# CVEs published 2026-06-26

353 CVEs were published on June 26, 2026: 42 critical, 137 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2026-56414](https://cve.now/CVE-2026-56414.md): H.VIEW HV-500S6 IP Camera Unrestricted Upload of File with Dangerous Type (CVSS 7.2, H.VIEW HV-500S6 IP Camera)
- [CVE-2026-55975](https://cve.now/CVE-2026-55975.md): H.VIEW HV-500S6 IP Camera OS Command Injection (CVSS 7.2, H.VIEW HV-500S6 IP Camera)
- [CVE-2026-31928](https://cve.now/CVE-2026-31928.md): Daktronics Controller Firmware Use of Hard-coded Credentials (CVSS 8.1, Daktronics VFC-DMP-5000 · Daktronics DMP-5000 +1)
- [CVE-2026-33560](https://cve.now/CVE-2026-33560.md): Daktronics Controller Firmware Unrestricted Upload of File with Dangerous Type (CVSS 7.1, Daktronics VFC-DMP-5000 · Daktronics DMP-5000 +1)
- [CVE-2026-28701](https://cve.now/CVE-2026-28701.md): Daktronics Controller Firmware Path Traversal (CVSS 9.8, Daktronics VFC-DMP-5000 · Daktronics DMP-5000 +1)
- [CVE-2026-49869](https://cve.now/CVE-2026-49869.md): Kestra: Unauthenticated Remote Code Execution via Authentication Bypass in \`AuthenticationFilter\` (CVSS 10.0, KEV, kestra-io kestra)
- [CVE-2026-45807](https://cve.now/CVE-2026-45807.md): Kestra: Path traversal via URL-encoded "%2E%2E" in execution and namespace file endpoints allows arbitrary file read (CVSS 7.7, kestra-io kestra)
- [CVE-2026-49984](https://cve.now/CVE-2026-49984.md): Kestra: Path traversal in \`LocalStorage\` allows any authenticated user to read arbitrary server files via the execution file-download API (\`\\..\\\` bypasses the \`..\` guard) (CVSS 7.7, kestra-io kestra)
- [CVE-2026-53576](https://cve.now/CVE-2026-53576.md): Kestra: Unauthenticated RCE via /configs path-suffix auth-filter bypass (CVSS 10.0, kestra-io kestra)
- [CVE-2026-53577](https://cve.now/CVE-2026-53577.md): Kestra: Cross-Execution File Read via Preview Endpoint (IDOR) (CVSS 6.5, kestra-io kestra)
- [CVE-2026-55069](https://cve.now/CVE-2026-55069.md): Kestra BasicAuth Password Stored as SHA-512 Enables Offline Brute-Force Attack (CVSS 8.7, kestra-io kestra)
- [CVE-2026-54351](https://cve.now/CVE-2026-54351.md): Budibase: Mass Assignment in Webhook Trigger Allows Cross-Workspace Automation Execution via appId Override (CVSS 8.2, budibase · @budibase/server)
- [CVE-2026-54353](https://cve.now/CVE-2026-54353.md): Budibase: Potential SSRF DNS rebinding bypass in outbound fetch validation (CVSS 8.5, budibase · @budibase/backend-core)
- [CVE-2026-54350](https://cve.now/CVE-2026-54350.md): Budibase: Anonymous NoSQL operator injection via published-app query templates (CVSS 10.0, budibase · @budibase/server)
- [CVE-2026-50137](https://cve.now/CVE-2026-50137.md): Budibase: POST /api/attachments/:datasourceId/url is unauthenticated and lets anonymous callers mint S3 PUT pre-signed URLs using stored datasource IAM credentials (CVSS 8.2, budibase · @budibase/server)
- [CVE-2024-23581](https://cve.now/CVE-2024-23581.md): HCL Traveler for Microsoft Outlook (HTMO) is susceptible to an application modification vulnerability (CVSS 6.7, HCLSoftware Traveler for Microsoft Outlook)
- [CVE-2026-50136](https://cve.now/CVE-2026-50136.md): Budibase: Unauthenticated S3 signed upload URL generation allows arbitrary writes with stored datasource credentials (CVSS 7.4, budibase · @budibase/server)
- [CVE-2026-50132](https://cve.now/CVE-2026-50132.md): Budibase: Chat Identity Link Hijacking via Missing Consent & CSRF — Account Impersonation in Budibase (CVSS 7.3, budibase · @budibase/server)
- [CVE-2026-54352](https://cve.now/CVE-2026-54352.md): Budibase: Arbitrary file read by workspace-builder via PWA-zip symlink upload (CVSS 9.6, budibase · @budibase/server)
- [CVE-2026-46604](https://cve.now/CVE-2026-46604.md): Panic decoding image with out-of-bounds strip offset in x/image/tiff in golang.org/x/image (CVSS 7.5, golang.org/x/image/tiff · golang.org/x/image)
- [CVE-2026-48770](https://cve.now/CVE-2026-48770.md): Notepad++ WM\_COPYDATA COPYDATA\_FULL\_CMDLINE local DoS crash (CVSS 5.0, notepad-plus-plus)
- [CVE-2026-48778](https://cve.now/CVE-2026-48778.md): Notepad++: Arbitrary Code Execution via config.xml commandLineInterpreter (CVSS 7.8, notepad-plus-plus)
- [CVE-2026-52885](https://cve.now/CVE-2026-52885.md): Notepad++ TOCTOU: HMAC Checks Disk, Executes from Memory (CVSS 7.5, notepad-plus-plus)
- [CVE-2026-46710](https://cve.now/CVE-2026-46710.md): Notepad++: Privilege Escalation in the Installer via Uncontrolled Executable Search Path (CVSS 7.5, notepad-plus-plus)
- [CVE-2026-48800](https://cve.now/CVE-2026-48800.md): Notepad++: Arbitrary Code Execution via shortcuts.xml UserCommand Injection (CVSS 7.8, notepad-plus-plus)
- [CVE-2026-52884](https://cve.now/CVE-2026-52884.md): Notepad++: CVE-2026-48800 Bypass (CVSS 7.8, notepad-plus-plus)
- [CVE-2026-55188](https://cve.now/CVE-2026-55188.md): RustFS: ListRemoteTargetHandler authorization bypass leaks replication target credentials (CVSS 8.2, rustfs)
- [CVE-2026-49991](https://cve.now/CVE-2026-49991.md): RustFS Snowball Auto-Extract: Path Traversal allows cross-bucket object injection (CVSS 8.6, rustfs)
- [CVE-2026-55189](https://cve.now/CVE-2026-55189.md): RustFS: FTP frontend skips IAM authorization on object reads (CVSS 7.7, rustfs)
- [CVE-2026-55838](https://cve.now/CVE-2026-55838.md): RustFS: Missing admin authorization on /rustfs/admin/v3/metrics allows any authenticated user to read server metrics (CVSS 4.3, rustfs)
- [CVE-2026-32833](https://cve.now/CVE-2026-32833.md): Cudy LT300 3.0 OS Command Injection via NTP Configuration (CVSS 8.7, Shenzhen Cudy Technology Co. LT300)
- [CVE-2026-44733](https://cve.now/CVE-2026-44733.md): OpenProject: Business Logic Error on OpenProject through PATCH request to /api/v3/users/me permits to bypass password requirements (CVSS 5.9, opf openproject)
- [CVE-2026-44731](https://cve.now/CVE-2026-44731.md): OpenProject: Improper Access Control on OpenProject through /projects/\[projectName\]/meetings via "invited\_user\_id" in GET parameter "filters" leads to user names disclosure (CVSS 4.3, opf openproject)
- [CVE-2026-53324](https://cve.now/CVE-2026-53324.md): net: mana: Use pci\_name() for debugfs directory naming (no CVSS, Linux)
- [CVE-2026-53323](https://cve.now/CVE-2026-53323.md): net: dsa: remove redundant netdev\_lock\_ops() from conduit ethtool ops (no CVSS, Linux)
- [CVE-2026-53322](https://cve.now/CVE-2026-53322.md): vfio/pci: Clean up DMABUFs before disabling function (CVSS 8.8, Linux)
- [CVE-2026-53321](https://cve.now/CVE-2026-53321.md): io\_uring/napi: cap busy\_poll\_to 10 msec (no CVSS, Linux)
- [CVE-2026-53320](https://cve.now/CVE-2026-53320.md): nilfs2: reject zero bd\_oblocknr in nilfs\_ioctl\_mark\_blocks\_dirty() (no CVSS, Linux)
- [CVE-2026-53319](https://cve.now/CVE-2026-53319.md): blk-wbt: remove WARN\_ON\_ONCE from wbt\_init\_enable\_default() (no CVSS, Linux)
- [CVE-2026-53318](https://cve.now/CVE-2026-53318.md): wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925\_tx\_check\_aggr() (no CVSS, Linux)
- [CVE-2026-53317](https://cve.now/CVE-2026-53317.md): wifi: mt76: mt7921: Place upper limit on station AID (no CVSS, Linux)
- [CVE-2026-53316](https://cve.now/CVE-2026-53316.md): drm/amd/ras: Fix NULL deref in ras\_core\_ras\_interrupt\_detected() (no CVSS, Linux)
- [CVE-2026-53315](https://cve.now/CVE-2026-53315.md): drm/amd/ras: Fix NULL deref in ras\_core\_get\_utc\_second\_timestamp() (no CVSS, Linux)
- [CVE-2026-53314](https://cve.now/CVE-2026-53314.md): padata: Put CPU offline callback in ONLINE section to allow failure (no CVSS, Linux)
- [CVE-2026-53313](https://cve.now/CVE-2026-53313.md): drm/amd/display: Avoid NULL dereference in dc\_dmub\_srv error paths (no CVSS, Linux)
- [CVE-2026-53312](https://cve.now/CVE-2026-53312.md): iommu/riscv: Remove overflows on the invalidation path (no CVSS, Linux)
- [CVE-2026-53311](https://cve.now/CVE-2026-53311.md): fuse: fix uninit-value in fuse\_dentry\_revalidate() (no CVSS, Linux)
- [CVE-2026-53310](https://cve.now/CVE-2026-53310.md): soc/tegra: cbb: Fix cross-fabric target timeout lookup (no CVSS, Linux)
- [CVE-2026-53309](https://cve.now/CVE-2026-53309.md): ocfs2/dlm: fix off-by-one in dlm\_match\_regions() region comparison (CVSS 9.8, Linux)
- [CVE-2026-53308](https://cve.now/CVE-2026-53308.md): power: supply: max77705: Free allocated workqueue and fix removal order (no CVSS, Linux)
- [CVE-2026-53307](https://cve.now/CVE-2026-53307.md): pinctrl: pinconf-generic: Fully validate 'pinmux' property (no CVSS, Linux)
- [CVE-2026-53306](https://cve.now/CVE-2026-53306.md): tty: hvc\_iucv: fix off-by-one in number of supported devices (no CVSS, Linux)
- [CVE-2026-53305](https://cve.now/CVE-2026-53305.md): usb: typec: ps883x: Fix Oops at unbind (no CVSS, Linux)
- [CVE-2026-53304](https://cve.now/CVE-2026-53304.md): scsi: sg: Resolve soft lockup issue when opening /dev/sgX (no CVSS, Linux)
- [CVE-2026-53303](https://cve.now/CVE-2026-53303.md): f2fs: protect extension\_list reading with sb\_lock in f2fs\_sbi\_show() (no CVSS, Linux)
- [CVE-2026-53302](https://cve.now/CVE-2026-53302.md): crypto: eip93 - fix hmac setkey algo selection (no CVSS, Linux)
- [CVE-2026-53301](https://cve.now/CVE-2026-53301.md): reset: amlogic: t7: Fix null reset ops (no CVSS, Linux)
- [CVE-2026-53300](https://cve.now/CVE-2026-53300.md): net: enetc: fix NTMP DMA use-after-free issue (CVSS 7.8, Linux)
- [CVE-2026-53299](https://cve.now/CVE-2026-53299.md): net: airoha: Move ndesc initialization at end of airoha\_qdma\_init\_tx() (no CVSS, Linux)
- [CVE-2026-53298](https://cve.now/CVE-2026-53298.md): net: airoha: Move ndesc initialization at end of airoha\_qdma\_init\_rx\_queue() (no CVSS, Linux)
- [CVE-2026-53297](https://cve.now/CVE-2026-53297.md): net: mana: Guard mana\_remove against double invocation (no CVSS, Linux)
- [CVE-2026-53296](https://cve.now/CVE-2026-53296.md): mailbox: mailbox-test: free channels on probe error (no CVSS, Linux)
- [CVE-2026-53295](https://cve.now/CVE-2026-53295.md): mailbox: add sanity check for channel array (no CVSS, Linux)
- [CVE-2026-53294](https://cve.now/CVE-2026-53294.md): mailbox: mailbox-test: don't free the reused channel (no CVSS, Linux)
- [CVE-2026-53293](https://cve.now/CVE-2026-53293.md): drm/amdgpu: fix AMDGPU\_INFO\_READ\_MMR\_REG (no CVSS, Linux)
- [CVE-2026-53292](https://cve.now/CVE-2026-53292.md): net: phonet: do not BUG\_ON() in pn\_socket\_autobind() on failed bind (no CVSS, Linux)
- [CVE-2026-53291](https://cve.now/CVE-2026-53291.md): ALSA: hda/conexant: Fix missing error check for jack detection (no CVSS, Linux)
- [CVE-2026-53290](https://cve.now/CVE-2026-53290.md): drm/xe/eustall: Fix drm\_dev\_put called before stream disable in close (CVSS 7.8, Linux)
- [CVE-2026-53289](https://cve.now/CVE-2026-53289.md): ice: fix NULL pointer dereference in ice\_reset\_all\_vfs() (no CVSS, Linux)
- [CVE-2026-53288](https://cve.now/CVE-2026-53288.md): arm64: Reserve an extra page for early kernel mapping (no CVSS, Linux)
- [CVE-2026-53287](https://cve.now/CVE-2026-53287.md): audit: fix incorrect inheritable capability in CAPSET records (no CVSS, Linux)
- [CVE-2026-53286](https://cve.now/CVE-2026-53286.md): idpf: fix double free and use-after-free in aux device error paths (no CVSS, Linux)
- [CVE-2026-53285](https://cve.now/CVE-2026-53285.md): drm/amd/display: Wrap DCN32 phantom-plane allocation in DC\_RUN\_WITH\_PREEMPTION\_ENABLED (no CVSS, Linux)
- [CVE-2026-53284](https://cve.now/CVE-2026-53284.md): btrfs: only release the dirty pages io tree after successful writes (CVSS 7.5, Linux)
- [CVE-2026-53283](https://cve.now/CVE-2026-53283.md): iommu/amd: Bounds-check devid in \_\_rlookup\_amd\_iommu() (no CVSS, Linux)
- [CVE-2026-53282](https://cve.now/CVE-2026-53282.md): x86/kexec: Push kjump return address even for non-kjump kexec (no CVSS, Linux)
- [CVE-2026-53281](https://cve.now/CVE-2026-53281.md): iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (CVSS 8.8, Linux)
- [CVE-2026-53280](https://cve.now/CVE-2026-53280.md): iommu: Fix NULL group-\>domain dereference in pci\_dev\_reset\_iommu\_done() (no CVSS, Linux)
- [CVE-2026-53279](https://cve.now/CVE-2026-53279.md): drm/gma500/oaktrail\_lvds: fix hang on init failure (no CVSS, Linux)
- [CVE-2026-53278](https://cve.now/CVE-2026-53278.md): arm\_mpam: Check whether the config array is allocated before destroying it (no CVSS, Linux)
- [CVE-2026-44732](https://cve.now/CVE-2026-44732.md): OpenProject: IDOR on OpenProject through /api/v3/documents/{id} via PATCH parameter "project\_id" leads to Unauthorized Modification of Resources (CVSS 4.3, opf openproject)
- [CVE-2026-44734](https://cve.now/CVE-2026-44734.md): OpenProject: Improper Access Control on OpenProject through the POST request to /projects/\[PROJECT\_NAME\]/cost\_reports/\[REPORT\_ID\]/rename (CVSS 6.5, opf openproject)
- [CVE-2026-44735](https://cve.now/CVE-2026-44735.md): OpenProject: Shares API Information Disclosure (CVSS 6.5, opf openproject)
- [CVE-2026-29509](https://cve.now/CVE-2026-29509.md): Patool \< 4.0.5 Path Traversal via safe\_extract() Function (CVSS 5.3, wummel patool)
- [CVE-2026-44696](https://cve.now/CVE-2026-44696.md): OpenProject: Stored CSS injection via Sanitize::Config::RELAXED\[:css\] enables phishing overlays and data exfiltration (CVSS 5.7, opf openproject)
- [CVE-2026-49355](https://cve.now/CVE-2026-49355.md): OpenProject: Private work package data disclosure through single meeting agenda item API (CVSS 4.3, opf openproject)
- [CVE-2026-44736](https://cve.now/CVE-2026-44736.md): OpenProject: Relations API Filter Bypasses Visibility Scope, Leaking Cross-Project Work Package Subjects (CVSS 6.5, opf openproject)
- [CVE-2026-46386](https://cve.now/CVE-2026-46386.md): OpenProject: Pre-authentication RCE in openproject/openproject Docker image via default \`SECRET\_KEY\_BASE=OVERWRITE\_ME\` and \`cookies\_serializer = :marshal\` (CVSS 9.9, opf openproject)
- [CVE-2026-52780](https://cve.now/CVE-2026-52780.md): OpenProject: Cache store poisoning leads to Remote Code Execution (RCE) (CVSS 9.6, opf openproject)
- [CVE-2026-52779](https://cve.now/CVE-2026-52779.md): OpenProject: Cross-project authorization bypass allows deleting public Calendar and Team Planner queries from unauthorized projects (CVSS 5.4, opf openproject)
- [CVE-2026-47193](https://cve.now/CVE-2026-47193.md): OpenProject: Journal diff endpoint bypasses object, journal, and field visibility checks (CVSS 7.5, opf openproject)
- [CVE-2026-52781](https://cve.now/CVE-2026-52781.md): OpenProject: Stored XSS on openproject.example.com through /api/v3/projects/{project}/work\_packages via POST parameter "description" (CVSS 6.4, opf openproject)
- [CVE-2026-52782](https://cve.now/CVE-2026-52782.md): OpenProject: IDOR through /projects/\<A\>/settings/project\_storages/\<A\_ps\_id\> via PATCH parameter "storages\_project\_storage\[project\_folder\_id\]" leads to Access to Unauthorized Resources (CVSS 9.9, opf openproject)
- [CVE-2026-52783](https://cve.now/CVE-2026-52783.md): OpenProject: Information Disclosure (cleartext storage of data) on localhost through memcached via Others "storage.\<id\>.httpx\_access\_token" leads to Sensitive Data Exposure (CVSS 8.2, opf openproject)
- [CVE-2026-52784](https://cve.now/CVE-2026-52784.md): OpenProject: CSRF on TARGET through /users/:id via POST parameter "user\[admin\]" (CVSS 8.8, opf openproject)
- [CVE-2026-52785](https://cve.now/CVE-2026-52785.md): OpenProject: SQL injection in timestamps functionality (CVSS 9.9, opf openproject)
- [CVE-2026-13372](https://cve.now/CVE-2026-13372.md): Incorrect link resolution by display name in the custom PowerShell VPN editor in Devolutions Remote Desktop Manager 2026.2.5 through 2026.2. (CVSS 7.2, Devolutions Remote Desktop Manager)
- [CVE-2026-54753](https://cve.now/CVE-2026-54753.md): Nx: \`nx graph\` dev server permissive CORS policy (CVSS 5.9, nrwl nx · nx)
- [CVE-2026-48090](https://cve.now/CVE-2026-48090.md): Envoy HTTP: OAuth2 filter late async token completion after stream teardown (UAF / crash risk) (CVSS 5.9, envoyproxy envoy)
- [CVE-2026-47220](https://cve.now/CVE-2026-47220.md): Envoy: Segmentation fault when using %REQUESTED\_SERVER\_NAME% in log format (CVSS 7.5, envoyproxy envoy)
- [CVE-2026-47205](https://cve.now/CVE-2026-47205.md): Envoy: ext\_authz Use-After-Free during Stream Teardown with Per-Route Overrides (CVSS 5.9, envoyproxy envoy)
- [CVE-2026-47692](https://cve.now/CVE-2026-47692.md): Envoy: PROXY Protocol v2 header generator emits "skipped" TLVs, causing 65 KB attacker-controlled spillover into the upstream application stream (CVSS 4.8, envoyproxy envoy)
- [CVE-2026-47207](https://cve.now/CVE-2026-47207.md): Envoy crashes if multiple unexpected ext\_proc responses are packed into one gRPC message (CVSS 6.5, envoyproxy envoy)
- [CVE-2026-48706](https://cve.now/CVE-2026-48706.md): Envoy Heap Buffer Overflow in TcpStatsdSink (CVSS 5.9, envoyproxy envoy)
- [CVE-2026-47204](https://cve.now/CVE-2026-47204.md): Envoy: grpc\_stats filter segfault on Connect protocol requests to direct\_response routes (CVSS 6.5, envoyproxy envoy)
- [CVE-2026-47221](https://cve.now/CVE-2026-47221.md): Envoy: Null pointer deref in internal redirects (CVSS 5.9, envoyproxy envoy)
- [CVE-2026-48743](https://cve.now/CVE-2026-48743.md): Envoy: HTTP/3 to HTTP/1 request smuggling via headers-only request with nonzero Content-Length (CVSS 7.5, envoyproxy envoy)
- [CVE-2026-48497](https://cve.now/CVE-2026-48497.md): Envoy: Abnormal process termination in DNS UDP filter (CVSS 5.9, envoyproxy envoy)
- [CVE-2026-48044](https://cve.now/CVE-2026-48044.md): Envoy Zstd Decompressor: Ratio Check at Wrong Loop Depth lead to memory explosion (CVSS 7.5, envoyproxy envoy)
- [CVE-2026-48042](https://cve.now/CVE-2026-48042.md): Envoy: Stack overflow in destructor of highly nested JSON (CVSS 7.5, envoyproxy envoy)
- [CVE-2026-47778](https://cve.now/CVE-2026-47778.md): Envoy: Embedded NUL in TLS DNS SAN Truncation in the Default TLS Certificate Validator. (Auth Bypass) (CVSS 4.4, envoyproxy envoy)
- [CVE-2026-47775](https://cve.now/CVE-2026-47775.md): Envoy OAuth2 Filter: Padding Oracle via AES-256-CBC Cookie Decryption (CVSS 6.8, envoyproxy envoy)
- [CVE-2026-33646](https://cve.now/CVE-2026-33646.md): mise: Arbitrary Code Execution via Tera Templates in .tool-versions Files (Trust Bypass) (CVSS 9.6, jdx mise · mise)
- [CVE-2026-55441](https://cve.now/CVE-2026-55441.md): mise: Arbitrary command execution via task-include files in an untrusted, config-less repository (CVSS 8.6, jdx mise · mise)
- [CVE-2026-54557](https://cve.now/CVE-2026-54557.md): mise HTTP backend uses raw version path for install symlink destination (CVSS 5.5, jdx mise · mise)
- [CVE-2026-55448](https://cve.now/CVE-2026-55448.md): mise: Local credential\_command executes untrusted config (CVSS 6.3, jdx mise · mise)
- [CVE-2026-56876](https://cve.now/CVE-2026-56876.md): extract-zip unvalidated symlink path traversal (CVSS 8.1, max-mapper extract-zip · extract-zip)
- [CVE-2026-54341](https://cve.now/CVE-2026-54341.md): Dragonfly: RESTORE operations may crash the server (CVSS 7.5, dragonflydb dragonfly)
- [CVE-2026-47206](https://cve.now/CVE-2026-47206.md): Dragonfly: RESP Protocol Injection via Lua redis.error\_reply() in EvalSerializer (CVSS 2.3, dragonflydb dragonfly)
- [CVE-2026-48529](https://cve.now/CVE-2026-48529.md): GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion (CVSS 6.0, github-mcp-server · github.com/github/github-mcp-server)
- [CVE-2026-55686](https://cve.now/CVE-2026-55686.md): Podman: WORKDIR symlink traversal vulnerability (CVSS 5.3, podman-container-tools podman · github.com/containers/po… +4)
- [CVE-2026-57231](https://cve.now/CVE-2026-57231.md): Podman: Malformed Image can trick podman run into leaking host environment variables into the container (CVSS 7.5, podman-container-tools podman · github.com/containers/li… +6)
- [CVE-2026-54636](https://cve.now/CVE-2026-54636.md): Dokku: OS Command Injection via app.json managed Cron (CVSS 9.0, dokku)
- [CVE-2026-28385](https://cve.now/CVE-2026-28385.md): SSRF via image import from URL allows internal network probing by authenticated users (CVSS 5.0, Canonical lxd)
- [CVE-2026-45405](https://cve.now/CVE-2026-45405.md): Dokku: Arbitrary File Write via Tar Symlink Traversal in git:from-archive and certs:add (CVSS 9.0, dokku)
- [CVE-2026-45406](https://cve.now/CVE-2026-45406.md): Dokku: Host RCE via Maliciously Named OpenResty Include Files Injected Through eval (CVSS 9.0, dokku)
- [CVE-2026-45407](https://cve.now/CVE-2026-45407.md): Dokku: Git Credentials in .netrc Stored World-Readable Due to Premature touch (CVSS 5.0, dokku)
- [CVE-2026-45408](https://cve.now/CVE-2026-45408.md): Dokku: OS Command Injection via App Name in Git Pre-Receive Hook (CVSS 9.0, dokku)
- [CVE-2026-55677](https://cve.now/CVE-2026-55677.md): Echo: Encoded slash (%2F) bypasses route-level protection and exposes static files (CVSS 7.5, labstack echo · github.com/labstack/echo/v4 +2)
- [CVE-2025-32394](https://cve.now/CVE-2025-32394.md): AutoGPT: There is a DoS vulnerability in AITextSummarizerBlock (CVSS 5.3, Significant-Gravitas AutoGPT)
- [CVE-2026-11779](https://cve.now/CVE-2026-11779.md): PayloadCMS 3.84.1 - Authenticated account lockout bypass through default unlock access (CVSS 5.3, PayloadCMS · payload)
- [CVE-2025-32423](https://cve.now/CVE-2025-32423.md): AutoGPT: There is a DoS vulnerability in ExtractTextInformationBlock (CVSS 5.3, Significant-Gravitas AutoGPT)
- [CVE-2026-56663](https://cve.now/CVE-2026-56663.md): AutoGPT: SSRF-to-RCE Chain in \`SendWebRequestBlock\` via IP validation bypass and internal \`pg-meta\` access (CVSS 8.5, Significant-Gravitas AutoGPT)
- [CVE-2026-56823](https://cve.now/CVE-2026-56823.md): AutoGPT: IDOR in Webhook Ping Endpoint Allows Enumeration and Cross-User Ping Triggering (CVSS 5.4, Significant-Gravitas AutoGPT)
- [CVE-2026-13434](https://cve.now/CVE-2026-13434.md): Virt-controller-rhel9: kubevirt: kubevirt: multus default-network annotation injection via unvalidated tenant networkname when externalnetresourceinjection is enabled (CVSS 4.9, Red Hat OpenShift Virtualization)
- [CVE-2026-57518](https://cve.now/CVE-2026-57518.md): Pagekit CMS 1.0.18 Privilege Escalation via UserApiController (CVSS 8.7, pagekit)
- [CVE-2023-20572](https://cve.now/CVE-2023-20572.md): An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authe (CVSS 5.6, AMD Athlon™ 3000 Series Mobile Processors with Radeon™… +15)
- [CVE-2026-9640](https://cve.now/CVE-2026-9640.md): LXD Snapshot Import Privilege Escalation Vulnerability (CVSS 7.2, Canonical LXD)
- [CVE-2026-0828](https://cve.now/CVE-2026-0828.md): Kernel driver vulnerability in Safetica Endpoint Client (CVSS 7.5, Safetica Endpoint Client)
- [CVE-2026-0685](https://cve.now/CVE-2026-0685.md): Server side template inject (SSTI) in Edgewall Genshi Template Engine (CVSS 9.8, Edgewall \*Genshi\* Genshi)
- [CVE-2026-47214](https://cve.now/CVE-2026-47214.md): Docling: Unsafe URI and Path Handling in HTML Backend (CVSS 7.1, docling-project docling · docling)
- [CVE-2023-20540](https://cve.now/CVE-2023-20540.md): An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authe (CVSS 1.8, AMD Ryzen™ 3000 Series Desktop Processors · AMD Ryzen™ 5… +3)
- [CVE-2026-44018](https://cve.now/CVE-2026-44018.md): Docling: Unsafe Archive Extraction and XML Parsing in METS-GBS Backend (CVSS 5.5, docling-project docling · docling)
- [CVE-2025-11919](https://cve.now/CVE-2025-11919.md): Unprotected temporary directories in Wolfram Cloud may result in privilege escalation (CVSS 9.6, Wolfram Research Cloud)
- [CVE-2026-9639](https://cve.now/CVE-2026-9639.md): Authenticated Denial of Service via Malicious Backup Tarball in LXD (CVSS 6.5, Canonical LXD)
- [CVE-2026-12411](https://cve.now/CVE-2026-12411.md): Broken Access Control in Canonical LXD DevLXD API (CVSS 8.4, Canonical lxd)
- [CVE-2026-45195](https://cve.now/CVE-2026-45195.md): GPU DDK - rgxfw\_set\_mips\_fault\_address(&psInit-\>sFaultPhysAddr) is untrusted (CVSS 7.8, Imagination Technologies Graphics DDK)
- [CVE-2026-5757](https://cve.now/CVE-2026-5757.md): There exists an unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine (CVSS 7.5, Ollama AI Ollama)
- [CVE-2026-21734](https://cve.now/CVE-2026-21734.md): GPU DDK - libusc OOB write at TreeRemove during WebGPU shader compilation (CVSS 7.7, Imagination Technologies Graphics DDK)
- [CVE-2026-57667](https://cve.now/CVE-2026-57667.md): WordPress Groundhogg plugin \<= 4.5 - SQL Injection vulnerability (CVSS 8.5, Adrian Tobey Groundhogg)
- [CVE-2026-57665](https://cve.now/CVE-2026-57665.md): WordPress GravityView plugin \<= 3.0.0 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.3, GravityKit GravityView)
- [CVE-2026-57664](https://cve.now/CVE-2026-57664.md): WordPress Bopo – WooCommerce Product Bundle Builder plugin \<= 1.1.6 - Sensitive Data Exposure vulnerability (CVSS 4.3, VillaTheme Bopo – WooCommerce Product Bundle Builder)
- [CVE-2026-57663](https://cve.now/CVE-2026-57663.md): WordPress Recipe Maker For Your Food Blog from Zip Recipes plugin \<= 8.2.7 - SQL Injection vulnerability (CVSS 8.5, Igor Benic Recipe Maker For Your Food Blog from Zip Recipes)
- [CVE-2026-57662](https://cve.now/CVE-2026-57662.md): WordPress Contest Gallery plugin \<= 30.0.0 - SQL Injection vulnerability (CVSS 8.5, Wasiliy Strecker Contest Gallery)
- [CVE-2026-57661](https://cve.now/CVE-2026-57661.md): WordPress WPComplete plugin \<= 2.9.5.5 - Broken Access Control vulnerability (CVSS 5.4, Nexcess WPComplete)
- [CVE-2026-57660](https://cve.now/CVE-2026-57660.md): WordPress Booking and Rental Manager plugin \<= 2.7.1 - Broken Access Control vulnerability (CVSS 5.3, magepeopleteam Booking and Rental Manager)
- [CVE-2026-57659](https://cve.now/CVE-2026-57659.md): WordPress Paid Memberships Pro - Add Member From Admin plugin \<= 0.7.2 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8, Stranger Studios Paid Memberships Pro - Add Member From Adm…)
- [CVE-2026-57658](https://cve.now/CVE-2026-57658.md): WordPress TemplateSpare plugin \<= 4.2.0 - Arbitrary File Upload vulnerability (CVSS 9.1, TemplateSpare)
- [CVE-2026-57657](https://cve.now/CVE-2026-57657.md): WordPress Gmail SMTP plugin \<= 1.2.3.19 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, Noor Alam Gmail SMTP)
- [CVE-2026-57656](https://cve.now/CVE-2026-57656.md): WordPress Hester Core plugin \<= 1.1.8 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, peregrinethemes Hester Core)
- [CVE-2026-57655](https://cve.now/CVE-2026-57655.md): WordPress Child theme Wizard plugin \<= 1.4 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.2, Jay Versluis Child Theme Wizard)
- [CVE-2026-57654](https://cve.now/CVE-2026-57654.md): WordPress Affiliates Manager plugin \<= 2.9.49 - Broken Access Control vulnerability (CVSS 6.5, wp.insider Affiliates Manager)
- [CVE-2026-57653](https://cve.now/CVE-2026-57653.md): WordPress WP Job Portal plugin \<= 2.5.2 - SQL Injection vulnerability (CVSS 8.5, wpjobportal WP Job Portal)
- [CVE-2026-57652](https://cve.now/CVE-2026-57652.md): WordPress JS Help Desk plugin \<= 3.1.0 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.3, JoomSky JS Help Desk)
- [CVE-2026-57651](https://cve.now/CVE-2026-57651.md): WordPress Ghost Kit plugin \<= 3.6.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, nK Ghost Kit)
- [CVE-2026-57650](https://cve.now/CVE-2026-57650.md): WordPress Magazine Blocks plugin \<= 1.8.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, BlockArt Magazine Blocks)
- [CVE-2026-57649](https://cve.now/CVE-2026-57649.md): WordPress Shoppable Images Lite plugin \<= 1.3 - Broken Access Control vulnerability (CVSS 4.3, studiowombat Shoppable Images Lite)
- [CVE-2026-57648](https://cve.now/CVE-2026-57648.md): WordPress Nelio Content plugin \<= 4.3.4 - Broken Access Control vulnerability (CVSS 4.3, Nelio Software Nelio Content)
- [CVE-2026-57647](https://cve.now/CVE-2026-57647.md): WordPress Panorama Viewer – 360 Degree Image + Video Viewer plugin \<= 1.6.1 - Local File Inclusion vulnerability (CVSS 7.5, bPlugins Panorama Viewer – 360 Degree Image + Video Viewer)
- [CVE-2026-57646](https://cve.now/CVE-2026-57646.md): WordPress Majestic Support plugin \<= 1.1.7 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.4, Majestic Support)
- [CVE-2026-57645](https://cve.now/CVE-2026-57645.md): WordPress Newsletters plugin \<= 4.13 - Broken Access Control vulnerability (CVSS 8.1, Tribulant Software Newsletters)
- [CVE-2026-57644](https://cve.now/CVE-2026-57644.md): WordPress Restaurant Menu by MotoPress plugin \<= 2.4.10 - SQL Injection vulnerability (CVSS 8.5, jetmonsters Restaurant Menu by MotoPress)
- [CVE-2026-57643](https://cve.now/CVE-2026-57643.md): WordPress WP Post Author plugin \<= 3.9.1 - SQL Injection vulnerability (CVSS 8.5, AF themes WP Post Author)
- [CVE-2026-57642](https://cve.now/CVE-2026-57642.md): WordPress Gallery plugin \<= 4.7.8 - SQL Injection vulnerability (CVSS 8.5, bestwebsoft Gallery)
- [CVE-2026-57641](https://cve.now/CVE-2026-57641.md): WordPress Real Estate 7 theme \<= 3.5.9 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 6.5, Contempoinc Real Estate)
- [CVE-2026-57640](https://cve.now/CVE-2026-57640.md): WordPress MasterStudy LMS plugin \<= 3.7.30 - Broken Access Control vulnerability (CVSS 4.3, Stylemix MasterStudy LMS)
- [CVE-2026-57638](https://cve.now/CVE-2026-57638.md): WordPress Fluent Booking plugin \<= 2.1.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, WPManageNinja Fluent Booking)
- [CVE-2026-57637](https://cve.now/CVE-2026-57637.md): WordPress Abandoned Cart Lite for WooCommerce plugin \<= 6.8.0 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, tychesoftwares Abandoned Cart Lite for WooCommerce)
- [CVE-2026-57636](https://cve.now/CVE-2026-57636.md): WordPress wpForo Forum plugin \<= 3.0.9 - SQL Injection vulnerability (CVSS 8.5, Tomdever wpForo Forum)
- [CVE-2026-57635](https://cve.now/CVE-2026-57635.md): WordPress FunnelKit Payment Gateway for Stripe WooCommerce plugin \<= 1.14.0.3 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 6.5, FunnelKit Payment Gateway for Stripe WooCommerce)
- [CVE-2026-57634](https://cve.now/CVE-2026-57634.md): WordPress PPWP plugin \<= 1.9.19 - Insecure Direct Object References (IDOR) vulnerability (CVSS 4.3, WP Folio Team PPWP)
- [CVE-2026-57633](https://cve.now/CVE-2026-57633.md): WordPress WCBoost &#8211; Products Compare plugin \<= 1.1.0 - Sensitive Data Exposure vulnerability (CVSS 5.3, WCBoost &#8211; Products Compare)
- [CVE-2026-57632](https://cve.now/CVE-2026-57632.md): WordPress Email Marketing for WooCommerce by Omnisend plugin \<= 1.19.0 - Broken Access Control vulnerability (CVSS 5.4, Email Marketing for WooCommerce by Omnisend)
- [CVE-2026-57631](https://cve.now/CVE-2026-57631.md): WordPress Popup box plugin \<= 6.0.1 - SQL Injection vulnerability (CVSS 7.6, Ays Pro Popup box)
- [CVE-2026-57630](https://cve.now/CVE-2026-57630.md): WordPress Blocksy Companion Pro plugin \<= 2.1.46 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.3, Creative Themes Blocksy Companion Pro)
- [CVE-2026-57629](https://cve.now/CVE-2026-57629.md): WordPress StatCounter plugin \<= 2.1.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, StatCounter)
- [CVE-2026-57628](https://cve.now/CVE-2026-57628.md): WordPress WP All Import plugin \<= 4.0.1 - SQL Injection vulnerability (CVSS 7.6, WP All Import)
- [CVE-2026-57627](https://cve.now/CVE-2026-57627.md): WordPress Kirki plugin \<= 6.0.11 - Server Side Request Forgery (SSRF) vulnerability (CVSS 4.9, Themeum Kirki)
- [CVE-2026-57622](https://cve.now/CVE-2026-57622.md): WordPress WPCafe plugin \<= 3.0.14 - Broken Access Control vulnerability (CVSS 4.3, Arraytics WPCafe)
- [CVE-2026-57618](https://cve.now/CVE-2026-57618.md): WordPress Neve PRO theme \<= 3.1.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Themeisle Neve PRO)
- [CVE-2026-57617](https://cve.now/CVE-2026-57617.md): WordPress SeedProd Pro plugin \< 6.19.5 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, SeedProd LLC. SeedProd Pro)
- [CVE-2026-57431](https://cve.now/CVE-2026-57431.md): WordPress Featured Image plugin \<= 2.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Mervin Praison Featured Image)
- [CVE-2026-57430](https://cve.now/CVE-2026-57430.md): WordPress SEOPress PRO plugin \<= 9.1.1 - Broken Access Control vulnerability (CVSS 4.3, SEOPress Free SEOPress PRO)
- [CVE-2026-57325](https://cve.now/CVE-2026-57325.md): WordPress NanoMag theme \<= 1.8 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Jellywp NanoMag)
- [CVE-2026-57324](https://cve.now/CVE-2026-57324.md): WordPress GIFT4U plugin \<= 1.0.10 - Broken Access Control vulnerability (CVSS 6.5, VillaTheme GIFT4U)
- [CVE-2026-57323](https://cve.now/CVE-2026-57323.md): WordPress Flash & HTML5 Video plugin \<= 2.11.0 - Broken Access Control vulnerability (CVSS 5.8, bPlugins Flash & HTML5 Video)
- [CVE-2026-57322](https://cve.now/CVE-2026-57322.md): WordPress weMail plugin \<= 2.1.2 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, weDevs weMail)
- [CVE-2026-57321](https://cve.now/CVE-2026-57321.md): WordPress H5P plugin \<= 1.17.7 - Arbitrary File Deletion vulnerability (CVSS 7.1, icc0rz H5P)
- [CVE-2026-57319](https://cve.now/CVE-2026-57319.md): WordPress FOX plugin \<= 1.4.8 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, RealMag777 FOX)
- [CVE-2026-57318](https://cve.now/CVE-2026-57318.md): WordPress Site Reviews plugin \<= 8.0.11 - Sensitive Data Exposure vulnerability (CVSS 6.5, Gemini Labs Site Reviews)
- [CVE-2026-57317](https://cve.now/CVE-2026-57317.md): WordPress Simply Schedule Appointments plugin \<= 1.6.12.2 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, NSquared Simply Schedule Appointments)
- [CVE-2026-57316](https://cve.now/CVE-2026-57316.md): WordPress GetGenie plugin \<= 4.4.2 - Sensitive Data Exposure vulnerability (CVSS 6.5, Roxnor GetGenie)
- [CVE-2026-57315](https://cve.now/CVE-2026-57315.md): WordPress Blocksy Companion Pro plugin \<= 2.1.45 - Remote Code Execution (RCE) vulnerability (CVSS 8.5, Creative Themes Blocksy Companion Pro)
- [CVE-2026-57314](https://cve.now/CVE-2026-57314.md): WordPress SureCart plugin \<= 4.3.2 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, SureCart)
- [CVE-2026-57313](https://cve.now/CVE-2026-57313.md): WordPress SureCart plugin \<= 4.2.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, SureCart)
- [CVE-2026-57312](https://cve.now/CVE-2026-57312.md): WordPress Everest Forms plugin \<= 3.4.8 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, wpeverest Everest Forms)
- [CVE-2026-56072](https://cve.now/CVE-2026-56072.md): WordPress WoodMart theme \<= 8.5.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Xtemos WoodMart)
- [CVE-2026-56070](https://cve.now/CVE-2026-56070.md): WordPress Advance Product Search plugin \<= 1.4.4 - SQL Injection vulnerability (CVSS 9.3, ThemeHunk Advance Product Search)
- [CVE-2026-56069](https://cve.now/CVE-2026-56069.md): WordPress Toolset Forms plugin \<= 2.6.24 - Insecure Direct Object References (IDOR) vulnerability (CVSS 7.5, Site Building with Toolset Toolset Forms)
- [CVE-2026-56068](https://cve.now/CVE-2026-56068.md): WordPress JetEngine plugin \<= 3.8.10.2 - SQL Injection vulnerability (CVSS 9.3, Crocoblock. Jetimpex JetEngine)
- [CVE-2026-56067](https://cve.now/CVE-2026-56067.md): WordPress JetSmartFilters plugin \<= 3.8.3 - SQL Injection vulnerability (CVSS 9.3, Crocoblock. Jetimpex JetSmartFilters)
- [CVE-2026-56066](https://cve.now/CVE-2026-56066.md): WordPress ShortPixel Adaptive Images plugin \<= 3.11.4 - Arbitrary File Deletion vulnerability (CVSS 5.8, ShortPixel Adaptive Images)
- [CVE-2026-56064](https://cve.now/CVE-2026-56064.md): WordPress Tourfic plugin \<= 2.22.5 - SQL Injection vulnerability (CVSS 8.5, Themefic Tourfic)
- [CVE-2026-56063](https://cve.now/CVE-2026-56063.md): WordPress MailChimp Block plugin \<= 1.1.15 - Broken Access Control vulnerability (CVSS 8.3, bPlugins MailChimp Block)
- [CVE-2026-56062](https://cve.now/CVE-2026-56062.md): WordPress Quotes llama plugin \<= 3.1.5 - SQL Injection vulnerability (CVSS 9.3, oooorgle Quotes llama)
- [CVE-2026-56061](https://cve.now/CVE-2026-56061.md): WordPress Subscriptions for WooCommerce plugin \<= 1.9.5 - Broken Access Control vulnerability (CVSS 7.5, WP Swings Subscriptions for WooCommerce)
- [CVE-2026-56060](https://cve.now/CVE-2026-56060.md): WordPress Print Invoice & Delivery Notes for WooCommerce plugin \<= 7.1.1 - Sensitive Data Exposure vulnerability (CVSS 7.5, tychesoftwares Print Invoice & Delivery Notes for WooCommer…)
- [CVE-2026-56059](https://cve.now/CVE-2026-56059.md): WordPress Travel Booking theme \<= 2.2.5 - Arbitrary File Upload vulnerability (CVSS 9.9, PhysCode Travel Booking)
- [CVE-2026-56058](https://cve.now/CVE-2026-56058.md): WordPress Quform plugin \<= 2.23.0 - Arbitrary File Upload vulnerability (CVSS 9.9, ThemeCatcher Quform)
- [CVE-2026-56057](https://cve.now/CVE-2026-56057.md): WordPress Uncanny Automator Pro plugin \<= 7.3.0.6 - PHP Object Injection vulnerability (CVSS 9.8, Uncanny Owl Uncanny Automator Pro)
- [CVE-2026-56055](https://cve.now/CVE-2026-56055.md): WordPress RealHomes theme \<= 4.5.3 - PHP Object Injection vulnerability (CVSS 8.8, InspiryThemes RealHomes)
- [CVE-2026-56048](https://cve.now/CVE-2026-56048.md): WordPress Payment Gateway Based Fees and Discounts for WooCommerce plugin \<= 3.0.0 - Insecure Direct Object References (IDOR) vulnerability (CVSS 6.5, tychesoftwares Payment Gateway Based Fees and Discounts for…)
- [CVE-2026-56047](https://cve.now/CVE-2026-56047.md): WordPress perfmatters plugin \<= 2.6.3 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Perfmatters, Powered Kinsta + GeneratePress Docs Changelog…)
- [CVE-2026-56046](https://cve.now/CVE-2026-56046.md): WordPress ListingPro theme \<= 2.9.11 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, CridioStudio ListingPro)
- [CVE-2026-56045](https://cve.now/CVE-2026-56045.md): WordPress Automatic plugin \< 3.135.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, ValvePress Automatic)
- [CVE-2026-56044](https://cve.now/CVE-2026-56044.md): WordPress Blog2Social plugin \<= 8.9.2 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Adenion Blog2Social)
- [CVE-2026-56043](https://cve.now/CVE-2026-56043.md): WordPress Customer Reviews for WooCommerce plugin \<= 5.110.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, CusRev Customer Reviews for WooCommerce)
- [CVE-2026-56041](https://cve.now/CVE-2026-56041.md): WordPress Responsive Lightbox plugin \<= 2.7.6 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, dFactory Responsive Lightbox)
- [CVE-2026-56040](https://cve.now/CVE-2026-56040.md): WordPress Gutenverse Form plugin \<= 2.4.7 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, WordPress.com Gutenverse Form)
- [CVE-2026-56039](https://cve.now/CVE-2026-56039.md): WordPress Quick Interest Slider plugin \<= 3.1.6 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, WordPress.com Quick Interest Slider)
- [CVE-2026-56038](https://cve.now/CVE-2026-56038.md): WordPress Frisbii Pay plugin \<= 1.8.2 - Privilege Escalation vulnerability (CVSS 8.8, Frisbii Pay)
- [CVE-2026-56036](https://cve.now/CVE-2026-56036.md): WordPress 워드프레스 결제 심플페이 plugin \<= 5.5.6 - SQL Injection vulnerability (CVSS 9.3, codemstory 워드프레스 결제 심플페이)
- [CVE-2026-56035](https://cve.now/CVE-2026-56035.md): WordPress BitFire Security plugin \<= 5.0.3 - Multiple Vulnerabilities vulnerability (CVSS 8.6, Cory Marsh BitFire Security)
- [CVE-2026-56034](https://cve.now/CVE-2026-56034.md): WordPress Library Management System plugin \<= 3.5.7 - SQL Injection vulnerability (CVSS 9.3, Online Web Tutor Library Management System)
- [CVE-2026-56033](https://cve.now/CVE-2026-56033.md): WordPress Dokan Pro plugin \<= 5.0.4 - Privilege Escalation vulnerability (CVSS 9.8, Dokan Multivendor Plugin Dokan Pro)
- [CVE-2026-56032](https://cve.now/CVE-2026-56032.md): WordPress Buddyboss Platform plugin \<= 3.0.4 - PHP Object Injection vulnerability (CVSS 9.8, Buddyboss Platform)
- [CVE-2026-56031](https://cve.now/CVE-2026-56031.md): WordPress Uncanny Automator plugin \<= 7.3.1.2 - PHP Object Injection vulnerability (CVSS 8.1, Uncanny Owl Uncanny Automator)
- [CVE-2026-56030](https://cve.now/CVE-2026-56030.md): WordPress Paytium plugin \<= 5.0.2 - Privilege Escalation vulnerability (CVSS 9.8, paytiumsupport Paytium)
- [CVE-2026-56029](https://cve.now/CVE-2026-56029.md): WordPress CorvusPay WooCommerce Payment Gateway plugin \<= 2.7.4 - Broken Authentication vulnerability (CVSS 7.5, CorvusPay WooCommerce Payment Gateway)
- [CVE-2026-56028](https://cve.now/CVE-2026-56028.md): WordPress Easy Elements for Elementor – Addons & Website Templates plugin \<= 1.4.9 - Privilege Escalation vulnerability (CVSS 9.8, themewant Easy Elements for Elementor &#8211; Addons &amp;…)
- [CVE-2026-56027](https://cve.now/CVE-2026-56027.md): WordPress Booster for WooCommerce plugin \<= 8.0.1 - Arbitrary File Upload vulnerability (CVSS 9.9, Pluggabl Booster for WooCommerce)
- [CVE-2026-56026](https://cve.now/CVE-2026-56026.md): WordPress utm.codes plugin \<= 1.9.0 - Server Side Request Forgery (SSRF) vulnerability (CVSS 6.4, Chris Carlevato utm.codes)
- [CVE-2026-56025](https://cve.now/CVE-2026-56025.md): WordPress Paymob for WooCommerce plugin \<= 4.1.2 - Broken Access Control vulnerability (CVSS 7.5, Paymob for WooCommerce)
- [CVE-2026-56011](https://cve.now/CVE-2026-56011.md): WordPress MapPress Maps for WordPress plugin \<= 2.97.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, chrisvrichardson MapPress Maps for WordPress)
- [CVE-2026-56010](https://cve.now/CVE-2026-56010.md): WordPress Abandoned Cart Pro for WooCommerce plugin \<= 10.4.0 - Privilege Escalation vulnerability (CVSS 8.8, Tyche Softwares. Abandoned Cart Pro for WooCommerce)
- [CVE-2026-56008](https://cve.now/CVE-2026-56008.md): WordPress Fusion Builder plugin \<= 3.15.4 - Privilege Escalation vulnerability (CVSS 8.8, ThemeFusion Fusion Builder)
- [CVE-2026-54847](https://cve.now/CVE-2026-54847.md): WordPress Stylish Cost Calculator plugin \<= 8.3.9 - Broken Access Control vulnerability (CVSS 7.5, Design Stylish Cost Calculator)
- [CVE-2026-54846](https://cve.now/CVE-2026-54846.md): WordPress Syncee Premium Dropshipping & Wholesale plugin \<= 1.0.27 - Broken Access Control vulnerability (CVSS 7.5, akosglys Syncee Premium Dropshipping &amp; Wholesale)
- [CVE-2026-54840](https://cve.now/CVE-2026-54840.md): WordPress Newsletters plugin \<= 4.13 - Broken Access Control vulnerability (CVSS 7.3, Tribulant Software Newsletters)
- [CVE-2026-54839](https://cve.now/CVE-2026-54839.md): WordPress Trinity Backup – Backup, Migrate, Restore, Clone & Schedule Backups plugin \<= 2.0.9 - Sensitive Data Exposure vulnerability (CVSS 7.5, kingaddons Trinity Backup &#8211; Backup, Migrate, Restore,…)
- [CVE-2026-54837](https://cve.now/CVE-2026-54837.md): WordPress Intranet & Private Site – All-In-One Intranet plugin \<= 1.8.1 - Broken Access Control vulnerability (CVSS 7.5, Syed Balkhi Intranet &amp; Private Site &#8211; All-In-One…)
- [CVE-2026-54835](https://cve.now/CVE-2026-54835.md): WordPress Five Star Restaurant Menu plugin \<= 2.5.2 - Broken Access Control vulnerability (CVSS 7.5, Rustaurius Five Star Restaurant Menu)
- [CVE-2026-54834](https://cve.now/CVE-2026-54834.md): WordPress Object Cache 4 everyone plugin \<= 2.3.2 - Sensitive Data Exposure vulnerability (CVSS 7.5, fpuenteonline Object Cache 4 everyone)
- [CVE-2026-54833](https://cve.now/CVE-2026-54833.md): WordPress Enable CORS plugin \<= 2.0.3 - Backdoor vulnerability (CVSS 7.4, Dev Kabir Enable CORS)
- [CVE-2026-54832](https://cve.now/CVE-2026-54832.md): WordPress Gutenverse Companion plugin \<= 2.5.0 - Broken Access Control vulnerability (CVSS 7.5, Jegstudio Gutenverse Companion)
- [CVE-2026-54831](https://cve.now/CVE-2026-54831.md): WordPress GeoDirectory plugin \<= 2.8.162 - SQL Injection vulnerability (CVSS 9.3, Paolo GeoDirectory)
- [CVE-2026-54827](https://cve.now/CVE-2026-54827.md): WordPress Real Estate 7 theme \<= 3.5.9 - SQL Injection vulnerability (CVSS 9.3, contempoinc Real Estate)
- [CVE-2026-54826](https://cve.now/CVE-2026-54826.md): WordPress SupportCandy plugin \<= 3.4.6 - Insecure Direct Object References (IDOR) vulnerability (CVSS 7.6, PSM Plugins SupportCandy)
- [CVE-2026-54825](https://cve.now/CVE-2026-54825.md): WordPress wpDataTables plugin \<= 7.4 - SQL Injection vulnerability (CVSS 9.3, wpDataTables)
- [CVE-2026-54824](https://cve.now/CVE-2026-54824.md): WordPress Ads by WPQuads plugin \<= 3.0.3 - Sensitive Data Exposure vulnerability (CVSS 7.5, Ads WPQuads Ads by WPQuads)
- [CVE-2026-54820](https://cve.now/CVE-2026-54820.md): WordPress JetBooking plugin \<= 4.0.4.1 - SQL Injection vulnerability (CVSS 9.3, Crocoblock. Jetimpex JetBooking)
- [CVE-2026-52701](https://cve.now/CVE-2026-52701.md): WordPress User Registration plugin \<= 5.2.2 - Broken Access Control vulnerability (CVSS 6.5, Themegrill User Registration)
- [CVE-2026-24547](https://cve.now/CVE-2026-24547.md): WordPress SiteGround Email Marketing plugin \<= 1.7.5 - Broken Access Control vulnerability (CVSS 5.3, SiteGround Email Marketing)
- [CVE-2025-68075](https://cve.now/CVE-2025-68075.md): WordPress BNE Testimonials plugin \<= 2.0.8 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Kerry BNE Testimonials)
- [CVE-2025-68074](https://cve.now/CVE-2025-68074.md): WordPress Image Carousel plugin \<= 1.0.0.41 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, GhozyLab Image Carousel)
- [CVE-2025-68064](https://cve.now/CVE-2025-68064.md): WordPress Goya Core plugin \< 1.0.9.4 - Local File Inclusion vulnerability (CVSS 7.5, Everthemess Goya Core)
- [CVE-2025-68063](https://cve.now/CVE-2025-68063.md): WordPress Splash - Sport Club WordPress theme for Basketball, Football, Hockey theme \<= 4.4.3 - Local File Inclusion vulnerability (CVSS 7.5, StylemixThemes Splash - Sport Club WordPress Theme for Bask…)
- [CVE-2025-68052](https://cve.now/CVE-2025-68052.md): WordPress Eagle Booking plugin \<= 1.3.4.3 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8, Eagle-Themes Eagle Booking)
- [CVE-2025-66123](https://cve.now/CVE-2025-66123.md): WordPress BookPro plugin \<= 1.1.0 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.3, About Envato BookPro)
- [CVE-2025-64637](https://cve.now/CVE-2025-64637.md): WordPress Auros Core plugin \<= 5.3.1 - Content Injection vulnerability (CVSS 5.3, Opal\_WP Auros Core)
- [CVE-2025-64636](https://cve.now/CVE-2025-64636.md): WordPress Donation Thermometer plugin \<= 2.2.7 - Broken Access Control vulnerability (CVSS 5.3, rhewlif Donation Thermometer)
- [CVE-2025-63079](https://cve.now/CVE-2025-63079.md): WordPress Live Copy Paste for Elementor plugin \<= 1.5.3 - Broken Access Control vulnerability (CVSS 4.3, bdthemes Live Copy Paste for Elementor)
- [CVE-2025-63078](https://cve.now/CVE-2025-63078.md): WordPress Restaurant Menu by MotoPress plugin \<= 2.4.11 - Broken Access Control vulnerability (CVSS 4.3, jetmonsters Restaurant Menu by MotoPress)
- [CVE-2025-63041](https://cve.now/CVE-2025-63041.md): WordPress Forget About Shortcode Buttons plugin \<= 2.1.3 - Broken Access Control vulnerability (CVSS 5.4, Code Amp Forget About Shortcode Buttons)
- [CVE-2026-45257](https://cve.now/CVE-2026-45257.md): Arbitrary file overwrite via the KTLS receive path (CVSS 7.8, FreeBSD)
- [CVE-2026-4339](https://cve.now/CVE-2026-4339.md): SSRF via unvalidated attachment URLs in Mattermost Agents plugin MCP server (CVSS 6.5, Mattermost)
- [CVE-2026-9699](https://cve.now/CVE-2026-9699.md): Mattermost Agents plugin logs unsanitized OpenAI API keys on authentication errors (CVSS 6.8, Mattermost)
- [CVE-2026-57527](https://cve.now/CVE-2026-57527.md): ZAP ViewState Add-on Insecure Deserialization via JSFViewState.decode() (CVSS 8.7, zaproxy zap-extensions)
- [CVE-2026-45256](https://cve.now/CVE-2026-45256.md): Missing permission check in thr\_kill2(2) (CVSS 5.5, FreeBSD)
- [CVE-2026-3472](https://cve.now/CVE-2026-3472.md): Markdown image rendering bypass in AI bot tool result posts in Mattermost (CVSS 3.5, Mattermost)
- [CVE-2026-56773](https://cve.now/CVE-2026-56773.md): Teable - Missing Authorization in v2 REST API (CVSS 8.7, teableio teable)
- [CVE-2026-13426](https://cve.now/CVE-2026-13426.md): Client4 fails to validate path parameters (CVSS 5.4, github.com/mattermost/mattermost/server/public)
- [CVE-2026-57940](https://cve.now/CVE-2026-57940.md): HTMLy 3.1.1 contains a Server-Side Request Forgery (SSRF) vulnerability in the RSS feed import functionality. (CVSS 2.1, danpros HTMLy)
- [CVE-2026-53914](https://cve.now/CVE-2026-53914.md): In JetBrains Kotlin before 2.4.20 code execution was possible via unsafe deserialization in the build cache metadata (CVSS 6.7, JetBrains Kotlin · org.jetbrains.kotlin:kotlin-gradle-plugin)
- [CVE-2026-57926](https://cve.now/CVE-2026-57926.md): In JetBrains YouTrack before 2026.2.16593 the websandbox bridge was vulnerable to a prototype pollution attack (CVSS 2.6, JetBrains YouTrack)
- [CVE-2026-57925](https://cve.now/CVE-2026-57925.md): In JetBrains YouTrack before 2026.2.16593 improper access control allowed reading saved queries and tags (CVSS 4.3, JetBrains YouTrack)
- [CVE-2026-57924](https://cve.now/CVE-2026-57924.md): In JetBrains YouTrack before 2026.2.16593 default role configuration exposed excessive user profile details (CVSS 4.3, JetBrains YouTrack)
- [CVE-2026-57923](https://cve.now/CVE-2026-57923.md): In JetBrains YouTrack before 2026.2.16593 improper authorisation in the app configurations endpoint allowed modifying project settings (CVSS 5.3, JetBrains YouTrack)
- [CVE-2026-57922](https://cve.now/CVE-2026-57922.md): In JetBrains YouTrack before 2026.2.16593 project settings disclosure via the MCP was possible (CVSS 3.1, JetBrains YouTrack)
- [CVE-2026-57921](https://cve.now/CVE-2026-57921.md): In JetBrains YouTrack before 2026.2.16593 improper access control allowed reading users' private data via the comment templates endpoint (CVSS 4.3, JetBrains YouTrack)
- [CVE-2026-40711](https://cve.now/CVE-2026-40711.md): Dell Dell Container Storage Modules, version(s) csi-powerstore v2.16.0, csi-unity v2.16.0, csi-powerflex v2.16.0, csi-powermax v2.16.0, cont (CVSS 8.0, Dell Container Storage Modules)
- [CVE-2026-57920](https://cve.now/CVE-2026-57920.md): Peplink InControl 2 through 2.14.2 before 2026-06-03 allows use of a semicolon to bypass access-control rules for certain /rest/o/{orgId} en (CVSS 7.7, Peplink InControl)
- [CVE-2025-64152](https://cve.now/CVE-2025-64152.md): Apache IoTDB: Path Traversal Vulnerability (CVSS 9.1, Apache Software Foundation Apache IoTDB)
- [CVE-2025-55017](https://cve.now/CVE-2025-55017.md): Apache IoTDB: Path Traversal Vulnerability (CVSS 9.1, Apache Software Foundation Apache IoTDB)
- [CVE-2026-57915](https://cve.now/CVE-2026-57915.md): Apache Kerby: Kerberos Pre-Authentication Bypass (CVSS 7.3, Apache Software Foundation Apache Kerby)
- [CVE-2026-57620](https://cve.now/CVE-2026-57620.md): WordPress Exclusive Addons Elementor plugin \<= 2.7.9.8 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Tim Strifler Exclusive Addons Elementor)
- [CVE-2026-57914](https://cve.now/CVE-2026-57914.md): Apache Kerby: StackOverflow on parsing deeply nested ASN1 structures (CVSS 6.5, Apache Software Foundation Apache Kerby)
- [CVE-2026-57918](https://cve.now/CVE-2026-57918.md): libnfs through 6.0.2 before 935b8db has an xid integer underflow in READ\_IOVEC in rpc\_read\_from\_socket in lib/socket.c during a connection t (CVSS 7.1, sahlberg libnfs)
- [CVE-2026-57473](https://cve.now/CVE-2026-57473.md): A vulnerability exists in the netclient and factory services of Reolink Home Hub (versions prior to v3.3.0.456\_26031911) due to the possibil (CVSS 5.8, Reolink Home Hub)
- [CVE-2025-7958](https://cve.now/CVE-2025-7958.md): A Code Injection vulnerability existed in Trellix Network Security CM and NX. (CVSS 7.1, Trellix Network Security NX, EX, FX, AX, and CMS)
- [CVE-2026-57913](https://cve.now/CVE-2026-57913.md): Johnson & Johnson Audit Tracking Management System (ATMS) before 2026-04-21 allows viewing of meeting minutes and transcripts. (CVSS 7.5, Johnson & Johnson Audit Tracking Management System)
- [CVE-2026-57912](https://cve.now/CVE-2026-57912.md): Johnson & Johnson Campus Recruiting before 2025-10-31 allows viewing of data provided by recruited students, and notes entered about student (CVSS 7.5, Johnson & Johnson Campus Recruiting)
- [CVE-2026-6658](https://cve.now/CVE-2026-6658.md): Cross-site Scripting (XSS) in jupyter/nbconvert (CVSS 5.4, jupyter/jupyter)
- [CVE-2026-11702](https://cve.now/CVE-2026-11702.md): Bytes::Random::Secure::Tiny versions through 1.011 for Perl share internal state across forked processes (CVSS 7.5, DAVIDO Bytes::Random::Secure::Tiny)
- [CVE-2026-11625](https://cve.now/CVE-2026-11625.md): Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processes (CVSS 7.5, DAVIDO Bytes::Random::Secure)
- [CVE-2026-1869](https://cve.now/CVE-2026-1869.md): User Registration & Membership \<= 5.2.0 - Missing Authorization to Unauthenticated Payment Bypass (CVSS 6.5, wpeverest User Registration & Membership – Free & Paid Memb…)
- [CVE-2026-2053](https://cve.now/CVE-2026-2053.md): Unauthenticated Server-Side Request Forgery via WS-Addressing in WSO2 API Manager (CVSS 8.3, WSO2 API Manager)
- [CVE-2026-57881](https://cve.now/CVE-2026-57881.md): GV-LPC2011/LPC2211 - unauthorized stack-based buffer overflow vulnerability (vlsvr) (CVSS 9.8, GeoVision GV-LPCLPC2011/2211)
- [CVE-2026-57880](https://cve.now/CVE-2026-57880.md): GV-LPC2011/LPC2211 - unauthorized buffer overflow via RTSP Digest username (ssvr) (CVSS 9.8, GeoVision GV-LPCLPC2011/2211)
- [CVE-2026-57879](https://cve.now/CVE-2026-57879.md): GV-LPC2011/LPC2211 - unauthorized buffer overflow via AuthMode/AuthValue path (ssvr) (CVSS 9.8, GeoVision GV-LPCLPC2011/2211)
- [CVE-2026-57878](https://cve.now/CVE-2026-57878.md): GV-LPC2011/LPC2211 - unauthorized buffer overflow vulnerability (thttpd) (CVSS 9.8, GeoVision GV-LPCLPC2011/2211)
- [CVE-2026-57877](https://cve.now/CVE-2026-57877.md): GV-LPC2011/LPC2211 - unauthorized format string vulnerability (vlsvr) (CVSS 8.6, GeoVision GV-LPCLPC2011/2211)
- [CVE-2026-57876](https://cve.now/CVE-2026-57876.md): GV-LPC2011/LPC2211 - unauthorized out-of-bounds writing vulnerability (onvif.cgi) (CVSS 7.5, GeoVision GV-LPCLPC2011/2211)
- [CVE-2026-57875](https://cve.now/CVE-2026-57875.md): GV-LPC2011/LPC2211 - unauthorized null pointer dereference vulnerability in packet parsing (CVSS 7.5, GeoVision GV-LPCLPC2011/2211)
- [CVE-2026-57874](https://cve.now/CVE-2026-57874.md): GV-LPC2011/LPC2211 - unauthorized buffer overflow vulnerability (IEEE8021x\_upload.cgi) (CVSS 7.5, GeoVision GV-LPCLPC2011/2211)
- [CVE-2026-57873](https://cve.now/CVE-2026-57873.md): GV-LPC2011/LPC2211 - unauthorized null pointer dereference vulnerability (IEEE8021x\_upload.cgi) (CVSS 7.5, GeoVision GV-LPCLPC2011/2211)
- [CVE-2026-57872](https://cve.now/CVE-2026-57872.md): GV-LPC2011/LPC2211 - unauthorized directory traversal vulnerability (get\_fcont.cgi) (CVSS 7.5, GeoVision GV-LPCLPC2011/2211)
- [CVE-2026-49486](https://cve.now/CVE-2026-49486.md): Apache Airflow FTP provider: FTP Provider does not protect FTPS data channel (missing PROT\_P) (CVSS 7.5, Apache Software Foundation Apache Airflow FTP provider · ap…)
- [CVE-2026-8380](https://cve.now/CVE-2026-8380.md): Frontend File Manager Plugin \<= 23.6 - Author+ Arbitrary Post Deletion (CVSS 6.5, Frontend File Manager Plugin)
- [CVE-2026-10835](https://cve.now/CVE-2026-10835.md): SALESmanago & Leadoo \< 3.11.3 - Subscriber+ SQL Injection (CVSS 7.7, SALESmanago & Leadoo)
- [CVE-2026-10823](https://cve.now/CVE-2026-10823.md): YMC Smart Filter \< 3.11.3 - Unauthenticated Private/Draft Post Disclosure (CVSS 7.5, YMC Filter)
- [CVE-2025-10268](https://cve.now/CVE-2025-10268.md): Printcart Web to Print Product Designer for WooCommerce \<= 2.4.8 - Unauthenticated Folder Content Disclosure via Path Traversal (CVSS 5.3, Printcart Web to Print Product Designer for WooCommerce)
- [CVE-2026-8797](https://cve.now/CVE-2026-8797.md): An access control deficiency vulnerability exists in ExpressUpdate Agent for Windows. (CVSS 8.5, NEC ExpressUpdate Agent for Windows)
- [CVE-2026-8661](https://cve.now/CVE-2026-8661.md): Server-Side Cross-Site Scripting and SSRF in Rapid7 InsightConnect Markdown to PDF Plugin (CVSS 4.8, Rapid7 InsightConnect Markdown Plugin)
- [CVE-2026-13226](https://cve.now/CVE-2026-13226.md): Groundhogg \<= 4.5.4 - Authenticated (Custom+) SQL Injection via 'after' Parameter (CVSS 6.5, trainingbusinesspros Groundhogg — CRM, Newsletters, and Mar…)
- [CVE-2026-48930](https://cve.now/CVE-2026-48930.md): A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation i (CVSS 5.6, nodejs node)
- [CVE-2026-48928](https://cve.now/CVE-2026-48928.md): A inconsistency in Node.js hostname matching can cause a trust-policy bypass in multi-context mTLS setups. (CVSS 4.2, nodejs node)
- [CVE-2026-48934](https://cve.now/CVE-2026-48934.md): A flaw in Node.js TLS host verification can cause an attacker to bypass certification validation. (CVSS 4.3, nodejs node)
- [CVE-2026-48936](https://cve.now/CVE-2026-48936.md): A flaw in Node.js Permission API can cause a local server to be started (via a Unix domain socket), even without the \`--allow-net\` permissio (CVSS 3.3, nodejs node)
- [CVE-2026-48618](https://cve.now/CVE-2026-48618.md): A flaw in Node.js TLS hostname handling can cause Node.js unicode dot separator handling can lead to tls wildcard-depth authentication bypas (CVSS 7.7, nodejs node)
- [CVE-2026-48933](https://cve.now/CVE-2026-48933.md): A flaw in Node.js WebCrypto implementation can crash the process if the input of \`subtle.encrypt()\` is a multiple of 2GiB. (CVSS 7.5, nodejs node)
- [CVE-2026-48935](https://cve.now/CVE-2026-48935.md): A flaw in Node.js Permission API can cause a file metadata to be modified even on a path that was set as read-only with e.g. (CVSS 3.3, nodejs node)
- [CVE-2026-48619](https://cve.now/CVE-2026-48619.md): A flaw in Node.js HTTP/2 client allows a server to send an unlimited number of ORIGIN frames, which could lead to an Out of Memory error on (CVSS 5.3, nodejs node)
- [CVE-2026-48615](https://cve.now/CVE-2026-48615.md): A flaw in Node.js proxy tunnel error handling could expose proxy credentials in \`ERR\_PROXY\_TUNNEL\` error messages. (CVSS 5.9, nodejs node)
- [CVE-2026-50745](https://cve.now/CVE-2026-50745.md): A missing sanitisation vulnerability exists with user input in the stats-video.php script. (CVSS 4.7, Revive Adserver)
- [CVE-2026-50740](https://cve.now/CVE-2026-50740.md): A missing sanitisation vulnerability of user input in the zone-include.php script exists in Revive Adserver 6.0.7 and earlier. (CVSS 6.1, Revive Adserver)
- [CVE-2026-50742](https://cve.now/CVE-2026-50742.md): A stored XSS vulnerabilities exists in the \`maintenance-acl-check.php\` and \`maintenance-banners-check.php\` tools of Revive Adserver 6.0.7. (CVSS 4.4, Revive Adserver)
- [CVE-2026-50741](https://cve.now/CVE-2026-50741.md): Bypass to the fix for CVE-2026-34916. (CVSS 8.8, Revive Adserver)
- [CVE-2026-50739](https://cve.now/CVE-2026-50739.md): A bypass for CVE‑2026‑34913 exists with proper ownership validation that had not been applied to the reverse operation of linking campaigns (CVSS 4.3, Revive Adserver)
- [CVE-2026-50744](https://cve.now/CVE-2026-50744.md): A bypass to the admin‑only restriction of the XML‑RPC API in Revive Adserver 6.0.7. (CVSS 4.3, Revive Adserver)
- [CVE-2026-13322](https://cve.now/CVE-2026-13322.md): Kubevirt: virt-handler-rhel9: kubevirt: unbounded virtio-serial readline in virt-handler causes oom denial of service (CVSS 3.8, Red Hat OpenShift Virtualization)
- [CVE-2026-30040](https://cve.now/CVE-2026-30040.md): A heap overflow in the FSViewer.exe process of FastStone Image Viewer v8.3 allows attackers to cause a execute arbitrary code in the context (CVSS 6.5)
- [CVE-2026-30041](https://cve.now/CVE-2026-30041.md): An integer overflow in the PSD parser compnent of FastStone Image Viewer v8.3 allows attackers to execute arbitrary code or cause a Denial o (CVSS 7.5)
- [CVE-2026-36478](https://cve.now/CVE-2026-36478.md): An issue in Technitium DNS Server v.14.3 and before allows a remote attacker to cause a denial of service via the DnsServerApp.exe, DnsServe (CVSS 7.5)
- [CVE-2026-36907](https://cve.now/CVE-2026-36907.md): A stack overflow in the AP4\_StsdAtom::AP4\_StsdAtom component of axiomatic-systems Bento4 before v1.8.9allows attackers to cause a Denial of (CVSS 5.5)
- [CVE-2026-36908](https://cve.now/CVE-2026-36908.md): A stack overflow in the AP4\_Array\<AP4\_TrunAtom::Entry\>::EnsureCapacity component of axiomatic-systems Bento4 before v1.8.9allows attackers t (CVSS 5.5)
- [CVE-2026-38571](https://cve.now/CVE-2026-38571.md): Cleartext storage and exposure of WPA2 credentials, and missing authentication on the rr/wr memory read/write commands, in the unauthenticat (CVSS 4.6)
- [CVE-2026-38639](https://cve.now/CVE-2026-38639.md): An issue in the parse\_month function (/time/strptime.rs) of relibc commit ab6a2e allows attackers to cause a Denial of Service (DoS) via par (CVSS 7.5)
- [CVE-2026-38641](https://cve.now/CVE-2026-38641.md): An issue in the DSO::mmap\_and\_copy function of relibc commit 61f42d allows attackers to cause a Denial of Service (DoS) via loading a crafte (CVSS 7.5)
- [CVE-2026-39031](https://cve.now/CVE-2026-39031.md): Lansweeper lsrunase 2.0 and lsencrypt 2.0 use RC4 encryption with a hardcoded 142-byte static key array to encrypt credentials. (CVSS 5.5)
- [CVE-2026-50765](https://cve.now/CVE-2026-50765.md): A stored cross-site scripting (XSS) vulnerability in the patron restriction type administration page of Koha Library Management System 0 thr (CVSS 6.1)
- [CVE-2026-50766](https://cve.now/CVE-2026-50766.md): A stored cross-site scripting (XSS) vulnerability in the OPAC item detail page of Koha Library Management System 0 through 25.11 versions al (CVSS 5.4)
- [CVE-2026-50767](https://cve.now/CVE-2026-50767.md): A stored cross-site scripting (XSS) vulnerability in the item type administration page of Koha Library Management System 0 through 25.11 ver (CVSS 5.4)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-06-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.