# CVEs published 2026-07-27

440 CVEs were published on July 27, 2026: 91 critical, 168 high. 3 are now in CISA KEV. Days are UTC.

- [CVE-2026-65448](https://cve.now/CVE-2026-65448.md): WordPress Anti Spam and list cleaner – AcyChecker plugin \<= 1.8.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, AcyMailing Newsletter Team Anti Spam and list cleaner &#821…)
- [CVE-2026-65447](https://cve.now/CVE-2026-65447.md): WordPress Contest Gallery plugin \<= 30.0.6 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Wasiliy Strecker / ContestGallery developer Contest Gallery)
- [CVE-2026-65446](https://cve.now/CVE-2026-65446.md): WordPress Kali Forms plugin \<= 2.4.18 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, WP Chill Kali Forms)
- [CVE-2026-65445](https://cve.now/CVE-2026-65445.md): WordPress Ad Invalid Click Protector (AICP) plugin \<= 1.3.0 - Broken Access Control vulnerability (CVSS 6.5, iSaumya Ad Invalid Click Protector)
- [CVE-2026-65443](https://cve.now/CVE-2026-65443.md): WordPress BackWPup plugin \<= 5.7.4 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, WP Media BackWPup)
- [CVE-2026-65442](https://cve.now/CVE-2026-65442.md): WordPress FormCraft plugin \<= 3.9.15 - Server Side Request Forgery (SSRF) vulnerability (CVSS 7.2, Subtle Web FormCraft)
- [CVE-2026-65441](https://cve.now/CVE-2026-65441.md): WordPress GiveWP plugin \<= 4.16.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Nexcess GiveWP)
- [CVE-2026-65440](https://cve.now/CVE-2026-65440.md): WordPress GetGenie plugin \<= 4.4.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Roxnor GetGenie)
- [CVE-2026-65439](https://cve.now/CVE-2026-65439.md): WordPress Ultimate Addons for Contact Form 7 plugin \<=3.5.45 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Themefic Ultimate Addons for Contact Form)
- [CVE-2026-65438](https://cve.now/CVE-2026-65438.md): WordPress Message Filter for Contact Form 7 plugin \<= 1.6.3.9 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Kofi Mokome Message Filter for Contact Form)
- [CVE-2026-65437](https://cve.now/CVE-2026-65437.md): WordPress Spam protection, AntiSpam, FireWall by CleanTalk plugin \<= 6.82 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Spam protection, AntiSpam, FireWall by CleanTalk)
- [CVE-2026-61957](https://cve.now/CVE-2026-61957.md): WordPress miniorange otp verification plugin \<= 5.5.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, miniorange otp verification)
- [CVE-2026-61953](https://cve.now/CVE-2026-61953.md): WordPress Simple Link Directory Pro plugin \<= 15.0.6 - Server Side Request Forgery (SSRF) vulnerability (CVSS 7.2, QuantumCloud Simple Link Directory Pro)
- [CVE-2026-66473](https://cve.now/CVE-2026-66473.md): WordPress Xendit Payment plugin \<= 7.1.0 - Broken Access Control vulnerability (CVSS 7.5, Xendit Payment)
- [CVE-2026-53669](https://cve.now/CVE-2026-53669.md): React Router: Open redirect via backslash in \<Link\> and useNavigate (CVE-2025-68470 bypass) (CVSS 5.1, remix-run react-router · react-router)
- [CVE-2026-55685](https://cve.now/CVE-2026-55685.md): React Router: Unauthenticated Denial of Service via Inefficient Route Matching (CVSS 8.7, remix-run react-router · react-router)
- [CVE-2026-53668](https://cve.now/CVE-2026-53668.md): React Router: Open redirect can lead to XSS (CVSS 6.9, remix-run react-router · react-router-dom +1)
- [CVE-2026-59240](https://cve.now/CVE-2026-59240.md): IDOR in Prospero Flow CRM allows deletion of other users' notifications (CVSS 6.9, Roskus Prospero Flow CRM)
- [CVE-2026-53667](https://cve.now/CVE-2026-53667.md): React Router: Cross-site Scripting is Possible due to Missing RSCErrorHandler Protocol Validation (Incomplete fix for CVE-2026-53667) (CVSS 6.9, remix-run react-router · react-router)
- [CVE-2026-53666](https://cve.now/CVE-2026-53666.md): React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR Hydration (CVSS 6.1, remix-run react-router · react-router)
- [CVE-2026-66825](https://cve.now/CVE-2026-66825.md): Cross-Site Scripting via Unsafe URL Schemes in Pivotick Property Links (CVSS 6.9, pivotick)
- [CVE-2026-43757](https://cve.now/CVE-2026-43757.md): An out-of-bounds read was addressed with improved bounds checking. (CVSS 9.8, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-64737](https://cve.now/CVE-2026-64737.md): An authorization issue was addressed with improved state management. (CVSS 8.2, Apple macOS)
- [CVE-2026-43782](https://cve.now/CVE-2026-43782.md): This issue was addressed with improved checks. (CVSS 5.5, Apple macOS)
- [CVE-2026-43805](https://cve.now/CVE-2026-43805.md): A race condition was addressed with improved state handling. (CVSS 9.8, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-39873](https://cve.now/CVE-2026-39873.md): The issue was addressed with improved memory handling. (CVSS 9.8, Apple macOS)
- [CVE-2026-64776](https://cve.now/CVE-2026-64776.md): The issue was addressed with improved bounds checks. (CVSS 5.5, Apple macOS)
- [CVE-2026-43813](https://cve.now/CVE-2026-43813.md): A validation issue was addressed with improved input sanitization. (CVSS 7.1, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-64721](https://cve.now/CVE-2026-64721.md): This issue was addressed through improved state management. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-20672](https://cve.now/CVE-2026-20672.md): An information disclosure issue was addressed with improved privacy controls. (CVSS 5.5, Apple macOS)
- [CVE-2026-64740](https://cve.now/CVE-2026-64740.md): A parsing issue in the handling of directory paths was addressed with improved path validation. (CVSS 9.3, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-64691](https://cve.now/CVE-2026-64691.md): A buffer overflow was addressed with improved size validation. (CVSS 9.8, Apple macOS)
- [CVE-2026-43673](https://cve.now/CVE-2026-43673.md): The issue was addressed with improved memory handling. (CVSS 7.8, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-64783](https://cve.now/CVE-2026-64783.md): A use-after-free issue was addressed with improved memory management. (CVSS 8.8, Apple Safari · Apple iOS and iPadOS +3)
- [CVE-2026-43809](https://cve.now/CVE-2026-43809.md): An out-of-bounds read was addressed with improved bounds checking. (CVSS 9.8, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-43665](https://cve.now/CVE-2026-43665.md): This issue was addressed with additional entitlement checks. (CVSS 5.5, Apple macOS)
- [CVE-2026-43777](https://cve.now/CVE-2026-43777.md): This issue was addressed with improved input validation. (CVSS 7.5, Apple macOS)
- [CVE-2026-43799](https://cve.now/CVE-2026-43799.md): A use after free issue was addressed with improved memory management. (CVSS 9.8, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-43776](https://cve.now/CVE-2026-43776.md): A buffer overflow was addressed with improved bounds checking. (CVSS 7.8, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-28900](https://cve.now/CVE-2026-28900.md): A file quarantine bypass was addressed with additional checks. (CVSS 5.5, Apple macOS)
- [CVE-2026-43672](https://cve.now/CVE-2026-43672.md): An authorization issue was addressed with improved state management. (CVSS 7.1, Apple macOS)
- [CVE-2026-43760](https://cve.now/CVE-2026-43760.md): An access issue was addressed with improved access restrictions. (CVSS 8.6, Apple macOS)
- [CVE-2026-64741](https://cve.now/CVE-2026-64741.md): A permissions issue was addressed with additional restrictions. (CVSS 5.5, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2026-64716](https://cve.now/CVE-2026-64716.md): The issue was addressed with improved memory handling. (CVSS 7.8, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-28982](https://cve.now/CVE-2026-28982.md): A race condition was addressed with improved locking. (CVSS 9.8, Apple macOS)
- [CVE-2026-64700](https://cve.now/CVE-2026-64700.md): A use after free issue was addressed with improved memory management. (CVSS 9.8, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-64757](https://cve.now/CVE-2026-64757.md): A memory corruption issue was addressed with improved state management. (CVSS 8.8, Apple Safari · Apple iOS and iPadOS +3)
- [CVE-2026-64720](https://cve.now/CVE-2026-64720.md): A race condition was addressed with improved state handling. (CVSS 9.8, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-28849](https://cve.now/CVE-2026-28849.md): The issue was addressed with improved checks. (CVSS 5.5, Apple macOS)
- [CVE-2026-43812](https://cve.now/CVE-2026-43812.md): A use after free issue was addressed with improved memory management. (CVSS 9.8, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-43804](https://cve.now/CVE-2026-43804.md): This issue was addressed through improved state management. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +2)
- [CVE-2026-43756](https://cve.now/CVE-2026-43756.md): A logic issue was addressed with improved validation. (CVSS 5.5, Apple macOS)
- [CVE-2026-64707](https://cve.now/CVE-2026-64707.md): A permissions issue was addressed with improved validation. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-64711](https://cve.now/CVE-2026-64711.md): This issue was addressed with additional entitlement checks. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-64746](https://cve.now/CVE-2026-64746.md): An authorization issue was addressed with improved validation. (CVSS 9.8, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-43767](https://cve.now/CVE-2026-43767.md): The issue was addressed with improved memory handling. (CVSS 5.0, Apple macOS)
- [CVE-2026-64697](https://cve.now/CVE-2026-64697.md): The issue was addressed with improved memory handling. (CVSS 9.8, Apple macOS)
- [CVE-2026-43730](https://cve.now/CVE-2026-43730.md): A permissions issue was addressed with additional restrictions. (CVSS 9.8, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-28911](https://cve.now/CVE-2026-28911.md): The issue was addressed with improved memory handling. (CVSS 9.8, Apple macOS)
- [CVE-2026-43819](https://cve.now/CVE-2026-43819.md): An access issue was addressed with additional sandbox restrictions. (CVSS 5.5, Apple macOS)
- [CVE-2026-43771](https://cve.now/CVE-2026-43771.md): A stack overflow was addressed with improved input validation. (CVSS 7.1, Apple macOS)
- [CVE-2026-43747](https://cve.now/CVE-2026-43747.md): An out-of-bounds read was addressed with improved bounds checking. (CVSS 7.1, Apple macOS)
- [CVE-2026-28931](https://cve.now/CVE-2026-28931.md): A buffer overflow was addressed with improved bounds checking. (CVSS 8.8, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-43710](https://cve.now/CVE-2026-43710.md): The issue was addressed with improved memory handling. (CVSS 9.8, Apple macOS)
- [CVE-2026-64731](https://cve.now/CVE-2026-64731.md): A path handling issue was addressed with improved validation. (CVSS 9.8, Apple macOS)
- [CVE-2026-64766](https://cve.now/CVE-2026-64766.md): An integer overflow was addressed with improved input validation. (CVSS 7.8, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-43803](https://cve.now/CVE-2026-43803.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 9.8, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-39875](https://cve.now/CVE-2026-39875.md): A permissions issue was addressed with additional restrictions. (CVSS 7.8, Apple macOS)
- [CVE-2026-64770](https://cve.now/CVE-2026-64770.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 9.8, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-64727](https://cve.now/CVE-2026-64727.md): A type confusion issue was addressed with improved memory handling. (CVSS 9.8, Apple macOS · Apple tvOS)
- [CVE-2026-43792](https://cve.now/CVE-2026-43792.md): An authorization issue was addressed with improved state management. (CVSS 6.5, Apple Safari · Apple macOS)
- [CVE-2026-43793](https://cve.now/CVE-2026-43793.md): An issue existed in the handling of environment variables. (CVSS 9.8, Apple macOS)
- [CVE-2026-64726](https://cve.now/CVE-2026-64726.md): The issue was addressed with improved memory handling. (CVSS 9.8, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-43681](https://cve.now/CVE-2026-43681.md): A buffer overflow was addressed with improved bounds checking. (CVSS 7.1, Apple macOS)
- [CVE-2026-64771](https://cve.now/CVE-2026-64771.md): A buffer overflow was addressed with improved bounds checking. (CVSS 9.8, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-43814](https://cve.now/CVE-2026-43814.md): A use after free issue was addressed with improved memory management. (CVSS 9.8, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-39874](https://cve.now/CVE-2026-39874.md): A permissions issue was addressed with additional restrictions. (CVSS 7.8, Apple macOS)
- [CVE-2026-64767](https://cve.now/CVE-2026-64767.md): A buffer overflow was addressed with improved bounds checking. (CVSS 9.8, Apple macOS)
- [CVE-2026-43802](https://cve.now/CVE-2026-43802.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 9.8, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-64730](https://cve.now/CVE-2026-64730.md): The issue was addressed with improved UI. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-43711](https://cve.now/CVE-2026-43711.md): A memory corruption issue was addressed with improved memory handling. (CVSS 7.8, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-43750](https://cve.now/CVE-2026-43750.md): A buffer overflow was addressed with improved bounds checking. (CVSS 9.8, Apple macOS)
- [CVE-2026-28926](https://cve.now/CVE-2026-28926.md): A race condition was addressed with improved state handling. (CVSS 7.0, Apple macOS)
- [CVE-2026-43770](https://cve.now/CVE-2026-43770.md): A race condition was addressed with additional validation. (CVSS 4.7, Apple macOS · Apple tvOS)
- [CVE-2026-43818](https://cve.now/CVE-2026-43818.md): An integer overflow was addressed with improved input validation. (CVSS 8.8, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-64696](https://cve.now/CVE-2026-64696.md): The issue was addressed with improved memory handling. (CVSS 9.8, Apple macOS)
- [CVE-2026-43766](https://cve.now/CVE-2026-43766.md): An authorization issue was addressed with improved state management. (CVSS 4.6, Apple macOS)
- [CVE-2026-28896](https://cve.now/CVE-2026-28896.md): The issue was addressed with improved memory handling. (CVSS 7.7, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-43822](https://cve.now/CVE-2026-43822.md): A use after free issue was addressed with improved memory management. (CVSS 9.8, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-64747](https://cve.now/CVE-2026-64747.md): A buffer overflow was addressed with improved size validation. (CVSS 7.8, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-64710](https://cve.now/CVE-2026-64710.md): A privacy issue was addressed by removing sensitive data. (CVSS 5.5, Apple macOS)
- [CVE-2026-64751](https://cve.now/CVE-2026-64751.md): A use after free issue was addressed with improved memory management. (CVSS 9.8, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-64729](https://cve.now/CVE-2026-64729.md): A use after free issue was addressed with improved memory management. (CVSS 9.8, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-43773](https://cve.now/CVE-2026-43773.md): An out-of-bounds read was addressed with improved bounds checking. (CVSS 9.8, Apple macOS)
- [CVE-2026-64768](https://cve.now/CVE-2026-64768.md): An out-of-bounds read issue was addressed with improved input validation. (CVSS 8.1, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-43698](https://cve.now/CVE-2026-43698.md): An injection issue was addressed with improved validation. (CVSS 7.8, Apple macOS)
- [CVE-2026-64695](https://cve.now/CVE-2026-64695.md): The issue was addressed with improved memory handling. (CVSS 9.8, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-43765](https://cve.now/CVE-2026-43765.md): This issue was addressed with improved handling of symlinks. (CVSS 5.5, Apple macOS)
- [CVE-2026-64744](https://cve.now/CVE-2026-64744.md): An information leakage was addressed with additional validation. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-43821](https://cve.now/CVE-2026-43821.md): An access issue was addressed with improved access restrictions. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-64713](https://cve.now/CVE-2026-64713.md): This issue was addressed with improved checks. (CVSS 8.1, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-43749](https://cve.now/CVE-2026-43749.md): A parsing issue in the handling of directory paths was addressed with improved path validation. (CVSS 7.8, Apple macOS)
- [CVE-2026-64725](https://cve.now/CVE-2026-64725.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 7.1, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-43728](https://cve.now/CVE-2026-43728.md): This issue was addressed through improved state management. (CVSS 7.5, Apple macOS)
- [CVE-2026-43682](https://cve.now/CVE-2026-43682.md): The issue was addressed with improved memory handling. (CVSS 9.8, Apple macOS)
- [CVE-2026-43817](https://cve.now/CVE-2026-43817.md): An out-of-bounds read was addressed with improved bounds checking. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-64772](https://cve.now/CVE-2026-64772.md): An out-of-bounds write issue was addressed with improved input validation. (CVSS 9.8, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-43694](https://cve.now/CVE-2026-43694.md): The issue was addressed with improved memory handling. (CVSS 9.8, Apple macOS)
- [CVE-2026-39877](https://cve.now/CVE-2026-39877.md): A memory corruption issue was addressed with improved memory handling. (CVSS 7.8, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-43801](https://cve.now/CVE-2026-43801.md): This issue was addressed with improved checks. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-64764](https://cve.now/CVE-2026-64764.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 7.8, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-43769](https://cve.now/CVE-2026-43769.md): An integer overflow was addressed with improved input validation. (CVSS 9.8, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-64699](https://cve.now/CVE-2026-64699.md): A memory initialization issue was addressed with improved memory handling. (CVSS 5.5, Apple macOS)
- [CVE-2026-64733](https://cve.now/CVE-2026-64733.md): This issue was addressed with improved data protection. (CVSS 9.8, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-43753](https://cve.now/CVE-2026-43753.md): An out-of-bounds read was addressed with improved bounds checking. (CVSS 4.6, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-64709](https://cve.now/CVE-2026-64709.md): The issue was addressed with improved memory handling. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-64708](https://cve.now/CVE-2026-64708.md): A file quarantine bypass was addressed with additional checks. (CVSS 5.5, Apple macOS)
- [CVE-2026-28973](https://cve.now/CVE-2026-28973.md): An integer overflow was addressed with improved input validation. (CVSS 8.6, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-43744](https://cve.now/CVE-2026-43744.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-64749](https://cve.now/CVE-2026-64749.md): The issue was addressed with improved memory handling. (CVSS 7.8, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2026-28932](https://cve.now/CVE-2026-28932.md): A logic issue existed resulting in memory corruption. (CVSS 5.5, Apple macOS)
- [CVE-2026-64698](https://cve.now/CVE-2026-64698.md): The issue was addressed with improved memory handling. (CVSS 9.8, Apple macOS)
- [CVE-2026-64732](https://cve.now/CVE-2026-64732.md): This issue was addressed through improved state management. (CVSS 4.6, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-43768](https://cve.now/CVE-2026-43768.md): The issue was addressed with improved memory handling. (CVSS 5.5, Apple macOS)
- [CVE-2026-43800](https://cve.now/CVE-2026-43800.md): An information disclosure issue was addressed by removing the vulnerable code. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-64765](https://cve.now/CVE-2026-64765.md): An integer overflow was addressed with improved input validation. (CVSS 7.8, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-43816](https://cve.now/CVE-2026-43816.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-43729](https://cve.now/CVE-2026-43729.md): The issue was addressed with improved memory handling. (CVSS 7.8, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-64724](https://cve.now/CVE-2026-64724.md): The issue was addressed with improved memory handling. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-28928](https://cve.now/CVE-2026-28928.md): A use after free issue was addressed with improved memory management. (CVSS 9.8, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-64704](https://cve.now/CVE-2026-64704.md): A type confusion issue was addressed with improved memory handling. (CVSS 9.8, Apple macOS)
- [CVE-2026-43748](https://cve.now/CVE-2026-43748.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 9.8, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-64745](https://cve.now/CVE-2026-64745.md): This issue was addressed with additional restrictions on the lock screen. (CVSS 2.4, Apple macOS)
- [CVE-2026-43764](https://cve.now/CVE-2026-43764.md): An integer overflow was addressed with improved input validation. (CVSS 9.8, Apple macOS)
- [CVE-2026-28945](https://cve.now/CVE-2026-28945.md): A permissions issue was addressed with additional sandbox restrictions. (CVSS 7.1, Apple macOS)
- [CVE-2026-64694](https://cve.now/CVE-2026-64694.md): An integer overflow was addressed with improved input validation. (CVSS 9.8, Apple macOS)
- [CVE-2026-43733](https://cve.now/CVE-2026-43733.md): The issue was addressed with improved memory handling. (CVSS 7.8, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-28912](https://cve.now/CVE-2026-28912.md): A logic issue was addressed with improved restrictions. (CVSS 7.8, Apple macOS)
- [CVE-2026-64769](https://cve.now/CVE-2026-64769.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 9.8, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-43772](https://cve.now/CVE-2026-43772.md): A path traversal issue was addressed with improved input validation. (CVSS 8.2, Apple macOS)
- [CVE-2026-64728](https://cve.now/CVE-2026-64728.md): A permissions issue was addressed with improved validation. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-43779](https://cve.now/CVE-2026-43779.md): A logic issue was addressed with improved restrictions. (CVSS 9.8, Apple macOS)
- [CVE-2026-43796](https://cve.now/CVE-2026-43796.md): This issue was addressed with improved data protection. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-64723](https://cve.now/CVE-2026-64723.md): A logic issue was addressed with improved checks. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-43811](https://cve.now/CVE-2026-43811.md): A race condition was addressed with improved checks. (CVSS 4.7, Apple iOS and iPadOS)
- [CVE-2026-64774](https://cve.now/CVE-2026-64774.md): An integer overflow was addressed with improved input validation. (CVSS 9.8, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-43738](https://cve.now/CVE-2026-43738.md): The issue was addressed with improved memory handling. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-43807](https://cve.now/CVE-2026-43807.md): A buffer overflow was addressed with improved bounds checking. (CVSS 9.8, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-64762](https://cve.now/CVE-2026-64762.md): An out-of-bounds read was addressed with improved bounds checking. (CVSS 9.8, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-43780](https://cve.now/CVE-2026-43780.md): An integer overflow was addressed with improved input validation. (CVSS 7.8, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-64735](https://cve.now/CVE-2026-64735.md): An inconsistent user interface issue was addressed with improved state management. (CVSS 6.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-43714](https://cve.now/CVE-2026-43714.md): The issue was addressed with improved input sanitization. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-64719](https://cve.now/CVE-2026-64719.md): An out-of-bounds access issue was addressed with improved bounds checking. (CVSS 8.1, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-43755](https://cve.now/CVE-2026-43755.md): A race condition was addressed with improved state management. (CVSS 7.0, Apple macOS)
- [CVE-2026-64758](https://cve.now/CVE-2026-64758.md): The issue was addressed with improved bounds checks. (CVSS 7.8, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-43775](https://cve.now/CVE-2026-43775.md): An authorization issue was addressed with improved state management. (CVSS 5.5, Apple macOS)
- [CVE-2026-64739](https://cve.now/CVE-2026-64739.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 8.8, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-64693](https://cve.now/CVE-2026-64693.md): A type confusion issue was addressed with improved checks. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-43763](https://cve.now/CVE-2026-43763.md): A permissions issue was addressed by removing the vulnerable code. (CVSS 5.5, Apple macOS)
- [CVE-2026-64742](https://cve.now/CVE-2026-64742.md): This issue was addressed by using HTTPS when sending information over the network. (CVSS 6.5, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2026-28981](https://cve.now/CVE-2026-28981.md): A buffer overflow was addressed with improved bounds checking. (CVSS 7.8, Apple macOS)
- [CVE-2026-64703](https://cve.now/CVE-2026-64703.md): A use after free issue was addressed with improved memory management. (CVSS 9.8, Apple macOS)
- [CVE-2026-43759](https://cve.now/CVE-2026-43759.md): An authorization issue was addressed with improved state management. (CVSS 5.5, Apple macOS · Apple watchOS)
- [CVE-2026-64754](https://cve.now/CVE-2026-64754.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-64755](https://cve.now/CVE-2026-64755.md): An authorization issue was addressed with improved state management. (CVSS 5.5, Apple iOS and iPadOS)
- [CVE-2026-43758](https://cve.now/CVE-2026-43758.md): An authorization issue was addressed with improved state management. (CVSS 5.5, Apple macOS · Apple watchOS)
- [CVE-2026-64702](https://cve.now/CVE-2026-64702.md): An access issue was addressed with additional sandbox restrictions. (CVSS 9.8, Apple macOS)
- [CVE-2026-64743](https://cve.now/CVE-2026-64743.md): An authorization issue was addressed with improved state management. (CVSS 6.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-64738](https://cve.now/CVE-2026-64738.md): A permissions issue was addressed with additional restrictions. (CVSS 9.8, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-64692](https://cve.now/CVE-2026-64692.md): An out-of-bounds read was addressed with improved bounds checking. (CVSS 7.1, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-43723](https://cve.now/CVE-2026-43723.md): A path handling issue was addressed with improved validation. (CVSS 7.8, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-43774](https://cve.now/CVE-2026-43774.md): An out-of-bounds read was addressed with improved bounds checking. (CVSS 5.5, Apple macOS)
- [CVE-2026-43754](https://cve.now/CVE-2026-43754.md): This issue was addressed with improved redaction of sensitive information. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-64718](https://cve.now/CVE-2026-64718.md): A use-after-free issue was addressed with improved memory management. (CVSS 5.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-64734](https://cve.now/CVE-2026-64734.md): The issue was addressed with improved checks. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-43781](https://cve.now/CVE-2026-43781.md): A race condition was addressed with improved state handling. (CVSS 4.7, Apple macOS)
- [CVE-2026-43806](https://cve.now/CVE-2026-43806.md): A denial of service issue was addressed by removing the vulnerable code. (CVSS 5.5, Apple macOS)
- [CVE-2026-64763](https://cve.now/CVE-2026-64763.md): An out-of-bounds write issue was addressed by removing the vulnerable code. (CVSS 7.8, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-43693](https://cve.now/CVE-2026-43693.md): A race condition was addressed with improved state handling. (CVSS 7.0, Apple macOS)
- [CVE-2026-43739](https://cve.now/CVE-2026-43739.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-43810](https://cve.now/CVE-2026-43810.md): The issue was addressed with improved memory handling. (CVSS 9.8, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-64775](https://cve.now/CVE-2026-64775.md): A memory initialization issue was addressed with improved memory handling. (CVSS 9.8, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-64722](https://cve.now/CVE-2026-64722.md): A buffer overflow issue was addressed with improved memory handling. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-43778](https://cve.now/CVE-2026-43778.md): A use after free issue was addressed with improved memory management. (CVSS 9.8, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-43797](https://cve.now/CVE-2026-43797.md): This issue was addressed with improved checks. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-64555](https://cve.now/CVE-2026-64555.md): KVM: arm64: nv: Fix SPSR\_EL2 restore in kvm\_hyp\_handle\_mops() (CVSS 8.8, Linux)
- [CVE-2026-64554](https://cve.now/CVE-2026-64554.md): netfilter: bridge: fix stale prevhdr pointer in br\_ip6\_fragment() (CVSS 8.8, Linux)
- [CVE-2026-64553](https://cve.now/CVE-2026-64553.md): net: psample: fix info leak in PSAMPLE\_ATTR\_DATA (no CVSS, Linux)
- [CVE-2026-64552](https://cve.now/CVE-2026-64552.md): virtio-net: fix len check in receive\_big() (CVSS 8.4, Linux)
- [CVE-2026-64551](https://cve.now/CVE-2026-64551.md): sctp: validate STALE\_COOKIE cause length before reading staleness (CVSS 9.1, Linux)
- [CVE-2026-64550](https://cve.now/CVE-2026-64550.md): net: qualcomm: rmnet: validate MAP frame length before ingress parsing (CVSS 7.3, Linux)
- [CVE-2026-64549](https://cve.now/CVE-2026-64549.md): Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x\_setup() (no CVSS, Linux)
- [CVE-2026-64548](https://cve.now/CVE-2026-64548.md): bpf, sockmap: reject overflowing copy + len in bpf\_msg\_push\_data() (CVSS 8.4, Linux)
- [CVE-2026-64547](https://cve.now/CVE-2026-64547.md): net: usb: net1080: validate packet\_len before pad-byte access in rx\_fixup (CVSS 8.1, Linux)
- [CVE-2026-64546](https://cve.now/CVE-2026-64546.md): drm/edid: fix OOB read in drm\_parse\_tiled\_block() (CVSS 7.1, Linux)
- [CVE-2026-64545](https://cve.now/CVE-2026-64545.md): net, bpf: check master for NULL in xdp\_master\_redirect() (CVSS 7.5, Linux)
- [CVE-2026-64544](https://cve.now/CVE-2026-64544.md): crypto: asymmetric\_keys - fix OOB read in pefile\_digest\_pe\_contents (no CVSS, Linux)
- [CVE-2026-64543](https://cve.now/CVE-2026-64543.md): tipc: fix use-after-free of the discoverer in tipc\_disc\_rcv() (CVSS 7.8, Linux)
- [CVE-2026-64542](https://cve.now/CVE-2026-64542.md): ipv6: ndisc: fix NULL deref in accept\_untracked\_na() (no CVSS, Linux)
- [CVE-2026-64541](https://cve.now/CVE-2026-64541.md): net/smc: fix UAF in smc\_cdc\_rx\_handler() by pinning the socket (CVSS 9.8, Linux)
- [CVE-2026-64540](https://cve.now/CVE-2026-64540.md): usbnet: gl620a: fix out-of-bounds read in genelink\_rx\_fixup() (CVSS 8.1, Linux)
- [CVE-2026-64539](https://cve.now/CVE-2026-64539.md): Bluetooth: eir: Fix stack OOB write when prepending the Flags AD (CVSS 7.8, Linux)
- [CVE-2026-64538](https://cve.now/CVE-2026-64538.md): ipv6: Fix null-ptr-deref in fib6\_nh\_mtu\_change(). (no CVSS, Linux)
- [CVE-2026-64537](https://cve.now/CVE-2026-64537.md): bridge: cfm: reject invalid CCM interval at configuration time (no CVSS, Linux)
- [CVE-2026-12001](https://cve.now/CVE-2026-12001.md): Hardcoded Credential Vulnerability in Multiple TP-Link Router Models (CVSS 5.2, TP-Link Systems TL-WR850N · TP-Link Systems Archer C20 +3)
- [CVE-2026-59730](https://cve.now/CVE-2026-59730.md): @astrojs/node: Backslash-prefixed paths not recognized as internal by trailing-slash redirect (CVSS 2.1, withastro astro · @astrojs/node)
- [CVE-2026-66824](https://cve.now/CVE-2026-66824.md): Stored Cross-Site Scripting via Unsafe Capture Tree JSON Embedding (CVSS 9.2, lookyloo)
- [CVE-2026-59728](https://cve.now/CVE-2026-59728.md): @astrojs/rss: XML Injection via Unescaped RSS Feed Fields (CVSS 4.3, withastro astro · @astrojs/rss)
- [CVE-2026-65922](https://cve.now/CVE-2026-65922.md): Potential unauthorized modification of Artifactory internal metadata (CVSS 7.1, jfrog artifactory)
- [CVE-2026-65923](https://cve.now/CVE-2026-65923.md): Potential server-side request forgery in Artifactory Ansible repository handling (CVSS 6.8, jfrog artifactory)
- [CVE-2026-59727](https://cve.now/CVE-2026-59727.md): Astro: Cross-site scripting via unescaped transition:\* directive values on hydrated islands (CVSS 2.1, withastro astro · astro)
- [CVE-2026-59729](https://cve.now/CVE-2026-59729.md): Astro: XSS via unescaped spread attribute names in renderHTMLElement (incomplete fix for CVE-2026-54298) (CVSS 5.1, withastro astro · astro)
- [CVE-2026-65617](https://cve.now/CVE-2026-65617.md): Potential remote code execution on an Artifactory package service container. (CVSS 8.8, jfrog artifactory)
- [CVE-2026-65924](https://cve.now/CVE-2026-65924.md): Server-Side Request Forgery (SSRF) via Terraform Remote repository (CVSS 6.5, jfrog artifactory)
- [CVE-2026-65925](https://cve.now/CVE-2026-65925.md): Server-Side Request Forgery (SSRF) via JFrog Artifactory Cargo remote repository (CVSS 6.5, jfrog artifactory)
- [CVE-2026-65616](https://cve.now/CVE-2026-65616.md): Potential privilege escalation to JFrog administrator privileges (CVSS 8.8, jfrog artifactory)
- [CVE-2026-66015](https://cve.now/CVE-2026-66015.md): JFrog Platform contains an authorization flaw that may allow authenticated privilege escalation. (CVSS 7.2, jfrog artifactory)
- [CVE-2026-65618](https://cve.now/CVE-2026-65618.md): Improper URL validation when handling specific URLs Pub, Terraform and Docker packages might lead to SSRF vulnerability (CVSS 6.5, jfrog artifactory)
- [CVE-2026-66018](https://cve.now/CVE-2026-66018.md): JFrog Artifactory build environment properties exposure (CVSS 6.5, jfrog artifactory)
- [CVE-2026-66014](https://cve.now/CVE-2026-66014.md): Potential authentication bypass leading to privilege escalation in Artifactory (CVSS 8.8, jfrog artifactory)
- [CVE-2026-64649](https://cve.now/CVE-2026-64649.md): Next.js: Server-Side Request Forgery in Server Actions on Custom Servers (CVSS 8.3, vercel next.js · next)
- [CVE-2026-56748](https://cve.now/CVE-2026-56748.md): Authenticated RCE via Symlink Following in Cribl Stream Pack Git Import (CVSS 8.7, Cribl Stream)
- [CVE-2026-65921](https://cve.now/CVE-2026-65921.md): Potential path traversal leading to unauthorized file writes (CVSS 8.8, jfrog artifactory)
- [CVE-2026-42017](https://cve.now/CVE-2026-42017.md): Privilege escalation via JFrog Worker event token exposure (CVSS 8.8, jfrog artifactory)
- [CVE-2026-56747](https://cve.now/CVE-2026-56747.md): Code Injection in JSON Pointer Processing Component in Cribl Stream (CVSS 8.7, Cribl Stream)
- [CVE-2026-42016](https://cve.now/CVE-2026-42016.md): Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation (CVSS 8.1, KEV, jfrog artifactory)
- [CVE-2026-64648](https://cve.now/CVE-2026-64648.md): Next.js: Response Body Cache Confusion for Requests Containing Bodies (CVSS 6.0, vercel next.js · next)
- [CVE-2026-16481](https://cve.now/CVE-2026-16481.md): Server-Side Request Forgery (SSRF) and Credential Exfiltration in googleapis/mcp-toolbox cloud-healthcare-fhir-fetch-page Tool (CVSS 6.0, MCP Toolbox for Databases)
- [CVE-2026-12383](https://cve.now/CVE-2026-12383.md): Eda-server: externaleventstreamviewset trusts subject header without validation and leaks expected dn (CVSS 7.5, Red Hat Ansible Automation Platform 2.5 for RHEL · Red H… +1)
- [CVE-2026-66759](https://cve.now/CVE-2026-66759.md): Gimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted icns images (CVSS 7.1, GNOME GIMP · Red Hat Enterprise Linux)
- [CVE-2026-64647](https://cve.now/CVE-2026-64647.md): Next.js: Response Body Cache Confusion with Invalid UTF-8 Request Bodies (CVSS 6.3, vercel next.js · next)
- [CVE-2026-66757](https://cve.now/CVE-2026-66757.md): Gimp: signed integer overflow in file-sgi (sgi-lib) causes the plugin to crash on rle sgi images (CVSS 5.5, GNOME GIMP · Red Hat Enterprise Linux)
- [CVE-2026-66758](https://cve.now/CVE-2026-66758.md): Gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits images (CVSS 7.8, GNOME GIMP · Red Hat Enterprise Linux)
- [CVE-2026-64646](https://cve.now/CVE-2026-64646.md): Next.js: Unbounded Server Action payload in Edge runtime (CVSS 6.3, vercel next.js · next)
- [CVE-2026-17612](https://cve.now/CVE-2026-17612.md): Audit Log Exposure through Unauthorized Access (CVSS 6.9, Honeywell S35 Series 3M/5M/8M/PinHole Cameras)
- [CVE-2026-10683](https://cve.now/CVE-2026-10683.md): DesignWare I2C target driver can be wedged into a permanent stuck state by an on-bus master (DoS) (CVSS 2.4, zephyrproject zephyr)
- [CVE-2026-10682](https://cve.now/CVE-2026-10682.md): Out-of-bounds write in Zephyr \`log\_filter\_set\` syscall verifier reachable from userspace (CVSS 6.6, zephyrproject zephyr)
- [CVE-2026-66031](https://cve.now/CVE-2026-66031.md): Ekushey Project Manager CRM 5.0 Stored XSS via Reply Ticket Field (CVSS 5.1, Creativeitem Ekushey Project Manager CRM)
- [CVE-2026-66030](https://cve.now/CVE-2026-66030.md): Ekushey Project Manager CRM 5.0 Stored XSS via Ticket Title Field (CVSS 5.1, Creativeitem Ekushey Project Manager CRM)
- [CVE-2026-17552](https://cve.now/CVE-2026-17552.md): Plack::App::Prerender versions before 0.3.0 for Perl can proxy to an arbitrary host via unvalidated REQUEST\_URI concatenation in call (CVSS 9.1, RRWO Plack::App::Prerender)
- [CVE-2026-66029](https://cve.now/CVE-2026-66029.md): Ekushey Project Manager CRM 5.0 Stored XSS via Client Name Field (CVSS 5.1, Creativeitem Ekushey Project Manager CRM)
- [CVE-2026-66028](https://cve.now/CVE-2026-66028.md): Ekushey Project Manager CRM 5.0 Missing Uniqueness Constraint via Client Email (CVSS 7.1, Creativeitem Ekushey Project Manager CRM)
- [CVE-2026-48052](https://cve.now/CVE-2026-48052.md): Papra: Cross-organization tag deletion and modification via authenticated cross-tenant request (CVSS 5.4, papra-hq papra)
- [CVE-2026-48051](https://cve.now/CVE-2026-48051.md): Papra: SSRF via HTTP redirect bypass in webhook delivery (CVSS 3.5, papra-hq papra · @papra/webhooks)
- [CVE-2026-59239](https://cve.now/CVE-2026-59239.md): Stored XSS in Prospero Flow CRM email body allows administrator account takeover (CVSS 8.6, Roskus Prospero Flow CRM)
- [CVE-2026-64644](https://cve.now/CVE-2026-64644.md): Next.js: Denial of Service in the Image Optimization API using SVGs (CVSS 6.3, vercel next.js · next)
- [CVE-2026-55579](https://cve.now/CVE-2026-55579.md): Pheditor: Hardcoded default password 'admin' with no forced change enables full application compromise (CVSS 9.8, pheditor · pheditor/pheditor)
- [CVE-2026-55578](https://cve.now/CVE-2026-55578.md): Pheditor: Incomplete command sanitization in terminal feature allows RCE via pipe operator, backtick substitution, and newline injection (CVSS 8.8, pheditor · pheditor/pheditor)
- [CVE-2026-54540](https://cve.now/CVE-2026-54540.md): Authenticated terminal command whitelist bypass in Pheditor (CVSS 8.8, pheditor · pheditor/pheditor)
- [CVE-2026-48030](https://cve.now/CVE-2026-48030.md): Pheditor: OS Command Injection in terminal handler via unsanitized 'dir' parameter (CWE-78) (CVSS 9.9, pheditor · pheditor/pheditor)
- [CVE-2026-64643](https://cve.now/CVE-2026-64643.md): Next.js: Unauthenticated Disclosure of Internal Server Function endpoints (CVSS 6.3, vercel next.js · next)
- [CVE-2026-64642](https://cve.now/CVE-2026-64642.md): Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale (CVSS 8.3, vercel next.js · next)
- [CVE-2026-64641](https://cve.now/CVE-2026-64641.md): Next.js: Denial of Service in App Router using Server Actions (CVSS 8.2, vercel next.js · next)
- [CVE-2026-17570](https://cve.now/CVE-2026-17570.md): Improper access control in the PAM password history endpoints in Devolutions Server allows an authenticated low-privileged user to disclose (CVSS 4.3, Devolutions Server)
- [CVE-2026-17569](https://cve.now/CVE-2026-17569.md): Improper access control in the NetBox synchronizer in Devolutions Server allows an authenticated user with view-only permission on an entry (CVSS 4.3, Devolutions Server)
- [CVE-2026-64645](https://cve.now/CVE-2026-64645.md): Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname (CVSS 8.3, vercel next.js · next)
- [CVE-2026-17568](https://cve.now/CVE-2026-17568.md): Improper access control in the role membership management endpoint in Devolutions Server allows an authenticated non-administrative user hol (CVSS 8.8, Devolutions Server)
- [CVE-2026-45623](https://cve.now/CVE-2026-45623.md): PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments (CVSS 7.5, postcss)
- [CVE-2026-54272](https://cve.now/CVE-2026-54272.md): ip-address: Misclassification of IPv4-mapped/NAT64 IPv6 addresses can bypass SSRF and trust-boundary checks (CVSS 6.9, beaugunderson ip-address · ip-address)
- [CVE-2026-66731](https://cve.now/CVE-2026-66731.md): facil.io 0.7.5 - 0.7.6 HTTP/1.1 Chunked Transfer Encoding Parser Crash DoS (CVSS 8.7, boazsegev facil.io)
- [CVE-2026-66730](https://cve.now/CVE-2026-66730.md): facil.io 0.6.0 - 0.7.6 Infinite Loop DoS via Multipart MIME Body Parser (CVSS 8.7, boazsegev facil.io)
- [CVE-2026-66729](https://cve.now/CVE-2026-66729.md): facil.io 0.6.0 - 0.7.6 Integer Underflow DoS via Multipart MIME Body Parser (CVSS 8.7, boazsegev facil.io)
- [CVE-2026-66391](https://cve.now/CVE-2026-66391.md): Apache Wicket: leaked and missing CSP headers (CVSS 6.5, Apache Software Foundation Apache Wicket)
- [CVE-2026-63077](https://cve.now/CVE-2026-63077.md): In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol (CVSS 9.8, KEV, JetBrains TeamCity)
- [CVE-2026-24252](https://cve.now/CVE-2026-24252.md): NVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection. (CVSS 7.8, NVIDIA NeMo Framework)
- [CVE-2026-17191](https://cve.now/CVE-2026-17191.md): VeloCloud Orchestrator Flow Metrics API SQL Injection (CVSS 9.1, Arista Networks VeloCloud Orchestrator On-Prem)
- [CVE-2026-66390](https://cve.now/CVE-2026-66390.md): Apache Wicket: crafted Link URL strings can break out of the JavaScript sequence (CVSS 6.1, Apache Software Foundation Apache Wicket)
- [CVE-2026-17192](https://cve.now/CVE-2026-17192.md): VeloCloud Orchestrator Missing Input Validation SSRF (CVSS 8.5, Arista Networks VeloCloud Orchestrator On-Prem)
- [CVE-2026-17531](https://cve.now/CVE-2026-17531.md): unitedbyai droidclaw Unsigned Scheduled Callback goals.ts authorization (CVSS 2.3, unitedbyai droidclaw)
- [CVE-2026-16812](https://cve.now/CVE-2026-16812.md): VeloCloud Orchestrator OS Command Injection (CVSS 10.0, KEV, Arista Networks VeloCloud Orchestrator On-Prem)
- [CVE-2026-17530](https://cve.now/CVE-2026-17530.md): AstrBotDevs AstrBot Subagent astr\_agent\_tool\_exec.py \_build\_handoff\_toolset authorization (CVSS 5.3, AstrBotDevs AstrBot)
- [CVE-2026-66399](https://cve.now/CVE-2026-66399.md): phpMyFAQ before 4.1.6 Privilege Escalation via Group Membership (CVSS 8.5, thorsten phpMyFAQ)
- [CVE-2026-66398](https://cve.now/CVE-2026-66398.md): phpMyFAQ before 4.1.6 Remote Code Execution via Configuration API (CVSS 9.4, thorsten phpMyFAQ)
- [CVE-2026-66397](https://cve.now/CVE-2026-66397.md): phpMyFAQ before 4.1.6 Path Traversal via category image deletion (CVSS 8.6, thorsten phpMyFAQ)
- [CVE-2026-66396](https://cve.now/CVE-2026-66396.md): SiYuan before v3.7.2 Stored XSS to RCE via title-img IAL (CVSS 9.3, siyuan-note siyuan)
- [CVE-2026-66395](https://cve.now/CVE-2026-66395.md): SiYuan Desktop before v3.7.2 Reflected XSS to RCE via siyuan Protocol (CVSS 9.4, siyuan-note siyuan)
- [CVE-2026-66394](https://cve.now/CVE-2026-66394.md): SiYuan before v3.7.3 Stored and Reflected XSS via SVG Sanitizer Bypass (CVSS 9.3, siyuan-note siyuan · github.com/siyuan-note/siyuan/kernel)
- [CVE-2026-54890](https://cve.now/CVE-2026-54890.md): BEAM VM crash via integer underflow in binary\_to\_term BIT\_BINARY\_EXT decoding (CVSS 8.2, Erlang OTP)
- [CVE-2026-59251](https://cve.now/CVE-2026-59251.md): Denial of service via exponential certificate policy tree growth in path validation (CVSS 8.7, Erlang OTP)
- [CVE-2026-59250](https://cve.now/CVE-2026-59250.md): Megaco flex scanner buffer overflow via oversized property parm name (CVSS 8.3, Erlang OTP)
- [CVE-2026-55953](https://cve.now/CVE-2026-55953.md): TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication (CVSS 9.1, Erlang OTP)
- [CVE-2026-17529](https://cve.now/CVE-2026-17529.md): AstrBotDevs AstrBot astr\_main\_agent.py authorization (CVSS 5.3, AstrBotDevs AstrBot)
- [CVE-2026-55737](https://cve.now/CVE-2026-55737.md): Heap pointer corruption via signed/unsigned mismatch in LARGE\_TUPLE\_EXT decoding in erts external term format decoder (CVSS 5.1, Erlang OTP)
- [CVE-2026-17574](https://cve.now/CVE-2026-17574.md): NULL Pointer Dereference in HDF5 via Invalid Variable-Length Datatype Type Tag (CVSS 5.2, The HDF Group HDF5)
- [CVE-2026-17573](https://cve.now/CVE-2026-17573.md): Double Free in H5D\_\_chunk\_copy() in HDF5 via a Crafted Chunk-Index Size Field (CVSS 4.0, The HDF Group HDF5)
- [CVE-2026-17572](https://cve.now/CVE-2026-17572.md): HDF5 SOHM List Index Heap Buffer Overflow (CVSS 5.5, The HDF Group HDF5)
- [CVE-2026-47078](https://cve.now/CVE-2026-47078.md): Relative path traversal in zip:unzip/zip:extract via check\_dir\_level depth-counter bypass (CVSS 4.8, Erlang OTP)
- [CVE-2026-42792](https://cve.now/CVE-2026-42792.md): epmd permanent DoS via EMFILE on accept(2) in erts (CVSS 6.3, Erlang OTP)
- [CVE-2026-58227](https://cve.now/CVE-2026-58227.md): TLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chain (CVSS 8.7, Erlang OTP)
- [CVE-2025-59181](https://cve.now/CVE-2025-59181.md): Path traversal Vulnerability (CVSS 4.8, Ericsson Packet Core Controller)
- [CVE-2025-59180](https://cve.now/CVE-2025-59180.md): Use of Hard-coded Credentials Vulnerability (CVSS 5.1, Ericsson Packet Core Controller)
- [CVE-2026-66050](https://cve.now/CVE-2026-66050.md): NitroShare Desktop 0.3.4 Path Traversal via LAN File Transfer Server (CVSS 8.7, nitroshare-desktop)
- [CVE-2025-59178](https://cve.now/CVE-2025-59178.md): Exposure of Sensitive System Information to an Unauthorized Control Sphere Vulnerability (CVSS 4.8, Ericsson Packet Core Controller)
- [CVE-2026-10819](https://cve.now/CVE-2026-10819.md): Mattermost Server Denial of Service via Animated GIF Emoji Upload (CVSS 6.5, Mattermost)
- [CVE-2026-10600](https://cve.now/CVE-2026-10600.md): Denial of service via unbounded document content extraction in Mattermost Server (CVSS 4.3, Mattermost)
- [CVE-2025-59177](https://cve.now/CVE-2025-59177.md): Generation of Error Message Containing Sensitive Information Vulnerability (CVSS 6.8, Ericsson Packet Core Controller)
- [CVE-2025-59172](https://cve.now/CVE-2025-59172.md): Improper Neutralization of Special Elements used in an OS Command Vulnerability (CVSS 8.5, Ericsson Packet Core Controller)
- [CVE-2026-66477](https://cve.now/CVE-2026-66477.md): WordPress Gillion theme \<= 4.13 - Broken Access Control vulnerability (CVSS 5.3, Shufflehound Gillion)
- [CVE-2026-66476](https://cve.now/CVE-2026-66476.md): WordPress Easy Digital Downloads plugin \<= 3.6.9 - Arbitrary File Deletion vulnerability (CVSS 4.9, Syed Balkhi Easy Digital Downloads)
- [CVE-2026-66475](https://cve.now/CVE-2026-66475.md): WordPress Checkout Field Editor for WooCommerce &#8211; Checkout Manager plugin \<= 3.0.5 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, acowebs Checkout Field Editor for WooCommerce &#8211; Check…)
- [CVE-2026-66474](https://cve.now/CVE-2026-66474.md): WordPress Insert Headers and Footers Code – HT Script plugin \<= 1.1.8 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, HT Plugins Insert Headers and Footers Code – HT Script)
- [CVE-2026-66448](https://cve.now/CVE-2026-66448.md): WordPress Gallery PhotoBlocks plugin \<= 1.3.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, WP Chill Gallery PhotoBlocks)
- [CVE-2026-66445](https://cve.now/CVE-2026-66445.md): WordPress Open User Map plugin \<= 1.4.46 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, 100plugins Open User Map)
- [CVE-2026-66442](https://cve.now/CVE-2026-66442.md): WordPress YayPricing plugin \<= 3.5.6 - Broken Access Control vulnerability (CVSS 5.4, YayCommerce YayPricing)
- [CVE-2026-66438](https://cve.now/CVE-2026-66438.md): WordPress Exclusive Addons Elementor plugin \<= 2.8.0 - Sensitive Data Exposure vulnerability (CVSS 5.3, Tim Strifler Exclusive Addons Elementor)
- [CVE-2026-66437](https://cve.now/CVE-2026-66437.md): WordPress Feedzy plugin \<= 5.2.4 - Server Side Request Forgery (SSRF) vulnerability (CVSS 4.9, Themeisle Feedzy)
- [CVE-2026-66434](https://cve.now/CVE-2026-66434.md): WordPress Photonic Gallery & Lightbox for Flickr, SmugMug & Others plugin \<= 3.33 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Sayontan Sinha Photonic Gallery & Lightbox for Flickr, Smug…)
- [CVE-2026-66433](https://cve.now/CVE-2026-66433.md): WordPress Location Weather plugin \<= 3.0.6 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, ShapedPlugin Location Weather)
- [CVE-2026-66428](https://cve.now/CVE-2026-66428.md): WordPress WP Google Review Slider plugin \<= 18.4 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, jgwhite33 WP Google Review Slider)
- [CVE-2026-66427](https://cve.now/CVE-2026-66427.md): WordPress WP Google Review Slider plugin \<= 18.4 - SQL Injection vulnerability (CVSS 7.6, jgwhite33 WP Google Review Slider)
- [CVE-2026-65568](https://cve.now/CVE-2026-65568.md): WordPress Visual Composer Website Builder plugin \<= 45.15.0 - Broken Access Control vulnerability (CVSS 5.0, Visual Composer Website Builder)
- [CVE-2026-65567](https://cve.now/CVE-2026-65567.md): WordPress Event Tickets plugin \<= 5.29.0.1 - Broken Access Control vulnerability (CVSS 5.3, Nexcess Event Tickets)
- [CVE-2026-65564](https://cve.now/CVE-2026-65564.md): WordPress MapPress Maps for WordPress plugin \<= 2.97.6 - Sensitive Data Exposure vulnerability (CVSS 5.3, chrisvrichardson MapPress Maps for WordPress)
- [CVE-2026-65563](https://cve.now/CVE-2026-65563.md): WordPress Orbit Fox by ThemeIsle plugin \<= 3.0.7 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, Orbit Fox by ThemeIsle)
- [CVE-2026-65562](https://cve.now/CVE-2026-65562.md): WordPress BetterDocs plugin \<= 4.6.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, WPDeveloper BetterDocs)
- [CVE-2026-65561](https://cve.now/CVE-2026-65561.md): WordPress WordPress Social Login and Register plugin \<= 7.8.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, miniOrange WordPress Social Login and Register)
- [CVE-2026-65558](https://cve.now/CVE-2026-65558.md): WordPress AffiliateX plugin \<= 2.3.5 - Server Side Request Forgery (SSRF) vulnerability (CVSS 5.4, WPCenter AffiliateX)
- [CVE-2026-65557](https://cve.now/CVE-2026-65557.md): WordPress Abandoned Cart Lite for WooCommerce plugin \<= 6.8.0 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, Tychesoftwares Abandoned Cart Lite for WooCommerce)
- [CVE-2026-65436](https://cve.now/CVE-2026-65436.md): WordPress Kirki plugin \<= 6.0.13 - Arbitrary File Deletion vulnerability (CVSS 6.8, Themeum Kirki)
- [CVE-2026-65435](https://cve.now/CVE-2026-65435.md): WordPress Thrive Leads Version plugin \<= 10.9.2 - Broken Access Control vulnerability (CVSS 6.5, Thrive Themes Coupon Thrive Leads Version)
- [CVE-2026-65434](https://cve.now/CVE-2026-65434.md): WordPress ЮKassa для WooCommerce plugin \<= 2.16.1 - Sensitive Data Exposure vulnerability (CVSS 6.5, yoomoney ЮKassa для WooCommerce)
- [CVE-2026-65433](https://cve.now/CVE-2026-65433.md): WordPress RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin \<= 1.5.1 - Broken Access Control vulnerability (CVSS 6.5, themewant RT Mega Menu – Mega Menu Builder for Elementor &a…)
- [CVE-2026-59560](https://cve.now/CVE-2026-59560.md): WordPress FundEngine plugin \<= 1.7.8 - Broken Access Control vulnerability (CVSS 6.5, Roxnor FundEngine)
- [CVE-2026-59559](https://cve.now/CVE-2026-59559.md): WordPress RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin \<= 1.5.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, themewant RT Mega Menu – Mega Menu Builder for Elementor &a…)
- [CVE-2026-59558](https://cve.now/CVE-2026-59558.md): WordPress Booking Calendar plugin \<= 11.4.2 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, wpdevelop Booking Calendar)
- [CVE-2026-59557](https://cve.now/CVE-2026-59557.md): WordPress Events Made Easy plugin \<= 3.1.3 - Broken Access Control vulnerability (CVSS 6.5, Franky Events Made Easy)
- [CVE-2026-59556](https://cve.now/CVE-2026-59556.md): WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin \<= 4.5.11 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, acowebs Dynamic Pricing With Discount Rules for WooCommerce)
- [CVE-2026-59553](https://cve.now/CVE-2026-59553.md): WordPress Product Feed Manager plugin \<= 7.6.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, RexTheme Product Feed Manager)
- [CVE-2026-59552](https://cve.now/CVE-2026-59552.md): WordPress 3D Flipbook PDF Viewer & Embedder plugin \<= 1.4.2 - Server Side Request Forgery (SSRF) vulnerability (CVSS 7.2, Shahadat Hossain 3D Flipbook PDF Viewer &amp; Embedder)
- [CVE-2026-59551](https://cve.now/CVE-2026-59551.md): WordPress rtMedia for WordPress, BuddyPress and bbPress plugin \<= 4.7.10 - SQL Injection vulnerability (CVSS 8.5, rtCamp rtMedia for WordPress, BuddyPress and bbPress)
- [CVE-2026-59550](https://cve.now/CVE-2026-59550.md): WordPress AWP Classifieds plugin \<= 4.4.7 - SQL Injection vulnerability (CVSS 9.3, Strategy11 Team AWP Classifieds)
- [CVE-2026-59549](https://cve.now/CVE-2026-59549.md): WordPress rtMedia for WordPress, BuddyPress and bbPress plugin \<= 4.7.10 - SQL Injection vulnerability (CVSS 9.3, rtCamp rtMedia for WordPress, BuddyPress and bbPress)
- [CVE-2026-59548](https://cve.now/CVE-2026-59548.md): WordPress Byteflows Travel & Hotel Booking plugin \<= 1.0.0 - Sensitive Data Exposure vulnerability (CVSS 7.5, Byteflows Travel &amp; Hotel Booking)
- [CVE-2026-59546](https://cve.now/CVE-2026-59546.md): WordPress Hide My WP Ghost plugin \<= 7.0.06 - 2FA Bypass vulnerability (CVSS 7.4, John Darrel Hide My WP Ghost)
- [CVE-2026-59539](https://cve.now/CVE-2026-59539.md): WordPress Paid Member Subscriptions plugin \<= 3.0.7 - Insecure Direct Object References (IDOR) vulnerability (CVSS 7.5, Cozmoslabs Paid Member Subscriptions)
- [CVE-2026-59538](https://cve.now/CVE-2026-59538.md): WordPress GamiPress plugin \<= 7.9.7 - SQL Injection vulnerability (CVSS 9.3, Ruben Garcia GamiPress)
- [CVE-2026-59537](https://cve.now/CVE-2026-59537.md): WordPress Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce plugin \<= 2.10.22 - SQL Injection vulnerability (CVSS 7.6, Sender – Newsletter, SMS and Email Marketing Automation for…)
- [CVE-2026-59536](https://cve.now/CVE-2026-59536.md): WordPress CoCart – Headless ecommerce plugin \<= 4.8.4 - Broken Access Control vulnerability (CVSS 7.5, CoCart Headless CoCart – Headless ecommerce)
- [CVE-2026-59535](https://cve.now/CVE-2026-59535.md): WordPress Thrive Product Manager plugin \<= 10.9.2 - Broken Access Control vulnerability (CVSS 7.3, Thrive Themes Coupon Thrive Product Manager)
- [CVE-2026-59534](https://cve.now/CVE-2026-59534.md): WordPress Post My CF7 Form plugin \<= 6.2.0 - Broken Access Control vulnerability (CVSS 7.5, Aurovrata Venet Post My CF7 Form)
- [CVE-2026-59533](https://cve.now/CVE-2026-59533.md): WordPress Relevanssi Light plugin \<= 1.2.2 - SQL Injection vulnerability (CVSS 9.3, Christoph Vielgrader Relevanssi Light)
- [CVE-2026-59532](https://cve.now/CVE-2026-59532.md): WordPress Booking and Rental Manager plugin \<= 2.7.2 - Price Manipulation vulnerability (CVSS 7.5, magepeopleteam Booking and Rental Manager)
- [CVE-2026-59531](https://cve.now/CVE-2026-59531.md): WordPress Falcon – WordPress Optimizations & Tweaks plugin \<= 2.10.0 - Unknown vulnerability (CVSS 7.5, Anh Tran Falcon – WordPress Optimizations & Tweaks)
- [CVE-2026-59530](https://cve.now/CVE-2026-59530.md): WordPress Stripe For WooCommerce plugin \<= 4.0.7 - Broken Access Control vulnerability (CVSS 7.5, Payment Plugins Stripe For WooCommerce)
- [CVE-2026-59529](https://cve.now/CVE-2026-59529.md): WordPress Ebook Store plugin \<= 6.19 - Sensitive Data Exposure vulnerability (CVSS 7.5, motov.net Ebook Store)
- [CVE-2026-59528](https://cve.now/CVE-2026-59528.md): WordPress ShipTime: Discounted Shipping Rates plugin \<= 1.1.1 - Sensitive Data Exposure vulnerability (CVSS 7.5, ShipTime: Discounted Shipping Rates)
- [CVE-2026-59527](https://cve.now/CVE-2026-59527.md): WordPress MapSVG plugin \<= 8.14.0 - SQL Injection vulnerability (CVSS 9.3, RomanCode MapSVG)
- [CVE-2026-15003](https://cve.now/CVE-2026-15003.md): Binutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of service (CVSS 5.6, Red Hat Hardened Images · Red Hat Enterprise Linux +1)
- [CVE-2026-17514](https://cve.now/CVE-2026-17514.md): ZJONSSON node-unzipper extract.js Extract path traversal (CVSS 4.8, ZJONSSON node-unzipper)
- [CVE-2026-65876](https://cve.now/CVE-2026-65876.md): Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder \< 6.8.0 (CVSS 9.2, joomshaper.com SP Page Builder extension for Joomla)
- [CVE-2026-65877](https://cve.now/CVE-2026-65877.md): Joomla Extension - joomshaper.com - Authenticated SQL injection in SP Page Builder \< 6.7.1 (CVSS 8.2, joomshaper.com SP Page Builder extension for Joomla)
- [CVE-2026-65879](https://cve.now/CVE-2026-65879.md): Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page Builder \< 6.7.1 (CVSS 9.8, joomshaper.com SP Page Builder extension for Joomla)
- [CVE-2026-65766](https://cve.now/CVE-2026-65766.md): Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder \< 6.7.1 (CVSS 9.2, joomshaper.com SP Page Builder extension for Joomla)
- [CVE-2026-65878](https://cve.now/CVE-2026-65878.md): Joomla Extension - joomshaper.com - Authenticated arbitrary file delete in SP Page Builder \< 6.7.1 (CVSS 8.3, joomshaper.com SP Page Builder extension for Joomla)
- [CVE-2026-17513](https://cve.now/CVE-2026-17513.md): ggml-org whisper.cpp ggml.c ggml\_ftype\_to\_ggml\_type assertion (CVSS 4.8, ggml-org whisper.cpp)
- [CVE-2026-61511](https://cve.now/CVE-2026-61511.md): vBulletin \< 6.2.2 Eval Injection RCE via vb5/template/runtime.php (CVSS 9.3, vBulletin)
- [CVE-2026-17512](https://cve.now/CVE-2026-17512.md): ggml-org whisper.cpp log\_mel\_spectrogram out-of-bounds (CVSS 4.8, ggml-org whisper.cpp)
- [CVE-2026-59690](https://cve.now/CVE-2026-59690.md): Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant Missing Authorization Allows Privilege Escalation via REST API (CVSS 8.0, Progress Software LoadMaster · Progress Software ECS Con… +3)
- [CVE-2026-59689](https://cve.now/CVE-2026-59689.md): Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF Improper Authorization Allows Privilege Escalation to Root (CVSS 8.0, Progress Software LoadMaster · Progress Software ECS Con… +2)
- [CVE-2026-59688](https://cve.now/CVE-2026-59688.md): Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Backup Restore Functionality (CVSS 8.4, Progress Software LoadMaster · Progress Software ECS Con… +2)
- [CVE-2026-59687](https://cve.now/CVE-2026-59687.md): Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Geo Location Management Interface (CVSS 8.4, Progress Software LoadMaster · Progress Software ECS Con… +2)
- [CVE-2026-59686](https://cve.now/CVE-2026-59686.md): Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Management Interface (CVSS 8.4, Progress Software LoadMaster · Progress Software ECS Con… +2)
- [CVE-2026-56538](https://cve.now/CVE-2026-56538.md): HCL Connections is vulnerable to information disclosure (CVSS 3.5, HCLSoftware Connections)
- [CVE-2026-56537](https://cve.now/CVE-2026-56537.md): HCL Connections is vulnerable to information disclosure (CVSS 3.5, HCLSoftware Connections)
- [CVE-2026-12991](https://cve.now/CVE-2026-12991.md): Multiple vulnerabilities in Ghost Robotics' Vision 60 (CVSS 8.7, Ghost Robotics Vision)
- [CVE-2026-12990](https://cve.now/CVE-2026-12990.md): Multiple vulnerabilities in Ghost Robotics' Vision 60 (CVSS 7.7, Ghost Robotics Vision)
- [CVE-2026-12989](https://cve.now/CVE-2026-12989.md): Multiple vulnerabilities in Ghost Robotics' Vision 60 (CVSS 8.7, Ghost Robotics Vision)
- [CVE-2026-66053](https://cve.now/CVE-2026-66053.md): Apache Thrift: Python TSSLSocket Hostname Matcher Import (CVSS 5.9, Apache Software Foundation Apache Thrift · thrift)
- [CVE-2026-58662](https://cve.now/CVE-2026-58662.md): Apache Thrift: C++ THeaderTransport::readString() info-header length bounds bypass (CVSS 8.7, Apache Software Foundation Apache Thrift)
- [CVE-2026-58389](https://cve.now/CVE-2026-58389.md): Apache Thrift: Rust binary protocol non-strict path missing string size limit (CVSS 8.7, Apache Software Foundation Apache Thrift)
- [CVE-2026-58023](https://cve.now/CVE-2026-58023.md): Apache Thrift: c\_glib heap out-of-bounds read in transport leftover-bytes path (CVSS 6.9, Apache Software Foundation Apache Thrift)
- [CVE-2026-55971](https://cve.now/CVE-2026-55971.md): Apache Thrift: C++ ZLIB heap buffer overflow (write) in THeaderTransport::untransform() (CVSS 9.3, Apache Software Foundation Apache Thrift)
- [CVE-2026-55970](https://cve.now/CVE-2026-55970.md): Apache Thrift: C++ heap out-of-bounds read in THeaderTransport::readHeaderFormat() (CVSS 6.9, Apache Software Foundation Apache Thrift)
- [CVE-2026-55969](https://cve.now/CVE-2026-55969.md): Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: integer overflow in TProtocol::checkReadBytesAvailable() (CVSS 8.7, Apache Software Foundation Apache Thrift)
- [CVE-2026-55968](https://cve.now/CVE-2026-55968.md): Apache Thrift: Node.js quadratic-time DoS in server receive transports (CVSS 8.7, Apache Software Foundation Apache Thrift)
- [CVE-2026-49158](https://cve.now/CVE-2026-49158.md): Apache Thrift: Ruby THeaderTransport ZLIB Decompression Bomb (CVSS 7.5, Apache Software Foundation Apache Thrift)
- [CVE-2026-48586](https://cve.now/CVE-2026-48586.md): Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TZlibTransport Decompression Size Limit (CVSS 8.7, Apache Software Foundation Apache Thrift)
- [CVE-2026-48145](https://cve.now/CVE-2026-48145.md): Apache Thrift: C++ TSSLSocket matchName() RFC 6125 Wildcard Bypass (CVSS 8.2, Apache Software Foundation Apache Thrift)
- [CVE-2026-48144](https://cve.now/CVE-2026-48144.md): Apache Thrift: c\_glib TLS Client Missing Hostname Verification (CVSS 9.1, Apache Software Foundation Apache Thrift)
- [CVE-2026-45112](https://cve.now/CVE-2026-45112.md): Apache Thrift: Unbounded Read Leading to Denial of Service (CVSS 6.9, Apache Software Foundation Apache Thrift)
- [CVE-2026-43871](https://cve.now/CVE-2026-43871.md): Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit (CVSS 8.7, Apache Software Foundation Apache Thrift · thrift +3)
- [CVE-2026-41608](https://cve.now/CVE-2026-41608.md): Apache Thrift: Unbounded Zlib Decompression in Python THeaderTransport (CVSS 7.5, Apache Software Foundation Apache Thrift · thrift)
- [CVE-2026-12495](https://cve.now/CVE-2026-12495.md): Stack-Based Buffer Overflow in the Mercusys MB115-4G (CVSS 5.3, Mercusys MB115-4G)
- [CVE-2026-57917](https://cve.now/CVE-2026-57917.md): Improper Restriction of XML External Entity Reference in proCertum SmartSign (CVSS 4.8, Asseco proCertum SmartSign)
- [CVE-2026-57916](https://cve.now/CVE-2026-57916.md): Arbitrary Path Execution via CPS URI in proCertum SmartSign (CVSS 4.6, Asseco proCertum SmartSign)
- [CVE-2026-14856](https://cve.now/CVE-2026-14856.md): Stored Cross-Site Scripting (XSS) in TastyIgniter Media Manager (CVSS 6.3, Media Manager TastyIgniter)
- [CVE-2026-40000](https://cve.now/CVE-2026-40000.md): Path Traversal Vulnerability in ZTE Blade A75 5G (CVSS 1.8, ZTE Blade A75)
- [CVE-2026-17527](https://cve.now/CVE-2026-17527.md): Virt-cdi-operator: containerized-data-importer: cdi.kubevirt.io:view aggregated clusterrole grants create on datavolumes/source, allowing unauthorized pvc clone (CVSS 7.7, Red Hat Container Native Virtualization · Red Hat OpenShift…)
- [CVE-2026-17534](https://cve.now/CVE-2026-17534.md): Kimi Code FetchURL SSRF protection bypass via DNS-resolving hostnames and redirects (CVSS 5.5, MoonshotAI Kimi Code)
- [CVE-2026-17523](https://cve.now/CVE-2026-17523.md): can: bcm: switch timer to HRTIMER\_MODE\_SOFT and remove hrtimer\_tasklet (CVSS 7.8, Linux)
- [CVE-2026-16554](https://cve.now/CVE-2026-16554.md): Integer Overflow Leading to Heap Buffer Overflow in cJSON (CVSS 5.1, DaveGamble cJSON)
- [CVE-2026-65765](https://cve.now/CVE-2026-65765.md): Joomla Extension - phoca.cz - Path traversal vulnerability in Phoca Commander 1.0.0-6.1.1 (CVSS 6.9, phoca.cz Phoca Commander extension for Joomla)
- [CVE-2026-65764](https://cve.now/CVE-2026-65764.md): Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Maps 5.0.0-6.1.1 (CVSS 5.1, phoca.cz Phoca Commander extension for Joomla)
- [CVE-2026-65894](https://cve.now/CVE-2026-65894.md): Improper Authentication Vulnerability in CP PLUS EZ-P21 IP Camera (CVSS 8.7, CP-Plus EZ-P21 IP Camera)
- [CVE-2026-65893](https://cve.now/CVE-2026-65893.md): Arbitrary Code Execution Vulnerability in CP PLUS EZ-P21 IP Camera (CVSS 7.0, CP-Plus EZ-P21 IP Camera)
- [CVE-2026-14837](https://cve.now/CVE-2026-14837.md): SSH Enablement Signature Verification Bypass (CVSS 8.5, Lenze c430 · Lenze c520 +3)
- [CVE-2026-64536](https://cve.now/CVE-2026-64536.md): staging: rtl8723bs: fix OOB reads in is\_ap\_in\_tkip() IE loop (CVSS 8.1, Linux)
- [CVE-2026-64535](https://cve.now/CVE-2026-64535.md): nvmet-tcp: Fix potential UAF when ddgst mismatch (CVSS 9.8, Linux)
- [CVE-2026-64534](https://cve.now/CVE-2026-64534.md): nvmet-tcp: check INIT\_FAILED before nvmet\_req\_uninit in digest error path (CVSS 9.8, Linux)
- [CVE-2026-64533](https://cve.now/CVE-2026-64533.md): fs/ntfs3: validate lcns\_follow in log\_replay conversion (CVSS 7.8, Linux)
- [CVE-2026-64532](https://cve.now/CVE-2026-64532.md): fs/ntfs3: bound NTFS\_DE view.data\_off in UpdateRecordData{Root,Allocation} (CVSS 7.8, Linux)
- [CVE-2026-64531](https://cve.now/CVE-2026-64531.md): net: openvswitch: reject oversized nested action attrs (CVSS 7.8, Linux)
- [CVE-2026-9830](https://cve.now/CVE-2026-9830.md): BookingPress Pro \< 5.7.3 - Unauthenticated Customer PII Disclosure and Booking Tampering via Permission Callback Bug (CVSS 8.2, bookingpress-appointment-booking-pro)
- [CVE-2026-14827](https://cve.now/CVE-2026-14827.md): Calendar \< 1.3.18 - Contributor+ Stored XSS via event\_link Parameter (CVSS 6.8, Calendar)
- [CVE-2026-14820](https://cve.now/CVE-2026-14820.md): Quiz And Survey Master \< 11.1.3 - Unauthenticated User Enumeration and Password Oracle via Quiz Login (CVSS 5.3, Quiz and Survey Master)
- [CVE-2026-14568](https://cve.now/CVE-2026-14568.md): WP User Frontend \< 4.3.8 - Unauthenticated Author-less Attachment Deletion (CVSS 6.5, User Frontend: AI Powered Frontend Post Submission, User Di…)
- [CVE-2026-14289](https://cve.now/CVE-2026-14289.md): WP FacturaONE \< 5.37 - Unauthenticated Remote Code Execution (CVSS 9.0, FacturaONE para WooCommerce con VeriFactu)
- [CVE-2026-14236](https://cve.now/CVE-2026-14236.md): Contact Form 7 – PayPal & Stripe Add-on \< 2.5 - Open Redirect (CVSS 4.7, Contact Form)
- [CVE-2026-14235](https://cve.now/CVE-2026-14235.md): WordPress Download Manager \< 3.3.62 - Unauthorized Protected File Download via Reusable Download Key (CVSS 7.5, Download Manager)
- [CVE-2026-14203](https://cve.now/CVE-2026-14203.md): Smart Manager \< 8.92.0 - Contributor+ Stored XSS via Post Title (CVSS 4.8, Smart Manager)
- [CVE-2026-14190](https://cve.now/CVE-2026-14190.md): Sina Extension for Elementor \< 3.10.2 - Reflected XSS (CVSS 6.1, Sina Extension for Elementor)
- [CVE-2026-14189](https://cve.now/CVE-2026-14189.md): WPBot AI ChatBot \< 8.5.2 - Admin+ Second-Order SQL Injection via qc\_bot\_str\_fields (CVSS 3.8, WPBot)
- [CVE-2026-13726](https://cve.now/CVE-2026-13726.md): Multiple Page Generator Plugin – MPG \< 4.1.8 - Reflected XSS via mpg\_shortcode (CVSS 7.1, MPG)
- [CVE-2026-13714](https://cve.now/CVE-2026-13714.md): Realtyna Organic IDX plugin + WPL Real Estate \< 5.3.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution (CVSS 9.8, Realtyna Organic IDX plugin + WPL Real Estate)
- [CVE-2026-13597](https://cve.now/CVE-2026-13597.md): QRcode Login for WeChat \<= 1.3 - Unauthenticated Account Takeover (CVSS 9.1, 微信二维码登陆)
- [CVE-2026-13400](https://cve.now/CVE-2026-13400.md): Simply Schedule Appointments \< 1.6.12.4 - Unauthenticated Stored XSS via Booking Customer Information (CVSS 6.1, Simply Schedule Appointments)
- [CVE-2026-13390](https://cve.now/CVE-2026-13390.md): The Events Calendar \< 6.16.5.1 - Unauthenticated Event Aggregator Import Status Manipulation (CVSS 5.3, The Events Calendar)
- [CVE-2026-13332](https://cve.now/CVE-2026-13332.md): Masteriyo LMS \< 2.3.1 - Unauthenticated Arbitrary User Session Termination (Denial of Service) (CVSS 9.1, Masteriyo LMS)
- [CVE-2026-13152](https://cve.now/CVE-2026-13152.md): Custom Fields Account Registration For WooCommerce \< 1.4 - Unauthenticated Privilege Escalation (CVSS 8.1, Custom Fields Account Registration For Woocommerce)
- [CVE-2026-12982](https://cve.now/CVE-2026-12982.md): Document Gallery \< 5.1.1 - Reflected XSS via dg\_generate\_gallery (CVSS 6.1, Document Gallery)
- [CVE-2026-12493](https://cve.now/CVE-2026-12493.md): Clover Payment Gateway by Zaytech for WooCommerce \< 1.3.6 - Unauthenticated Payment Bypass via check\_order (CVSS 7.5, Clover Payment Gateway by Zaytech for WooCommerce)
- [CVE-2026-12394](https://cve.now/CVE-2026-12394.md): MemberGlut \< 1.1.5 - Unauthenticated Privilege Escalation to Administrator (CVSS 9.8, MemberGlut)
- [CVE-2026-12255](https://cve.now/CVE-2026-12255.md): MainWP Child \< 6.1.2 - Unauthenticated Administrator Authentication Bypass via Passwordless Site Registration (CVSS 8.1, MainWP Child)
- [CVE-2026-10082](https://cve.now/CVE-2026-10082.md): Advanced Ads – Ad Manager & AdSense \< 2.0.23 - Contributor+ Stored XSS via the\_ad Shortcode 'ad\_args' Parameter (CVSS 6.1, Advanced Ads)
- [CVE-2025-15662](https://cve.now/CVE-2025-15662.md): Printcart Web to Print Product Designer for WooCommerce \< 2.5.3 - Unauthenticated Arbitrary File Read and Server-Side Request Forgery (CVSS 8.6, Printcart Web to Print Product Designer for WooCommerce)
- [CVE-2026-66412](https://cve.now/CVE-2026-66412.md): Leantime all versions prior to and 3.6.2 Broken Access Control via tickets.getMilestone JSON-RPC (CVSS 7.1, Leantime)
- [CVE-2026-15928](https://cve.now/CVE-2026-15928.md): XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page comp (CVSS 8.2, XMLRPC-C)
- [CVE-2026-17501](https://cve.now/CVE-2026-17501.md): ggml-org llama.cpp JSON-Schema-to-GBNF Conversion json-schema-to-grammar.cpp transform recursion (CVSS 6.9, ggml-org llama.cpp)
- [CVE-2026-17500](https://cve.now/CVE-2026-17500.md): ggml-org llama.cpp json-schema-to-grammar.cpp \_visit\_pattern null pointer dereference (CVSS 6.9, ggml-org llama.cpp)
- [CVE-2021-32084](https://cve.now/CVE-2021-32084.md): An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. (CVSS 9.8)
- [CVE-2021-32085](https://cve.now/CVE-2021-32085.md): An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. (CVSS 8.8)
- [CVE-2021-32086](https://cve.now/CVE-2021-32086.md): An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. (CVSS 9.8)
- [CVE-2021-32087](https://cve.now/CVE-2021-32087.md): An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. (CVSS 8.8)
- [CVE-2021-32088](https://cve.now/CVE-2021-32088.md): An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. (CVSS 9.8)
- [CVE-2025-50455](https://cve.now/CVE-2025-50455.md): SQL injection vulnerability exists in the order\_by parameter of the /customers/search endpoint in Alex Tselegidis EasyAppointments \<= 1.5.1. (CVSS 9.1)
- [CVE-2025-63913](https://cve.now/CVE-2025-63913.md): An issue was discovered in OpenSBI 1.3 allowing attackers to cause a denial of service via crafted request to the SBI function #2 or the 'Fi (CVSS 7.5)
- [CVE-2026-51077](https://cve.now/CVE-2026-51077.md): SQL injection vulnerability in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the sqlquery parameter of the (CVSS 7.5)
- [CVE-2026-51078](https://cve.now/CVE-2026-51078.md): An issue in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the str parameter of the file\_manage\_control.php (CVSS 7.5)
- [CVE-2026-51564](https://cve.now/CVE-2026-51564.md): An issue in the redirect parameter in Milk admin \<=0.9.8 allows remote attackers to redirect users to arbitrary external URLs via a crafted (CVSS 4.9)
- [CVE-2026-51565](https://cve.now/CVE-2026-51565.md): Cross-site scripting (XSS) vulnerability in Modules/Docs/DocsController.php in Milk admin \<=0.9.8 allows remote attackers to inject arbitrar (CVSS 6.1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-07-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.