CVEs published June 16, 2026
545 CVEs were published on June 16, 2026: 153 critical, 272 high. 1 is now in CISA KEV.
- Published
- 545
- Critical
- 153
- High
- 272
- Medium
- 109
- Low
- 11
- Unrated
- 0
- Now in CISA KEV
- 1
- Fix available
- 86
Most affected products
- Mozilla Firefox · Mozilla Thunderbird
- 42
- Google Android
- 39
- Oracle WebCenter Content
- 29
- OpenClaw
- 27
- Oracle Enterprise Manager Base Platform
- 14
- Oracle JD Edwards EnterpriseOne Tools
- 14
- Oracle WebLogic Server
- 13
- Oracle WebCenter Sites
- 11
- Oracle VM VirtualBox
- 10
- Oracle WebCenter Enterprise Capture
- 10
Critical 153
- CVE-2026-48797Backpropagate: backprop ui --auth and backprop ui --share do not enforce authenticationmcp-tool-shop-org backpropagate · mcp-tool-shop-org @mcp… +2
- CVE-2026-48616Rocket.Chat versions <8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6, 8.0.7, 7.13.9, 7.10.13 has an access control vulnerability in Livechat files.Rocket.Chat
- CVE-2026-48745Traccar Client: silent configuration hijack via unverified deep link redirects all GPS telemetrytraccar-client
- CVE-2026-48781Postiz has cross-tenant SUPERADMIN takeover via Skool-provider JWT forgerygitroomhq postiz-app
- CVE-2026-25470WordPress ACPT (Pro) - Custom Post Types plugin for WordPress plugin < 2.0.52 - Remote Code Execution (RCE) vulnerabilityACPT (Pro) - Custom Post Types Plugin for WordPress
- CVE-2026-48055Streambert: Arbitrary File Write (Zip Slip) via Subtitle Extractiontruelockmc streambert
- CVE-2026-49080WordPress wpDataTables plugin <= 7.3.6 - SQL Injection vulnerabilityTMS wpDataTables
- CVE-2026-39529WordPress Elementra theme <= 1.0.9 - PHP Object Injection vulnerabilityThemeREX Group Elementra
- CVE-2026-39438WordPress ListingPro plugin <= 2.9.10 - SQL Injection vulnerabilityEmraan Cheema ListingPro
- CVE-2026-27429WordPress Nifty theme <= 1.4.1 - PHP Object Injection vulnerabilityBoldThemes Nifty
- CVE-2026-27395WordPress Support Board plugin < 3.8.9 - Privilege Escalation vulnerabilitySchiocco Support Board
- CVE-2025-69122WordPress SeaFood Company theme <= 1.4 - PHP Object Injection vulnerabilityThemeREX SeaFood Company
- CVE-2025-69108WordPress Hot Coffee theme <= 1.7 - PHP Object Injection vulnerabilityThemeREX Hot Coffee
- CVE-2026-54194WordPress Fusion Builder plugin <= 3.15.4 - PHP Object Injection vulnerabilityThemeFusion Fusion Builder
- CVE-2026-46978Vulnerability in the Oracle Solaris product of Oracle Systems (component: Remote Administration Daemon).Oracle Solaris
- CVE-2026-46964Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site Level Administration).Oracle Universal Work Queue
- CVE-2026-46963Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site Level Administration).Oracle Universal Work Queue
- CVE-2026-46949Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Internal Operations).Oracle Advanced Outbound Telephony
- CVE-2026-46946Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations).Oracle iSupport
- CVE-2026-46945Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations).Oracle iSupport
- CVE-2026-46944Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations).Oracle iSupport
- CVE-2026-46933Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Internal Operations).Oracle Applications Manager
- CVE-2026-46930Vulnerability in the Oracle In-Memory Cost Management for Discrete Industries product of Oracle E-Business Suite (component: Internal OperatOracle In-Memory Cost Management for Discrete Industries
- CVE-2026-46919Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-46918Vulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business Suite (component: Internal Operations).Oracle Process Manufacturing Product Development
- CVE-2026-46913Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-46912Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime Security).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-46911Vulnerability in the JD Edwards EnterpriseOne Project Costing product of Oracle JD Edwards (component: Job Costing).Oracle JD Edwards EnterpriseOne Project Costing
- CVE-2026-46910Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-46909Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-46908Vulnerability in the JD Edwards EnterpriseOne Accounts Payable product of Oracle JD Edwards (component: Accounts Payable).Oracle JD Edwards EnterpriseOne Accounts Payable
- CVE-2026-46907Vulnerability in the JD Edwards EnterpriseOne Order Promising product of Oracle JD Edwards (component: Order Promising Integration).Oracle JD Edwards EnterpriseOne Order Promising
- CVE-2026-46906Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-46905Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime Security).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-46904Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-46902Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core).Oracle Enterprise Command Center Framework
- CVE-2026-46901Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core).Oracle Enterprise Command Center Framework
- CVE-2026-46900Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core).Oracle Enterprise Command Center Framework
- CVE-2026-46899Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core).Oracle Enterprise Command Center Framework
- CVE-2026-46897Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core).Oracle Enterprise Command Center Framework
- CVE-2026-46896Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core).Oracle Enterprise Command Center Framework
- CVE-2026-46895Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core).Oracle Enterprise Command Center Framework
- CVE-2026-46893Vulnerability in the JD Edwards EnterpriseOne General Ledger product of Oracle JD Edwards (component: E1 Foundation).Oracle JD Edwards EnterpriseOne General Ledger
- CVE-2026-46892Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources).Oracle JD Edwards EnterpriseOne Human Resources Management
- CVE-2026-46890Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).Oracle Siebel Apps - Marketing
- CVE-2026-46889Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).Oracle Siebel Apps - Marketing
- CVE-2026-46887Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).Oracle Siebel Apps - Marketing
- CVE-2026-46884Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).Oracle Siebel Apps - Marketing
- CVE-2026-46883Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-46882Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-46881Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-46880Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-46879Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-46878Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-46875Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Deployment Library).Oracle Enterprise Manager Base Platform
- CVE-2026-46872Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Install).Oracle Enterprise Manager Base Platform
- CVE-2026-46861Vulnerability in the MySQL NDB Cluster product of Oracle MySQL (component: Cluster: NDB Operator).Oracle MySQL NDB Cluster
- CVE-2026-46860Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General).Oracle MySQL Router
- CVE-2026-46859Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security).Oracle Agile PLM
- CVE-2026-46858Vulnerability in the APM - Application Performance Management product of Oracle Enterprise Manager (component: JADM, JVM Diagnostics).Oracle APM - Application Performance Management
- CVE-2026-46857Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Oracle Management Service).Oracle Enterprise Manager Base Platform
- CVE-2026-46856Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin).Oracle Enterprise Manager Base Platform
- CVE-2026-46855Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin).Oracle Enterprise Manager Base Platform
- CVE-2026-46854Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Target Management).Oracle Enterprise Manager Base Platform
- CVE-2026-46853Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin).Oracle Enterprise Manager Base Platform
- CVE-2026-46852Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin).Oracle Enterprise Manager Base Platform
- CVE-2026-46850Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell for VS Code).Oracle MySQL Shell
- CVE-2026-46847Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).Oracle WebCenter Portal
- CVE-2026-46846Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework).Oracle WebCenter Portal
- CVE-2026-46845Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework).Oracle WebCenter Portal
- CVE-2026-46844Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework).Oracle WebCenter Portal
- CVE-2026-46838Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework).Oracle WebCenter Portal
- CVE-2026-46832Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Discovery Framework).Oracle Enterprise Manager Base Platform
- CVE-2026-46814Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework).Oracle WebCenter Portal
- CVE-2026-46813Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-46809Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).Oracle WebCenter Sites
- CVE-2026-46807Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).Oracle Identity Manager
- CVE-2026-46805Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-46803Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework).Oracle WebCenter Portal
- CVE-2026-46802Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework).Oracle WebCenter Portal
- CVE-2026-46801Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).Oracle WebCenter Sites
- CVE-2026-46800Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).Oracle WebCenter Sites
- CVE-2026-46799Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).Oracle WebCenter Sites
- CVE-2026-46798Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).Oracle WebCenter Sites
- CVE-2026-46797Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).Oracle WebCenter Sites
- CVE-2026-46795Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-46794Vulnerability in the Identity Manager Connector product of Oracle Fusion Middleware (component: Generic Unix Connector).Oracle Identity Manager Connector
- CVE-2026-46793Vulnerability in the Identity Manager Connector product of Oracle Fusion Middleware (component: Database User).Oracle Identity Manager Connector
- CVE-2026-46792Vulnerability in the Identity Manager Connector product of Oracle Fusion Middleware (component: Generic Unix Connector).Oracle Identity Manager Connector
- CVE-2026-46789Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-46786Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-46785Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-46784Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).Oracle WebCenter Content: Imaging
- CVE-2026-46783Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).Oracle WebCenter Content: Imaging
- CVE-2026-46782Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).Oracle WebCenter Enterprise Capture
- CVE-2026-46781Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).Oracle WebCenter Enterprise Capture
- CVE-2026-46779Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).Oracle WebCenter Enterprise Capture
- CVE-2026-46778Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).Oracle WebCenter Enterprise Capture
- CVE-2026-46777Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-46774Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).Oracle Unified Directory
- CVE-2026-46773Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).Oracle Unified Directory
- CVE-2026-46767Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).Oracle WebCenter Portal
- CVE-2026-46766Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-46765Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).Oracle WebCenter Portal
- CVE-2026-35323Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-35321Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-35320Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-35319Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-35316Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-35313Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2026-35312Vulnerability in the Oracle Virtual Directory product of Oracle Fusion Middleware (component: Virtual Directory Server).Oracle Virtual Directory
- CVE-2026-35310Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).Oracle Coherence
- CVE-2026-35309Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Centralized Third Party Jars).Oracle Coherence
- CVE-2026-35308Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Centralized Third Party Jars).Oracle Coherence
- CVE-2026-35307Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).Oracle Coherence
- CVE-2026-35306Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Centralized Third Party Jars).Oracle Coherence
- CVE-2026-35305Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Centralized Third Party Jars).Oracle Coherence
- CVE-2026-35304Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).Oracle Coherence
- CVE-2026-35301Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console).Oracle WebLogic Server
- CVE-2026-35300Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2026-35298Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2026-35296Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).Oracle WebCenter Sites
- CVE-2026-35294Vulnerability in the Identity Manager Connector product of Oracle Fusion Middleware (component: Mainframe Connectors).Oracle Identity Manager Connector
- CVE-2026-35293Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).Oracle WebCenter Sites
- CVE-2026-35292Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console).Oracle WebLogic Server
- CVE-2026-35286Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-35285Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).Oracle WebCenter Enterprise Capture
- CVE-2026-35284Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).Oracle WebCenter Enterprise Capture
- CVE-2026-35283Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).Oracle WebCenter Enterprise Capture
- CVE-2026-35282Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).Oracle WebCenter Enterprise Capture
- CVE-2026-35281Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).Oracle WebCenter Enterprise Capture
- CVE-2026-35280Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).Oracle WebCenter Enterprise Capture
- CVE-2026-35278Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Performance Monitor).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2026-35270Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-35268Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Core).Oracle Identity Manager
- CVE-2026-35263Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2026-48777FileBrowser Quantum: Path Traversal in public share PATCH allows file ops outside shared directorygtsteffaniak filebrowser · github.com/gtsteffaniak/filebrow…
- CVE-2026-22313OS Commands Executed with Administrative Permissions in Radiflow iSAP Smart CollectorRadiflow iSAP Smart Collector
- CVE-2026-53776Perry < 0.5.1166 JWT Expiration Bypass via verify_decodePerryTS perry
- CVE-2025-13036Rockwell Automation FactoryTalk Historian Site Edition - Authentication BypassRockwell Automation FactoryTalk Historian SE
- CVE-2026-12316Mitigation bypass in the DOM: Security componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-12315Mitigation bypass in the DOM: Security componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-12304Same-origin policy bypass in the Networking: Cookies componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-12297Sandbox escape due to incorrect boundary conditions in the Networking componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-12296Sandbox escape in the Security: Process Sandboxing componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-12295Sandbox escape in the DOM: Navigation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-12294Sandbox escape in the DOM: Workers componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-12293Use-after-free in the Graphics: WebGPU componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-40750WordPress Kids Online Store theme <= 0.8.9 - Arbitrary File Upload vulnerabilitythemagnifico52 Kids Online Store
- CVE-2026-49772WordPress The Events Calendar plugin 6.15.12-6.16.2 - SQL Injection vulnerabilityLiquid Web / StellarWP The Events Calendar
- CVE-2026-49774WordPress RD Station plugin <= 5.6.0 - Remote Code Execution (RCE) vulnerabilityFilipe Nasc RD Station
- CVE-2026-52715WordPress GEO my WordPress plugin <= 4.5.5 - SQL Injection vulnerabilityEyal Fitoussi GEO my WordPress
- CVE-2026-39574WordPress InPost Gallery plugin <= 2.1.4.6 - SQL Injection vulnerabilityRealMag777 InPost Gallery
High 272
- CVE-2026-48929Rocket.Chat in versions <8.5.1, <8.4.4, <8.3.6, <8.2.6, <8.1.6, <8.0.7, <7.13.9, and <7.10.13 is vulnerable to unauthenticated file deletionRocket.Chat
- CVE-2026-48788Remark42: Cross-Site Scripting (XSS) on /api/v1/img via content-type spoofingumputun remark42 · github.com/umputun/remark42
- CVE-2026-48779ws: Memory exhaustion DoS from tiny fragments and data chunkswebsockets ws · ws
- CVE-2026-39598WordPress Academy LMS Pro plugin < 3.5.2 - Arbitrary File Upload vulnerabilityKodezen Academy LMS Pro
- CVE-2026-49073WordPress Directorist Booking plugin <= 3.0.3 - SQL Injection vulnerabilitywpWax Directorist Booking
- CVE-2026-11409OS Command Injection in IPv6 PPPoE Configuration in TP-Link TL-WR940NTP-Link Systems TL-WR940N
- CVE-2026-11410OS Command Injection in BigPond Cable (BPA) Configuration in TP-Link TL-WR940NTP-Link Systems TL-WR940N
- CVE-2026-49113WordPress Cornerstone plugin < 7.8.8 - Arbitrary Code Execution vulnerabilityTHEMECO Cornerstone
- CVE-2026-49057WordPress JobSearch plugin <= 3.2.7 - Broken Access Control vulnerabilityEyeCix Technologies JobSearch
- CVE-2026-48869WordPress Enfold theme <= 7.1.4 - Reflected Cross Site Scripting (XSS) vulnerabilityKriesi Enfold
- CVE-2026-40761WordPress Valeska theme <= 1.2.2 - PHP Object Injection vulnerabilityEdge-Themes Valeska
- CVE-2026-40760WordPress Behold theme <= 1.5 - PHP Object Injection vulnerabilityEdge-Themes Behold
- CVE-2026-40759WordPress Esmée theme <= 1.4 - PHP Object Injection vulnerabilityMikado-Themes Esmée
- CVE-2026-40758WordPress Léonie theme <= 1.2.1 - PHP Object Injection vulnerabilityElated-Themes Léonie
- CVE-2026-40755WordPress TechLink theme <= 1.3 - PHP Object Injection vulnerabilityMikado-Themes TechLink
- CVE-2026-40754WordPress Roisin theme <= 1.4 - PHP Object Injection vulnerabilityElated-Themes Roisin
- CVE-2026-40751WordPress Ashtanga theme <= 1.2 - PHP Object Injection vulnerabilityMikado-Themes Ashtanga
- CVE-2026-40739WordPress LuxeDrive theme <= 1.4 - PHP Object Injection vulnerabilityMikado-Themes LuxeDrive
- CVE-2026-40736WordPress Laurits theme <= 1.5.1 - PHP Object Injection vulnerabilityEdge-Themes Laurits
- CVE-2026-39580WordPress Micdrop theme <= 1.3.1 - PHP Object Injection vulnerabilitySelect-Themes Micdrop
- CVE-2026-39578WordPress Valiance theme <= 1.2 - PHP Object Injection vulnerabilityElated-Themes Valiance
- CVE-2026-39577WordPress Playroom theme <= 1.4.1 - PHP Object Injection vulnerabilityElated-Themes Playroom
- CVE-2026-39568WordPress Mr. SEO theme <= 2.0 - Local File Inclusion vulnerabilityElated-Themes Mr. SEO
- CVE-2026-39567WordPress Santé theme <= 1.5.1 - PHP Object Injection vulnerabilitySelect-Themes Santé
- CVE-2026-39557WordPress NeoBeat theme <= 1.7 - PHP Object Injection vulnerabilityElated-Themes NeoBeat
- CVE-2026-39554WordPress Fidalgo theme <= 1.2.2 - PHP Object Injection vulnerabilityElated-Themes Fidalgo
- CVE-2026-39549WordPress Aperitif theme <= 1.5 - Local File Inclusion vulnerabilityElated-Themes Aperitif
- CVE-2026-39548WordPress MagOne theme <= 9.0 - Reflected Cross Site Scripting (XSS) vulnerabilitySneeit MagOne
- CVE-2026-39547WordPress Getaway theme < 1.8 - Local File Inclusion vulnerabilitySelect-Themes Getaway
- CVE-2026-39539WordPress Alloggio - Hotel Booking theme <= 2.1.2 - PHP Object Injection vulnerabilityEdge-Themes Alloggio - Hotel Booking
- CVE-2026-39522WordPress Solene theme <= 3.4 - Local File Inclusion vulnerabilityElated-Themes Solene
- CVE-2026-39446WordPress Kapee theme < 1.7.0 - PHP Object Injection vulnerabilityPressLayouts Kapee
- CVE-2026-39443WordPress EmallShop theme <= 2.4.21 - PHP Object Injection vulnerabilityPressLayouts EmallShop
- CVE-2026-34895WordPress Softlab Core plugin < 1.2.11 - Local File Inclusion vulnerabilityWebGeniusLab Softlab Core
- CVE-2026-34894WordPress Integrio Core plugin < 1.2.8 - Local File Inclusion vulnerabilityWebGeniusLab Integrio Core
- CVE-2026-34893WordPress Thegov Core plugin < 2.0.23 - Local File Inclusion vulnerabilityWebGeniusLab Thegov Core
- CVE-2026-12256WordPress Fusion Builder plugin <= 3.15.3 - PHP Object Injection vulnerabilityThemeFusion Fusion Builder
- CVE-2025-69178WordPress Truemag theme <= 4.3.14.2 - Local File Inclusion vulnerabilityCactusThemes Truemag
- CVE-2025-69177WordPress Roneous theme <= 2.1.5 - Local File Inclusion vulnerabilityTHEMELOGI Roneous
- CVE-2025-69176WordPress ITactics theme <= 1.0 - Local File Inclusion vulnerabilityThemeREX ITactics
- CVE-2025-69168WordPress Spike theme <= 1.2 - Local File Inclusion vulnerabilityThemeREX Spike
- CVE-2025-69167WordPress Eros theme <= 1.3 - Local File Inclusion vulnerabilityThemeREX Eros
- CVE-2025-69165WordPress Choreo theme <= 1.6 - Local File Inclusion vulnerabilityThemeREX Choreo
- CVE-2025-69163WordPress WineShop theme <= 3.17 - Local File Inclusion vulnerabilityThemeREX WineShop
- CVE-2025-69162WordPress Grecko theme <= 5.17 - Local File Inclusion vulnerabilityThemeREX Grecko
- CVE-2025-69160WordPress Gita theme <= 1.11 - Local File Inclusion vulnerabilityThemeREX Gita
- CVE-2025-69159WordPress Printo theme <= 1.11 - Local File Inclusion vulnerabilityThemeREX Printo
- CVE-2025-69151WordPress Grand Car Rental theme <= 3.7 - Cross Site Scripting (XSS) vulnerabilityThemeGoods Grand Car Rental
- CVE-2025-69150WordPress Medeus theme <= 1.14 - Local File Inclusion vulnerabilityThemeREX Medeus
- CVE-2025-69149WordPress Top Dog theme <= 1.0.5 - Local File Inclusion vulnerabilityThemeREX Top Dog
- CVE-2025-69147WordPress Putter theme <= 1.17 - Local File Inclusion vulnerabilityThemeREX Putter
- CVE-2025-69146WordPress Dom theme <= 1.24 - Local File Inclusion vulnerabilityThemeREX Dom
- CVE-2025-69143WordPress Mission theme <= 1.22 - Local File Inclusion vulnerabilityThemeREX Mission
- CVE-2025-69142WordPress Abelle theme <= 1.22 - Local File Inclusion vulnerabilityThemeREX Abelle
- CVE-2025-69141WordPress Kelly Young theme <= 1.1.0 - Local File Inclusion vulnerabilityThemeREX Kelly Young
- CVE-2025-69139WordPress Car Zone theme <= 3.7 - Arbitrary File Deletion vulnerabilityAivahThemes Car Zone
- CVE-2025-69136WordPress Wanium theme <= 1.9.8 - Local File Inclusion vulnerabilityTHEMELOGI Wanium
- CVE-2025-69131WordPress WordPress & WooCommerce Scraper Plugin, Import Data from Any Site plugin <= 1.0.7 - Arbitrary File Download vulnerabilityextendons WordPress & WooCommerce Scraper Plugin, Import Da…
- CVE-2025-69125WordPress Food Drop theme <= 1.3 - Local File Inclusion vulnerabilityThemeREX Food Drop
- CVE-2025-69124WordPress Especio theme <= 1.0 - Local File Inclusion vulnerabilityThemeREX Especio
- CVE-2025-69121WordPress Deliciosa theme <= 1.10.0 - Local File Inclusion vulnerabilityThemeREX Deliciosa
- CVE-2025-69119WordPress Corbesier theme <= 1.15.0 - Local File Inclusion vulnerabilityThemeREX Corbesier
- CVE-2025-69118WordPress CopyPress theme <= 1.4.5 - Local File Inclusion vulnerabilityThemeREX CopyPress
- CVE-2025-69116WordPress Iona theme <= 1.0.8 - Local File Inclusion vulnerabilityThemeREX Iona
- CVE-2025-69114WordPress MaxiNet theme <= 1.2.10 - Local File Inclusion vulnerabilityThemeREX MaxiNet
- CVE-2025-69113WordPress Nexio theme <= 1.10.0 - Local File Inclusion vulnerabilityThemeREX Nexio
- CVE-2025-69112WordPress Planty theme <= 1.14.0 - Local File Inclusion vulnerabilityThemeREX Planty
- CVE-2025-69109WordPress Raider Spirit theme <= 1.1.2 - Local File Inclusion vulnerabilityThemeREX Raider Spirit
- CVE-2025-69107WordPress Rosaleen theme <= 2.8 - Local File Inclusion vulnerabilityThemeREX Rosaleen
- CVE-2025-69105WordPress Modernee theme <= 1.6.0 - Local File Inclusion vulnerabilityThemeREX Modernee
- CVE-2025-69104WordPress Qreatix theme <= 1.9.4 - Cross Site Scripting (XSS) vulnerabilityjkdevstudio Qreatix
- CVE-2025-69103WordPress Brikk theme <= 3.0.0 - Arbitrary Content Deletion vulnerabilityUtillz Brikk
- CVE-2025-60085WordPress Learnify theme <= 1.15.0 - Local File Inclusion vulnerabilityThemeREX Group Learnify
- CVE-2025-58924WordPress Geya theme <= 1.15 - Local File Inclusion vulnerabilityThemeREX Group Geya
- CVE-2026-48294Adobe Acrobat PDF Extension (Chrome) versions 26.5.2.2 and earlier are affected by a UXSS-class cross-origin data disclosure vulnerability.Adobe Acrobat PDF Extension
- CVE-2026-12348Address Bar Spoofing in Arc Search for Android (window.open race condition)The Browser Company of New York` Arc Search
- CVE-2026-46976Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Internal Operations).Oracle Public Sector Payroll
- CVE-2026-46974Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-46973Vulnerability in the Oracle Outsourced Mfg for Discrete Industries product of Oracle E-Business Suite (component: Internal Operations).Oracle Outsourced Mfg for Discrete Industries
- CVE-2026-46972Vulnerability in the Oracle Outsourced Mfg for Discrete Industries product of Oracle E-Business Suite (component: Internal Operations).Oracle Outsourced Mfg for Discrete Industries
- CVE-2026-46971Vulnerability in the Oracle HR Intelligence product of Oracle E-Business Suite (component: Internal Operations).Oracle HR Intelligence
- CVE-2026-46970Vulnerability in the Oracle HR Intelligence product of Oracle E-Business Suite (component: Internal Operations).Oracle HR Intelligence
- CVE-2026-46969Vulnerability in the Oracle Financials for EMEA product of Oracle E-Business Suite (component: Internal Operations).Oracle Financials for EMEA
- CVE-2026-46967Vulnerability in the Oracle Public Sector Financials (International) product of Oracle E-Business Suite (component: Authorization).Oracle Public Sector Financials
- CVE-2026-46966Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site Level Administration).Oracle Universal Work Queue
- CVE-2026-46965Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site Level Administration).Oracle Universal Work Queue
- CVE-2026-46962Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component: Internal Operations).Oracle Project Portfolio Analysis
- CVE-2026-46961Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component: Internal Operations).Oracle Project Portfolio Analysis
- CVE-2026-46960Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component: Internal Operations).Oracle Project Portfolio Analysis
- CVE-2026-46959Vulnerability in the Oracle Subledger Accounting product of Oracle E-Business Suite (component: Internal Operations).Oracle Subledger Accounting
- CVE-2026-46958Vulnerability in the Oracle Subledger Accounting product of Oracle E-Business Suite (component: Internal Operations).Oracle Subledger Accounting
- CVE-2026-46957Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Internal Operations).Oracle iSupplier Portal
- CVE-2026-46956Vulnerability in the Oracle Property Manager product of Oracle E-Business Suite (component: Internal Operations).Oracle Property Manager
- CVE-2026-46955Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Person).Oracle Human Resources
- CVE-2026-46953Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll).Oracle HRMS
- CVE-2026-46952Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations).Oracle Quality
- CVE-2026-46951Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations).Oracle Quality
- CVE-2026-46950Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Internal Operations).Oracle Advanced Outbound Telephony
- CVE-2026-46947Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Internal Operations).Oracle Advanced Outbound Telephony
- CVE-2026-46942Vulnerability in the Oracle Process Manufacturing Process Planning product of Oracle E-Business Suite (component: Internal Operations).Oracle Process Manufacturing Process Planning
- CVE-2026-46940Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning).Oracle Cost Management
- CVE-2026-46939Vulnerability in the Oracle Configure to Order product of Oracle E-Business Suite (component: Supply to Order Workbench).Oracle Configure to Order
- CVE-2026-46938Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning).Oracle Cost Management
- CVE-2026-46937Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports).Oracle iSetup
- CVE-2026-46935Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Internal Operations).Oracle Complex Maintenance, Repair and Overhaul
- CVE-2026-46934Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Internal Operations).Oracle Complex Maintenance, Repair and Overhaul
- CVE-2026-46932Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Internal Operations).Oracle Enterprise Asset Management
- CVE-2026-46931Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Internal Operations).Oracle Enterprise Asset Management
- CVE-2026-46929Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning).Oracle Cost Management
- CVE-2026-46928Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations).Oracle Spares Management
- CVE-2026-46927Vulnerability in the Oracle Receivables product of Oracle E-Business Suite (component: Internal Operations).Oracle Receivables
- CVE-2026-46926Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-46925Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-46922Vulnerability in the Oracle HR Intelligence product of Oracle E-Business Suite (component: Internal Operations).Oracle HR Intelligence
- CVE-2026-46921Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-46920Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-46916Vulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business Suite (component: Quality Management SpecOracle Process Manufacturing Product Development
- CVE-2026-46915Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Production).Oracle Complex Maintenance, Repair and Overhaul
- CVE-2026-46914Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem).Oracle Solaris
- CVE-2026-46903Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infrastructure Security).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-46898Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core).Oracle Enterprise Command Center Framework
- CVE-2026-46894Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Home Page).Oracle iSupplier Portal
- CVE-2026-46891Vulnerability in the JD Edwards EnterpriseOne Accounts Payable product of Oracle JD Edwards (component: Accounts Payable).Oracle JD Edwards EnterpriseOne Accounts Payable
- CVE-2026-46888Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Database Upgrade).Oracle Siebel CRM Deployment
- CVE-2026-46886Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).Oracle Siebel Apps - Marketing
- CVE-2026-46885Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI).Oracle Siebel CRM Integration
- CVE-2026-46873Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device).Oracle VM VirtualBox
- CVE-2026-46870Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell for VS Code).Oracle MySQL Shell
- CVE-2026-46868Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Extensibility Framework).Oracle Enterprise Manager Base Platform
- CVE-2026-46867Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Extensibility Framework).Oracle Enterprise Manager Base Platform
- CVE-2026-46866Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen).Oracle Enterprise Manager Base Platform
- CVE-2026-46865Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Extensibility Framework).Oracle Enterprise Manager Base Platform
- CVE-2026-46864Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen).Oracle Enterprise Manager Base Platform
- CVE-2026-46863Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-46862Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General).Oracle MySQL Router
- CVE-2026-46851Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security).Oracle PeopleSoft Enterprise CS Campus Community
- CVE-2026-46849Vulnerability in the PeopleSoft Enterprise CS Student Financials product of Oracle PeopleSoft (component: Other).Oracle PeopleSoft Enterprise CS Student Financials
- CVE-2026-46848Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console).Oracle WebLogic Server
- CVE-2026-46808Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-46806Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-46804Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-46796Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).Oracle WebCenter Sites
- CVE-2026-46791Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-46788Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-46787Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-46780Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).Oracle WebCenter Content: Imaging
- CVE-2026-46776Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).Oracle Unified Directory
- CVE-2026-46769Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: ADF Shared Components).Oracle Application Development Framework
- CVE-2026-35327Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-35326Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-35325Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-35324Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-35322Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-35318Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).Oracle WebCenter Sites
- CVE-2026-35317Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-35315Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-35314Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Web Server Plugin).Oracle Access Manager
- CVE-2026-35311Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2026-35303Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console).Oracle WebLogic Server
- CVE-2026-35302Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console).Oracle WebLogic Server
- CVE-2026-35299Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console).Oracle WebLogic Server
- CVE-2026-35295Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).Oracle WebCenter Sites
- CVE-2026-35289Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Deployment Package).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2026-35288Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Deployment Package).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2026-35279Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Performance Monitor).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2026-35276Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Application Server).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2026-35275Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Shared Folders).Oracle VM VirtualBox
- CVE-2026-35274Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Deployment Package).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2026-35272Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Deployment Package).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2026-35271Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Weblogic).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2026-35269Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices).Oracle Identity Manager
- CVE-2026-35267Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices).Oracle Identity Manager
- CVE-2026-35265Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Security).Oracle Identity Manager
- CVE-2026-35262Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Market Place).Oracle Data Integrator
- CVE-2026-35259Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console).Oracle WebLogic Server
- CVE-2026-35258Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console).Oracle WebLogic Server
- CVE-2026-0164In Modem, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2026-0162In ParsePayloads of AudioSdpParser.cpp, there is a possible memory corruption due to type confusion.Google Android
- CVE-2026-0161In numberOfReportBlocks of RtpSession.cpp, there is a possible out of bounds write due to an integer overflow.Google Android
- CVE-2026-0160In TextRtpPayloadDecoderNode::DecodeT140 of TextRtpPayloadDecoderNode.cpp, there is a possible out of bounds write due to a missing bounds cGoogle Android
- CVE-2026-0156In checkSsrcCollisionOnRcv of RtpSession.cpp, there is a possible memory safety issue due to a missing null check.Google Android
- CVE-2026-0154In Modem, there is a possible way to trigger a modem crash during a SIP REFER request due to memory corruption.Google Android
- CVE-2026-0153In Write of msg_to_host_buffer.cc, there is a possible out of bounds write due to an incorrect bounds check.Google Android
- CVE-2026-0152In OSMMapPMRGeneric of pmr_os.c, there is a possible way to leverage a system call to system call to maliciously expand the VMA out of boundGoogle Android
- CVE-2026-0151In IntfGraphCreate of intfgraph.c, there is a possible out of bounds write due to an integer overflow.Google Android
- CVE-2026-0150In ExecuteGraph command handler of EdgeTPU firmware, there is a possible out of bounds write due to an integer overflow.Google Android
- CVE-2026-0149In RtpSession::rtpSendRtcpPacket, there is a possible OOB write due to a heap buffer overflow.Google Android
- CVE-2026-0148In multiple functions of VideoRtpPayloadDecoderNode.cpp, there is a possible out of bounds write due to an integer overflow.Google Android
- CVE-2026-0147In __mfc_core_nal_q_get_dec_metadata_sei_nal of mfc_core_nal_q.c, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2026-0146In mfc_core_get_dec_metadata_sei_nal of mfc_core_reg_api.c, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2026-0144In writeAocCommand of AocAudioCodec.cpp, there is a possible memory safety issue due to a missing bounds check.Google Android
- CVE-2026-0143In lwis_device_external_event_emit of lwis_event.c, there is a possible memory corruption due to a use after free.Google Android
- CVE-2026-0139In Modem, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2026-0138In lwis_io_buffer_write of lwis_io_buffer.c, there is a possible out of bounds write due to memory corruption.Google Android
- CVE-2026-0137In edgetpu_sync_fence_group_shutdown() of edgetpu-dmabuf.c, there is a possible elevation of privilege due to a use after free.Google Android
- CVE-2026-0136In Modem, there is a possible out of bounds read due to a missing bounds check.Google Android
- CVE-2026-0135In Modem, there is a possible out of bounds read due to a missing bounds check.Google Android
- CVE-2026-0133In smmu_attach_dev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime bootclass artifacts due to a missing permissiGoogle Android
- CVE-2026-0132In Modem, there is a possible out of bounds write due to a heap buffer overflow.Google Android
- CVE-2026-0131In RtpPacket::decodePacket, there is a possible out of bounds access due to an integer overflow.Google Android
- CVE-2026-0126In WC-Radio, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2026-0125In multiple functions of vpu_ioctl.c, there is a possible use after free due to a race condition.Google Android
- CVE-2026-47747stable-diffusion.cpp has a Heap-based Buffer Overflowleejet stable-diffusion.cpp
- CVE-2026-10303ServerCo getssl ACME shell script path injectionServerCo getssl
- CVE-2026-22312Use of Hard-coded Credentials Vulnerability in Radiflow iSAP Smart CollectorRadiflow iSAP Smart Collector
- CVE-2026-47750stable-diffusion.cpp: Heap buffer overflow in GLOBAL opcode parsing for PyTorch checkpoint filesleejet stable-diffusion.cpp
- CVE-2026-53866OpenClaw < 2026.5.12 - Allowlist Bypass in Shell Inline-Command ParsingOpenClaw
- CVE-2026-53865OpenClaw < 2026.5.2 - Arbitrary Command Execution via Workspace-Derived Service PATHOpenClaw
- CVE-2026-53864OpenClaw < 2026.5.26 - Insufficient Environment Variable Sanitization in Node.js Control VariablesOpenClaw
- CVE-2026-53858OpenClaw < 2026.5.2 - Arbitrary Runtime Dependency Loading via STATE_DIRECTORY Environment VariableOpenClaw
- CVE-2026-53857OpenClaw < 2026.5.3 - Mutable Display Name Binding in Zalo allowFrom PolicyOpenClaw
- CVE-2026-53855OpenClaw < 2026.4.2 - Shell Positional Parameters Bypass in Inline-Eval ChecksOpenClaw
- CVE-2026-53853OpenClaw < 2026.5.12 - Argument Pattern Bypass in Exec Allowlist via Linux and macOSOpenClaw
- CVE-2026-53849OpenClaw < 2026.5.7 - Privilege Escalation via Mutable Discord Display Names in allowFromOpenClaw
- CVE-2026-53846OpenClaw < 2026.4.29 - Arbitrary Package Manager Execution via Workspace .env npm_execpathOpenClaw
- CVE-2026-53843OpenClaw < 2026.5.26 - Node Token Revocation Bypass via Pairing-Scoped Device SessionOpenClaw
- CVE-2026-53842OpenClaw < 2026.5.2 - Arbitrary Python Runtime Execution via CLOUDSDK_PYTHON Environment VariableOpenClaw
- CVE-2026-50656Microsoft Defender Elevation of Privilege VulnerabilityMicrosoft Malware Protection Engine
- CVE-2024-39575update_disk_psu_baseline.sh requires password in plain textDell EMC VxRail Appliance
- CVE-2026-10748Nexus Repository 3 - Remote Code Execution via License DeserializationSonatype Nexus Repository
- CVE-2026-47749stable-diffusion.cpp: Heap buffer overflow in SHORT_BINUNICODE parsing for PyTorch checkpoint filesleejet stable-diffusion.cpp
- CVE-2026-47964DNG SDK | Heap-based Buffer Overflow (CWE-122)Adobe DNG Software Development Kit
- CVE-2024-38487api-gateway container running with root privilege would allow an attacker to escape the container and access host system to perform unintendDell EMC VxRail Appliance
- CVE-2026-42089yeoman-environment Vulnerable to Arbitrary Package Installation without User Confirmationyeoman environment · yeoman-environment
- CVE-2026-24228NVIDIA NeMo Framework for Linux contains a vulnerability where an attacker may cause deserialization of untrusted data.NVIDIA NeMo Framework
- CVE-2026-24155NVIDIA NeMo Framework for all platforms contains a code injection vulnerability.NVIDIA NeMo Framework
- CVE-2026-10649Pacemaker: pacemaker: denial of service via integer overflow in remote message decompressionRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2025-71261Harvester's SUSE Virtualization Registration Client Vulnerable to MITM and DOSSUSE Harvester · github.com/harvester/harvester
- CVE-2026-44932indirect remote shell command injection via unsanitized DHCP options in wickedSUSE wicked
- CVE-2024-24909Dell OpenManage Integration with Microsoft Windows Admin Center contains a Remote Code Execution vulnerability in the gateway plugin.Dell OpenManage
- CVE-2026-12398Galaxy_ng: shell injection in legacy role import via unsanitized git ref namesRed Hat Ansible Automation Platform · galaxy-ng
- CVE-2026-47684Sync-in Server: SSRF protection bypass via IPv4-mapped IPv6 addresses in regExpPrivateIPSync-in server · @sync-in/server
- CVE-2026-0647Rockwell Automation FLEX I/O Dual-port EtherNet/IP Adapters – Multiple VulnerabilitiesRockwell Automation FLEX I/O EtherNet/IP Adapters
- CVE-2026-0646Rockwell Automation FLEX I/O Dual-port EtherNet/IP Adapters – Multiple VulnerabilitiesRockwell Automation FLEX I/O EtherNet/IP Adapters
- CVE-2026-48780Forem vulnerable to bypass of email address domain restrictionsforem
- CVE-2025-14272Rockwell Automation FactoryTalk Analytics PavilionXRockwell Automation FactoryTalk Analytics PavilionX
- CVE-2025-11694Rockwell Automation CompactLogix 5370 Controllers – Multiple VulnerabilitiesRockwell Automation CompactLogix
- CVE-2026-11317Rockwell Automation Logix 5370 and 5570 Controllers Vulnerable To Denial of Service Via CIPRockwell Automation CompactLogix, ControlLogix
- CVE-2026-12328Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152Mozilla Firefox · Mozilla Thunderbird
- CVE-2026-12327Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152Mozilla Firefox · Mozilla Thunderbird
- CVE-2026-12326Memory safety bugs fixed in Firefox 152 and Thunderbird 152Mozilla Firefox · Mozilla Thunderbird
- CVE-2026-12324Incorrect boundary conditions in the Graphics: CanvasWebGL componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-12318Incorrect boundary conditions in the Libraries component in NSSMozilla Firefox · Mozilla Thunderbird
- CVE-2026-12317Memory safety bug fixed in Thunderbird 152Mozilla Firefox · Mozilla Thunderbird
- CVE-2026-12314Memory safety bug fixed in Thunderbird 152Mozilla Firefox · Mozilla Thunderbird
- CVE-2026-12312Memory safety bug fixed in Thunderbird 152Mozilla Firefox · Mozilla Thunderbird
- CVE-2026-12310Memory safety bug fixed in Thunderbird 152Mozilla Firefox · Mozilla Thunderbird
- CVE-2026-12305Memory safety bug fixed in Thunderbird 152Mozilla Firefox · Mozilla Thunderbird
- CVE-2026-12292Incorrect boundary conditions in the Web Audio componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-12291Use-after-free in the Networking: HTTP componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-12290Memory safety bug fixed in Thunderbird 152Mozilla Firefox · Mozilla Thunderbird
- CVE-2026-12289Privilege escalation in the Graphics: WebRender componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-12225syracom Secure Login (2FA) for Confluence allows 2FA bypass via spoofed User-Agentsyracom AG Secure Login (2FA) for Jira · syracom AG Secu… +1
- CVE-2026-10829A stack-based buffer overflow vulnerability has been found in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and earlier.Moxa NPort W2150A-W4/W2250A-W4 Series · Moxa NPort W2150A/W…
- CVE-2026-8442WP Review Slider Pro <= 12.6.8 - Authenticated (Subscriber+) Arbitrary File Deletion via 'myaction' Parameterhttps://wpreviewslider.com/ WP Review Slider Pro
- CVE-2026-8176LatePoint <= 5.5.1 - Authenticated (Agent+) Privilege Escalation to Administrator via IDOR in OsOrdersController::create_or_update + Unauthenticated Customer-Cabinet Password ResetLatePoint – Calendar Booking Plugin for Appointments and Ev…
- CVE-2026-54198WordPress Media LIbrary Assistant plugin <= 3.35 - Reflected Cross Site Scripting (XSS) vulnerabilityDavid Lingren Media LIbrary Assistant
- CVE-2026-54191WordPress Pods plugin <= 3.3.8 - Cross Site Scripting (XSS) vulnerabilityPods Framework Pods
- CVE-2026-52714WordPress SEO Plugin by Squirrly SEO plugin <= 12.4.16 - Broken Access Control vulnerabilitySEO Squirrly SEO Plugin by Squirrly SEO
- CVE-2026-52712WordPress Attendance Manager plugin <= 0.6.2 - SQL Injection vulnerabilitytnomi Attendance Manager
- CVE-2026-52711WordPress WooCommerce POS plugin <= 1.8.14 - Broken Access Control vulnerabilitykilbot WooCommerce POS
- CVE-2026-39581WordPress WP Sessions Time Monitoring Full Automatic plugin <= 1.1.4 - SQL Injection vulnerabilityactivity-log.com WP Sessions Time Monitoring Full Automatic
- CVE-2026-39490WordPress JupiterX Core plugin <= 4.14.1 - Broken Access Control vulnerabilityartbees JupiterX Core
- CVE-2026-39437WordPress Min Max Step Quantity Limits Manager for WooCommerce plugin <= 5.2.2 - Reflected Cross Site Scripting (XSS) vulnerabilityWPFactory Min Max Step Quantity Limits Manager for WooComme…
- CVE-2025-68045WordPress WP Event SOlution plugin <= 4.1.12 - Broken Access Control vulnerabilityArraytics WP Event Solution
- CVE-2026-10825Improper JSON Input Validation in WebSocket API Leads to Denial of ServiceMoxa NPort 6000-G2 Series
- CVE-2026-5416Command Injection via name parameterTURCK TBEN-LL-SE-M2 · TURCK TBEN-L4-SE-M2 +1
- CVE-2026-8444WP Review Slider Pro <= 12.6.8 - Authenticated (Subscriber+) SQL Injection via 'curselrevs' Parameterhttps://wpreviewslider.com/ WP Review Slider Pro
- CVE-2026-46331net/sched: fix pedit partial COW leading to page cache corruptionLinux
- CVE-2026-8443WP Review Slider Pro <= 12.6.8 - Authenticated (Subscriber+) SQL Injection via 'stypes' Parameterhttps://wpreviewslider.com/ WP Review Slider Pro
- CVE-2026-6933Premmerce Dev Tools <= 2.0 - Missing Authorization to Authenticated (Subscriber+) Remote Code Execution via Plugin CreationPremmerce Dev Tools
- CVE-2026-7273A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow aZyxel GS1900-48HPv2 firmware · Zyxel GS1900-8 firmware +8
Medium, low and unrated 120
- CVE-2026-44587CarrierWave has a denylisted_content_type bypass via Unescaped Regex Metacharacterscarrierwaveuploader carrierwave · carrierwave
- CVE-2026-48782pydantic-ai: SSRF blocklist bypass via IPv4-compatible, SIIT/IVI, and local NAT64 IPv6 addresses (incomplete fix of CVE-2026-46678)pydantic-ai · pydantic-ai-slim
- CVE-2026-47277Runtipi: Unauthenticated arbitrary file read through app-store logo symlinksruntipi
- CVE-2026-48783Postiz has an unauthenticated billing-enforcement bypass via /public/modify-subscriptiongitroomhq postiz-app
- CVE-2026-2604Evolution-data-server: evolution data server: arbitrary file deletion via inconsistent uri handlingGNOME Evolution Data Server · Red Hat Enterprise Linux
- CVE-2026-39433WordPress WPAMS plugin < 49.5.3 - Arbitrary Content Deletion vulnerabilitymojoomla WPAMS
- CVE-2025-69137WordPress Genemy theme <= 1.6.6 - Broken Access Control vulnerabilityJthemes Genemy
- CVE-2026-48776LangGraph SDK has unsafe URL path constructionlangchain-ai · langgraph-sdk +1
- CVE-2026-46979Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Integration and Interfaces).Oracle PeopleSoft Enterprise CS Campus Community
- CVE-2026-46977Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device).Oracle VM VirtualBox
- CVE-2026-46877Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device).Oracle VM VirtualBox
- CVE-2026-46874Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-46871Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell for VS Code).Oracle MySQL Shell
- CVE-2026-46869Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Dump and Load).Oracle MySQL Shell
- CVE-2026-46825Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device).Oracle VM VirtualBox
- CVE-2026-46816Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device).Oracle VM VirtualBox
- CVE-2026-46815Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device).Oracle VM VirtualBox
- CVE-2026-46812Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2026-46810Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: End User Self Service).Oracle Identity Manager
- CVE-2026-46790Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-46772Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: ADF Faces).Oracle Application Development Framework
- CVE-2026-46771Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: Java Business Objects).Oracle Application Development Framework
- CVE-2026-46770Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: Security Framework).Oracle Application Development Framework
- CVE-2026-46768Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device).Oracle VM VirtualBox
- CVE-2026-35291Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console).Oracle WebLogic Server
- CVE-2026-35261Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2026-0165In several functions of the RTCP packet decoder, there is a possible out-of-bounds read due to a missing bounds check.Google Android
- CVE-2026-0158In Camera, there is a possible unauthorized way to access photos due to a missing permission check.Google Android
- CVE-2026-0157In RtcpHeader::decodeRtcpHeader, there is a possible OOB read due to a missing bounds check.Google Android
- CVE-2026-0155In ImsMediaBitReader::ReadByteBuffer, there is a possible OOB read due to a missing bounds check.Google Android
- CVE-2026-0145In keymint, there is a possible Permission Bypass due to a logic error in the code.Google Android
- CVE-2026-0142In iavb_parse_key_data of avb_rsa.c, there is a possible out of bounds read due to improper input validation.Google Android
- CVE-2026-0141In decodeAppPacket of RtcpAppPacket.cpp, there is a possible OOB read due to a missing bounds check.Google Android
- CVE-2026-0140In RtpPacket::decodePacket, there is a possible out-of-bounds read due to an integer overflow.Google Android
- CVE-2026-0134In PostWipeData of recovery_ui.cpp, there is a possible data persistence issue after a factory reset due to a logic error in the code.Google Android
- CVE-2026-0130In RtcpChunk::decodeRtcpChunk, there is a possible out of bounds read due to a heap buffer overflow.Google Android
- CVE-2026-0129In RtcpByePacket::decodeByePacket, there is a possible due to a missing bounds check.Google Android
- CVE-2026-0128In RtcpFbPacket::decodeRtcpFbPacket, there is a possible out of bounds read due to an integer overflow.Google Android
- CVE-2026-0127In NrmmMsgCodec::DecodeUPUTransparentContext of cn_NrmmDecoder.cpp, there is a possible out-of-bounds read due to memory corruption.Google Android
- CVE-2026-12425Reflected / DOM cross-site scripting (XSS) in PowerSchool ERP / Employee Access Center 23.10PowerSchool Employee Access Center
- CVE-2026-12105Improper access control in Devolutions Server 2026.2.5, 2026.1.21 allows an authenticated user to access attachments via folder duplicationDevolutions Server
- CVE-2026-12117Improper access control in the social login connection endpoint in Devolutions Server 2026.2.5 allows an authenticated vault member to enuDevolutions Server
- CVE-2026-11890Improper access control in PAM account discovery results in Devolutions Server 2026.2.5, 2026.1.21 allows an authenticated user to retrieveDevolutions Server
- CVE-2026-53863OpenClaw < 2026.4.25 - Unvalidated Group ID Acceptance in Tool Group PolicyOpenClaw
- CVE-2026-53862OpenClaw < 2026.5.12 - Bootstrap Token Replay via Pending Pairing Scope WideningOpenClaw
- CVE-2026-53861OpenClaw < 2026.5.6 - Allowlist Bypass via Combined POSIX Inline Flags on macOSOpenClaw
- CVE-2026-53860OpenClaw < 2026.5.7 - Sender Policy Bypass via Mutable Conversation Identifiers in BlueBubblesOpenClaw
- CVE-2026-53859OpenClaw < 2026.5.26 - Hostname Validation Bypass via Trailing-Dot InconsistencyOpenClaw
- CVE-2026-53856OpenClaw 2026.4.23 < 2026.4.24 - Insecure File Permissions in Config Recovery via OpenClaw.jsonOpenClaw
- CVE-2026-53854OpenClaw < 2026.4.25 - Privilege Escalation via ownerAllowFrom Wildcard Inheritance in Internal/Webchat CommandsOpenClaw
- CVE-2026-53852OpenClaw < 2026.4.25 - Scope Bypass via Empty-Scope Device Re-pairingOpenClaw
- CVE-2026-53851OpenClaw < 2026.5.12 - Slack Reaction Event Notification BypassOpenClaw
- CVE-2026-53850OpenClaw < 2026.4.25 - Control Scope Enforcement Bypass in Focus CommandOpenClaw
- CVE-2026-53848OpenClaw < 2026.5.26 - Exec Allowlist Bypass via Transparent Command WrappersOpenClaw
- CVE-2026-53847OpenClaw < 2026.5.6 - Privilege Escalation via Active Memory Write ScopeOpenClaw
- CVE-2026-53845OpenClaw < 2026.5.6 - Skill-Command Dispatch Hook Bypass via Before-Tool-Call Hook SkippingOpenClaw
- CVE-2026-53844OpenClaw < 2026.4.29 - Session Visibility Check Bypass in Shared Memory SearchOpenClaw
- CVE-2026-53841OpenClaw < 2026.5.12 - Cross-Site Scripting via Unsafe Markdown Links in Exported Session HTMLOpenClaw
- CVE-2026-53840OpenClaw < 2026.5.12 - Custom Header Leakage via MCP Streamable HTTP Cross-Origin RedirectsOpenClaw
- CVE-2026-48775LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loadinglangchain-ai langgraph · langchain-ai langraph-checkpoint +1
- CVE-2026-47748stable-diffusion.cpp: Out-of-bounds reads in PyTorch checkpoint pickle opcode parsingleejet stable-diffusion.cpp
- CVE-2026-4367Libxpm: libxpm: denial of service via out-of-bounds read in xpm file parsingRed Hat Hardened Images · Red Hat Enterprise Linux
- CVE-2026-47963DNG SDK | Out-of-bounds Read (CWE-125)Adobe DNG Software Development Kit
- CVE-2026-47934DNG SDK | Out-of-bounds Read (CWE-125)Adobe DNG Software Development Kit
- CVE-2026-47927DNG SDK | Out-of-bounds Read (CWE-125)Adobe DNG Software Development Kit
- CVE-2024-30476PowerStore contains a Stored Cross-Site Scripting Vulnerability in the PowerStore Manager.Dell PowerStore
- CVE-2026-12003CPython >3.11 Insecure Input Validation resulting in privilege escalationPython Software Foundation CPython
- CVE-2024-22451Dell Peripheral Manager, versions from 1.5.1 to 1.7.2, contain an uncontrolled search path element vulnerability.Dell Peripheral Manager
- CVE-2024-22447Dell Peripheral Manager, versions prior to 1.7.3, contain an uncontrolled search path element vulnerability.Dell Peripheral Manager
- CVE-2026-10831Improper Authorization of Break Signal Commands in DevicesMoxa NPort 6000 Series · Moxa CN2600 Series
- CVE-2026-9307Rockwell Automation CompactLogix 5370 Controllers – Multiple VulnerabilitiesRockwell Automation CompactLogix
- CVE-2026-10640Use-after-free reading `net_pkt` `iface` after send in IPv6 Neighbor Discovery (`ipv6_nbr.c`)zephyrproject zephyr
- CVE-2026-10639Use-after-free reading `net_pkt_iface()` of a sent ICMPv4 echo-reply packet in `icmpv4_handle_echo_request()`zephyrproject zephyr
- CVE-2026-10638Use-after-free in Zephyr ICMPv6 RX path when updating statistics after sending an echo reply or errorzephyrproject zephyr
- CVE-2026-10637Use-after-free of `net_pkt` in IPv6 MLD send path triggerable by a link-local MLD Queryzephyrproject zephyr
- CVE-2026-10636Use-after-free in Zephyr IPv4 IGMP send path (`igmp_send`)zephyrproject zephyr
- CVE-2026-53900Cookie injection was possible when opening a PDF linkMozilla Firefox for iOS
- CVE-2026-53899Cross-origin cookies could be leaked when opening a PDF linkMozilla Firefox for iOS
- CVE-2026-12330Incorrect boundary conditions in the Internationalization componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-12329Memory safety bug fixed in Thunderbird ESR 140.12Mozilla Firefox · Mozilla Thunderbird
- CVE-2026-12325Denial-of-service in the Graphics: ImageLib componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-12323Spoofing issue in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-12322Clickjacking issue in the Widget: Gtk componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-12321JIT miscompilation in the JavaScript: WebAssembly componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-12320Information disclosure in the Password Manager componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-12319Denial-of-service in the Audio/Video: Playback componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-12313Information disclosure, sandbox escape in the Security: Process Sandboxing componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-12311Information disclosure, sandbox escape in the Security: Process Sandboxing componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-12309Memory safety bug fixed in Thunderbird 152Mozilla Firefox · Mozilla Thunderbird
- CVE-2026-12308Memory safety bug fixed in Thunderbird 152Mozilla Firefox · Mozilla Thunderbird
- CVE-2026-12307Memory safety bug fixed in Thunderbird 152Mozilla Firefox · Mozilla Thunderbird
- CVE-2026-12306Memory safety bug fixed in Thunderbird 152Mozilla Firefox · Mozilla Thunderbird
- CVE-2026-12303Information disclosure due to incorrect boundary conditions in the Graphics: WebGPU componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-12302Mitigation bypass in the DOM: Security componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-12301Memory safety bug fixed in Thunderbird 152Mozilla Firefox · Mozilla Thunderbird
- CVE-2026-12300Memory safety bug fixed in Thunderbird 152Mozilla Firefox · Mozilla Thunderbird
- CVE-2026-12299JIT miscompilation in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-12298Memory safety bug fixed in Thunderbird 152Mozilla Firefox · Mozilla Thunderbird
- CVE-2026-9507Session fixation vulnerability in Enhancesoft's osTicketEnhancesoft osTicket
- CVE-2026-8484Heap buffer overflow in JansiFuseSource jansi
- CVE-2026-10828A format string vulnerability has been found in the "alias" parameter of the Serial Param configuration page in the NPort W2150A-W4/W2250A-WMoxa NPort W2150A-W4/W2250A-W4 Series · Moxa NPort W2150A/W…
- CVE-2026-2381WooCommerce Stripe Payment Gateway <= 10.7.0 - Missing Authorization to Unauthenticated Order Status Manipulation via 'order' ParameterWooCommerce Stripe Payment Gateway
- CVE-2026-40809WordPress Metro Magazine theme <= 1.4.1 - Broken Access Control vulnerabilityRara Themes Metro Magazine
- CVE-2026-54197WordPress GetGenie plugin <= 4.4.1 - Sensitive Data Exposure vulnerabilityWpmet GetGenie
- CVE-2026-54190WordPress Envira Photo Gallery plugin <= 1.12.5 - Broken Access Control vulnerabilityAwesomemotive Envira Photo Gallery
- CVE-2026-10093File Sharing & Download Manager <= 2.1.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'fldr_ttl' Parameterdeepakkite Secure Client Portal and Private File Sharing Pl…
- CVE-2025-9912A local privilege escalation vulnerability in Nokia SR LinuxNokia SR Linux
- CVE-2025-10262An unsanitized format validation vulnerability in Nokia SR LinuxNokia SR Linux
- CVE-2026-5149RTMKit <= 2.0.7 - Authenticated (Contributor+) Missing Authorization to Arbitrary Form Submission Access via 'entries_id' Parameterrometheme RTMKit
- CVE-2026-10635Dangling memory-domain pointer (use-after-free) in Xtensa MMU page-table code on memory-domain de-initzephyrproject zephyr
- CVE-2026-50255Incorrect default permissions issue exists in Optical Disc Archive Software for Windows 5.5.3 and earlier.Sony Optical Disc Archive Software for Windows
- CVE-2026-10780Static Block <= 2.2 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure via Shortcode 'id' Attributemohammadtanzilurrahman Static Block
- CVE-2026-9187Abandoned Contact Form 7 <= 2.2 - Missing Authorization to Unauthenticated Arbitrary Post Deletion via 'recover_id' Parameterzealopensource Abandoned Contact Form
- CVE-2026-6964Video Conferencing with Zoom <= 4.6.7 - Missing Authorization to Unauthenticated Zoom SDK Credential Exposure via 'get_auth' AJAX Actionj_3rk Video Conferencing with Zoom
- CVE-2026-42014Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pingnutls · Red Hat Enterprise Linux +6
- CVE-2026-1767Localsearch: tracker-miners: gnome localsearch mp3 extractor: heap buffer overflow leading to denial of service or information disclosure via malformed mp3 id3 tagsRed Hat Enterprise Linux
- CVE-2026-1766Localsearch: tracker-miners: gnome localsearch mp3 extractor: denial of service and information disclosure via malformed mp3 files.Red Hat Enterprise Linux
- CVE-2026-1765Localsearch: tracker-miners: gnome localsearch mp3 extractor: denial of service and potential information disclosure via crafted mp3 filesRed Hat Enterprise Linux
- CVE-2026-1764Localsearch: tracker-miners: gnome localsearch mp3 extractor: heap buffer overflow leads to denial of service or information disclosure when parsing mp3 filesRed Hat Enterprise Linux
- CVE-2026-46448In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data.OpenStack Nova · nova