CVEs published July 8, 2026
362 CVEs were published on July 8, 2026: 23 critical, 166 high. 1 is now in CISA KEV.
- Published
- 362
- Critical
- 23
- High
- 166
- Medium
- 154
- Low
- 19
- Unrated
- 0
- Now in CISA KEV
- 1
- Fix available
- 259
Most affected products
- Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- 28
- Google Chrome
- 27
- nats-io nats-server
- 12
- Wireshark Foundation Wireshark
- 11
- lepture mistune · mistune
- 9
- CoreWCF · CoreWCF.Primitives
- 8
- OpenBSD OpenSSH
- 8
- Progress MOVEit Transfer
- 8
- Capgo
- 7
- GitLab
- 7
Critical 23
- CVE-2026-47646Dynamics 365 Customer Voice Spoofing VulnerabilityMicrosoft Dynamics 365 Customer Voice
- CVE-2026-15113Use after free in Autofill in Google Chrome on Android prior to 150.0.7871.115 allowed a remote attacker to potentially perform a sandbox esGoogle Chrome
- CVE-2026-54782CoreWCF: Authentication bypass in CoreWCF SAML 1.1 / 2.0 token signature validationCoreWCF · CoreWCF.Primitives
- CVE-2026-44024Fluentd: Remote Code Execution (RCE) via Arbitrary File Write in `${tag}` Placeholderfluentd
- CVE-2026-54527JupyterLab Git: Stored XSS leading to RCEjupyterlab-git · jupyterlab-git-core +1
- CVE-2026-60104Bitwarden Server < 2026.6.0 Authorization Bypass via Admin Auth Requestbitwarden server
- CVE-2026-9074IBM API Connect SQL InjectionIBM API Connect
- CVE-2026-59873node-tar: Decompression/parse DoS via unlimited inputisaacs node-tar · tar
- CVE-2026-59702repomix - Server-Side Request Forgery via Unvalidated Repository URLs in POST /api/packrepomix
- CVE-2026-15062SQL Injection in Snowflake Snowpark Python SDKSnowflake Snowpark Python SDK
- CVE-2026-54061Dgraph Alpha group stores can be replaced via unauthenticated external snapshot importdgraph-io dgraph · github.com/dgraph-io/dgraph +1
- CVE-2026-58480Blocksy Companion Pro < 2.1.47 Unauthenticated File Upload via save_attachmentsCreative Themes Blocksy Companion
- CVE-2026-14454Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signedTONYC Imager
- CVE-2026-8307SQLi in Webbeyaz's Mediküm WebWebbeyaz Web Design Mediküm Web
- CVE-2026-41042Apache Gravitino: Unauthenticated callers can supply a malicious H2 JDBC URL through the testConnection API, which executes arbitrary Java code on the server via H2's INIT parameterApache Software Foundation Apache Gravitino
- CVE-2026-56000xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent()X.Org xorg-x11-server · X.Org xwayland
- CVE-2026-9695Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026Dassault Systèmes DELMIA Apriso
- CVE-2026-12153WP Learn Manager <= 1.1.8 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation and Activation via jslearnmanager_ajax AJAX Actionrabilal WP Learn Manager
- CVE-2026-14487Simple Coherent Form <= 2.4.13 - Unauthenticated Arbitrary File Deletion via 'id' Parametertombgtn Simple Coherent Form
- CVE-2026-9701Eventer <= 4.4.2 - Insecure Password Reset Mechanism to Unauthenticated Privilege Escalationjoe007 Eventer
- CVE-2026-56843Incorrect authorization in the XML-RPC API of WebPros Plesk before 18.0.78.4 allows a low-privileged authenticated customer to look up domaiWebpros Plesk
- CVE-2026-31309Improper authorization in the /tequilapi/config/user endpoint of Mysterium Node from v1.21.1-rc0 before v1.36.0 allows an unauthenticated at
- CVE-2026-52200An issue in Generic OEM UZ801_v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute arbitrary code via the /ajax web management API
High 166
- CVE-2026-15107Use after free in IndexedDB in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox viGoogle Chrome
- CVE-2026-15126Use after free in Forms in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a Google Chrome
- CVE-2026-15125Inappropriate implementation in Forms in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a Google Chrome
- CVE-2026-15123Inappropriate implementation in DOM in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruptioGoogle Chrome
- CVE-2026-15122Insufficient validation of untrusted input in Codecs in Google Chrome on Windows prior to 150.0.7871.115 allowed a remote attacker who had cGoogle Chrome
- CVE-2026-15121Use after free in WebRTC in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via aGoogle Chrome
- CVE-2026-15120Use after free in Core in Google Chrome on Windows prior to 150.0.7871.115 allowed a remote attacker who had compromised the renderer procesGoogle Chrome
- CVE-2026-15119Race in GetUserMedia in Google Chrome prior to 150.0.7871.115 allowed a remote attacker who had compromised the renderer process to potentiaGoogle Chrome
- CVE-2026-15118Use after free in Input in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a Google Chrome
- CVE-2026-15117Use after free in Payments in Google Chrome prior to 150.0.7871.115 allowed a remote attacker who convinced a user to engage in specific UI Google Chrome
- CVE-2026-15116Use after free in Actor in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a Google Chrome
- CVE-2026-15114Out of bounds read and write in Codecs in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corrupGoogle Chrome
- CVE-2026-15111Use after free in Views in Google Chrome prior to 150.0.7871.115 allowed a remote attacker who convinced a user to engage in specific UI gesGoogle Chrome
- CVE-2026-15110Use after free in Extensions in Google Chrome prior to 150.0.7871.115 allowed an attacker who convinced a user to install a malicious extensGoogle Chrome
- CVE-2026-15133Use after free in InterestGroups in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbGoogle Chrome
- CVE-2026-15132Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a Google Chrome
- CVE-2026-15129Use after free in Views in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a crafGoogle Chrome
- CVE-2026-15112Use after free in Ozone in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a crafGoogle Chrome
- CVE-2026-59723Cline: Cross-Origin WebSocket Hijacking in Cline Hub Dashboard (`/browser` endpoint)cline
- CVE-2026-54499Stanza: Remote Code Execution via Unsafe Pickle Deserialization in Model Loadersstanfordnlp stanza · stanza
- CVE-2026-54781CoreWCF: SAML SubjectConfirmation methods and holder-of-key proof keys are not enforcedCoreWCF · CoreWCF.Primitives
- CVE-2026-54784CoreWCF: SPNEGO SecurityContextToken proof key wrapped without confidentialityCoreWCF · CoreWCF.Primitives
- CVE-2026-54774CoreWCF: SamlSerializer skips SignatureValue verification when SAML signing token is not an X.509 certificateCoreWCF · CoreWCF.Primitives
- CVE-2026-54783CoreWCF: XML Signature Wrapping in WS-Security endorsing/supporting signature verification allows replay of captured signed messagesCoreWCF · CoreWCF.Primitives
- CVE-2026-54772CoreWCF: Pre-authentication infinite-loop CPU exhaustion in CoreWCF net.tcp / net.pipe / net.uds framing handshakeCoreWCF · CoreWCF.NetFramingBase
- CVE-2026-55878Symfony: Path Traversal in symfony/ux-toolkit Allows Arbitrary File Write and Read via Crafted Recipe Manifestsymfony ux · symfony/ux-toolkit
- CVE-2026-55471HAPI FHIR: XXE in XsltUtilities.saxonTransform via unhardened Saxon TransformerFactoryhapifhir org.hl7.fhir.core · ca.uhn.hapi.fhir:org.hl7.fhir.…
- CVE-2026-55470HAPI FHIR: DSTU2 FHIRPathEngine.matches() missing RegexTimeout protection allows ReDoShapifhir org.hl7.fhir.core · ca.uhn.hapi.fhir:org.hl7.fh… +3
- CVE-2026-44161Fluentd: Server-Side Request Forgery (SSRF) via Placeholder Expansion in `out_http`fluentd
- CVE-2026-44160Fluentd: Denial of Service (DoS) via Gzip Decompression Bomb in `in_http` and `in_forward`fluentd
- CVE-2026-44025Fluentd: Exposure of Sensitive Information via Monitor Agent APIfluentd
- CVE-2026-10037Sandbox Escape in Ubuntu OpenJDK Packages via xdg-desktop-portalCanonical Ubuntu
- CVE-2026-55830RestrictedPython guard hooks can be shadowed via positional-only argumentszopefoundation RestrictedPython · restrictedpython
- CVE-2026-55849@cyclonedx/cyclonedx-npm: Shell Injection via Unsanitized `--workspace` Argumentcyclonedx-node-npm · @cyclonedx/cyclonedx-npm
- CVE-2026-35210OpenCTI: Authorization Bypass via `synchronized-upsert` HTTP Header InjectionOpenCTI-Platform opencti · pycti
- CVE-2026-54528jupyterlab-git excluded_paths Case-Sensitivity Bypass Allows Reading Excluded Directoriesjupyterlab-git
- CVE-2026-60105Monsta FTP < 2.14.5 SSRF via IPv4-Mapped IPv6 Address BypassMonsta Limited of New Zealand Monsta FTP
- CVE-2026-58192Appium: Unauthenticated arbitrary file/directory deletion in @appium/storage-pluginappium
- CVE-2026-57480Parse Server: Denial of service via exponential-time processing of deeply nested query operatorsparse-community parse-server · parse-server
- CVE-2026-15167Stack-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-49866libp2p: CPU DoS via oversized IHAVE and IWANT control message arraysjs-libp2p · @libp2p/gossipsub
- CVE-2026-6896Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabGitLab
- CVE-2026-13320Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabGitLab
- CVE-2026-58525Microsoft Edge (Chromium-based) Security Feature Bypass VulnerabilityMicrosoft Edge
- CVE-2026-54591AsyncSSH: SCP Path Traversal to Arbitrary File Writeronf asyncssh · asyncssh
- CVE-2026-55206py7zr: O(n^2) algorithmic complexity DoS in PackInfo._read()miurahr py7zr · py7zr
- CVE-2026-55195py7zr: Decompression bomb (zip bomb) denial of service via unchecked extraction sizemiurahr py7zr · py7zr
- CVE-2026-55596Plate: Media embed provider metadata can bypass URL sanitization and execute iframe JavaScriptudecode plate · @platejs/media
- CVE-2026-56669Elysia: Inefficient Algorithmic Complexity and Interpretation Conflictelysiajs elysia · elysia
- CVE-2026-58207NATS Server: Remote crash via integer overflow in Connz paginationnats-io nats-server
- CVE-2026-0288PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server AgentPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-58210NATS Server: MQTT partial CONNECT packets can exhaust pre-auth memorynats-io nats-server
- CVE-2026-14891Nomad vulnerable to sandbox escape in Docker task driverHashiCorp Nomad
- CVE-2026-58213NATS Server: MQTT SUBSCRIBE Protocol Injection via Leaf Node/Route Forwarding allows arbitrary NATS command injectionnats-io nats-server
- CVE-2026-58250NATS Server: Pre-auth server crash via double INFO in leafnode handshakenats-io nats-server
- CVE-2026-59807Composio SDK < 0.2.32-beta.283 - Sensitive File Upload via tool-file-uploads.tsComposioHQ composio
- CVE-2026-58253NATS Server: Route API Auth Bypassnats-io nats-server
- CVE-2026-59805Gumroad < 2026.07.06.2 - Insecure Direct Object Reference in PurchasesControllerantiwork gumroad
- CVE-2026-59804Midscene Bridge Server - Session Hijack via Unauthenticated WebSocketweb-infra-dev midscene
- CVE-2026-59803rpcx - Denial of Service via Gzip Decompression Bomb in Wire Protocolsmallnest rpcx
- CVE-2026-55404yt-dlp: Downstream command injection via improper sanitization of yt-dlp --write-link outputyt-dlp
- CVE-2026-59936pypdf: Possible infinite loop for not terminated inline imagespy-pdf pypdf · pypdf
- CVE-2026-59935pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)py-pdf pypdf · pypdf
- CVE-2026-59939httplib2: Decompression Bomb Denial of Service via Unbounded gzip/deflate Response Handlinghttplib2
- CVE-2026-59948Composer: Arbitrary file write outside vendor via malicious transitive package namecomposer · composer/composer
- CVE-2026-59822LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough FallbackBerriAI litellm · litellm
- CVE-2026-55575LiquidJS: `pop` filter bypasses `memoryLimit` accounting that its array-filter siblings enforceharttle liquidjs · liquidjs
- CVE-2026-55760handlebars.java FileTemplateLoader Path Traversaljknack handlebars.java · com.github.jknack:handlebars
- CVE-2026-14373Nomad Docker driver Linux host namespace bypassHashiCorp Nomad
- CVE-2026-59731Astro 6.4.7 Authorization Bypass via Decode Iteration Limit and Rewrite Path Canonicalization Mismatchwithastro astro · astro
- CVE-2026-60102Horde VFS < 3.0.1 OS Command Injection via Horde_Vfs_Smb Driverhorde Vfs
- CVE-2026-59928Mistune block_parser: quadratic-time parsing on long lists of repeated reference-link definitionslepture mistune · mistune
- CVE-2026-59925inline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairslepture mistune · mistune
- CVE-2026-29009U-Boot < 2026.07-rc2 Buffer Overflow in nfs_readlink_reply() via NFS READLINKu-boot
- CVE-2026-29008U-Boot 2026.04-rc3 Integer Underflow DoS via tcp_rx_state_machine()u-boot
- CVE-2026-59922Mistune plugins/formatting: quadratic-time parsing on long runs of `~~x~~`, `==x==`, and `^^x^^` markers (strikethrough / mark / insert)lepture mistune · mistune
- CVE-2026-59892OpenTelemetry JavaScript: Denial of service in `JaegerPropagator` via unhandled exception on a malformed headeropen-telemetry opentelemetry-js · @opentelemetry/propagator…
- CVE-2026-59261OpenClaw < 2026.5.28 - Credential Override via Workspace Dotenv FilesOpenClaw
- CVE-2026-59887linkify-it: Quadratic-complexity DoS via the `mailto:` validator scan-loop on attacker textmarkdown-it linkify-it · linkify-it
- CVE-2026-59879Immutable.js `List` 32-bit trie overflow → unrecoverable DoSimmutable-js · immutable
- CVE-2026-39822Root escape via symlink plus trailing slash in osGo standard library os · stdlib
- CVE-2026-59880Immutable.js: Hash-collision algorithmic complexity denial of service in Immutable.Map/Setimmutable-js · immutable
- CVE-2026-59262AFFiNE - Unauthorized Document Edit History Access via GraphQL histories Fieldaffine monorepo
- CVE-2026-59725Socket.IO: Engine.IO Polling Transport Connection Exhaustionsocketio engine.io · engine.io
- CVE-2026-59724Socket.IO: Engine.IO WebTransport SID DoSsocketio socket.io · engine.io
- CVE-2026-53951Copier: trust-prefix bypass via path traversal runs tasks unpromptedcopier-org copier · copier
- CVE-2026-59874node-tar: Negative tar entry size causes infinite loop in archive replaceisaacs node-tar · tar
- CVE-2026-3144IBM API Connect Default CredentialsIBM API Connect
- CVE-2026-59869js-yaml: YAML merge-key chains can force quadratic CPU consumptionnodeca js-yaml · js-yaml
- CVE-2026-59870js-yaml quadratic-complexity denial of service via YAML11_SCHEMA !!omap parsingnodeca js-yaml · js-yaml
- CVE-2026-55761Portainer: Unauthenticated Restore Endpoint Allows Admin Takeover on Uninitialised Portainer Instancesportainer · github.com/portainer/portainer
- CVE-2026-49147App::Ack versions through 3.10.0 for Perl print unsanitised terminal escape sequences from filenames in several output modesPETDANCE App::Ack
- CVE-2026-49146App::Ack versions before 3.10.0 for Perl allow memory exhaustion via an unbounded context value in a project .ackrcPETDANCE App::Ack
- CVE-2026-59703repomix - Local File Inclusion via file:// URL Scheme in Git Clone Endpointrepomix
- CVE-2026-49145App::Ack versions through 3.10.0 for Perl read arbitrary files via --files-from in a project .ackrcPETDANCE App::Ack
- CVE-2026-54652Frigate viewer can read logs exposing admin and camera credentialsblakeblackshear frigate
- CVE-2026-55874SeaweedFS: Path traversal in the S3 gateway X-Amz-Copy-Source header allows cross-bucket object readseaweedfs · github.com/seaweedfs/seaweedfs
- CVE-2026-15067Multiple Security Vulnerabilities in Terraform Provider for Snowflake Could Allow Privilege Escalation and Unauthorized Snowflake Account TakeoverTerraform Provider for Snowflake
- CVE-2026-11903Stored XSS in MOVEit Transfer Ad Hoc moduleProgress MOVEit Transfer
- CVE-2026-10699Memory leak in SFTP service can result in a denial of service in MOVEit TransferProgress MOVEit Transfer
- CVE-2026-10698Table scope bypass vulnerability in custom reportsProgress MOVEit Transfer
- CVE-2026-10706Exposure of Sensitive Information to an Unauthorized attackerAdalo No-Code App Builder App Builder
- CVE-2026-10708Insufficiently Protected CredentialsAdalo No-Code App Builder App Builder
- CVE-2026-58656Grav API Plugin - Cross-Origin Admin Account Takeover via CORS Wildcard and JWT Query Parametergetgrav grav
- CVE-2026-56297FreeRDP - Use-After-Free via Race Condition in DRDYNVC Channel CallbackFreeRDP
- CVE-2026-56250Capgo - Arbitrary R2 Object Deletion via Mutable r2_path in app_versionsCapgo
- CVE-2026-56246Capgo - Cross-Organization Authorization Bypass via Scoped API Key Privilege InheritanceCapgo
- CVE-2026-56226Capgo - Unauthenticated Organization Data Disclosure via get_orgs_v6 RPCCap-go capgo
- CVE-2026-56220Capgo - Unauthorized Manifest Insertion via Read-Only Org MemberCapgo
- CVE-2026-15053Tanium addressed a denial of service vulnerability in Tanium Server.Tanium Server
- CVE-2026-53482Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1Dell PowerProtect Data Domain
- CVE-2026-22927Omnissa Workspace ONE® Tunnel for Windows addresses a Local Privilege Escalation Vulnerability.Omnissa Workspace ONE® Tunnel for Windows
- CVE-2026-56086Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1Dell PowerProtect Data Domain
- CVE-2026-44840Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Querydgraph-io dgraph · github.com/dgraph-io/dgraph +2
- CVE-2026-41122Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1Dell PowerProtect Data Domain
- CVE-2026-6820VikBooking Hotel Booking Engine & PMS <= 1.8.8 - Unauthenticated Stored Cross-Site Scripting via Booking Form Email Fielde4jvikwp VikBooking Hotel Booking Engine & PMS
- CVE-2026-5356LatePoint - Calendar Booking Plugin for Appointments and Events <= 5.4.0 - Unauthenticated Stripe PaymentIntent Amount-Binding BypassLatePoint – Calendar Booking Plugin for Appointments and Ev…
- CVE-2026-3688WCFM - WooCommerce Multivendor Membership <= 2.11.10 - Insecure Direct Object Reference to Limited Privilege Escalation via User Role Overwritewclovers WCFM Membership – WooCommerce Memberships for Mult…
- CVE-2026-6854My Calendar <= 3.7.8 - Unauthenticated SQL Injection via 'mc_auth' and 'mc_host' Parametersjoedolson My Calendar – Accessible Event Manager
- CVE-2026-6230Tainacan <= 1.0.3 - Unauthenticated SQL Injection via 'geoquery' REST API ParameterTainacan
- CVE-2026-6818VikBooking Hotel Booking Engine & PMS <= 1.8.8 - Unauthenticated Stored Cross-Site Scripting via 'special_requests' Parametere4jvikwp VikBooking Hotel Booking Engine & PMS
- CVE-2026-56003libXfont2 computeProps Property Buffer Heap Buffer OverflowX.Org libXfont2
- CVE-2026-56002libXfont2 PCF Font Parsing Heap Buffer OverflowX.Org libXfont2
- CVE-2026-56001libXfont2 BitmapScaleBitmaps Integer Overflow Heap Buffer OverflowX.Org libXfont2
- CVE-2026-55999xorg-server / xwayland glamor font atlas Heap Buffer OverflowX.Org xorg-server · X.Org xwayland
- CVE-2026-13126Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-13127Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-13128Foxit PDF Editor/Reader Doc Object Use-After-Free Remote Code Execution VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-57239Foxit PDF Editor/Reader Local Privilege EscalationFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-57240Foxit PDF Editor/Reader Form Field Use-After-Free Remote Code Execution VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-13129Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-57238Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-57242Foxit PDF Editor/Reader Page Use-After-Free VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-57245Foxit PDF Editor/Reader Signature Hyperlink Use-After-Free VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-57246Foxit PDF Editor/Reader Signature Buffer Overflow VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-57248Foxit PDF Editor/Reader Annotation Improper Release VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-57249Foxit PDF Editor/Reader Annotation Use-After-Free VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-57251Foxit PDF Editor/Reader Cloud Appearance Buffer Overflow VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-57252Foxit PDF Editor/Reader AcroForm Use-After-Free Remote Code Execution VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-57254Foxit PDF Editor/Reader Annotation Type Confusion VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-57237Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-57244Foxit PDF Editor/Reader Form Control Use-After-Free VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-57247Foxit PDF Editor/Reader Field Use-After-Free VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-57250Foxit PDF Editor/Reader Form Field Use-After-Free VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-57256Foxit Editor/Reader List Box Format Use-After-Free VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-57260Security vulnerability in Foxit PDF Editor/Reader — U3D Adobe Mesh Decompression (Type Confusion / Invalid Pointer Dereference)Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-12378BookingPress <= 1.1.28 - Unauthenticated PHP Object InjectionAppointment Booking Calendar Plugin and Scheduling Plugin
- CVE-2026-14489WHMCS Bridge <= 6.9 - Unauthenticated Arbitrary File Upload via 'ccce' Parameterglobalprogramming WHMCS Bridge
- CVE-2026-9700Eventer <= 4.4.2 - Unauthenticated SQL Injection via 'code' Parameterjoe007 Eventer
- CVE-2026-14495DoLogin Security <= 4.3 - Unauthenticated Authentication Bypass via Insufficient Randomness via 'dologin' Parameter Weak PRNG Tokenwpdo5ea DoLogin Security
- CVE-2026-57895Incorrect default permissions issue exists in Pupsman versions prior to 3.9.0.Fuji Electric Co. Pupsman
- CVE-2026-56437Uncontrolled search path element issue exists in Pupsman versions prior to 3.9.0.Fuji Electric Co. Pupsman
- CVE-2026-14482多说社会化评论框 <= 1.2 - Unauthenticated Privilege Escalation via api.php 'option'/'value' Parametersshen2 多说社会化评论框
- CVE-2026-14158Widget Logic Visual <= 1.52 - Authenticated (Subscriber+) Remote Code Execution via 'nwlv[cod-tag]' Parametertotalbounty Widget Logic Visual
- CVE-2026-9842Backstage <= 1.4.2 - Unauthenticated Privilege Escalation via Permissive Demo Role Capabilitiespixelgrade Backstage – Customizer Demo Access
- CVE-2026-14244Jssor Slider by jssor.com <= 3.1.24 - Unauthenticated Arbitrary File Read via 'url' ParameterJssor Slider by jssor.com
- CVE-2026-55436Coder's AI Bridge Proxy skips TLS certificate verification in default configurationcoder · github.com/coder/coder +1
- CVE-2026-60002ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange.OpenBSD OpenSSH
- CVE-2026-55431Coder's session token leaked to arbitrary hosts via `coder open app` for external workspace appscoder · github.com/coder/coder +1
- CVE-2026-55429Coder's workspace app upsert allows cross-workspace agent rebinding via user-controlled app IDcoder · github.com/coder/coder +1
- CVE-2026-24697An OS command injection vulnerability exists in the start_bonjour() function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55
- CVE-2026-24698An OS command injection vulnerability exists in the save_syslog_to_file() function of the "httpd" binary in Cisco RV130/RV130W with firmware
- CVE-2026-24699An OS command injection vulnerability exists in the sub_34984() function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and
- CVE-2026-24700An OS command injection vulnerability exists in the start_lltd() function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 an
- CVE-2026-35552In CAXperts UPVWebServices 2.4.2212.603 through 2.7.6 and UDiTH Portal 2026.0.0 through 2026.2.0, an authenticated remote user can invoke an
- CVE-2026-51535In OpENer 2.3.0 (commit 76b95cf), a resource exhaustion (Denial of Service) vulnerability exists in its network processing loop.
Medium, low and unrated 173
- CVE-2026-15135code-projects Online Food Order System edit_food_items.php sql injectioncode-projects Online Food Order System
- CVE-2026-15134CodeAstro Simple Online Leave Management System index.php sql injectionCodeAstro Simple Online Leave Management System
- CVE-2026-15131Inappropriate implementation in Navigation in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass site isolation via aGoogle Chrome
- CVE-2026-15130Insufficient policy enforcement in Navigation in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass site isolation viGoogle Chrome
- CVE-2026-15128Inappropriate implementation in Forms in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to inject arbitrary scripts or HTMLGoogle Chrome
- CVE-2026-15127Inappropriate implementation in WebGL in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to inject arbitrary scripts or HTMLGoogle Chrome
- CVE-2026-15124Insufficient policy enforcement in Passwords in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass same origin policyGoogle Chrome
- CVE-2026-15115Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.115 allowed a local attacker toGoogle Chrome
- CVE-2026-15109Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to obtain potentially sensitive information frGoogle Chrome
- CVE-2026-15108Integer overflow in Extensions API in Google Chrome prior to 150.0.7871.115 allowed an attacker who convinced a user to install a malicious Google Chrome
- CVE-2026-15105davenardella snap7 ReadVar Request s7_server.cpp PerformFunctionRead out-of-bounds writedavenardella snap7
- CVE-2026-54780CoreWCF: WS-Security Reference DigestMethod Algorithm-Suite BypassCoreWCF · CoreWCF.Primitives
- CVE-2026-54775CoreWCF: Kafka consume pump halts permanently on a Kafka tombstone (null-value record), causing persistent endpoint denial of service.CoreWCF · CoreWCF.Kafka
- CVE-2026-54778CoreWCF: UnixDomainSocket Non-Reentrant POSIX Identity ResolutionCoreWCF · CoreWCF.UnixDomainSocket
- CVE-2026-54773CoreWCF: WS-Security signature substitution via document-wide Signature lookupCoreWCF · CoreWCF.Primitives
- CVE-2026-54779CoreWCF: SAML token replay protection is inoperativeCoreWCF · CoreWCF.Primitives
- CVE-2026-54776CoreWCF: Unix Domain Socket PosixIdentity transport accepts connections that skip the security upgradeCoreWCF · CoreWCF.UnixDomainSocket
- CVE-2026-54777CoreWCF NetNamedPipe transport accepts attach to a pre-existing named pipe instanceCoreWCF · CoreWCF.NetNamedPipe
- CVE-2026-15168Use of Uninitialized Variable in WiresharkWireshark Foundation Wireshark
- CVE-2026-5922Poly Voice – Potential Unauthorized Modification of WebUI using XSS AttackHP Poly CCX · HP Poly Edge E +1
- CVE-2026-55877Symfony UX: XSS in symfony/ux-icons via unsanitized SVG content in local files and Iconify on-demand responsessymfony ux · symfony/ux-icons
- CVE-2026-5923Poly Voice – Potential Unauthorized Modification of WebUI using CSRF AttackHP Poly CCX · HP Poly Edge E +1
- CVE-2026-48492Snipe-IT's selectlist visibility is too permissivegrokability snipe-it · snipe/snipe-it
- CVE-2026-35211OpenCTI: Elasticsearch Painless Script Injection via GraphQL `script` filter operator allows authenticated user to exfiltrate data and cause DoSOpenCTI-Platform opencti · pycti
- CVE-2026-59818etcd: gRPC client listener does not enforce `--client-crl-file` certificate revocationetcd-io etcd
- CVE-2026-58191Appium: Reflected XSS / arbitrary JS in @appium/base-driver /test/guinea-pig* routesappium · @appium/base-driver
- CVE-2026-15166Stack-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-57481Parse Server: LiveQuery discloses object data to a subscriber across an ACL read-access changeparse-community parse-server · parse-server
- CVE-2026-15174Heap-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-15172Unchecked Input for Loop Condition in WiresharkWireshark Foundation Wireshark
- CVE-2026-15173Heap-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-15171NULL Pointer Dereference in WiresharkWireshark Foundation Wireshark
- CVE-2026-15169Heap-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-55778Parse Server: Stored XSS via non-standard file extension bypassing file upload extension blocklistparse-community parse-server · parse-server
- CVE-2026-15170Heap-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-15165Heap-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-15163Loop with Unreachable Exit Condition ('Infinite Loop') in WiresharkWireshark Foundation Wireshark
- CVE-2026-15164Heap-based Buffer Overflow in ciscodumpWireshark Foundation ciscodump
- CVE-2025-12506Use of Incorrectly-Resolved Name or Reference in GitLabGitLab
- CVE-2026-6352Incorrect Authorization in GitLabGitLab
- CVE-2026-7492Missing Authorization in GitLabGitLab
- CVE-2026-8472Missing Authorization in GitLabGitLab
- CVE-2026-11827Insufficiently Protected Credentials in GitLabGitLab
- CVE-2026-54590AsyncSSH AuthorizedKeysFile username substitution bypass through ~ and environment expansionronf asyncssh · asyncssh
- CVE-2026-55542Snipe-IT's S3 signature image retrieval lacks authorization before temporary URLgrokability snipe-it · snipe/snipe-it
- CVE-2026-58494Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destinationbytecodealliance wasmtime · wasmtime-wasi
- CVE-2026-14896Nomad vulnerable to cross-namespace host volume claim deletionHashiCorp Nomad
- CVE-2026-58208NATS Server: MQTT-over-WebSocket Path Can Crash WebSocket-Only JetStream Servers Before MQTT Is Enablednats-io nats-server
- CVE-2026-58211NATS Server: `no_auth_user` pre-CONNECT fast path bypasses user connection restrictionsnats-io nats-server
- CVE-2026-58209NATS Server: MQTT retained and QoS replay bypass subscribe deny filtersnats-io nats-server
- CVE-2026-14361Consul-template is vulnerable to path redirection in writeToFile through symlink attackHashiCorp Tooling
- CVE-2026-58214NATS Server: MQTT subscribe ACL bypass via $MQTT.deliver.pubrel prefix (incomplete fix for CVE-2026-33217)nats-io nats-server
- CVE-2026-58254NATS Server: Incomplete fix for CVE-2026-33249: Leaf node connections bypass Nats-Trace-Dest permission checknats-io nats-server
- CVE-2026-8801File Extension Restriction Bypass in MOVEit TransferProgress MOVEit Transfer
- CVE-2026-8800Cross-Org External Token Metadata accessible to AuditUser roleProgress MOVEit Transfer
- CVE-2026-15154Guardrails-detectors: guardrails-detectors: unauthenticated regular-expression denial of service (redos) via detector_params.regexguardrails-detectors · Red Hat OpenShift AI
- CVE-2026-8651IPv6 Loopback Spoof via Trusted Host Header Bypasses Origin Check in MOVEit TransferProgress MOVEit Transfer
- CVE-2026-8650Authenticated Path Traversal allows MOVEit admins to view arbitrary system filesProgress MOVEit Transfer
- CVE-2026-58252NATS Server: Subscribe Authz Bypass via Wildcard-Overlapnats-io nats-server
- CVE-2026-59806Gradio < 6.20.0 - Open Redirect and SSRF via /gradio_api/file= endpointgradio-app gradio
- CVE-2026-59802PasswordPusher < 2.8.1 - Redirect-Based XSS via data URI in URL Push PayloadPasswordPusher
- CVE-2026-8649Institution scope bypass vulnerability in custom reportsProgress MOVEit Transfer
- CVE-2026-58251NATS Server: Queue Subscribe Authz Bypassnats-io nats-server
- CVE-2026-59947Composer: URL-embedded HTTP-Basic username leaks to verbose logs (GitHub PAT exposure)composer · composer/composer
- CVE-2026-59819LiteLLM: Local file read via request-supplied OIDC file referencesBerriAI litellm · litellm
- CVE-2026-59946Composer: Path traversal in package bin field lets dependencies chmod arbitrary host filescomposer · composer/composer
- CVE-2026-44332Fiber: Username Enumeration via Timing Oracle in BasicAuth Default Authorizergofiber fiber · github.com/gofiber/fiber/v3
- CVE-2026-59820LiteLLM: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')BerriAI litellm · litellm
- CVE-2026-53624Fiber: HSTS header never set in helmet middleware due to incorrect protocol checkgofiber fiber · github.com/gofiber/fiber/v3 +1
- CVE-2026-44512ONNX: Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs)onnx
- CVE-2026-58501Zeep SSRF because Settings.forbid_external is not enforcedmvantellingen python-zeep · zeep
- CVE-2026-45045Fiber: X-Real-IP Spoofing via Header.Add() in BalancerForwardgofiber fiber · github.com/gofiber/fiber/v3 +1
- CVE-2026-59821LiteLLM: Custom Code Guardrails production endpoints bypass code safety checksBerriAI litellm · litellm
- CVE-2026-59937pypdf: Possible long runtimes for repeated malformed cross-reference entriespy-pdf pypdf · pypdf
- CVE-2026-59938pypdf: Possible large memory usage for wrong image dimensionspy-pdf pypdf · pypdf
- CVE-2026-14362Denial of service via crafted push/pull gossip message in memberlistHashiCorp Shared library
- CVE-2026-59927Mistune directives/include: mutual `.. include::` recursion crashes the renderer with `RecursionError`, denial of service via two attacker-controlled markdown fileslepture mistune · mistune
- CVE-2026-59924Mistune: Arbitrary File Read via Include directive path traversallepture mistune · mistune
- CVE-2026-59929Mistune renderers/html.safe_url: HARMFUL_PROTOCOLS list misses legacy and chained schemes that historically chain to `javascript:` executionlepture mistune · mistune
- CVE-2025-3110OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values, allowing remote attackers to perform HOpenVPN Access Server
- CVE-2026-59926Mistune: XSS via unescaped class option in Admonition directivelepture mistune · mistune
- CVE-2026-59923Mistune: XSS via percent-encoded javascript URI bypass in safe_url()lepture mistune · mistune
- CVE-2026-59930Mistune toc / TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing collision with attacker-controlled `id="toc_N"` contentlepture mistune · mistune
- CVE-2026-29007U-Boot 2026.04-rc3 Out-of-Bounds Read in tcp_rx_state_machine via tcp.cu-boot
- CVE-2026-59895Hono: Server-Side XSS via JSX Escaping Bypass in cx() Utilityhonojs hono · hono
- CVE-2026-59896hono/jsx does not isolate context per request, leading to cross-request data disclosurehonojs hono · hono
- CVE-2026-59897Hono: API Gateway v1 adapter can drop a distinct repeated request header value during de-duplicationhonojs hono · hono
- CVE-2026-59890setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+pypa setuptools · setuptools
- CVE-2026-59883Guzzle: Cookie Disclosure and Injection via IP-Address Domainsguzzle · guzzlehttp/guzzle
- CVE-2026-59882guzzlehttp/psr7: Host Confusion via Weak URI Host Validationguzzle psr7 · guzzlehttp/psr7
- CVE-2026-42505Invoking Encrypted Client Hello privacy leak in crypto/tlsGo standard library crypto/tls · stdlib
- CVE-2026-59876protobufjs: Text Format string map parsing can mutate returned map object prototypeprotobufjs protobuf.js · protobufjs
- CVE-2026-59877protobufjs: Denial of Service via infinite loop in .proto option parsingprotobufjs protobuf.js · protobufjs
- CVE-2026-59871node-tar: Process crash via PAX numeric path type confusionisaacs node-tar · tar
- CVE-2026-59875node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath recordsisaacs node-tar · tar
- CVE-2026-59868js-yaml: YAML merge-key chains can force quadratic CPU consumptionnodeca js-yaml · js-yaml
- CVE-2026-54344ToolJet GitHub Actions comment body shell injection exposes deployment secretsToolJet
- CVE-2026-14967Path traversal in github_workflows allows writing artifacts outside output directoryBlack Lantern Security BBOT · bbot
- CVE-2026-14966Symlink guard bypass in unarchive module allows planting symlinks during extractionBlack Lantern Security BBOT · bbot
- CVE-2026-57439CyberChef: Prototype pollution in Series Chart operationgchq CyberChef · cyberchef
- CVE-2026-15063Trustyai-service-operator: trustyai service operator: gorch port bypass when auth is enabledtrustyai-explainability trustyai-service-operator · Red Hat…
- CVE-2026-55668File Browser: ScopedFs follows a dangling symlink on write, letting a scoped user create files outside their scopefilebrowser · github.com/filebrowser/filebrowser +1
- CVE-2026-55873SeaweedFS: Improper authorization in the S3Tables / Iceberg REST management API lets a low-privileged S3 user enumerate administrator-owned table bucketsseaweedfs · github.com/seaweedfs/seaweedfs
- CVE-2026-15044Trustyai-service-operator: trustyai service operator: unauthenticated access to ai guardrails and orchestrator apistrustyai-service-operator · Red Hat OpenShift AI
- CVE-2026-15036Harness gitspaces Endpoint list_all.go getAuthorizedSpaces authorizationHarness
- CVE-2026-15035bentoml OpenLLM Model Repository Directory Name common.py async_run_command command injectionbentoml OpenLLM · bentoml
- CVE-2026-60092AVideo - Stored Cross-Site Scripting via Unescaped User-Agent in Participants PanelAVideo · wwbn/avideo
- CVE-2026-59257n8n - SQL Injection in MySQL v1 executeQuery Operation via Expression Interpolationn8n
- CVE-2026-59253n8n - Improper Authorization in Workflow Assignment to Foldersn8n
- CVE-2026-58657Grav - Stored CSS Injection via Markdown Image resize() ActionGrav · getgrav/grav
- CVE-2026-58654Grav - Arbitrary File Upload via Avatar EndpointGrav
- CVE-2026-56778n8n - Authorization Bypass in Public API Execution Retry Endpointn8n
- CVE-2026-56776n8n - Incorrect OAuth Scope Validation in Workflow Test Run Endpointn8n
- CVE-2026-56775n8n - Incorrect OAuth Scope Validation in Evaluation Test Runs Endpointsn8n
- CVE-2026-56374ImageMagick - Heap Buffer Overflow in FTXT Encoder via format ParameterImageMagick · Magick.NET-Q16-AnyCPU +17
- CVE-2026-56362ImageMagick - Heap-buffer-overflow Read in GetPixelIndex via OpenPixelCache Metadata DesynchronizationImageMagick · Magick.NET-Q16-AnyCPU +18
- CVE-2026-56360n8n - Webhook Forgery via Unsigned POST Requests in ZendeskTriggern8n
- CVE-2026-56359n8n - Cross-Site Scripting in Credential Management OAuth2 Authorization URLn8n
- CVE-2026-56298Capgo - EXIF Metadata Exposure in App Information Image UploadCapgo
- CVE-2026-56293Capgo - Stale Cross-Organization Authorization via Incomplete deploy_history Update in transfer_app()Capgo
- CVE-2026-56284Capgo - Unauthenticated Metrics Disclosure via get_total_metrics RPCCap-go capgo
- CVE-2026-56283Capgo - HTML Injection Leading to Open Redirection in Organization SettingsCapgo
- CVE-2026-56273Flowise - Path Traversal in Vector Store basePath ParameterFlowise · flowise-components
- CVE-2026-56217Capgo - Encrypted Bundle Policy Bypass via Direct PostgREST UpdateCapgo
- CVE-2026-53480Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1Dell PowerProtect Data Domain
- CVE-2026-60125importModule function in MISP ignores per-organisation import module restrictionsmisp
- CVE-2026-60124MISP importModule missing authorization allows read-only users to modify events via misp_standard importsmisp
- CVE-2026-15034flask-dashboard Flask-MonitoringDashboard cross-site request forgeryflask-dashboard Flask-MonitoringDashboard
- CVE-2026-15033christopherthielen check-peer-dependencies peerDependencies packageUtils.js shelljs.exec os command injectionchristopherthielen check-peer-dependencies
- CVE-2026-6740Nexter Blocks <= 4.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'commentIcon' Block Attributeposimyththemes Nexter Blocks – Gutenberg Blocks, Page Build…
- CVE-2026-12002Smash Balloon Social Photo Feed – Easy Social Feeds Plugin <= 6.11.1 - Cross-Site Request Forgery to oEmbed Access Token Overwrite via 'sbi_access_token' Parametersmub Smash Balloon Social Photo Feed – Easy Social Feeds Pl…
- CVE-2026-5459User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.1 - Unauthenticated Insecure Direct Object Reference to Arbitrary User Subscription Overwritewedevs User Frontend: AI Powered Frontend Posting, User Dir…
- CVE-2026-6459Essential Addons for Elementor <= 6.6.2 - Authenticated (Author+) Stored Cross-Site Scripting via Event Calendar Widget Popupwpdevteam Essential Addons for Elementor – Popular Elemento…
- CVE-2026-8315Stored XSS in Webbeyaz's Mediküm WebWebbeyaz Web Design Mediküm Web
- CVE-2026-8310Reflected XSS in Webbeyaz's Mediküm WebWebbeyaz Web Design Mediküm Web
- CVE-2026-6371Stored XSS in Limatek's LimRAD NACLimatek System LimRAD NAC
- CVE-2026-6742Advanced iFrame <= 2026.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gutenberg Block 'additional' Attributemdempfle Advanced iFrame
- CVE-2025-14785Website Builder by SeedProd - Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode <= 6.20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'seedprodnestedmenuwidget' ShortcodeWebsite Builder by SeedProd — Theme Builder, Landing Page B…
- CVE-2026-14250Themehunk Login Registration <= 1.0.2 - Unauthenticated Privilege Escalation via 'role' Parameterthemehunk TH Login Registration
- CVE-2026-12936Recurio <= 1.1.3 - Authenticated (Shop Manager+) SQL Injection via 'data' Parameterdevitemsllc Recurio – Ultimate Subscription for WooCommerce
- CVE-2026-15041389-ds-base: 389-ds-base: non-constant-time comparison in pbkdf2-sha256 password verificationRed Hat Directory Server · Red Hat Enterprise Linux
- CVE-2026-6280Improper Access Control in Nomysoft Informatics' NomysemNOMYSOFT Informatics Education and Consulting Nomysem
- CVE-2026-57241Foxit PDF Editor/Reader Page Out-of-bounds Read VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-57243Foxit PDF Editor/Reader Page Out-of-bounds Read VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-57253Foxit PDF Editor/Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-57255Security vulnerability in Foxit PDF Editor/Reader — OOB Read via NaN-Bypass ClampFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-57259Foxit PDF Editor/Reader XDP XFA XXE arbitrary local file readFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-57257Security vulnerability in Foxit PDF Editor/Reader — PRC 3D BRep Renderer Heap OOB ReadFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-57258Foxit PDF Editor/Reader Crash via Malformed PRC 3D StreamFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-10570Sympl Repeater for ACF and Elementor <= 2.3 - Authenticated (Author+) Stored Cross-Site Scripting via ACF Repeater Field Valuesidocoh Sympl Repeater for ACF and Elementor
- CVE-2026-14500Bulk Order Update for WooCommerce <= 1.6 - Unauthenticated Arbitrary File Read via 'csv_url' Parametersayantandas20 Bulk Order Update for WooCommerce
- CVE-2026-9731Wp Js Detect <= 1.0.9 - Cross-Site Request Forgery to Plugin Settings Updatewpkuf Wp Js Detect
- CVE-2026-12041Chatra Live Chat + ChatBot + Cart Saver <= 1.0.12 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'chatra-code' SettingChatra Live Chat + ChatBot + Cart Saver
- CVE-2026-12097User Management <= 1.2 - Missing Authorization to Unauthenticated Plugin Settings Modificationsaadiqbal User Management
- CVE-2026-11798Social Share, Social Login and Social Comments Plugin <= 7.14.5 - Reflected Cross-Site Scripting via 'heateor_mastodon_share' Parameterthe_champ Social Share, Social Login and Social Comments Pl…
- CVE-2026-55438Coder's workspace app CORS origin check can be bypassed via UUID-based subdomain spoofingcoder · github.com/coder/coder +1
- CVE-2026-55437Coder vulnerable to stored HTML injection via workspace agent logs in AgentLogLine componentcoder · github.com/coder/coder +1
- CVE-2026-55433Coder: Devcontainer recreate endpoint missing write authorization allows read-only roles to destroy containerscoder · github.com/coder/coder/v2 +1
- CVE-2026-55432Coder's sub-agent app registration bypasses template port-sharing policy enforcementcoder · github.com/coder/coder/v2 +1
- CVE-2026-60001sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.OpenBSD OpenSSH
- CVE-2026-60000sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attemptOpenBSD OpenSSH
- CVE-2026-59999In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not.OpenBSD OpenSSH
- CVE-2026-59998sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in WindoOpenBSD OpenSSH
- CVE-2026-59997internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-lOpenBSD OpenSSH
- CVE-2026-59996scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinaOpenBSD OpenSSH
- CVE-2026-59995sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attackerOpenBSD OpenSSH
- CVE-2026-55430Coder's subdomain workspace app routing trusts unauthenticated X-Forwarded-Host header, enabling cross-app data accesscoder · github.com/coder/coder/v2 +1
- CVE-2026-36027An issue in Code27 Companion Hub SQ3A.220705.003.A1 allows a physically proximate attacker to execute arbitrary code via the USB debugging (
- CVE-2026-36028A protection mechanism failure in the Code 27 Companion Hub allows an attacker with physical access to completely bypass kiosk restrictions
- CVE-2026-39178A SQL injection vulnerability in SOGo before 5.12.7 allows authenticated users to execute arbitrary SQL statements via the search parameter
- CVE-2026-39179A SQL injection vulnerability in SOGo before 5.12.7 allows authenticated users to execute arbitrary SQL statements via the newPassword param
- CVE-2026-50812A NULL pointer dereference in the SQLite Session Extension in SQLite 3.53.1 and SQLite trunk builds before check-in e807d4e3798efd53 allows
- CVE-2026-50813An issue in SQLite before Fossil check-in 869a51ae84df allows a local attacker to obtain sensitive information via the Session Extension cha