTres Shortcodes <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributesmarcqueralt DeMomentSomTres Shortcodes
- CVE-2026-4080Easy Cart <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributeszeshanb Easy Cart
- CVE-2026-2425hiWeb Migration Simple <= 2.0.0.1 - Reflected Cross-Site Scripting via 'new_domain' Parameterden-media hiWeb Migration Simple
- CVE-2026-9723Google Plus One Bottom <= 0.0.2 - Cross-Site Request Forgery to Plugin Settings Update via Settings Pageddd2500 Google Plus One Bottom
- CVE-2025-5085wp-nano-ad <= 1.31 - Authenticated (Administrator+) Stored Cross-Site Scripting via blogrole_link Parameterariyes WP Nano AD
- CVE-2026-1450rognone <= 0.6.2 - Reflected Cross-Site Scripting via 'mode' Parameterfedericocarrara rognone
- CVE-2026-4071BirdSeed <= 2.2.0 - Cross-Site Request Forgery via BirdSeed Token Changebirdseedapp BirdSeed
- CVE-2026-2382FPW Category Thumbnails <= 1.9.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'id' Parameterfrankpw FPW Category Thumbnails
- CVE-2026-9234JTL-Connector for WooCommerce <= 2.4.1 - Missing Authorization to Authenticated (Subscriber+) Settings Modification via Multiple Functionsntbyk JTL-Connector for WooCommerce
- CVE-2026-4081ZeM STL <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributesjhdscript ZeM STL
- CVE-2026-3198Improper Access Control in mlflow/mlflowmlflow/mlflow · mlflow
- CVE-2026-10583nextlevelbuilder GoClaw TTS Configuration Endpoint tts_config.go import server-side request forgerynextlevelbuilder GoClaw
- CVE-2026-10581DedeCMS download.php base64_decode server-side request forgeryDedeCMS
- CVE-2026-10568itsourcecode Fees Management System manage_payment.php sql injectionitsourcecode Fees Management System
- CVE-2026-3871A buffer overflow vulnerability in the UPnP DeletePortMapping() command in Zyxel VMG4005-B50B firmware versions through 5.13(ABRL.5.4)C0 couZyxel VMG4005-B50B firmware
- CVE-2026-105671Panel-dev CordysCRM ModuleFormController ModuleFormService.java save cross site scripting1Panel-dev CordysCRM
- CVE-2026-10510GeniexWebView XSS in com.transsion.aiassistantlifestyleTECNO Mobile com.transsion.aiassistantlifestyle
- CVE-2026-3870A buffer overflow vulnerability in the UPnP AddPortMapping() command in Zyxel VMG4005-B50B firmware versions through 5.13(ABRL.5.4)C0 could Zyxel VMG4005-B50B firmware
- CVE-2026-10566FoundationAgents MetaGPT schema.py Message.check_instruct_content deserializationFoundationAgents MetaGPT · metagpt
- CVE-2026-10565Open5GS NGAP Handover gmm-sm.c gmm_state_security_mode race conditionOpen5GS
- CVE-2026-10100Simple Custom Login Page <= 1.0.3 - Authenticated (Admin+) Stored Cross-Site Scriptingpattihis Simple Custom Login Page
- CVE-2026-3722Auto Image Attributes From Filename With Bulk Updater (Add Alt Text, Image Title For Image SEO) <= 4.9 - Authenticated (Author+) Stored Cross-Site Scripting via Image Attributearunbasillal Auto Image Attributes From Filename With Bulk…
- CVE-2026-10559SourceCodester Pizzafy Ecommerce System index.php file inclusionSourceCodester Pizzafy Ecommerce System
- CVE-2026-10558SourceCodester Pizzafy Ecommerce System index.php file inclusionSourceCodester Pizzafy Ecommerce System
- CVE-2026-10550elunez eladmin Application Deployment App.java command injectionelunez eladmin
- CVE-2026-10548NousResearch hermes-agent Credential Pool Synchronization credential_pool.py _sync_anthropic_entry_from_credentials_file improper authenticationNousResearch hermes-agent
- CVE-2026-10529westboy CicadasCMS Task Scheduling Management ScheduleJobController.java cross site scriptingwestboy CicadasCMS
- CVE-2026-10528Orthanc DICOM Server DCMTK FromDcmtkBridge.cpp read stack-based overflowOrthanc DICOM Server
- CVE-2026-30586Cross Site Scripting vulnerability in usememos Memos v.0.26.0 allows a remote attacker to obtain sensitive information via the SANITIZE_SCHE
- CVE-2026-33553Northern.tech CFEngine Enterprise 3.24.3 before 3.24.4 and 3.27.0 before 3.27.1 allows XSS.
- CVE-2026-35716A stack-based buffer overflow in the motion_privacy.cgi binary in VIVOTEK FD8136 firmware FD8136-VVTK-0300a allows authenticated remote atta
- CVE-2026-35717A stack-based buffer overflow in the export_language.cgi binary in VIVOTEK FD8136 firmware FD8136-VVTK-0300a allows authenticated remote att
- CVE-2026-35718A path traversal vulnerability in the /admin/downloadMedias.cgi endpoint of VIVOTEK INC FD8136-VVTK firmware 0300a allows authenticated atta
- CVE-2026-38978transmission through 4.1.1 was found to have a clickjacking weakness in the browser-facing WebUI and RPC response paths.
- CVE-2026-48682FastNetMon Community Edition through 1.2.9 contains an out-of-bounds read in the IPv4 packet parser.