# CVEs published 2026-06-17

396 CVEs were published on June 17, 2026: 85 critical, 195 high. Days are UTC.

- [CVE-2026-48764](https://cve.now/CVE-2026-48764.md): TypeBot has SSRF in HTTP request and script fetch flows via DNS rebinding bypass (CVSS 8.2, baptisteArno typebot.io)
- [CVE-2026-48768](https://cve.now/CVE-2026-48768.md): TypeBot: Unauthenticated arbitrary s3 object write in generate-upload-url via unsanitized fileName (CVSS 9.3, baptisteArno typebot.io)
- [CVE-2026-53676](https://cve.now/CVE-2026-53676.md): ThingsBoard contains a prototype pollution vulnerability which may lead to arbitrary code execution within a sandboxed context by a user who (CVSS 7.2, ThingsBoard)
- [CVE-2026-45357](https://cve.now/CVE-2026-45357.md): LiquidJS: Memory and render limit bypass via unbounded width padding in \`date\` filter (strftime) (CVSS 7.5, harttle liquidjs · liquidjs)
- [CVE-2026-44646](https://cve.now/CVE-2026-44646.md): LiquidJS: \`{% render %}\` tag silently bypasses per-render \`ownPropertyOnly:true\` via \`Context.spawn()\` (CVSS 5.3, harttle liquidjs · liquidjs)
- [CVE-2026-54533](https://cve.now/CVE-2026-54533.md): vantage6 node has an Improper Access Control issue (CVSS 6.9, vantage6)
- [CVE-2026-54445](https://cve.now/CVE-2026-54445.md): Vantage6: Set admin user and password from environment or configuration (CVSS 6.9, vantage6)
- [CVE-2026-45617](https://cve.now/CVE-2026-45617.md): LiquidJS: ReDoS via Quadratic Backtracking in \`strip\_html\` Filter Regex (CVSS 7.5, harttle liquidjs · liquidjs)
- [CVE-2024-27928](https://cve.now/CVE-2024-27928.md): Vantage6: 2FA can be circumvented with hacked email access (CVSS 5.9, vantage6)
- [CVE-2026-44645](https://cve.now/CVE-2026-44645.md): LiquidJS has a renderLimit DoS guard bypass via empty \`{% for %}\` body (CVSS 6.5, harttle liquidjs · liquidjs)
- [CVE-2024-24769](https://cve.now/CVE-2024-24769.md): Vantage6: No limit on emails sent for password/MFA reset (CVSS 2.1, vantage6)
- [CVE-2026-50268](https://cve.now/CVE-2026-50268.md): Steeltoe: OAEP setting silently selects PKCS#1 v1.5 padding (CVSS 1.9, SteeltoeOSS Steeltoe.Configuration.Encryption · Steeltoe.Co…)
- [CVE-2026-50267](https://cve.now/CVE-2026-50267.md): Steeltoe: TLS private keys written to /tmp with default permissions, never deleted (CVSS 4.7, SteeltoeOSS Steeltoe.Configuration.Abstractions · Steeltoe.…)
- [CVE-2026-48759](https://cve.now/CVE-2026-48759.md): TypeBot: Cross-Workspace Theme Template IDOR (Modification and Deletion) (CVSS 7.1, baptisteArno typebot.io)
- [CVE-2026-12568](https://cve.now/CVE-2026-12568.md): Arbitrary File Write in postman\_download module (CVSS 6.5, Black Lantern Security BBOT · bbot)
- [CVE-2026-50202](https://cve.now/CVE-2026-50202.md): Steeltoe's static JWKS cache shared across schemes and never invalidated (CVSS 5.9, SteeltoeOSS Steeltoe.Security.Authentication.CloudFoundr… +4)
- [CVE-2026-12567](https://cve.now/CVE-2026-12567.md): Symlink-following arbitrary write via github\_workflows module (CVSS 2.2, Black Lantern Security BBOT · bbot)
- [CVE-2026-44644](https://cve.now/CVE-2026-44644.md): LiquidJS's strip\_html filter bypass via newline characters in HTML tags enables XSS (CVSS 6.1, harttle liquidjs · liquidjs)
- [CVE-2026-12566](https://cve.now/CVE-2026-12566.md): SSRF via unvalidated WWW-Authenticate realm in docker\_pull module (CVSS 3.1, Black Lantern Security BBOT · bbot)
- [CVE-2026-50201](https://cve.now/CVE-2026-50201.md): Steeltoe's sensitive actuators (heapdump/env) only require Restricted permission (CVSS 6.5, SteeltoeOSS Steeltoe.Management.Endpoint · SteeltoeOSS S… +2)
- [CVE-2026-12565](https://cve.now/CVE-2026-12565.md): Path Traversal (Zip-Slip) in unarchive module (CVSS 5.3, Black Lantern Security BBOT · bbot)
- [CVE-2026-50200](https://cve.now/CVE-2026-50200.md): Steeltoe's env sanitizer misses connection strings — leaks embedded DB passwords (CVSS 7.5, SteeltoeOSS Steeltoe.Management.Endpoint · SteeltoeOSS S… +2)
- [CVE-2026-48997](https://cve.now/CVE-2026-48997.md): e107: Command Injection via shell expansion in ImageMagick resize destination path (CVSS 7.1, e107inc e107)
- [CVE-2026-54386](https://cve.now/CVE-2026-54386.md): marimo \< 0.23.9 XSS via file Query Parameter in assets.py (CVSS 5.1, marimo-team marimo · marimo)
- [CVE-2026-48991](https://cve.now/CVE-2026-48991.md): XianYuLauncher: Legacy Microsoft account OAuth sign-in flow lacks PKCE and state validation (CVSS 5.5, XianYuLauncher)
- [CVE-2026-48820](https://cve.now/CVE-2026-48820.md): CakePHP: View::element() is missing a path containment check (CVSS 6.3, cakephp · cakephp/cakephp)
- [CVE-2026-50196](https://cve.now/CVE-2026-50196.md): Steeltoe.Discovery.Eureka: Unrecognized DataCenterInfo.Name poisons entire registry fetch (CVSS 7.5, SteeltoeOSS Steeltoe.Discovery.Eureka · Steeltoe.Discovery.…)
- [CVE-2026-48990](https://cve.now/CVE-2026-48990.md): joserfc: b64=false RFC7797 JWS payloads bypass JWSRegistry payload-size limits during deserialization (CVSS 5.3, authlib joserfc · joserfc)
- [CVE-2026-8050](https://cve.now/CVE-2026-8050.md): CVE-2026-8050 (CVSS 7.5, SignalRGB kernel driver)
- [CVE-2026-8049](https://cve.now/CVE-2026-8049.md): CVE-2026-8049 (CVSS 5.3, SignalRGB kernel driver)
- [CVE-2026-12530](https://cve.now/CVE-2026-12530.md): Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install\_packages() (CVSS 8.4, AWS bedrock-agentcore · bedrock-agentcore)
- [CVE-2026-50194](https://cve.now/CVE-2026-50194.md): Steeltoe vulnerable to management-port isolation bypass via spoofed Host header (CVSS 8.2, SteeltoeOSS Steeltoe.Management.Endpoint · SteeltoeOSS S… +2)
- [CVE-2026-48989](https://cve.now/CVE-2026-48989.md): Windows-MCP: HTTP transports expose unauthenticated PowerShell control with wildcard CORS (CVSS 8.9, CursorTouch Windows-MCP · windows-mcp)
- [CVE-2026-48988](https://cve.now/CVE-2026-48988.md): markdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operations (CVSS 5.3, markdown-it)
- [CVE-2026-48979](https://cve.now/CVE-2026-48979.md): PHP Standard Library: HTTP/2 server-side missing content-length validation enables request smuggling (CVSS 7.5, php-standard-library · php-standard-library/h2 +1)
- [CVE-2026-49133](https://cve.now/CVE-2026-49133.md): Typemill \< 2.24.0 Path Traversal via ControllerApiImage::getPagemedia() (CVSS 7.1, typemill)
- [CVE-2026-48821](https://cve.now/CVE-2026-48821.md): Shaarli: DOM-based Cross-Site Scripting (XSS) in Thumbnail Synchronizer (CVSS 5.8, Shaarli)
- [CVE-2026-11407](https://cve.now/CVE-2026-11407.md): Pimcore CMS 12.3.8 Twig Sandbox Bypass via SecurityPolicy checkMethodAllowed (CVSS 8.6, Pimcore CMS/DXP · pimcore/pimcore)
- [CVE-2026-48823](https://cve.now/CVE-2026-48823.md): Shaarli has Stored Cross-Site Scripting (XSS) via Tags Search (CVSS 4.8, Shaarli)
- [CVE-2026-32682](https://cve.now/CVE-2026-32682.md): NGINX Gateway Fabric vulnerability (CVSS 6.5, F5 NGINX Gateway Fabric)
- [CVE-2026-50107](https://cve.now/CVE-2026-50107.md): NGINX Gateway Fabric vulnerability (CVSS 8.1, F5 NGINX Gateway Fabric)
- [CVE-2026-48822](https://cve.now/CVE-2026-48822.md): Shaarli has Stored Cross-Site Scripting (XSS) via Markdown Reference Links (CVSS 5.8, Shaarli)
- [CVE-2026-54388](https://cve.now/CVE-2026-54388.md): Tinyproxy - HTTP Request Smuggling via Duplicate Content-Length Headers (CVSS 9.3, tinyproxy)
- [CVE-2026-54387](https://cve.now/CVE-2026-54387.md): Tinyproxy - HTTP Request Smuggling via CL/TE Desynchronization (CVSS 9.3, tinyproxy)
- [CVE-2026-48817](https://cve.now/CVE-2026-48817.md): Starlette: Arbitrary HTTP method dispatched to \`HTTPEndpoint\` attributes via \`getattr\` (CVSS 5.3, Kludex starlette · starlette)
- [CVE-2026-48814](https://cve.now/CVE-2026-48814.md): Network-AI: Empty default secret still authorizes all requests (Incomplete fix for CVE-2026-46701) (CVSS 9.1, Jovancoding Network-AI · network-ai)
- [CVE-2026-55202](https://cve.now/CVE-2026-55202.md): Tinyproxy - Stathost Detection Bypass via Host Header Manipulation (CVSS 8.8, tinyproxy)
- [CVE-2026-55201](https://cve.now/CVE-2026-55201.md): Evil-WinRM - Path Traversal in download\_dir() Function (CVSS 7.4, Hackplayers evil-winrm)
- [CVE-2026-55200](https://cve.now/CVE-2026-55200.md): libssh2 - Out-of-Bounds Write via Unchecked packet\_length in transport.c (CVSS 9.2, libssh2)
- [CVE-2026-10741](https://cve.now/CVE-2026-10741.md): Nexus Repository Manager - Incorrect Authorization allows credential disclosure via proxy repository configuration (CVSS 5.9, Sonatype Nexus Repository Manager)
- [CVE-2026-55199](https://cve.now/CVE-2026-55199.md): libssh2 - Pre-Authentication DoS via SSH\_MSG\_EXT\_INFO Handler (CVSS 8.2, libssh2)
- [CVE-2026-10696](https://cve.now/CVE-2026-10696.md): Use of an incorrectly resolved name or reference in the pinget backend in Devolutions UniGetUI 2026.2.0 and earlier allows a WinGet communi (CVSS 7.5, Devolutions UniGetUI)
- [CVE-2026-12529](https://cve.now/CVE-2026-12529.md): SourceCodester CET Automated Grading System with AI Predictive Analytics Student Self-Registration Endpoint index.php access control (CVSS 6.9, SourceCodester CET Automated Grading System with AI Predict…)
- [CVE-2026-55198](https://cve.now/CVE-2026-55198.md): Hermes WebUI \< 0.51.443 - Cross-Profile Session Data Exfiltration via Session Export Endpoint (CVSS 7.1, nesquena hermes-webui)
- [CVE-2026-55197](https://cve.now/CVE-2026-55197.md): Hermes WebUI \< 0.51.443 - Broken Access Control in /api/session Endpoint (CVSS 7.1, nesquena hermes-webui)
- [CVE-2026-55196](https://cve.now/CVE-2026-55196.md): Hermes WebUI \< 0.51.409 - Unauthenticated Passkey Registration via Authentication Bypass (CVSS 9.1, hermes-webui)
- [CVE-2026-53871](https://cve.now/CVE-2026-53871.md): Hermes WebUI \< 0.51.368 - Profile-Scoped Authorization Bypass via Forged hermes\_profile Cookie (CVSS 8.6, nesquena hermes-webui)
- [CVE-2026-53870](https://cve.now/CVE-2026-53870.md): Hermes Agent \< 0.16.0 - Sensitive File Permission Vulnerability in Store Files (CVSS 6.8, NousResearch hermes-agent · hermes-agent)
- [CVE-2026-53869](https://cve.now/CVE-2026-53869.md): Hermes Agent \< 0.16.0 - DNS Rebinding Bypass via WebSocket Endpoints (CVSS 8.7, NousResearch hermes-agent · hermes-agent)
- [CVE-2026-48818](https://cve.now/CVE-2026-48818.md): Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows (CVSS 7.5, Kludex starlette · starlette)
- [CVE-2026-11525](https://cve.now/CVE-2026-11525.md): undici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matching (CVSS 3.7, undici)
- [CVE-2026-2674](https://cve.now/CVE-2026-2674.md): Out-of-bounds Write vulnerability in RTI Connext Professional (Queueing Service,Core Libraries,Persistence Service) allows Overflow Buffers. (CVSS 4.8, RTI Connext Professional)
- [CVE-2026-30803](https://cve.now/CVE-2026-30803.md): Integer Underflow (Wrap or Wraparound) vulnerability in RTI Connext Micro (Core Libraries) allows Overread Buffers. (CVSS 8.8, RTI Connext Micro)
- [CVE-2026-30802](https://cve.now/CVE-2026-30802.md): Out-of-bounds Read vulnerability in RTI Connext Micro (Core Libraries) allows Overread Buffers. (CVSS 8.8, RTI Connext Micro)
- [CVE-2026-30799](https://cve.now/CVE-2026-30799.md): Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Identity Spoofing. (CVSS 6.1, RTI Connext Professional)
- [CVE-2026-7300](https://cve.now/CVE-2026-7300.md): Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Web Integration Service) allows Filter Failure through Buffer Overflow. (CVSS 8.8, RTI Connext Professional)
- [CVE-2026-3894](https://cve.now/CVE-2026-3894.md): Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. (CVSS 9.2, RTI Connext Professional)
- [CVE-2026-2675](https://cve.now/CVE-2026-2675.md): Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Fake the Source of Data. (CVSS 6.0, RTI Connext Professional)
- [CVE-2026-2467](https://cve.now/CVE-2026-2467.md): Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags. (CVSS 9.2, RTI Connext Professional)
- [CVE-2026-6733](https://cve.now/CVE-2026-6733.md): undici vulnerable to HTTP response queue poisoning via keep-alive socket reuse (CVSS 3.7, undici)
- [CVE-2026-20266](https://cve.now/CVE-2026-20266.md): OS Command Injection in the btool Configuration Helper in Splunk AI Toolkit (CVSS 9.1, Splunk AI Toolkit)
- [CVE-2026-20265](https://cve.now/CVE-2026-20265.md): Insecure Default Domain Allowlist in Splunk AI Toolkit (CVSS 4.3, Splunk AI Toolkit)
- [CVE-2026-9678](https://cve.now/CVE-2026-9678.md): undici vulnerable to cross-user information disclosure via shared cache whitespace bypass (CVSS 5.9, undici)
- [CVE-2026-47774](https://cve.now/CVE-2026-47774.md): Envoy vulnerable to HTTP/2 memory exhaustion via cookie header size bypass and HPACK amplification (CVSS 7.5, envoyproxy envoy)
- [CVE-2026-9679](https://cve.now/CVE-2026-9679.md): undici vulnerable to HTTP header injection via Set-Cookie percent-decoding (CVSS 5.9, undici)
- [CVE-2026-9697](https://cve.now/CVE-2026-9697.md): undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent (CVSS 7.4, undici)
- [CVE-2026-53805](https://cve.now/CVE-2026-53805.md): NVIDIA SIL GEN3C Unauthenticated RCE via Pickle Deserialization in Inference API (CVSS 9.3, nv-tlabs GEN3C)
- [CVE-2026-48591](https://cve.now/CVE-2026-48591.md): Stored XSS via unescaped HTML attribute values in earmark (CVSS 4.8, pragdave earmark)
- [CVE-2026-6734](https://cve.now/CVE-2026-6734.md): undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse (CVSS 7.5, undici)
- [CVE-2026-20178](https://cve.now/CVE-2026-20178.md): A vulnerability in the browser-based version of Cisco Webex App could have allowed an unauthenticated, remote attacker to redirect users to (CVSS 4.3, Cisco Webex App)
- [CVE-2026-9675](https://cve.now/CVE-2026-9675.md): undici WebSocket client vulnerable to denial of service via cumulative fragment bypass (CVSS 7.5, undici)
- [CVE-2026-20246](https://cve.now/CVE-2026-20246.md): Cisco Umbrella Virtual Appliance Privilege Escalation Vulnerability (CVSS 6.0, Cisco Umbrella Insights Virtual Appliance)
- [CVE-2026-20220](https://cve.now/CVE-2026-20220.md): Cisco Crosswork Network Controller Remote Code Execution Vulnerability (CVSS 6.3, Cisco Crosswork Network Change Automation)
- [CVE-2026-20190](https://cve.now/CVE-2026-20190.md): Cisco Identity Services Engine Information Disclosure Vulnerability (CVSS 7.5, Cisco Identity Services Engine Software · Cisco ISE Passive…)
- [CVE-2026-20181](https://cve.now/CVE-2026-20181.md): Cisco Identity Services Engine Remote Code Execution Vulnerability (CVSS 9.1, Cisco Identity Services Engine Software · Cisco ISE Passive…)
- [CVE-2026-12151](https://cve.now/CVE-2026-12151.md): undici WebSocket client vulnerable to denial of service via fragment count bypass (CVSS 7.5, undici)
- [CVE-2026-12515](https://cve.now/CVE-2026-12515.md): Katello: missing repository authorization in content\_uploads exposes cross-product content existence (CVSS 4.3, Red Hat Satellite 6.16 for RHEL · Red Hat Satellite 6.17… +5)
- [CVE-2026-32652](https://cve.now/CVE-2026-32652.md): Dell AIOps Collector versions prior to 1.18.3 contain a "Use of Default Credentials" vulnerability. (CVSS 7.8, Dell AIOps)
- [CVE-2026-1288](https://cve.now/CVE-2026-1288.md): RFA File Parsing Vulnerability in Autodesk Revit (CVSS 5.5, Autodesk Revit)
- [CVE-2025-32748](https://cve.now/CVE-2025-32748.md): Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) a Host Header Injection vulnerability. (CVSS 4.3, Dell PowerFlex rack)
- [CVE-2026-35069](https://cve.now/CVE-2026-35069.md): Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL (CVSS 5.7, Dell PowerFlex)
- [CVE-2026-35068](https://cve.now/CVE-2026-35068.md): Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL (CVSS 3.5, Dell PowerFlex)
- [CVE-2026-53875](https://cve.now/CVE-2026-53875.md): picklescan - Scanning Bypass via Dynamic Eval in scan\_pytorch (CVSS 7.1, picklescan)
- [CVE-2026-53874](https://cve.now/CVE-2026-53874.md): picklescan - Arbitrary Code Execution via Obfuscated eval Call (CVSS 9.3, picklescan)
- [CVE-2026-53873](https://cve.now/CVE-2026-53873.md): picklescan - Arbitrary Code Execution via profile.run() Blocklist Bypass (CVSS 9.3, picklescan)
- [CVE-2026-53872](https://cve.now/CVE-2026-53872.md): picklescan - Arbitrary File Read via Unsafe Pickle Deserialization (CVSS 8.7, picklescan)
- [CVE-2026-3490](https://cve.now/CVE-2026-3490.md): picklescan - Universal Blocklist Bypass via pkgutil.resolve\_name (CVSS 10.0, picklescan)
- [CVE-2025-71325](https://cve.now/CVE-2025-71325.md): picklescan - Detection Bypass via STACK\_GLOBAL Opcode Parsing Logic Flaw (CVSS 9.3, picklescan)
- [CVE-2025-71323](https://cve.now/CVE-2025-71323.md): picklescan - Remote Code Execution via Unblocked ctypes Module (CVSS 9.3, picklescan)
- [CVE-2025-71322](https://cve.now/CVE-2025-71322.md): PickleScan - Unsafe Globals Check Bypass via pty.spawn Function (CVSS 8.7, PickleScan)
- [CVE-2025-71321](https://cve.now/CVE-2025-71321.md): picklescan - Arbitrary File Writing via distutils Module Bypass (CVSS 9.3, picklescan)
- [CVE-2025-71320](https://cve.now/CVE-2025-71320.md): picklescan - Remote Code Execution via Incomplete Disallowed Inputs (CVSS 9.3, picklescan)
- [CVE-2026-35066](https://cve.now/CVE-2026-35066.md): Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control vulnerability. (CVSS 7.1, Dell PowerFlex)
- [CVE-2026-35067](https://cve.now/CVE-2026-35067.md): Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control vulnerability. (CVSS 5.7, Dell PowerFlex)
- [CVE-2026-35162](https://cve.now/CVE-2026-35162.md): Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control vulnerability. (CVSS 4.3, Dell PowerFlex)
- [CVE-2026-35065](https://cve.now/CVE-2026-35065.md): Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) a Missing Authentication for Critical Function vulnerability. (CVSS 8.8, Dell PowerFlex)
- [CVE-2026-10850](https://cve.now/CVE-2026-10850.md): Plane 1.3.1 - Stored XSS in intake issue description\_html (CVSS 6.9, Plane)
- [CVE-2026-32804](https://cve.now/CVE-2026-32804.md): Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Authentication vulnerability. (CVSS 8.1, Dell PowerFlex)
- [CVE-2026-47103](https://cve.now/CVE-2026-47103.md): Python StateMachine 3.0.0 \< 3.2.0 RCE via SCXML eval() Injection (CVSS 9.3, fgmacedo python-statemachine · python-statemachine)
- [CVE-2026-49502](https://cve.now/CVE-2026-49502.md): Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Authentication vulnerability. (CVSS 7.4, Dell PowerFlex)
- [CVE-2026-12528](https://cve.now/CVE-2026-12528.md): 389-ds-base: 389-ds-base: heap-buffer-overflows in \_\_aclp\_\_normalize\_acltxt() (CVSS 5.4, Red Hat Directory Server · Red Hat Enterprise Linux)
- [CVE-2026-54812](https://cve.now/CVE-2026-54812.md): WordPress Motors plugin \<= 1.4.109 - SQL Injection vulnerability (CVSS 9.3, StylemixThemes Motors)
- [CVE-2026-22283](https://cve.now/CVE-2026-22283.md): Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Inclusion of Functionality from Untrusted Control Sphere vulnerability. (CVSS 7.5, Dell PowerFlex)
- [CVE-2026-54810](https://cve.now/CVE-2026-54810.md): WordPress Nexi XPay plugin \<= 8.3.1 - Broken Access Control vulnerability (CVSS 7.5, Nexi Payments Nexi XPay)
- [CVE-2026-40641](https://cve.now/CVE-2026-40641.md): Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Use of a Broken or Risky Cryptographic Algorithm vulnerability. (CVSS 4.8, Dell PowerFlex)
- [CVE-2026-55748](https://cve.now/CVE-2026-55748.md): OpenStack Horizon before 25.7.4 produces scripts for OpenStack RC file downloading that may have a crafted project name with shell metachara (CVSS 6.0, OpenStack Horizon · horizon)
- [CVE-2024-47477](https://cve.now/CVE-2024-47477.md): Dell PowerFlex Manager, versions prior to 4.5.1.1, contain an improper certificate validation vulnerability. (CVSS 6.5, Dell PowerFlex Manager)
- [CVE-2026-55743](https://cve.now/CVE-2026-55743.md): OpenHuman desktop agent shell tool sandbox bypass leads to arbitrary command execution (CVSS 9.6, tinyhumansai OpenHuman)
- [CVE-2026-54415](https://cve.now/CVE-2026-54415.md): Broken Access Control in Azuriom CMS Server Routes Allows Account Takeover (CVSS 8.1, Azuriom CMS)
- [CVE-2026-11311](https://cve.now/CVE-2026-11311.md): NGINX Gateway Fabric vulnerability (CVSS 8.1, F5 NGINX Gateway Fabric)
- [CVE-2026-48142](https://cve.now/CVE-2026-48142.md): NGINX ngx\_http\_charset\_module vulnerability (CVSS 4.8, F5 NGINX Open Source · F5 NGINX Plus)
- [CVE-2026-42055](https://cve.now/CVE-2026-42055.md): NGINX ngx\_http\_proxy\_v2\_module and ngx\_http\_grpc\_module vulnerability (CVSS 8.1, F5 NGINX Open Source · F5 NGINX Plus)
- [CVE-2026-42530](https://cve.now/CVE-2026-42530.md): NGINX Open-Source ngx\_http\_v3\_module vulnerability (CVSS 8.1, F5 NGINX Open Source)
- [CVE-2026-48117](https://cve.now/CVE-2026-48117.md): DroneAware's Improper Account Activation in Registration and SSO Flows Leads to Account Takeover (CVSS 6.8, fduflyer DroneAware-Node-Releases)
- [CVE-2026-54809](https://cve.now/CVE-2026-54809.md): WordPress GIFT4U plugin \<= 1.0.10 - SQL Injection vulnerability (CVSS 9.3, VillaTheme GIFT4U)
- [CVE-2026-54808](https://cve.now/CVE-2026-54808.md): WordPress WP Travel Gutenberg Blocks plugin \<= 3.9.4 - SQL Injection vulnerability (CVSS 9.3, WP Travel Gutenberg Blocks)
- [CVE-2025-69189](https://cve.now/CVE-2025-69189.md): WordPress JobBank plugin \<= 1.2.3 - Broken Access Control vulnerability (CVSS 7.3, EMV JobBank)
- [CVE-2025-69128](https://cve.now/CVE-2025-69128.md): WordPress JobCareer theme \<= 7.3 - Arbitrary File Deletion vulnerability (CVSS 8.6, EMV JobCareer)
- [CVE-2025-60236](https://cve.now/CVE-2025-60236.md): WordPress Creatify theme \<= 1.5 - PHP Object Injection vulnerability (CVSS 9.8, EMV Creatify)
- [CVE-2025-60231](https://cve.now/CVE-2025-60231.md): WordPress The Hospital theme \<= 1.8.1 - PHP Object Injection vulnerability (CVSS 9.8, EMV The Hospital)
- [CVE-2026-55738](https://cve.now/CVE-2026-55738.md): Stack Buffer Overflow in rxi/microtar raw\_to\_header() via non-null-terminated TAR name field (CVSS 8.8, rxi microtar)
- [CVE-2026-54813](https://cve.now/CVE-2026-54813.md): WordPress SureDash plugin \<= 1.8.0 - SQL Injection vulnerability (CVSS 8.5, Brainstorm Force SureDash)
- [CVE-2026-9591](https://cve.now/CVE-2026-9591.md): Cross-Site Request Forgery (CSRF) in SimplCommerce News Module (CVSS 6.9, SimplCommerce)
- [CVE-2026-54814](https://cve.now/CVE-2026-54814.md): WordPress Motors plugin \<= 1.4.109 - Local File Inclusion vulnerability (CVSS 8.1, StylemixThemes Motors)
- [CVE-2026-54815](https://cve.now/CVE-2026-54815.md): WordPress Cargo Shipping Location for WooCommerce plugin \<= 5.6 - SQL Injection vulnerability (CVSS 9.3, Cargo RD Cargo Shipping Location for WooCommerce)
- [CVE-2026-54816](https://cve.now/CVE-2026-54816.md): WordPress Advanced Ads plugin \<= 2.0.21 - Remote Code Execution (RCE) vulnerability (CVSS 7.5, Monetizemore Advanced Ads)
- [CVE-2026-54817](https://cve.now/CVE-2026-54817.md): WordPress MStore API plugin \<= 4.18.4 - Broken Authentication vulnerability (CVSS 6.5, FluxBuilder MStore API)
- [CVE-2026-54818](https://cve.now/CVE-2026-54818.md): WordPress Slimstat Analytics plugin \<= 5.4.11 - SQL Injection vulnerability (CVSS 8.5, VeronaLabs Slimstat Analytics)
- [CVE-2026-54417](https://cve.now/CVE-2026-54417.md): Integer Overflow in rxi/microtar mtar\_next() Causes Infinite Loop DoS (CVSS 7.5, rxi microtar)
- [CVE-2026-54819](https://cve.now/CVE-2026-54819.md): WordPress Listdom plugin \<= 5.4.0 - SQL Injection vulnerability (CVSS 9.3, Webilia Listdom)
- [CVE-2025-60230](https://cve.now/CVE-2025-60230.md): WordPress The Barber Shop theme \<= 1.9 - PHP Object Injection vulnerability (CVSS 9.8, Themeton The Barber Shop)
- [CVE-2026-10641](https://cve.now/CVE-2026-10641.md): Out-of-bounds write in Bluetooth HFP Hands-Free CIND indicator parsing (cind\_handle\_values) (CVSS 7.1, zephyrproject zephyr)
- [CVE-2025-60229](https://cve.now/CVE-2025-60229.md): WordPress Lagom theme \<= 2.0 - PHP Object Injection vulnerability (CVSS 9.8, Themeton Lagom)
- [CVE-2026-49268](https://cve.now/CVE-2026-49268.md): Apache Shiro: LDAP DN Injection in DefaultLdapRealm (CVSS 8.8, Apache Software Foundation Apache Shiro · org.apache.shiro:…)
- [CVE-2026-52716](https://cve.now/CVE-2026-52716.md): WordPress WorkScout-Core plugin \<= 1.7.11 - Arbitrary File Deletion vulnerability (CVSS 6.5, purethemes WorkScout-Core)
- [CVE-2026-52707](https://cve.now/CVE-2026-52707.md): WordPress Kastell theme \<= 2.0 - Local File Inclusion vulnerability (CVSS 8.1, Mikado-Themes Kastell)
- [CVE-2026-49108](https://cve.now/CVE-2026-49108.md): WordPress Moderno theme \< 1.43 - PHP Object Injection vulnerability (CVSS 9.8, park\_of\_ideas Moderno)
- [CVE-2026-40757](https://cve.now/CVE-2026-40757.md): WordPress Château theme \<= 1.2.1 - PHP Object Injection vulnerability (CVSS 8.1, Mikado-Themes Château)
- [CVE-2026-40756](https://cve.now/CVE-2026-40756.md): WordPress Zoya theme \<= 1.4 - PHP Object Injection vulnerability (CVSS 8.1, Mikado-Themes Zoya)
- [CVE-2026-40752](https://cve.now/CVE-2026-40752.md): WordPress Manufaktur Solutions theme \<= 1.1.1 - PHP Object Injection vulnerability (CVSS 8.1, Select-Themes Manufaktur Solutions)
- [CVE-2026-40738](https://cve.now/CVE-2026-40738.md): WordPress Eldon theme \<= 1.4.1 - PHP Object Injection vulnerability (CVSS 8.1, Edge-Themes Eldon)
- [CVE-2026-40733](https://cve.now/CVE-2026-40733.md): WordPress ShiftUp theme \<= 1.3 - PHP Object Injection vulnerability (CVSS 8.1, Mikado-Themes ShiftUp)
- [CVE-2026-40720](https://cve.now/CVE-2026-40720.md): WordPress Royal Elementor Addons Pro plugin \< 1.7.1041 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Royal Elementor Addons Pro)
- [CVE-2026-39590](https://cve.now/CVE-2026-39590.md): WordPress Atomlab theme \<= 2.4.5 - Local File Inclusion vulnerability (CVSS 8.1, ThemeMove Atomlab)
- [CVE-2026-39576](https://cve.now/CVE-2026-39576.md): WordPress SingleMalt theme \<= 1.5 - PHP Object Injection vulnerability (CVSS 8.1, Elated-Themes SingleMalt)
- [CVE-2026-39560](https://cve.now/CVE-2026-39560.md): WordPress Hiroshi theme \<= 1.5.1 - PHP Object Injection vulnerability (CVSS 8.1, Select-Themes Hiroshi)
- [CVE-2026-39559](https://cve.now/CVE-2026-39559.md): WordPress Uppercase theme \< 1.2.2 - Local File Inclusion vulnerability (CVSS 8.1, codesupplyco Uppercase)
- [CVE-2026-39556](https://cve.now/CVE-2026-39556.md): WordPress Konsept theme \<= 1.9 - PHP Object Injection vulnerability (CVSS 8.1, Elated-Themes Konsept)
- [CVE-2026-39523](https://cve.now/CVE-2026-39523.md): WordPress Solene Core plugin \<= 2.3.2 - Local File Inclusion vulnerability (CVSS 8.1, Elated-Themes Solene Core)
- [CVE-2026-39445](https://cve.now/CVE-2026-39445.md): WordPress Alukas theme \< 3.0.0 - PHP Object Injection vulnerability (CVSS 8.1, PressLayouts Alukas)
- [CVE-2026-39442](https://cve.now/CVE-2026-39442.md): WordPress PressMart theme \<= 1.2.26 - PHP Object Injection vulnerability (CVSS 8.1, PressLayouts PressMart)
- [CVE-2025-69175](https://cve.now/CVE-2025-69175.md): WordPress Line Agency theme \<= 1.3.1 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Line Agency)
- [CVE-2025-69174](https://cve.now/CVE-2025-69174.md): WordPress Etude theme \<= 1.6 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Etude)
- [CVE-2025-69170](https://cve.now/CVE-2025-69170.md): WordPress Eventicity theme \<= 1.5 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Eventicity)
- [CVE-2025-69166](https://cve.now/CVE-2025-69166.md): WordPress Gunslinger theme \<= 1.7 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Gunslinger)
- [CVE-2025-69164](https://cve.now/CVE-2025-69164.md): WordPress Skyward theme \<= 1.10 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Skyward)
- [CVE-2025-69158](https://cve.now/CVE-2025-69158.md): WordPress Granola theme \<= 1.13 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Granola)
- [CVE-2025-69157](https://cve.now/CVE-2025-69157.md): WordPress Gamic theme \<= 1.15 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Gamic)
- [CVE-2025-69144](https://cve.now/CVE-2025-69144.md): WordPress Preservation theme \<= 1.10 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Preservation)
- [CVE-2025-69140](https://cve.now/CVE-2025-69140.md): WordPress SweetDate Core plugin \< 1.1.5 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, SeventhQueen SweetDate Core)
- [CVE-2025-69130](https://cve.now/CVE-2025-69130.md): WordPress Entrepreneur - Booking for Small Businesses WordPress Theme theme \< 3.1.5 - PHP Object Injection vulnerability (CVSS 8.8, Pixel Makers Creative Entrepreneur - Booking for Small Busi…)
- [CVE-2025-69127](https://cve.now/CVE-2025-69127.md): WordPress Plumbing theme \<= 1.6 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX Plumbing)
- [CVE-2025-69126](https://cve.now/CVE-2025-69126.md): WordPress Fortius theme \<= 2.3.0 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Fortius)
- [CVE-2025-69123](https://cve.now/CVE-2025-69123.md): WordPress Snow Club theme \<= 1.1 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Snow Club)
- [CVE-2025-69120](https://cve.now/CVE-2025-69120.md): WordPress Dazzle theme \<= 1.0.0 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Dazzle)
- [CVE-2025-69115](https://cve.now/CVE-2025-69115.md): WordPress LuxMed | Medicine & Healthcare Doctor WordPress Theme theme \<= 1.2.2 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX LuxMed | Medicine & Healthcare Doctor WordPress Th…)
- [CVE-2025-69111](https://cve.now/CVE-2025-69111.md): WordPress Reisen theme \<= 1.4.1 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX Reisen)
- [CVE-2025-69106](https://cve.now/CVE-2025-69106.md): WordPress Imba theme \<= 1.5.0 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Imba)
- [CVE-2025-68524](https://cve.now/CVE-2025-68524.md): WordPress Avante theme \< 3.0.5 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, ThemeGoods Avante)
- [CVE-2025-59554](https://cve.now/CVE-2025-59554.md): WordPress Advanced Ads – Tracking plugin \< 3.0.7 - SQL Injection vulnerability (CVSS 9.3, Advanced Ads – Tracking)
- [CVE-2025-15657](https://cve.now/CVE-2025-15657.md): WordPress School Management plugin \<= 93.1.0 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.3, Mojoomla School Management)
- [CVE-2026-54193](https://cve.now/CVE-2026-54193.md): WordPress Fusion Builder plugin \<= 3.15.4 - Arbitrary File Deletion vulnerability (CVSS 7.7, ThemeFusion Fusion Builder)
- [CVE-2025-59872](https://cve.now/CVE-2025-59872.md): HCL ZIE for Web is affetced by an Unrestricted File Upload vulnerability, (CVSS 4.3, HCL Software ZIE)
- [CVE-2026-11975](https://cve.now/CVE-2026-11975.md): Stored Cross-Site Scripting (XSS) in SimplCommerce News Module Admin Interface (CVSS 6.2, SimplCommerce)
- [CVE-2025-62340](https://cve.now/CVE-2025-62340.md): HCL iControl was affected by Inadequate Session Timeout vulnerability (CVSS 3.1, HCL Software iControl)
- [CVE-2024-37496](https://cve.now/CVE-2024-37496.md): WordPress Metro Magazine theme \<= 1.3.7 - Broken Access Control on Notice Dismissal vulnerability (CVSS 4.3, Rara Themes Metro Magazine)
- [CVE-2024-37210](https://cve.now/CVE-2024-37210.md): WordPress AliExpress Dropshipping with AliNext Lite plugin \<= 3.3.5 - Broken Access Control vulnerability (CVSS 6.5, ali2woo AliNext)
- [CVE-2024-35690](https://cve.now/CVE-2024-35690.md): WordPress Widget Options plugin \<= 4.0.1 - Subscriber+ User Meta Data Exposure Vulnerability (CVSS 6.5, MarketingFire Widget Options)
- [CVE-2024-35648](https://cve.now/CVE-2024-35648.md): WordPress Emergency Password Reset plugin \<= 8.0 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, Andy Moyle Emergency Password Reset)
- [CVE-2024-33909](https://cve.now/CVE-2024-33909.md): WordPress iPages Flipbook plugin \<= 1.5.1 - Broken Access Control vulnerability (CVSS 5.3, Avirtum iPages Flipbook)
- [CVE-2024-32949](https://cve.now/CVE-2024-32949.md): WordPress Integrate Google Drive plugin \<= 1.3.8 - Broken Access Control vulnerability (CVSS 8.3, Prince Integrate Google Drive)
- [CVE-2024-32729](https://cve.now/CVE-2024-32729.md): WordPress ChatBot Conversational Forms plugin \<= 1.1.8 - Arbitrary File Download vulnerability (CVSS 7.5, QuantumCloud Conversational Forms for ChatBot)
- [CVE-2026-11858](https://cve.now/CVE-2026-11858.md): Missing authorization in Quanos SCHEMA ST4 Client Update Service allows arbitrary file overwrite as SYSTEM (CVSS 8.4, Quanos Solutions SCHEMA ST4)
- [CVE-2024-24709](https://cve.now/CVE-2024-24709.md): WordPress Shareaholic plugin \<= 9.7.11 - Broken Access Control vulnerability (CVSS 4.3, Shareaholic)
- [CVE-2026-11857](https://cve.now/CVE-2026-11857.md): Insecure .NET Remoting deserialization in Quanos SCHEMA ST4 Client Update Service allows local privilege escalation (CVSS 8.4, Quanos Solutions SCHEMA ST4)
- [CVE-2025-31013](https://cve.now/CVE-2025-31013.md): WordPress Themify Folo theme \<= 1.9.6 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Themify Folo)
- [CVE-2024-31435](https://cve.now/CVE-2024-31435.md): WordPress Social Media Share Buttons & Social Sharing Icons plugin \<= 2.8.6 - Broken Access Control vulnerability (CVSS 4.3, Inisev Social Media & Share Icons)
- [CVE-2024-33685](https://cve.now/CVE-2024-33685.md): WordPress Startupzy theme \<= 1.1.1 - Broken Access Control vulnerability (CVSS 4.3, Jegstudio Startupzy)
- [CVE-2026-10839](https://cve.now/CVE-2026-10839.md): Open redirection vulnerability in Password Manager (CVSS 5.1, Password Manager)
- [CVE-2026-10837](https://cve.now/CVE-2026-10837.md): Open redirection vulnerability in Password Manager (CVSS 5.1, Password Manager)
- [CVE-2026-10836](https://cve.now/CVE-2026-10836.md): Improper neutralization of HTTP headers in Password Manager (CVSS 5.1, Password Manager)
- [CVE-2026-5667](https://cve.now/CVE-2026-5667.md): Information Disclosure, Information Tampering, or Denial-of-Service (DoS) Vulnerability in Multiple Home Appliances (CVSS 7.2, Mitsubishi Electric Room Air Conditioners (for Japan)… +2478)
- [CVE-2024-34810](https://cve.now/CVE-2024-34810.md): WordPress Skyline WP theme \<= 1.0.10 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, Extend Themes Skyline WP)
- [CVE-2026-12491](https://cve.now/CVE-2026-12491.md): Vllm: vllm: image exif rotation & png trns transparency not normalized, causing mismatch between model input and expectations (CVSS 4.8, vllm-project vLLM · Red Hat AI Inference Server +3)
- [CVE-2026-54811](https://cve.now/CVE-2026-54811.md): WordPress WP eMember plugin \< v10.9.4 - SQL Injection vulnerability (CVSS 9.3, Tips and Tricks HQ WP eMember)
- [CVE-2026-54807](https://cve.now/CVE-2026-54807.md): WordPress Registration Form for WooCommerce plugin \<= 1.0.9 - Privilege Escalation vulnerability (CVSS 9.8, ThemeGrill Registration Form for WooCommerce)
- [CVE-2026-54806](https://cve.now/CVE-2026-54806.md): WordPress WP Activity Log plugin \<= 5.6.3.1 - PHP Object Injection vulnerability (CVSS 9.8, Melapress WP Activity Log)
- [CVE-2026-54805](https://cve.now/CVE-2026-54805.md): WordPress Falang multilanguage plugin \<= 1.4.2 - Privilege Escalation vulnerability (CVSS 8.8, sbouey Falang multilanguage)
- [CVE-2026-54804](https://cve.now/CVE-2026-54804.md): WordPress Melhor Envio plugin \<= 2.16.3 - Broken Authentication vulnerability (CVSS 7.6, melhorenvio Melhor Envio)
- [CVE-2026-54803](https://cve.now/CVE-2026-54803.md): WordPress SMS Alert Order Notifications plugin \<= 3.9.4 - Privilege Escalation vulnerability (CVSS 9.8, Cozy Vision Technologies Pvt. SMS Alert Order Notifications)
- [CVE-2026-54802](https://cve.now/CVE-2026-54802.md): WordPress SMS Alert Order Notifications plugin \<= 3.9.3 - Broken Authentication vulnerability (CVSS 7.5, Cozy Vision Technologies Pvt. SMS Alert Order Notifications)
- [CVE-2026-54196](https://cve.now/CVE-2026-54196.md): WordPress JetFormBuilder plugin \<= 3.6.1 - Privilege Escalation vulnerability (CVSS 6.8, Jetmonsters JetFormBuilder)
- [CVE-2026-54195](https://cve.now/CVE-2026-54195.md): WordPress JetFormBuilder plugin \<= 3.6.0.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Jetmonsters JetFormBuilder)
- [CVE-2026-54192](https://cve.now/CVE-2026-54192.md): WordPress Popup box plugin \<= 6.2.9 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Ays Pro Popup box)
- [CVE-2026-54189](https://cve.now/CVE-2026-54189.md): WordPress JetEngine plugin \<= 3.8.10 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Jetimpex JetEngine)
- [CVE-2026-54188](https://cve.now/CVE-2026-54188.md): WordPress JetEngine plugin \<= 3.8.10 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Jetimpex JetEngine)
- [CVE-2026-54187](https://cve.now/CVE-2026-54187.md): WordPress JetEngine plugin \<= 3.8.10.1 - SQL Injection vulnerability (CVSS 9.3, Jetimpex JetEngine)
- [CVE-2026-54186](https://cve.now/CVE-2026-54186.md): WordPress JobSearch plugin \<= 3.2.9 - SQL Injection vulnerability (CVSS 9.3, eyecix JobSearch)
- [CVE-2026-54185](https://cve.now/CVE-2026-54185.md): WordPress Cornerstone plugin \< 7.8.8 - SQL Injection vulnerability (CVSS 8.5, THEMECO Cornerstone)
- [CVE-2026-54184](https://cve.now/CVE-2026-54184.md): WordPress Clean Login plugin \<= 1.15 - Insecure Direct Object References (IDOR) vulnerability (CVSS 8.2, Alberto Hornero Clean Login)
- [CVE-2026-52706](https://cve.now/CVE-2026-52706.md): WordPress JetEngine plugin \<= 3.8.10 - PHP Object Injection vulnerability (CVSS 9.8, Jetimpex JetEngine)
- [CVE-2026-52705](https://cve.now/CVE-2026-52705.md): WordPress SigmaForms Pro – AI Generated Forms plugin \<= 1.4.5 - Arbitrary File Upload vulnerability (CVSS 9.0, BDthemes SigmaForms Pro – AI Generated Forms)
- [CVE-2026-52698](https://cve.now/CVE-2026-52698.md): WordPress PushEngage – Web Push Notifications, eCommerce Automation & Chat Widget plugin \<= 4.2.3 - Sensitive Data Exposure vulnerability (CVSS 7.4, Syed Balkhi PushEngage – Web Push Notifications, eCommerce…)
- [CVE-2026-52696](https://cve.now/CVE-2026-52696.md): WordPress JetBlog plugin \<= 2.4.8 - Sensitive Data Exposure vulnerability (CVSS 7.5, Jetimpex JetBlog)
- [CVE-2026-49778](https://cve.now/CVE-2026-49778.md): WordPress WPFunnels Pro plugin \<= 2.9.4 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, WPFunnels Pro)
- [CVE-2026-49767](https://cve.now/CVE-2026-49767.md): WordPress wpForo Forum plugin \<= 3.1.0 - Broken Authentication vulnerability (CVSS 9.8, Tomdever wpForo Forum)
- [CVE-2026-49107](https://cve.now/CVE-2026-49107.md): WordPress Thrive Apprentice plugin \< 10.8.10.2 - PHP Object Injection vulnerability (CVSS 9.8, Thrive Themes Thrive Apprentice)
- [CVE-2026-49084](https://cve.now/CVE-2026-49084.md): WordPress JetEngine plugin \< 3.8.9.1 - SQL Injection vulnerability (CVSS 9.3, Jetimpex JetEngine)
- [CVE-2026-49081](https://cve.now/CVE-2026-49081.md): WordPress User Registration Stripe plugin \<= 1.3.12 - Broken Access Control vulnerability (CVSS 8.2, ThemeGrill User Registration Stripe)
- [CVE-2026-49079](https://cve.now/CVE-2026-49079.md): WordPress JetSearch plugin \<= 3.5.17 - SQL Injection vulnerability (CVSS 9.3, Jetimpex JetSearch)
- [CVE-2026-49076](https://cve.now/CVE-2026-49076.md): WordPress JetEngine plugin \<= 3.8.9.1 - SQL Injection vulnerability (CVSS 9.3, Crocoblock JetEngine)
- [CVE-2026-49075](https://cve.now/CVE-2026-49075.md): WordPress JetEngine plugin \<= 3.8.9.1 - PHP Object Injection vulnerability (CVSS 9.8, Jetimpex JetEngine)
- [CVE-2026-49074](https://cve.now/CVE-2026-49074.md): WordPress JetEngine plugin \<= 3.8.9.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Jetimpex JetEngine)
- [CVE-2026-49072](https://cve.now/CVE-2026-49072.md): WordPress WooCommerce Anti-Fraud plugin \<= 7.2.6 - Broken Access Control vulnerability (CVSS 6.5, OPMC WooCommerce Anti-Fraud)
- [CVE-2026-49071](https://cve.now/CVE-2026-49071.md): WordPress WooCommerce Dropshipping plugin \<= 5.2.4 - Broken Authentication vulnerability (CVSS 6.5, OPMC WooCommerce Dropshipping)
- [CVE-2026-49058](https://cve.now/CVE-2026-49058.md): WordPress LoginPress Pro plugin \<= 6.2.2 - Privilege Escalation vulnerability (CVSS 9.8, LoginPress Pro)
- [CVE-2026-48967](https://cve.now/CVE-2026-48967.md): WordPress Geo Mashup plugin \<= 1.13.19 - SQL Injection vulnerability (CVSS 8.5, Dylan Kuhn Geo Mashup)
- [CVE-2026-48875](https://cve.now/CVE-2026-48875.md): WordPress JetSmartFilters plugin \<= 3.8.1 - SQL Injection vulnerability (CVSS 9.3, Jetimpex JetSmartFilters)
- [CVE-2026-45436](https://cve.now/CVE-2026-45436.md): WordPress WPBakery Page Builder plugin \<= 8.7.2 - Broken Access Control vulnerability (CVSS 6.5, Rain-Task WPBakery Page Builder)
- [CVE-2026-42629](https://cve.now/CVE-2026-42629.md): WordPress PowerPack Pro for Elementor plugin \< v2.13.0 - Broken Authentication vulnerability (CVSS 8.8, Powerpackelements PowerPack Pro for Elementor)
- [CVE-2026-42385](https://cve.now/CVE-2026-42385.md): WordPress Profile Builder Pro plugin \<= 3.15.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Cozmoslabs Profile Builder Pro)
- [CVE-2026-42380](https://cve.now/CVE-2026-42380.md): WordPress AI Lab theme \< 5.4.2 - PHP Object Injection vulnerability (CVSS 9.8, jwsthemes AI Lab)
- [CVE-2026-41557](https://cve.now/CVE-2026-41557.md): WordPress Kapee theme \< 1.7.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, PressLayouts Kapee)
- [CVE-2026-40783](https://cve.now/CVE-2026-40783.md): WordPress Blocksy Companion Pro plugin \<= 2.1.37 - Remote Code Execution (RCE) vulnerability (CVSS 9.9, Creative Themes Blocksy Companion Pro)
- [CVE-2026-40768](https://cve.now/CVE-2026-40768.md): WordPress Salon booking system plugin \<= 10.30.24 - Insecure Direct Object References (IDOR) vulnerability (CVSS 7.3, Dimitri Grassi Salon booking system)
- [CVE-2026-40765](https://cve.now/CVE-2026-40765.md): WordPress collectchat plugin \<= 2.4.9 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, collectchat)
- [CVE-2026-40753](https://cve.now/CVE-2026-40753.md): WordPress EasyMeals theme \<= 1.5.1 - PHP Object Injection vulnerability (CVSS 8.1, Mikado-Themes EasyMeals)
- [CVE-2026-40749](https://cve.now/CVE-2026-40749.md): WordPress Charity Zone theme \<= 1.1.1 - Arbitrary File Upload vulnerability (CVSS 9.9, themagnifico52 Charity Zone)
- [CVE-2026-40748](https://cve.now/CVE-2026-40748.md): WordPress Kids Gift Shop theme \<= 0.5.4 - Arbitrary File Upload vulnerability (CVSS 9.9, themagnifico52 Kids Gift Shop)
- [CVE-2026-40747](https://cve.now/CVE-2026-40747.md): WordPress Ecommerce Zone theme \<= 0.9.7 - Arbitrary File Upload vulnerability (CVSS 9.9, themagnifico52 Ecommerce Zone)
- [CVE-2026-40746](https://cve.now/CVE-2026-40746.md): WordPress Restaurant Zone theme \<= 0.7.8 - Arbitrary File Upload vulnerability (CVSS 9.9, themagnifico52 Restaurant Zone)
- [CVE-2026-40735](https://cve.now/CVE-2026-40735.md): WordPress Reina theme \<= 2.1 - PHP Object Injection vulnerability (CVSS 8.1, Edge-Themes Reina)
- [CVE-2026-40731](https://cve.now/CVE-2026-40731.md): WordPress ChapterOne theme \<= 1.7 - Local File Inclusion vulnerability (CVSS 8.1, Mikado-Themes ChapterOne)
- [CVE-2026-40726](https://cve.now/CVE-2026-40726.md): WordPress User Registration Stripe plugin \<= 1.3.14 - Broken Access Control vulnerability (CVSS 8.2, ThemeGrill User Registration Stripe)
- [CVE-2026-40725](https://cve.now/CVE-2026-40725.md): WordPress WooCommerce Product Filters plugin \< 2.0.6 - PHP Object Injection vulnerability (CVSS 9.8, Barn2 Media WooCommerce Product Filters)
- [CVE-2026-40724](https://cve.now/CVE-2026-40724.md): WordPress Client Portal (Pro) plugin \<= 5.6.2 - Arbitrary File Download vulnerability (CVSS 6.5, Client Portal)
- [CVE-2026-40723](https://cve.now/CVE-2026-40723.md): WordPress Bricks Builder theme \<= 2.1.4 - Broken Access Control vulnerability (CVSS 4.3, Bricks Builder)
- [CVE-2026-40721](https://cve.now/CVE-2026-40721.md): WordPress Element Pack Pro plugin \<= 9.0.6 - Local File Inclusion vulnerability (CVSS 7.5, BdThemes Element Pack Pro)
- [CVE-2026-39597](https://cve.now/CVE-2026-39597.md): WordPress WPZOOM Addons for Elementor plugin \<= 1.3.4 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, WPZOOM Addons for Elementor)
- [CVE-2026-39596](https://cve.now/CVE-2026-39596.md): WordPress Blocksy Companion Pro plugin \< 2.1.29 - SQL Injection vulnerability (CVSS 9.3, Creative Themes Blocksy Companion Pro)
- [CVE-2026-39595](https://cve.now/CVE-2026-39595.md): WordPress W3 Total Cache plugin \<= 2.9.1 - Broken Access Control vulnerability (CVSS 4.7, BoldGrid W3 Total Cache)
- [CVE-2026-39589](https://cve.now/CVE-2026-39589.md): WordPress Webenvo theme \<= 0.0.6 - Arbitrary File Upload vulnerability (CVSS 9.9, A WP Life Webenvo)
- [CVE-2026-39582](https://cve.now/CVE-2026-39582.md): WordPress Hitek theme \< 1.8.3 - Local File Inclusion vulnerability (CVSS 8.1, xtemos Hitek)
- [CVE-2026-39573](https://cve.now/CVE-2026-39573.md): WordPress Mildhill theme \<= 1.5 - PHP Object Injection vulnerability (CVSS 8.1, Select-Themes Mildhill)
- [CVE-2026-39558](https://cve.now/CVE-2026-39558.md): WordPress Malmö theme \<= 2.2 - Local File Inclusion vulnerability (CVSS 8.1, Elated-Themes Malmö)
- [CVE-2026-39546](https://cve.now/CVE-2026-39546.md): WordPress MultiLoca plugin \<= 4.2.15 - Privilege Escalation vulnerability (CVSS 7.6, Techspawn MultiLoca)
- [CVE-2026-39545](https://cve.now/CVE-2026-39545.md): WordPress Zermatt theme \<= 1.6.1 - PHP Object Injection vulnerability (CVSS 8.1, Select-Themes Zermatt)
- [CVE-2026-39537](https://cve.now/CVE-2026-39537.md): WordPress Mikado Core plugin \<= 1.6 - Local File Inclusion vulnerability (CVSS 8.1, Mikado-Themes Mikado Core)
- [CVE-2026-34888](https://cve.now/CVE-2026-34888.md): WordPress Bricksforge plugin \<= 3.1.8.4 - Sensitive Data Exposure vulnerability (CVSS 7.5, Bricksforge)
- [CVE-2026-27410](https://cve.now/CVE-2026-27410.md): WordPress Slimstat Analytics plugin \< 5.4.0 - Deserialization of untrusted data vulnerability (CVSS 6.5, VeronaLabs Slimstat Analytics)
- [CVE-2026-27400](https://cve.now/CVE-2026-27400.md): WordPress BookPro plugin \<= 1.1.0 - Arbitrary File Deletion vulnerability (CVSS 8.6, Ovatheme BookPro)
- [CVE-2026-27041](https://cve.now/CVE-2026-27041.md): WordPress Unlimited Elements for Elementor (Premium) plugin \<= 2.0.6 - Arbitrary File Upload vulnerability (CVSS 9.9, Studio Keren Aga Unlimited Elements for Elementor)
- [CVE-2026-25446](https://cve.now/CVE-2026-25446.md): WordPress WishList Member X plugin \<= 3.29.0 - Arbitrary File Upload vulnerability (CVSS 9.9, WishList Products, LLC. WishList Member X)
- [CVE-2026-25439](https://cve.now/CVE-2026-25439.md): WordPress Booknetic plugin \< 5.10.3 - Broken Authentication vulnerability (CVSS 8.1, Booknetic)
- [CVE-2026-24611](https://cve.now/CVE-2026-24611.md): WordPress MetForm Pro plugin \<= 3.9.1 - Broken Access Control vulnerability (CVSS 9.1, WPMet MetForm Pro)
- [CVE-2026-24610](https://cve.now/CVE-2026-24610.md): WordPress MetForm Pro plugin \<= 3.9.1 - Broken Access Control vulnerability (CVSS 4.3, WPMet MetForm Pro)
- [CVE-2026-24575](https://cve.now/CVE-2026-24575.md): WordPress WishList Member X plugin \<= 3.29.0 - Broken Access Control vulnerability (CVSS 4.3, WishList Member X)
- [CVE-2026-22343](https://cve.now/CVE-2026-22343.md): WordPress WordPress Dating Theme theme \<= 11.2.0 - Broken Access Control vulnerability (CVSS 8.6, PremiumPress Limited. WordPress Dating Theme)
- [CVE-2026-22342](https://cve.now/CVE-2026-22342.md): WordPress WordPress Dating Theme theme \<= 11.2.0 - Cross Site Request Forgery (CSRF) to Account Takeover vulnerability (CVSS 8.8, PremiumPress Limited. WordPress Dating Theme)
- [CVE-2026-22340](https://cve.now/CVE-2026-22340.md): WordPress WPJobster theme \<= 6.3.5 - SQL Injection vulnerability (CVSS 9.3, Jobster Marketplace WPJobster)
- [CVE-2026-22339](https://cve.now/CVE-2026-22339.md): WordPress WPJobster theme \<= 6.3.5 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Jobster Marketplace WPJobster)
- [CVE-2026-22338](https://cve.now/CVE-2026-22338.md): WordPress EcoBlue theme \<= 1.15 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX EcoBlue)
- [CVE-2026-22335](https://cve.now/CVE-2026-22335.md): WordPress WooCommerce Frontend Manager – Ultimate plugin \< 6.7.7 - SQL Injection vulnerability (CVSS 8.5, WC Lovers. WooCommerce Frontend Manager – Ultimate)
- [CVE-2026-22334](https://cve.now/CVE-2026-22334.md): WordPress Woocommerce Book Price plugin \<= 1.3 - Arbitrary File Download vulnerability (CVSS 7.5, WPos Woocommerce Book Price)
- [CVE-2026-22332](https://cve.now/CVE-2026-22332.md): WordPress Tutor LMS Pro plugin \<= 3.9.6 - SQL Injection vulnerability (CVSS 9.3, Themeum Tutor LMS Pro)
- [CVE-2026-22331](https://cve.now/CVE-2026-22331.md): WordPress AutoParts theme \<= 1.5.8 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX AutoParts)
- [CVE-2026-22330](https://cve.now/CVE-2026-22330.md): WordPress Right Way theme \<= 4.0 - Local File Inclusion vulnerability (CVSS 8.1, Themeum Right Way)
- [CVE-2026-22329](https://cve.now/CVE-2026-22329.md): WordPress Skillate theme \<= 1.2.10 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Themeum Skillate)
- [CVE-2026-22328](https://cve.now/CVE-2026-22328.md): WordPress Auto Repair theme \<= 22.6 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, VamTam Auto Repair)
- [CVE-2026-22327](https://cve.now/CVE-2026-22327.md): WordPress Restaurt theme \<= 1.0.4 - Arbitrary File Upload vulnerability (CVSS 9.9, Zozothemes Restaurt)
- [CVE-2026-22326](https://cve.now/CVE-2026-22326.md): WordPress Reprizo theme \<= 1.0.8 - Local File Inclusion vulnerability (CVSS 8.1, AxiomThemes Reprizo)
- [CVE-2026-22325](https://cve.now/CVE-2026-22325.md): WordPress Promo theme \<= 1.3.0 - Local File Inclusion vulnerability (CVSS 8.1, AxiomThemes Promo)
- [CVE-2026-9690](https://cve.now/CVE-2026-9690.md): WordPress WP Media folder Addon plugin \<= 4.0.1 - Arbitrary File Download vulnerability (CVSS 7.5, Joomunited WP Media folder Addon)
- [CVE-2025-69179](https://cve.now/CVE-2025-69179.md): WordPress Support Ticket Management System plugin \<= 1.9 - Privilege Escalation vulnerability (CVSS 9.8, Theme passion Support Ticket Management System)
- [CVE-2025-69173](https://cve.now/CVE-2025-69173.md): WordPress Tipsy theme \<= 1.1 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Tipsy)
- [CVE-2025-69172](https://cve.now/CVE-2025-69172.md): WordPress Resurs theme \<= 1.3 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Resurs)
- [CVE-2025-69171](https://cve.now/CVE-2025-69171.md): WordPress Orpheus theme \<= 1.3 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Orpheus)
- [CVE-2025-69161](https://cve.now/CVE-2025-69161.md): WordPress Snowy theme \<= 1.13 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Snowy)
- [CVE-2025-69148](https://cve.now/CVE-2025-69148.md): WordPress Quirky theme \<= 1.23 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Quirky)
- [CVE-2025-69145](https://cve.now/CVE-2025-69145.md): WordPress Gat theme \<= 1.16 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Gat)
- [CVE-2025-69138](https://cve.now/CVE-2025-69138.md): WordPress Genemy theme \<= 1.6.6 - Privilege Escalation vulnerability (CVSS 8.8, Jthemes Genemy)
- [CVE-2025-69135](https://cve.now/CVE-2025-69135.md): WordPress Events Schedule - WordPress Events Calendar Plugin plugin \<= 2.7.2 - SQL Injection vulnerability (CVSS 8.5, CurlyThemes Events Schedule - WordPress Events Calendar Plu…)
- [CVE-2025-69129](https://cve.now/CVE-2025-69129.md): WordPress WordPress & WooCommerce Scraper Plugin, Import Data from Any Site plugin \<= 1.0.7 - Arbitrary File Upload vulnerability (CVSS 10.0, Extendons WordPress & WooCommerce Scraper Plugin, Import Da…)
- [CVE-2025-69117](https://cve.now/CVE-2025-69117.md): WordPress Ingenioso theme \<= 1.14.0 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Ingenioso)
- [CVE-2025-69110](https://cve.now/CVE-2025-69110.md): WordPress AirSupply theme \<= 2.0.0 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX AirSupply)
- [CVE-2025-60223](https://cve.now/CVE-2025-60223.md): WordPress WPBot Pro Wordpress Chatbot plugin \<= 13.6.5 - Arbitrary File Deletion vulnerability (CVSS 7.7, QuantumCloud WPBot Pro Wordpress Chatbot)
- [CVE-2025-60218](https://cve.now/CVE-2025-60218.md): WordPress PT Luxa Addons Plugin \<= 1.2.2 - Arbitrary File Upload Vulnerability (CVSS 9.9, WPLocker PT Luxa Addons)
- [CVE-2025-60205](https://cve.now/CVE-2025-60205.md): WordPress ThemeREX Addons plugin \<= 2.36.1.1 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX Group ThemeREX Addons)
- [CVE-2025-59563](https://cve.now/CVE-2025-59563.md): WordPress Sonaar theme \<= 4.27.4 - Privilege Escalation vulnerability (CVSS 8.8, SONAAR MUSIC Sonaar)
- [CVE-2025-59560](https://cve.now/CVE-2025-59560.md): WordPress Sonaar theme \<= 4.27.4 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, SONAAR MUSIC Sonaar)
- [CVE-2025-58954](https://cve.now/CVE-2025-58954.md): WordPress HomeRoofer theme \<= 2.11.0 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX HomeRoofer)
- [CVE-2025-58953](https://cve.now/CVE-2025-58953.md): WordPress Joly theme \<= 1.22.0 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Joly)
- [CVE-2025-58952](https://cve.now/CVE-2025-58952.md): WordPress Neuronet theme \< 1.14.0 - Local File Inclusion vulnerability (CVSS 8.1, ThemeREX Neuronet)
- [CVE-2025-49403](https://cve.now/CVE-2025-49403.md): WordPress Premium Age Verification / Restriction for WordPress Plugin \<= 3.0.2 - Arbitrary File Download Vulnerability (CVSS 7.5, AA-Team Premium Age Verification / Restriction for WordPress)
- [CVE-2024-52488](https://cve.now/CVE-2024-52488.md): WordPress Grip theme \<= 1.0.9 - Arbitrary Plugin Activation/Deactivation to RCE vulnerability (CVSS 9.9, Zidithemes Grip)
- [CVE-2024-49269](https://cve.now/CVE-2024-49269.md): WordPress my flatonica theme \<= 0.0.8 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Mythemes my flatonica)
- [CVE-2026-12165](https://cve.now/CVE-2026-12165.md): Contest Gallery \<= 30.0.2 - Authenticated (Author+) Privilege Escalation via 'RegistryUserRole' Parameter (CVSS 8.8, contest-gallery Contest Gallery – Upload & Vote Photos, Med…)
- [CVE-2026-12115](https://cve.now/CVE-2026-12115.md): Counter Box \<= 2.0.13 - Authenticated (Administrator+) PHP Object Injection via Import (CVSS 6.6, wpcalc Counter Box – Add Countdowns, Timers & Dynamic Count…)
- [CVE-2026-47340](https://cve.now/CVE-2026-47340.md): Apache DolphinScheduler: An incorrect authorization vulnerability allows authenticated users to access alert instances associated with alert groups they do not have permission to access. (CVSS 6.5, Apache Software Foundation Apache DolphinScheduler · org.ap…)
- [CVE-2026-32967](https://cve.now/CVE-2026-32967.md): Apache DolphinScheduler: The \`/v2\` experimental interface lacks permission checks (CVSS 6.5, Apache Software Foundation Apache DolphinScheduler · org.ap…)
- [CVE-2026-42357](https://cve.now/CVE-2026-42357.md): Apache DolphinScheduler: Incorrect Authorization vulnerability allows users to access workflow instance information belonging to projects they do not have permission to access. (CVSS 6.5, Apache Software Foundation Apache DolphinScheduler · org.ap…)
- [CVE-2026-41280](https://cve.now/CVE-2026-41280.md): Apache DolphinScheduler: Incorrect Authorization vulnerability allows users with system login privileges to delete task definitions in unauthorized projects (CVSS 4.9, Apache Software Foundation Apache DolphinScheduler · org.ap…)
- [CVE-2026-32966](https://cve.now/CVE-2026-32966.md): Apache DolphinScheduler: DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata Disclosure (CVSS 7.5, Apache Software Foundation Apache DolphinScheduler · org.ap…)
- [CVE-2026-40722](https://cve.now/CVE-2026-40722.md): WordPress Yoast SEO Premium plugin \<= 26.6 - Broken Access Control vulnerability (CVSS 5.5, Yoast BV Yoast SEO Premium)
- [CVE-2026-27869](https://cve.now/CVE-2026-27869.md): WEB SERVICE (HTTP) DENIAL OF SERVICE VIA SLOW HEADERS ON REGESTA SMART HD-PLC OF TELDAT (CVSS 6.9, Teldat Regesta Smart HD-PLC - TLDPH16D2)
- [CVE-2026-27870](https://cve.now/CVE-2026-27870.md): CROSS-SITE SCRIPTING (XSS) VIA MALICIOUS FILE UPLOAD ON REGESTA SMART HD-PLC OF TELDAT (CVSS 4.8, Teldat Regesta Smart HD-PLC - TLDPH16D2)
- [CVE-2026-27868](https://cve.now/CVE-2026-27868.md): PUBLICATION OF SENSITIVE INFORMATION ON REGESTA SMART HD-PLC OF TELDAT (CVSS 6.9, Teldat Regesta Smart HD-PLC - TLDPH16D2)
- [CVE-2026-0063](https://cve.now/CVE-2026-0063.md): In setAllowedCarriers of PhoneInterfaceManager.java, there is a possible way to disable carrier restrictions due to a logic error in the cod (CVSS 10.0, Google Android)
- [CVE-2026-28587](https://cve.now/CVE-2026-28587.md): In MmsSmsProvider of MmsSmsProvider.java, there is a possible way to retrieve sensitive information due to a missing permission check. (CVSS 10.0, Google Android)
- [CVE-2026-28576](https://cve.now/CVE-2026-28576.md): In Contacts Provider, there is a possible way to access the contacts database due to SQL injection. (CVSS 10.0, Android)
- [CVE-2026-28615](https://cve.now/CVE-2026-28615.md): In Telecomm, there is a possible way to initiate an unauthorized phone call due to a permissions bypass. (CVSS 10.0, Google Android)
- [CVE-2026-0083](https://cve.now/CVE-2026-0083.md): In Nfc::eventCallback() of Nfc.h, there is a possible use after free due to a race condition. (CVSS 10.0, Google Android)
- [CVE-2026-0082](https://cve.now/CVE-2026-0082.md): In tryStartActivity of NfcDispatcher.java, there is a possible automatic special app access permission assignment due to an insecure default (CVSS 10.0, Google Android)
- [CVE-2026-12199](https://cve.now/CVE-2026-12199.md): Unauthenticated Denial of Service in nltk.app.wordnet\_app (CVSS 7.5, nltk/nltk)
- [CVE-2026-0081](https://cve.now/CVE-2026-0081.md): In NFC, there is a possible way to spoof an NFC event due to a missing permission check. (CVSS 10.0, Google Android)
- [CVE-2026-0071](https://cve.now/CVE-2026-0071.md): In SettingsLib, there is a possible missing permission check due to a logic error in the code. (CVSS 10.0, Google Android)
- [CVE-2026-28575](https://cve.now/CVE-2026-28575.md): In PackageInstaller.Session#transfer of frameworks/base/services/core/java/com/android/server/pm/PackageInstallerSession.java, there is a po (CVSS 10.0, Google Android)
- [CVE-2026-0064](https://cve.now/CVE-2026-0064.md): In multiple places, there is a possible persistent denial of service due to resource exhaustion. (CVSS 10.0, Google Android)
- [CVE-2026-0092](https://cve.now/CVE-2026-0092.md): In Package Manager, there is a possible device lock controller bypass due to a missing permission check. (CVSS 10.0, Google Android)
- [CVE-2026-8494](https://cve.now/CVE-2026-8494.md): Permalink Manager Lite \<= 2.5.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title (CVSS 6.4, mbis Permalink Manager Lite)
- [CVE-2026-8607](https://cve.now/CVE-2026-8607.md): myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program \<= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrap' Shortcode Attribute (CVSS 6.4, saadiqbal Points Management System For Gamification, Ranks,…)
- [CVE-2026-0068](https://cve.now/CVE-2026-0068.md): In createSessionInternal of PackageInstallerService.java, there is a possible method to remove a DPC app from a managed device without DO co (CVSS 10.0, Google Android)
- [CVE-2026-10094](https://cve.now/CVE-2026-10094.md): Path Traversal vulnerability affecting SOLIDWORKS Visualize from SOLIDWORKS Desktop Release 2024 through SOLIDWORKS Desktop Release 2026 (CVSS 9.8, Dassault Systèmes SOLIDWORKS Visualize)
- [CVE-2026-9570](https://cve.now/CVE-2026-9570.md): Taskbuilder \< 5.0.8 - Reflected XSS via Shortcode (CVSS 7.1, Taskbuilder)
- [CVE-2026-8383](https://cve.now/CVE-2026-8383.md): LearnPress \< 4.3.7 - Unauthenticated Sensitive User Information Disclosure via REST API (CVSS 5.3, LearnPress)
- [CVE-2026-8089](https://cve.now/CVE-2026-8089.md): weMail \< 2.1.3 - Reflected Cross-Site Scripting (CVSS 7.1, weMail: Email Marketing, Email Automation, Newsletters, Sub…)
- [CVE-2026-7850](https://cve.now/CVE-2026-7850.md): WP Magnific Popup \<= 1.0 - Author+ Stored XSS via href Attribute (CVSS 5.9, WP Magnific Popup)
- [CVE-2026-0057](https://cve.now/CVE-2026-0057.md): In Contacts Provider, there is a possible way to access an incoming call's phone number and associated metadata due to a missing permission (CVSS 3.3, Google Android)
- [CVE-2026-0019](https://cve.now/CVE-2026-0019.md): In SettingsLib, there is a possible way to disable system components due to a logic error in the code. (CVSS 7.8, Google Android)
- [CVE-2025-48643](https://cve.now/CVE-2025-48643.md): In multiple locations there is a possible provisioning bypass due to improper input validation. (CVSS 7.8, Google Android)
- [CVE-2025-48640](https://cve.now/CVE-2025-48640.md): In multiple locations, there is a possible 3rd party passkey entry pairing approval due to a missing permission check. (CVSS 8.0, Google Android)
- [CVE-2025-48617](https://cve.now/CVE-2025-48617.md): In overrideConfig of CarrierConfigLoader.java, there is a possible way to bypass UID check due to a permissions bypass. (CVSS 7.8, Google Android)
- [CVE-2025-48571](https://cve.now/CVE-2025-48571.md): In multiple functions of btm\_sec.cc, there is a possible way for an attacker to intercept SMS messages due to a logic error in the code. (CVSS 4.3, Google Android)
- [CVE-2026-53876](https://cve.now/CVE-2026-53876.md): RadiX AX6600 WiFi 6 Tri-Band Gaming Router contains an OS command injection vulnerability, which may lead to arbitrary command execution wit (CVSS 7.2, Micro-Star International Co. RadiX AX6600 WiFi 6 Tri-Band G…)
- [CVE-2026-12360](https://cve.now/CVE-2026-12360.md): JetEngine \<= 3.8.10.1 - Unauthenticated SQL Injection via Listing Grid Load More AJAX Endpoint (CVSS 7.5, Crocoblock JetEngine)
- [CVE-2025-15642](https://cve.now/CVE-2025-15642.md): Netskope Client Service Insufficient Access Controls (CVSS 6.8, Netskope Client)
- [CVE-2026-50203](https://cve.now/CVE-2026-50203.md): Apache Airflow SFTP provider: Path traversal in SFTPHook.retrieve\_directory allows local file write outside the destination directory via malicious server-supplied directory-entry names (CVSS 9.1, Apache Software Foundation Apache Airflow SFTP provider · a…)
- [CVE-2026-12469](https://cve.now/CVE-2026-12469.md): Uninitialized Use in GPU in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to leak cross-origin data via a craft (CVSS 4.3, Google Chrome)
- [CVE-2026-12468](https://cve.now/CVE-2026-12468.md): Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potent (CVSS 8.3, Google Chrome)
- [CVE-2026-12467](https://cve.now/CVE-2026-12467.md): Use after free in Extensions in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to (CVSS 8.3, Google Chrome)
- [CVE-2026-12466](https://cve.now/CVE-2026-12466.md): Heap buffer overflow in WebRTC in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to execute arbitrary code via a (CVSS 8.8, Google Chrome)
- [CVE-2026-12465](https://cve.now/CVE-2026-12465.md): Object lifecycle issue in Metrics in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer proces (CVSS 8.3, Google Chrome)
- [CVE-2026-12464](https://cve.now/CVE-2026-12464.md): Use after free in Browser in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to pot (CVSS 8.3, Google Chrome)
- [CVE-2026-12463](https://cve.now/CVE-2026-12463.md): Inappropriate implementation in Views in Google Chrome on Linux prior to 149.0.7827.155 allowed a remote attacker who had compromised the re (CVSS 4.7, Google Chrome)
- [CVE-2026-12462](https://cve.now/CVE-2026-12462.md): Use after free in Media in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to execu (CVSS 7.5, Google Chrome)
- [CVE-2026-12461](https://cve.now/CVE-2026-12461.md): Out of bounds read in WebRTC in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to obtain potentially sensitive i (CVSS 6.5, Google Chrome)
- [CVE-2026-12460](https://cve.now/CVE-2026-12460.md): Insufficient policy enforcement in File System Access in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised (CVSS 4.2, Google Chrome)
- [CVE-2026-12459](https://cve.now/CVE-2026-12459.md): Inappropriate implementation in Serial in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to inject arbitrary scripts or HTM (CVSS 6.1, Google Chrome)
- [CVE-2026-12458](https://cve.now/CVE-2026-12458.md): Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who convinced a user to engage (CVSS 3.1, Google Chrome)
- [CVE-2026-12457](https://cve.now/CVE-2026-12457.md): Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the render (CVSS 4.2, Google Chrome)
- [CVE-2026-12456](https://cve.now/CVE-2026-12456.md): Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.155 allowed an attacker who convinced a user to install a ma (CVSS 4.2, Google Chrome)
- [CVE-2026-12455](https://cve.now/CVE-2026-12455.md): Use after free in Tab Strip in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who convinced a user to engage in specific UI (CVSS 7.5, Google Chrome)
- [CVE-2026-12454](https://cve.now/CVE-2026-12454.md): Race in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to (CVSS 8.3, Google Chrome)
- [CVE-2026-12453](https://cve.now/CVE-2026-12453.md): Insufficient validation of untrusted input in Input in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised t (CVSS 4.2, Google Chrome)
- [CVE-2026-12452](https://cve.now/CVE-2026-12452.md): Use after free in Downloads in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to potentially exploit heap corrup (CVSS 8.8, Google Chrome)
- [CVE-2026-12451](https://cve.now/CVE-2026-12451.md): Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer pro (CVSS 8.3, Google Chrome)
- [CVE-2026-12450](https://cve.now/CVE-2026-12450.md): Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to obtain potentially sensitive inf (CVSS 6.5, Google Chrome)
- [CVE-2026-12449](https://cve.now/CVE-2026-12449.md): Use after free in Chromoting in Google Chrome on Windows prior to 149.0.7827.155 allowed a local attacker to perform OS-level privilege esca (CVSS 7.8, Google Chrome)
- [CVE-2026-12448](https://cve.now/CVE-2026-12448.md): Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to perform privilege e (CVSS 8.8, Google Chrome)
- [CVE-2026-12447](https://cve.now/CVE-2026-12447.md): Heap buffer overflow in WebRTC in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to execute arbitrary code inside a sandbox (CVSS 8.8, Google Chrome)
- [CVE-2026-12446](https://cve.now/CVE-2026-12446.md): Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to leak cross-origin data via a (CVSS 4.3, Google Chrome)
- [CVE-2026-12445](https://cve.now/CVE-2026-12445.md): Use after free in Extensions in Google Chrome prior to 149.0.7827.155 allowed an attacker who convinced a user to install a malicious extens (CVSS 7.5, Google Chrome)
- [CVE-2026-12444](https://cve.now/CVE-2026-12444.md): Out of bounds read in Chromoting in Google Chrome on Windows prior to 149.0.7827.155 allowed a local attacker to obtain potentially sensitiv (CVSS 5.5, Google Chrome)
- [CVE-2026-12443](https://cve.now/CVE-2026-12443.md): Use after free in Web Authentication in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to execute arbitrary code via a craf (CVSS 8.8, Google Chrome)
- [CVE-2026-12442](https://cve.now/CVE-2026-12442.md): Use after free in Passwords in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to execute arbitrary code via a cr (CVSS 8.8, Google Chrome)
- [CVE-2026-12441](https://cve.now/CVE-2026-12441.md): Use after free in File Input in Google Chrome on Linux prior to 149.0.7827.155 allowed a remote attacker to potentially exploit heap corrupt (CVSS 8.8, Google Chrome)
- [CVE-2026-12440](https://cve.now/CVE-2026-12440.md): Use after free in DigitalCredentials in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to potentially perform a (CVSS 9.6, Google Chrome)
- [CVE-2026-12439](https://cve.now/CVE-2026-12439.md): Use after free in Digital Credentials in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to potentially exploit heap corrupt (CVSS 8.8, Google Chrome)
- [CVE-2026-12438](https://cve.now/CVE-2026-12438.md): Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker who had compromised th (CVSS 8.3, Google Chrome)
- [CVE-2026-12437](https://cve.now/CVE-2026-12437.md): Use after free in WebShare in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer pr (CVSS 8.3, Google Chrome)
- [CVE-2025-15641](https://cve.now/CVE-2025-15641.md): Netskope Client Exposed IOCTL with Insufficient Access Controls (CVSS 6.8, Netskope Client)
- [CVE-2026-55706](https://cve.now/CVE-2026-55706.md): sppp\_pap\_input in sys/net/if\_spppsubr.c in OpenBSD before 076e2b1 allows authentication bypass via certain zero values for lengths. (CVSS 5.8, OpenBSD)
- [CVE-2025-26240](https://cve.now/CVE-2025-26240.md): In JazzCore python-pdfkit 1.0.0, the from\_string method enables the execution of JavaScript code within the context of the server applicatio (CVSS 8.4, pdfkit)
- [CVE-2025-66391](https://cve.now/CVE-2025-66391.md): In Citrix Cloud through 2025-11-10, an account with read-only access can trigger the beginning of a workflow for write operations, e.g., the (CVSS 8.8)
- [CVE-2026-36418](https://cve.now/CVE-2026-36418.md): JimuReport versions 2.3.4 and below are vulnerable to remote code execution due to improper handling of Aviator expressions. (CVSS 9.1)
- [CVE-2026-39199](https://cve.now/CVE-2026-39199.md): snes9x 1.63 allows an out-of-bounds write and denial of service via a crafted .ups file. (CVSS 2.9, Snes9X team Snes9X)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-06-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.