# CVEs published 2026-06-09

718 CVEs were published on June 9, 2026: 36 critical, 350 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2026-44634](https://cve.now/CVE-2026-44634.md): Stack buffer overflows in SimpleBLE (CVSS 8.7, simpleble)
- [CVE-2026-46546](https://cve.now/CVE-2026-46546.md): Frappe LMS: HTML injection in user-controlled metadata (CVSS 2.1, frappe lms)
- [CVE-2026-47838](https://cve.now/CVE-2026-47838.md): Unauthorized User Impersonation when Using X.509 Client Certificates (CVSS 6.8, Spring Security · org.springframework.security:spring-secur…)
- [CVE-2026-41837](https://cve.now/CVE-2026-41837.md): Spring Data REST Querydsl integration exposes Jackson-hidden persistent fields as filter keys (CVSS 5.3, Spring Data REST · org.springframework.data:spring-data-res…)
- [CVE-2026-41732](https://cve.now/CVE-2026-41732.md): In Spring for Apache Pulsar, overly broad trusted-package matching in header mapper exposes JDK classes to deserialization (CVSS 8.1, Spring for Apache Pulsar · org.springframework.pulsar:sprin…)
- [CVE-2026-41731](https://cve.now/CVE-2026-41731.md): In Spring for Apache Kafka, overly broad trusted-package matching in header mappers exposes JDK classes to deserialization (CVSS 8.1, Spring for Apache Kafka · org.springframework.kafka:spring-…)
- [CVE-2026-41730](https://cve.now/CVE-2026-41730.md): Spring Data REST exposes persistence-layer internals in error responses (CVSS 5.3, Spring Data REST · org.springframework.data:spring-data-res…)
- [CVE-2026-41729](https://cve.now/CVE-2026-41729.md): Spring Data REST SpEL Injection via Map Key in JSON Patch (CVSS 8.1, Spring Data REST · org.springframework.data:spring-data-res…)
- [CVE-2026-41728](https://cve.now/CVE-2026-41728.md): Spring Data REST JSON Patch bypasses Jackson read-only property protection on nested objects and collections (CVSS 7.5, Spring Data REST · org.springframework.data:spring-data-res…)
- [CVE-2026-41727](https://cve.now/CVE-2026-41727.md): In Spring for Apache Kafka, forged retry topic headers subvert retry routing and backoff behavior (CVSS 6.5, Spring for Apache Kafka · org.springframework.kafka:spring-…)
- [CVE-2026-41726](https://cve.now/CVE-2026-41726.md): In Spring for Apache Kafka, unbounded delegate cache keyed on user-controlled, potentially malicious selector header (CVSS 6.5, Spring for Apache Kafka · org.springframework.kafka:spring-…)
- [CVE-2026-41721](https://cve.now/CVE-2026-41721.md): Spring Data Commons Denial of Service via Data Binding (CVSS 5.9, Spring Data Commons · org.springframework.data:spring-data-…)
- [CVE-2026-41719](https://cve.now/CVE-2026-41719.md): Spring Data KeyValue - SpEL Injection vulnerability in SpelPropertyComparator (CVSS 6.4, Spring Data KeyValue · Spring Data Redis +1)
- [CVE-2026-41717](https://cve.now/CVE-2026-41717.md): Spring Data MongoDB - SpEL Expression Injection via Annotated Query Parameter Binding (CVSS 8.1, Spring Data MongoDB · org.springframework.data:spring-data-…)
- [CVE-2026-41716](https://cve.now/CVE-2026-41716.md): Spring Data web support unbounded negative-result cache keyed on attacker-supplied property names (CVSS 7.5, Spring Data Commons · org.springframework.data:spring-data-…)
- [CVE-2026-41714](https://cve.now/CVE-2026-41714.md): In Spring AMQP the RabbitConnectionFactoryBean.setUri("amqps://...") bypasses secure SSL setup, uses TrustEverythingTrustManager (CVSS 4.0, Spring AMQP · org.springframework.amqp:spring-amqp)
- [CVE-2026-41711](https://cve.now/CVE-2026-41711.md): Potential Denial of Service through crafted Sort Parameters (CVSS 5.9, Spring Data Commons · org.springframework.data:spring-data-…)
- [CVE-2026-41706](https://cve.now/CVE-2026-41706.md): Open Redirect When Using CookieRequestCache (CVSS 6.1, Spring Security · org.springframework.security:spring-secur…)
- [CVE-2026-41701](https://cve.now/CVE-2026-41701.md): In Spring AMQP sequential correlation IDs enable reply poisoning on fixed reply queues (CVSS 4.4, Spring AMQP · org.springframework.amqp:spring-amqp)
- [CVE-2026-46545](https://cve.now/CVE-2026-46545.md): nimiq-primitives: Panic DoS in trie chunk processing via ROOT-keyed item (CVSS 7.5, nimiq core-rs-albatross · nimiq-primitives)
- [CVE-2026-41697](https://cve.now/CVE-2026-41697.md): Spring Data Relational Parameter not Escaped for Query By Example LIKE Pattern (CVSS 4.8, Spring Data Relational · Spring Data JDBC +2)
- [CVE-2026-41696](https://cve.now/CVE-2026-41696.md): Spring Data MongoDB Bind Parameter Literal Quoting Breakout (CVSS 5.9, Spring Data MongoDB · org.springframework.data:spring-data-…)
- [CVE-2026-41695](https://cve.now/CVE-2026-41695.md): Denial of Service in Spring Data Commons Property Path Resolution (CVSS 7.5, Spring Data Commons · org.springframework.data:spring-data-…)
- [CVE-2026-46543](https://cve.now/CVE-2026-46543.md): nimiq-blockchain: Genesis batch set request (CVSS 5.3, nimiq core-rs-albatross · nimiq-blockchain)
- [CVE-2026-41694](https://cve.now/CVE-2026-41694.md): SAML Payloads Decrypted Without Valid Signature (CVSS 3.7, Spring Security · org.springframework.security:spring-secur…)
- [CVE-2026-41008](https://cve.now/CVE-2026-41008.md): Spring Security Authorization Server Open Redirect via request\_uri (CVSS 6.1, Spring Security · Spring Authorization Server +1)
- [CVE-2026-41003](https://cve.now/CVE-2026-41003.md): Unencoded HTML Outputs in Spring Security May Allow Cross-Site Scripting (CVSS 7.6, Spring Security · org.springframework.security:spring-secur…)
- [CVE-2026-40993](https://cve.now/CVE-2026-40993.md): Unfiltered Java Native Deserialization of SAML 2.0 Asserting Party Credentials BLOB Database Entry (CVSS 7.3, Spring Security · org.springframework.security:spring-secur…)
- [CVE-2026-40991](https://cve.now/CVE-2026-40991.md): XML External Entity (XXE) injection when documenting untrusted XML content (CVSS 5.9, Spring REST Docs · org.springframework.restdocs:spring-r… +1)
- [CVE-2026-46542](https://cve.now/CVE-2026-46542.md): nimiq-keys: Denial of service in Ed25519 multisig delinearization via invalid curve points (CVSS 4.3, nimiq core-rs-albatross · nimiq-keys)
- [CVE-2026-40988](https://cve.now/CVE-2026-40988.md): Unbounded DEFLATE Inflation in SAML 2.0 Service Provider (CVSS 7.5, Spring Security · org.springframework.security:spring-secur…)
- [CVE-2026-46541](https://cve.now/CVE-2026-46541.md): Nimiq network-libp2p: DHT query poisoning via first-record verification failure (CVSS 7.5, nimiq core-rs-albatross)
- [CVE-2026-46540](https://cve.now/CVE-2026-46540.md): Nimiq light-blockchain: Light blockchain rebranch issue (CVSS 6.5, nimiq core-rs-albatross)
- [CVE-2026-46539](https://cve.now/CVE-2026-46539.md): nimiq-primitives: BlockInclusionProof interlink issue when hops are empty (CVSS 5.9, nimiq core-rs-albatross · nimiq-primitives)
- [CVE-2026-53675](https://cve.now/CVE-2026-53675.md): BuddyPress 14.4.0 Friends List IDOR via REST API (CVSS 5.3, BuddyPress · buddypress/buddypress)
- [CVE-2026-53674](https://cve.now/CVE-2026-53674.md): BuddyPress 14.4.0 REGEXP Injection via @Mention Username Resolution (CVSS 7.1, BuddyPress)
- [CVE-2026-53673](https://cve.now/CVE-2026-53673.md): BuddyPress 14.4.0 Private Message IDOR via REST API user\_id Parameter (CVSS 8.6, BuddyPress · buddypress/buddypress)
- [CVE-2026-44505](https://cve.now/CVE-2026-44505.md): Nimiq network-libp2p: Untrusted peer can wedge DHT (CVSS 5.3, nimiq core-rs-albatross)
- [CVE-2026-44716](https://cve.now/CVE-2026-44716.md): Pipecat: Path Traversal in Pipecat Runner \`/files\` Endpoint — Arbitrary File Read via \`%2F\`-Encoded Separator (CVSS 7.5, pipecat-ai pipecat · pipecat-ai)
- [CVE-2026-46517](https://cve.now/CVE-2026-46517.md): LMDeploy: Hardcoded trust\_remote\_code=True is an implicit unsafe remote-code load path with no user opt-out (CVSS 7.8, InternLM lmdeploy · lmdeploy)
- [CVE-2026-46432](https://cve.now/CVE-2026-46432.md): LMDeploy: Arbitrary code execution via hardcoded trust\_remote\_code=True in lmdeploy model initialization (CVSS 7.8, InternLM lmdeploy · lmdeploy)
- [CVE-2026-46411](https://cve.now/CVE-2026-46411.md): FlashMQ: Client can trigger uncaught exception on FlashMQ 1.26.1 and older (CVSS 6.5, halfgaar FlashMQ)
- [CVE-2026-46491](https://cve.now/CVE-2026-46491.md): SimpleSAMLphp casserver FileSystemTicketStore path traversal allows out-of-ticket-directory read/unserialize and conditional deletion (CVSS 8.6, simplesamlphp-module-casserver · simplesamlphp/simplesamlph…)
- [CVE-2026-45782](https://cve.now/CVE-2026-45782.md): Cloud Hypervisor: Use-after-free in virtio-block Async I/O Completion (CVSS 8.9, cloud-hypervisor)
- [CVE-2026-46518](https://cve.now/CVE-2026-46518.md): OpenEMR: Stored XSS in prescription CSS/HTML print view via patient demographics (CVSS 7.7, openemr)
- [CVE-2026-46433](https://cve.now/CVE-2026-46433.md): lldpd: Heap OOB Read in VLAN Decapsulation memmove (CVSS 6.5, lldpd)
- [CVE-2026-9740](https://cve.now/CVE-2026-9740.md): Unbounded recursion in BSONColumn interleaved-reference causes pre-auth stack overflow (CVSS 8.7, MongoDB Server)
- [CVE-2026-9735](https://cve.now/CVE-2026-9735.md): Keyfile contents are in MongoDB Server logs (CVSS 6.8, MongoDB Server)
- [CVE-2026-46374](https://cve.now/CVE-2026-46374.md): SQLFluff: Uncontrolled Resource Consumption in Parser (CVSS 7.5, sqlfluff)
- [CVE-2026-46373](https://cve.now/CVE-2026-46373.md): SQLFluff: Recursive Stack Overflow in Parser (CVSS 7.5, sqlfluff)
- [CVE-2026-9754](https://cve.now/CVE-2026-9754.md): Stack memory disclosure in filemd5 command (CVSS 7.1, MongoDB)
- [CVE-2026-9753](https://cve.now/CVE-2026-9753.md): Server crash via malformed binary diff passed to $\_internalApplyOplogUpdate. (CVSS 7.2, MongoDB Server)
- [CVE-2026-9752](https://cve.now/CVE-2026-9752.md): GeometryCollection with strict-winding polygon causes server crash during 2dsphere index key generation (CVSS 7.1, MongoDB Server)
- [CVE-2026-44963](https://cve.now/CVE-2026-44963.md): A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user. (CVSS 9.4, Veeam Backup and Replication)
- [CVE-2026-9751](https://cve.now/CVE-2026-9751.md): Sensitive data could be written to mongod.log (CVSS 6.8, MongoDB Server)
- [CVE-2026-9750](https://cve.now/CVE-2026-9750.md): Metadata name collision on $-prefixed fields causes post-auth server crash (CVSS 7.1, MongoDB Server)
- [CVE-2026-9749](https://cve.now/CVE-2026-9749.md): Using MaxKey() may crash the server (CVSS 7.1, MongoDB Server)
- [CVE-2026-9748](https://cve.now/CVE-2026-9748.md): $\_internalConvertBucketIndexStats may crash the mongod server when working on no timeseries input (CVSS 7.1, MongoDB Server)
- [CVE-2026-9747](https://cve.now/CVE-2026-9747.md): Crafted cross-shard merge aggregation crashes MongoDB Server (CVSS 7.1, MongoDB Server)
- [CVE-2026-9746](https://cve.now/CVE-2026-9746.md): Server crashes in case of the use of exchange (CVSS 7.1, MongoDB Server)
- [CVE-2026-9743](https://cve.now/CVE-2026-9743.md): Aggregation sub-pipeline null dereference may allow DoS via crafted getMore (CVSS 7.1, MongoDB server)
- [CVE-2026-9742](https://cve.now/CVE-2026-9742.md): Authenticate command with specific mechanism parameter can trigger server crash (CVSS 8.2, MongoDB Server)
- [CVE-2026-9741](https://cve.now/CVE-2026-9741.md): Client side encryption fails to encrypt values in a $vectorSearch (CVSS 7.1, MongoDB Server)
- [CVE-2026-34711](https://cve.now/CVE-2026-34711.md): CAI Content Credentials | Integer Overflow or Wraparound (CWE-190) (CVSS 7.5, Adobe Content Credentials Rust SDK · Adobe Content Credenti…)
- [CVE-2026-34712](https://cve.now/CVE-2026-34712.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 7.5, Adobe Content Credentials Rust SDK · Adobe Content Credenti…)
- [CVE-2026-47904](https://cve.now/CVE-2026-47904.md): CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) (CVSS 6.2, Adobe Content Credentials Rust SDK · Adobe Content Credenti…)
- [CVE-2026-47903](https://cve.now/CVE-2026-47903.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 6.2, Adobe Content Credentials Rust SDK · Adobe Content Credenti…)
- [CVE-2026-47902](https://cve.now/CVE-2026-47902.md): CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) (CVSS 6.2, Adobe Content Credentials Rust SDK · Adobe Content Credenti…)
- [CVE-2026-47905](https://cve.now/CVE-2026-47905.md): CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) (CVSS 6.2, Adobe Content Credentials Rust SDK · Adobe Content Credenti…)
- [CVE-2026-34657](https://cve.now/CVE-2026-34657.md): CAI Content Credentials | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) (CVSS 5.5, Adobe Content Credentials Rust SDK · Adobe Content Credenti…)
- [CVE-2026-34713](https://cve.now/CVE-2026-34713.md): CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) (CVSS 7.5, Adobe Content Credentials Rust SDK · Adobe Content Credenti…)
- [CVE-2026-25860](https://cve.now/CVE-2026-25860.md): OpenClinic GA 5.351.19 Reflected XSS via DICOM Image Upload Handler (CVSS 5.3, frankverbeke OpenClinic GA)
- [CVE-2026-34417](https://cve.now/CVE-2026-34417.md): OSCAL-GUI Reflected XSS via project parameter in oscal-forms.php (CVSS 5.1, brian-ruf OSCAL-GUI)
- [CVE-2026-34416](https://cve.now/CVE-2026-34416.md): OSCAL-GUI Reflected XSS via project parameter in oscal.php (CVSS 5.1, brian-ruf OSCAL-GUI)
- [CVE-2026-47938](https://cve.now/CVE-2026-47938.md): Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918) (CVSS 10.0, Adobe Campaign Classic)
- [CVE-2026-48303](https://cve.now/CVE-2026-48303.md): Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863) (CVSS 10.0, Adobe Campaign Classic)
- [CVE-2026-11799](https://cve.now/CVE-2026-11799.md): UXSS in Focus for iOS / Klar Webkit navigation (CVSS 7.5, Mozilla Focus for iOS · Mozilla Klar for iOS)
- [CVE-2026-25557](https://cve.now/CVE-2026-25557.md): Evoluted PHP Directory Listing Script 4.0.5 Reflected XSS via dir parameter (CVSS 5.1, Evoluted PHP Directory Listing Script)
- [CVE-2026-48291](https://cve.now/CVE-2026-48291.md): Format Plugins | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Format Plugins)
- [CVE-2026-48292](https://cve.now/CVE-2026-48292.md): Format Plugins | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Format Plugins)
- [CVE-2026-47929](https://cve.now/CVE-2026-47929.md): ColdFusion | Incorrect Authorization (CWE-863) (CVSS 8.4, Adobe ColdFusion)
- [CVE-2026-47932](https://cve.now/CVE-2026-47932.md): ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) (CVSS 8.8, Adobe ColdFusion)
- [CVE-2026-47960](https://cve.now/CVE-2026-47960.md): ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611) (CVSS 7.4, Adobe ColdFusion)
- [CVE-2026-47928](https://cve.now/CVE-2026-47928.md): ColdFusion | Improper Input Validation (CWE-20) (CVSS 9.6, Adobe ColdFusion)
- [CVE-2026-47931](https://cve.now/CVE-2026-47931.md): ColdFusion | Improper Input Validation (CWE-20) (CVSS 8.4, Adobe ColdFusion)
- [CVE-2026-47930](https://cve.now/CVE-2026-47930.md): ColdFusion | Improper Input Validation (CWE-20) (CVSS 8.1, Adobe ColdFusion)
- [CVE-2026-47933](https://cve.now/CVE-2026-47933.md): ColdFusion | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 4.8, Adobe ColdFusion)
- [CVE-2026-47937](https://cve.now/CVE-2026-47937.md): Acrobat Reader | Uncontrolled Search Path Element (CWE-427) (CVSS 7.7, Adobe Acrobat DC · Adobe Acrobat Reader DC +1)
- [CVE-2026-47916](https://cve.now/CVE-2026-47916.md): Acrobat Reader | Use After Free (CWE-416) (CVSS 7.8, Adobe Acrobat DC · Adobe Acrobat Reader DC +1)
- [CVE-2026-47918](https://cve.now/CVE-2026-47918.md): Acrobat Reader | Use After Free (CWE-416) (CVSS 7.8, Adobe Acrobat DC · Adobe Acrobat Reader DC +1)
- [CVE-2026-47915](https://cve.now/CVE-2026-47915.md): Acrobat Reader | Use After Free (CWE-416) (CVSS 7.8, Adobe Acrobat DC · Adobe Acrobat Reader DC +1)
- [CVE-2026-47923](https://cve.now/CVE-2026-47923.md): Acrobat Reader | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Acrobat DC · Adobe Acrobat Reader DC +1)
- [CVE-2026-47952](https://cve.now/CVE-2026-47952.md): Acrobat Reader | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Acrobat DC · Adobe Acrobat Reader DC +1)
- [CVE-2026-47917](https://cve.now/CVE-2026-47917.md): Acrobat Reader | Use After Free (CWE-416) (CVSS 7.8, Adobe Acrobat DC · Adobe Acrobat Reader DC +1)
- [CVE-2026-47955](https://cve.now/CVE-2026-47955.md): Acrobat Reader | Use After Free (CWE-416) (CVSS 7.8, Adobe Acrobat DC · Adobe Acrobat Reader DC +1)
- [CVE-2026-47924](https://cve.now/CVE-2026-47924.md): Acrobat Reader | Use After Free (CWE-416) (CVSS 5.5, Adobe Acrobat DC · Adobe Acrobat Reader DC +1)
- [CVE-2026-47919](https://cve.now/CVE-2026-47919.md): Acrobat Reader | Use After Free (CWE-416) (CVSS 7.8, Adobe Acrobat DC · Adobe Acrobat Reader DC +1)
- [CVE-2026-47926](https://cve.now/CVE-2026-47926.md): Acrobat Reader | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Acrobat DC · Adobe Acrobat Reader DC +1)
- [CVE-2026-47921](https://cve.now/CVE-2026-47921.md): Acrobat Reader | Use After Free (CWE-416) (CVSS 7.8, Adobe Acrobat DC · Adobe Acrobat Reader DC +1)
- [CVE-2026-47920](https://cve.now/CVE-2026-47920.md): Acrobat Reader | Use After Free (CWE-416) (CVSS 7.8, Adobe Acrobat DC · Adobe Acrobat Reader DC +1)
- [CVE-2026-47961](https://cve.now/CVE-2026-47961.md): Acrobat Reader | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Acrobat DC · Adobe Acrobat Reader DC +1)
- [CVE-2026-47913](https://cve.now/CVE-2026-47913.md): Acrobat Reader | Use After Free (CWE-416) (CVSS 7.8, Adobe Acrobat DC · Adobe Acrobat Reader DC +1)
- [CVE-2026-47914](https://cve.now/CVE-2026-47914.md): Acrobat Reader | Use After Free (CWE-416) (CVSS 7.8, Adobe Acrobat DC · Adobe Acrobat Reader DC +1)
- [CVE-2026-47925](https://cve.now/CVE-2026-47925.md): Acrobat Reader | Integer Overflow or Wraparound (CWE-190) (CVSS 5.5, Adobe Acrobat DC · Adobe Acrobat Reader DC +1)
- [CVE-2026-47912](https://cve.now/CVE-2026-47912.md): Acrobat Reader | Use After Free (CWE-416) (CVSS 7.8, Adobe Acrobat DC · Adobe Acrobat Reader DC +1)
- [CVE-2026-47959](https://cve.now/CVE-2026-47959.md): Acrobat Reader | Stack-based Buffer Overflow (CWE-121) (CVSS 7.8, Adobe Acrobat DC · Adobe Acrobat Reader DC +1)
- [CVE-2026-47911](https://cve.now/CVE-2026-47911.md): Acrobat Reader | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Acrobat DC · Adobe Acrobat Reader DC +1)
- [CVE-2025-71319](https://cve.now/CVE-2025-71319.md): image-size 2.0.2 Denial of Service via Infinite Loop in JXL/HEIF Parser (CVSS 8.7, image-size)
- [CVE-2026-47909](https://cve.now/CVE-2026-47909.md): Dreamweaver Desktop | Improper Input Validation (CWE-20) (CVSS 6.3, Adobe Dreamweaver Desktop)
- [CVE-2026-47910](https://cve.now/CVE-2026-47910.md): Dreamweaver Desktop | Incorrect Authorization (CWE-863) (CVSS 6.3, Adobe Dreamweaver Desktop)
- [CVE-2026-47907](https://cve.now/CVE-2026-47907.md): Dreamweaver Desktop | Improper Access Control (CWE-284) (CVSS 8.6, Adobe Dreamweaver Desktop)
- [CVE-2026-47906](https://cve.now/CVE-2026-47906.md): Dreamweaver Desktop | Dependency on Vulnerable Third-Party Component (CWE-1395) (CVSS 8.6, Adobe Dreamweaver Desktop)
- [CVE-2026-47908](https://cve.now/CVE-2026-47908.md): Dreamweaver Desktop | Access of Uninitialized Pointer (CWE-824) (CVSS 7.8, Adobe Dreamweaver Desktop)
- [CVE-2026-11824](https://cve.now/CVE-2026-11824.md): SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate (CVSS 8.5, SQLite)
- [CVE-2026-48306](https://cve.now/CVE-2026-48306.md): Substance3D - Sampler | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance 3D Sampler)
- [CVE-2026-34710](https://cve.now/CVE-2026-34710.md): Substance3D - Sampler | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance 3D Sampler)
- [CVE-2026-48305](https://cve.now/CVE-2026-48305.md): Substance3D - Sampler | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance 3D Sampler)
- [CVE-2026-34709](https://cve.now/CVE-2026-34709.md): Substance3D - Sampler | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance 3D Sampler)
- [CVE-2026-47106](https://cve.now/CVE-2026-47106.md): Ellucian Banner Self-Service Stored XSS via getFacultyMeetingTimes API (CVSS 5.1, Ellucian Banner Self-Service)
- [CVE-2026-32856](https://cve.now/CVE-2026-32856.md): Ellucian Banner Self-Service Reflected XSS via dateConverter (CVSS 5.1, Ellucian Banner Self-Service)
- [CVE-2026-11822](https://cve.now/CVE-2026-11822.md): SQLite before 3.53.2 Out-of-Bounds Read in FTS5 fts5LeafSeek (CVSS 5.5, SQLite)
- [CVE-2026-6444](https://cve.now/CVE-2026-6444.md): A flaw exists in the FlashArray Purity management interface where an authenticated low-privileged user may, under specific conditions, acces (CVSS 8.6, Everpure FlashArray)
- [CVE-2026-6445](https://cve.now/CVE-2026-6445.md): A flaw exists in FlashArray Purity where insufficient filtering of certain data paths could expose sensitive information to an authenticated (CVSS 8.7, Everpure FlashArray)
- [CVE-2026-8863](https://cve.now/CVE-2026-8863.md): CVE-2026-8863 (CVSS 7.8, OracleLinux(7.2) shim · PC-Doctor Service Center Enterp… +11)
- [CVE-2026-10045](https://cve.now/CVE-2026-10045.md): CVE-2026-10045 (CVSS 9.8, Shenzhen Kangda Xin Intelligent Network Technology Co. DR300)
- [CVE-2026-40639](https://cve.now/CVE-2026-40639.md): Dell Client Platform BIOS contains a Weak Encoding for Password vulnerability. (CVSS 5.7, Dell Edge Gateway · DELL EMBEDDED PC +4)
- [CVE-2026-44275](https://cve.now/CVE-2026-44275.md): Dell/Alienware Purchased Apps, versions prior to 1.1.32.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnera (CVSS 6.3, Dell/Alienware Purchased Apps)
- [CVE-2026-34707](https://cve.now/CVE-2026-34707.md): InCopy | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe InCopy)
- [CVE-2026-34706](https://cve.now/CVE-2026-34706.md): InCopy | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe InCopy)
- [CVE-2026-34708](https://cve.now/CVE-2026-34708.md): InCopy | Stack-based Buffer Overflow (CWE-121) (CVSS 7.8, Adobe InCopy)
- [CVE-2026-34701](https://cve.now/CVE-2026-34701.md): InDesign Desktop | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2026-34695](https://cve.now/CVE-2026-34695.md): InDesign Desktop | Stack-based Buffer Overflow (CWE-121) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2026-34704](https://cve.now/CVE-2026-34704.md): InDesign Desktop | NULL Pointer Dereference (CWE-476) (CVSS 5.5, Adobe InDesign Desktop)
- [CVE-2026-34700](https://cve.now/CVE-2026-34700.md): InDesign Desktop | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2026-34696](https://cve.now/CVE-2026-34696.md): InDesign Desktop | Use After Free (CWE-416) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2026-34703](https://cve.now/CVE-2026-34703.md): InDesign Desktop | NULL Pointer Dereference (CWE-476) (CVSS 5.5, Adobe InDesign Desktop)
- [CVE-2026-34698](https://cve.now/CVE-2026-34698.md): InDesign Desktop | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2026-34699](https://cve.now/CVE-2026-34699.md): InDesign Desktop | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2026-34705](https://cve.now/CVE-2026-34705.md): InDesign Desktop | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe InDesign Desktop)
- [CVE-2026-34697](https://cve.now/CVE-2026-34697.md): InDesign Desktop | Stack-based Buffer Overflow (CWE-121) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2026-48293](https://cve.now/CVE-2026-48293.md): InDesign Desktop | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2026-34702](https://cve.now/CVE-2026-34702.md): InDesign Desktop | Stack-based Buffer Overflow (CWE-121) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2026-50511](https://cve.now/CVE-2026-50511.md): Microsoft PC Manager Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft PC Manager)
- [CVE-2026-50512](https://cve.now/CVE-2026-50512.md): Microsoft PC Manager Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft PC Manager)
- [CVE-2026-50636](https://cve.now/CVE-2026-50636.md): LimeSurvey RemoteControl invite\_participants/remind\_participants SQL Injection (CVSS 8.8, LimeSurvey · limesurvey/limesurvey)
- [CVE-2026-50635](https://cve.now/CVE-2026-50635.md): LimeSurvey Password Reset Host Header Injection Discloses Reset Token (CVSS 8.8, LimeSurvey · limesurvey/limesurvey)
- [CVE-2026-28237](https://cve.now/CVE-2026-28237.md): Unrestricted resource allocation in AMD uProf may be exploitable to consume excessive system resources, potentially leading to a loss of ava (CVSS 6.8, AMD µProf)
- [CVE-2026-0466](https://cve.now/CVE-2026-0466.md): Improper access control in AMD uProf may allow a local attacker with user privileges to write to the kernel-shared memory section, potential (CVSS 6.8, AMD µProf)
- [CVE-2026-41116](https://cve.now/CVE-2026-41116.md): Dell Inventory Collector Client, versions prior to 13.8.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnera (CVSS 6.3, Dell Inventory Collector Client)
- [CVE-2025-54509](https://cve.now/CVE-2025-54509.md): Improper access control for register interface in the Input-Output Memory Management Unit (IOMMU) could allow a privileged attacker to cause (CVSS 4.0, AMD EPYC™ 9004 Series Processors · AMD EPYC™ 9005 Series… +4)
- [CVE-2026-34693](https://cve.now/CVE-2026-34693.md): Adobe Experience Manager Forms JEE | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 8.0, Adobe Experience Manager 6.5 LTS · Adobe Experience Manager)
- [CVE-2026-34694](https://cve.now/CVE-2026-34694.md): Adobe Experience Manager Forms JEE | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 4.8, Adobe Experience Manager 6.5 LTS · Adobe Experience Manager)
- [CVE-2026-34691](https://cve.now/CVE-2026-34691.md): Adobe Experience Manager Forms JEE | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 9.3, Adobe Experience Manager 6.5 LTS · Adobe Experience Manager)
- [CVE-2026-44804](https://cve.now/CVE-2026-44804.md): Windows DWM Core Library Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-44813](https://cve.now/CVE-2026-44813.md): Windows DWM Core Library Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-42993](https://cve.now/CVE-2026-42993.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-44812](https://cve.now/CVE-2026-44812.md): Windows Graphics Component Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Excel for Android · Microsoft PowerPoint for A… +2)
- [CVE-2026-44803](https://cve.now/CVE-2026-44803.md): Windows Graphics Component Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Excel for Android · Microsoft PowerPoint for A… +2)
- [CVE-2026-42987](https://cve.now/CVE-2026-42987.md): Windows Deployment Services (WDS) Remote Code Execution (CVSS 8.1, Microsoft Windows Server)
- [CVE-2026-42985](https://cve.now/CVE-2026-42985.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Remote Desktop client for Windows Desktop · Micro…)
- [CVE-2026-44801](https://cve.now/CVE-2026-44801.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Remote Desktop client for Windows Desktop · Micro…)
- [CVE-2026-44814](https://cve.now/CVE-2026-44814.md): Windows DWM Core Library Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-44802](https://cve.now/CVE-2026-44802.md): Windows DWM Core Library Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-42983](https://cve.now/CVE-2026-42983.md): Windows DWM Core Library Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-44815](https://cve.now/CVE-2026-44815.md): DHCP Client Service Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-44799](https://cve.now/CVE-2026-44799.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Remote Desktop client for Windows Desktop · Micro…)
- [CVE-2026-44807](https://cve.now/CVE-2026-44807.md): Windows DWM Core Library Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-44808](https://cve.now/CVE-2026-44808.md): Windows DWM Core Library Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-44811](https://cve.now/CVE-2026-44811.md): Windows DWM Core Library Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-44805](https://cve.now/CVE-2026-44805.md): Windows Network Controller (NC) Host Agent Denial of Service Vulnerability (CVSS 5.5, Microsoft Windows Server)
- [CVE-2026-42992](https://cve.now/CVE-2026-42992.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-44810](https://cve.now/CVE-2026-44810.md): Microsoft Cryptographic Services Elevation of Privilege Vulnerability (CVSS 8.4, Microsoft Windows)
- [CVE-2026-44809](https://cve.now/CVE-2026-44809.md): Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-42989](https://cve.now/CVE-2026-42989.md): Winlogon Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-42991](https://cve.now/CVE-2026-42991.md): Windows Push Notifications Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-42979](https://cve.now/CVE-2026-42979.md): Windows Push Notifications Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-42977](https://cve.now/CVE-2026-42977.md): Windows Push Notifications Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-42978](https://cve.now/CVE-2026-42978.md): Windows Push Notifications Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-42986](https://cve.now/CVE-2026-42986.md): Microsoft Graphics Component Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-42974](https://cve.now/CVE-2026-42974.md): Windows Performance Monitor Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-42981](https://cve.now/CVE-2026-42981.md): Windows Performance Monitor Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-42984](https://cve.now/CVE-2026-42984.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-42973](https://cve.now/CVE-2026-42973.md): Windows Push Notification Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-42970](https://cve.now/CVE-2026-42970.md): Windows Push Notification Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-42971](https://cve.now/CVE-2026-42971.md): Windows Push Notification Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-42969](https://cve.now/CVE-2026-42969.md): Windows Push Notification Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-42972](https://cve.now/CVE-2026-42972.md): Windows Hyper-V Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-42968](https://cve.now/CVE-2026-42968.md): Windows Telephony Server Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-42915](https://cve.now/CVE-2026-42915.md): Microsoft Windows VMSwitch Denial of Service Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-42914](https://cve.now/CVE-2026-42914.md): Windows Kerberos Denial of Service Vulnerability (CVSS 5.3, Microsoft Windows)
- [CVE-2026-42912](https://cve.now/CVE-2026-42912.md): Windows Telephony Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-42913](https://cve.now/CVE-2026-42913.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Remote Desktop client for Windows Desktop · Micro…)
- [CVE-2026-42911](https://cve.now/CVE-2026-42911.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-42916](https://cve.now/CVE-2026-42916.md): NT OS Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-42909](https://cve.now/CVE-2026-42909.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Remote Desktop client for Windows Desktop · Micro…)
- [CVE-2026-42980](https://cve.now/CVE-2026-42980.md): NT OS Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-42908](https://cve.now/CVE-2026-42908.md): Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-42907](https://cve.now/CVE-2026-42907.md): Windows Shell Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-42906](https://cve.now/CVE-2026-42906.md): Windows Shell Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-42905](https://cve.now/CVE-2026-42905.md): Windows DWM Core Library Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-42904](https://cve.now/CVE-2026-42904.md): Windows TCP/IP Elevation of Privilege Vulnerability (CVSS 9.6, Microsoft Windows)
- [CVE-2026-42903](https://cve.now/CVE-2026-42903.md): Windows Kerberos Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-42837](https://cve.now/CVE-2026-42837.md): Windows Projected File System Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-42836](https://cve.now/CVE-2026-42836.md): Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-50507](https://cve.now/CVE-2026-50507.md): Windows BitLocker Security Feature Bypass Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2026-49160](https://cve.now/CVE-2026-49160.md): HTTP.sys Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-48574](https://cve.now/CVE-2026-48574.md): Windows Media Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-48569](https://cve.now/CVE-2026-48569.md): Visual Studio Code Security Feature Bypass Vulnerability (CVSS 7.1, Microsoft Visual Studio Code)
- [CVE-2026-48565](https://cve.now/CVE-2026-48565.md): Windows Narrator Braille Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows Narrator Braille)
- [CVE-2026-48562](https://cve.now/CVE-2026-48562.md): Microsoft SharePoint Server Spoofing Vulnerability (CVSS 4.6, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-48560](https://cve.now/CVE-2026-48560.md): Microsoft SharePoint Server Spoofing Vulnerability (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-47656](https://cve.now/CVE-2026-47656.md): Windows Boot Manager Security Feature Bypass Vulnerability (CVSS 7.9, Microsoft Windows)
- [CVE-2026-45484](https://cve.now/CVE-2026-45484.md): Microsoft SharePoint Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-45481](https://cve.now/CVE-2026-45481.md): Microsoft SharePoint Server Spoofing Vulnerability (CVSS 7.3, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-47643](https://cve.now/CVE-2026-47643.md): Azure Stack Edge Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Azure Stack Edge)
- [CVE-2026-47640](https://cve.now/CVE-2026-47640.md): Microsoft SharePoint Server Spoofing Vulnerability (CVSS 4.6, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-47634](https://cve.now/CVE-2026-47634.md): Microsoft SharePoint Server Spoofing Vulnerability (CVSS 7.3, Microsoft SharePoint Server)
- [CVE-2026-42910](https://cve.now/CVE-2026-42910.md): Windows Hotpatch Monitoring Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-47293](https://cve.now/CVE-2026-47293.md): Microsoft Office Click-To-Run Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2026-47284](https://cve.now/CVE-2026-47284.md): Visual Studio Code Information Disclosure Vulnerability (CVSS 6.5, Microsoft Visual Studio Code)
- [CVE-2026-47281](https://cve.now/CVE-2026-47281.md): Visual Studio Code Elevation of Privilege Vulnerability (CVSS 9.6, Microsoft Visual Studio Code)
- [CVE-2026-45658](https://cve.now/CVE-2026-45658.md): Windows BitLocker Security Feature Bypass Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-45647](https://cve.now/CVE-2026-45647.md): Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability (CVSS 5.5, Microsoft Defender for Endpoint for Mac)
- [CVE-2026-45654](https://cve.now/CVE-2026-45654.md): Secure Boot Security Feature Bypass Vulnerability (CVSS 7.9, Microsoft Windows)
- [CVE-2026-45653](https://cve.now/CVE-2026-45653.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-45644](https://cve.now/CVE-2026-45644.md): Microsoft Live Share Canvas SDK Elevation of Privilege Vulnerability (CVSS 8.0, Microsoft Live Share Canvas SDK)
- [CVE-2026-45608](https://cve.now/CVE-2026-45608.md): Windows DHCP Client Information Disclosure Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2026-45637](https://cve.now/CVE-2026-45637.md): Microsoft DWM Core Library Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-45603](https://cve.now/CVE-2026-45603.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-45638](https://cve.now/CVE-2026-45638.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-45635](https://cve.now/CVE-2026-45635.md): Windows UPnP Device Host Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-45602](https://cve.now/CVE-2026-45602.md): Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability (CVSS 9.1, Microsoft Windows)
- [CVE-2026-45600](https://cve.now/CVE-2026-45600.md): Windows Kernel-Mode Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-45596](https://cve.now/CVE-2026-45596.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-45636](https://cve.now/CVE-2026-45636.md): Windows NTFS Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-45598](https://cve.now/CVE-2026-45598.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-45601](https://cve.now/CVE-2026-45601.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-45599](https://cve.now/CVE-2026-45599.md): Windows UPnP Device Host Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2026-45597](https://cve.now/CVE-2026-45597.md): Windows UI Automation Manager (uiamanager.dll) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-45595](https://cve.now/CVE-2026-45595.md): Windows Mark of the Web Security Feature Bypass Vulnerability (CVSS 5.4, Microsoft Windows)
- [CVE-2026-45604](https://cve.now/CVE-2026-45604.md): Windows Managed Installer Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-45594](https://cve.now/CVE-2026-45594.md): Windows Application Identity (AppID) Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-45593](https://cve.now/CVE-2026-45593.md): Windows SDK Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-45592](https://cve.now/CVE-2026-45592.md): Windows Internet (wininet.dll) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-45591](https://cve.now/CVE-2026-45591.md): ASP.NET Core Denial of Service Vulnerability (CVSS 7.5, Microsoft .NET · Microsoft ASP.NET Core +5)
- [CVE-2026-45586](https://cve.now/CVE-2026-45586.md): Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-45482](https://cve.now/CVE-2026-45482.md): Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability (CVSS 8.4, Microsoft Visual Studio Code CoPilot Chat Extension)
- [CVE-2026-45476](https://cve.now/CVE-2026-45476.md): Microsoft Azure Network Adapter Elevation of Privilege Vulnerability (CVSS 8.2, Linux kernel - Microsoft MANA Network Driver)
- [CVE-2026-45465](https://cve.now/CVE-2026-45465.md): Microsoft SharePoint Server Spoofing Vulnerability (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-45464](https://cve.now/CVE-2026-45464.md): Microsoft SharePoint Server Spoofing Vulnerability (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-45463](https://cve.now/CVE-2026-45463.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2026-45462](https://cve.now/CVE-2026-45462.md): Microsoft SharePoint Server Spoofing Vulnerability (CVSS 4.6, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-45459](https://cve.now/CVE-2026-45459.md): Microsoft Excel Security Feature Bypass Vulnerability (CVSS 3.3, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-45457](https://cve.now/CVE-2026-45457.md): Microsoft Word Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-45455](https://cve.now/CVE-2026-45455.md): Microsoft Excel Information Disclosure Vulnerability (CVSS 3.3, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2026-45454](https://cve.now/CVE-2026-45454.md): Microsoft SharePoint Remote Code Execution Vulnerability (CVSS 6.5, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-44822](https://cve.now/CVE-2026-44822.md): Microsoft Excel Information Disclosure Vulnerability (CVSS 8.2, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2026-40376](https://cve.now/CVE-2026-40376.md): Visual Studio Code Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Visual Studio Code)
- [CVE-2026-42835](https://cve.now/CVE-2026-42835.md): Microsoft Teams for Android Information Disclosure Vulnerability (CVSS 8.1, Microsoft Teams for Android)
- [CVE-2026-42829](https://cve.now/CVE-2026-42829.md): Windows Administrator Protection Secure Feature Bypass Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-42828](https://cve.now/CVE-2026-42828.md): Windows Projected File System Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-40371](https://cve.now/CVE-2026-40371.md): Microsoft Dynamics 365 (on-premises) Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Dynamics 365 (on-premises))
- [CVE-2026-33113](https://cve.now/CVE-2026-33113.md): Microsoft SharePoint Server Spoofing Vulnerability (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-26142](https://cve.now/CVE-2026-26142.md): Nuance PowerScribe Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Nuance PowerScribe 360 · Microsoft Nuance Powe… +1)
- [CVE-2026-50508](https://cve.now/CVE-2026-50508.md): Windows NTLM Spoofing Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-49161](https://cve.now/CVE-2026-49161.md): Microsoft PC Manager Security Feature Bypass Vulnerability (CVSS 7.8, Microsoft PC Manager)
- [CVE-2026-48583](https://cve.now/CVE-2026-48583.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-48578](https://cve.now/CVE-2026-48578.md): Secure Boot Security Feature Bypass Vulnerability (CVSS 7.9, Microsoft Windows)
- [CVE-2026-48576](https://cve.now/CVE-2026-48576.md): Secure Boot Security Feature Bypass Vulnerability (CVSS 7.9, Microsoft Windows)
- [CVE-2026-48575](https://cve.now/CVE-2026-48575.md): Secure Boot Security Feature Bypass Vulnerability (CVSS 7.9, Microsoft Windows)
- [CVE-2026-48573](https://cve.now/CVE-2026-48573.md): Secure Boot Security Feature Bypass Vulnerability (CVSS 7.9, Microsoft Windows)
- [CVE-2026-48570](https://cve.now/CVE-2026-48570.md): Secure Boot Security Feature Bypass Vulnerability (CVSS 7.9, Microsoft Windows)
- [CVE-2026-48568](https://cve.now/CVE-2026-48568.md): Secure Boot Security Feature Bypass Vulnerability (CVSS 7.9, Microsoft Windows)
- [CVE-2026-48566](https://cve.now/CVE-2026-48566.md): Windows DWM Core Library Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-48563](https://cve.now/CVE-2026-48563.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-47654](https://cve.now/CVE-2026-47654.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows Server)
- [CVE-2026-47652](https://cve.now/CVE-2026-47652.md): Windows Hyper-V Remote Code Execution Vulnerability (CVSS 8.2, Microsoft Windows)
- [CVE-2026-47653](https://cve.now/CVE-2026-47653.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-47648](https://cve.now/CVE-2026-47648.md): Windows Storage Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-45588](https://cve.now/CVE-2026-45588.md): Secure Boot Security Feature Bypass Vulnerability (CVSS 7.9, Microsoft Windows)
- [CVE-2026-47641](https://cve.now/CVE-2026-47641.md): Microsoft SharePoint Server Spoofing Vulnerability (CVSS 4.6, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-47639](https://cve.now/CVE-2026-47639.md): Microsoft SharePoint Server Spoofing Vulnerability (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-47638](https://cve.now/CVE-2026-47638.md): Microsoft SharePoint Server Spoofing Vulnerability (CVSS 4.6, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-47637](https://cve.now/CVE-2026-47637.md): Microsoft SharePoint Server Spoofing Vulnerability (CVSS 4.6, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-47636](https://cve.now/CVE-2026-47636.md): Microsoft SharePoint Server Spoofing Vulnerability (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-47635](https://cve.now/CVE-2026-47635.md): Microsoft Outlook and Word Remote Code Execution Vulnerability (CVSS 8.4, Microsoft Office LTSC)
- [CVE-2026-41098](https://cve.now/CVE-2026-41098.md): Azure Stack Edge Spoofing Vulnerability (CVSS 8.4, Microsoft Azure Stack Edge)
- [CVE-2026-47631](https://cve.now/CVE-2026-47631.md): Microsoft Exchange Server Spoofing Vulnerability (CVSS 8.1, Microsoft Exchange Server 2016 Cumulative Update · Micro… +1)
- [CVE-2026-47298](https://cve.now/CVE-2026-47298.md): Microsoft SharePoint Server Remote Code Execution Vulnerability (CVSS 8.0, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-32193](https://cve.now/CVE-2026-32193.md): Azure Kubernetes Service (AKS) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Azure Kubernetes Service)
- [CVE-2026-41092](https://cve.now/CVE-2026-41092.md): Microsoft Kinect Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-47292](https://cve.now/CVE-2026-47292.md): Visual Studio Code MSSQL Extension Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Visual Studio Code - MSSQL Extension)
- [CVE-2026-47291](https://cve.now/CVE-2026-47291.md): HTTP.sys Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-47289](https://cve.now/CVE-2026-47289.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-47288](https://cve.now/CVE-2026-47288.md): Windows Kerberos Key Distribution Center (KDC) Remote Code Execution (CVSS 7.1, Microsoft Windows Server)
- [CVE-2026-47287](https://cve.now/CVE-2026-47287.md): Visual Studio Code Tampering Vulnerability (CVSS 6.5, Microsoft Visual Studio Code)
- [CVE-2026-45657](https://cve.now/CVE-2026-45657.md): Windows Kernel Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2026-45656](https://cve.now/CVE-2026-45656.md): UEFI Secure Boot Security Feature Bypass Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-45655](https://cve.now/CVE-2026-45655.md): Windows BitLocker Security Feature Bypass Vulnerability (CVSS 5.3, Microsoft Windows)
- [CVE-2026-45650](https://cve.now/CVE-2026-45650.md): Microsoft Bing Search Spoofing Vulnerability (CVSS 4.3, Microsoft Bing Search for Android)
- [CVE-2026-45649](https://cve.now/CVE-2026-45649.md): Office for Android Spoofing Vulnerability (CVSS 7.1, Microsoft Excel for Android · Microsoft PowerPoint for A… +1)
- [CVE-2026-45648](https://cve.now/CVE-2026-45648.md): Windows Active Directory Domain Services Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows Server)
- [CVE-2026-45645](https://cve.now/CVE-2026-45645.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2026-45643](https://cve.now/CVE-2026-45643.md): Microsoft Word Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-45642](https://cve.now/CVE-2026-45642.md): Microsoft Azure Attestation service and Device Health Attestation Service Spoofing Vulnerability (CVSS 3.9, Microsoft Windows)
- [CVE-2026-45634](https://cve.now/CVE-2026-45634.md): Windows DHCP Client Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-45641](https://cve.now/CVE-2026-45641.md): Windows Hyper-V Remote Code Execution Vulnerability (CVSS 8.4, Microsoft Windows)
- [CVE-2026-45607](https://cve.now/CVE-2026-45607.md): Windows Hyper-V Remote Code Execution Vulnerability (CVSS 8.4, Microsoft Windows)
- [CVE-2026-45606](https://cve.now/CVE-2026-45606.md): Microsoft UxTheme Library (uxtheme.dll) Denial of Service Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-45640](https://cve.now/CVE-2026-45640.md): Windows Bluetooth Port Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-45639](https://cve.now/CVE-2026-45639.md): Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability (CVSS 7.5, Microsoft Remote Desktop client for Windows Desktop · Micro…)
- [CVE-2026-45605](https://cve.now/CVE-2026-45605.md): Windows Bluetooth Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-45583](https://cve.now/CVE-2026-45583.md): Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Exchange Server 2016 Cumulative Update · Micro… +1)
- [CVE-2026-45504](https://cve.now/CVE-2026-45504.md): Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Exchange Server 2016 Cumulative Update · Micro… +1)
- [CVE-2026-45503](https://cve.now/CVE-2026-45503.md): Microsoft Exchange Server Information Disclosure Vulnerability (CVSS 8.1, Microsoft Exchange Server 2016 Cumulative Update · Micro… +1)
- [CVE-2026-45502](https://cve.now/CVE-2026-45502.md): Microsoft Exchange Server Information Disclosure Vulnerability (CVSS 5.0, Microsoft Exchange Server 2016 Cumulative Update · Micro… +1)
- [CVE-2026-45501](https://cve.now/CVE-2026-45501.md): Microsoft Exchange Server Spoofing Vulnerability (CVSS 6.5, Microsoft Exchange Server 2016 Cumulative Update · Micro… +1)
- [CVE-2026-45500](https://cve.now/CVE-2026-45500.md): Microsoft Exchange Server Spoofing Vulnerability (CVSS 6.1, Microsoft Exchange Server 2016 Cumulative Update · Micro… +1)
- [CVE-2026-45491](https://cve.now/CVE-2026-45491.md): .NET Tampering Vulnerability (CVSS 6.2, Microsoft .NET · Microsoft.NETCore.App.Runtime.linux-x64 +2)
- [CVE-2026-45490](https://cve.now/CVE-2026-45490.md): .NET SDK Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft .NET · dotnet +1)
- [CVE-2026-45487](https://cve.now/CVE-2026-45487.md): Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-45466](https://cve.now/CVE-2026-45466.md): Microsoft Word Information Disclosure Vulnerability (CVSS 3.3, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-45461](https://cve.now/CVE-2026-45461.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2026-45460](https://cve.now/CVE-2026-45460.md): Microsoft Office Information Disclosure Vulnerability (CVSS 4.7, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2026-45458](https://cve.now/CVE-2026-45458.md): Microsoft Outlook and Word Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise · Microsoft Office +3)
- [CVE-2026-45456](https://cve.now/CVE-2026-45456.md): Microsoft Outlook and Word Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise · Microsoft Office +3)
- [CVE-2026-45453](https://cve.now/CVE-2026-45453.md): Microsoft SharePoint Server Spoofing Vulnerability (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-44824](https://cve.now/CVE-2026-44824.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office +2)
- [CVE-2026-44823](https://cve.now/CVE-2026-44823.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2026-44821](https://cve.now/CVE-2026-44821.md): Microsoft Office Information Disclosure Vulnerability (CVSS 5.5, Microsoft 365 Apps for Enterprise · Microsoft Office +2)
- [CVE-2026-44820](https://cve.now/CVE-2026-44820.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2026-44819](https://cve.now/CVE-2026-44819.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office +2)
- [CVE-2026-44818](https://cve.now/CVE-2026-44818.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.0, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2026-44817](https://cve.now/CVE-2026-44817.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2026-42902](https://cve.now/CVE-2026-42902.md): Microsoft PowerToys Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft PowerToys)
- [CVE-2026-34335](https://cve.now/CVE-2026-34335.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-33828](https://cve.now/CVE-2026-33828.md): Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-40404](https://cve.now/CVE-2026-40404.md): Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-40409](https://cve.now/CVE-2026-40409.md): Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-45483](https://cve.now/CVE-2026-45483.md): Microsoft Office Project Server Spoofing Vulnerability (CVSS 4.6, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-45485](https://cve.now/CVE-2026-45485.md): Microsoft Office Information Disclosure Vulnerability (CVSS 3.3, Microsoft 365 Apps for Enterprise · Microsoft Office +2)
- [CVE-2026-45486](https://cve.now/CVE-2026-45486.md): Microsoft Word Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-45479](https://cve.now/CVE-2026-45479.md): Microsoft SharePoint Server Spoofing Vulnerability (CVSS 4.6, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-45474](https://cve.now/CVE-2026-45474.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2026-45471](https://cve.now/CVE-2026-45471.md): Microsoft Word Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office +3)
- [CVE-2026-45472](https://cve.now/CVE-2026-45472.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2026-45475](https://cve.now/CVE-2026-45475.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office +2)
- [CVE-2026-45469](https://cve.now/CVE-2026-45469.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2026-45468](https://cve.now/CVE-2026-45468.md): Microsoft SharePoint Server Spoofing Vulnerability (CVSS 4.6, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-45467](https://cve.now/CVE-2026-45467.md): Microsoft SharePoint Server Spoofing Vulnerability (CVSS 4.6, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-41108](https://cve.now/CVE-2026-41108.md): Windows DNS Client Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-47980](https://cve.now/CVE-2026-47980.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47945](https://cve.now/CVE-2026-47945.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-48280](https://cve.now/CVE-2026-48280.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47985](https://cve.now/CVE-2026-47985.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47935](https://cve.now/CVE-2026-47935.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47941](https://cve.now/CVE-2026-47941.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-48251](https://cve.now/CVE-2026-48251.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-48289](https://cve.now/CVE-2026-48289.md): Adobe Experience Manager | Improper Input Validation (CWE-20) (CVSS 3.5, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-48297](https://cve.now/CVE-2026-48297.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-48256](https://cve.now/CVE-2026-48256.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-48268](https://cve.now/CVE-2026-48268.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47993](https://cve.now/CVE-2026-47993.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47936](https://cve.now/CVE-2026-47936.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47956](https://cve.now/CVE-2026-47956.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47939](https://cve.now/CVE-2026-47939.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47982](https://cve.now/CVE-2026-47982.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47989](https://cve.now/CVE-2026-47989.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47977](https://cve.now/CVE-2026-47977.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47991](https://cve.now/CVE-2026-47991.md): Adobe Experience Manager | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601) (CVSS 6.1, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47947](https://cve.now/CVE-2026-47947.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47972](https://cve.now/CVE-2026-47972.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47954](https://cve.now/CVE-2026-47954.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47951](https://cve.now/CVE-2026-47951.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47943](https://cve.now/CVE-2026-47943.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47974](https://cve.now/CVE-2026-47974.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47942](https://cve.now/CVE-2026-47942.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-48258](https://cve.now/CVE-2026-48258.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47975](https://cve.now/CVE-2026-47975.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47962](https://cve.now/CVE-2026-47962.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47990](https://cve.now/CVE-2026-47990.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47970](https://cve.now/CVE-2026-47970.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47950](https://cve.now/CVE-2026-47950.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47957](https://cve.now/CVE-2026-47957.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47948](https://cve.now/CVE-2026-47948.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47986](https://cve.now/CVE-2026-47986.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47966](https://cve.now/CVE-2026-47966.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-48301](https://cve.now/CVE-2026-48301.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-48264](https://cve.now/CVE-2026-48264.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-34692](https://cve.now/CVE-2026-34692.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47983](https://cve.now/CVE-2026-47983.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-48304](https://cve.now/CVE-2026-48304.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47981](https://cve.now/CVE-2026-47981.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-48300](https://cve.now/CVE-2026-48300.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47944](https://cve.now/CVE-2026-47944.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47953](https://cve.now/CVE-2026-47953.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47946](https://cve.now/CVE-2026-47946.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47973](https://cve.now/CVE-2026-47973.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47987](https://cve.now/CVE-2026-47987.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47958](https://cve.now/CVE-2026-47958.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-48265](https://cve.now/CVE-2026-48265.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-48288](https://cve.now/CVE-2026-48288.md): Adobe Experience Manager | Improper Input Validation (CWE-20) (CVSS 3.5, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-48250](https://cve.now/CVE-2026-48250.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-48271](https://cve.now/CVE-2026-48271.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47978](https://cve.now/CVE-2026-47978.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-47949](https://cve.now/CVE-2026-47949.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-48299](https://cve.now/CVE-2026-48299.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-48266](https://cve.now/CVE-2026-48266.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager as a Cloud Service · Adobe Expe… +1)
- [CVE-2026-49959](https://cve.now/CVE-2026-49959.md): Hermes WebUI \< 0.51.311 RCE via Git Configuration Injection (CVSS 8.7, nesquena hermes-webui)
- [CVE-2026-49958](https://cve.now/CVE-2026-49958.md): Hermes WebUI \< 0.51.303 TOCTOU Race Condition via git\_discard (CVSS 4.3, nesquena hermes-webui)
- [CVE-2026-22926](https://cve.now/CVE-2026-22926.md): Omnissa Workspace ONE® Assist for macOS contains a Local Privilege Escalation Vulnerability. (CVSS 7.8, Omnissa Workspace ONE® Assist for macOS)
- [CVE-2026-49957](https://cve.now/CVE-2026-49957.md): Hermes WebUI \< 0.51.296 Workspace Boundary Bypass via api/workspace.py (CVSS 6.3, nesquena hermes-webui)
- [CVE-2026-42599](https://cve.now/CVE-2026-42599.md): Cross-site scripting via spread attributes in Svelte SSR (CVSS 5.1, sveltejs svelte · svelte)
- [CVE-2026-42567](https://cve.now/CVE-2026-42567.md): Svelte: ReDoS in \`\<svelte:element\>\` Tag Validation (CVSS 5.9, sveltejs svelte · svelte)
- [CVE-2026-42573](https://cve.now/CVE-2026-42573.md): Svelte: XSS via DOM Clobbering of Internal Framework State (CVSS 5.3, sveltejs svelte · svelte)
- [CVE-2026-42570](https://cve.now/CVE-2026-42570.md): Svelte devalue: DoS via sparse array deserialization (CVSS 7.5, sveltejs devalue · devalue)
- [CVE-2026-24180](https://cve.now/CVE-2026-24180.md): NVIDIA DALI contains a vulnerability in a component where an attacker could cause a heap-based buffer overflow. (CVSS 7.3, NVIDIA DALI)
- [CVE-2026-24181](https://cve.now/CVE-2026-24181.md): NVIDIA DALI contains a vulnerability in a component where an attacker could cause an improper index validation. (CVSS 7.3, NVIDIA DALI)
- [CVE-2026-49956](https://cve.now/CVE-2026-49956.md): Hermes WebUI \< 0.51.269 Profile Isolation Bypass via sessions search (CVSS 7.1, nesquena hermes-webui)
- [CVE-2026-46492](https://cve.now/CVE-2026-46492.md): md-fileserver: Stored/Reflected XSS when viewing Markdown (raw HTML allowed) (CVSS 7.2, commenthol md-fileserver · md-fileserver)
- [CVE-2026-49848](https://cve.now/CVE-2026-49848.md): FreeSWITCH: Pre-authentication \`userVariables\` injection in \`mod\_verto\` (CVSS 4.3, signalwire freeswitch)
- [CVE-2026-49955](https://cve.now/CVE-2026-49955.md): Hermes WebUI \< 0.51.270 Resource Exhaustion via passkey/options (CVSS 6.9, nesquena hermes-webui)
- [CVE-2026-49847](https://cve.now/CVE-2026-49847.md): FreeSWITCH: Stack overflow in bundled cJSON parser via deeply nested JSON (CVSS 7.5, signalwire freeswitch)
- [CVE-2026-49843](https://cve.now/CVE-2026-49843.md): FreeSWITCH: Pre-authentication session eviction via attacker-chosen \`sessid\` in \`mod\_verto\` (CVSS 5.3, signalwire freeswitch)
- [CVE-2026-45447](https://cve.now/CVE-2026-45447.md): Heap Use-After-Free in the PKCS7\_verify() Function (CVSS 8.8, OpenSSL)
- [CVE-2026-45446](https://cve.now/CVE-2026-45446.md): Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (CVSS 4.8, OpenSSL)
- [CVE-2026-45445](https://cve.now/CVE-2026-45445.md): AES-OCB IV Ignored on EVP\_Cipher() Path (CVSS 7.5, OpenSSL)
- [CVE-2026-42771](https://cve.now/CVE-2026-42771.md): Possible Out of Bounds Read in X509\_VERIFY\_PARAM\_set1\_email() (CVSS 6.2, OpenSSL)
- [CVE-2026-42770](https://cve.now/CVE-2026-42770.md): FFC-DH Peer Validation Uses Attacker-Supplied q (CVSS 3.7, OpenSSL)
- [CVE-2026-42769](https://cve.now/CVE-2026-42769.md): Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (CVSS 5.3, OpenSSL)
- [CVE-2026-42768](https://cve.now/CVE-2026-42768.md): Multi-RecipientInfo Bleichenbacher Oracle in CMS\_decrypt() and PKCS7\_decrypt() (CVSS 3.7, OpenSSL)
- [CVE-2026-42767](https://cve.now/CVE-2026-42767.md): NULL Pointer Dereference in CRMF EncryptedValue Decryption (CVSS 5.9, OpenSSL)
- [CVE-2026-42766](https://cve.now/CVE-2026-42766.md): Possible NULL Dereference in Password-Based CMS Decryption (CVSS 5.9, OpenSSL)
- [CVE-2026-42765](https://cve.now/CVE-2026-42765.md): NULL Dereference in Certificate Verification with OCSP Checking (CVSS 7.5, OpenSSL)
- [CVE-2026-42764](https://cve.now/CVE-2026-42764.md): NULL Pointer Dereference in QUIC Server Initial Packet Handling (CVSS 7.5, OpenSSL)
- [CVE-2026-35188](https://cve.now/CVE-2026-35188.md): Double-free When Checking OCSP Stapled Response (CVSS 5.0, OpenSSL)
- [CVE-2026-34183](https://cve.now/CVE-2026-34183.md): Unbounded Memory Growth in the QUIC PATH\_CHALLENGE Handler (CVSS 7.5, OpenSSL)
- [CVE-2026-34182](https://cve.now/CVE-2026-34182.md): CMS AuthEnvelopedData Processing May Accept Forged Messages (CVSS 9.1, OpenSSL)
- [CVE-2026-34181](https://cve.now/CVE-2026-34181.md): PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys (CVSS 7.4, OpenSSL)
- [CVE-2026-34180](https://cve.now/CVE-2026-34180.md): Heap Buffer Over-read in ASN.1 Content Parsing (CVSS 7.5, OpenSSL)
- [CVE-2026-9076](https://cve.now/CVE-2026-9076.md): Out-of-Bounds Read in CMS Password-Based Decryption (CVSS 7.5, OpenSSL)
- [CVE-2026-7383](https://cve.now/CVE-2026-7383.md): Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (CVSS 8.1, OpenSSL)
- [CVE-2026-49842](https://cve.now/CVE-2026-49842.md): FreeSWITCH: Pre-authentication bandwidth amplification via \`mod\_verto\` speed-test frames (CVSS 7.5, signalwire freeswitch)
- [CVE-2026-49841](https://cve.now/CVE-2026-49841.md): FreeSWITCH: Pre-authentication heap buffer overflow in \`mod\_verto\` HTTP POST body read (CVSS 9.8, signalwire freeswitch)
- [CVE-2026-49840](https://cve.now/CVE-2026-49840.md): FreeSWITCH: Pre-authentication heap buffer overflow in libesl \`Content-Length\` parsing (CVSS 9.1, signalwire freeswitch)
- [CVE-2026-49475](https://cve.now/CVE-2026-49475.md): FreeSWITCH: Out-of-bounds memory access in core STUN attribute parsing (CVSS 7.5, signalwire freeswitch)
- [CVE-2026-49472](https://cve.now/CVE-2026-49472.md): FreeSWITCH includes a vulnerable function, PREFIX(prologTok)() from libexpat (CVSS 5.3, signalwire freeswitch)
- [CVE-2026-45771](https://cve.now/CVE-2026-45771.md): Freeswitch Denial-of-Service in SIP PUBLISH Requests via XML Entity Expansion (CVSS 7.5, signalwire freeswitch)
- [CVE-2026-0420](https://cve.now/CVE-2026-0420.md): Missing TLS certificate validation in NETGEAR's ReadyCloud client app (CVSS 4.6, NETGEAR RAX120v1 · NETGEAR RAX120v2 +3)
- [CVE-2026-9212](https://cve.now/CVE-2026-9212.md): Insufficient authentication and input validation in certain NETGEAR products (CVSS 5.6, NETGEAR LBR1020 · NETGEAR LBR20 +23)
- [CVE-2026-0411](https://cve.now/CVE-2026-0411.md): A Sensitive Information Disclosure Vulnerability in NETGEAR Orbi Satellites (CVSS 4.2, NETGEAR RBE970 · NETGEAR RBR350 +3)
- [CVE-2026-0415](https://cve.now/CVE-2026-0415.md): Insufficient input validation vulnerability in certain Orbi routers (CVSS 4.3, NETGEAR RBE970 · NETGEAR RBR750 +11)
- [CVE-2026-0414](https://cve.now/CVE-2026-0414.md): Insufficient Input Validation Allows Unauthorized Modification of Router Software in certain NETGEAR Routers (CVSS 4.3, NETGEAR RBE970)
- [CVE-2026-0413](https://cve.now/CVE-2026-0413.md): Buffer overflow vulnerability in certain NETGEAR Nighthawk routers (CVSS 4.3, NETGEAR RBE370 · NETGEAR RBE770 +12)
- [CVE-2026-0418](https://cve.now/CVE-2026-0418.md): Certain NETGEAR devices allow administrators to tamper with system (CVSS 4.3, NETGEAR CBR750 · NETGEAR EX6120 +33)
- [CVE-2026-0417](https://cve.now/CVE-2026-0417.md): Insufficient input validation in certain NETGEAR routers (CVSS 4.3, NETGEAR MR60 · NETGEAR MR70 +25)
- [CVE-2026-9210](https://cve.now/CVE-2026-9210.md): Certain NETGEAR routers allow authenticated administrators to gain unintended control of the router (CVSS 4.9, NETGEAR EX3700 · NETGEAR EX3800 +29)
- [CVE-2026-9211](https://cve.now/CVE-2026-9211.md): Certain NETGEAR routers allow unauthenticated users to gain control of the router (CVSS 5.2, NETGEAR CAX30 · NETGEAR RAX30 +2)
- [CVE-2026-0416](https://cve.now/CVE-2026-0416.md): Improper input validation in certain NETGEAR routers allows unauthorized modification of protected router functionality (CVSS 4.3, NETGEAR RAXE450 · NETGEAR RAXE500)
- [CVE-2026-3088](https://cve.now/CVE-2026-3088.md): Unauthenticated users can disrupt router operation (CVSS 4.9, NETGEAR RBR860 · NETGEAR RBRE950 +6)
- [CVE-2026-9213](https://cve.now/CVE-2026-9213.md): Insufficient input validation in certain NETGEAR routers (CVSS 6.9, NETGEAR MR70 · NETGEAR MS70 +2)
- [CVE-2026-0419](https://cve.now/CVE-2026-0419.md): Insufficient input validation vulnerability in NETGEAR JR6150 (CVSS 4.4, NETGEAR JR6150)
- [CVE-2026-0412](https://cve.now/CVE-2026-0412.md): Insufficient input validation vulnerability in NETGEAR JR6150 Web UI (CVSS 4.3, NETGEAR JR6150)
- [CVE-2026-0410](https://cve.now/CVE-2026-0410.md): Insufficient input validation in certain NETGEAR routers (CVSS 1.9, NETGEAR R7000 · NETGEAR RAX20 +18)
- [CVE-2026-28301](https://cve.now/CVE-2026-28301.md): SolarWinds Observability Self-Hosted Open Redirect Vulnerability (CVSS 4.8, SolarWinds Observability Self-Hosted)
- [CVE-2026-0409](https://cve.now/CVE-2026-0409.md): Netgear Orbi 370 Series Remote Code Execution vulnerability (CVSS 4.8, NETGEAR Orbi)
- [CVE-2026-49948](https://cve.now/CVE-2026-49948.md): Mem0 0.2.8 Missing Authorization via POST /configure Endpoint (CVSS 8.6, mem0ai mem0)
- [CVE-2026-24065](https://cve.now/CVE-2026-24065.md): Local Privilege Escalation via Insecure XPC Client Validation in Waves Central for macOS (CVSS 8.1, Waves Audio Waves Central)
- [CVE-2026-24064](https://cve.now/CVE-2026-24064.md): Local Privilege Escalation via Dynamic Library Injection in Waves Central for macOS (CVSS 7.8, Waves Audio Waves Central)
- [CVE-2026-8045](https://cve.now/CVE-2026-8045.md): CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure of server-side fi (CVSS 7.1, Schneider Electric EcoStruxure™ IT Data Center Expert)
- [CVE-2026-8025](https://cve.now/CVE-2026-8025.md): SQLi in MOSK Informatics' CBS Platform (CVSS 9.8, MOSK Information Technologies CBS Platform)
- [CVE-2026-10727](https://cve.now/CVE-2026-10727.md): An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote authenticated attacker (CVSS 7.2, Ivanti Endpoint Manager Mobile)
- [CVE-2025-67862](https://cve.now/CVE-2025-67862.md): An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability \[CWE-1244\] vulnerability in Fortinet FortiOS 7.6.0 through 7.6 (CVSS 6.0, Fortinet FortiOS · Fortinet FortiProxy)
- [CVE-2026-25089](https://cve.now/CVE-2026-25089.md): A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 th (CVSS 9.1, KEV, Fortinet FortiSandbox)
- [CVE-2026-49938](https://cve.now/CVE-2026-49938.md): A improper access control vulnerability in Fortinet FortiPortal 7.4.0 through 7.4.7, FortiPortal 7.2.0 through 7.2.8, FortiPortal 7.0 all ve (CVSS 6.2, Fortinet FortiPortal)
- [CVE-2026-10523](https://cve.now/CVE-2026-10523.md): An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthent (CVSS 9.9, ivanti Sentry)
- [CVE-2026-10520](https://cve.now/CVE-2026-10520.md): An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user (CVSS 10.0, KEV, ivanti Sentry)
- [CVE-2026-49762](https://cve.now/CVE-2026-49762.md): Unbounded integer parsing in the Version module enables CPU and memory exhaustion denial of service (CVSS 5.1, elixir-lang elixir)
- [CVE-2026-47901](https://cve.now/CVE-2026-47901.md): Iframe escape by plugins in Logseq (CVSS 4.6, logseq)
- [CVE-2026-47900](https://cve.now/CVE-2026-47900.md): Stored XSS via Unsanitized Plugin Metadata in Logseq (CVSS 4.6, logseq)
- [CVE-2026-47899](https://cve.now/CVE-2026-47899.md): Arbitrary File Read, Write, Rename, and Delete in Logseq (CVSS 8.7, logseq)
- [CVE-2026-9279](https://cve.now/CVE-2026-9279.md): Shell command injection in Logseq (CVSS 8.7, logseq)
- [CVE-2026-11792](https://cve.now/CVE-2026-11792.md): 389-ds-base: 389-ds-base: heap buffer overflow in audit log password masking (create\_masked\_entry\_string) (CVSS 3.3, Red Hat Directory Server · Red Hat Enterprise Linux)
- [CVE-2026-11793](https://cve.now/CVE-2026-11793.md): 389-ds-base: 389-ds-base: stack buffer overflow in checkprefix() algorithm id parsing (CVSS 4.9, Red Hat Directory Server · Red Hat Enterprise Linux)
- [CVE-2026-11790](https://cve.now/CVE-2026-11790.md): 389-ds-base: 389-ds-base: pbkdf2 password storage plugin unbounded iteration count denial of service (CVSS 4.9, Red Hat Directory Server · Red Hat Enterprise Linux)
- [CVE-2026-11789](https://cve.now/CVE-2026-11789.md): 389-ds-base: 389-ds-base: smd5 password storage plugin salt length integer underflow crash (CVSS 4.9, Red Hat Directory Server · Red Hat Enterprise Linux)
- [CVE-2026-11788](https://cve.now/CVE-2026-11788.md): 389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parser (CVSS 5.9, Red Hat Directory Server 11.5 E4S for RHEL · Red Hat Dir… +5)
- [CVE-2026-11787](https://cve.now/CVE-2026-11787.md): 389-ds-base: 389-ds-base: heap buffer over-read in ldap\_utf8prev() via str2simple filter parsing (CVSS 5.0, Red Hat Directory Server · Red Hat Enterprise Linux)
- [CVE-2026-11785](https://cve.now/CVE-2026-11785.md): 389-ds-base: 389-ds-base: partial stack address information leak via ber\_printf type confusion in sso token handler (CVSS 4.3, Red Hat Directory Server · Red Hat Enterprise Linux)
- [CVE-2026-11786](https://cve.now/CVE-2026-11786.md): 389-ds-base: 389-ds-base: heap out-of-bounds read in ldif parser str2entry\_state\_information\_from\_type() (CVSS 1.9, Red Hat Directory Server · Red Hat Enterprise Linux)
- [CVE-2026-52907](https://cve.now/CVE-2026-52907.md): media: rockchip: rkcif: fix off by one bugs (CVSS 7.8, Linux)
- [CVE-2026-52906](https://cve.now/CVE-2026-52906.md): 9p: fix access mode flags being ORed instead of replaced (CVSS 7.7, Linux)
- [CVE-2026-52905](https://cve.now/CVE-2026-52905.md): mm/damon/core: disallow non-power of two min\_region\_sz on damon\_start() (no CVSS, Linux)
- [CVE-2026-52904](https://cve.now/CVE-2026-52904.md): drm/nouveau: fix nvkm\_device leak on aperture removal failure (no CVSS, Linux)
- [CVE-2026-46332](https://cve.now/CVE-2026-46332.md): greybus: gb-beagleplay: bound bootloader receive buffering (CVSS 8.0, Linux)
- [CVE-2026-46330](https://cve.now/CVE-2026-46330.md): Revert "net/smc: Introduce TCP ULP support" (CVSS 7.8, Linux)
- [CVE-2026-46329](https://cve.now/CVE-2026-46329.md): erofs: handle end of filesystem properly for file-backed mounts (no CVSS, Linux)
- [CVE-2026-46328](https://cve.now/CVE-2026-46328.md): apparmor: fix rlimit for posix cpu timers (CVSS 7.3, Linux)
- [CVE-2026-46327](https://cve.now/CVE-2026-46327.md): dm: fix unlocked test for dm\_suspended\_md (CVSS 7.8, Linux)
- [CVE-2026-46326](https://cve.now/CVE-2026-46326.md): iio: pressure: mprls0025pa: fix spi\_transfer struct initialisation (CVSS 8.4, Linux)
- [CVE-2026-46325](https://cve.now/CVE-2026-46325.md): RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE\_SIZE (CVSS 9.8, Linux)
- [CVE-2026-7486](https://cve.now/CVE-2026-7486.md): SQLi in Netcad's E-İmar (CVSS 9.8, Netcad Software E-İmar)
- [CVE-2026-46324](https://cve.now/CVE-2026-46324.md): netfilter: nf\_tables: use list\_del\_rcu for netlink hooks (CVSS 7.8, Linux)
- [CVE-2026-46323](https://cve.now/CVE-2026-46323.md): net: gro: don't merge zcopy skbs (CVSS 7.8, Linux)
- [CVE-2026-46322](https://cve.now/CVE-2026-46322.md): tun: free page on build\_skb failure in tun\_xdp\_one() (CVSS 7.1, Linux)
- [CVE-2026-46321](https://cve.now/CVE-2026-46321.md): tun: free page on short-frame rejection in tun\_xdp\_one() (CVSS 7.1, Linux)
- [CVE-2026-46320](https://cve.now/CVE-2026-46320.md): tap: free page on error paths in tap\_get\_user\_xdp() (CVSS 7.4, Linux)
- [CVE-2026-46319](https://cve.now/CVE-2026-46319.md): net/sched: act\_ct: Only release RCU read lock after ct\_ft (CVSS 7.8, Linux)
- [CVE-2026-46318](https://cve.now/CVE-2026-46318.md): Revert "mm/hugetlbfs: update hugetlbfs to use mmap\_prepare" (no CVSS, Linux)
- [CVE-2026-11764](https://cve.now/CVE-2026-11764.md): Data exposed without proper permission (CVSS 3.6, pretix)
- [CVE-2026-46317](https://cve.now/CVE-2026-46317.md): KVM: arm64: Reassign nested\_mmus array behind mmu\_lock (CVSS 8.8, Linux)
- [CVE-2026-46316](https://cve.now/CVE-2026-46316.md): KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVSS 9.3, Linux)
- [CVE-2017-20251](https://cve.now/CVE-2017-20251.md): WordPress Insert PHP Plugin \< 3.3.1 PHP Code Injection via REST API (CVSS 9.3, Themeisle Woody Code Snippets)
- [CVE-2017-20250](https://cve.now/CVE-2017-20250.md): WordPress Plugin Mac Photo Gallery 3.0 Arbitrary File Download (CVSS 8.7, Apptha Mac Photo Gallery)
- [CVE-2017-20249](https://cve.now/CVE-2017-20249.md): WordPress Plugin Apptha Slider Gallery 1.0 SQL Injection (CVSS 8.8, Apptha Slider Gallery)
- [CVE-2017-20248](https://cve.now/CVE-2017-20248.md): WordPress Plugin Apptha Slider Gallery 1.0 Path Traversal File Download (CVSS 8.7, Apptha Slider Gallery)
- [CVE-2017-20247](https://cve.now/CVE-2017-20247.md): WordPress Plugin PICA Photo Gallery 1.0 SQL Injection (CVSS 8.8, Apptha PICA Photo Gallery)
- [CVE-2017-20246](https://cve.now/CVE-2017-20246.md): KittyCatfish 2.2 Plugin for WordPress SQL Injection (CVSS 8.8, Missilesilo KittyCatfish)
- [CVE-2017-20245](https://cve.now/CVE-2017-20245.md): Wow Viral Signups 2.1 WordPress Plugin SQL Injection (CVSS 8.8, Wow-Company Wow Viral Signups)
- [CVE-2017-20244](https://cve.now/CVE-2017-20244.md): Wow Forms WordPress Plugin 2.1 SQL Injection (CVSS 8.8, Wow-Company Wow Forms)
- [CVE-2017-20243](https://cve.now/CVE-2017-20243.md): WordPress Car Park Booking Plugin SQL Injection via space\_id (CVSS 8.8, gurutechteam Car Park Booking WordPress Plugin)
- [CVE-2016-20065](https://cve.now/CVE-2016-20065.md): Product Catalog 8 1.2 Plugin WordPress SQL Injection (CVSS 8.8, EvWill Product Catalog)
- [CVE-2016-20064](https://cve.now/CVE-2016-20064.md): WP Vault 0.8.6.6 Local File Inclusion via wpv-image Parameter (CVSS 6.9, myasui WP Vault)
- [CVE-2016-20063](https://cve.now/CVE-2016-20063.md): Single Personal Message 1.0.3 WordPress Plugin SQL Injection (CVSS 7.1, Md. Shamim Shahnewaz Single Personal Message)
- [CVE-2016-20062](https://cve.now/CVE-2016-20062.md): Simply Poll 1.4.1 Plugin for WordPress SQL Injection (CVSS 8.8, Ollie Armstrong Simply Poll)
- [CVE-2026-2638](https://cve.now/CVE-2026-2638.md): X-VPN macOS website versions - Local Privilege Escalation (CVSS 7.3, X-VPN macOS website)
- [CVE-2026-49742](https://cve.now/CVE-2026-49742.md): TYPO3 CMS - Broken Access Control in Media Module (CVSS 7.1, TYPO3 CMS · typo3/cms-core +1)
- [CVE-2026-49741](https://cve.now/CVE-2026-49741.md): TYPO3 CMS - Privilege Escalation & SQL Injection in Form Framework (CVSS 8.7, TYPO3 CMS · typo3/cms-core +1)
- [CVE-2026-49740](https://cve.now/CVE-2026-49740.md): TYPO3 CMS - Insecure Deserialization in Core API (CVSS 6.3, TYPO3 CMS · typo3/cms-core)
- [CVE-2026-49738](https://cve.now/CVE-2026-49738.md): TYPO3 CMS - Broken Access Control in File Abstraction Layer (CVSS 2.1, TYPO3 CMS · typo3/cms-core)
- [CVE-2026-47352](https://cve.now/CVE-2026-47352.md): TYPO3 CMS - Broken Access Control in Backend API (CVSS 5.3, TYPO3 CMS · typo3/cms-core +1)
- [CVE-2026-47351](https://cve.now/CVE-2026-47351.md): TYPO3 CMS - Broken Access Control in Clipboard (CVSS 5.3, TYPO3 CMS · typo3/cms-core +1)
- [CVE-2026-47350](https://cve.now/CVE-2026-47350.md): TYPO3 CMS - Broken Access Control in DataHandler (CVSS 5.3, TYPO3 CMS · typo3/cms-core)
- [CVE-2026-47349](https://cve.now/CVE-2026-47349.md): TYPO3 CMS - Broken Access Control in Recycler (CVSS 5.3, TYPO3 CMS · typo3/cms-core +1)
- [CVE-2026-47348](https://cve.now/CVE-2026-47348.md): TYPO3 CMS - Cross-Site Scripting in Indexed Search (CVSS 5.1, TYPO3 CMS · typo3/cms-core +1)
- [CVE-2026-47347](https://cve.now/CVE-2026-47347.md): TYPO3 CMS - Open Redirect in Core Utilities (CVSS 5.3, TYPO3 CMS · typo3/cms-core)
- [CVE-2026-47346](https://cve.now/CVE-2026-47346.md): TYPO3 CMS - Broken Access Control in Form Framework (CVSS 7.6, TYPO3 CMS · typo3/cms-core +1)
- [CVE-2026-47343](https://cve.now/CVE-2026-47343.md): TYPO3 CMS - Destructive Actions on File Mount Folders (CVSS 7.2, TYPO3 CMS · typo3/cms-core)
- [CVE-2026-11607](https://cve.now/CVE-2026-11607.md): TYPO3 CMS - Broken Access Control in Form Framework (CVSS 7.6, TYPO3 CMS · typo3/cms-core +1)
- [CVE-2026-41031](https://cve.now/CVE-2026-41031.md): A Stored Cross-Site Scripting (XSS) vulnerability occurs in Vinna Process Monitor (CVSS 8.7, Skilja Vinna Process Monitor)
- [CVE-2026-52902](https://cve.now/CVE-2026-52902.md): Awxkit: path traversal via yaml !include directive (CVSS 4.7, Red Hat Ansible Automation Platform 2.5 for RHEL · Red H… +3)
- [CVE-2026-4058](https://cve.now/CVE-2026-4058.md): User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration \<= 4.3.2 - Missing Authorization to Authenticated (Subscriber+) Subscription Pack Cancellation (CVSS 4.3, wedevs User Frontend: AI Powered Frontend Posting, User Dir…)
- [CVE-2025-10263](https://cve.now/CVE-2025-10263.md): Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex- (CVSS 9.1, Arm C1-Ultra · Arm C1-Premium +14)
- [CVE-2026-10731](https://cve.now/CVE-2026-10731.md): SQL injection in Nemon products (CVSS 9.3, Nemon Trade Energy)
- [CVE-2026-46749](https://cve.now/CVE-2026-46749.md): A vulnerability has been identified in SINEC INS (All versions \< V1.0 SP2 Update 6). (CVSS 7.5, Siemens SINEC INS)
- [CVE-2026-46748](https://cve.now/CVE-2026-46748.md): A vulnerability has been identified in SINEC INS (All versions \< V1.0 SP2 Update 6). (CVSS 8.8, Siemens SINEC INS)
- [CVE-2026-46747](https://cve.now/CVE-2026-46747.md): A vulnerability has been identified in SINEC INS (All versions \< V1.0 SP2 Update 6). (CVSS 4.3, Siemens SINEC INS)
- [CVE-2026-46746](https://cve.now/CVE-2026-46746.md): A vulnerability has been identified in SINEC INS (All versions \< V1.0 SP2 Update 6). (CVSS 8.8, Siemens SINEC INS)
- [CVE-2026-24349](https://cve.now/CVE-2026-24349.md): A vulnerability has been identified in SIMATIC WinCC Unified PC Runtime V16 (All versions), SIMATIC WinCC Unified PC Runtime V17 (All versio (CVSS 7.1, Siemens SIMATIC WinCC Unified PC Runtime)
- [CVE-2025-40808](https://cve.now/CVE-2025-40808.md): A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (C (CVSS 6.1, Siemens SIPROTEC 5 6MD84 · Siemens SIPROTEC 5 6MD85 +34)
- [CVE-2026-28262](https://cve.now/CVE-2026-28262.md): Dell iDRAC Tools, versions prior to 11.4.1.0, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. (CVSS 6.0, Dell iDRAC Tools)
- [CVE-2026-6899](https://cve.now/CVE-2026-6899.md): Improper Check for Certificate Revocation in S2OPC (CVSS 5.6, Systerel S2OPC)
- [CVE-2026-8365](https://cve.now/CVE-2026-8365.md): Blocksy \<= 2.1.41 - Authenticated (Contributor+) PHP Object Injection via Deserialization of Untrusted Data via 'blocksy\_meta' REST API Field (CVSS 8.8, creativethemeshq Blocksy)
- [CVE-2026-8677](https://cve.now/CVE-2026-8677.md): Prime Elementor Addons \<= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget HTML Tag Settings (CVSS 6.4, wpmessiah Prime Elementor Addons – Lightweight Elementor Wi…)
- [CVE-2026-8599](https://cve.now/CVE-2026-8599.md): MailerPress \<= 2.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via Campaign HTML Content Field (CVSS 6.4, MailerPress – Email Marketing, Newsletter, Email Automation…)
- [CVE-2026-7542](https://cve.now/CVE-2026-7542.md): Slider Revolution 7.0 - 7.0.10 - Authenticated (Subscriber+) Sensitive Information Disclosure (CVSS 6.5, Revolution Slider Slider Revolution)
- [CVE-2026-11616](https://cve.now/CVE-2026-11616.md): Events Calendar for GeoDirectory \<= 2.3.28 - Authenticated (Subscriber+) Privilege Escalation (CVSS 8.8, stiofansisland Events Calendar for GeoDirectory)
- [CVE-2026-49818](https://cve.now/CVE-2026-49818.md): Apache Airflow Samba provider: Path traversal in GCSToSambaOperator via GCS object names (CVSS 6.5, Apache Software Foundation Apache Airflow Samba provider ·…)
- [CVE-2026-46315](https://cve.now/CVE-2026-46315.md): io\_uring/waitid: clear waitid info before copying it to userspace (no CVSS, Linux)
- [CVE-2026-34905](https://cve.now/CVE-2026-34905.md): Apache Answer: Unlisted Questions Accessible via Direct API Access (CVSS 6.5, Apache Software Foundation Apache Answer · github.com/ap… +1)
- [CVE-2026-34033](https://cve.now/CVE-2026-34033.md): Apache Answer: HTML Content Injection in Email (CVSS 5.4, Apache Software Foundation Apache Answer · github.com/ap… +1)
- [CVE-2009-10007](https://cve.now/CVE-2009-10007.md): Catalyst::Plugin::Authentication versions before 0.10\_027 for Perl is susceptible to session fixation attacks (CVSS 9.1, ETHER Catalyst::Plugin::Authentication)
- [CVE-2026-34031](https://cve.now/CVE-2026-34031.md): Apache Answer: The custom avatar was not properly validated (CVSS 6.5, Apache Software Foundation Apache Answer · github.com/ap… +1)
- [CVE-2026-33582](https://cve.now/CVE-2026-33582.md): Apache Answer: Uploading specially crafted TIFF files causes an Out-of-Memory error (CVSS 6.5, Apache Software Foundation Apache Answer · github.com/ap… +1)
- [CVE-2026-25699](https://cve.now/CVE-2026-25699.md): Apache Answer: Authorization Bypass in Timeline API (CVSS 6.1, Apache Software Foundation Apache Answer · github.com/ap… +1)
- [CVE-2026-25688](https://cve.now/CVE-2026-25688.md): Apache Answer: XSS in AI Answer Rendering (CVSS 6.1, Apache Software Foundation Apache Answer · github.com/ap… +1)
- [CVE-2026-9698](https://cve.now/CVE-2026-9698.md): DBI versions before 1.648 for Perl saved errors in a limited-sized buffer (CVSS 7.5, HMBRAND DBI)
- [CVE-2026-41982](https://cve.now/CVE-2026-41982.md): Race condition vulnerability in the IPC module. (CVSS 6.4, Huawei HarmonyOS)
- [CVE-2026-41981](https://cve.now/CVE-2026-41981.md): Out-of-bounds write vulnerability in the IPC module. (CVSS 5.3, Huawei HarmonyOS)
- [CVE-2026-41977](https://cve.now/CVE-2026-41977.md): DoS vulnerability in the log service. (CVSS 5.0, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2026-41976](https://cve.now/CVE-2026-41976.md): Permission control vulnerability in the audio framework. (CVSS 6.6, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2026-41974](https://cve.now/CVE-2026-41974.md): Permission control vulnerability in service notifications. (CVSS 3.6, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2026-41973](https://cve.now/CVE-2026-41973.md): Permission control vulnerability in calls. (CVSS 5.9, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2026-41972](https://cve.now/CVE-2026-41972.md): Path traversal vulnerability in the SMS app. (CVSS 5.4, Huawei HarmonyOS)
- [CVE-2026-41986](https://cve.now/CVE-2026-41986.md): Logic bypass vulnerability in the file system. (CVSS 2.4, Huawei HarmonyOS)
- [CVE-2026-41985](https://cve.now/CVE-2026-41985.md): UAF vulnerability in the package management module. (CVSS 5.1, Huawei HarmonyOS)
- [CVE-2026-41984](https://cve.now/CVE-2026-41984.md): UAF vulnerability in the package management module. (CVSS 5.2, Huawei HarmonyOS)
- [CVE-2026-41983](https://cve.now/CVE-2026-41983.md): Null pointer dereference vulnerability in the browser module. (CVSS 4.3, Huawei HarmonyOS)
- [CVE-2026-44083](https://cve.now/CVE-2026-44083.md): QuMagie (CVSS 8.7, QNAP Systems QuMagie)
- [CVE-2026-5068](https://cve.now/CVE-2026-5068.md): bt: l2cap le coc: remote oob write via seg counter stored in net\_buf user\_data (CVSS 7.6, zephyrproject-rtos Zephyr)
- [CVE-2025-62858](https://cve.now/CVE-2025-62858.md): QTS, QuTS hero (CVSS 5.1, QNAP Systems QTS · QNAP Systems QuTS hero)
- [CVE-2026-5067](https://cve.now/CVE-2026-5067.md): Out-of-bounds read/write in HTTP WebSocket upgrade via non-null-terminated Sec-WebSocket-Key (CVSS 9.8, zephyrproject-rtos Zephyr)
- [CVE-2026-8981](https://cve.now/CVE-2026-8981.md): Lazy Blocks \< 4.3.0 - Admin+ Stored XSS via Custom Block Frontend HTML (CVSS 3.5, Custom Block Builder)
- [CVE-2026-4986](https://cve.now/CVE-2026-4986.md): WPForms Lite \< 1.10.0.5 – Unauthenticated PayPal Webhook Forgery (CVSS 5.3, WPForms)
- [CVE-2026-41539](https://cve.now/CVE-2026-41539.md): QTS, QuTS hero (CVSS 6.3, QNAP Systems QTS · QNAP Systems QuTS hero)
- [CVE-2026-11572](https://cve.now/CVE-2026-11572.md): Versions of the package degit before 2.8.6, from 3.0.0 and before 3.3.1 are vulnerable to Command Injection due to improper sanitisation of (CVSS 8.7, degit)
- [CVE-2026-26236](https://cve.now/CVE-2026-26236.md): QuMagie (CVSS 6.6, QNAP Systems QuMagie)
- [CVE-2026-41007](https://cve.now/CVE-2026-41007.md): Spring HATEOAS heap exhaustion through unbounded internal caching (CVSS 7.5, Spring HATEOAS · org.springframework.hateoas:spring-hateoas)
- [CVE-2026-41006](https://cve.now/CVE-2026-41006.md): Spring HATEOAS Collection+JSON/UBER deserializers do not honor Jackson configuration (CVSS 7.5, Spring HATEOAS · org.springframework.hateoas:spring-hateoas)
- [CVE-2026-41855](https://cve.now/CVE-2026-41855.md): Spring Framework Unsafe Deserialization via Jackson JMS Converters (CVSS 8.1, Spring Framework · org.springframework:spring-jms)
- [CVE-2026-41854](https://cve.now/CVE-2026-41854.md): Spring Framework Server-Side Request Forgery via UriComponentsBuilder (CVSS 4.2, Spring Framework · org.springframework:spring-web)
- [CVE-2026-41853](https://cve.now/CVE-2026-41853.md): Spring Framework Multipart Request Smuggling in Spring MVC and WebFlux (CVSS 5.3, Spring Framework · org.springframework:spring-webmvc +1)
- [CVE-2026-41980](https://cve.now/CVE-2026-41980.md): Permission control vulnerability in the file preview module. (CVSS 5.5, Huawei HarmonyOS)
- [CVE-2026-41852](https://cve.now/CVE-2026-41852.md): Spring Framework Arbitrary Method Invocation in SpEL Expressions (CVSS 3.7, Spring Framework · org.springframework:spring-expression)
- [CVE-2026-41851](https://cve.now/CVE-2026-41851.md): Spring Framework Denial of Service via Unbounded Cache in SpEL (CVSS 5.3, Spring Framework · org.springframework:spring-expression)
- [CVE-2026-41850](https://cve.now/CVE-2026-41850.md): Spring Framework Algorithmic Denial of Service via SpEL Expressions (CVSS 7.5, Spring Framework · org.springframework:spring-expression)
- [CVE-2026-41849](https://cve.now/CVE-2026-41849.md): Spring Framework Denial of Service via Integer Overflow in SpEL Expressions (CVSS 7.5, Spring Framework · org.springframework:spring-expression)
- [CVE-2026-41848](https://cve.now/CVE-2026-41848.md): Spring Framework Denial of Service via AntPathMatcher (CVSS 3.7, Spring Framework · org.springframework:spring-core)
- [CVE-2026-41847](https://cve.now/CVE-2026-41847.md): Spring Framework Security Filter Bypass in WebFlux Kotlin Router DSL (CVSS 4.8, Spring Framework · org.springframework:spring-webflux)
- [CVE-2026-41846](https://cve.now/CVE-2026-41846.md): Spring Framework Cross-site Scripting via JSP Form Tags (CVSS 5.9, Spring Framework · org.springframework:spring-webmvc)
- [CVE-2026-41845](https://cve.now/CVE-2026-41845.md): Spring Framework Cross-site Scripting via JavaScriptUtils (CVSS 7.1, Spring Framework · org.springframework:spring-webmvc)
- [CVE-2026-41844](https://cve.now/CVE-2026-41844.md): Spring Framework Open Redirect in Spring MVC and WebFlux (CVSS 4.2, Spring Framework · org.springframework:spring-webmvc +1)
- [CVE-2026-41843](https://cve.now/CVE-2026-41843.md): Spring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFlux (CVSS 5.9, Spring Framework · org.springframework:spring-webmvc +1)
- [CVE-2026-41842](https://cve.now/CVE-2026-41842.md): Spring Framework Denial of Service via Versioned Resources in Spring MVC and WebFlux (CVSS 7.5, Spring Framework · org.springframework:spring-webmvc +1)
- [CVE-2026-41979](https://cve.now/CVE-2026-41979.md): Permission control vulnerability in the print module. (CVSS 5.5, Huawei HarmonyOS)
- [CVE-2026-41841](https://cve.now/CVE-2026-41841.md): Spring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFlux (CVSS 5.9, Spring Framework · org.springframework:spring-webmvc +1)
- [CVE-2026-41840](https://cve.now/CVE-2026-41840.md): Spring WebFlux applications are vulnerable to Denial of Service (DoS) attacks when processing multipart requests. (CVSS 5.9, Spring Framework · org.springframework:spring-webflux)
- [CVE-2026-41839](https://cve.now/CVE-2026-41839.md): Spring Framework Escalation via Session Fixation in WebFlux (CVSS 4.2, Spring Framework · org.springframework:spring-webflux)
- [CVE-2026-41838](https://cve.now/CVE-2026-41838.md): Spring Framework Predictable Session ID in WebSocket Module (CVSS 4.8, Spring Framework · org.springframework:spring-websocket)
- [CVE-2026-41720](https://cve.now/CVE-2026-41720.md): Authentication Bypass with Empty Password in Spring LDAP (CVSS 7.4, Spring LDAP · org.springframework.ldap:spring-ldap-core)
- [CVE-2026-41978](https://cve.now/CVE-2026-41978.md): Permission control vulnerability in the clone module. (CVSS 4.4, Huawei HarmonyOS)
- [CVE-2026-41715](https://cve.now/CVE-2026-41715.md): Reactor Netty HTTP Client Leaks Credentials On Protocol Downgrade Redirect (CVSS 6.1, Spring Reactor Netty · io.projectreactor.netty:reactor-netty)
- [CVE-2026-41710](https://cve.now/CVE-2026-41710.md): Cache Exhaustion in Stateful Retries leads to Denial of Service (CVSS 5.9, Spring Retry · org.springframework.retry:spring-retry)
- [CVE-2026-40984](https://cve.now/CVE-2026-40984.md): Micrometer HTTP server instrumentations DoS vulnerability (CVSS 7.5, Spring Micrometer · io.micrometer:micrometer-core +2)
- [CVE-2026-41975](https://cve.now/CVE-2026-41975.md): Permission management vulnerability in the network management module. (CVSS 6.3, Huawei HarmonyOS)
- [CVE-2026-40983](https://cve.now/CVE-2026-40983.md): Micrometer gRPC server instrumentation DoS vulnerability (CVSS 7.5, Spring Micrometer · io.micrometer:micrometer-core)
- [CVE-2026-8895](https://cve.now/CVE-2026-8895.md): kk blog card \<= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes (CVSS 6.4, kenz60 kk blog card)
- [CVE-2026-11603](https://cve.now/CVE-2026-11603.md): Product Filter Widget for Elementor \<= 1.0.6 - Reflected Cross-Site Scripting via 'args\[filterFormArray\]' Parameter (CVSS 6.1, brthumar1959 Product Filter Widget for Elementor)
- [CVE-2026-8904](https://cve.now/CVE-2026-8904.md): FastPicker, an order picker and order management system (oms) for WooCommerce on steroids \<= 1.0.2 - Cross-Site Request Forgery via Settings Save (CVSS 4.3, yuluma FastPicker, an order picker and order management sys…)
- [CVE-2026-10553](https://cve.now/CVE-2026-10553.md): jQuery Hover Footnotes \<= 1.4 - Cross-Site Request Forgery to Plugin Settings Update (CVSS 4.3, weaverlancegmailcom jQuery Hover Footnotes)
- [CVE-2026-8910](https://cve.now/CVE-2026-8910.md): WP Emoticon Rating \<= 1.0.1 - Cross-Site Request Forgery to Reflected Cross-Site Scripting via 'emo\_settings' Parameter (CVSS 6.1, rahulbhangale WP Emoticon Rating)
- [CVE-2026-10738](https://cve.now/CVE-2026-10738.md): jQuery Hover Footnotes \<= 1.4 - Authenticated (Author+) Stored Cross-Site Scripting via Footnote Qualifier ('{{...}}' Syntax) (CVSS 6.4, weaverlancegmailcom jQuery Hover Footnotes)
- [CVE-2026-8882](https://cve.now/CVE-2026-8882.md): WP ApplicantStack Jobs Display \<= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes (CVSS 6.4, jdm-labs WP ApplicantStack Jobs Display)
- [CVE-2026-8977](https://cve.now/CVE-2026-8977.md): WP GDPR Cookie Consent \<= 1.0.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'ninja\_gdpr\_ajax\_actions' AJAX Action (CVSS 6.4, techjewel WP GDPR Cookie Consent)
- [CVE-2026-7662](https://cve.now/CVE-2026-7662.md): ePaperFlip Publisher \<= 1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'publicationid' Shortcode Attribute (CVSS 6.4, joshin85 Plugin Name: ePaperFlip Publisher)
- [CVE-2026-8902](https://cve.now/CVE-2026-8902.md): AJAX Report Comments \<= 2.0.4 - Cross-Site Request Forgery to Settings Update (CVSS 4.3, tierrainnovation AJAX Report Comments)
- [CVE-2026-9185](https://cve.now/CVE-2026-9185.md): 6Storage Rentals \<= 2.22.0 - Unauthenticated Insecure Direct Object Reference to Arbitrary User Disclosure and Modification via 'userId' Parameter (CVSS 7.5, sixstorage 6Storage Rentals)
- [CVE-2026-8909](https://cve.now/CVE-2026-8909.md): WpMobi \<= 0.0.3 - Cross-Site Request Forgery via save\_general\_settings Action (CVSS 4.3, rahulbhangale WpMobi)
- [CVE-2026-8880](https://cve.now/CVE-2026-8880.md): RomanCart Ecommerce \<= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes (CVSS 6.4, romancartsupport RomanCart Ecommerce)
- [CVE-2026-8907](https://cve.now/CVE-2026-8907.md): WP-Ultimate-Map \<= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'zoom-level' Parameter (CVSS 6.1, rahulbhangale WP-Ultimate-Map)
- [CVE-2026-10024](https://cve.now/CVE-2026-10024.md): TinyMCE shortcode Addon \<= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'btnrel' Shortcode Attribute (CVSS 6.4, 360crest TinyMCE shortcode Addon)
- [CVE-2026-8499](https://cve.now/CVE-2026-8499.md): Helpfulcrowd Product Reviews \<= 1.2.9 - Inccorect Authorization via Type Juggling in 'token' Parameter to Arbitrary Settings Update (CVSS 5.3, Helpfulcrowd Product Reviews)
- [CVE-2026-9662](https://cve.now/CVE-2026-9662.md): Recover Exit For WooCommerce \<= 1.0.3 - Unauthenticated Local File Inclusion via 'tpf' Parameter (CVSS 8.1, plasmatizemedia Recover Exit For WooCommerce)
- [CVE-2026-8940](https://cve.now/CVE-2026-8940.md): WP Meta Sort Posts \<= 0.9 - Cross-Site Request Forgery to Plugin Settings Update (CVSS 4.3, jasonpitts WP Meta Sort Posts)
- [CVE-2026-8883](https://cve.now/CVE-2026-8883.md): Global Body Mass Index Calculator \<= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes (CVSS 6.4, helpstring Global Body Mass Index Calculator)
- [CVE-2026-8841](https://cve.now/CVE-2026-8841.md): Extra Settings for RocketChat \<= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes (CVSS 6.4, andrewabarber Extra Settings for RocketChat)
- [CVE-2026-11623](https://cve.now/CVE-2026-11623.md): tmux image.c image\_free use after free (CVSS 2.0, tmux)
- [CVE-2026-11621](https://cve.now/CVE-2026-11621.md): Dcat-Admin User Setting upload editorMDUpload unrestricted upload (CVSS 5.1, Dcat-Admin)
- [CVE-2026-11620](https://cve.now/CVE-2026-11620.md): TOTOLINK EX200 vsftpd vsftpd.conf least privilege violation (CVSS 6.9, TOTOLINK EX200)
- [CVE-2026-11619](https://cve.now/CVE-2026-11619.md): Dolibarr ERP CRM Legacy Filemanager config.inc.php improper authorization (CVSS 5.3, Dolibarr ERP CRM)
- [CVE-2026-5714](https://cve.now/CVE-2026-5714.md): Enable Media Replace \<= 4.1.8 - Authenticated (Author+) Stored Cross-Site Scripting via 'location\_dir' Parameter (CVSS 6.4, shortpixel Enable Media Replace)
- [CVE-2026-7556](https://cve.now/CVE-2026-7556.md): FV Flowplayer Video Player \<= 7.5.49.7212 - Unauthenticated Stored Cross-Site Scripting via Comment Text (CVSS 7.2, foliovision FV Flowplayer Video Player)
- [CVE-2026-11618](https://cve.now/CVE-2026-11618.md): DTStack Taier Source Connection Test Endpoint LoginInterceptor.java preHandle improper authentication (CVSS 6.9, DTStack Taier)
- [CVE-2026-10862](https://cve.now/CVE-2026-10862.md): Accordions \<= 2.3.23 - Authenticated (Custom+) Stored Cross-Site Scripting via Accordion Body Field (CVSS 6.4, pickplugins Accordions)
- [CVE-2026-8795](https://cve.now/CVE-2026-8795.md): A YAML injection vulnerability exists in the Windows.Collectors.Remapping artifact of Rapid7 Velociraptor before version 0.76.6. (CVSS 7.8, Rapid7 Velociraptor)
- [CVE-2026-44757](https://cve.now/CVE-2026-44757.md): Cross-Site Scripting (XSS) vulnerability in SAP Wily Introscope Enterprise Manager (CVSS 4.7, SAP\_SE SAP Wily Introscope Enterprise Manager)
- [CVE-2026-44755](https://cve.now/CVE-2026-44755.md): Email Spoofing vulnerability in SAP Business Objects Business Intelligence Platform (CVSS 4.3, SAP\_SE SAP Business Objects Business Intelligence Platform)
- [CVE-2026-44754](https://cve.now/CVE-2026-44754.md): Missing caller identification check-in for ODP Data Replication APIs (CVSS 6.6, SAP\_SE ODP Data Replication APIs)
- [CVE-2026-44751](https://cve.now/CVE-2026-44751.md): Missing Authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform (CVSS 7.1, SAP\_SE SAP NetWeaver AS ABAP and ABAP Platform)
- [CVE-2026-44750](https://cve.now/CVE-2026-44750.md): Missing Authorization check in SAP MDG (Review Match Groups Application) (CVSS 4.3, SAP\_SE SAP MDG)
- [CVE-2026-44748](https://cve.now/CVE-2026-44748.md): XML Signature Wrapping in SAML Authentication in SAP NetWeaver AS ABAP and ABAP Platform (CVSS 9.9, SAP\_SE SAP NetWeaver AS ABAP and ABAP Platform)
- [CVE-2026-44746](https://cve.now/CVE-2026-44746.md): Reflected Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS Java (JDBC Test Servlet) (CVSS 6.1, SAP\_SE SAP NetWeaver AS Java)
- [CVE-2026-44744](https://cve.now/CVE-2026-44744.md): SQL Injection vulnerability in SAP S/4HANA (CVSS 6.5, SAP\_SE SAP S/4HANA)
- [CVE-2026-44743](https://cve.now/CVE-2026-44743.md): Security Misconfiguration vulnerability in SAP Business Objects (CVSS 3.7, SAP\_SE SAP Business Objects)
- [CVE-2026-40128](https://cve.now/CVE-2026-40128.md): Directory Traversal vulnerability in SAP NetWeaver Application Server Java (Web Container) (CVSS 9.0, SAP\_SE SAP NetWeaver Application Server Java)
- [CVE-2026-27671](https://cve.now/CVE-2026-27671.md): Memory Corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform (CVSS 9.8, SAP\_SE SAP NetWeaver AS ABAP and ABAP Platform)
- [CVE-2026-24315](https://cve.now/CVE-2026-24315.md): Path Traversal Vulnerability in SAP Fiori (launchpad) (CVSS 4.2, SAP\_SE SAP Fiori)
- [CVE-2023-29146](https://cve.now/CVE-2023-29146.md): The utility functions used by Malwarebytes EDR 1.0.11 on Linux for calculating a cryptographic hash of data bytes truncate the hashed data i (CVSS 8.2)
- [CVE-2023-43686](https://cve.now/CVE-2023-43686.md): An issue was discovered in Malwarebytes 4.x and 5.x (and Nebula 2020-10-21 and later). (CVSS 6.2)
- [CVE-2023-43688](https://cve.now/CVE-2023-43688.md): An issue was discovered in Malwarebytes 4.x and 5.x (and Nebula 2020-10-21 and later). (CVSS 7.5)
- [CVE-2025-52292](https://cve.now/CVE-2025-52292.md): A stack buffer overflow in the filein\_process function (in\_file.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) v (CVSS 7.5)
- [CVE-2025-52293](https://cve.now/CVE-2025-52293.md): A segmentation violaton in the gf\_hevc\_read\_sps\_bs\_internal function (media\_tools/av\_parsers.c) of GPAC MP4Box v2.4 allows attackers to caus (CVSS 7.5)
- [CVE-2025-55651](https://cve.now/CVE-2025-55651.md): A NULL pointer dereference in the gf\_isom\_get\_user\_data\_count function (isomedia/isom\_read.c) of GPAC MP4Box v2.4 allows attackers to cause (CVSS 5.5)
- [CVE-2025-55657](https://cve.now/CVE-2025-55657.md): A NULL pointer dereference in the gf\_odf\_vvc\_cfg\_write\_bs function (odf/descriptors.c) of GPAC MP4Box v2.4 allows attackers to cause a Denia (CVSS 7.5)
- [CVE-2025-55658](https://cve.now/CVE-2025-55658.md): GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gf\_opus\_parse\_packet\_header function (media\_tools/av\_parsers.c) (CVSS 6.5)
- [CVE-2025-55659](https://cve.now/CVE-2025-55659.md): A NULL pointer dereference in the ctts\_box\_write function (isomedia/box\_code\_base.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial (CVSS 6.5)
- [CVE-2026-30141](https://cve.now/CVE-2026-30141.md): An issue was discovered in bitbank2 AnimatedGIF v2.2.0. (CVSS 9.8)
- [CVE-2026-36719](https://cve.now/CVE-2026-36719.md): An information disclosure vulnerability in the /api/v1/user/info endpoint of AgentChat v2.3.0 allows unauthenticated attackers to obtain sen (CVSS 7.5)
- [CVE-2026-36720](https://cve.now/CVE-2026-36720.md): Insecure permissions in bookcars v8.3 allows authenticated attackers to escalate privileges from user to admin via modifying their user type (CVSS 8.1)
- [CVE-2026-36721](https://cve.now/CVE-2026-36721.md): A lack of cryptographic signature verification in the validateAccessToken function of bookcars v8.3 allows attackers to bypass authenticatio (CVSS 9.8)
- [CVE-2026-36722](https://cve.now/CVE-2026-36722.md): An authenticated arbitrary file upload vulnerability in the /api/create-car-image component of bookcars v8.3 allows attackers to execute arb (CVSS 5.4)
- [CVE-2026-36723](https://cve.now/CVE-2026-36723.md): An unrestricted file rename vulnerability in the /api/create-user component of bookcars v8.3 allows authenticated attackers to leverage dire (CVSS 8.8)
- [CVE-2026-36724](https://cve.now/CVE-2026-36724.md): An uncaught exception in the /application/job/update/{id} endpoint of FastapiAdmin v2.2.0 allows authenticated attackers with the module\_tas (CVSS 6.5)
- [CVE-2026-36725](https://cve.now/CVE-2026-36725.md): A markdown based cross-site scripting (XSS) vulnerability in the /system/notice/create endpoint of FastapiAdmin v2.2.0 allows attackers to e (CVSS 6.1)
- [CVE-2026-36726](https://cve.now/CVE-2026-36726.md): An arbitrary file deletion vulnerability in the /api/delete-temp-license/{file} endpoint of bookcars v8.3 allows unauthenticated attackers t (CVSS 5.3)
- [CVE-2026-36727](https://cve.now/CVE-2026-36727.md): An insecure authentication vulnerability in the /api/social-sign-in endpoint of bookcars v8.3 allows attackers to bypass authentication via (CVSS 9.1)
- [CVE-2026-36728](https://cve.now/CVE-2026-36728.md): A markdown based cross-site scripting (XSS) vulnerability in the AI assistant chat function of FastapiAdmin v2.2.0 allows attackers to execu (CVSS 5.4)
- [CVE-2026-36770](https://cve.now/CVE-2026-36770.md): Shenzhen Tenda Technology Co., Ltd Tenda US\_W3V1.0BR v1.0.0.3 was discovered to contain a stack overflow in the Go parameter of the ask\_to\_r (CVSS 7.5)
- [CVE-2026-36771](https://cve.now/CVE-2026-36771.md): Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain a stack overflow in the wl\_radio parame (CVSS 7.5)
- [CVE-2026-36772](https://cve.now/CVE-2026-36772.md): Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain a stack overflow in the wl\_radio parame (CVSS 6.5)
- [CVE-2026-36773](https://cve.now/CVE-2026-36773.md): Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain a stack overflow in the Go parameter of (CVSS 6.5)
- [CVE-2026-36777](https://cve.now/CVE-2026-36777.md): Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain a stack overflow in the param\_1 paramet (CVSS 6.5)
- [CVE-2026-36778](https://cve.now/CVE-2026-36778.md): Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.5(4180) was discovered to contain a stack overflow in the username parame (CVSS 4.9)
- [CVE-2026-36779](https://cve.now/CVE-2026-36779.md): Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.5(4180) was discovered to contain multiple stack overflows in the fromVir (CVSS 7.5)
- [CVE-2026-36783](https://cve.now/CVE-2026-36783.md): Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.5(4180) was discovered to contain a stack overflow in the domain paramete (CVSS 7.5)
- [CVE-2026-36784](https://cve.now/CVE-2026-36784.md): Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.5(4180) was discovered to contain a stack overflow in the ip parameter of (CVSS 7.5)
- [CVE-2026-36791](https://cve.now/CVE-2026-36791.md): Shenzhen Tenda Technology Co., Ltd Tenda O3v3 v1.0.0.5 was discovered to contain a stack overflow in the save\_list\_data parameter of the for (CVSS 7.5)
- [CVE-2026-36792](https://cve.now/CVE-2026-36792.md): Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain a stack overflow in the wl\_radio parame (CVSS 7.5)
- [CVE-2026-36793](https://cve.now/CVE-2026-36793.md): Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain multiple stack overflows in the formwrl (CVSS 7.5)
- [CVE-2026-36794](https://cve.now/CVE-2026-36794.md): Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain multiple stack overflows in the R7WebsS (CVSS 7.5)
- [CVE-2026-36796](https://cve.now/CVE-2026-36796.md): Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain a stack overflow in the picCropName parameter of the formCr (CVSS 7.5)
- [CVE-2026-36797](https://cve.now/CVE-2026-36797.md): Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain a stack overflow in the IPMacBindRuleIp parameter of the fo (CVSS 7.5)
- [CVE-2026-36798](https://cve.now/CVE-2026-36798.md): Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain multiple stack overflows in the formSetDebugCfgr function v (CVSS 6.5)
- [CVE-2026-36799](https://cve.now/CVE-2026-36799.md): Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain a buffer overflow in the portalAuth parameter of the formPo (CVSS 7.5)
- [CVE-2026-36800](https://cve.now/CVE-2026-36800.md): Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain a buffer overflow in the IPMacBindIndex parameter of the fo (CVSS 7.5)
- [CVE-2026-36801](https://cve.now/CVE-2026-36801.md): Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain a buffer overflow in the IPMacBindRule parameter of the for (CVSS 7.5)
- [CVE-2026-36802](https://cve.now/CVE-2026-36802.md): Shenzhen Tenda Technology Co., Ltd Tenda PW201A v1.0.5 was discovered to contain a buffer overflow in the page parameter of the SafeMacFilte (CVSS 7.5)
- [CVE-2026-36803](https://cve.now/CVE-2026-36803.md): Shenzhen Tenda Technology Co., Ltd Tenda PW201A v1.0.5 was discovered to contain a buffer overflow in the page parameter of the qossetting f (CVSS 7.5)
- [CVE-2026-36805](https://cve.now/CVE-2026-36805.md): Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain multiple buffer overflows in the Saveqqlist function via th (CVSS 7.5)
- [CVE-2026-36806](https://cve.now/CVE-2026-36806.md): Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the webAuthUserPwd parameter of the (CVSS 7.5)
- [CVE-2026-36807](https://cve.now/CVE-2026-36807.md): Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the webAuthUserPwd parameter of the (CVSS 7.5)
- [CVE-2026-36808](https://cve.now/CVE-2026-36808.md): Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the webAuthUserInfo parameter of th (CVSS 7.5)
- [CVE-2026-36809](https://cve.now/CVE-2026-36809.md): Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the webAuthWhiteID parameter of the (CVSS 7.5)
- [CVE-2026-36810](https://cve.now/CVE-2026-36810.md): Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the gotoUrl parameter of the formPo (CVSS 7.5)
- [CVE-2026-36811](https://cve.now/CVE-2026-36811.md): Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the picName parameter of the formDe (CVSS 7.5)
- [CVE-2026-36813](https://cve.now/CVE-2026-36813.md): Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the picCropName parameter of the fo (CVSS 7.5)
- [CVE-2026-36815](https://cve.now/CVE-2026-36815.md): Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the hostname parameter of the formS (CVSS 7.5)
- [CVE-2026-36816](https://cve.now/CVE-2026-36816.md): Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the wewifiWhiteUserInfo parameter o (CVSS 7.5)
- [CVE-2026-36817](https://cve.now/CVE-2026-36817.md): Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the webAuthWhiteUserInfo parameter (CVSS 7.5)
- [CVE-2026-36818](https://cve.now/CVE-2026-36818.md): Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the wewifiWhiteUserInfo parameter of (CVSS 7.5)
- [CVE-2026-36819](https://cve.now/CVE-2026-36819.md): Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the bindMACAddr parameter of the fro (CVSS 7.5)
- [CVE-2026-36820](https://cve.now/CVE-2026-36820.md): Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the webAuthWhiteUserInfo parameter o (CVSS 7.5)
- [CVE-2026-36821](https://cve.now/CVE-2026-36821.md): Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the picCropName parameter of the for (CVSS 7.5)
- [CVE-2026-36822](https://cve.now/CVE-2026-36822.md): Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the macAddr parameter of the formDel (CVSS 7.5)
- [CVE-2026-36823](https://cve.now/CVE-2026-36823.md): Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the webAuthUserInfo parameter of the (CVSS 7.5)
- [CVE-2026-38615](https://cve.now/CVE-2026-38615.md): DedeCMS V5.7.118 is vulnerable to Command Execution in file\_manage\_control.php. (CVSS 9.8)
- [CVE-2026-39169](https://cve.now/CVE-2026-39169.md): SEMCMS 5.0 is vulnerable to unauthorized access in SEMCMS\_copy.php. (CVSS 7.5)
- [CVE-2026-39170](https://cve.now/CVE-2026-39170.md): SemCms 5.0 is vulnerable to Cross Site Request Forgery (CSRF) via crafted POST request to /admin/semcms\_user.php. (CVSS 6.3)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-06-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.