# CVEs published 2026-06-08

286 CVEs were published on June 8, 2026: 22 critical, 129 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2026-11701](https://cve.now/CVE-2026-11701.md): Inappropriate implementation in Guest View in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to perform UI spoofing via a c (CVSS 5.4, Google Chrome)
- [CVE-2026-11700](https://cve.now/CVE-2026-11700.md): Use after free in Tracing in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to pot (CVSS 8.3, Google Chrome)
- [CVE-2026-11699](https://cve.now/CVE-2026-11699.md): Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption (CVSS 8.8, Google Chrome)
- [CVE-2026-11698](https://cve.now/CVE-2026-11698.md): Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption (CVSS 8.8, Google Chrome)
- [CVE-2026-11697](https://cve.now/CVE-2026-11697.md): Insufficient validation of untrusted input in UI in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially perform a (CVSS 9.6, Google Chrome)
- [CVE-2026-11696](https://cve.now/CVE-2026-11696.md): Uninitialized Use in Video in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer pr (CVSS 5.3, Google Chrome)
- [CVE-2026-11695](https://cve.now/CVE-2026-11695.md): Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to leak cross-origin data via a (CVSS 4.3, Google Chrome)
- [CVE-2026-11694](https://cve.now/CVE-2026-11694.md): Use after free in ServiceWorker in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process (CVSS 7.5, Google Chrome)
- [CVE-2026-11693](https://cve.now/CVE-2026-11693.md): Inappropriate implementation in Plugins in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer (CVSS 8.1, Google Chrome)
- [CVE-2026-11692](https://cve.now/CVE-2026-11692.md): Use after free in Read Anything in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process (CVSS 8.3, Google Chrome)
- [CVE-2026-11691](https://cve.now/CVE-2026-11691.md): Insufficient validation of untrusted input in New Tab Page in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compro (CVSS 3.1, Google Chrome)
- [CVE-2026-11690](https://cve.now/CVE-2026-11690.md): Out of bounds read and write in Media in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who had compromised the rend (CVSS 7.5, Google Chrome)
- [CVE-2026-11689](https://cve.now/CVE-2026-11689.md): Insufficient policy enforcement in Passwords in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the rend (CVSS 8.1, Google Chrome)
- [CVE-2026-11688](https://cve.now/CVE-2026-11688.md): Inappropriate implementation in SVG in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sa (CVSS 8.8, Google Chrome)
- [CVE-2026-11687](https://cve.now/CVE-2026-11687.md): Use after free in Dawn in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via (CVSS 8.8, Google Chrome)
- [CVE-2026-11686](https://cve.now/CVE-2026-11686.md): Insufficient validation of untrusted input in Dawn in Google Chrome on macOS prior to 149.0.7827.103 allowed a remote attacker who had compr (CVSS 3.1, Google Chrome)
- [CVE-2026-11685](https://cve.now/CVE-2026-11685.md): Inappropriate implementation in MediaCapture in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to leak cross-origin (CVSS 4.3, Google Chrome)
- [CVE-2026-11684](https://cve.now/CVE-2026-11684.md): Insufficient policy enforcement in Network in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the utilit (CVSS 3.1, Google Chrome)
- [CVE-2026-11683](https://cve.now/CVE-2026-11683.md): Use after free in WebCodecs in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox vi (CVSS 8.8, Google Chrome)
- [CVE-2026-11682](https://cve.now/CVE-2026-11682.md): Inappropriate implementation in Views in Google Chrome on Linux prior to 149.0.7827.103 allowed a remote attacker who had compromised the re (CVSS 8.3, Google Chrome)
- [CVE-2026-11681](https://cve.now/CVE-2026-11681.md): Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption v (CVSS 8.8, Google Chrome)
- [CVE-2026-11680](https://cve.now/CVE-2026-11680.md): Use after free in Media in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a san (CVSS 8.8, Google Chrome)
- [CVE-2026-11679](https://cve.now/CVE-2026-11679.md): Use after free in Codecs in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer proc (CVSS 8.3, Google Chrome)
- [CVE-2026-11678](https://cve.now/CVE-2026-11678.md): Integer overflow in libyuv in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to ob (CVSS 5.3, Google Chrome)
- [CVE-2026-11677](https://cve.now/CVE-2026-11677.md): Race in Network in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who had compromised the network process to potenti (CVSS 8.3, Google Chrome)
- [CVE-2026-11676](https://cve.now/CVE-2026-11676.md): Insufficient validation of untrusted input in Dawn in Google Chrome on Linux and ChromeOS prior to 149.0.7827.103 allowed a remote attacker (CVSS 8.3, Google Chrome)
- [CVE-2026-11675](https://cve.now/CVE-2026-11675.md): Out of bounds read in Skia in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to le (CVSS 3.1, Google Chrome)
- [CVE-2026-11674](https://cve.now/CVE-2026-11674.md): Use after free in Guest View in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox v (CVSS 8.8, Google Chrome)
- [CVE-2026-11673](https://cve.now/CVE-2026-11673.md): Use after free in InterestGroups in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandb (CVSS 8.8, Google Chrome)
- [CVE-2026-11672](https://cve.now/CVE-2026-11672.md): Heap buffer overflow in GPU in Google Chrome on Android prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer p (CVSS 8.3, Google Chrome)
- [CVE-2026-11671](https://cve.now/CVE-2026-11671.md): Use after free in Navigation in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via (CVSS 9.6, Google Chrome)
- [CVE-2026-11670](https://cve.now/CVE-2026-11670.md): Use after free in PDF in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a cr (CVSS 8.8, Google Chrome)
- [CVE-2026-11669](https://cve.now/CVE-2026-11669.md): Out of bounds read in Media in Google Chrome on ChromeOS prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer (CVSS 5.3, Google Chrome)
- [CVE-2026-11668](https://cve.now/CVE-2026-11668.md): Uninitialized Use in Codecs in Google Chrome on Linux, ChromeOS prior to 149.0.7827.103 allowed a remote attacker to leak cross-origin data (CVSS 4.3, Google Chrome)
- [CVE-2026-11667](https://cve.now/CVE-2026-11667.md): Out of bounds read in WebRTC in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the GPU process to poten (CVSS 7.5, Google Chrome)
- [CVE-2026-11666](https://cve.now/CVE-2026-11666.md): Insufficient validation of untrusted input in Input in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to perform UI spoofin (CVSS 5.4, Google Chrome)
- [CVE-2026-11665](https://cve.now/CVE-2026-11665.md): Out of bounds read in Dawn in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker to leak cross-origin data via a cra (CVSS 4.3, Google Chrome)
- [CVE-2026-11664](https://cve.now/CVE-2026-11664.md): Use after free in Payments in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a c (CVSS 8.8, Google Chrome)
- [CVE-2026-11663](https://cve.now/CVE-2026-11663.md): Use after free in Skia in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potent (CVSS 8.3, Google Chrome)
- [CVE-2026-11662](https://cve.now/CVE-2026-11662.md): Type Confusion in Bindings in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via (CVSS 8.8, Google Chrome)
- [CVE-2026-11661](https://cve.now/CVE-2026-11661.md): Use after free in Views in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer proce (CVSS 8.3, Google Chrome)
- [CVE-2026-11660](https://cve.now/CVE-2026-11660.md): Insufficient validation of untrusted input in New Tab Page in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compro (CVSS 8.3, Google Chrome)
- [CVE-2026-11659](https://cve.now/CVE-2026-11659.md): Integer overflow in UI in Google Chrome on Linux prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape v (CVSS 9.6, Google Chrome)
- [CVE-2026-11658](https://cve.now/CVE-2026-11658.md): Insufficient validation of untrusted input in Extensions in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromi (CVSS 6.5, Google Chrome)
- [CVE-2026-11657](https://cve.now/CVE-2026-11657.md): Use after free in Payments in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via a crafted (CVSS 8.8, Google Chrome)
- [CVE-2026-11656](https://cve.now/CVE-2026-11656.md): Use after free in ServiceWorker in Google Chrome prior to 149.0.7827.103 allowed an attacker who convinced a user to install a malicious ext (CVSS 8.3, Google Chrome)
- [CVE-2026-11655](https://cve.now/CVE-2026-11655.md): Integer overflow in Media in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process (CVSS 8.3, Google Chrome)
- [CVE-2026-11654](https://cve.now/CVE-2026-11654.md): Use after free in CameraCapture in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox e (CVSS 9.6, Google Chrome)
- [CVE-2026-11653](https://cve.now/CVE-2026-11653.md): Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the render (CVSS 6.5, Google Chrome)
- [CVE-2026-11652](https://cve.now/CVE-2026-11652.md): Use after free in Extensions in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to (CVSS 8.3, Google Chrome)
- [CVE-2026-11651](https://cve.now/CVE-2026-11651.md): Use after free in Network in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via (CVSS 9.6, Google Chrome)
- [CVE-2026-11650](https://cve.now/CVE-2026-11650.md): Use after free in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a cra (CVSS 8.8, Google Chrome)
- [CVE-2026-11649](https://cve.now/CVE-2026-11649.md): Use after free in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a cra (CVSS 8.8, Google Chrome)
- [CVE-2026-11648](https://cve.now/CVE-2026-11648.md): Use after free in FullScreen in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corru (CVSS 8.8, Google Chrome)
- [CVE-2026-11647](https://cve.now/CVE-2026-11647.md): Use after free in Printing in Google Chrome on Android prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer pr (CVSS 8.3, Google Chrome)
- [CVE-2026-11646](https://cve.now/CVE-2026-11646.md): Use after free in ViewTransitions in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sand (CVSS 8.8, Google Chrome)
- [CVE-2026-11645](https://cve.now/CVE-2026-11645.md): Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a san (CVSS 8.8, KEV, Google Chrome)
- [CVE-2026-11644](https://cve.now/CVE-2026-11644.md): Use after free in Views in Google Chrome on Linux prior to 149.0.7827.103 allowed an attacker who convinced a user to install a malicious ex (CVSS 7.5, Google Chrome)
- [CVE-2026-11643](https://cve.now/CVE-2026-11643.md): Use after free in Proxy in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via malicious network t (CVSS 8.1, Google Chrome)
- [CVE-2026-11642](https://cve.now/CVE-2026-11642.md): Use after free in Web Apps in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to po (CVSS 8.3, Google Chrome)
- [CVE-2026-11641](https://cve.now/CVE-2026-11641.md): Use after free in Bluetooth in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who convinced a user to engage in (CVSS 7.5, Google Chrome)
- [CVE-2026-11640](https://cve.now/CVE-2026-11640.md): Integer overflow in libyuv in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to po (CVSS 8.3, Google Chrome)
- [CVE-2026-11639](https://cve.now/CVE-2026-11639.md): Use after free in Compositing in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via a craf (CVSS 7.5, Google Chrome)
- [CVE-2026-11638](https://cve.now/CVE-2026-11638.md): Use after free in Printing in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via a (CVSS 9.6, Google Chrome)
- [CVE-2026-11637](https://cve.now/CVE-2026-11637.md): Use after free in Views in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via a crafted HT (CVSS 8.8, Google Chrome)
- [CVE-2026-11636](https://cve.now/CVE-2026-11636.md): Use after free in Autofill in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who convinced a user to engage in s (CVSS 7.5, Google Chrome)
- [CVE-2026-11635](https://cve.now/CVE-2026-11635.md): Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer proce (CVSS 8.3, Google Chrome)
- [CVE-2026-11634](https://cve.now/CVE-2026-11634.md): Use after free in Gamepad in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox esc (CVSS 9.6, Google Chrome)
- [CVE-2026-11633](https://cve.now/CVE-2026-11633.md): Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via a malici (CVSS 8.8, Google Chrome)
- [CVE-2026-11632](https://cve.now/CVE-2026-11632.md): Use after free in TabStrip in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who convinced a user to engage in specific UI (CVSS 7.5, Google Chrome)
- [CVE-2026-11631](https://cve.now/CVE-2026-11631.md): Use after free in Aura in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer proces (CVSS 8.3, Google Chrome)
- [CVE-2026-11630](https://cve.now/CVE-2026-11630.md): Use after free in File Input in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a (CVSS 8.8, Google Chrome)
- [CVE-2026-11629](https://cve.now/CVE-2026-11629.md): Use after free in Ozone in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a craf (CVSS 8.8, Google Chrome)
- [CVE-2026-11628](https://cve.now/CVE-2026-11628.md): Use after free in Ozone in Google Chrome prior to 149.0.7827.103 allowed a local attacker to potentially exploit heap corruption via physica (CVSS 6.8, Google Chrome)
- [CVE-2026-9669](https://cve.now/CVE-2026-9669.md): bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow (CVSS 8.2, Python Software Foundation CPython)
- [CVE-2026-44541](https://cve.now/CVE-2026-44541.md): Fides: DOM-based XSS vulnerability in fides.js via fides\_description override (CVSS 7.0, ethyca fides · ethyca-fides)
- [CVE-2026-40215](https://cve.now/CVE-2026-40215.md): A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7\_alpha1 through 2.7.1 allows remote attackers to potentially cause a server crash or (CVSS 6.1, OpenVPN)
- [CVE-2026-11585](https://cve.now/CVE-2026-11585.md): CodeAstro Student Attendance Management System createClassArms.php sql injection (CVSS 5.3, CodeAstro Student Attendance Management System)
- [CVE-2026-11584](https://cve.now/CVE-2026-11584.md): CodeAstro Student Attendance Management System createClass.php edit sql injection (CVSS 5.3, CodeAstro Student Attendance Management System)
- [CVE-2026-35058](https://cve.now/CVE-2026-35058.md): Improper validation of packet length during tls-crypt-v2 key extraction in OpenVPN 2.6.0 through 2.6.19 and 2.7\_alpha1 through 2.7.1 allows (CVSS 6.9, OpenVPN)
- [CVE-2026-40519](https://cve.now/CVE-2026-40519.md): Nginx Proxy Manager Authenticated RCE via setupCertbotPlugins() (CVSS 7.7, NginxProxyManager nginx-proxy-manager)
- [CVE-2026-11583](https://cve.now/CVE-2026-11583.md): CodeAstro Student Attendance Management System createClass.php sql injection (CVSS 5.3, CodeAstro Student Attendance Management System)
- [CVE-2026-49141](https://cve.now/CVE-2026-49141.md): WACRM Authorization Bypass via Automation Engine Endpoint (CVSS 5.1, ArnasDon wacrm)
- [CVE-2026-46484](https://cve.now/CVE-2026-46484.md): Headplane: Path Traversal + RBAC Bypass in renameNode allows authenticated OIDC users to expire or rename any node/user (CVSS 8.1, tale headplane)
- [CVE-2026-47345](https://cve.now/CVE-2026-47345.md): TYPO3 HTML Sanitizer allows Cross-Site Scripting (CVSS 5.1, TYPO3 HTML Sanitizer · typo3/html-sanitizer)
- [CVE-2026-47344](https://cve.now/CVE-2026-47344.md): TYPO3 HTML Sanitizer allows Cross-Site Scripting (CVSS 2.1, TYPO3 HTML Sanitizer · typo3/html-sanitizer)
- [CVE-2026-11582](https://cve.now/CVE-2026-11582.md): CodeAstro Student Attendance Management System index.php sql injection (CVSS 6.9, CodeAstro Student Attendance Management System)
- [CVE-2026-11559](https://cve.now/CVE-2026-11559.md): CodeAstro Payroll System view\_account.php sql injection (CVSS 5.3, CodeAstro Payroll System)
- [CVE-2026-46490](https://cve.now/CVE-2026-46490.md): samlify: XML Injection in AttributeValue Allows Privilege Escalation in Signed SAML Assertions (CVSS 8.7, tngan samlify · samlify)
- [CVE-2026-11393](https://cve.now/CVE-2026-11393.md): Code injection via improper triple-quote escaping in AgentCore CLI Bedrock Agent import (CVSS 9.0, AWS AgentCore CLI · @aws/agentcore)
- [CVE-2026-46486](https://cve.now/CVE-2026-46486.md): Mobile Verification Toolkit (MVT): Path Traversal via unsanitized File identifiers in iOS Backup processing (CVSS 5.3, mvt-project mvt · mvt)
- [CVE-2026-11558](https://cve.now/CVE-2026-11558.md): CodeAstro Payroll System home\_salary.php sql injection (CVSS 5.3, CodeAstro Payroll System)
- [CVE-2026-10544](https://cve.now/CVE-2026-10544.md): Improper neutralization of special elements in the built-in PAM provider password rotation templates in Devolutions Server allows an authent (CVSS 6.5, Devolutions Server)
- [CVE-2026-10787](https://cve.now/CVE-2026-10787.md): Missing authorization in the deleted user groups API in Devolutions Server allows an authenticated low-privileged user to enumerate metadata (CVSS 4.3, Devolutions Server)
- [CVE-2026-10786](https://cve.now/CVE-2026-10786.md): Improper access control in the ticketing integration settings in Devolutions Server allows an authenticated low-privileged user to obtain cl (CVSS 6.5, Devolutions Server)
- [CVE-2026-52778](https://cve.now/CVE-2026-52778.md): YesWiki has Unsafe eval() in Formula Calculator - Remote Code Execution (RCE) & Denial of Service (DoS) (CVSS 9.8, yeswiki · yeswiki/yeswiki)
- [CVE-2026-11557](https://cve.now/CVE-2026-11557.md): Tenda F451 Web Management Natlimit fromNatlimit stack-based overflow (CVSS 8.7, Tenda F451)
- [CVE-2026-11556](https://cve.now/CVE-2026-11556.md): Tenda F451 Web Management WriteFacMac formWriteFacMac os command injection (CVSS 8.7, Tenda F451)
- [CVE-2026-11555](https://cve.now/CVE-2026-11555.md): D-Link DGS-1100-08PD Web boa.conf least privilege violation (CVSS 6.3, D-Link DGS-1100-08PD)
- [CVE-2026-11554](https://cve.now/CVE-2026-11554.md): TOTOLINK CP450 vsftpd vsftpd.conf least privilege violation (CVSS 5.3, TOTOLINK CP450)
- [CVE-2026-8913](https://cve.now/CVE-2026-8913.md): Command Injection in TP-Link's Archer MR600 WireGuard Client Configuration (CVSS 8.5, TP-Link Systems Archer MR600)
- [CVE-2026-11553](https://cve.now/CVE-2026-11553.md): Tenda HG7/HG9/HG10 formPPPEdit stack-based overflow (CVSS 8.7, Tenda HG7 · Tenda HG9 +1)
- [CVE-2026-11552](https://cve.now/CVE-2026-11552.md): SourceCodester Onlne Examination & Learning Management System import\_users.php hard-coded password (CVSS 6.9, SourceCodester Onlne Examination & Learning Management Syst…)
- [CVE-2026-45581](https://cve.now/CVE-2026-45581.md): fabric-chaincode-java: TLS Private Key Password Disclosed in INFO Startup Logs in Chaincode-as-a-Service Mode (CVSS 5.5, hyperledger fabric-chaincode-java · org.hyperledger.fabric-…)
- [CVE-2026-25555](https://cve.now/CVE-2026-25555.md): OpenBullet2 0.3.2 Authentication Bypass via X-Api-Key Header (CVSS 9.3, openbullet2)
- [CVE-2026-25559](https://cve.now/CVE-2026-25559.md): OpenBullet2 0.3.2 Path Traversal via Wordlist Endpoint (CVSS 8.7, openbullet2)
- [CVE-2026-46481](https://cve.now/CVE-2026-46481.md): OpenMetadata: TEST\_CONNECTION workflow leaks ingestion-bot JWT and database password to regular users (CVSS 8.3, open-metadata OpenMetadata · org.open-metadata:openmetadata…)
- [CVE-2026-25856](https://cve.now/CVE-2026-25856.md): OpenBullet2 0.3.2 Authenticated RCE via Job Configuration Interface (CVSS 8.7, openbullet2)
- [CVE-2026-25855](https://cve.now/CVE-2026-25855.md): OpenBullet2 0.3.2 Authenticated RCE via FileProxySource Script Upload (CVSS 8.7, openbullet2)
- [CVE-2026-39908](https://cve.now/CVE-2026-39908.md): OpenBullet2 0.3.2 NTLMv2 Hash Disclosure via UNC Path Proxy Source (CVSS 7.1, openbullet2)
- [CVE-2026-11534](https://cve.now/CVE-2026-11534.md): imvks786 student\_management\_system add.php cross site scripting (CVSS 5.1, imvks786 student\_management\_system)
- [CVE-2026-43966](https://cve.now/CVE-2026-43966.md): HTTP Response Splitting via Non-VCHAR Bytes in cow\_http\_struct\_hd:escape\_string/2 (CVSS 6.3, ninenines cowlib · cowlib +2)
- [CVE-2026-11533](https://cve.now/CVE-2026-11533.md): imvks786 student\_management\_system Student Deletion Endpoint see.php improper authorization (CVSS 5.3, imvks786 student\_management\_system)
- [CVE-2026-11611](https://cve.now/CVE-2026-11611.md): 389-ds-base: 389-ds-base: content sync plugin unbounded queue growth and race conditions (CVSS 6.5, Red Hat Directory Server · Red Hat Enterprise Linux)
- [CVE-2026-39910](https://cve.now/CVE-2026-39910.md): STACKIT IaaS API Privilege Escalation via Service Account Attachment (CVSS 7.7, STACKIT IaaS API)
- [CVE-2026-11532](https://cve.now/CVE-2026-11532.md): imvks786 student\_management\_system Student Record add.php access control (CVSS 5.3, imvks786 student\_management\_system)
- [CVE-2026-41448](https://cve.now/CVE-2026-41448.md): AdGuard Home Authentication Bypass via Path Traversal in Admin-Token Cookie (CVSS 9.2, AdguardTeam AdGuardHome)
- [CVE-2026-11531](https://cve.now/CVE-2026-11531.md): imvks786 student\_management\_system Administrator Login Endpoint admin\_login.php sql injection (CVSS 6.9, imvks786 student\_management\_system)
- [CVE-2026-46314](https://cve.now/CVE-2026-46314.md): drm/v3d: Reject empty multisync extension to prevent infinite loop (no CVSS, Linux)
- [CVE-2026-46313](https://cve.now/CVE-2026-46313.md): media: intel/ipu6: fix error pointer dereference (no CVSS, Linux)
- [CVE-2026-46312](https://cve.now/CVE-2026-46312.md): media: videobuf2: Set vma\_flags in vb2\_dma\_sg\_mmap (no CVSS, Linux)
- [CVE-2026-46311](https://cve.now/CVE-2026-46311.md): drm/amdgpu/userq: fix access to stale wptr mapping (CVSS 7.8, Linux)
- [CVE-2026-46310](https://cve.now/CVE-2026-46310.md): media: renesas: vsp1: Fix NULL pointer deref on module unload (no CVSS, Linux)
- [CVE-2026-46309](https://cve.now/CVE-2026-46309.md): drm/xe/uapi: Reject coh\_none PAT index for CPU cached memory in madvise (CVSS 7.0, Linux)
- [CVE-2026-46308](https://cve.now/CVE-2026-46308.md): pmdomain: mediatek: fix use-after-free in scpsys\_get\_bus\_protection\_legacy() (no CVSS, Linux)
- [CVE-2026-46307](https://cve.now/CVE-2026-46307.md): wifi: ath5k: do not access array OOB (CVSS 8.3, Linux)
- [CVE-2026-46306](https://cve.now/CVE-2026-46306.md): flow\_dissector: do not dissect PPPoE PFC frames (CVSS 7.5, Linux)
- [CVE-2026-46305](https://cve.now/CVE-2026-46305.md): staging: rtl8723bs: os\_dep: avoid NULL pointer dereference in rtw\_cbuf\_alloc (no CVSS, Linux)
- [CVE-2026-46304](https://cve.now/CVE-2026-46304.md): nvmet: avoid recursive nvmet-wq flush in nvmet\_ctrl\_free (CVSS 7.5, Linux)
- [CVE-2026-46303](https://cve.now/CVE-2026-46303.md): isofs: validate Rock Ridge CE continuation extent against volume size (CVSS 8.2, Linux)
- [CVE-2026-46302](https://cve.now/CVE-2026-46302.md): selinux: allow multiple opens of /sys/fs/selinux/policy (no CVSS, Linux)
- [CVE-2026-46301](https://cve.now/CVE-2026-46301.md): spi: topcliff-pch: fix use-after-free on unbind (no CVSS, Linux)
- [CVE-2026-46299](https://cve.now/CVE-2026-46299.md): hfsplus: fix held lock freed on hfsplus\_fill\_super() (CVSS 7.0, Linux)
- [CVE-2026-46298](https://cve.now/CVE-2026-46298.md): pseries/papr-hvpipe: Fix race with interrupt handler (no CVSS, Linux)
- [CVE-2026-46297](https://cve.now/CVE-2026-46297.md): net: libwx: use request\_irq for VF misc interrupt (no CVSS, Linux)
- [CVE-2026-46296](https://cve.now/CVE-2026-46296.md): spi: s3c64xx: fix NULL-deref on driver unbind (no CVSS, Linux)
- [CVE-2026-46295](https://cve.now/CVE-2026-46295.md): KVM: x86: Do IRR scan in \_\_kvm\_apic\_update\_irr even if PIR is empty (no CVSS, Linux)
- [CVE-2026-46294](https://cve.now/CVE-2026-46294.md): dm: fix a buffer overflow in ioctl processing (no CVSS, Linux)
- [CVE-2026-46293](https://cve.now/CVE-2026-46293.md): clk: microchip: mpfs-ccc: fix out of bounds access during output registration (no CVSS, Linux)
- [CVE-2026-46292](https://cve.now/CVE-2026-46292.md): pmdomain: core: Fix detach procedure for virtual devices in genpd (no CVSS, Linux)
- [CVE-2026-46291](https://cve.now/CVE-2026-46291.md): crypto: caam - guard HMAC key hex dumps in hash\_digest\_key (no CVSS, Linux)
- [CVE-2026-46290](https://cve.now/CVE-2026-46290.md): x86/efi: Fix graceful fault handling after FPU softirq changes (no CVSS, Linux)
- [CVE-2026-46289](https://cve.now/CVE-2026-46289.md): lib/scatterlist: fix length calculations in extract\_kvec\_to\_sg (CVSS 9.8, Linux)
- [CVE-2026-11530](https://cve.now/CVE-2026-11530.md): imvks786 student\_management\_system Login index.ph sql injection (CVSS 6.9, imvks786 student\_management\_system)
- [CVE-2026-46288](https://cve.now/CVE-2026-46288.md): of: unittest: fix use-after-free in of\_unittest\_changeset() (CVSS 8.4, Linux)
- [CVE-2026-46287](https://cve.now/CVE-2026-46287.md): net: txgbe: fix RTNL assertion warning when remove module (no CVSS, Linux)
- [CVE-2026-46286](https://cve.now/CVE-2026-46286.md): leds: qcom-lpg: Check for array overflow when selecting the high resolution (no CVSS, Linux)
- [CVE-2026-46285](https://cve.now/CVE-2026-46285.md): mtd: docg3: fix use-after-free in docg3\_release() (no CVSS, Linux)
- [CVE-2026-46284](https://cve.now/CVE-2026-46284.md): mm/hugetlb: fix early boot crash on parameters without '=' separator (no CVSS, Linux)
- [CVE-2026-46283](https://cve.now/CVE-2026-46283.md): tpm: Use kfree\_sensitive() to free auth session in tpm\_dev\_release() (no CVSS, Linux)
- [CVE-2026-46282](https://cve.now/CVE-2026-46282.md): iio: frequency: admv1013: fix NULL pointer dereference on str (no CVSS, Linux)
- [CVE-2026-46281](https://cve.now/CVE-2026-46281.md): vmalloc: fix buffer overflow in vrealloc\_node\_align() (no CVSS, Linux)
- [CVE-2026-46280](https://cve.now/CVE-2026-46280.md): lib: test\_hmm: evict device pages on file close to avoid use-after-free (CVSS 7.8, Linux)
- [CVE-2026-46279](https://cve.now/CVE-2026-46279.md): mm/alloc\_tag: clear codetag for pages allocated before page\_ext initialization (no CVSS, Linux)
- [CVE-2026-46278](https://cve.now/CVE-2026-46278.md): drm/imagination: Fix segfault when updating ftrace mask (no CVSS, Linux)
- [CVE-2026-46277](https://cve.now/CVE-2026-46277.md): mm/zone\_device: do not touch device folio after calling -\>folio\_free() (CVSS 7.8, Linux)
- [CVE-2026-46276](https://cve.now/CVE-2026-46276.md): drm/amdgpu: fix zero-size GDS range init on RDNA4 (no CVSS, Linux)
- [CVE-2026-48507](https://cve.now/CVE-2026-48507.md): Snipe-IT: Bulk editing users allowed \`ldap\_import\` and \`activated\_in\` bulk editing users (CVSS 7.1, grokability snipe-it · snipe/snipe-it)
- [CVE-2026-46480](https://cve.now/CVE-2026-46480.md): Flowise: Evaluator create+update mass-assignment allows cross-workspace evaluator takeover (CVSS 7.7, FlowiseAI Flowise · flowise)
- [CVE-2026-46479](https://cve.now/CVE-2026-46479.md): Flowise: Evaluation create+update mass-assignment allows cross-workspace evaluation takeover (CVSS 7.7, FlowiseAI Flowise · flowise)
- [CVE-2026-46478](https://cve.now/CVE-2026-46478.md): Flowise: DatasetRow create+update mass-assignment allows cross-workspace row takeover (CVSS 7.7, FlowiseAI Flowise · flowise)
- [CVE-2026-46477](https://cve.now/CVE-2026-46477.md): Flowise: Dataset create+update mass-assignment allows cross-workspace dataset takeover (CVSS 7.7, FlowiseAI Flowise · flowise)
- [CVE-2026-46476](https://cve.now/CVE-2026-46476.md): Flowise: CustomTemplate create+update mass-assignment allows cross-workspace template takeover (CVSS 7.7, FlowiseAI Flowise · flowise)
- [CVE-2026-46475](https://cve.now/CVE-2026-46475.md): Flowise: Assistant create+update mass-assignment allows cross-workspace assistant takeover (CVSS 7.7, FlowiseAI Flowise · flowise)
- [CVE-2026-46443](https://cve.now/CVE-2026-46443.md): Flowise: Credential Data Leak (CVSS 7.0, FlowiseAI Flowise · flowise)
- [CVE-2026-46442](https://cve.now/CVE-2026-46442.md): Flowise: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape (CVSS 9.4, FlowiseAI Flowise · flowise)
- [CVE-2026-46441](https://cve.now/CVE-2026-46441.md): Flowise: Mass Assignment in Assistant Update Endpoint Allows Cross-Workspace Resource Reassignment (CVSS 7.6, FlowiseAI Flowise · flowise)
- [CVE-2026-11529](https://cve.now/CVE-2026-11529.md): designcomputer mysql-mcp-server mysql URI server.py read\_resource sql injection (CVSS 5.3, designcomputer mysql-mcp-server · mysql-mcp-server)
- [CVE-2026-46440](https://cve.now/CVE-2026-46440.md): Flowise: Basic Auth Credentials Exposed via API (CVSS 7.5, FlowiseAI Flowise · flowise)
- [CVE-2026-42863](https://cve.now/CVE-2026-42863.md): Flowise: Mass Assignment in Chatflow Update Endpoint Allows Cross-Workspace AgentFlow Reassignment (CVSS 7.6, FlowiseAI Flowise · flowise)
- [CVE-2026-49975](https://cve.now/CVE-2026-49975.md): Apache HTTP Server: mod\_http2 denial of service (CVSS 7.5, Apache Software Foundation Apache HTTP Server)
- [CVE-2026-42862](https://cve.now/CVE-2026-42862.md): Flowise: Mass Assignment in Tool Update Endpoint Allows Cross-Workspace Resource Reassignment (CVSS 7.6, FlowiseAI Flowise · flowise)
- [CVE-2026-42861](https://cve.now/CVE-2026-42861.md): Flowise: Mass Assignment in Variable Update Endpoint Allows Cross-Workspace Resource Reassignment (CVSS 7.6, FlowiseAI Flowise · flowise)
- [CVE-2026-46444](https://cve.now/CVE-2026-46444.md): Flowise: Vector Store No Permission Checks (CVSS 8.7, FlowiseAI Flowise · flowise)
- [CVE-2026-48913](https://cve.now/CVE-2026-48913.md): Apache HTTP Server: mod\_http2 memory corruption when file handles exhausted (CVSS 7.3, Apache Software Foundation Apache HTTP Server)
- [CVE-2026-42536](https://cve.now/CVE-2026-42536.md): Apache HTTP Server: mod\_xml2enc heap overflow (CVSS 7.5, Apache Software Foundation Apache HTTP Server)
- [CVE-2026-44185](https://cve.now/CVE-2026-44185.md): Apache HTTP Server: Stack Buffer Over-Read in mod\_ssl OCSP \`send\_request\` (CVSS 7.3, Apache Software Foundation Apache HTTP Server)
- [CVE-2026-49755](https://cve.now/CVE-2026-49755.md): Decompression bomb DoS in Req via auto-decoded archive and compressed response bodies (CVSS 8.2, wojtekmach req)
- [CVE-2026-34355](https://cve.now/CVE-2026-34355.md): Apache HTTP Server: mod\_proxy\_html buffer overflow (CVSS 7.5, Apache Software Foundation Apache HTTP Server)
- [CVE-2026-49756](https://cve.now/CVE-2026-49756.md): Multipart form-data header injection in Req via unescaped name/filename/content\_type (CVSS 2.1, wojtekmach req)
- [CVE-2026-44631](https://cve.now/CVE-2026-44631.md): Apache HTTP Server: Heap Underflow in \`ap\_regname\` via Signed Char Overflow (CVSS 9.8, Apache Software Foundation Apache HTTP Server)
- [CVE-2026-44119](https://cve.now/CVE-2026-44119.md): Apache HTTP Server: escalation of privilege through expressions in .htaccess in multiple modules (CVSS 5.5, Apache Software Foundation Apache HTTP Server)
- [CVE-2026-43951](https://cve.now/CVE-2026-43951.md): Apache HTTP Server: OOB Read in \`merge\_response\_headers\` can cause crash (CVSS 6.5, Apache Software Foundation Apache HTTP Server)
- [CVE-2026-11528](https://cve.now/CVE-2026-11528.md): Tenda AC18 Web Management getRebootStatus sub\_45304 stack-based overflow (CVSS 8.7, Tenda AC18)
- [CVE-2026-48488](https://cve.now/CVE-2026-48488.md): phpMyFAQ has Weak Cryptography - SHA1 for Password Hashing (CVSS 2.7, thorsten phpMyFAQ · thorsten/phpmyfaq +1)
- [CVE-2026-42535](https://cve.now/CVE-2026-42535.md): Apache HTTP Server: mod\_dav\_fs protected directory access (CVSS 9.1, Apache Software Foundation Apache HTTP Server)
- [CVE-2026-34356](https://cve.now/CVE-2026-34356.md): Apache HTTP Server: ProxyPassReverseCookieMap buffer overflow (CVSS 7.5, Apache Software Foundation Apache HTTP Server)
- [CVE-2026-44186](https://cve.now/CVE-2026-44186.md): Apache HTTP Server: Loop in \`proxy\_ftp\_handler\` in mod\_proxy\_ftp (CVSS 7.3, Apache Software Foundation Apache HTTP Server)
- [CVE-2026-29170](https://cve.now/CVE-2026-29170.md): Apache HTTP Server: mod\_proxy\_ftp XSS (CVSS 6.1, Apache Software Foundation Apache HTTP Server)
- [CVE-2026-29167](https://cve.now/CVE-2026-29167.md): Apache HTTP Server: mod\_ldap per-dir use-after-free (CVSS 9.8, Apache Software Foundation Apache HTTP Server)
- [CVE-2026-46657](https://cve.now/CVE-2026-46657.md): Bludit's persistent authentication tokens not revoked upon account disablement (CVSS 7.1, bludit)
- [CVE-2020-37248](https://cve.now/CVE-2020-37248.md): OfflineIMAP before 8.0.3 trusts the server with their STARTTLS capability prior to authentication, which allows STRIPTLS/man-in-the-middle a (CVSS 6.5, OfflineIMAP)
- [CVE-2026-11524](https://cve.now/CVE-2026-11524.md): Tenda W20E Web Management modifyWifiFilterRules stack-based overflow (CVSS 8.7, Tenda W20E)
- [CVE-2026-34194](https://cve.now/CVE-2026-34194.md): GPU DDK - UAF read and/or write to arbitrary physical pages in DevmemIntChangeSparse due to incorrect calculation of the virtual index count (CVSS 7.1, Imagination Technologies Graphics DDK)
- [CVE-2026-22164](https://cve.now/CVE-2026-22164.md): GPU DDK - Kernel heap OOB write in DevmemIntComputeVirtualIndicesFromLogical (CVSS 7.5, Imagination Technologies Graphics DDK)
- [CVE-2026-46656](https://cve.now/CVE-2026-46656.md): Bludit CMS has improper authorization and mediation failure leading to persistent ghost sessions (CVSS 8.8, bludit)
- [CVE-2026-11523](https://cve.now/CVE-2026-11523.md): Tenda W20E Web Management PortalAuth formPortalAuth stack-based overflow (CVSS 8.7, Tenda W20E)
- [CVE-2026-46275](https://cve.now/CVE-2026-46275.md): Bluetooth: hci\_uart: fix UAFs and race conditions in close and init paths (CVSS 7.8, Linux)
- [CVE-2026-46274](https://cve.now/CVE-2026-46274.md): io-wq: check that the predecessor is hashed in io\_wq\_remove\_pending() (CVSS 7.8, Linux)
- [CVE-2025-71315](https://cve.now/CVE-2025-71315.md): drm/vkms: Convert to DRM's vblank timer (no CVSS, Linux)
- [CVE-2026-11522](https://cve.now/CVE-2026-11522.md): Tenda W20E setPortMirror formSetPortMirror stack-based overflow (CVSS 8.7, Tenda W20E)
- [CVE-2026-11521](https://cve.now/CVE-2026-11521.md): Mohammed-eid35 bank-management-system-springboot Transaction Endpoint TransactionController.java improper authorization (CVSS 5.3, Mohammed-eid35 bank-management-system-springboot)
- [CVE-2026-43973](https://cve.now/CVE-2026-43973.md): gun HTTP/1.1 response buffer has no size limit allowing server-controlled memory exhaustion (CVSS 8.7, ninenines gun)
- [CVE-2026-43972](https://cve.now/CVE-2026-43972.md): gun HTTP/2 PUSH\_PROMISE authority not validated against connection origin allows cross-origin cookie injection (CVSS 6.3, ninenines gun)
- [CVE-2026-43974](https://cve.now/CVE-2026-43974.md): gun HTTP/1.1 client accepts unsolicited 101 Switching Protocols response allowing server-driven protocol hijack and OOM (CVSS 8.7, ninenines gun)
- [CVE-2026-25558](https://cve.now/CVE-2026-25558.md): QloApps 1.7.0 Stored XSS via SVG File Upload in Admin File Manager (CVSS 4.8, QloApps)
- [CVE-2026-11520](https://cve.now/CVE-2026-11520.md): SourceCodester Inventory System header.php cross site scripting (CVSS 5.1, SourceCodester Inventory System)
- [CVE-2026-11519](https://cve.now/CVE-2026-11519.md): SourceCodester Inventory System Account Creation users\_handler.php improper authorization (CVSS 5.3, SourceCodester Inventory System)
- [CVE-2026-11518](https://cve.now/CVE-2026-11518.md): SourceCodester Inventory System User Management users.php cross site scripting (CVSS 5.3, SourceCodester Inventory System)
- [CVE-2026-11517](https://cve.now/CVE-2026-11517.md): UTT HiPER 2610G formConfigDnsFilterGlobal strcpy buffer overflow (CVSS 8.7, UTT HiPER)
- [CVE-2026-11516](https://cve.now/CVE-2026-11516.md): UTT HiPER 2610G formNatStaticMap strcpy buffer overflow (CVSS 5.1, UTT HiPER)
- [CVE-2026-49235](https://cve.now/CVE-2026-49235.md): Routinator crashes on specifically crafted RRDP XML files (CVSS 8.7, NLnet Labs Routinator · routinator)
- [CVE-2026-49234](https://cve.now/CVE-2026-49234.md): Routinator crashes on specifically crafted ASN strings in the API (CVSS 8.2, NLnet Labs Routinator · routinator)
- [CVE-2026-49233](https://cve.now/CVE-2026-49233.md): Routinator cache path traversal using rogue rsync URIs (CVSS 8.3, NLnet Labs Routinator · routinator)
- [CVE-2026-49232](https://cve.now/CVE-2026-49232.md): Routinator exits when accepting an incoming HTTP or RTR connection fails (CVSS 8.7, NLnet Labs Routinator)
- [CVE-2026-11515](https://cve.now/CVE-2026-11515.md): SourceCodester Barangay Resident Profiling and Information Management System Password Reset passsword\_reset.php hard-coded password (CVSS 6.9, SourceCodester Barangay Resident Profiling and Information…)
- [CVE-2026-11514](https://cve.now/CVE-2026-11514.md): itsourcecode Hospital Management System addpatient.php sql injection (CVSS 5.3, itsourcecode Hospital Management System)
- [CVE-2026-11513](https://cve.now/CVE-2026-11513.md): itsourcecode Hospital Management System adminaccount.php sql injection (CVSS 5.3, itsourcecode Hospital Management System)
- [CVE-2026-9549](https://cve.now/CVE-2026-9549.md): Fix XSS in service discovery active check output (CVSS 4.8, Checkmk)
- [CVE-2026-8833](https://cve.now/CVE-2026-8833.md): XSS in urls (CVSS 8.5, Checkmk)
- [CVE-2026-8078](https://cve.now/CVE-2026-8078.md): Fix stored XSS in global settings change log (CVSS 4.8, Checkmk)
- [CVE-2026-7765](https://cve.now/CVE-2026-7765.md): User Messages widget leaked issuer messages on shared dashboards (CVSS 6.3, Checkmk)
- [CVE-2026-7186](https://cve.now/CVE-2026-7186.md): Fix stored XSS in URL dashboard widget via dangerous URI schemes (CVSS 8.5, Checkmk)
- [CVE-2026-11512](https://cve.now/CVE-2026-11512.md): itsourcecode Hospital Management System billing.php cross site scripting (CVSS 5.3, itsourcecode Hospital Management System)
- [CVE-2026-11511](https://cve.now/CVE-2026-11511.md): Bolt CMS HTML Attribute TextType.php HTML injection (CVSS 5.1, Bolt CMS)
- [CVE-2026-11510](https://cve.now/CVE-2026-11510.md): CodeAstro Leave Management System add\_leave.php sql injection (CVSS 5.3, CodeAstro Leave Management System)
- [CVE-2026-3011](https://cve.now/CVE-2026-3011.md): Recipe Card Blocks Lite \<= 3.4.13 - Authenticated (Author+) Stored Cross-Site Scripting via 'summary' and 'notes' (CVSS 6.4, wpzoom Recipe Card Blocks Lite)
- [CVE-2026-11509](https://cve.now/CVE-2026-11509.md): CodeAstro Leave Management System search\_staff\_for\_updation.php sql injection (CVSS 5.3, CodeAstro Leave Management System)
- [CVE-2026-50751](https://cve.now/CVE-2026-50751.md): User Authentication Bypass in VPN Remote Access and Mobile Access (CVSS 9.3, KEV, checkpoint Quantum Security Gateway · checkpoint Spark Fire…)
- [CVE-2026-50752](https://cve.now/CVE-2026-50752.md): Certificate Validation Bypass in VPN Site-to-Site Connections Using IKEv1 (CVSS 7.4, checkpoint Quantum Security Gateway · checkpoint Spark Fire…)
- [CVE-2026-11508](https://cve.now/CVE-2026-11508.md): CodeAstro Leave Management System search\_staff\_to\_assign\_pc.php sql injection (CVSS 5.3, CodeAstro Leave Management System)
- [CVE-2026-11569](https://cve.now/CVE-2026-11569.md): Quay: quay: stored xss via filedrop svg upload (CVSS 5.4, Red Hat Quay)
- [CVE-2026-11507](https://cve.now/CVE-2026-11507.md): CodeAstro Leave Management System delete\_leave\_type.php sql injection (CVSS 5.3, CodeAstro Leave Management System)
- [CVE-2026-11506](https://cve.now/CVE-2026-11506.md): CodeAstro Leave Management System search\_staff\_for\_deletion.php sql injection (CVSS 5.3, CodeAstro Leave Management System)
- [CVE-2026-47430](https://cve.now/CVE-2026-47430.md): Cordova Plugin InAppBrowser: iOS: Arbitrary Cordova callback IDs can be dispatched without validation from InAppBrowser WebViews (CVSS 9.5, Apache Software Foundation Cordova Plugin InAppBrowser · co…)
- [CVE-2026-11505](https://cve.now/CVE-2026-11505.md): GL.iNet XE3000 glnassys hard-coded key (CVSS 2.3, GL.iNet A1300 · GL.iNet AX1800 +6)
- [CVE-2026-11504](https://cve.now/CVE-2026-11504.md): Tenda CX12L Wi-Fi Schedule Configuration Endpoint openSchedWifi setSchedWifi stack-based overflow (CVSS 8.7, Tenda CX12L)
- [CVE-2026-11503](https://cve.now/CVE-2026-11503.md): Tenda CX12L Wi-Fi Configuration Endpoint fast\_setting\_wifi\_set form\_fast\_setting\_wifi\_set stack-based overflow (CVSS 8.7, Tenda CX12L)
- [CVE-2026-11502](https://cve.now/CVE-2026-11502.md): JeecgBoot Third-Party Login ThirdLoginController.java HttpServletResponse.sendRedirect redirect (CVSS 2.3, JeecgBoot)
- [CVE-2026-9506](https://cve.now/CVE-2026-9506.md): Path Traversal Vulnerability in Bagisto (CVSS 8.7, Webkul Bagisto)
- [CVE-2026-11501](https://cve.now/CVE-2026-11501.md): SourceCodester Hospitals Patient Records Management System Master.php save\_patient sql injection (CVSS 6.9, SourceCodester Hospitals Patient Records Management System)
- [CVE-2026-11500](https://cve.now/CVE-2026-11500.md): Weaviate Static API Key client.go validateConfig authorization (CVSS 2.3, Weaviate · github.com/weaviate/weaviate)
- [CVE-2026-3238](https://cve.now/CVE-2026-3238.md): Samba: denial of service against ad dc wins server (CVSS 7.5, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-41724](https://cve.now/CVE-2026-41724.md): VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) (CVSS 8.0, VMware VCF operations · VMware Aria Operations +1)
- [CVE-2026-41723](https://cve.now/CVE-2026-41723.md): VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) (CVSS 8.0, VMware VCF operations · VMware Aria Operations +1)
- [CVE-2026-41722](https://cve.now/CVE-2026-41722.md): VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) (CVSS 8.0, VMware VCF operations · VMware Aria Operations +1)
- [CVE-2026-11499](https://cve.now/CVE-2026-11499.md): Tenda HG7/HG9/HG10 formDOMAINBLK stack-based overflow (CVSS 9.3, Tenda HG7 · Tenda HG9 +1)
- [CVE-2026-11498](https://cve.now/CVE-2026-11498.md): Tenda HG7/HG9/HG10 Web Management voip\_other\_set asp\_voip\_OtherSet stack-based overflow (CVSS 8.7, Tenda HG7 · Tenda HG9 +1)
- [CVE-2026-11497](https://cve.now/CVE-2026-11497.md): D-Link DCS-5615 Boa Webserver boa.conf least privilege violation (CVSS 6.9, D-Link DCS-5615)
- [CVE-2026-11495](https://cve.now/CVE-2026-11495.md): CodeAstro Ingredients Stock Management System add\_stock.php sql injection (CVSS 5.3, CodeAstro Ingredients Stock Management System)
- [CVE-2026-11494](https://cve.now/CVE-2026-11494.md): TOTOLINK AC1200 T8 vsftpd vsftpd.conf least privilege violation (CVSS 5.3, TOTOLINK AC1200 T8)
- [CVE-2026-11493](https://cve.now/CVE-2026-11493.md): Tenda AC15 Samba smb.conf weak password (CVSS 2.3, Tenda AC15)
- [CVE-2026-11492](https://cve.now/CVE-2026-11492.md): D-Link DIR-823G vsftpd vsftpd.conf least privilege violation (CVSS 5.3, D-Link DIR-823G)
- [CVE-2026-11491](https://cve.now/CVE-2026-11491.md): CodeAstro Human Resource Management System Notice Board Management All\_notice cross site scripting (CVSS 4.8, CodeAstro Human Resource Management System)
- [CVE-2026-11490](https://cve.now/CVE-2026-11490.md): code-projects Online Music Site Search.php sql injection (CVSS 6.9, code-projects Online Music Site)
- [CVE-2026-11489](https://cve.now/CVE-2026-11489.md): code-projects Online Music Site AdminDeleteAlbum.php sql injection (CVSS 6.9, code-projects Online Music Site)
- [CVE-2026-11488](https://cve.now/CVE-2026-11488.md): code-projects Simple Flight Ticket Booking System POST Parameter checkUser.php sql injection (CVSS 6.9, code-projects Simple Flight Ticket Booking System)
- [CVE-2026-11487](https://cve.now/CVE-2026-11487.md): Neovim View Branch secure.lua M.read command injection (CVSS 4.8, Neovim)
- [CVE-2026-11486](https://cve.now/CVE-2026-11486.md): SourceCodester Class and Exam Timetabling System archive1.php sql injection (CVSS 6.9, SourceCodester Class and Exam Timetabling System)
- [CVE-2026-11485](https://cve.now/CVE-2026-11485.md): SourceCodester Class and Exam Timetabling System archive2.php sql injection (CVSS 6.9, SourceCodester Class and Exam Timetabling System)
- [CVE-2026-11484](https://cve.now/CVE-2026-11484.md): SourceCodester Class and Exam Timetabling System archive3.php sql injection (CVSS 6.9, SourceCodester Class and Exam Timetabling System)
- [CVE-2026-11483](https://cve.now/CVE-2026-11483.md): SourceCodester Class and Exam Timetabling System archive4.php sql injection (CVSS 6.9, SourceCodester Class and Exam Timetabling System)
- [CVE-2026-11482](https://cve.now/CVE-2026-11482.md): SourceCodester Class and Exam Timetabling System archive5.php sql injection (CVSS 6.9, SourceCodester Class and Exam Timetabling System)
- [CVE-2026-11481](https://cve.now/CVE-2026-11481.md): yoanbernabeu grepai Postgres Embedding Cache chunker.go PostgresStore.LookupByContentHash weak hash (CVSS 2.0, yoanbernabeu grepai · github.com/yoanbernabeu/grepai)
- [CVE-2026-11480](https://cve.now/CVE-2026-11480.md): Chengdu Everbrite Network Technology BeikeShop Admin Design Builder Endpoint admin.php sql injection (CVSS 5.3, Chengdu Everbrite Network Technology BeikeShop)
- [CVE-2026-11479](https://cve.now/CVE-2026-11479.md): yoanbernabeu grepai Qdrant Backend chunker.go weak hash (CVSS 2.3, yoanbernabeu grepai · github.com/yoanbernabeu/grepai)
- [CVE-2026-11478](https://cve.now/CVE-2026-11478.md): kokke tiny-regex-c Pattern re.c matchstar redos (CVSS 4.8, kokke tiny-regex-c)
- [CVE-2024-58349](https://cve.now/CVE-2024-58349.md): WordPress Theme Travelscape 1.0.3 Arbitrary File Upload (CVSS 9.3, WP Travel Kit Travelscape)
- [CVE-2024-58348](https://cve.now/CVE-2024-58348.md): WordPress Background Image Cropper 1.2 Remote Code Execution (CVSS 9.3, background-image-cropper Background Image Cropper)
- [CVE-2023-54352](https://cve.now/CVE-2023-54352.md): WordPress Seotheme Remote Code Execution Unauthenticated (CVSS 9.3, WP Travel Kit Travelscape)
- [CVE-2023-54351](https://cve.now/CVE-2023-54351.md): WordPress Sonaar Music Plugin 4.7 Stored XSS via Comments (CVSS 5.1, Sonaar Music Plugin)
- [CVE-2023-54350](https://cve.now/CVE-2023-54350.md): WordPress Augmented-Reality Plugin Remote Code Execution Unauthenticated (CVSS 8.7, webandprint Augmented Reality)
- [CVE-2022-50953](https://cve.now/CVE-2022-50953.md): WordPress Plugin admin-word-count-column 2.2 Local File Read (CVSS 6.9, brooks24 admin-word-count-column)
- [CVE-2021-47984](https://cve.now/CVE-2021-47984.md): WordPress Plugin WP24 Domain Check 1.6.2 Stored XSS (CVSS 5.1, WP24 Domain Check)
- [CVE-2021-47983](https://cve.now/CVE-2021-47983.md): WordPress Plugin Stripe Payments \< 2.0.40 Stored XSS via currency\_code (CVSS 5.1, mra13 Accept Stripe Payments)
- [CVE-2021-47982](https://cve.now/CVE-2021-47982.md): WordPress Plugin WP-Paginate 2.1.3 Stored XSS via preset (CVSS 5.1, maxfoundry WP-Paginate)
- [CVE-2026-11477](https://cve.now/CVE-2026-11477.md): hs-web hsweb-framework OAuth2 Client OAuth2Client.java OAuth2Client redirect (CVSS 5.3, hs-web hsweb-framework · org.hswebframework.web:hsweb-autho…)
- [CVE-2026-11476](https://cve.now/CVE-2026-11476.md): Kushan2k student-management-system Profile Update Endpoint AdminController.php edit-admin improper authorization (CVSS 5.3, Kushan2k student-management-system)
- [CVE-2026-11475](https://cve.now/CVE-2026-11475.md): Kushan2k student-management-system Certificate Verification Endpoint GradeController.php getStatus sql injection (CVSS 5.3, Kushan2k student-management-system)
- [CVE-2026-11474](https://cve.now/CVE-2026-11474.md): Kushan2k student-management-system Registration Endpoint RegisterService.php unrestricted upload (CVSS 6.9, Kushan2k student-management-system)
- [CVE-2026-11473](https://cve.now/CVE-2026-11473.md): jflyfox jfinal\_cms AdvicefeedbackController.java list sql injection (CVSS 5.3, jflyfox jfinal\_cms)
- [CVE-2026-11472](https://cve.now/CVE-2026-11472.md): SourceCodester Class and Exam Timetabling System index1.php sql injection (CVSS 6.9, SourceCodester Class and Exam Timetabling System)
- [CVE-2026-11471](https://cve.now/CVE-2026-11471.md): SourceCodester Class and Exam Timetabling System index2.php sql injection (CVSS 6.9, SourceCodester Class and Exam Timetabling System)
- [CVE-2026-11470](https://cve.now/CVE-2026-11470.md): hs-web hsweb-framework File Upload FileUploadProperties.java denied path traversal (CVSS 5.3, hs-web hsweb-framework · org.hswebframework.web:hsweb-syste…)
- [CVE-2026-36786](https://cve.now/CVE-2026-36786.md): Shenzhen Tenda Technology Co., Ltd Tenda FH451 V1.0.0.9 was discovered to contain a stack overflow in the list1 parameter of the fromDhcpLis (CVSS 7.5)
- [CVE-2026-36789](https://cve.now/CVE-2026-36789.md): Shenzhen Tenda Technology Co., Ltd Tenda AC1206 v15.03.06.23 was discovered to contain multiple stack overflows in the fromGstDhcpSetSer fun (CVSS 7.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-06-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.