CVEs published July 1, 2026
364 CVEs were published on July 1, 2026: 52 critical, 122 high.
- Published
- 364
- Critical
- 52
- High
- 122
- Medium
- 148
- Low
- 16
- Unrated
- 26
- Now in CISA KEV
- 0
- Fix available
- 161
Most affected products
- Google Chrome
- 52
- Linux
- 31
- guardian language-system
- 22
- NVIDIA Megatron-Bridge
- 11
- uvnc UltraVNC
- 10
- Wikimedia Foundation MediaWiki
- 10
- craftcms cms · craftcms/cms
- 9
- MyComplianceOffice MCO
- 8
- Cisco Secure Endpoint
- 7
- ImageMagick · Magick.NET-Q16-AnyCPU +16
- 7
Critical 52
- CVE-2026-14439Path Traversal in Altium Git Service Allows Remote Code ExecutionAltium Enterprise Server · Altium
- CVE-2026-14419Use after free in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a craftGoogle Chrome
- CVE-2026-14417Use after free in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a craftGoogle Chrome
- CVE-2026-14424Use after free in Dawn in Google Chrome on Mac prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via Google Chrome
- CVE-2026-14425Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafGoogle Chrome
- CVE-2026-14390Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafGoogle Chrome
- CVE-2026-14398Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafGoogle Chrome
- CVE-2026-14405Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a cGoogle Chrome
- CVE-2026-14423Type Confusion in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a craftGoogle Chrome
- CVE-2026-14392Out of bounds write in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a Google Chrome
- CVE-2026-14397Out of bounds write in ANGLE in Google Chrome on Mac prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escapGoogle Chrome
- CVE-2026-14416Out of bounds read in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a cGoogle Chrome
- CVE-2026-14420Out of bounds read and write in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escaGoogle Chrome
- CVE-2026-14387Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a craGoogle Chrome
- CVE-2026-14411Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially performGoogle Chrome
- CVE-2026-14382Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially performGoogle Chrome
- CVE-2026-58457Shenzhen Aitemi M300 MT02 Unauthenticated OS Command Injection via protocol.cspShenzhen Aitemi E Commerce Co. M300 Wi-Fi Repeater
- CVE-2026-50160Mass Assignment via Onboarding Endpoint Allows Unauthenticated JWT_SECRET Overwritehoppscotch
- CVE-2026-34117Guardian Language-System Unauthenticated OS Command Injection via id Parameter in text_to_subtitles.phpguardian language-system
- CVE-2026-34116Guardian Language-System Unauthenticated OS Command Injection via id Parameter in transcribe.phpguardian language-system
- CVE-2026-34115Guardian Language-System Unauthenticated OS Command Injection via id Parameter in transcribe_amazon.phpguardian language-system
- CVE-2026-34114Guardian Language-System Unauthenticated OS Command Injection via id Parameter in translate_text.phpguardian language-system
- CVE-2026-34113Guardian Language-System Unauthenticated OS Command Injection via id Parameter in speech_text.phpguardian language-system
- CVE-2026-34112Guardian Language-System Unauthenticated OS Command Injection via id Parameter in speechmac.phpguardian language-system
- CVE-2026-34111Guardian Language-System Unauthenticated OS Command Injection via id Parameter in speechmac_text.phpguardian language-system
- CVE-2026-34110Guardian Language-System Unauthenticated OS Command Injection via id Parameter in complex_start.phpguardian language-system
- CVE-2026-34109Guardian Language-System Unauthenticated OS Command Injection via id Parameter in speech.phpguardian language-system
- CVE-2026-34108Guardian Language-System Unauthenticated OS Command Injection via id Parameter in text.phpguardian language-system
- CVE-2026-34107Guardian Language-System Unauthenticated OS Command Injection via id Parameter in translate.phpguardian language-system
- CVE-2026-34106Guardian Language-System Unauthenticated OS Command Injection via id Parameter in subtitles.phpguardian language-system
- CVE-2026-34099Guardian Language-System Unauthenticated SQL Injection via id Parameter in job_info.phpguardian language-system
- CVE-2026-58453JAIOTlink C492A-W6 4.8.30.57701411 Hard-coded Credentials via anyka_ipcJAIOTlink C492A-W6 Wi-Fi IP Camera
- CVE-2026-24270NVIDIA AIStore framework contains a vulnerability where an attacker could bypass authentication.NVIDIA AIStore framework
- CVE-2026-57517Control Web Panel < 0.9.8.1225 Blind SQL Injection via userRes ParameterControl Web Panel
- CVE-2026-58127PACSgear MediaWriter 5.2.1 Unauthenticated RCE via .NET Remoting TCP ServiceHyland PACSgear MediaWriter
- CVE-2025-23351NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may causNVIDIA BlueField GA · NVIDIA BlueField LTS22 +7
- CVE-2026-58126PACSgear PACS Scan 5.2.1 Unauthenticated RCE via .NET Remoting TCP ServiceHyland PACSgear PACS Scan
- CVE-2025-15646HTML::Gumbo versions before 0.19 for Perl disclose heap memory via type confusionBPS HTML::Gumbo
- CVE-2025-23350NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may causNVIDIA BlueField GA · NVIDIA BlueField LTS22 +6
- CVE-2026-23537Feast: unauthenticated arbitrary file writeFeast Feature Server · Red Hat OpenShift AI
- CVE-2026-57692WordPress PrivateContent plugin <= 9.9.2 - Privilege Escalation vulnerabilityLCweb PrivateContent
- CVE-2026-53355net: rds: clear i_sends on setup unwindLinux
- CVE-2026-13603SSRF with API key leak in pretix-oppwapretix-oppwa
- CVE-2026-14198@fastify/middie vulnerable to authorization bypass via encoded slash in path parameter values@fastify/middie
- CVE-2026-10539Unauthenticated command injection in Control-M/Server communication commandBMC Control-M/Server
- CVE-2026-11387SMS Alert <= 3.9.5 - Unauthenticated Privilege Escalation via Arbitrary Password Resetcozyvision1 SMS Alert – SMS & OTP for WooCommerce, Order No…
- CVE-2026-6070WP-BusinessDirectory <= 4.0.1 - Unauthenticated Arbitrary File Deletion via Path Traversal via '_filename' Parametercmsjunkie WP-BusinessDirectory – Business directory plugin…
- CVE-2026-7840UltraVNC repeater HTTP server global buffer overflow via long URI (pre-auth RCE)uvnc UltraVNC
- CVE-2026-7839UltraVNC repeater ships hardcoded default admin password allowing unauthenticated admin accessuvnc UltraVNC
- CVE-2026-53488containerd CRI plugin: — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pullcontainerd · github.com/containerd/containerd +1
- CVE-2026-51947An issue in Pivotal CRM 6.6.4.08 and systems using patch-ghi-15381-cwe-502-20251225.zip (fixed in Pivotal CRM 6.6.5.10 and Patch_CWE502_2026
- CVE-2026-52186SQL Injection vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to execute arbitrary code via the gohead/sub
High 122
- CVE-2026-50279Craft CMS: Authorship spoofing in `entries/save-entry` via pre-check/post-mutation authorization gapcraftcms cms · craftcms/cms
- CVE-2026-55794Craft CMS: Potential authenticated Remote Code Execution via referrer redirectcraftcms cms · craftcms/cms
- CVE-2026-55790Craft CMS: DOM XSS via GitHub issue title in CraftSupport widgetcraftcms cms · craftcms/cms
- CVE-2026-50284Craft CMS: Missing peer-permission check in `AssetsController::actionDeleteFolder` allows deletion of other users' assetscraftcms cms · craftcms/cms
- CVE-2026-14440Cloudflare Universal SSL automatically managed CAA RRset supersedes customer-configured CAA recordsCloudflare Universal SSL
- CVE-2026-14426Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who convinced a user to engage in specific UI gestureGoogle Chrome
- CVE-2026-14394Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially exploit heap corruption via a crafted Google Chrome
- CVE-2026-14432Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafGoogle Chrome
- CVE-2026-14393Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafGoogle Chrome
- CVE-2026-14403Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafGoogle Chrome
- CVE-2026-14413Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potGoogle Chrome
- CVE-2026-14431Type Confusion in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafGoogle Chrome
- CVE-2026-14395Out of bounds write in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via aGoogle Chrome
- CVE-2026-14400Out of bounds write in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to pGoogle Chrome
- CVE-2026-14422Out of bounds read and write in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform out of bounds Google Chrome
- CVE-2026-14430Integer overflow in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crGoogle Chrome
- CVE-2026-14389Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potenGoogle Chrome
- CVE-2026-14429Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised theGoogle Chrome
- CVE-2026-14428Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 150.0.7871.46 allowed a remote attacker who had compGoogle Chrome
- CVE-2026-14412Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised thGoogle Chrome
- CVE-2026-14401Insufficient validation of untrusted input in ANGLE in Google Chrome on Android prior to 150.0.7871.46 allowed a remote attacker who had comGoogle Chrome
- CVE-2026-14415Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who convinced a user to engage in speciGoogle Chrome
- CVE-2026-14409Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who convinced a user to engage in speciGoogle Chrome
- CVE-2026-14407Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandGoogle Chrome
- CVE-2026-14383Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandGoogle Chrome
- CVE-2026-14427Heap buffer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to pGoogle Chrome
- CVE-2026-14385Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 150.0.7871.46 allowed a remote attacker to perform out of bounds memory accesGoogle Chrome
- CVE-2026-54263Wagtail: Reflected XSS in dynamic image URL generator viewwagtail
- CVE-2026-55660TinaCMS: Cross-origin postMessage handlers and rich-text URL-sanitization bypass enable stored XSS and session takeovertinacms · @tinacms/app
- CVE-2026-54074@tinacms/cli: Remote Code Execution via Forestry migration — unsanitised __TINA_INTERNAL__ marker in user-controlled YAML labelstinacms · @tinacms/cli
- CVE-2026-58263Jodit Editor: Mutation XSS in jodit clean-html via a MathML/style rawtext carrierxdan jodit · jodit
- CVE-2026-50521Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityMicrosoft Edge
- CVE-2026-55153mchange-commons-java contains elements susceptible to abuse via JNDI injection and "deserialization gadgets"swaldman mchange-commons-java · com.mchange:mchange-commons…
- CVE-2026-14265RCE via Deserialization in AWS Advanced JDBC WrapperAWS Advanced JDBC Wrapper
- CVE-2026-58593NodeBB - ActivityPub Author Spoofing via Unvalidated attributedTo Mapped to Local UserNodeBB
- CVE-2026-58592Ladybird - Web-Reachable Code Execution via Dangling FunctionType Reference in WebAssembly ESM IntegrationLadybirdBrowser Ladybird
- CVE-2026-13760OS Command Injection in aws-cdk-lib Docker BundlingAWS CDK · aws-cdk-lib
- CVE-2026-41121Dell Device Management Agent, versions prior to DDMA 26.05, contain an Improper Link Resolution Before File Access ('Link Following’) vulnerDell Device Management Agent
- CVE-2026-49119Gradio < 6.16.0 Path Traversal via FileExplorer.preprocess()gradio-app gradio · gradio
- CVE-2026-58451Horde IMP < 7.0.1 Path Traversal via Compose.php img srchorde imp
- CVE-2026-53489containerd: Arbitrary host CRI log file read via symlink following in CRI checkpoint restorecontainerd · github.com/containerd/containerd +1
- CVE-2026-53492containerd CRI checkpoint restore CDI annotation smugglingcontainerd · github.com/containerd/containerd/v2 +1
- CVE-2026-57736WordPress HubSpot plugin <= 11.3.51 - Sensitive Data Exposure vulnerabilityHubSpot
- CVE-2026-46680containerd user ID handling bypass allows runAsNonRoot evasioncontainerd · github.com/containerd/containerd +1
- CVE-2026-49091Improper Output Neutralization for Logs in Kibana Leading to Log InjectionElastic Kibana
- CVE-2026-57723WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.12 - CSRF to Arbitrary File Deletion vulnerabilitye4jvikwp VikBooking Hotel Booking Engine & PMS
- CVE-2026-54428Apache HttpComponents Core: HPackDecoder Unlimited Header List Size Before SETTINGS ACKApache Software Foundation Apache HttpComponents Core · org…
- CVE-2026-54399Apache HttpComponents Core: Unbounded HTTP Header/Line Length in Default ConfigurationApache Software Foundation Apache HttpComponents Core · org…
- CVE-2026-57516Ray < 2.56.0 Unsafe Deserialization RCE via WebDataset ReaderAnyscale Ray · ray
- CVE-2026-20243ClamAV ALZ Archive Processing Denial of Service VulnerabilityCisco Secure Endpoint
- CVE-2026-20244ClamAV DMG File Processing Denial of Service VulnerabilityCisco Secure Endpoint
- CVE-2026-20215ClamAV 7Zip File Format Processing Out-of-Bounds Memory Corruption VulnerabilityCisco Secure Endpoint
- CVE-2026-20217ClamAV PESpin File Format Processing Out-of-Bounds Memory Corruption VulnerabilityCisco Secure Endpoint
- CVE-2026-20216ClamAV InstallShield File Format Processing Resource Exhaustion VulnerabilityCisco Secure Endpoint
- CVE-2026-20213ClamAV PE File Format Processing Out-of-Bounds Memory Corruption VulnerabilityCisco Secure Endpoint
- CVE-2026-20214ClamAV FSG File Format Processing Out-of-Bounds Memory Corruption VulnerabilityCisco Secure Endpoint
- CVE-2026-20191Cisco Catalyst Center Arbitrary File Read VulnerabilityCisco Catalyst Center
- CVE-2026-34105Guardian Language-System SQL Injection via id Parameter in translate_text.phpguardian language-system
- CVE-2026-34104Guardian Language-System SQL Injection via name Parameter in designer.phpguardian language-system
- CVE-2026-34103Guardian Language-System SQL Injection via id Parameter in subtitles.phpguardian language-system
- CVE-2026-34102Guardian Language-System SQL Injection via id Parameter in job_info_get.phpguardian language-system
- CVE-2026-34101Guardian Language-System SQL Injection via id Parameter in text_file.phpguardian language-system
- CVE-2026-34100Guardian Language-System SQL Injection via id Parameter in media.phpguardian language-system
- CVE-2026-58454JAIOTlink C492A-W6 4.8.30.57701411 RCE via /Anyka/config EndpointJAIOTlink C492A-W6 Wi-Fi IP Camera
- CVE-2026-58452JAIOTlink C492A-W6 4.8.30.57701411 OS Command Injection via SetMAC EndpointJAIOTlink C492A-W6 Wi-Fi IP Camera
- CVE-2026-24264NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause improper handling of highly compressed data.NVIDIA Triton Inference Server
- CVE-2026-24251NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of dynamically managed code resourcNVIDIA Megatron-Bridge
- CVE-2026-24250NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper validation of allowed inputs.NVIDIA Megatron-Bridge
- CVE-2026-24249NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data.NVIDIA Megatron-Bridge
- CVE-2026-24248NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of code generation.NVIDIA Megatron-Bridge
- CVE-2026-24247NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data.NVIDIA Megatron-Bridge
- CVE-2026-24246NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of dynamically managed code resourcNVIDIA Megatron-Bridge
- CVE-2026-24245NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data.NVIDIA Megatron-Bridge
- CVE-2026-24244NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data.NVIDIA Megatron-Bridge
- CVE-2026-24243NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data.NVIDIA Megatron-Bridge
- CVE-2026-24242NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause server-side request forgery.NVIDIA Megatron-Bridge
- CVE-2026-24240NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data.NVIDIA Megatron-Bridge
- CVE-2026-24260NVIDIA Container Toolkit for Linux contains a vulnerability where an attacker could cause a time-of-check time-of-use race condition.NVIDIA Container Toolkit · NVIDIA GPU Operator
- CVE-2026-58399@acastellon/auth has an authentication bypass via spoofable headers in validateToken()antonio-castellon module-auth · @acastellon/auth
- CVE-2026-2891Poly Voice Devices (CCX, Trio, Edge E) – Potential Denial of ServiceHP CCX · HP Trio C60 +1
- CVE-2026-6688FatFs Buffer Overflow via Unbounded LFN Filename CopyChaN FatFs
- CVE-2026-6687FatFs Stack Buffer Overflow via Uncapped exFAT Label LengthChaN FatFs
- CVE-2026-13602Session takeover vulnerabilitypretix · pretix-mollie +6
- CVE-2026-6682FatFs Integer Overflow in FAT32 Volume MountChaN FatFs
- CVE-2026-53356drm/i915/gem: Fix phys BO pread/pwrite with offsetLinux
- CVE-2026-53354arm64: errata: Mitigate TLBI errata on various Arm CPUsLinux
- CVE-2026-53341fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh()Linux
- CVE-2026-53329drm/amd/display: Use krealloc_array() in dal_vector_reserve()Linux
- CVE-2026-5136Foreman: foreman: privilege escalation to administrator-level access via usergroup role assignment manipulationRed Hat Satellite 6.16 for RHEL · Red Hat Satellite 6.17… +3
- CVE-2026-5120Race Condition vulnerability affecting BIOVIA Workbook from Release 2021 through Release 2026Dassault Systèmes BIOVIA Workbook
- CVE-2026-53902Privilege Escalation in MCOMyComplianceOffice MCO
- CVE-2026-14181@fastify/middie standalone engine vulnerable to Denial of Service via malformed percent-encoded paths@fastify/middie
- CVE-2026-12142NEX-Forms <= 9.2.2 - Unauthenticated Stored Cross-Site Scripting via '_name[]' Array Parameterwebaways NEX-Forms – Ultimate Forms Plugin for WordPress
- CVE-2026-13228LatePoint <= 5.6.3 - Authenticated (Custom+) Privilege Escalation to Administrator via 'order[customer_id]' ParameterLatePoint – Calendar Booking Plugin for Appointments and Ev…
- CVE-2026-10538Improper deserialization handling in Control-M ComponentsBMC Control-M/Enterprise Manager · BMC Control-M/Server
- CVE-2026-12158RegistrationMagic <= 6.0.9.1 - Cross-Site Request Forgery to Privilege Escalation via 'rmc_assign_user_role_action' Parametermetagauss RegistrationMagic – Custom Registration Forms, Us…
- CVE-2026-12577DVP80ES3 Improperly Implemented Security Check for Standard vulnerabilitydeltaww DVP80ES3
- CVE-2026-12576DVP80ES3 Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerabilitydeltaww DVP80ES3
- CVE-2026-12575DVP80ES3 Improper Resource Shutdown or Release Vulnerabilitydeltaww DVP80ES3
- CVE-2026-50043Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in SkyBridge MB-A100/MB-A110.Seiko Solutions SkyBridge MB-A100/MB-A110
- CVE-2026-12224Dokan Pro <= 5.0.4 - Authenticated (Vendor+) Privilege Escalation via update_capabilities REST Endpointwedevs Dokan Pro
- CVE-2026-11883WebAuthn Provider for Two Factor < 2.5.6 - 2FA BypassWebAuthn Provider for Two Factor
- CVE-2026-11794Advanced Form Integration < 2.1.1 - Unauthenticated Privilege Escalation via Breakdance Form Role MappingAdvanced Form Integration — Connect Forms to 200+ Apps
- CVE-2026-11568Product Configurator for WooCommerce < 1.7.3 - Unauthenticated Private/Draft Product Data Disclosure via pc_get_dataProduct Configurator for WooCommerce
- CVE-2026-10750Royal MCP < 1.4.26 - Subscriber+ Insufficient Authorization in MCP ToolsRoyal MCP
- CVE-2026-1239Ninja Forms <= 3.14.1 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via token/refresh REST Endpointkstover Ninja Forms – The Contact Form Builder That Grows W…
- CVE-2026-11823BookingPress Appointment Booking Pro <= 5.7.1 - Unauthenticated SQL Injection via 'store_service_date' ParameterRepute Infosystems BookingPress Appointment Booking Pro
- CVE-2026-14193DVP80ES300T - Improper Validation of Array Index Vulnerabilitydeltaww DVP80ES300T
- CVE-2026-12579AS228T - Authentication Bypass Vulnerabilitydeltaww AS228T
- CVE-2026-7517Custom Payment Gateways for WooCommerce <= 2.1.0 - Unauthenticated Stored Cross-Site Scripting via 'alg_wc_cpg_input_fields' Parameterdhruvin Custom Payment Gateways for WooCommerce
- CVE-2026-12923Video Gallery <= 4.0.3 - Authenticated (Subscriber+) Arbitrary Function Call via 'path' Parameteremarket-design Video Gallery – YouTube Gallery, Playlist &…
- CVE-2026-13468Visualizer <= 4.0.3 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via /visualizer/v1/action/{chart}/{type}/ REST Endpointthemeisle Visualizer – Tables & Charts Manager with Built-i…
- CVE-2026-13731WPBot <= 8.4.9 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameterquantumcloud WPBot – AI ChatBot for Live Support, Lead Gene…
- CVE-2026-7838UltraVNC viewer heap buffer overflow via integer overflow in RFB connection-failure reason lengthuvnc UltraVNC
- CVE-2026-7831UltraVNC viewer off-by-one stack overflow in ServerInit desktop name parsinguvnc UltraVNC
- CVE-2026-7830UltraVNC MS-Logon II uses 64-bit Diffie-Hellman and seeded libc rand() enabling credential interceptionuvnc UltraVNC
- CVE-2026-7829UltraVNC repeater authenticated out-of-bounds write in rule parser via oversized tokenuvnc UltraVNC
- CVE-2026-20458In Modem, there is a possible memory corruption due to a missing bounds check.MediaTek chipset
- CVE-2026-14191WinRAR / UnRAR RAR5 recovery-volume (.rev) out-of-bounds heap write in RecVolumes5::ReadHeaderRARLAB WinRAR · RARLAB RAR +2
- CVE-2026-36912A NULL pointer dereference in the AP4_AtomSampleTable::GetSample() function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to
- CVE-2026-38891An improper input validation in the gazebo_ros_diff_drive.cpp component of gazebo_plugins v3.9.0 allows attackers to cause a Denial of Servi
- CVE-2026-52190Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohea
Medium, low and unrated 190
- CVE-2026-50280Craft CMS: Authorization bypass in `entries/move-to-section` via missing target-section save checkcraftcms cms · craftcms/cms
- CVE-2026-55792Craft CMS: Sensitive File Disclosure / Server-Side File Readcraftcms cms · craftcms/cms
- CVE-2026-55791Craft CMS: Blind SSRF and Arbitrary JavaScript Injection via Host Header Poisoning in actionResourceJscraftcms cms · craftcms/cms
- CVE-2026-14399Uninitialized Use in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to obtain potentially sensitive information fromGoogle Chrome
- CVE-2026-14408Uninitialized Use in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to obtain potentially sensitive information fromGoogle Chrome
- CVE-2026-14421Uninitialized Use in Dawn in Google Chrome on ChromeOS prior to 150.0.7871.46 allowed a remote attacker to obtain potentially sensitive infoGoogle Chrome
- CVE-2026-14418Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to leak cross-origin data via a crafted HTML paGoogle Chrome
- CVE-2026-14402Uninitialized Use in ANGLE in Google Chrome on Windows prior to 150.0.7871.46 allowed a remote attacker to obtain potentially sensitive infoGoogle Chrome
- CVE-2026-14406Out of bounds read in V8 in Google Chrome prior to 150.0.7871.46 allowed an attacker who convinced a user to install a malicious extension tGoogle Chrome
- CVE-2026-14388Out of bounds read in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to obtain potentially sensitive information frGoogle Chrome
- CVE-2026-14386Out of bounds read in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to obtain potentially sensitive information frGoogle Chrome
- CVE-2026-14396Out of bounds read in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to leak cross-origin data via a crafted HTML pGoogle Chrome
- CVE-2026-14384Out of bounds read in ANGLE in Google Chrome on Windows prior to 150.0.7871.46 allowed a remote attacker to leak cross-origin data via a craGoogle Chrome
- CVE-2026-14391Integer overflow in ANGLE in Google Chrome on Windows prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer procGoogle Chrome
- CVE-2026-14414Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised theGoogle Chrome
- CVE-2026-14381Incorrect security UI in WebAppInstalls in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to perform UI spoofing via a craftGoogle Chrome
- CVE-2026-14410Inappropriate implementation in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer procGoogle Chrome
- CVE-2026-14404Inappropriate implementation in PDFium in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to perform UI spoofing via a crafteGoogle Chrome
- CVE-2026-50283Craft CMS: Unauthorized Deletion of Source Assets During File Replacementcraftcms cms · craftcms/cms
- CVE-2026-55793Craft CMS: Stored XSS via Structure entry title in table viewcraftcms cms · craftcms/cms
- CVE-2026-54712OpenTelemetry Javaagent RMI context propagation allows resource exhaustionopen-telemetry opentelemetry-java-instrumentation · io.open…
- CVE-2026-54704OpenTelemetry Java Instrumentation: JDBC Auto-Instrumentation Logging Clear-Text Passwordsopen-telemetry opentelemetry-java-instrumentation · io.open…
- CVE-2026-54262Wagtail: Pages translations can be created without page permissions when using simple_translationwagtail
- CVE-2026-54261Wagtail: Improper permission handling in image previewwagtail
- CVE-2026-54259Wagtail: Improper restriction handling on Documents and Images chosen endpointswagtail
- CVE-2026-54260Wagtail: Denial of service via unbounded filter specs in the image previewwagtail
- CVE-2026-14340An incorrect authorization vulnerability in GitHub Enterprise Server allows issue creation in unrelated public repositoriesGitHub Enterprise Server
- CVE-2026-54720Silverstripe Framework: Possible XSS attack through media embedsilverstripe-framework · silverstripe/framework
- CVE-2026-55661TinaCMS rich-text (slatejson) rendering does not sanitize link/image URLs, allowing stored XSS via dangerous URL schemestinacms · @tinacms/mdx
- CVE-2026-54756Jodit Editor: Prototype pollution via Jodit.configure() / ConfigMergexdan jodit · jodit
- CVE-2026-55886Jodit Editor: Prototype Pollution in Jodit via Jodit.modules.Helpers.set()xdan jodit · jodit
- CVE-2026-54786Wasmtime: Leak in WASIp1 `fd_renumber` implementationbytecodealliance wasmtime · wasmtime-wasi
- CVE-2026-55688AsyncHttpClient: Cookie stored for an unrelated domain (cookie tossing) via ThreadSafeCookieStoreAsyncHttpClient async-http-client · org.asynchttpclient:asy…
- CVE-2026-54908Pion DTLS: Denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange messagepion dtls · github.com/pion/dtls/v3
- CVE-2026-49858API Platform Core: Cross-user attribute leak in JSON:API and HAL item normalizers due to missing isCacheKeySafe gateapi-platform core · api-platform/hal +2
- CVE-2026-14363Cargo Extension: SQLi in Special:DrilldownThe Wikimedia Foundation Mediawiki - Cargo Extension
- CVE-2026-54164API Platform Core: Missing IRI type check enables resource type confusionapi-platform core · api-platform/core
- CVE-2026-55597ImageMagick: Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of argumentsImageMagick · Magick.NET-Q16-AnyCPU +16
- CVE-2026-55595ImageMagick: Infinite Loop in connected-components when providing invalid argumentsImageMagick · Magick.NET-Q16-AnyCPU +16
- CVE-2026-55594ImageMagick: Stack Overflow in MVG decoder due to missing depth check.ImageMagick · Magick.NET-Q16-AnyCPU +16
- CVE-2026-55577ImageMagick: Heap Buffer Overflow in ImageMagick MVG decoderImageMagick
- CVE-2026-55510ImageMagick: Use-After-Free in crafted 8BIM when identifying an imageImageMagick · Magick.NET-Q16-AnyCPU +16
- CVE-2026-53467ImageMagick: Information Disclosure in MNG decoder because allocated memory is left unchangedImageMagick · Magick.NET-Q16-AnyCPU +16
- CVE-2026-14358Stored XSS in Wikimedia Chart pie tooltip via Data:*.tab field titleThe Wikimedia Foundation Mediawiki - Charts Extension
- CVE-2026-13769Overly permissive File Permissions in AWS CLIAWS CLI · awscli
- CVE-2026-58517Blocked users can create and edit WikiLambda objectsThe Wikimedia Foundation Mediawiki - WikiLambda Extension
- CVE-2026-53466ImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflowImageMagick · Magick.NET-Q16-AnyCPU +16
- CVE-2026-55628ImageMagick: Policy Bypass in concatenate operation due to missing checksImageMagick · Magick.NET-Q16-AnyCPU +16
- CVE-2026-50195containerd: CRI checkpoint import allows local image tag poisoningcontainerd · github.com/containerd/containerd/v2 +1
- CVE-2026-47262containerd image-triggered runtime DoS via unbounded group parsingcontainerd · github.com/containerd/containerd +1
- CVE-2026-57737WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.22 - Cross Site Scripting (XSS) vulnerabilityAverta Shortcodes and extra features for Phlox theme
- CVE-2026-58521SQLi in Cargo extension via year range filterThe Wikimedia Foundation Mediawiki - Cargo Extension
- CVE-2026-49090Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of ServiceElasticsearch
- CVE-2026-58520UrlShortener defaults to ineffective validation open to third-party redirectsThe Wikimedia Foundation Mediawiki - UrlShortener Extension
- CVE-2026-5051Audit Log Plugin Directory Guard Bypass via Legacy path OptionHashiCorp Vault
- CVE-2026-57722WordPress Enable Media Replace plugin <= 4.2.1 - Cross Site Scripting (XSS) vulnerabilityShortPixel Enable Media Replace
- CVE-2026-49088Insertion of Sensitive Information into Log File in Kibana Leading to Information DisclosureElastic Kibana
- CVE-2026-57721WordPress ApplyOnline plugin <= 2.6.7.6 - Broken Access Control vulnerabilityWP Reloaded ApplyOnline
- CVE-2026-57720WordPress ThumbPress plugin <= 6.3.2 - Broken Access Control vulnerabilityCodexpert ThumbPress
- CVE-2026-12480Arbitrary HDF5 File Read via Virtual Dataset Bypass in keras-team/keraskeras-team/keras · keras
- CVE-2026-49087Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of ServiceElastic Kibana
- CVE-2026-56152Incorrect Authorization in Kibana Leading to Information DisclosureElastic Kibana
- CVE-2026-56151Improper Input Validation in Kibana Leading to Denial of ServiceElastic Kibana
- CVE-2026-56150Allocation of Resources Without Limits or Throttling in Fleet Server Leading to Denial of ServiceElastic Fleet Server
- CVE-2026-56149Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of ServiceElasticsearch
- CVE-2026-56148Uncontrolled Recursion in Elasticsearch Leading to Denial of ServiceElasticsearch
- CVE-2026-27409WordPress Webba Booking plugin <= 6.4.13 - Broken Access Control vulnerabilityWebba Plugins Webba Booking
- CVE-2026-34098Guardian Language-System XSS via id Parameter in media.phpguardian language-system
- CVE-2026-34097Guardian Language-System XSS via id Parameter in text_file.phpguardian language-system
- CVE-2026-34096Guardian Language-System XSS via name Parameter in designer.phpguardian language-system
- CVE-2026-13211Genucenter Disclosure of SNMP Credentialsgenua genucenter
- CVE-2026-58025Remote Code Execution via Unsafe Deserialization in LogItem ImportWikimedia Foundation MediaWiki
- CVE-2026-58029Full Account Takeover from BotPasswords and OAuth via action=changeauthenticationdataWikimedia Foundation MediaWiki
- CVE-2026-58028Pretty-printed API output combined with centralauthtoken allows XSS with certain gadgetsWikimedia Foundation MediaWiki · Wikimedia Foundation Centr…
- CVE-2026-24266NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause a use-after-free issue.NVIDIA Triton Inference Server
- CVE-2026-58026$wgNonincludableNamespaces can be bypassed by embedding redirect in other namespacesWikimedia Foundation MediaWiki
- CVE-2026-8857Full RCE using EasyTimeline ExtensionWikimedia Foundation timeline
- CVE-2026-58038Stored XSS through javascript URLs in SVGs generated by EasyTimelineWikimedia Foundation timeline
- CVE-2026-58027QueryAbuseFilter API can be used to see the hit count of private filters, which is hidden in the UIWikimedia Foundation AbuseFilter
- CVE-2026-58030SyntaxHighlight stored XSS via unsanitized 'linelinks' attributeWikimedia Foundation SyntaxHighlight_GeSHi
- CVE-2026-58032mw.Api.getErrorMessage() may return injected HTML if used without errorformat=htmlWikimedia Foundation MediaWiki
- CVE-2026-58033"Total number of distinct authors" statistic at action=info does not exclude revisions where the author name was deletedWikimedia Foundation MediaWiki
- CVE-2026-8480Connection possible to the Administration portal with a revoked certificateStormshield Network Security
- CVE-2026-58037Core log entries for exceptions and XSS issues in log entry formatting code that may be caused by user-controlled inputWikimedia Foundation MediaWiki
- CVE-2026-58036Users API leaks whether privileged users have their user groups disabled for lack of 2FAWikimedia Foundation MediaWiki
- CVE-2026-58024API identification of users on private wikisWikimedia Foundation MediaWiki
- CVE-2026-13707Session fixation attacks on improperly configured OAuth 1.0a toolsWikimedia Foundation OAuth
- CVE-2026-13706UrlShortener extension url validation can be bypassed due to difference between php url parsing and WHATWGWikimedia Foundation UrlShortener
- CVE-2026-58031Stored i18n XSS in Special:ApiSandbox when a deprecated module is selectedWikimedia Foundation MediaWiki
- CVE-2026-58034Stored XSS through a system message when blocking a temporary account that's related to other temporary accountsWikimedia Foundation CheckUser
- CVE-2026-6283Stored XSS in DivvyDrive Information Technologies' DivvyDriveDivvyDrive Information Technologies DivvyDrive
- CVE-2026-58035Stored XSS through a system message in the codex version of Special:BlockWikimedia Foundation MediaWiki
- CVE-2026-5220Stored XSS in DivvyDrive Information Technologies' DivvyDriveDivvyDrive Information Technologies DivvyDrive
- CVE-2026-14330Pipewire: pulse server alloca stack overflowRed Hat Enterprise Linux
- CVE-2026-14324Pipewire: raop rtsp null derefRed Hat Enterprise Linux
- CVE-2026-5138Foreman: foreman: information disclosure via improper validation of nested request parametersRed Hat Satellite 6.16 for RHEL · Red Hat Satellite 6.17… +3
- CVE-2026-5135Foreman: foreman: unauthorized modification of host configurations via broken access controlRed Hat Satellite 6.16 for RHEL · Red Hat Satellite 6.17… +3
- CVE-2026-5142Foreman: foreman: cross-tenant private ssh key disclosure via taxonomy scoping bypassRed Hat Satellite 6.16 for RHEL · Red Hat Satellite 6.17… +3
- CVE-2026-12374Improper XPC caller certificate validation and TOCTOU race condition in macOS PrivilegedHelperToolCato Networks SDP Client
- CVE-2026-6686FatFs Use of Uninitialized Clusters After Seek Past EOFChaN FatFs
- CVE-2026-6684FatFs Infinite Loop in GPT Partition ScanChaN FatFs
- CVE-2026-6683FatFs Divide-by-Zero in exFAT SyncChaN FatFs
- CVE-2026-53353hsr: Remove WARN_ONCE() in hsr_addr_is_self().Linux
- CVE-2026-53352signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()Linux
- CVE-2026-53351riscv/ptrace: Use USER_REGSET_NOTE_TYPE for REGSET_CFILinux
- CVE-2026-53350ASoC: wm_adsp: Fix NULL dereference when removing firmware controlsLinux
- CVE-2026-53349netfilter: nf_conntrack: destroy stale expectfn expectations on unregisterLinux
- CVE-2026-53348ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functionsLinux
- CVE-2026-53347drm/virtio: Fix driver removal with disabled KMSLinux
- CVE-2026-53346rust: arm64: set uwtable llvm module flag for CONFIG_UNWIND_TABLESLinux
- CVE-2026-53345KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dyingLinux
- CVE-2026-53344pinctrl: mcp23s08: Initialize mcp->dev and mcp->addr before regmap initLinux
- CVE-2026-53343ARM: 9475/1: entry: use byte load for KASAN VMAP stack shadowLinux
- CVE-2026-53342arm64: mm: call pagetable dtor when freeing hot-removed page tablesLinux
- CVE-2026-53340i2c: imx: fix clock and pinctrl state inconsistency in runtime PMLinux
- CVE-2026-53339i2c: qcom-cci: Fix NULL pointer dereference in cci_remove()Linux
- CVE-2026-53338net: airoha: Add NULL check for of_reserved_mem_lookup() in airoha_qdma_init_hfwd_queues()Linux
- CVE-2026-53337net: bonding: fix NULL pointer dereference in bond_do_ioctl()Linux
- CVE-2026-53336nvmem: layouts: onie-tlv: fix hang on unknown typesLinux
- CVE-2026-53335mm/damon/lru_sort: handle ctx allocation failureLinux
- CVE-2026-53334mm/damon/reclaim: handle ctx allocation failureLinux
- CVE-2026-53333mm/mincore: handle non-swap entries before !CONFIG_SWAP guardLinux
- CVE-2026-53332slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngdLinux
- CVE-2026-53331slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl->lockLinux
- CVE-2026-53330drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval()Linux
- CVE-2026-53328sched_ext: Don't warn on NULL cgrp_moving_from in scx_cgroup_move_task()Linux
- CVE-2026-53327debugobjects: Do not fill_pool() if pi_blocked_onLinux
- CVE-2026-53326debugobjects: Don't call fill_pool() in early boot hardirq contextLinux
- CVE-2026-8387Relative Path Traversal in allegroai/clearmlallegroai/clearml
- CVE-2026-53909Arbitrary File Upload in MCOMyComplianceOffice MCO
- CVE-2026-53908User Enumeration in MCOMyComplianceOffice MCO
- CVE-2026-53907Stored Cross‑Site Scripting in MCOMyComplianceOffice MCO
- CVE-2026-53906Path Disclosure and Path Traversal in MCOMyComplianceOffice MCO
- CVE-2026-53905Unauthorized Access to Administrator ACL View in MCOMyComplianceOffice MCO
- CVE-2026-53904Account Denial of Service in MCOMyComplianceOffice MCO
- CVE-2026-53903Insecure Direct Object Reference in MCOMyComplianceOffice MCO
- CVE-2026-13323In Open VSX Registry before 1.0.2, the /vscode/unpkg/ endpoint serves user-supplied HTML files with Content-Type: text/html and without a CoEclipse Foundation Eclipse Open VSX
- CVE-2026-10095WP Photo Album Plus <= 9.1.13.005 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'subtext' Shortcode Attributeopajaap WP Photo Album Plus
- CVE-2026-14258Dhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length ipv6 nd option in router advertisement handlingRed Hat Enterprise Linux
- CVE-2026-27435WordPress Woffice theme < 5.4.33 - Broken Access Control vulnerabilityWofficeIO Woffice
- CVE-2026-12754VikBooking Hotel Booking Engine & PMS <= 1.8.12 - Reflected Cross-Site Scripting via 'layoutstyle' Parametere4jvikwp VikBooking Hotel Booking Engine & PMS
- CVE-2026-13454MotoPress Appointment Booking <= 2.4.5 - Authenticated (Staff+) SQL Injection via 's' Parameterjetmonsters MotoPress Appointment Booking
- CVE-2026-13733Download Manager <= 3.3.60 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'no_data_msg' Shortcode Attributecodename065 Download Manager
- CVE-2026-12408Slim SEO <= 4.9.8 - Authenticated (Contributor+) Insufficient Authorization to Private Content Disclosure via 'object.ID' Parameterrilwis Slim SEO – A Fast & Automated SEO Plugin For WordPre…
- CVE-2026-10096Qi Blocks <= 1.4.9 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Style Modification via 'page_id' Parameterqodeinteractive Qi Blocks
- CVE-2026-12435Motors <= 1.4.111 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Modification via 'stm_mark_as_sold_car' Parameterstylemix Motors – Car Dealership & Classified Listings Plug…
- CVE-2026-12732LearnPress <= 4.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class_wrapper_form' Shortcode Attributethimpress LearnPress – WordPress LMS Plugin for Create and…
- CVE-2026-10540Weak password hash protection in Control-M/Entreprise ManagerBMC Control-M/Enterprise Manager
- CVE-2026-56016CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sourcesMARKSTOS CGI::Session::ID::md5
- CVE-2026-11887Salon Booking System < 10.30.20 - Subscriber+ Booking Approval BypassSalon Booking System
- CVE-2026-11880Fluent Forms < 6.2.1 - Subscriber+ Subscription Cancellation via IDORFluent Forms
- CVE-2026-11570User Submitted Posts < 20260608 - Unauthenticated Stored XSS via Author NameUser Submitted Posts
- CVE-2026-11562WS Form LITE < 1.11.8 - Subscriber+ Arbitrary Settings UpdateWS Form LITE
- CVE-2025-15666Open Asset Import Library Assimp Model File SceneCombiner.cpp Copy heap-based overflowOpen Asset Import Library Assimp
- CVE-2026-11380JetWidgets For Elementor <= 1.0.21 - Authenticated (Author+) Stored Cross-Site Scripting via Animated Box 'animation_effect' Settingjetmonsters JetWidgets For Elementor
- CVE-2026-12127WPForms <= 1.10.2 - Improper Neutralization of CRLF Sequences to Unauthenticated Email Header Injection via Reply-To Display Namesmub WPForms – AI Form Builder for WordPress – Contact Form…
- CVE-2026-11988LearnPress <= 4.3.9.1 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Disclosure via 'userId' Parameterthimpress LearnPress – WordPress LMS Plugin for Create and…
- CVE-2026-11981GiveWP <= 4.15.3 - Cross-Site Request Forgerystellarwp GiveWP – Donation Plugin and Fundraising Platform
- CVE-2026-2387Event Organiser <= 3.12.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via eo_events Shortcodestephenharris Event Organiser
- CVE-2026-12113Appointment Booking Calendar <= 1.4.02 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Disclosurecodepeople Appointment Booking Calendar
- CVE-2026-58519Stored XSS through Cargo's map formatThe Wikimedia Foundation Mediawiki - Cargo Extension
- CVE-2026-58518Cross-Site request forgery (CSRF) vulnerability in The Wikimedia Foundation Mediawiki - RedirectManager Extension allows Cross Site Request The Wikimedia Foundation Mediawiki - RedirectManager Extens…
- CVE-2026-12135FV Flowplayer Video Player <= 7.5.51.7212 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'video_player' Shortcodefoliovision FV Flowplayer Video Player
- CVE-2026-12090Taskbuilder <= 5.0.8 - Authenticated (Subscriber+) SQL Injection via 'wppm_proj_filter' ParameterTaskbuilder – Project Management & Task Management Tool Wit…
- CVE-2026-13015WP Google Review Slider <= 18.1 - Reflected Cross-Site Scripting via 'place' Parameterjgwhite33 WP Google Review Slider
- CVE-2026-12902Kadence Blocks <= 3.7.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary Media Attachment Creation via kadence_import_process_pattern/kadence_import_process_data AJAX Actionsstellarwp Kadence Blocks — Page Builder Toolkit for Gutenbe…
- CVE-2026-12110Taskbuilder <= 5.0.8 - Authenticated (Subscriber+) SQL Injection via 'task_search' ParameterTaskbuilder – Project Management & Task Management Tool Wit…
- CVE-2026-13443Tutor LMS <= 3.9.13 - Authenticated (Author+) Stored Cross-Site Scripting via Lesson Attachment Titlethemeum Tutor LMS – eLearning and online course solution
- CVE-2026-9107Kali Forms <= 2.4.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'kaliforms_field_components' Parameterwpchill Kali Forms — Contact Form & Drag-and-Drop Builder
- CVE-2026-12904Kadence Blocks <= 3.7.7 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary Optimizer Data Deletion/Read/Modification via 'post_path' Parameterstellarwp Kadence Blocks — Page Builder Toolkit for Gutenbe…
- CVE-2026-13246GiveWP <= 4.16.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'block_id' Shortcode Attributestellarwp GiveWP – Donation Plugin and Fundraising Platform
- CVE-2026-12133JoomSport <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Deletion via season_groupdel AJAX actionbeardev JoomSport – for Sports: Team & League, Football, Ho…
- CVE-2026-7828UltraVNC repeater integer overflow in win_log malloc leading to heap overflowuvnc UltraVNC
- CVE-2026-44040UltraVNC vncauth.c uses time-seeded libc rand() to generate VNC authentication challenge bytesuvnc UltraVNC
- CVE-2026-44041UltraVNC vncWc2Mb calls wcslen() before validating that the wide string is NUL-terminateduvnc UltraVNC
- CVE-2026-44042UltraVNC repeater wi_uudecode off-by-one in base64 decode boundary checkuvnc UltraVNC
- CVE-2026-20463In Modem, there is a possible escalation of privilege due to a permissions bypass.MediaTek chipset
- CVE-2026-20462In Telephony, there is a possible memory corruption due to a heap buffer overflow.MediaTek chipset
- CVE-2026-20461In Modem, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20460In Modem, there is a possible information disclosure due to improper input validation.MediaTek chipset
- CVE-2026-20459In Modem, there is a possible system crash due to improper input validation.MediaTek chipset
- CVE-2026-20457In Modem, there is a possible system crash due to improper input validation.MediaTek chipset
- CVE-2026-57963Chat UI manipulation by injectionMozilla Thunderbird
- CVE-2026-57962Denial-of-service via malicious LDAP address-book serverMozilla Thunderbird
- CVE-2026-41579runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violationsopencontainers runc · github.com/opencontainers/runc
- CVE-2026-36909A NULL pointer dereference in the AP4_TkhdAtom::GetTrackId() function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause
- CVE-2026-36910An access violation in the BaseSplitterFile::Read function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial o
- CVE-2026-36911A division-by-zero vulnerability in the CStreamSwitcherOutputPin::DecideBufferSize function of Aleksoid1978 MPC-BE before commit 4341cb3 all
- CVE-2026-38142An unauthenticated command injection vulnerability in the /goform/fast_setting_internet_set endpoint of Tenda AC18 v15.03.05.05 allows attac
- CVE-2026-51946SQL Injection vulnerability in GoAdminGroup GoAdmin (last release v1.2.26) allows a remote attacker to execute arbitrary code and obtain sen