# CVEs published 2026-06-05

168 CVEs were published on June 5, 2026: 29 critical, 54 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2026-6242](https://cve.now/CVE-2026-6242.md): Authenticated Format String Vulnerability in ONVIF Subscribe Service on TP-Link Tapo C520WS (CVSS 6.8, TP-Link Systems Tapo C520WS)
- [CVE-2026-6241](https://cve.now/CVE-2026-6241.md): Authenticated Format String Vulnerability in ONVIF AddScopes Method on TP-Link Tapo C520WS (CVSS 6.8, TP-Link Systems Tapo C520WS)
- [CVE-2026-6240](https://cve.now/CVE-2026-6240.md): Authenticated Stack-based Buffer Overflow in ONVIF DeleteUsers Service on TP-Link Tapo C520WS (CVSS 6.8, TP-Link Systems Tapo C520WS)
- [CVE-2026-6239](https://cve.now/CVE-2026-6239.md): Authenticated Stack-based Buffer Overflow in ONVIF CreateUsers Service in TP-Link Tao C520WS (CVSS 6.8, TP-Link Systems Tapo C520WS)
- [CVE-2026-34123](https://cve.now/CVE-2026-34123.md): Whitelist Validation Bypass in TP-Link Tapo C520WS (CVSS 7.0, TP-Link Systems Tapo C520WS)
- [CVE-2026-8976](https://cve.now/CVE-2026-8976.md): RSS Aggregator by Feedzy \<= 5.1.7 - Missing Authorization to Authenticated (Contributor+) Import Job Creation, Execution, Purge, Log Clearing, and Information Disclosure via Multiple AJAX Sub-Actions (CVSS 4.3, themeisle RSS Aggregator by Feedzy – Feed to Post, Autoblog…)
- [CVE-2026-8608](https://cve.now/CVE-2026-8608.md): Event Monster \<= 2.1.0 - Unauthenticated Insufficient Verification of Data Authenticity to Payment Bypass via em\_capture\_payment AJAX Action (CVSS 5.3, awordpresslife Event Monster – Event Manager, Ticket Bookin…)
- [CVE-2026-6448](https://cve.now/CVE-2026-6448.md): Quiz and Survey Master (QSM) \<= 11.1.2 - Authenticated (Admin+) SQL Injection via 'order' and 'limit' Parameters (CVSS 4.9, expresstech Quiz and Survey Master (QSM) – Easy Quiz and Su…)
- [CVE-2026-9719](https://cve.now/CVE-2026-9719.md): LatePoint \<= 5.6.0 - Cross-Site Request Forgery via invoices\_\_change\_status Action (CVSS 4.3, LatePoint – Calendar Booking Plugin for Appointments and Ev…)
- [CVE-2026-9290](https://cve.now/CVE-2026-9290.md): WP User Manager \<= 2.9.17 - Unauthenticated Path Traversal to Local File Inclusion via 'tab' Query Parameter (CVSS 7.5, wpusermanager WP User Manager – User Profile Builder & Memb…)
- [CVE-2026-10038](https://cve.now/CVE-2026-10038.md): Charitable \<= 1.8.11.1 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Attachment Deletion via 'avatar' Parameter (CVSS 4.3, smub Charitable – Donation Plugin for WordPress – Fundraisi…)
- [CVE-2026-7047](https://cve.now/CVE-2026-7047.md): Frontend User Notes \<= 2.1.1 - Cross-Site Request Forgery to Note Content Modification via 'confirmEdit' Action (CVSS 4.3, absikandar Frontend User Notes)
- [CVE-2026-8900](https://cve.now/CVE-2026-8900.md): Simple SEO Slideshow \<= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes (CVSS 6.4, spyrosvl Simple SEO Slideshow)
- [CVE-2025-12656](https://cve.now/CVE-2025-12656.md): Migration, Backup, Staging – WPvivid Backup & Migration \<= 0.9.128 - Authenticated (Admin+) Arbitrary Directory Deletion (CVSS 3.8, wpvividplugins WPvivid — Backup, Migration & Staging)
- [CVE-2026-8893](https://cve.now/CVE-2026-8893.md): Express Payment For Stripe \<= 1.28.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes (CVSS 6.4, payaddons Express Payment For Stripe)
- [CVE-2026-7523](https://cve.now/CVE-2026-7523.md): Alba Board \<= 2.1.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via 'card\_id' Parameter (CVSS 4.3, alejo30 Alba Board)
- [CVE-2026-7654](https://cve.now/CVE-2026-7654.md): Admin Columns \<= 7.0.18 - Authenticated (Contributor+) PHP Object Injection to Remote Code Execution via Custom Field Meta Value (CVSS 8.8, codepress Admin Columns)
- [CVE-2026-45409](https://cve.now/CVE-2026-45409.md): Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix (CVSS 6.9, kjd idna · idna)
- [CVE-2026-11416](https://cve.now/CVE-2026-11416.md): MoviePilot Path Traversal via Cloud Storage Download Handlers (CVSS 8.1, jxxghp MoviePilot)
- [CVE-2026-11431](https://cve.now/CVE-2026-11431.md): Path Traversal in Altium Projects Service Allows Arbitrary File Read (CVSS 8.3, Altium Enterprise Server · Altium)
- [CVE-2026-11429](https://cve.now/CVE-2026-11429.md): Path Traversal in Altium Vault ScriptsController Allows Unauthenticated Remote Code Execution (CVSS 10.0, Altium Enterprise Server · Altium)
- [CVE-2026-11424](https://cve.now/CVE-2026-11424.md): Server-Side Request Forgery in Altium Platform Design GraphQL Service Allows Information Disclosure (CVSS 8.3, Altium Enterprise Server · Altium)
- [CVE-2026-11422](https://cve.now/CVE-2026-11422.md): Markdown Preview Enhanced 0.8.x Code Injection via WaveDrom Rendering (CVSS 7.1, shd101wyy Markdown Preview Enhanced · shd101wyy crossnote)
- [CVE-2026-11423](https://cve.now/CVE-2026-11423.md): Path Traversal in Altium Enterprise Server Collaboration Service Allows Privilege Escalation (CVSS 9.4, Altium Enterprise Server)
- [CVE-2026-11420](https://cve.now/CVE-2026-11420.md): Path Traversal in Altium Enterprise Server NIS Allows Unauthenticated Arbitrary File Write and File Read (CVSS 10.0, Altium Enterprise Server)
- [CVE-2026-11419](https://cve.now/CVE-2026-11419.md): Path Traversal in Altium Enterprise Server Vault UploadController Allows Arbitrary File Write (CVSS 9.4, Altium Enterprise Server)
- [CVE-2026-45758](https://cve.now/CVE-2026-45758.md): Malicious code in guardrails-ai 0.10.1 (supply chain compromise) (CVSS 9.6, guardrails-ai guardrails · guardrails-ai)
- [CVE-2026-25624](https://cve.now/CVE-2026-25624.md): Arista Edge Threat Management NGFW UI Administrative Cross-Site Scripting (CVSS 5.7, Arista Networks Arista Edge Threat Management - Arista Next…)
- [CVE-2026-45300](https://cve.now/CVE-2026-45300.md): async-http-client: Cookie header not stripped on cross-origin redirect (CVSS 7.4, AsyncHttpClient async-http-client · org.asynchttpclient:asy…)
- [CVE-2026-25623](https://cve.now/CVE-2026-25623.md): Arista Edge Threat Management NGFW UI Arbitrary Command Execution (CVSS 6.0, Arista Networks Arista Edge Threat Management - Arista Next…)
- [CVE-2026-45779](https://cve.now/CVE-2026-45779.md): Open XDMoD Vulnerable to Unauthenticated SQL Injection Leading to Full Database Compromise (CVSS 9.3, ubccr xdmod)
- [CVE-2026-25622](https://cve.now/CVE-2026-25622.md): Arista Edge Threat Management NGFW Captive Portal Custom Handler Command Injection (CVSS 6.0, Arista Networks Arista Edge Threat Management - Arista Next…)
- [CVE-2026-45778](https://cve.now/CVE-2026-45778.md): Open XDMoD Vulnerable to Reflected Cross-Site Scripting (XSS) in Password Reset (CVSS 8.6, ubccr xdmod)
- [CVE-2026-25621](https://cve.now/CVE-2026-25621.md): Arista Edge Threat Management NGFW Reports Application Insecure Input Validation (CVSS 6.0, Arista Networks Arista Edge Threat Management - Arista Next…)
- [CVE-2026-45777](https://cve.now/CVE-2026-45777.md): Open XDMoD Vulnerable to Unauthenticated Remote Code Execution (RCE) via OS Command Injection (CVSS 9.3, ubccr xdmod)
- [CVE-2026-25620](https://cve.now/CVE-2026-25620.md): Arista Edge Threat Management NGFW Captive Portal Encrypted Password Command Injection (CVSS 6.0, Arista Networks Arista Edge Threat Management - Arista Next…)
- [CVE-2026-45776](https://cve.now/CVE-2026-45776.md): Open XDMoD has Broken Access Control via Client-Controlled Session Variable (CVSS 5.3, ubccr xdmod)
- [CVE-2026-46357](https://cve.now/CVE-2026-46357.md): HAX CMS NodeJS application Vulnerable to Denial of Service using Malicious Import Request (CVSS 6.5, haxtheweb haxcms-nodejs · @haxtheweb/haxcms-nodejs)
- [CVE-2026-46493](https://cve.now/CVE-2026-46493.md): haxtheweb/haxcms-php uses insecure method for generating salt (CVSS 7.5, haxtheweb haxcms-php)
- [CVE-2026-46401](https://cve.now/CVE-2026-46401.md): HAX CMS PHP has Insufficient Session Expiration (CVSS 5.3, haxtheweb issues)
- [CVE-2026-46400](https://cve.now/CVE-2026-46400.md): HAXCMS PHP has a File Upload Validation Bypass (CVSS 8.7, haxtheweb haxcms-php)
- [CVE-2026-46398](https://cve.now/CVE-2026-46398.md): HAX CMS Missing Secure Flag on Cookie (CVSS 8.8, haxtheweb haxcms-php)
- [CVE-2026-46397](https://cve.now/CVE-2026-46397.md): haxcms-php Local File Inclusion via saveOutline API Location Parameter v2.0 (CVSS 6.5, haxtheweb haxcms-php · haxtheweb haxcms-nodejs)
- [CVE-2026-11401](https://cve.now/CVE-2026-11401.md): Privilege Escalation in AWS Advanced Go Wrapper for Amazon Aurora PostgreSQL (CVSS 8.0, AWS Advanced Go Wrapper · github.com/aws/aws-advanced-g… +11)
- [CVE-2026-11400](https://cve.now/CVE-2026-11400.md): Privilege Escalation in AWS Advanced JDBC Wrapper for Amazon Aurora PostgreSQL (CVSS 8.0, AWS Advanced JDBC Wrapper · software.amazon.jdbc:aws-advanc…)
- [CVE-2026-11414](https://cve.now/CVE-2026-11414.md): Unauthenticated File Exfiltration in Altium Enterprise Server Vault Service via Hard-coded Cryptographic Key and Path Traversal (CVSS 10.0, Altium Enterprise Server)
- [CVE-2026-46496](https://cve.now/CVE-2026-46496.md): HAX CMS: Stored XSS via '\<video-player\>' component allows arbitrary JavaScript execution and token theft (CVSS 9.3, haxtheweb haxcms-nodejs · haxtheweb video-player +2)
- [CVE-2026-46396](https://cve.now/CVE-2026-46396.md): HAX CMS has a stored XSS via \<iframe\> that allows access to sensitive client-side data and account takeover (CVSS 9.3, haxtheweb haxcms-nodejs · haxtheweb video-player +4)
- [CVE-2026-46511](https://cve.now/CVE-2026-46511.md): HAXcms: Mass Token Exfiltration and Cross-Tenant Hijack (CVSS 8.7, haxtheweb haxcms-nodejs · haxtheweb haxcms-php +1)
- [CVE-2026-5411](https://cve.now/CVE-2026-5411.md): WP Captcha PRO \<= 5.38 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload (CVSS 8.8, webfactory Advanced Google reCAPTCHA)
- [CVE-2026-5415](https://cve.now/CVE-2026-5415.md): WP Captcha PRO \<= 5.38 - Authenticated (Subscriber+) Authentication Bypass via Temporary Login Link (CVSS 8.8, webfactory Advanced Google reCAPTCHA)
- [CVE-2026-10580](https://cve.now/CVE-2026-10580.md): Hippoo Mobile App for WooCommerce \<= 1.9.4 - Unauthenticated Authentication Bypass to Administrator Account Takeover via REST API (CVSS 9.8, hippooo Hippoo Mobile App for WooCommerce)
- [CVE-2026-46395](https://cve.now/CVE-2026-46395.md): HAX CMS Vulnerable to Private Key Disclosure via Broken HMAC Implementation (CVSS 9.3, haxtheweb haxcms-nodejs · @haxtheweb/haxcms-nodejs)
- [CVE-2026-46394](https://cve.now/CVE-2026-46394.md): HAX CMS Vulnerable to Command Injection using Git.php (CVSS 7.7, haxtheweb haxcms-php)
- [CVE-2026-46393](https://cve.now/CVE-2026-46393.md): HAXcms createSite SSRF Enables Arbitrary File Read (CVSS 7.1, haxtheweb haxcms-nodejs · haxtheweb haxcms-php +1)
- [CVE-2026-46392](https://cve.now/CVE-2026-46392.md): HAX CMS PHP Has a Stored XSS via Case-Sensitivity Mismatch in HTML Upload Validation (CVSS 8.7, haxtheweb haxcms-php)
- [CVE-2026-46391](https://cve.now/CVE-2026-46391.md): HAX open-apis: Credential Theft via Server-Side Request Forgery (SSRF) in open-apis (CVSS 8.7, @haxtheweb/open-apis)
- [CVE-2026-46390](https://cve.now/CVE-2026-46390.md): HAX CMS has Unauthenticated Git Access via User-Controlled Key (CVSS 6.9, haxtheweb haxcms-php)
- [CVE-2026-46399](https://cve.now/CVE-2026-46399.md): Authenticated Remote Code Execution via File Overwrite (CVSS 9.4, haxtheweb haxcms-nodejs · haxtheweb haxcms-php)
- [CVE-2026-46389](https://cve.now/CVE-2026-46389.md): UDS Identity Config has a client authentication bypass in \`ClientIdAndKubernetesSecretAuthenticator\` (CVSS 10.0, defenseunicorns uds-identity-config)
- [CVE-2026-45750](https://cve.now/CVE-2026-45750.md): Termix Vulnerable to Arbitrary Command Execution in File Manager (CVSS 9.0, Termix-SSH Termix)
- [CVE-2026-45749](https://cve.now/CVE-2026-45749.md): Termix's TOTP two-factor authentication can be disabled or bypassed using only the account password (CVSS 8.1, Termix-SSH Termix)
- [CVE-2026-45748](https://cve.now/CVE-2026-45748.md): Termix Vulnerable to Remote Code Execution via SSH Tunnel Forward Command Injection (CVSS 9.8, Termix-SSH Termix)
- [CVE-2026-2379](https://cve.now/CVE-2026-2379.md): Arista EOS IPsec Tunnel Sequence Number Mismatch via Interface Flaps when Anti-Replay is Disabled (CVSS 5.9, Arista Networks EOS)
- [CVE-2026-45746](https://cve.now/CVE-2026-45746.md): Termix Vulnerable to Arbitrary Command Execution via Session Hijacking (CVSS 9.0, Termix-SSH Termix)
- [CVE-2026-45744](https://cve.now/CVE-2026-45744.md): Termix has an OS Command Injection in File Manager resolvePath endpoint (CVSS 9.9, Termix-SSH Termix)
- [CVE-2026-45743](https://cve.now/CVE-2026-45743.md): Termix has a File-Manager Session Hijack via Missing Ownership Check (IDOR) (CVSS 8.1, Termix-SSH Termix)
- [CVE-2026-45745](https://cve.now/CVE-2026-45745.md): Termix has improper certificate validation in Electron desktop client that enables MITM credential/token theft (CVSS 8.0, Termix-SSH Termix)
- [CVE-2026-50733](https://cve.now/CVE-2026-50733.md): Markdown Preview Enhanced Arbitrary Code Execution via WaveDrom eval() (CVSS 8.6, shd101wyy Markdown Preview Enhanced)
- [CVE-2026-49493](https://cve.now/CVE-2026-49493.md): Markdown Preview Enhanced Arbitrary Code Execution via Bitfield interpretJS() (CVSS 8.6, shd101wyy Markdown Preview Enhanced)
- [CVE-2026-49492](https://cve.now/CVE-2026-49492.md): Markdown Preview Enhanced OS Command Injection in External File and Link Opening (CVSS 8.6, shd101wyy Markdown Preview Enhanced)
- [CVE-2025-71318](https://cve.now/CVE-2025-71318.md): NetMan 204 Missing Authentication for Administrative Functions (CVSS 9.3, Riello UPS NetMan)
- [CVE-2025-71317](https://cve.now/CVE-2025-71317.md): NetMan 204 Hard-coded Backdoor Credentials (CVSS 9.3, Riello UPS NetMan)
- [CVE-2026-11344](https://cve.now/CVE-2026-11344.md): code-projects Vehicle Management System New Driver Registration Form newdriver.php unrestricted upload (CVSS 6.9, code-projects Vehicle Management System)
- [CVE-2026-11342](https://cve.now/CVE-2026-11342.md): code-projects Hotel and Tourism Reservation System details.php sql injection (CVSS 6.9, code-projects Hotel and Tourism Reservation System)
- [CVE-2026-45327](https://cve.now/CVE-2026-45327.md): TinyIce: Missing authentication on WebRTC ingest endpoint allows unauthorized stream injection (CVSS 8.2, DatanoiseTV tinyice · github.com/DatanoiseTV/tinyice)
- [CVE-2026-45291](https://cve.now/CVE-2026-45291.md): Cloudburst Network erroneously handles invalid connections (CVSS 7.5, CloudburstMC Network)
- [CVE-2026-45290](https://cve.now/CVE-2026-45290.md): Cloudburst Network has DoS in RakNet connection handling due to missing bound checks (CVSS 7.5, CloudburstMC Network)
- [CVE-2026-11341](https://cve.now/CVE-2026-11341.md): D-Link DWR-M920 formIMEISetup sub\_412DA0 os command injection (CVSS 5.3, D-Link DWR-M920)
- [CVE-2026-11339](https://cve.now/CVE-2026-11339.md): D-Link DWR-M920 formUSSDSetup sub\_41CF20 command injection (CVSS 5.3, D-Link DWR-M920)
- [CVE-2026-7473](https://cve.now/CVE-2026-7473.md): Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass (CVSS 5.8, KEV, Arista Networks EOS)
- [CVE-2026-48112](https://cve.now/CVE-2026-48112.md): GHSL-2026-122 7-Zip Ar SYMDEF OOB Read (CVSS 6.5, mcmilk 7-Zip)
- [CVE-2026-11338](https://cve.now/CVE-2026-11338.md): SourceCodester Ship Ferry Ticket Reservation System manage\_user cross site scripting (CVSS 4.8, SourceCodester Ship Ferry Ticket Reservation System)
- [CVE-2026-8714](https://cve.now/CVE-2026-8714.md): Denial-of-Service Vulnerability in RTSP Input Handling on TP-Link's Tapo C520WS (CVSS 7.1, TP-Link Systems Tapo C520WS)
- [CVE-2026-48111](https://cve.now/CVE-2026-48111.md): GHSL-2026-121 7-Zip UEFI DEPEX OOB Read (CVSS 4.3, mcmilk 7-Zip)
- [CVE-2025-5088](https://cve.now/CVE-2025-5088.md): Arista CloudVision Exchange (CVX) Cluster Privilege Escalation via MCS Redis Session (CVSS 8.3, Arista Networks EOS / CloudVision eXchange)
- [CVE-2026-48104](https://cve.now/CVE-2026-48104.md): GHSL-2026-120: 7-Zip SquashFS BlockToNode uninitialized heap read (CVSS 4.2, mcmilk 7-Zip)
- [CVE-2025-5090](https://cve.now/CVE-2025-5090.md): Arista CloudVision Exchange Cluster Instability via Unexpected Switch Messages (CVSS 6.5, Arista Networks EOS / CloudVision eXchange)
- [CVE-2026-48103](https://cve.now/CVE-2026-48103.md): GHSL-2026-119 7-Zip WIM SecurityId OOB read (CVSS 4.3, mcmilk 7-Zip)
- [CVE-2026-11337](https://cve.now/CVE-2026-11337.md): tittuvarghese CollegeManagementSystem fetch.php cross site scripting (CVSS 5.3, tittuvarghese CollegeManagementSystem)
- [CVE-2025-5089](https://cve.now/CVE-2025-5089.md): Arista EOS SysDB Agent Denial of Service via Malformed CVX Client/Server Messages (CVSS 6.5, Arista Networks EOS / CloudVision eXchange)
- [CVE-2026-48102](https://cve.now/CVE-2026-48102.md): GHSL-2026-118: 7-Zip UDF Field OOB Read (CVSS 3.1, mcmilk 7-Zip)
- [CVE-2026-48101](https://cve.now/CVE-2026-48101.md): GHSL-2026-117: 7-Zip UEFI Capsule uninitialized heap memory disclosure (CVSS 6.5, mcmilk 7-Zip)
- [CVE-2026-11336](https://cve.now/CVE-2026-11336.md): tittuvarghese CollegeManagementSystem Admin admin\_page.php improper authorization (CVSS 5.3, tittuvarghese CollegeManagementSystem)
- [CVE-2026-11362](https://cve.now/CVE-2026-11362.md): DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags (CVSS 9.8, BINARY DataDog::DogStatsd)
- [CVE-2026-9270](https://cve.now/CVE-2026-9270.md): DataDog::DogStatsd versions through 0.07 for Perl allow metric injections (CVSS 9.1, BINARY DataDog::DogStatsd)
- [CVE-2026-10879](https://cve.now/CVE-2026-10879.md): DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders (CVSS 9.8, HMBRAND DBI)
- [CVE-2026-11335](https://cve.now/CVE-2026-11335.md): tittuvarghese CollegeManagementSystem login-form.php session\_start session fixiation (CVSS 5.3, tittuvarghese CollegeManagementSystem)
- [CVE-2026-11334](https://cve.now/CVE-2026-11334.md): tittuvarghese CollegeManagementSystem fetch.php sql injection (CVSS 6.9, tittuvarghese CollegeManagementSystem)
- [CVE-2026-48095](https://cve.now/CVE-2026-48095.md): GHSL-2026-140\_7-Zip: 7-Zip has a heap buffer overflow via NTFS compressed stream buffer under-allocation (CVSS 8.8, mcmilk 7-Zip)
- [CVE-2026-48092](https://cve.now/CVE-2026-48092.md): 7-Zip SquashFS Fragment Offset Overflow (GHSL-2026-116) (CVSS 4.3, mcmilk 7-Zip)
- [CVE-2026-11333](https://cve.now/CVE-2026-11333.md): tittuvarghese CollegeManagementSystem Student Data Upload Endpoint upload\_student\_data.php unrestricted upload (CVSS 5.3, tittuvarghese CollegeManagementSystem)
- [CVE-2025-59174](https://cve.now/CVE-2025-59174.md): Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability where an attacker sending a large volume of specially c (CVSS 7.1, Ericsson Packet Core Controller)
- [CVE-2026-50235](https://cve.now/CVE-2026-50235.md): Lyrion Music Server 9.2.0 Reflected XSS via search Parameters (CVSS 5.1, LMS Community Lyrion Music Server)
- [CVE-2026-50234](https://cve.now/CVE-2026-50234.md): Lyrion Music Server 9.2.0 Path Traversal File Read (CVSS 8.7, LMS Community Lyrion Music Server)
- [CVE-2026-50233](https://cve.now/CVE-2026-50233.md): Lyrion Music Server 9.2.0 Arbitrary Directory Listing (CVSS 6.9, LMS Community Lyrion Music Server)
- [CVE-2026-50232](https://cve.now/CVE-2026-50232.md): Lyrion Music Server 9.2.0 Stored XSS via Metadata Tags (CVSS 5.1, LMS Community Lyrion Music Server)
- [CVE-2026-50231](https://cve.now/CVE-2026-50231.md): Lyrion Music Server 9.2.0 Unauthenticated Stored XSS via server.log (CVSS 5.1, LMS Community Lyrion Music Server)
- [CVE-2026-50230](https://cve.now/CVE-2026-50230.md): Lyrion Music Server 9.2.0 Reflected XSS via server.log (CVSS 5.1, LMS Community Lyrion Music Server)
- [CVE-2026-11330](https://cve.now/CVE-2026-11330.md): thedotmack claude-mem Observation Content Hash store.ts computeObservationContentHash weak hash (CVSS 2.0, thedotmack claude-mem · claude-mem)
- [CVE-2026-11369](https://cve.now/CVE-2026-11369.md): IDOR in Comment API Allows Cross-Process Comment Read and Write (CVSS 7.1, linqi)
- [CVE-2026-11329](https://cve.now/CVE-2026-11329.md): onnx onnx-mlir Placeholder Node Cache backend.py generate\_hash\_key weak hash (CVSS 2.0, onnx-mlir)
- [CVE-2026-11346](https://cve.now/CVE-2026-11346.md): Server-Side Request Forgery (SSRF) allowing Internal Network Probing in linqi (CVSS 5.3, linqi)
- [CVE-2026-11345](https://cve.now/CVE-2026-11345.md): Improper Authentication Bypass in linqi CDN File Access (CVSS 6.9, linqi)
- [CVE-2026-25659](https://cve.now/CVE-2026-25659.md): Ericsson Packet Core Gateway (PCG) - Improper handling of missing values Vulnerability (CVSS 7.1, Ericsson Packet Core Gateway)
- [CVE-2026-25658](https://cve.now/CVE-2026-25658.md): Ericsson Packet Core Gateway (PCG) - Improper handling of missing values Vulnerability (CVSS 7.1, Ericsson Packet Core Gateway)
- [CVE-2026-25657](https://cve.now/CVE-2026-25657.md): Ericsson Packet Core Gateway (PCG) - Improper Handling of Syntactically Invalid Structure Vulnerability (CVSS 7.1, Ericsson Packet Core Gateway)
- [CVE-2026-50263](https://cve.now/CVE-2026-50263.md): Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow() (CVSS 5.5, Red Hat Enterprise Linux)
- [CVE-2026-50262](https://cve.now/CVE-2026-50262.md): Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes (CVSS 5.5, Red Hat Enterprise Linux)
- [CVE-2026-50264](https://cve.now/CVE-2026-50264.md): Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds heap write in dri2 drigetbuffers/drigetbufferswithformat (CVSS 7.8, Red Hat Enterprise Linux)
- [CVE-2026-50261](https://cve.now/CVE-2026-50261.md): Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter() (CVSS 7.8, Red Hat Enterprise Linux)
- [CVE-2026-50260](https://cve.now/CVE-2026-50260.md): Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter() (CVSS 7.8, Red Hat Enterprise Linux)
- [CVE-2026-50258](https://cve.now/CVE-2026-50258.md): Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levels (CVSS 7.8, Red Hat Enterprise Linux)
- [CVE-2026-50259](https://cve.now/CVE-2026-50259.md): Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexing (CVSS 7.8, Red Hat Enterprise Linux)
- [CVE-2026-50256](https://cve.now/CVE-2026-50256.md): Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfont2 name length mismatch (CVSS 7.8, Red Hat Enterprise Linux)
- [CVE-2026-50257](https://cve.now/CVE-2026-50257.md): Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence() (CVSS 7.8, Red Hat Enterprise Linux)
- [CVE-2026-11347](https://cve.now/CVE-2026-11347.md): Hardcoded Cryptographic Keys and Weak IV Generation in linqi (CVSS 8.5, linqi)
- [CVE-2026-21038](https://cve.now/CVE-2026-21038.md): Improper input validation in Samsung Android USB Driver for Windows prior to version 1.9.5.0 allows local attacker to access out-of-bounds m (CVSS 5.9, Samsung Mobile Samsung Android USB Driver for Windows)
- [CVE-2026-21037](https://cve.now/CVE-2026-21037.md): Improper input validation in Samsung Members prior to version 5.8.01.5 allows local attackers to access arbitrary URL and launch arbitrary a (CVSS 6.9, Samsung Mobile Samsung Members)
- [CVE-2026-21036](https://cve.now/CVE-2026-21036.md): Improper authorization in Samsung Internet prior to version 30.0.0.39 allows local attackers to access sensitive information. (CVSS 6.3, Samsung Mobile Samsung Internet)
- [CVE-2026-21035](https://cve.now/CVE-2026-21035.md): Improper input validation in Samsung Plus TV prior to version 1.0.28.6 allows remote attackers to access sensitive information. (CVSS 6.5, Samsung Mobile Samsung Plus TV)
- [CVE-2026-21034](https://cve.now/CVE-2026-21034.md): Improper export of android application components in Samsung Auto prior to version 3.1.2.61 in Android 15 and 3.2.0.38 in Android 16 allows (CVSS 4.8, Samsung Mobile Samsung Auto)
- [CVE-2026-21033](https://cve.now/CVE-2026-21033.md): Improper export of android application components in ExpressHomeWidgetReceiver of Samsung Assistant prior to version 9.3.14 allows local att (CVSS 6.9, Samsung Mobile Samsung Assistant)
- [CVE-2026-21032](https://cve.now/CVE-2026-21032.md): Improper export of android application components in SmartHomeWidgetReceiver of Samsung Assistant prior to version 9.3.14 allows local attac (CVSS 6.9, Samsung Mobile Samsung Assistant)
- [CVE-2026-21031](https://cve.now/CVE-2026-21031.md): Improper authorization in AppBlock prior to SMR Jun-2026 Release 1 allows local attacker to launch arbitrary activity. (CVSS 5.2, Samsung Mobile Devices)
- [CVE-2026-21030](https://cve.now/CVE-2026-21030.md): Improper access control in MediaTek Audio HAL prior to SMR Jun-2026 Release 1 allows local attackers to trigger privileged functions. (CVSS 6.4, Samsung Mobile Devices)
- [CVE-2026-21029](https://cve.now/CVE-2026-21029.md): Improper export of android application components in Galaxy Editing Service prior to SMR Jun-2026 Release 1 allows local attacker to execute (CVSS 6.8, Samsung Mobile Devices)
- [CVE-2026-21028](https://cve.now/CVE-2026-21028.md): Improper access control in AuditLogService prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information. (CVSS 5.1, Samsung Mobile Devices)
- [CVE-2026-21027](https://cve.now/CVE-2026-21027.md): Improper export of android application components in ImsSettings prior to SMR Jun-2026 Release 1 allows local attackers to trigger logging f (CVSS 4.8, Samsung Mobile Devices)
- [CVE-2026-21026](https://cve.now/CVE-2026-21026.md): Improper export of android application components in SpriteWallpaper prior to SMR Jun-2026 Release 1 allows local attackers to access to sen (CVSS 6.4, Samsung Mobile Devices)
- [CVE-2026-21025](https://cve.now/CVE-2026-21025.md): Incorrect privilege assignment in Telephony prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information. (CVSS 6.9, Samsung Mobile Devices)
- [CVE-2026-21017](https://cve.now/CVE-2026-21017.md): Improper handling of insufficient privileges in SecTelephonyProvider prior to SMR Jun-2026 Release 1 allows local attackers to access privil (CVSS 4.6, Samsung Mobile Devices)
- [CVE-2026-8914](https://cve.now/CVE-2026-8914.md): Command injection in Profile change function (CVSS 8.4, Teltonika Networks RUTOS · Teltonika Networks TSWOS)
- [CVE-2026-6274](https://cve.now/CVE-2026-6274.md): Authentication Bypass in DTS Electronics' Redline WR3200 (CVSS 9.8, DTS Electronics Industry and Trade Ltd. Redline WR3200)
- [CVE-2026-49777](https://cve.now/CVE-2026-49777.md): WordPress Product Slider Pro for WooCommerce plugin \< 3.5.4 - Backdoor vulnerability (CVSS 10.0, ShapedPlugin Product Slider Pro for WooCommerce)
- [CVE-2026-11332](https://cve.now/CVE-2026-11332.md): Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution (CVSS 7.8, Red Hat Ansible Automation Platform 2.5 for RHEL · Red… +15)
- [CVE-2026-9088](https://cve.now/CVE-2026-9088.md): Keycloak: keycloak: information disclosure due to user profile permission bypass (CVSS 2.7, Red Hat build of Keycloak · org.keycloak:keycloak-services)
- [CVE-2026-48907](https://cve.now/CVE-2026-48907.md): Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla \< 2.9.99.5 (CVSS 10.0, KEV, joomlacontenteditor.net Joomla Content Editor (JCE) extensi…)
- [CVE-2026-21825](https://cve.now/CVE-2026-21825.md): HCL Digital Experience Compose is affected by a reflected cross-site scripting (XSS) vulnerability in the search center (CVSS 6.1, HCLSoftware DX Compose)
- [CVE-2026-21826](https://cve.now/CVE-2026-21826.md): HCL Digital Experience and HCL Digital Experience Compose could be susceptible to Host header injection (CVSS 6.1, HCLSoftware Digital Experience & DX Compose)
- [CVE-2026-21837](https://cve.now/CVE-2026-21837.md): HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API (CVSS 8.7, HCLSoftware Digital Experience)
- [CVE-2026-10732](https://cve.now/CVE-2026-10732.md): All versions of the package decompress are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) when extracting a ZIP archiv (CVSS 6.1, decompress)
- [CVE-2026-50593](https://cve.now/CVE-2026-50593.md): Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that (CVSS 7.3, Graphite project Graphite)
- [CVE-2026-50592](https://cve.now/CVE-2026-50592.md): In Znuny LTS before 6.5.21 and Znuny before 7.3.3, there is reflected XSS in AdminCommunicationLog (aka the communication log administrati (CVSS 6.4, Znuny)
- [CVE-2026-50591](https://cve.now/CVE-2026-50591.md): In Znuny LTS before 6.5.21 and Znuny before 7.3.3, XSS can occur via stored user preferences. (CVSS 5.4, Znuny)
- [CVE-2026-7763](https://cve.now/CVE-2026-7763.md): Heap buffer overflow in morse.ko TIM IE processing (CVSS 9.8, Morse Micro HaLowLink)
- [CVE-2026-7762](https://cve.now/CVE-2026-7762.md): Heap buffer overflow in dot11ah.ko S1G Capabilities IE processing (CVSS 9.8, Morse Micro HaLowLink)
- [CVE-2026-41567](https://cve.now/CVE-2026-41567.md): Docker: \`PUT /containers/{id}/archive\` executes container binary on the host (CVSS 7.2, moby/v2/daemon · moby Docker Engine +4)
- [CVE-2026-11312](https://cve.now/CVE-2026-11312.md): bytedance InfiniStore KV Map infinistore.h purge\_kv\_map algorithmic complexity (CVSS 4.8, bytedance InfiniStore · infinistore)
- [CVE-2026-50590](https://cve.now/CVE-2026-50590.md): In Mimecast Incydr before 2.6.0, arbitrary file access can occur. (CVSS 4.5, Mimecast Incydr)
- [CVE-2026-11326](https://cve.now/CVE-2026-11326.md): OpenAI Atlas before 1.2025.288.15 exposed privileged browser APIs to web content on \*.openai.com origins. (CVSS 6.0, OpenAI Atlas)
- [CVE-2026-10878](https://cve.now/CVE-2026-10878.md): D-Link DWR-M920 formSmsManage sub\_41C8E8 command injection (CVSS 5.3, D-Link DWR-M920)
- [CVE-2020-25900](https://cve.now/CVE-2020-25900.md): HelloTalk through 3.4.1 stores full-precision GPS coordinates even when the user had intended to share only a country or city. (CVSS 5.3, HelloTalk)
- [CVE-2026-36500](https://cve.now/CVE-2026-36500.md): An issue in the cluster-admin:backup-datastore component of Controller v12.0.5 allows attackers to execute a directory traversal via a craft (CVSS 9.1)
- [CVE-2026-36501](https://cve.now/CVE-2026-36501.md): An issue in the Externalizable.readExternal() component of Controller v12.0.5 allows attackers to cause a Denial of Service (DoS) via a craf (CVSS 7.5)
- [CVE-2026-36785](https://cve.now/CVE-2026-36785.md): Shenzhen Tenda Technology Co., Ltd Tenda FH451 V1.0.0.9 was discovered to contain a stack overflow in the page parameter of the fromDhcpList (CVSS 7.5)
- [CVE-2026-37737](https://cve.now/CVE-2026-37737.md): sanic-cors version 2.2.0 and prior contains an improper regular expression in the try\_match() function in sanic\_cors/core.py that uses re.ma (CVSS 6.5, sanic-cors)
- [CVE-2026-38579](https://cve.now/CVE-2026-38579.md): Multiple reflected Cross-Site Scripting (XSS) vulnerabilities in damasac thaipalliative\_lte through version 3.0 allow remote attackers to in (CVSS 6.1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-06-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.