CVEs published July 10, 2026
348 CVEs were published on July 10, 2026: 33 critical, 122 high.
- Published
- 348
- Critical
- 33
- High
- 122
- Medium
- 175
- Low
- 18
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 226
Most affected products
- grokability snipe-it · snipe/snipe-it
- 18
- Samsung Mobile Devices
- 13
- rabbitmq-server
- 11
- frappe
- 8
- zitadel · github.com/zitadel/zitadel
- 8
- Apache Software Foundation Apache IoTDB
- 7
- Capgo
- 6
- decolua 9router · 9router
- 6
- getgrav grav · getgrav/grav
- 6
- Drupal core · drupal/core
- 5
Critical 33
- CVE-2026-14480OpenPLC v3 External Control of File Name or PathOpenPLC
- CVE-2026-20744Hydro-Québec Le Circuit Electrique charging station backend Improper Access ControlHydro-Québec Le Circuit Electrique charging station backend
- CVE-2026-11913Mother May I - Critical - Unsupported - SA-CONTRIB-2026-045Drupal Mother May I · drupal/mothermayi
- CVE-2026-15089Commerce guest registration - Critical - Unsupported - SA-CONTRIB-2026-079Drupal Commerce guest registration · drupal/commerce_guest_…
- CVE-2026-12535Formatter Field - Critical - PHP object injection - SA-CONTRIB-2026-048Drupal Formatter Field · drupal/formatter_field
- CVE-2026-10768LocalGov Workflows - Moderately critical - Information disclosure - SA-CONTRIB-2026-039Drupal LocalGov Workflows · drupal/localgov_workflows
- CVE-2026-55884Tilt: Missing authentication on the network-exposed Tilt HUD servertilt-dev tilt · github.com/tilt-dev/tilt
- CVE-2026-9726Drupal AlternativeCommerce (Basket) - Highly critical - Arbitrary PHP code execution - SA-CONTRIB-2026-038Drupal AlternativeCommerce · drupal/basket
- CVE-2026-55879OpenReplay: Unauthenticated stored XSS leads to dashboard account takeoveropenreplay
- CVE-2026-57807WordPress OAuth Single Sign On - SSO (OAuth Client) plugin <= 38.5.8 - Broken Authentication vulnerabilityminiOrange Security Software Pvt OAuth Single Sign On - SSO
- CVE-2026-12761miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.7.0 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Profile Completion OTP Flowcyberlord92 miniOrange Social Login and Register
- CVE-2026-61459MCP Server Kubernetes < 3.9.0 Argument Injection via kubectl Structured ToolsFlux159 mcp-server-kubernetes · mcp-server-kubernetes
- CVE-2026-5801SQLi in Semtek Informatics' SEM-PMPSemtek Informatics Software Consulting Trade Ltd. SEM-PMP
- CVE-2026-59151Prowler: SAML Domain Claiming Enables Cross-Tenant Account Takeoverprowler-cloud prowler · prowler-cloud
- CVE-2026-2397SQLi in AdamPOS' MobilMen 20TAdam Retail Automation MobilMen
- CVE-2026-58492grav-plugin-database: SQL Injection in PDO::tableExists() due to Unsanitized Table Name Interpolationgetgrav grav
- CVE-2026-555009router: Exposure of Sensitive Information and Unprotected Database Import/Export Allows Complete Credential Theft and Database Takeoverdecolua 9router · 9router
- CVE-2026-15143Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)guardrails-detectors · Red Hat OpenShift AI
- CVE-2026-59792In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in project workspace ID handling was possibleJetBrains IntelliJ IDEA
- CVE-2026-61444PraisonAI before 4.6.78 Code Injection via f-stringMervinPraison PraisonAI · praisonai
- CVE-2026-56765Vikunja - Unauthenticated Instance-Wide Data Breach via Link Share Hash Disclosure Chained with Cross-Project Attachment IDORVikunja · code.vikunja.io/api
- CVE-2026-56261Crawl4AI - Server-Side Request Forgery via Webhook URLsCrawl4AI
- CVE-2026-56688Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS CommaDell PowerFlex Manager
- CVE-2026-53363xfrm: iptfs: preserve shared-frag marker in iptfs_consume_frags()Linux
- CVE-2026-15378Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)Red Hat OpenShift AI
- CVE-2026-41880OS Command Injection in R-SOFT DMSR-SOFT SERWIS DMS
- CVE-2026-40008Apache IoTDB: Arbitrary Class Instantiation via Pipe Transfer RPCApache Software Foundation Apache IoTDB
- CVE-2026-40005Apache IoTDB: Path Traversal in Pipe File Transfer ReceiverApache Software Foundation Apache IoTDB
- CVE-2026-28564Apache IoTDB: REST Basic Authentication Accepts Stale Cached CredentialsApache Software Foundation Apache IoTDB
- CVE-2026-15300GEO my WP <= 4.5.4 - Unauthenticated SQL Injection via 'distance' / 'lat' / 'lng' Parametersninjew GEO my WP
- CVE-2026-15282Instant Appointment <= 1.2 - Unauthenticated Arbitrary File Uploadtenteeglobal Instant Appointment
- CVE-2026-14894Super Forms <= 6.3.313 - Unauthenticated Arbitrary File Upload via 'data' Parameter (datauristring / value)WebRehab Super Forms – Drag & Drop Form Builder
- CVE-2026-51119An issue in Invixium IXM WEB v.2.3.85.25 allows an attacker to escalate privileges via the /SystemUsers/CreateAppUser components
High 122
- CVE-2026-44383Hydro-Québec Le Circuit Electrique charging station backend Insufficient Session ExpirationHydro-Québec Le Circuit Electrique charging station backend
- CVE-2026-42952Hydro-Québec Le Circuit Electrique charging station backend Improper Restriction of Excessive Authentication AttemptsHydro-Québec Le Circuit Electrique charging station backend
- CVE-2026-55175Spinnaker: Improper yaml processing on kustomize bake operationsspinnaker · io.spinnaker.rosco:rosco-manifests
- CVE-2026-44795Spinnaker: Non-safe yaml deserialization allowing RCE when using specific typesspinnaker · io.spinnaker.rosco:rosco-core +1
- CVE-2026-15081Location Selector - Critical - SQL Injection - SA-CONTRIB-2026-072Drupal Location Selector · drupal/location_selector
- CVE-2026-13244Tealium iQ Tag Management - Critical - PHP object injection - SA-CONTRIB-2026-064Drupal Tealium iQ Tag Management · drupal/tealiumiq
- CVE-2026-55810Plotly.js Graphing - Critical - PHP object injection - SA-CONTRIB-2026-050Drupal Plotly.js Graphing · drupal/plotly_js
- CVE-2026-55809Flag attendance field - Critical - PHP object injection - SA-CONTRIB-2026-049Drupal Flag attendance field · drupal/flag_attendance_field
- CVE-2026-52747ModSecurity: Multipart form-data parser silently strips embedded line breaks from form-field values, enabling request-body inspection bypassowasp-modsecurity ModSecurity
- CVE-2026-55883Tilt: Cross-site WebSocket hijacking of the Tilt HUD streamtilt-dev tilt · github.com/tilt-dev/tilt
- CVE-2026-55882Tilt: Unauthenticated pprof debug endpoints on the Tilt HUD servertilt-dev tilt · github.com/tilt-dev/tilt
- CVE-2026-49213TypeBot: SSRF protection bypass via IPv6 unspecified address in Typebot HTTP request executionbaptisteArno typebot.io
- CVE-2026-55852Frappe: TarSlip RCE in Package Importfrappe
- CVE-2026-49394Frappe: Auth. bypass via update_pagefrappe
- CVE-2026-41482Frappe: Possible Path Traversal and Local File Inclusion via Chrome PDF Generatorfrappe
- CVE-2026-57584Phalcon: Catastrophic backtracking (ReDoS) in the default Phalcon Router route lead to remote unauthenticated DoScphalcon · phalcon/cphalcon
- CVE-2026-54736Phalcon: Non-constant-time HMAC verification in `Encryption\Crypt::decrypt` (timing side-channel)cphalcon · phalcon/cphalcon
- CVE-2026-55665DOM-based XSS in Grist via unsanitized links, enabling privilege escalationgristlabs grist-core
- CVE-2026-55659Grist: XSS through unsafe value interpolation in server-rendered pagesgristlabs grist-core
- CVE-2026-45203GPU DDK - rgxfw_hwperf_ufo() re-reads psCmdHeader->ui32CmdSize after initial check, TOCTOUImagination Technologies Graphics DDK
- CVE-2026-57574Misskey: TOTP tokens can be reusedmisskey-dev misskey
- CVE-2026-45196GPU DDK - Arbitrary GPU register write in rgxfw_hwperf_hw due to unsanitized pointers from host kernelImagination Technologies Graphics DDK
- CVE-2026-58499Path traversal in EverOS /api/v1/memory/add via unvalidated sender_idEverMind-AI EverOS · everos
- CVE-2026-7639GPU DDK - Page UAF read in PMMETA_PROTECT heap memoryImagination Technologies Graphics DDK
- CVE-2026-55213h2o: musl libc stack overflow (QPACK)h2o
- CVE-2026-41154GPU DDK - Incorrect Index Calculation in CMA Cleanup Path of AllocOSPages_SparseImagination Technologies Graphics DDK
- CVE-2026-55881OpenReplay: Cross-tenant session replay disclosure via missing session ownership check in first-mob endpointopenreplay
- CVE-2026-34196GPU DDK - UAF read and/or write of arbitrary physical memory due to integer truncation in PMRDevPhysAddrOSMemImagination Technologies Graphics DDK
- CVE-2026-55880OpenReplay: Cross-user IDOR in notes and dashboard widgetsopenreplay
- CVE-2026-55229Gotenberg: SSRF via LibreOffice document processinggotenberg · github.com/gotenberg/gotenberg/v8 +1
- CVE-2026-55405LangChain4j: SQL injection via metadata filters in langchain4j-mariadb and langchain4j-pgvectorlangchain4j · dev.langchain4j:langchain4j-mariadb +1
- CVE-2026-57217RabbitMQ: Topic authorization can lead to cross-tenant routing-key bypassrabbitmq-server
- CVE-2026-57215RabbitMQ: Direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantomrabbitmq-server
- CVE-2026-57219RabbitMQ: Unauthenticated disclosure of OAuth client credentials via an HTTP API endpoint with certain less common OAuth 2 configurationsrabbitmq-server
- CVE-2026-57220RabbitMQ: Stream listener does not enforce configured frame-size limit during authentication, permitting unauth'd mem-exhaust DoSrabbitmq-server
- CVE-2026-57214RabbitMQ: Stored XSS in RabbitMQ management UIrabbitmq-server
- CVE-2026-57212RabbitMQ management HTTP API accepts request bodies larger than configured max_http_body_sizerabbitmq-server
- CVE-2026-55233OpenResty: Buffer overflow when writing PROXY protocol v2 header to upstreamopenresty
- CVE-2026-55377Logto: Account Center MFA management step-up bypass via WebAuthn registration verificationlogto-io logto
- CVE-2026-55789Logto: SAML IdP injects user-controlled profile attributes raw into signed assertions, allowing privilege escalation at relying Service Providerslogto-io logto
- CVE-2026-57850RustDesk Missing Session Scope Enforcement Allows Out-of-Scope Control Message InjectionRustDesk
- CVE-2026-57156FreeRDP: Integer overflow leading to heap buffer overflow in Orders Delta Points parsingFreeRDP
- CVE-2026-55827FreeRDP: Heap out-of-bounds write in RemoteFX (RFX) Cache Bitmap V3 decodeFreeRDP
- CVE-2026-11321GLPI DataInjection Plugin Authenticated SQL Injection via CSV ImportpluginsGLPI datainjection
- CVE-2026-55460Snipe-IT: Authorization bypass on bulk editing usersgrokability snipe-it · snipe/snipe-it
- CVE-2026-6212IDOR in Teracity's TeraMISTeracity Software Technologies TeraMIS
- CVE-2026-55843Snipe-IT: Improper Privilege Managementgrokability snipe-it · snipe/snipe-it
- CVE-2026-55516Snipe-IT: Cross-company asset maintenance re-parenting via API updategrokability snipe-it · snipe/snipe-it
- CVE-2026-55474Snipe-IT: Directory traversal in displaySiggrokability snipe-it · snipe/snipe-it
- CVE-2026-54329Snipe-IT: Cross-Tenant Accessory Injection in Snipe-IT APIgrokability snipe-it · snipe/snipe-it
- CVE-2026-61460Krayin CRM Insecure Direct Object Reference via Controllerskrayin laravel-crm
- CVE-2026-61461Dify < 1.16.0-rc1 SQL Injection via MyScale Vector Store search_by_full_textlanggenius dify
- CVE-2026-53450Coturn: IPv4-mapped 127.0.0.1 bypasses default loopback peer protectioncoturn
- CVE-2026-53448Coturn: SQL Injection in HTTPS Admin Panel Delete Operationscoturn
- CVE-2025-30007HestiaCP < 1.9.5 Authenticated OS Command Injection via DNS Record Managementhestiacp
- CVE-2026-56668ZITADEL: Unauthorized Token Privilege Escalation in OAuth2 Token Exchangezitadel · github.com/zitadel/zitadel
- CVE-2026-56667ZITADEL: Stored XSS via Default URI Redirect in Login V2zitadel
- CVE-2026-55672ZITADEL: Missing client_id binding in OIDC authorization code exchange and refresh token flows (RFC 6749 Section 4.1.3 violation)zitadel · github.com/zitadel/zitadel
- CVE-2026-2398IDOR in AdamPOS' MobilMen 20TAdam Retail Automation MobilMen
- CVE-2026-59190Grav Admin Plugin — IDOR Privilege Escalation via saveUser()getgrav grav
- CVE-2026-1667SEO Plugin by Squirrly SEO <= 14.0.0 - Unauthenticated Arbitrary Post Creation and Stored Cross-Site Scripting via savePost()cifi GEO Plugin by Squirrly SEO
- CVE-2026-53653Grav: Unauthenticated denial of service via unbounded image derivative dimensionsgetgrav grav · getgrav/grav
- CVE-2026-54919cpp-httplib: TLS certificate chain verification bypassed for IP-literal hosts on Mbed TLS and wolfSSL backendsyhirose cpp-httplib
- CVE-2026-39903Simple Machines Forum Authorization Bypass via AttachmentApprove.phpSimpleMachines SMF
- CVE-2026-55687ESF-IDF: Stack-Based Out-of-Bounds Write in JPEG Decoder DQT Marker Parsingespressif esp-idf
- CVE-2026-54063Excelize: Unbounded Row Index Allocation in Worksheet Parser (checkSheet OOM/Panic DoS)qax-os excelize · github.com/xuri/excelize/v2
- CVE-2026-59161Excelize: Streaming GetRows row-bound bypass causes attacker-controlled allocationqax-os excelize · github.com/xuri/excelize/v2 +1
- CVE-2026-53657Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socketlima-vm lima · github.com/lima-vm/lima/v2 +1
- CVE-2026-566759router: Reverse proxy locality collapse allows unauthenticated access to 9router /v1 APIsdecolua 9router · 9router
- CVE-2026-556389router: Unauthenticated LLM proxy access via /codex rewrite authorization bypassdecolua 9router · 9router
- CVE-2026-556419router: Unauthenticated `/v1` proxy access via `Host`-header spoofing → open AI relay + SSRFdecolua 9router · 9router
- CVE-2026-566769router: Image prefetch DNS rebinding allows SSRF to internal servicesdecolua 9router · 9router
- CVE-2026-555019router: Login brute-force protection bypass via spoofed X-Forwarded-For headerdecolua 9router · 9router
- CVE-2026-54149MaxKB MCP tool import validation bypass allows post-authentication remote code execution1Panel-dev MaxKB
- CVE-2026-33382Denial of service via unbounded request body sizeGrafana OSS
- CVE-2026-54000osquery: Heap buffer overflow in `getProcessCurrentDirectory()` via `processes` table (Windows)osquery
- CVE-2026-54001osquery: Heap buffer overflow via `authenticode` table (Windows)osquery
- CVE-2026-59796In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper permission checksJetBrains TeamCity
- CVE-2026-59795In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possibleJetBrains TeamCity
- CVE-2026-59794In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported dataJetBrains TeamCity
- CVE-2026-59793In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integrationJetBrains TeamCity
- CVE-2026-38059ST Engineering iDirect iQ-Series Terminals Missing authentication for critical functionST Engineering iDirect Evolution iQ‑Series terminals · S… +1
- CVE-2026-38057ST Engineering iDirect iQ-Series Terminals Cross-Site request forgeryST Engineering iDirect Evolution iQ‑Series terminals · S… +1
- CVE-2026-61455Grav before 2.0.1 Decompression Bomb via ZipArchivergetgrav grav · getgrav/grav
- CVE-2026-61450Grav before 2.0.2 Config Exfiltration via offsetGet Filtergetgrav grav · getgrav/grav
- CVE-2026-61441PraisonAI Platform before 0.1.9 Authorization Bypass via DependenciesMervinPraison PraisonAI · praisonai-platform
- CVE-2026-61437PraisonAI before 1.6.78 Remote Code Execution via tools.pyMervinPraison PraisonAI · praisonaiagents
- CVE-2026-61434PraisonAI before 4.6.78 Allowlist Bypass via find -execMervinPraison PraisonAI · praisonai
- CVE-2026-56335Capgo - Channel Configuration Mutation via Write-Scoped API KeysCapgo
- CVE-2026-56305Capgo - Authentication Bypass in Password Change via Missing Current Password ValidationCapgo
- CVE-2026-56279Capgo - Information Disclosure via get_orgs_v7 RPC EndpointCapgo
- CVE-2026-56254capacitor-updater - End-to-End Encryption Bypass via Private Key Distributioncapacitor-updater
- CVE-2026-22659FlaskBB Authorization Bypass via Topic ID Manipulationflaskbb
- CVE-2026-22660FlaskBB Logic Flaw Authorization Group Deletion via Bulk AJAX Endpointflaskbb
- CVE-2026-54469Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a Deserialization of Untrusted Data vulnerability.Dell Unisphere for PowerMax
- CVE-2026-56689Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL InjDell PowerFlex Manager
- CVE-2026-56690Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL InjDell PowerFlex Manager
- CVE-2026-41879Weak password hashing in R-SOFT DMSR-SOFT SERWIS DMS
- CVE-2026-41878Insecure Direct Object Reference in R-SOFT DMSR-SOFT SERWIS DMS
- CVE-2026-41876OS Command Injection in R-SOFT DMSR-SOFT SERWIS DMS
- CVE-2026-40454Apache IoTDB C++ client: Out-of-bounds reads in C++ client TsBlock deserializer crash client process on malformed server dataApache Software Foundation Apache IoTDB C++ client
- CVE-2026-40452Apache IoTDB: Authorization bypass in /rest/v2/fastLastQuery exposes last-value data to unauthorized authenticated usersApache Software Foundation Apache IoTDB
- CVE-2026-40007Apache IoTDB: Unauthenticated unbounded recursion in IoTDB AirGap receiver's E-language prefix parser causes per-connection StackOverflowErrorApache Software Foundation Apache IoTDB
- CVE-2026-40006Apache IoTDB: Unauthenticated heap-exhaustion DoS via unbounded allocation in IoTDB AirGap pipe receiverApache Software Foundation Apache IoTDB
- CVE-2026-13347Hide My WP Lite <= 1.3 - Unauthenticated Path Traversal to Arbitrary File Read via 'he_wrapper_js' Parametertemplatic1 Hide My WP Lite
- CVE-2026-12685EscortWP <= 3.6.2 - Content Deletion via Vendor-Authored Backdoorescortwp
- CVE-2026-21055Improper export of android application components in Bixby prior to version 4.0.70.8 allows local attackers to execute arbitrary commands wiSamsung Mobile Bixby
- CVE-2026-21049Out-of-bounds write in libpadm.so library prior to SMR Jul-2026 Release 1 allows local attackers to execute arbitrary code.Samsung Mobile Devices
- CVE-2026-21048Out-of-bounds write in parsing DNG format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write oSamsung Mobile Devices
- CVE-2026-21046Time-of-check time-of-use race condition in fabricKeymaster trustlet prior to SMR Jul-2026 Release 1 allows local privileged attackers to exSamsung Mobile Devices
- CVE-2026-21045Out-of-bounds write in parsing TIFF format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write Samsung Mobile Devices
- CVE-2026-21042Out-of-bounds write in libsavsac.so prior to SMR Jul-2026 Release 1 allows remote attackers to execute arbitrary code.Samsung Mobile Devices
- CVE-2026-15298TelSender <= 1.14.14 - Unauthenticated Stored Cross-Site Scripting via Telegram Chat Titlepechenki TelSender – Сontact form 7, Events, Wpforms, ninja…
- CVE-2026-15293WP Business Intelligence Lite <= 3.2.0 - Authenticated (Subscriber+) Missing Authorization to Privilege Escalation via Arbitrary SQL Modificationjoeyoungblood WP Business Intelligence Lite
- CVE-2026-15291Chat Help – Click to Chat Button & Form <= 3.1.3 - Missing Authorization to Unauthenticated Sensitive Information Exposurethemeatelier ChatHelp – Click to Chat Button, WooCommerce C…
- CVE-2026-15290Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin <= 2.10.1 - Unauthenticated Blind SQL Injectionultimatemember Ultimate Member – User Profile, Registration…
- CVE-2026-15288SureForms – Drag and Drop Form Builder for WordPress <= 2.2.1 - Unauthenticated Stripe Payment Amount Manipulationbrainstormforce SureForms – Drag & Drop Contact Form & Form…
- CVE-2026-13430Post Export Import with Media <= 1.13.1 - Authenticated (Administrator+) Arbitrary File Upload via Trailing-Dot Filename Bypass in ZIP Media Importwpazleen Post Export Import with Media
- CVE-2026-15070Salon Booking System <= 10.30.32 - Cross-Site Request Forgery to Remote Code Execution via 'value' Parameterwordpresschef Salon Booking System – Free Version
- CVE-2026-54423In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface can maliciously use tOpenStack Ironic
- CVE-2025-70796An unauthenticated path traversal vulnerability exists in the web management interface of WTI (Wireless Technology, Inc.) version 3.5.0.r 20
- CVE-2026-39244adm-zip before 0.5.18 is vulnerable to denial of service via a crafted ZIP file with a manipulated uncompressed size header field.adm-zip
Medium, low and unrated 193
- CVE-2026-11914Composer - Critical - Unsupported - SA-CONTRIB-2026-046Drupal Composer · drupal/composer
- CVE-2026-11915Brute force attack protection - Critical - Unsupported - SA-CONTRIB-2026-047Drupal Brute force attack protection · drupal/bfap_sb
- CVE-2026-15087Clean RESTful - Critical - Unsupported - SA-CONTRIB-2026-078Drupal Clean RESTful · drupal/clean_node_api
- CVE-2026-15086Raw Formatter [Meta Tag Formatter] - Critical - Unsupported - SA-CONTRIB-2026-077Drupal Raw Formatter [Meta Tag Formatter] · drupal/raw_form…
- CVE-2026-55808Drupal core - Moderately critical - Improper validation - SA-CORE-2026-009Drupal core · drupal/core
- CVE-2026-55807Drupal core - Moderately critical - Server-side request forgery - SA-CORE-2026-008Drupal core · drupal/core
- CVE-2026-55806Drupal core - Less critical - Cache poisoning and open redirect - SA-CORE-2026-007Drupal core · drupal/core
- CVE-2026-55804Drupal core - Moderately critical - Gadget chain - SA-CORE-2026-006Drupal core · drupal/core
- CVE-2026-55803Drupal core - Critical - PHP object injection - SA-CORE-2026-005Drupal core · drupal/core
- CVE-2026-15085AI SEO/GEO Analyzer - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-076Drupal AI SEO/GEO Analyzer · drupal/ai_seo
- CVE-2026-15084UI Patterns (SDC in Drupal UI) - Moderately critical - Cross site scripting - SA-CONTRIB-2026-075UI Patterns · drupal/ui_patterns
- CVE-2026-15083ECA: Event - Condition - Action - Less critical - Information disclosure - SA-CONTRIB-2026-074Drupal ECA: Event - Condition - Action · drupal/eca
- CVE-2026-15082Siteimprove Analytics - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-073Drupal Siteimprove Analytics · drupal/siteimprove_analytics
- CVE-2026-15080Ray Enterprise Translation - Moderately critical - Cross site request forgery - SA-CONTRIB-2026-071Drupal Ray Enterprise Translation · drupal/lingotek
- CVE-2026-15079Login Disable - Moderately critical - Access bypass - SA-CONTRIB-2026-070Drupal Login Disable · drupal/login_disable
- CVE-2026-58591Colorbox - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-069Drupal Colorbox · drupal/colorbox
- CVE-2026-58590FlowDrop - Moderately critical - Access bypass - SA-CONTRIB-2026-068Drupal FlowDrop · drupal/flowdrop
- CVE-2026-58589FlowDrop - Moderately critical - Access bypass - SA-CONTRIB-2026-067Drupal FlowDrop · drupal/flowdrop
- CVE-2026-58588Drupal Canvas - Moderately critical - Improper validation - SA-CONTRIB-2026-066Drupal Canvas · drupal/canvas
- CVE-2026-58587Drupal Canvas - Moderately critical - Improper validation - SA-CONTRIB-2026-065Drupal Canvas · drupal/canvas
- CVE-2026-13243Salesforce Suite - Moderately critical - Cross-site request forgery - SA-CONTRIB-2026-063Drupal Salesforce Suite · drupal/salesforce
- CVE-2026-13242Geolocation Field - Critical - SQL Injection - SA-CONTRIB-2026-062Drupal Geolocation Field · drupal/geolocation
- CVE-2026-13241Paragraphs - Moderately critical - Access bypass - SA-CONTRIB-2026-061Drupal Paragraphs · drupal/paragraphs
- CVE-2026-13240Paragraphs - Less critical - Access bypass - SA-CONTRIB-2026-060Drupal Paragraphs · drupal/paragraphs
- CVE-2026-13239WissKI - Critical - Access bypass - SA-CONTRIB-2026-059Drupal WissKI · drupal/wisski
- CVE-2026-13238Commerce Realex / Global Payments - Moderately critical - Access Bypass - SA-CONTRIB-2026-058Drupal Commerce Realex / Global Payments · drupal/commerce_…
- CVE-2026-13237AI Agents - Moderately critical - Information disclosure, Access bypass - SA-CONTRIB-2026-057Drupal AI Agents · drupal/ai_agents
- CVE-2026-13236AI Agents - Less critical - Access bypass - SA-CONTRIB-2026-056Drupal AI Agents · drupal/ai_agents
- CVE-2026-13235AI (Artificial Intelligence) - Moderately critical - Access bypass - SA-CONTRIB-2026-055Drupal AI · drupal/ai
- CVE-2026-13234AI (Artificial Intelligence) - Moderately critical - Information Disclosure / Cross-site Scripting - SA-CONTRIB-2026-054Drupal AI · drupal/ai
- CVE-2026-13233OpenAI Provider - Moderately critical - Server-side Request Forgery - SA-CONTRIB-2026-053Drupal OpenAI Provider · drupal/ai_provider_openai
- CVE-2026-13232Advanced Content Feedback (aka admin_feedback) - Moderately critical - Access bypass / Insecure Direct Object Reference (IDOR) - SA-CONTRIB-2026-052Drupal Advanced Content Feedback · drupal/admin_feedback
- CVE-2026-13231Advanced Content Feedback (aka admin_feedback) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-051Drupal Advanced Content Feedback · drupal/admin_feedback
- CVE-2026-55187Mailpit: Incomplete SSRF protection in Link Check API via IPv6 transition mechanisms (follow-up to CVE-2026-27808)axllent mailpit · github.com/axllent/mailpit
- CVE-2026-11909Examples for Developers - Moderately critical - Access bypass - SA-CONTRIB-2026-044Drupal Examples for Developers · drupal/examples
- CVE-2026-11908Tagify - Moderately critical - Cross-site scripting (XSS) - SA-CONTRIB-2026-043Drupal Tagify · drupal/tagify
- CVE-2026-10770Anti-Spam by CleanTalk - Moderately critical - Cross site scripting - SA-CONTRIB-2026-042Drupal Anti-Spam by CleanTalk · drupal/cleantalk
- CVE-2026-10769Commerce Core - Moderately critical - Cross site scripting - SA-CONTRIB-2026-041Drupal Commerce Core · drupal/commerce
- CVE-2026-52761ModSecurity: Transformation utf8toUnicode produces wrong output on i386 architectureowasp-modsecurity ModSecurity
- CVE-2026-59155Nezha Monitoring: DDNS and Notification credential exposure via unredacted list APInezhahq nezha · github.com/nezhahq/nezha
- CVE-2026-42219Frappe: Path Traversal via /backups Routefrappe
- CVE-2026-48127Frappe: Arbitrary Attachment Injection via add_attachments and upload_filefrappe
- CVE-2026-49844Apache Log4j API: Improper serialization of non-finite floating-point values in MapMessage.asJson()Apache Software Foundation Apache Log4j API · org.apache.lo…
- CVE-2026-47199Frappe: check_safe_sql_query Permits SELECT INTO OUTFILEfrappe
- CVE-2026-58503Frappe: Unauthenticated User Enumeration via reset_passwordfrappe
- CVE-2026-47422Frappe: Unrestricted API access to save_reportfrappe
- CVE-2026-55664Grist: Insufficient access control in the /forms endpoint exposes table metadatagristlabs grist-core
- CVE-2026-57575Misskey: SSRF bypass in URL Previewmisskey-dev misskey
- CVE-2026-57230OpenReplay: Authenticated ClickHouse SQL injection via session searchopenreplay
- CVE-2026-13039Eventin 4.0.26 - 4.1.15 - Missing Authorization to Unauthenticated Payment Bypass via REST APIarraytics Eventin – Event Calendar, Event Registration, Tic…
- CVE-2026-57221RabbitMQ: Passive queue/exchange declaration bypasses authorization checks, leaking queue metadata to unprivileged usersrabbitmq-server
- CVE-2026-57218RabbitMQ: AMQP 0-9-1 in combination with OAuth 2: consumer persistence can lead to post-revocation message disclosurerabbitmq-server
- CVE-2026-57216RabbitMQ: AMQP 1.0, AMQP 0-9-1, Stream Protocol loopback enforcement can lead to remote guest sessions due to listener-address loopback checksrabbitmq-server
- CVE-2026-57211RabbitMQ: UNC SSRF affecting the management UI on Windowsrabbitmq-server
- CVE-2026-57213RabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag renderingrabbitmq-server
- CVE-2026-55370Logto: TOTP code can be replayed within the RFC 6238 validity window (one-time use violation)logto-io logto
- CVE-2026-54714Logto: XSS via unescaped RelayState in SAML auto-submit formlogto-io logto
- CVE-2026-57157Out-of-bounds read in the camera device enumerator server (rdpecam) via unterminated DeviceName / VirtualChannelNameFreeRDP
- CVE-2026-57158FreeRDP planar_decompress_plane_rle_only: heap OOB read — incomplete fix for CVE-2026-23530FreeRDP
- CVE-2026-55481Snipe-IT: CSS Injection via `header_color` Settinggrokability snipe-it · snipe/snipe-it
- CVE-2026-15295Ajax Load More <= 7.0.1 - Authenticated (Administrator+) Stored Cross-Site Scriptingdcooney Ajax Load More – Infinite Scroll, Load More, & Lazy…
- CVE-2026-55475Snipe-IT: Import created_by can be overwrittengrokability snipe-it · snipe/snipe-it
- CVE-2026-55469Snipe-IT: Path traversal vulnerability via CSV import `image` fieldgrokability snipe-it · snipe/snipe-it
- CVE-2026-55461Snipe-IT: Open Redirect After User Editgrokability snipe-it · snipe/snipe-it
- CVE-2026-55479Snipe-IT: Incorrect permission for legacy license checkin APIgrokability snipe-it · snipe/snipe-it
- CVE-2026-55452Snipe-IT: CSV formula injection in Activity Report exportgrokability snipe-it · snipe/snipe-it
- CVE-2026-55466Snipe-IT: Stored XSS via inline-served attachmentgrokability snipe-it · snipe/snipe-it
- CVE-2026-55515Snipe-IT: Cross-company deletion of pending checkout acceptances via unscoped report endpointgrokability snipe-it · snipe/snipe-it
- CVE-2026-55462Snipe-IT: Authorization bypass on print inventory pagegrokability snipe-it · snipe/snipe-it
- CVE-2026-55464Snipe-IT: Stored XSS via Markdown custom fieldgrokability snipe-it · snipe/snipe-it
- CVE-2026-55472Snipe-IT: API Location Creation Bypasses FMCS Parent-Child Company Boundary Validationgrokability snipe-it · snipe/snipe-it
- CVE-2026-55476Snipe-IT: Unauthorized Asset Request Cancellation via Unguarded cancel_by_admin Parametergrokability snipe-it · snipe/snipe-it
- CVE-2026-55478Snipe-IT: Missing object-level authorization in Kits APIgrokability snipe-it · snipe/snipe-it
- CVE-2026-15146CVE-2026-15146GNU wget Wget
- CVE-2026-53449Coturn: Arbitrary File Write via CLI psd Commandcoturn
- CVE-2025-30008HestiaCP < 1.9.5 Stored XSS via DNS Record Management Interfacehestiacp
- CVE-2026-56666ZITADEL: Auto-linking by email: IdP-side email verification is not checkedzitadel · github.com/zitadel/zitadel
- CVE-2026-56665ZITADEL: Missing Token Expiration (`exp`) Validation in JWT IdP Providerzitadel · github.com/zitadel/zitadel
- CVE-2026-56664ZITADEL: Missing Token Lifecyle Validation (`exp` and `iat`) in JWT IdP Providerzitadel · github.com/zitadel/zitadel
- CVE-2026-55671ZITADEL: Server-Side Request Forgery (SSRF) and Denylist Bypass in Outgoing HTTP Componentszitadel · github.com/zitadel/zitadel
- CVE-2026-55670ZITADEL: Cross-Tenant User Leakage via Recycled Identifierszitadel · github.com/zitadel/zitadel
- CVE-2026-57476Deloitte AI Assist for Customer unauthenticated RAG corpus read and writeDeloitte AI Assist for Customer
- CVE-2026-57475Deloitte AI Assist for Customer unauthenticated configuration writeDeloitte AI Assist for Customer
- CVE-2026-57474Deloitte AI Assist for Customer information disclosureDeloitte AI Assist for Customer
- CVE-2026-55669ZITADEL: Missing Token Audience Validation (`aud`) in JWT IdP Providerzitadel · github.com/zitadel/zitadel
- CVE-2026-55781NanaZip: Unbounded memory allocation (DoS) in NanaZip UFS parser via unvalidated fs_bsize/fs_fsize superblock fieldsM2Team NanaZip
- CVE-2026-55780NanaZip: Uncaught exception / unbounded allocation in NanaZip .NET single-file Extract() via unvalidated entry SizeM2Team NanaZip
- CVE-2026-55783NanaZip: NULL pointer dereference in Extract() of all seven NanaZip custom archive handlers when extracting/testing the whole archiveM2Team NanaZip
- CVE-2026-55782NanaZip: Unbounded memory allocation (DoS) in NanaZip WebAssembly parser via attacker-controlled section/name length fieldsM2Team NanaZip
- CVE-2026-3251XSS in Webremium's Mezunum SatiyorumWebremium Istanbul Web Design Mezunum Satiyorum
- CVE-2026-57167PeerTube: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)Chocobozzz PeerTube
- CVE-2026-59193Grav CMS — Improper Handling of Highly Compressed Data in Installer::unZip()getgrav grav · getgrav/grav
- CVE-2026-58493grav-plugin-database: DSN Parameter Injection via Unsanitized Configuration Values in Connection String Constructiongetgrav grav
- CVE-2026-55890Grav: Stored CSS injection via Markdown image ?style=… reaches MediaObjectTrait::style()getgrav grav · getgrav/grav
- CVE-2026-15377Eleveo Call Recording Software sendlogfile improper authorizationEleveo Call Recording Software
- CVE-2026-55885Grav: Admin Backup Zip File Exposes Account Credentials and Configuration Secretsgetgrav grav · getgrav/grav
- CVE-2026-59180Apprise forwards configured auth headers across cross-origin HTTP redirectscaronc apprise · apprise
- CVE-2026-59162Excelize: Negative shared-string index causes panic in GetCellValue and GetRowsqax-os excelize · github.com/xuri/excelize/v2 +1
- CVE-2026-59154Wekan: Checklist direct DDP updates can write checklist data into private boardswekan
- CVE-2026-15376Eleveo Call Recording Software statisticReportAction.do improper authorizationEleveo Call Recording Software
- CVE-2026-15375Eleveo Call Recording Software LDAP User users_ldap.jsp improper authorizationEleveo Call Recording Software
- CVE-2026-15374Eleveo Call Recording Software Group roleAddAction.do improper authorizationEleveo Call Recording Software
- CVE-2026-8595Stored XSS in the table panel (TableNG)Grafana OSS
- CVE-2026-8609Pre-authentication denial of service via the OAuth login routeGrafana OSS
- CVE-2026-15373Eleveo Call Recording Software userAddAction.do improper authorizationEleveo Call Recording Software
- CVE-2026-46388osquery: Unprivileged users can temporarily read file carve contentsosquery
- CVE-2026-61492In JetBrains YouTrack before 2026.2.17394 stored XSS via article titles in digest emails was possibleJetBrains YouTrack
- CVE-2026-59791In JetBrains YouTrack before 2026.2.17012 cSS injection via Mermaid diagram rendering was possibleJetBrains YouTrack
- CVE-2026-29519Lucee CFML Server Reflected XSS via URL Path ParsingLucee
- CVE-2026-61456Grav before 1.0.3 Stored XSS via SVG Upload APIgetgrav grav
- CVE-2026-61432PraisonAI FastContext before 1.6.78 Path TraversalMervinPraison PraisonAI · praisonaiagents
- CVE-2026-61431PraisonAI before 4.6.78 Path Traversal via ContextGathererMervinPraison PraisonAI · praisonai
- CVE-2026-60091PraisonAI before 4.6.78 Unauthenticated SSRF via webhook_urlMervinPraison PraisonAI · praisonai
- CVE-2026-60089PraisonAI before 1.6.78 Path Traversal via config.tomlMervinPraison PraisonAI · praisonaiagents
- CVE-2026-60086PraisonAI before 4.6.78 Prompt Injection Defense BypassMervinPraison PraisonAI · praisonai
- CVE-2026-58661n8n - Disk Space Exhaustion via Data-Table File Upload Endpointn8n
- CVE-2026-57994phpMyFAQ - Information Disclosure of Inactive FAQ Content via Public API EndpointsphpMyFAQ · thorsten/phpmyfaq +1
- CVE-2026-57961phpMyFAQ - Authenticated Path Traversal in PDF Export via concatenatePaths FunctionphpMyFAQ · thorsten/phpmyfaq +1
- CVE-2026-56373ImageMagick - Use-After-Free Write in PDB DecoderImageMagick · Magick.NET-Q16-AnyCPU +18
- CVE-2026-56366ImageMagick - Memory Leak in META Reader APP1JPEG Error PathImageMagick · Magick.NET-Q16-AnyCPU +17
- CVE-2026-56354n8n - Cross-Site Scripting and Open Redirect in Form Noden8n
- CVE-2026-56329Capgo - Cross-Tenant Preview Namespace Collision via Non-Bijective Underscore DecodingCapgo
- CVE-2026-56312Capgo - Account Creation Before CAPTCHA Validation in accept_invitation EndpointCapgo
- CVE-2026-56309Capgo - Plan Bypass via Unrestricted Attachment Upload EndpointCapgo
- CVE-2026-56813Cookie attribute injection in Plug.Conn.Cookies.encode/2elixir-plug plug · plug
- CVE-2026-54470Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior contain(s) an Improper Restriction of XML External Entity Reference vulnerabilityDell Unisphere for PowerMax
- CVE-2026-54468Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a path traversal vulnerability.Dell Unisphere for PowerMax
- CVE-2026-56814Plug: multipart :length limit is not charged for part headers, enabling unbounded temp-file creation (denial of service)elixir-plug plug · plug
- CVE-2026-58225SQL injection via unescaped dollar-quote in Postgrex.Notifications reconnect replay causes notification denial of serviceelixir-ecto postgrex
- CVE-2026-14461Out-of-bound read in mtrBitWizard mtr
- CVE-2026-15028Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended headerRed Hat Enterprise Linux · Red Hat Cost Management On-Pr… +2
- CVE-2026-11990KiviCare <= 4.4.0 - Missing Authorization to Unauthenticated Payment Bypass and Appointment Status Manipulation via /payment-success REST Endpointiqonicdesign KiviCare – Clinic & Patient Management System
- CVE-2026-13247Logo Slider <= 5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'lgx_tooltip_position' Parameterlogichunt Logo Slider WP – Responsive Logo Carousel, Logo G…
- CVE-2026-12918Mail Mint <= 1.24.1 - Authenticated (Administrator+) SQL Injection via 'recipients' Parametergetwpfunnels Mail Mint – Email Marketing, Newsletter, Email…
- CVE-2026-13710Jeg Kit for Elementor <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_body_description' Parameter via 'jkit_image_box' Shortcode/Widgetjegtheme Jeg Kit for Elementor – Powerful Addons for Elemen…
- CVE-2026-13010JoomSport <= 5.7.9 - Authenticated (Contributor+) SQL Injection via 'event' Shortcode Attributebeardev JoomSport – for Sports: Team & League, Football, Ho…
- CVE-2026-9857Invoice123 <= 1.7.0 - Missing Authorization to Authenticated (Subscriber+) Setting Modification via s123_submit_api_key & s123_submit_invoice_settings AJAX actionssaskaita123 Invoice123
- CVE-2026-41877Stored XSS in R-SOFT DMSR-SOFT SERWIS DMS
- CVE-2026-9838ICS Calendar <= 12.0.9 - Reflected Cross-Site Scripting via 'htmltagtitle' Parameterroom34 ICS Calendar
- CVE-2026-15026Import and export users and customers <= 2.4.0 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via email_template_selected AJAX Actioncarazo Import and export users and customers
- CVE-2026-11992Easy Appointments <= 3.12.27 - Missing Authorization to Authenticated (Author+) Bulk Appointment Manipulationeasyappointments Easy Appointments
- CVE-2025-11977HappyForms <= 1.26.12 - Authenticated (Admin+) Local File InclusionHappyforms – Form Builder for WordPress: Drag & Drop Contac…
- CVE-2026-12955Cookie Banner for GDPR / CCPA <= 4.3.6 - Missing Authorization to Authenticated (Subscriber+) Scan Schedule Modification via gcc_save_schedule_scan AJAX Actionwplegalpages Cookie Banner for GDPR / CCPA – WPLP Cookie Co…
- CVE-2026-6440GoodMeet <= 1.1.8 - Cross-Site Request Forgery to Google Meet Credential Reset via 'goodmeet_reset_google_meet_credential'sovlix GoodMeet – Google Meet Integration for Webinar, Meet…
- CVE-2026-12400FlowForms <= 1.1.1 - Authenticated (Contributor+) Insecure Direct Object Reference to Arbitrary Form Modification via REST API '/flowforms/v1/forms/{id}' Endpointspriyanshuchaudhary FlowForms – Conversational Form Builder
- CVE-2026-6802Easy Upload Files During Checkout <= 3.0.1 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'eufdc-delete' Parameterfahadmahmood Easy Upload Files During Checkout
- CVE-2026-1946GW AI Website Builder <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Deletionnandhiniwp GW AI Website Builder
- CVE-2026-14475Cookie Banner for GDPR / CCPA <= 4.3.6 - Authenticated (Administrator+) SQL Injection via 'scan_id' Parameterwplegalpages Cookie Banner for GDPR / CCPA – WPLP Cookie Co…
- CVE-2026-12924Eventin <= 4.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'etn_faq_content' Parameterarraytics Eventin – Event Calendar, Event Registration, Tic…
- CVE-2026-3907Hostel <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wphostel-book' Shortcodeprasunsen Hostel
- CVE-2026-12108Highlighting Code Block <= 2.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'font_family' Settinglooswebstudio Highlighting Code Block
- CVE-2026-15104BetterDocs <= 4.6.0 - Authenticated (Custom+) SQL Injection via 'lang' Parameterwpdevteam BetterDocs – AI Documentation, Knowledge Base, D…
- CVE-2026-40009Apache IoTDB: Authenticated users can escalate to full tree-path access by renaming themselves to __internal_auditorApache Software Foundation Apache IoTDB
- CVE-2026-12276LA-Studio Element Kit for Elementor < 1.6.1 - Unauthenticated Open RegistrationLA-Studio Element Kit for Elementor
- CVE-2026-12123All-in-One Video Gallery <= 4.8.5 - Authenticated (Subscriber+) Server-Side Request Forgery via 'vdl' Parameterplugins360 All-in-One Video Gallery
- CVE-2026-21057Improper input validation in Samsung Pass prior to version 5.2.10.3 allows local privileged attackers to write out-of-bounds memory.Samsung Mobile Samsung Pass
- CVE-2026-21056Improper authorization in Samsung Health prior to version 7.00.0.107 allows local attackers to access connected device information.Samsung Mobile Samsung Health
- CVE-2026-21054Improper export of android application components in InputSharing prior to version 2.7.01.4 allows local attackers to access sharing data.Samsung Mobile InputSharing
- CVE-2026-21053Improper input validation in Samsung Email prior to version 6.2.13.1 allows local attackers to create arbitrary files within the applicationSamsung Mobile Samsung Email
- CVE-2026-21052Path traversal in SemClipboardService prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system privilegSamsung Mobile Devices
- CVE-2026-21051Incorrect default permissions in WLAN security prior to SMR Jul-2026 Release 1 allows local attackers to configure TencentWifiSecurity settiSamsung Mobile Devices
- CVE-2026-21050Improper access control in SmartThingsKit prior to SMR Jul-2026 Release 1 allows local attackers to access sensitive information.Samsung Mobile Devices
- CVE-2026-21044Improper authorization in KnoxGuardManager prior to SMR Jul-2026 Release 1 allows local attackers to bypass the persistence configuration ofSamsung Mobile Devices
- CVE-2026-21043Path traversal in Wallpaper service prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system server priSamsung Mobile Devices
- CVE-2026-21041Improper access control in SamsungSEAgentService prior to SMR Jul-2026 Release 1 allows local attackers to access sensitive information.Samsung Mobile Devices
- CVE-2026-21040Improper access control in IAFDService prior to SMR Jul-2026 Release 1 allows local privileged attackers to use the privileged APIs.Samsung Mobile Devices
- CVE-2026-21039Improper access control in Settings prior to SMR Jul-2026 Release 1 allows local attackers to configure Theft protection settings.Samsung Mobile Devices
- CVE-2026-15332zhayujie CowAgent Message Endpoint channel.py authorizationzhayujie CowAgent
- CVE-2026-15301BuddyHolis TableSearch <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scriptingdigiblogger BuddyHolis TableSearch
- CVE-2026-15299Animation Addons for Elementor <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Weather Widgetwealcoder Animation Addons for Elementor – GSAP Motion Elem…
- CVE-2026-15297Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) <= 3.1.77 - Reflected Cross-Site Scriptingneeraj_slit Brevo – Email, SMS, Web Push, Chat, and more.
- CVE-2026-15296affiliate-toolkit – WP Affiliate Plugin with Amazon <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scriptingcservit affiliate-toolkit – Multi-Network Affiliate & Amazo…
- CVE-2026-15292Sudoku Shortcode <= 1.0.0 - Authenticated (Contributor+) Cross-Site Scripting via 'background' Shortcode Attributetibouille Sudoku Shortcode
- CVE-2026-15289Booking calendar, Appointment Booking System <= 3.2.17 - Unauthenticated Time-Based SQL Injection via 'wpdevart_id'wpdevart Booking calendar, Appointment Booking System
- CVE-2026-15287rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Subscriber+) SQL Injectionrtcamp rtMedia for WordPress, BuddyPress and bbPress
- CVE-2026-15286Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.5.32 - Incorrect Authorization to Authenticated (Contributor+) Post Publicationstellarwp Kadence Blocks — Page Builder Toolkit for Gutenbe…
- CVE-2026-15285The Plus Addons for Elementor <= 6.4.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget Custom Attributesposimyththemes The Plus Addons for Elementor – Addons for E…
- CVE-2026-15284King Addons for Elementor <= 51.1.62 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'form_page_id' Parameterkingaddons King Addons for Elementor – 80+ Elementor Widget…
- CVE-2026-15302ARMember <= 4.0.27 - Directory Traversal via X-FILENAMEreputeinfosystems ARMember – Membership Plugin, Content Res…
- CVE-2026-15283WPvivid Backup for MainWP <= 0.9.33 - Authenticated (Admin+) Stored Cross-Site Scriptingwpvividplugins WPvivid Backup for MainWP
- CVE-2026-15331zhayujie CowAgent Skill Installation service.py _add_package path traversalzhayujie CowAgent
- CVE-2026-15330zhayujie CowAgent Vision Tool vision.py _download_to_data_url server-side request forgeryzhayujie CowAgent
- CVE-2026-11818WPCafe <= 3.0.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via REST APIarraytics WPCafe – Restaurant Menu, Online Food Ordering &…
- CVE-2026-11392WP Hotel Booking <= 2.3.1 - Reflected Cross-Site Scripting via 'check_in_date' and 'check_out_date' Parametersthimpress WP Hotel Booking
- CVE-2026-15329zhayujie CowAgent Browser Tool browser_tool.py BrowserTool._do_navigate information disclosurezhayujie CowAgent
- CVE-2026-15326halo-dev halo Theme Installation ThemeUtils.java ThemeUtils.unzipThemeTo path traversalhalo-dev halo
- CVE-2026-15321MyEMS Admin Backend svg.py on_post cross site scriptingMyEMS
- CVE-2026-5069Fluent Forms <= 6.2.1 - Incorrect Authorization to Authenticated (Subscriber+) Arbitrary Subscription Cancellation via 'subscription_id'wpmanageninja Fluent Forms – Customizable Contact Forms, Su…
- CVE-2026-15320Sipeed PicoClaw pico.go rt.ReloadConfig authorizationSipeed PicoClaw
- CVE-2026-15319Sipeed PicoClaw Launcher access_control.go IPAllowlist access controlSipeed PicoClaw
- CVE-2026-15318Sipeed PicoClaw MQTT Channel mqtt.go authorizationSipeed PicoClaw
- CVE-2026-15317Sipeed PicoClaw Guarded Web Fetch Flow web.go WebFetchTool.Execute server-side request forgerySipeed PicoClaw
- CVE-2026-44918OpenStack Ironic through before 37.0.1 allows creation or modification of nodes cross-project without authorization.OpenStack Ironic