CVEs published July 16, 2026
247 CVEs were published on July 16, 2026: 35 critical, 89 high. 1 is now in CISA KEV.
- Published
- 247
- Critical
- 35
- High
- 89
- Medium
- 107
- Low
- 16
- Unrated
- 0
- Now in CISA KEV
- 1
- Fix available
- 164
Most affected products
- cyrusimap Cyrus IMAP
- 9
- HCL Software DFXAnalytics
- 9
- microsoft kiota · Microsoft.OpenApi.Kiota +1
- 7
- AutomationDirect Productivity Suite
- 6
- getkirby kirby · getkirby/cms
- 6
- yamcs · org.yamcs:yamcs-core
- 6
- stoatchat
- 5
- wazuh
- 5
- h2o quicly
- 4
- Lenovo Yoga Pro 7 15IPH11 BIOS · Lenovo IdeaPad Pro 5 1… +55
- 4
Critical 35
- CVE-2026-44182Jupyter Enterprise Gateway Has Kubernetes Manifest Injection via Jinja2 Template Renderingjupyter-server enterprise_gateway · jupyter-enterprise-gate…
- CVE-2026-44181Jupyter Enterprise Gateway: Jinja2 Template Server Side Template Injection results in Remote Code Executionjupyter-server enterprise_gateway · jupyter-enterprise-gate…
- CVE-2026-44180Jupyter Enterprise Gateway: ContainerProcessProxy._enforce_prohibited_ids can be Bypassedjupyter-server enterprise_gateway · jupyter-enterprise-gate…
- CVE-2026-57075YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via a signed-char lookup-table index in syck_base64decTODDR YAML::Syck
- CVE-2026-53412Zoom Workplace VDI Plugin for Windows - Improper Input ValidationZoom Communications Zoom Workplace for Windows
- CVE-2026-15422SCTP needs to better-check INIT ACK chunk parametersillumos-gate · OmniOS +1
- CVE-2026-63089WireGuard Easy Weak Token Generation Information Disclosure via OTL Routewg-easy
- CVE-2026-46515Frogman: Multiple read-tier tools expose admin-grade data and arbitrary GraphQL executionmwtcmi frogman
- CVE-2026-46512Frogman: Dialplan template parameters interpolated into extensions_custom.conf without escapingmwtcmi frogman
- CVE-2026-45336HireFlow: Use of Hard-coded CredentialsStratonWebDesigners HireFlow
- CVE-2026-45568zrok Python ProxyShare can be used as an SSRF proxy through absolute URL pathsopenziti zrok · zrok
- CVE-2026-3031Image::EPEG versions through 0.15 for Perl embeds an unsupported version of the Epeg libraryTOKUHIROM Image::EPEG
- CVE-2026-57074XML::Bare versions through 0.53 for Perl have an unbounded character lookaheadCODECHILD XML::Bare
- CVE-2026-57073HTML::Bare versions through 0.04 for Perl have an unbounded character lookaheadCODECHILD HTML::Bare
- CVE-2026-46621Yamcs: Authenticated Remote Code Execution (RCE) via Jython Algorithm Code Injectionyamcs · org.yamcs:yamcs-core
- CVE-2026-46562Yamcs: Remote Code Execution via Mission Database algorithm overrideyamcs · org.yamcs:yamcs-core
- CVE-2026-44632Yamcs: Server-Side Code Injection (RCE) via Janino Expression Engine in `JavaExprAlgorithmExecutionFactory`yamcs · org.yamcs:yamcs-core
- CVE-2026-63087Grafana OnCall 1.16.11 Unauthenticated Token Hijack via Plugin Install Endpointgrafana-cold-storage oncall
- CVE-2026-45695Kopia: Unauthenticated RCE via SSH ProxyCommand Injection when --insecure --without-password is usedkopia · github.com/kopia/kopia
- CVE-2026-54733moodle-local_o365: Authentication bypass via unverified JWT signature in Teams SSO endpointmicrosoft o365-moodle
- CVE-2026-59866Kiota: Arbitrary file write + code-injection via x-ms-kiota-info clientClassName and clientNamespaceNamemicrosoft kiota · Microsoft.OpenApi.Kiota +1
- CVE-2026-59864Kiota: Path/URL injection into generated Copilot plugin manifest via x-ai-* extensionsmicrosoft kiota · Microsoft.OpenApi.Kiota +1
- CVE-2026-14890CVE-2026-14890SGLang
- CVE-2026-59865Kiota: Command injection via x-ms-kiota-info dependencyInstallCommand surfaced by `kiota info`microsoft kiota · Microsoft.OpenApi.Kiota +1
- CVE-2026-63306stoatchat before 0.13.5 Unauthenticated SSRF via proxy and embed endpointsstoatchat
- CVE-2026-63305AVideo through 29.0 OS Command Injection via ffmpeg.json.phpWWBN AVideo
- CVE-2026-63304AVideo through 29.0 OS Command Injection via listFFmpegProcessesWWBN AVideo
- CVE-2026-11386ubuntu-pro-client Input Validation Vulnerability Leading to Arbitrary APT Directive Injection and Remote Code ExecutionCanonical ubuntu-pro-client · Canonical Ubuntu 26.04 LTS +6
- CVE-2023-49899Origin Validation Error in X-Rite MA-T6X-Rite MA-T6
- CVE-2023-49900Origin Validation Error in X-Rite MA-T6X-Rite MA-T6
- CVE-2026-22752Spring Security Authorization Server Dynamic Client Registration endpoints perform insufficient validation of client metadataSpring Security Spring Authorization Server
- CVE-2026-12492Happy Coders OTP Login for WooCommerce < 2.8 - Unauthenticated Account Takeover via hcotp_auto_login_userHappy Coders OTP Login for WooCommerce
- CVE-2026-15925Improper TLS Hostname Verification in Snowflake Connector for PythonSnowflake Connector for Python · snowflake-connector-python
- CVE-2026-15013SAML Single Sign On <= 5.4.3 - Unauthenticated Authentication Bypass via 'SAMLResponse' Parameter Signature Algorithm Confusioncyberlord92 SAML Single Sign On – SSO Login
- CVE-2026-38158A SQL injection vulnerability in the /ureport/datasource/previewData component of ureport v2.2.9 allows attackers to access sensitive databa
High 89
- CVE-2026-39359Wazuh: Unauthenticated Path Traversal in authd via Agent Group Namewazuh
- CVE-2026-34150Wazuh: Heap buffer overflow in wazuh-analysisd via rootcheck event parsingwazuh
- CVE-2026-54340h2o has HTTP/2 state amplificationh2o
- CVE-2026-44453h2o is vulnerable to musl libc stack overflowh2o
- CVE-2026-44436Quicly is vulnerable to connection state corruptionh2o quicly
- CVE-2026-44435Quicly: Remote Denial of Service via assertion failure when CRYPTO stream handshake data exceeds 32KBh2o quicly
- CVE-2026-43977wger IDOR: Authenticated Users Can Read Others' Private Workout Session Data via Template Routine APIwger-project wger · wger
- CVE-2026-43978wger: Privilege escalation via trainer-login session chaining allows gym trainers to impersonate gym managerswger-project wger · wger
- CVE-2026-58598Windows Backup Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-59117Windows Terminal Remote Code Execution VulnerabilityMicrosoft Windows Terminal App
- CVE-2026-45368Kirby: Cross-site scripting (XSS) from links in KirbyTags and image blocks in the site frontendgetkirby kirby · getkirby/cms
- CVE-2026-57077YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan in newline_lenTODDR YAML::Syck
- CVE-2026-57076YAML::Syck versions before 1.47 for Perl allow a heap use-after-free via an anchor name reused as an anchors-table key in syck_hdlr_add_anchorTODDR YAML::Syck
- CVE-2026-44175Kirby: Cross-site scripting (XSS) from list field content in the site frontendgetkirby kirby · getkirby/cms
- CVE-2026-44177Kirby: Pre-authentication path traversal and PHP file inclusion during user lookupgetkirby kirby · getkirby/cms
- CVE-2026-44174Kirby: Arbitrary Method Call via REST API search and collection query endpointsgetkirby kirby · getkirby/cms
- CVE-2026-53411Zoom Workplace VDI Plugin for Windows - Improper Input ValidationZoom Communications Zoom Workplace VDI Plugin
- CVE-2026-53410Zoom Clients for Windows - Race ConditionZoom Communications Zoom Clients
- CVE-2026-53409Improper Privilege Management in Zoom Rooms for Windows before version 7.1.0 may allow an authenticated user to conduct an escalation of priZoom Communications Zoom Rooms
- CVE-2026-44023Docling Core has unsafe remote filename resolutiondocling-project docling-core · docling-core
- CVE-2026-44019Docling Core has insufficient validation of image reference URIsdocling-project docling-core · docling-core
- CVE-2026-55173AVideo incomplete fix for CVE-2026-33482: sanitizeFFmpegCommand still allows a single '&' (background operator), giving OS command execution at the same execAsync sh -c sinkWWBN AVideo · wwbn/avideo
- CVE-2026-33692AVideo Has Unauthenticated .env File Exposure via Official Docker Compose ConfigurationWWBN AVideo · wwbn/avideo
- CVE-2026-61389AutomationDirect Productivity Suite Out-of-bounds WriteAutomationDirect Productivity Suite
- CVE-2026-60063AutomationDirect Productivity Suite Out-of-bounds WriteAutomationDirect Productivity Suite
- CVE-2026-44982CrowdSec AppSec silently drops request body for chunked / HTTP-2 requestscrowdsecurity crowdsec · github.com/crowdsecurity/crowdsec
- CVE-2026-15352NASA Core Flight System (cFS) Health & Safety (HS) Application NULL Pointer DereferenceNASA Core Flight System (cFS) Health & Safety (HS) Applicat…
- CVE-2026-44981CrowdSec LAPI: Denial of Service via Unbounded Gzip Decompressioncrowdsecurity crowdsec · github.com/crowdsecurity/crowdsec
- CVE-2026-62309CoreDNS: proxyproto plugin panics on PPv2 datagram with non-UDP transport — single 28-byte packet remote DoScoredns
- CVE-2026-62290cert-manager: Direct ACME Challenge resources can bypass Issuer DNS01 solver policy and use ClusterIssuer DNS credentialscert-manager · github.com/cert-manager/cert-manager
- CVE-2026-62963Centrifugo: Decompression bomb DoS via permessage-deflate in unidirectional WebSocket transportcentrifugal centrifugo
- CVE-2026-49998Centrifugo: Dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypasscentrifugal centrifugo · github.com/centrifugal/centrifu… +4
- CVE-2026-63397remorses/genql code injectionremorses genql · @genql/cli
- CVE-2026-55629Whistle: Path traversalavwo whistle · whistle
- CVE-2026-54526Argo Workflows: Incomplete fix for CVE-2026-31892: ArtifactGC.PodSpecPatch bypass of Strict/Secure templateReferencingargoproj argo-workflows · github.com/argoproj/argo-workf… +3
- CVE-2026-46513Frogman: API tokens stored in plaintextmwtcmi frogman
- CVE-2026-46353BigBlueButton API checksum bypass via presentationUploadExternalUrlbigbluebutton
- CVE-2026-46351BigBlueButton: Insecure Randomness allows to guess user's conference session token and impersonate thembigbluebutton
- CVE-2026-46336Manyfold: Authenticated Path Traversal via File Renamemanyfold3d manyfold
- CVE-2026-46687Emlog Local File Inclusion (LFI)emlog
- CVE-2026-46686Emlog Reflected Cross-Site Scriptingemlog
- CVE-2026-45367HAPI FHIR: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpointhapifhir org.hl7.fhir.core · ca.uhn.hapi.fhir:org.hl7.fh… +7
- CVE-2026-14371The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on the WAC Gateway is vulnerable to PowershelLenovo XClarity Integrator for Microsoft Windows Admin Cent…
- CVE-2026-13104A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authentiLenovo App Store
- CVE-2026-13103A potential path traversal vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow aLenovo App Store
- CVE-2026-9046A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusLenovo Legion Zone · Lenovo App Store
- CVE-2026-45576zrok copy writes attacker-controlled WebDAV paths outside the destination rootopenziti zrok · github.com/openziti/zrok +1
- CVE-2026-45325Gestor de Oferta: Prototype pollution in @tmlmobilidade/utils setValueAtPathtmlmobilidade go · @tmlmobilidade/utils
- CVE-2026-63088stoatchat < 0.14.0 SSRF via DNS-based IP Blocklist Bypassstoatchat
- CVE-2026-13401XML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malformed attributesCODECHILD XML::Bare
- CVE-2026-13397HTML::Bare versions through 0.04 for Perl will hang in an infinite loop when parsing malformed attributesCODECHILD HTML::Bare
- CVE-2026-63085Axelor Open Platform 8.x < 8.2.2 Authorization Bypass via Nested Relational Record Persistenceaxelor-open-platform
- CVE-2026-57206SimpleChat plugin validation endpoints missing authentication and authorizationmicrosoft simplechat
- CVE-2026-53598Prompty: Arbitrary File Read via ${file:path} Reference Expansionmicrosoft prompty · prompty +2
- CVE-2026-53597Prompty: Arbitrary code execution via JavaScript frontmatter in TypeScript loadermicrosoft prompty · @prompty/core
- CVE-2026-59867Kiota: Generation-time SSRF + remote/local file inclusion via unrestricted $refmicrosoft kiota · Microsoft.OpenApi.Kiota +1
- CVE-2026-59863Kiota: Workspace-config poisoning: out-of-repo file write + generation-time SSRFmicrosoft kiota · Microsoft.OpenApi.Kiota +1
- CVE-2026-59859Kiota: Code Generation Literal Injection in the PHP Generatormicrosoft kiota · Microsoft.OpenApi.Kiota +1
- CVE-2026-59862Kiota: Code Generation Literal Injection in the Python Generatormicrosoft kiota · Microsoft.OpenAPI.Kiota +1
- CVE-2026-59861Kiota: Code Generation Literal Injection in Kiota Ruby Generatormicrosoft kiota · Microsoft.OpenAPI.Kiota +1
- CVE-2026-59860Kiota: XML Doc-Comment Newline Breakout Code Injectionmicrosoft kiota · Microsoft.OpenApi.Kiota +1
- CVE-2026-14254Improper Restriction of Excessive Authentication Attempts in Delphix Continuous DataPerforce Delphix Continuous Data
- CVE-2026-5674Pipewire: pipewire: sandbox escape and arbitrary code execution via malicious library loadingpipewire · Red Hat Enterprise Linux
- CVE-2025-71388stoatchat 20241213-1 Webhook Token Disclosure via Read Permissionsstoatchat
- CVE-2025-71377stoatchat before 20250210-1 Unrestricted Message History Fetchstoatchat
- CVE-2026-35147HCL DFXServer is affected by a Broken Authentication vulnerability via direct API access.HCL Software DFXServer
- CVE-2026-35149HCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation.HCL Software DFXServer
- CVE-2026-15103WPFunnels <= 3.12.8 - Authenticated (Funnel Manager+) Privilege Escalation via 'group_id' Path Parametergetwpfunnels WPFunnels – Funnel Builder for WooCommerce wit…
- CVE-2026-15005Loco Translate <= 2.8.5 - Cross-Site Request Forgery to Remote Code Execution via 'template' Parametertimwhitlock Loco Translate
- CVE-2026-13741Digits: WordPress Mobile Number Signup and Login <= 9.1.0.5 - Authenticated (Subscriber+) Privilege Escalation via 'digits_reg_userrole' ParameterUnitedOver Digits: WordPress Mobile Number Signup and Login
- CVE-2026-58078Joomla Extension - themexpert.com - Unauthenticated SQL injection in Quix Page Builder Pro < 6.2.1themexpert.com Quix Page Builder Pro extension for Joomla
- CVE-2026-6423Local privilege escalation via unauthenticated ALPC in ESET Inspect ConnectorESET, spol. s.r.o. ESET Inspect Connector
- CVE-2026-15008Uncanny Automator <= 7.3.1.4 - Unauthenticated PHP Object Injection to Arbitrary File Deletion via Forminator Submitted-Field Tokenuncannyowl Uncanny Automator – Easy Automation, Integration…
- CVE-2026-7543Breakdance <= 2.7.1 - Unauthenticated Stored Cross-Site Scripting via Webhook Action DetailsBreakdance
- CVE-2026-12978FunnelKit < 3.15.0.6 - Reflected XSS via Divi Optin FormFunnelKit
- CVE-2026-12585Abandoned Cart Lite for WooCommerce < 6.8.2 - Unauthenticated Account Takeover via Malleable Recovery-Link TokenAbandoned Cart Lite for WooCommerce
- CVE-2026-12525Redux Framework < 4.5.13 - Subscriber+ Privilege Escalation to AdministratorRedux Framework
- CVE-2026-53366ipv4: account for fraggap on the paged allocation pathLinux
- CVE-2026-13042RPB Chessboard <= 8.1.2 - Unauthenticated Stored Cross-Site Scripting via Comment Contentyo35 RPB Chessboard
- CVE-2026-21729Loki detected_fields query limits results in unbounded memory allocationGrafana Loki
- CVE-2026-12753Advance Product Search- Voice & Ajax Search for WooCommerce <= 1.4.4 - Unauthenticated SQL Injection via 's' and 'match' Parameterthemehunk Advance Product Search- Voice & Ajax Search for W…
- CVE-2026-48863Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of serviceOpenSUSE libsolv · Red Hat Enterprise Linux +4
- CVE-2026-1609Org.keycloak/keycloak-quarkus-server: keycloak: unauthorized access via jwt authorization grant with disabled usersKeycloak · Red Hat JBoss Enterprise Application Platform
- CVE-2026-3842Qemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host oob writeqemu · Red Hat Enterprise Linux +1
- CVE-2026-23538Feast: resource exhaustion via websocket endpointFeast Feature Server · Red Hat OpenShift AI
- CVE-2021-27137An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724.DD-WRT
- CVE-2024-32386Directory traversal vulnerability in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote attacker to obtain sen
- CVE-2024-34268EQ-3 Eqiva CC-RT-BLE Bluetooth Smart Radiator Thermostat Firmware up to the latest version 1.46 was discovered to allow unsecured bluetooth
- CVE-2025-45868LogicalDOC Enterprise up to and for v9.1.1 is vulnerable to blind SQL injection in the ComparisonServlet component, allowing authenticated u
Medium, low and unrated 123
- CVE-2026-40106Wazuh: Heap-based Buffer Overflow in syscheck Registry Wildcard Expansion (LPE / DoS)wazuh
- CVE-2026-33754Wazuh: Unauthenticated cluster packet length leads to uncontrolled memory allocation (remote DoS)wazuh
- CVE-2026-33434Wazuh: Rate Limit Bypass via /events Endpointwazuh
- CVE-2026-44452h2o is vulnerable to heap overrunh2o
- CVE-2026-44434Quicly is vulnerable to stateless reset injectionh2o quicly
- CVE-2026-44433Quicly is vulnerable to memory exhaustionh2o quicly
- CVE-2026-15997Native ARM SHA3 / SHAKE `restoreFullState` fails to detect size_t underflow in a crafted encoded stateLegion of the Bouncy Castle BC-LTS
- CVE-2026-62826Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-58643Windows Admin Center Spoofing VulnerabilityMicrosoft Windows Admin Center
- CVE-2026-45334Kirby: Content locks disclose IDs and emails of inaccessible users from `users.access/list` permissionsgetkirby kirby · getkirby/cms
- CVE-2026-13713YAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor node freed while still on the parser value stackTODDR YAML::Syck
- CVE-2026-14782Booking for Appointments and Events Calendar – Amelia <= 2.4.3 - Authenticated (Custom+) SQL Injection via Customer Importmelograno Booking for Appointments and Events Calendar – Am…
- CVE-2026-44176Kirby: `pages.access` permission is not checked during rendering of page draftsgetkirby kirby · getkirby/cms
- CVE-2026-33731AVideo has an Authorize.Net Webhook Signature Bypass that Enables Wallet Balance Inflation via Forged Payment DataWWBN AVideo · wwbn/avideo
- CVE-2026-11889SALTO ProAccess Space Authorization Bypass Through User-Controlled KeySALTO ProAccess Space
- CVE-2026-61378AutomationDirect Productivity Suite Divide By ZeroAutomationDirect Productivity Suite
- CVE-2026-60073AutomationDirect Productivity Suite Out-of-bounds ReadAutomationDirect Productivity Suite
- CVE-2026-57896AutomationDirect Productivity Suite Out-of-bounds ReadAutomationDirect Productivity Suite
- CVE-2026-60140AutomationDirect Productivity Suite Out-of-bounds ReadAutomationDirect Productivity Suite
- CVE-2026-62299CoreDNS: rewrite-plugin EDNS0 response-revert nil-pointer panic (remote DoS) when a downstream plugin returns a response with no OPT recordcoredns
- CVE-2026-62994CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugincoredns · github.com/coredns/coredns
- CVE-2026-15449TOCTOU double copyin in illumos dld ioctl handling causes kernel heap corruptionillumos-gate · OmniOS +1
- CVE-2026-54728bunkerweb: Improper Input Validation and Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in BunkerWebbunkerity bunkerweb
- CVE-2026-61718bunkerweb: Read-only Web UI users can delete job cache files due to missing authorization on /cache/ routesbunkerity bunkerweb
- CVE-2026-53535Activepieces: Arbitrary file write in git-sync via path traversal and symlinksactivepieces
- CVE-2026-53536Activepieces: Cross-tenant file download via missing JWT audience check on step-files signed URLactivepieces
- CVE-2026-46338PyMdown Extensions: Regression in pymdownx.snippets reintroduces sibling-prefix path traversal bypass despite restrict_base_pathfacelessuser pymdown-extensions · pymdown-extensions
- CVE-2026-46514Frogman: Plaintext passwords and secrets persisted to audit logmwtcmi frogman
- CVE-2026-46404BigBlueButton: Presentation URL Security Hardeningbigbluebutton
- CVE-2026-46377Dasel: Index-out-of-range panic in dasel selector lexer on trailing backslash in quoted stringTomWright dasel · github.com/tomwright/dasel/v3 +2
- CVE-2026-46378Dasel: Denial of service in dasel selector lexer due to infinite loop on unterminated regex literalTomWright dasel · github.com/tomwright/dasel +2
- CVE-2026-44969dbt-mcp: Tool Arguments Including SQL Queries and Credentials Logged in Plaintext Without Redaction When File Logging Is Enableddbt-labs dbt-mcp · dbt-mcp
- CVE-2026-44970dbt-mcp: All MCP Tool Arguments Including Raw SQL and --vars Credentials Transmitted to dbt Labs Telemetry by Default Without Redactiondbt-labs dbt-mcp · dbt-mcp
- CVE-2026-44968dbt-mcp: Argument Injection in dbt CLI Tool Wrappers via node_selection and resource_type Parametersdbt-labs dbt-mcp · dbt-mcp
- CVE-2026-15945Keycloak-services: keycloak-services: group hierarchy search discloses hidden parent groups under fgap v2Red Hat build of Keycloak · Red Hat Data Grid +2
- CVE-2026-15737Sensitive content disclosure via OpenTelemetry spans in AgentCore Python SDKAWS bedrock-agentcore
- CVE-2026-46341Apify MCP server: Domain Allowlist Bypass in fetch-apify-docs via String Prefix Matchingapify-mcp-server · @apify/actors-mcp-server
- CVE-2026-10590A potential missing authentication vulnerability could allow a local privileged attacker to use WMI commands to arbitrarily trigger a SystemLenovo Yoga Pro 7 15IPH11 BIOS · Lenovo IdeaPad Pro 5 1… +55
- CVE-2026-10589A potential out of bounds write vulnerability could allow a local privileged attacker to execute code in System Management Mode.Lenovo Yoga Pro 7 15IPH11 BIOS · Lenovo IdeaPad Pro 5 1… +55
- CVE-2026-10588A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory.Lenovo Yoga Pro 7 15IPH11 BIOS · Lenovo IdeaPad Pro 5 1… +55
- CVE-2026-10587A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management settings in System ManagemeLenovo Yoga Pro 7 15IPH11 BIOS · Lenovo IdeaPad Pro 5 1… +55
- CVE-2026-6511During an internal security assessment, a potential improper access control vulnerability was discovered in Lenovo Smart Connect for WindowsLenovo Smart Connect
- CVE-2026-45795Janssen Project: JWE Request Object Signature Verification Bypass in jans-auth-serverJanssenProject jans
- CVE-2026-45612rz-libdemangle: Out of bound read in rust demanglerrizinorg rz-libdemangle
- CVE-2026-47729Squid: Memory disclosure in FTP gatewaysquid-cache squid
- CVE-2026-50012Squid: Memory corruption in cache_digest reply handlingsquid-cache squid
- CVE-2026-55548Yamcs: Insecure Direct Object Reference (IDOR) in PacketsApi allows unprivileged users to dump all telemetry packetsyamcs · org.yamcs:yamcs-core
- CVE-2026-44596Yamcs: No Rate Limiting on Authentication Endpointyamcs · org.yamcs:yamcs-core
- CVE-2026-44595Yamcs: Unauthorized user enumeration via IAM API endpointsyamcs · org.yamcs:yamcs-core
- CVE-2026-63086text-generation-inference 3.3.7 SSRF via fetch_image in multimodal chat completionshuggingface text-generation-inference
- CVE-2026-47751Claude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret Exfiltrationanthropics claude-code-action
- CVE-2026-55407Buffa: Memory Exhaustion Denial of Service in decode_unknown_field via Unbounded Allocationanthropics buffa · buffa
- CVE-2026-55406Buffa: Use-After-Free in OwnedView via Unsound 'static Lifetime Promotion in Derefanthropics buffa · buffa
- CVE-2026-55440Microsoft UFO: COMMAND_RESULTS handler creates unowned sessions, allowing authenticated session-squatting denial of servicemicrosoft UFO
- CVE-2026-63082Perfect Support Ticketing System 1.7 Broken Access Control via Agent AssignmentUltimate Fosters Perfect Support Ticketing & Document Manag…
- CVE-2026-63081Perfect Support Ticketing System 1.7 Stored XSS via Ticket Notes FieldUltimate Fosters Perfect Support Ticketing & Document Manag…
- CVE-2026-12379URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the Dashboard OAuth/OIDC implementation of AxivionQt Axivion
- CVE-2026-54568Microsoft UFO: Missing Authorization in DEVICE_INFO_REQUEST Allows a DEVICE Client to Read Another Device's system_infomicrosoft UFO
- CVE-2026-57205SimpleChat: Authenticated users can access other users' profile metadata through user IDOR endpointsmicrosoft simplechat
- CVE-2026-59237IDOR in Prospero Flow CRM Order API allows cross-tenant read and modification of ordersRoskus Prospero Flow CRM
- CVE-2026-56456HCL DFXAnalytics is affected by an Internal File Path Disclosure vulnerability.HCL Software DFXAnalytics
- CVE-2026-56455HCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to a Denial of Service (DoS).HCL Software DFXAnalytics
- CVE-2026-56454HCL DFXAnalytics is affected by a Deprecated Protocol vulnerability due to the use of TLS 1.0 and TLS 1.1.HCL Software DFXAnalytics
- CVE-2026-56453HCL DFXAnalytics is affected by an Account Takeover via Response Manipulation vulnerability.HCL Software DFXAnalytics
- CVE-2026-35145HCL DFXAnalytics is affected by a Missing HTTP Strict-Transport-Security Header vulnerability.HCL Software DFXAnalytics
- CVE-2026-35143HCL DFXAnalytics is affected by a Missing SameSite Attribute vulnerability.HCL Software DFXAnalytics
- CVE-2026-35142HCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability.HCL Software DFXAnalytics
- CVE-2026-35141HCL DFXAnalytics is affected by a Login Replay Attack vulnerabilityHCL Software DFXAnalytics
- CVE-2026-35140HCL DFXAnalytics is affected by a Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerabilityHCL Software DFXAnalytics
- CVE-2024-58360stoatchat before 0.7.8 Unrestricted Account Creationstoatchat
- CVE-2026-12391ubuntu-pro-client Local Privilege Escalation and Information Disclosure via Symlink Arbitrary File Read in collect-logsCanonical ubuntu-pro-client · Canonical Ubuntu 26.04 LTS +5
- CVE-2026-9494ubuntu-pro-client Information Disclosure via Cleartext Bearer Token Exposure in Process Command LineCanonical ubuntu-pro-client · Canonical Ubuntu 26.04 LTS +6
- CVE-2026-59249Sign-tolerant HTTP/1 chunk-size parser in Mint enables response smuggling against strict intermediaries on pooled connectionselixir-mint mint
- CVE-2026-35148HCL DFXServer is affected by a Missing Access Control vulnerabilityHCL Software DFXServer
- CVE-2026-35146HCL DFXServer is affected by an Unencrypted Communication vulnerability.HCLSoftware DFXServer
- CVE-2026-6424Use-after-free vulnerability in ESET security products for LinuxESET, spol. s.r.o. ESET Endpoint Antivirus for Linux · ESET…
- CVE-2026-15324SysBasics Customize My Account for WooCommerce <= 4.4.14 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'row_type' Parameterphppoet SysBasics Customize My Account for WooCommerce – Li…
- CVE-2026-15727WP Bulk Delete <= 1.4.2 - Authenticated (Administrator+) SQL Injection via 'delete_user_roles' Parameterxylus WP Bulk Delete
- CVE-2026-15021wpForo Forum <= 3.1.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'location' Profile Fieldtomdever wpForo Forum
- CVE-2026-13755Tickera <= 3.6.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'price_wrapper' Shortcode AttributeTickera – Sell Tickets & Manage Events
- CVE-2026-15610WPBot <= 8.5.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary RAG Document Re-Sync via ajax_rag_manual_sync() Functionquantumcloud WPBot – AI ChatBot for Live Support, Lead Gene…
- CVE-2026-15106WPBot <= 8.5.6 - Missing Authorization to Unauthenticated Arbitrary Chat Session Deletion via 'userid' Parameterquantumcloud WPBot – AI ChatBot for Live Support, Lead Gene…
- CVE-2026-15407Themify Builder <= 7.7.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Stylesheet Write/Delete via tb_generate_on_fly AJAX Actionthemifyme Themify Builder
- CVE-2026-15651WP TripAdvisor Review Slider <= 14.6 - Authenticated (Administrator+) SQL Injection via 'filtersource' Parameterjgwhite33 WP TripAdvisor Review Slider
- CVE-2026-15022Tutor LMS <= 4.0.0 - Authenticated (Subscriber+) SQL Injection via Stored Quiz Answer Arraythemeum Tutor LMS – eLearning and online course solution
- CVE-2026-13754Tickera <= 3.6.0.0 - Authenticated (Staff+) SQL Injection via 's' ParameterTickera – Sell Tickets & Manage Events
- CVE-2026-13767Quiz and Survey Master (QSM) <= 11.2.0 - Authenticated (Custom+) SQL Injection via 'pages' Parameterexpresstech Quiz and Survey Master (QSM) – Quiz Maker & Sur…
- CVE-2026-15350The Cache Purger <= 2.3.20 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Log Deletion via 'the_log_purge' Parameterkevp75 The Cache Purger
- CVE-2026-15099WP Delicious <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'steps' Block Attributewpdelicious WP Delicious – Recipe Plugin for Food Bloggers
- CVE-2026-12979FunnelKit < 3.15.0.6 - Admin+ Arbitrary File Deletion via Path Traversal in Template ImporterFunnelKit
- CVE-2026-12907RTMKit Addons for Elementor < 2.0.9 - Author+ Site-Wide Theme Builder Template Creation and ActivationRTMKit
- CVE-2026-12906RTMKit Addons for Elementor < 2.0.9 - Contributor+ Private Post Title DisclosureRTMKit
- CVE-2026-12869Header Footer Builder for Elementor < 1.2.1 - Contributor+ Stored XSS via Template ImportHeader Footer Builder for Elementor
- CVE-2026-12684Customer Reviews for WooCommerce < 5.113.0 - Unauthenticated Arbitrary Media Upload via cr_upload_mediaCustomer Reviews for WooCommerce
- CVE-2026-12510AI Engine < 3.5.5 - Subscriber+Chatbot Discussion Disclosure and Takeover via IDORAI Engine
- CVE-2026-12395WP Job Portal < 2.5.5 - Subscriber+ SQL Injection via Applied Resumes 'ta' ParameterWP Job Portal
- CVE-2026-11866LatePoint < 5.6.3 - Multiple Privileged Actions via CSRFAppointment Booking Plugin
- CVE-2026-11371BetterDocs < 4.5.5 - Unauthenticated Stored XSS via AI Doc Summarizer Prompt InjectionBetterDocs
- CVE-2026-15458SEO Booster <= 7.3.1 - Authenticated (Administrator+) SQL Injection via 'sort_field' Parametercleverplugins SEO Booster
- CVE-2026-15445SEO Booster <= 7.3.1 - Authenticated (Administrator+) SQL Injection via 'orderby' Parametercleverplugins SEO Booster
- CVE-2026-15306Product Feed Manager For WooCommerce <= 7.6.1 - Reflected Cross-Site Scripting via 's' Search Parameterrextheme Product Feed Manager For WooCommerce – Sell on 200…
- CVE-2026-15652Easy Accordion <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' Block Attributeshapedplugin Easy Accordion – AI-Powered FAQ & Accordion Bl…
- CVE-2026-12941MultiVendorX <= 5.0.9 - Authenticated (Store Owner+) SQL Injection via 'order_by' Parameterwcmp MultiVendorX – WooCommerce Multivendor Marketplace AI…
- CVE-2026-14987GiveWP <= 4.16.3 - Authenticated (Give Worker+) Stored Cross-Site Scripting via 'twitter_message' Sequoia Template Settingstellarwp GiveWP – Donation Plugin and Fundraising Platform
- CVE-2026-12409Landing Page Builder <= 1.5.3.6 - Cross-Site Request Forgery to ulpb_admin_data AJAX Actionumarbajwa Landing Page Builder – Coming Soon page, Maintena…
- CVE-2026-12434List category posts <= 0.95.0 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'post_status' Shortcode Attributefernandobt List category posts
- CVE-2026-15336Catch Themes Demo Import <= 3.3 - Missing Authorization to Authenticated (Subscriber+) Single Plugin Installation via 'activate_plugin' Parametercatchplugins Catch Themes Demo Import
- CVE-2026-13005MxChat <= 3.2.10 - Authenticated (Admin+) Stored Cross-Site Scripting via 'intro_message' SettingMxChat – AI Chatbot & Content Generation for WordPress
- CVE-2026-15909RafyMrX TOKO-ONLINE-ROTI add.php authorizationRafyMrX TOKO-ONLINE-ROTI
- CVE-2024-32385An issue in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote attacker to obtain sensitive information via a
- CVE-2024-32387An issue in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote attacker to obtain sensitive information via th
- CVE-2024-32389Buffer Overflow vulnerability in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote attacker to obtain sensiti
- CVE-2025-45870LogicalDOC Enterprise up to and for v9.1.1 is vulnerable to Local File Inclusion (LFI) in the OnlyOfficeEditor servlet class, allowing authe
- CVE-2026-36425An issue in OPSWAT AppRemover Driver (ardrv.sys) v2017.10.02.1551 and earlier in IOCTL handler 0x2420031.
- CVE-2026-47081An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.cyrusimap Cyrus IMAP
- CVE-2026-47082An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.cyrusimap Cyrus IMAP
- CVE-2026-47083An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.cyrusimap Cyrus IMAP
- CVE-2026-47084An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.cyrusimap Cyrus IMAP
- CVE-2026-47085An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.cyrusimap Cyrus IMAP
- CVE-2026-47086An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.cyrusimap Cyrus IMAP
- CVE-2026-47087An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.cyrusimap Cyrus IMAP
- CVE-2026-47088An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.cyrusimap Cyrus IMAP
- CVE-2026-47089An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.cyrusimap Cyrus IMAP