CVEs published August 5, 2026
429 CVEs were published on August 5, 2026: 53 critical, 206 high.
- Published
- 429
- Critical
- 53
- High
- 206
- Medium
- 154
- Low
- 11
- Unrated
- 5
- Now in CISA KEV
- 0
- Fix available
- 152
Most affected products
- IBM Langflow OSS
- 23
- Linux
- 17
- electron
- 16
- Cisco IOS XE Software
- 11
- Progress Software MarkLogic Server
- 10
- Apache Software Foundation Apache Qpid Broker-J
- 7
- Apache Software Foundation Apache Answer
- 6
- Apache Software Foundation Apache Qpid Proton Dotnet
- 6
- Apache Software Foundation Apache Qpid Proton-J
- 6
- nuxt
- 6
Critical 53
- CVE-2026-67531FrontMCP: CodeCall sandbox escape -> host RCE via live Zod schema exposure by getToolagentfront frontmcp
- CVE-2026-71319Nuxt.js Unauthenticated WebSocket RPC Call Leading to Remote Code Executionnuxt devtools · @nuxt/devtools
- CVE-2026-48168PraisonAI: GitHub Actions Claude workflow command injection via unquoted PR branch nameMervinPraison PraisonAI
- CVE-2026-70426In Remoting 3384.v60d89463d9e0 and earlier, except 3355.3357.v931d3c992987, included in Jenkins 2.575 and earlier, LTS 2.568.1 and earlier, Jenkins Project Jenkins · Jenkins Project Remoting
- CVE-2026-20310Cisco SD-WAN Software Security Hardening Release - Improper Link Resolution Before File AccessCisco Catalyst SD-WAN Controller · Cisco Catalyst SD-WAN Ma…
- CVE-2026-20303Cisco Catalyst SD-WAN Security Hardening Release - Input Validation VulnerabilitiesCisco Catalyst SD-WAN Controller · Cisco Catalyst SD-WAN Ma…
- CVE-2026-20304Cisco Catalyst SD-WAN Security Hardening Release - Access Control VulnerabilitiesCisco Catalyst SD-WAN Controller · Cisco Catalyst SD-WAN Ma…
- CVE-2026-20272Cisco IOS XE Software Security Hardening ReleaseCisco IOS XE Software
- CVE-2026-20267Cisco IOS XE Software Security Hardening ReleaseCisco IOS XE Software
- CVE-2026-9195Cross-site scripting in Progress MarkLogic Server Query ConsoleProgress Software MarkLogic Server
- CVE-2026-9193Privilege escalation in Progress MarkLogic Server Hadoop integrationProgress Software MarkLogic Server
- CVE-2026-9192Authentication bypass in Progress MarkLogic Server ODBC App ServerProgress Software MarkLogic Server
- CVE-2026-9190HTTP request smuggling in Progress MarkLogic ServerProgress Software MarkLogic Server
- CVE-2026-8709Privilege escalation in Progress MarkLogic Server REST document patch operationProgress Software MarkLogic Server
- CVE-2026-7557SAML authentication bypass in Progress MarkLogic ServerProgress Software MarkLogic Server
- CVE-2026-7329Privilege escalation in Progress MarkLogic Server REST query interfacesProgress Software MarkLogic Server
- CVE-2026-60053Apache Answer: Residual Administrative API Key Access After Role or Account RevocationApache Software Foundation Apache Answer
- CVE-2026-15587Privilege Escalation in Google SecOps (Chronicle SOAR) via Crafted Authentication HeaderGoogle Cloud Google SecOps
- CVE-2026-39923Flarum < 1.8.16 Password Reset Token Expiry Bypass via POST /resetFlarum Framework
- CVE-2026-71289NASA-AMMOS ANMS / JHUAPL dtnma-tools Unauthenticated Remote Command Execution via Exposed AMP Manager REST APINASA-AMMOS anms
- CVE-2026-71278rust-iot-platform Unauthenticated Remote Code Execution via Unsandboxed Calc-Rule Script Evaluationiot-ecology rust-iot-platform
- CVE-2026-71277rust-iot-platform Authentication Bypass via Non-Validated Authorization Headeriot-ecology rust-iot-platform
- CVE-2026-71268OpenPLC Runtime v3 Path Traversal in Structured Text FILE Directive Leading to Arbitrary File Writethiagoralves OpenPLC_v3
- CVE-2026-71267microtar Stack Buffer Overflow in mtar_write_file_header() and mtar_write_dir_header()rxi microtar
- CVE-2026-71263FreeModbus LINUXTCP Port Off-by-One Global Buffer Overflow in xMBPortTCPPool()cwalter-at FreeModbus
- CVE-2026-71262IoTSharp BlobStorageController Missing Authentication and Path TraversalIoTSharp
- CVE-2026-71256nanoMODBUS Client-Side Out-of-Bounds Read Leading to Wild-Pointer Write via object_iddebevv nanoMODBUS
- CVE-2026-71254nanoMODBUS Server-Side Out-of-Bounds Write in handle_read_file_record()debevv nanoMODBUS
- CVE-2026-71248Inventory-Management-System-PHP - Unauthenticated SQL Injection in Login and Product DeletionHarsh21Patel Inventory-Management-System-PHP
- CVE-2026-71238DjangoCRM - Hardcoded Django SECRET_KEY Enables Session and CSRF Token ForgeryDjangoCRM django-crm
- CVE-2026-71237Miantang IoT-PHP - Unauthenticated SQL Injection in /userloginMiantang IoT-PHP
- CVE-2026-71231IOTSmartHome - Unauthenticated SQL Injection via lastLogin Cookiethebradleysanders IOTSmartHome
- CVE-2026-66747ENDLESSDOORS: Zbtlink Router rctl/kworker Phone-Home Root ImplantZbtlink CPE2801 Firmware · Zbtlink WE1026-5G-WD Firmware +18
- CVE-2026-44945Cross-Cluster Impersonation Confused-Deputy Privilege EscalationSUSE Rancher
- CVE-2026-10090Multicluster-operators-subscription: multicluster-operators-subscription: namespace edit user can deploy cluster-scoped clusterrolebinding and become cluster-admin via application subscriptionRed Hat Advanced Cluster Management for Kubernetes
- CVE-2026-10059Cluster-curator-controller: cluster-curator-controller: namespace admin can escalate to cluster-wide curator authority via clustercurator serviceaccount tokenRed Hat multicluster engine for Kubernetes
- CVE-2026-64566xfrm: iptfs: propagate SKBFL_SHARED_FRAG in iptfs_skb_add_frags()Linux
- CVE-2026-4431Easy Post Submission <= 2.3.0 - Missing Authorizationthemeruby Easy Post Submission – Frontend Posting, Guest Pu…
- CVE-2026-71214NASA-AMMOS plandev - Client-Supplied session_variables Bypass Hasura-Origin Authorization in sequencing-serverNASA-AMMOS plandev
- CVE-2026-71213typemill - No Rate Limiting on Login Endpoint Enables Unlimited Password Brute-Forcetypemill
- CVE-2026-71207Stock-Inventory-Management-System - Unauthenticated SQL Injection and Hardcoded Credentials in login.php Enable Full Authentication Bypassmrswapnilsahu Stock-Inventory-Management-System
- CVE-2026-70376Pluck CMS - CSRF via Spoofable Missing-Referer Bypass Leads to Stored XSS and RCEpluck-cms Pluck CMS
- CVE-2026-61486Apache Lucy: stack-buffer-overflow in JSON parser error reporter on malformed inputApache Software Foundation Apache Lucy
- CVE-2026-61484Apache Lucy: LucyX::Remote::SearchServer unauthenticated remote Storable::thaw -> RCE/DoSApache Software Foundation Apache Lucy
- CVE-2026-5581Multi Uploader for Gravity Forms <= 1.1.8 - Missing Authorization to Unauthenticated Arbitrary Media Deletionsh1zen Multi Uploader for Gravity Forms
- CVE-2026-15360Ajax Load More < 8.0.1 - Unauthenticated SQL Injection via custom_argsAjax Load More
- CVE-2026-15210Login/Signup with Phone Number, OTP Verification < 1.8.71 - Unauthenticated Account Takeover via OTP Brute ForceOTP Login With Phone Number, OTP Verification
- CVE-2026-16940Custom Fields for WooCommerce < 1.5.1 - Unauthenticated Arbitrary File Deletion via Path TraversalCustom Fields
- CVE-2026-9273Membership Plugin – Kadence Memberships <= 4.0.0 - Unauthenticated Password Reset Link Poisoning to Account Takeoverstellarwp Membership Plugin – Kadence Memberships
- CVE-2025-63823My Safetipin Android Application 5.2.1 contains Hardcoded credentials in the authentication module, which allows remote attackers to bypass
- CVE-2026-52466Open Library Foundation VuFind v11.0.3 and v4.1 is vulnerable to toInorrect Access Control.
- CVE-2026-67870In open62541 v1.5.5, the server-side AddReferences implementation contains an incomplete validation flaw for non-local ExpandedNodeId target
- CVE-2026-67873A heap-based buffer overflow exists in lib60870-C 2.4.0 in the server-side FileSegment ASDU encoding path.
High 206
- CVE-2026-19024HDF5 H5Pget_fill_value NULL Pointer Dereference via Malformed Fill Value MessageThe HDF Group HDF5
- CVE-2026-71321Nuxt: Unauthenticated CPU exhaustion parsing and hashing the Nuxt island endpoint body before hash validationnuxt
- CVE-2026-71320Nuxt: Server-Side Remote Code Execution via Runtime Template Injection in Nuxt Server Island Propsnuxt
- CVE-2026-71316Nuxt runtime payload cache discloses another user's SSR data across users and to unauthenticated clientsnuxt
- CVE-2026-71315Nuxt route rules silently dropped for mixed-case paths, bypassing appMiddleware auth gates (incomplete fix for CVE-2026-53721)nuxt
- CVE-2026-71314Nuxt: Unauthenticated out-of-memory crash via unbounded v-for expansion in island renderingnuxt
- CVE-2026-71312rclone: PowerShell Smart-Quote Filename Injection Enables SFTP Server-Side Command Executionrclone · github.com/rclone/rclone
- CVE-2026-34966Gitea prior to 1.27.0 SSRF via Migration URI Fetch BypassGitea · code.gitea.io/gitea +1
- CVE-2026-17583Thermo Fisher Applied Biosystems Genetic Analyzers Missing Support for Integrity CheckThermo Fisher Applied Biosystems 3500/3500xL Series Data… +6
- CVE-2026-71309rclone: Incomplete path validation allows backend root escape in serve resticrclone · github.com/rclone/rclone
- CVE-2026-18411Use of hard-coded cryptographic key in Acrisure KARR BT and DR-100Acrisure KARR BT · Acrisure DR-100
- CVE-2026-17556Path traversal in GitHub Enterprise Server allowed unauthenticated deletion of instance storage via the X-GitHub-Request-Id headerGitHub Enterprise Server
- CVE-2026-55524PraisonAI: SSRF in web_crawl tool via redirect-following and DNS rebinding (validate-then-fetch gap)MervinPraison PraisonAI · praisonaiagents
- CVE-2026-70617Spacebar Server Missing Authorization via Group DM Recipient EndpointSpacebar Server
- CVE-2026-66298JS-view sandboxed output can synthesize keyboard events to trigger unconfirmed global shortcutslivebook-dev livebook
- CVE-2026-66881Path traversal in imported file_entries name allows arbitrary file write via URL-type entry downloadlivebook-dev livebook
- CVE-2026-68746Livebook Teams identity check fails open when the deployment group is unresolvable, allowing unauthenticated accesslivebook-dev livebook
- CVE-2026-70616boringproxy 0.10.0 Resource Exhaustion DoS via GET /loading endpointboringproxy
- CVE-2026-70615boringproxy 0.10.0 SSH authorized_keys Injection via Tunnel Creationboringproxy
- CVE-2026-18953Improper limitation of a pathname to a restricted directory in aws-transform-mcp-serveraws-transform-mcp-server
- CVE-2026-55523PraisonAI has a`web_crawl` SSRF protection bypass via unchecked redirect targetsMervinPraison PraisonAI · praisonaiagents
- CVE-2026-69111Milvus 2.6.22, 3.0.0 Unauthenticated Denial of Service via /management/stopmilvus-io milvus
- CVE-2026-55522PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe codeMervinPraison PraisonAI · MervinPraison praisonaiagents +2
- CVE-2026-18485Local Privilege Escalation in NI-PALNI-PAL
- CVE-2026-17624Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handlingIBM Langflow OSS
- CVE-2026-17633Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handlingIBM Langflow OSS
- CVE-2026-17632Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handlingIBM Langflow OSS
- CVE-2026-9196Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handlingIBM Langflow OSS
- CVE-2026-8182Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handlingIBM Langflow OSS
- CVE-2026-9201Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handlingIBM Langflow OSS
- CVE-2026-8478Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handlingIBM Langflow OSS
- CVE-2026-8183Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcementIBM Langflow OSS
- CVE-2026-9130Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcementIBM Langflow OSS
- CVE-2026-8470Langflow is affected by weaknesses in secret handling and sensitive configuration accessIBM Langflow OSS
- CVE-2026-9205Langflow is affected by weaknesses in secret handling and sensitive configuration accessIBM Langflow OSS · langflow
- CVE-2026-70448Jenkins Ivy Report Plugin 1.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks when processing IvyJenkins Project Jenkins Ivy Report Plugin
- CVE-2026-70432A cross-site request forgery (CSRF) vulnerability in Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier allows attackers to execute arbJenkins Project Jenkins Multijob Plugin
- CVE-2026-70431Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier provides Groovy scripting features that do not integrate with Script Security PluginJenkins Project Jenkins Multijob Plugin
- CVE-2026-70429Jenkins 2.575 and earlier, LTS 2.568.1 and earlier handles case-insensitivity in user names and group names inconsistently, allowing attackeJenkins Project Jenkins
- CVE-2026-9081Langflow OSS is affected by server-side request forgery in provider validation and API request functionalityIBM Langflow OSS
- CVE-2026-70608Electron: Sandboxed iframe can bypass the allow-popups restriction via the OpenURL navigation pathelectron
- CVE-2026-17625Langflow is affected by OS Command Injection in Model Context Protocol featuresIBM Langflow OSS
- CVE-2026-10716Directus <12.1.0 - Authenticated time-based SQL injection in PostgreSQL/PostGIS collection creationDirectus
- CVE-2026-17623Langflow is affected OS Command Injection in Model Context Protocol featuresIBM Langflow OSS
- CVE-2026-17630Langflow is affected by security vulnerabilities in Model Context Protocol featuresIBM Langflow OSS
- CVE-2026-20313Cisco Catalyst SD-WAN Security Hardening Release - Memory Corruption VulnerabilitiesCisco Catalyst SD-WAN Controller · Cisco Catalyst SD-WAN Ma…
- CVE-2026-17626Langflow is affected by security vulnerabilities in Model Context Protocol featuresIBM Langflow OSS
- CVE-2026-20312Cisco Catalyst SD-WAN Security Hardening Release - Information Disclosure VulnerabilitiesCisco Catalyst SD-WAN Controller · Cisco Catalyst SD-WAN Ma…
- CVE-2026-20301Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service VulnerabilityCisco IOS XE Software · Cisco IOS
- CVE-2026-8446Langflow is affected by security vulnerabilities in Model Context Protocol featuresIBM Langflow OSS
- CVE-2026-9077Reliance on Untrusted Inputs in a Security Decision vulnerabilities in Model Context Protocol featuresIBM Langflow OSS
- CVE-2026-20273Cisco IOS XE Software Security Hardening ReleaseCisco IOS XE Software
- CVE-2026-20271Cisco IOS XE Software Security Hardening ReleaseCisco IOS XE Software
- CVE-2026-20270Cisco IOS XE Software Security Hardening ReleaseCisco IOS XE Software
- CVE-2026-20269Cisco IOS XE Software Security Hardening ReleaseCisco IOS XE Software
- CVE-2026-20268Cisco IOS XE Software Security Hardening ReleaseCisco IOS XE Software
- CVE-2026-20263Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service VulnerabilityCisco IOS XE Software
- CVE-2026-20200Cisco Integrated Management Controller Argument Injection and Remote Code Execution VulnerabilityCisco Unified Computing System
- CVE-2026-17617Server-Side Request Forgery (SSRF) in IBM Application Gateway OperatorIBM Application Gateway Operator
- CVE-2026-20124Cisco IOS XE Software SNMP Denial of Service VulnerabilityCisco IOS XE Software
- CVE-2026-10025IBM QRadar SIEM has an XML External Entity (XXE) injection vulnerabilityIBM QRadar
- CVE-2026-70604Electron: Custom protocol with supportFetchAPI but not corsEnabled allows cross-origin readselectron
- CVE-2026-8400Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server and WebSphere Application Server Liberty due to the July 2026 CPUIBM WebSphere Application Server
- CVE-2026-70601Electron: Context isolation bypass via Function.prototype.bind hijackelectron
- CVE-2026-9203Server-side request forgery in Progress MarkLogic ServerProgress Software MarkLogic Server
- CVE-2026-7327Privilege escalation in Progress MarkLogic Server REST API document processingProgress Software MarkLogic Server
- CVE-2026-7326Cross-site request forgery in Progress MarkLogic Server Admin UIProgress Software MarkLogic Server
- CVE-2026-60023Apache Answer: Unauthorized disclosure of deleted or pending answer contentApache Software Foundation Apache Answer
- CVE-2026-15572Keycloak-services: keycloak-services: dcr protocol mapper type-swap policy bypass allows privilege escalationRed Hat build of Keycloak
- CVE-2026-48911Apache Answer: Unauthenticated OAuth Email-Binding Account Takeover via Existing User Confirmation FlowApache Software Foundation Apache Answer
- CVE-2026-48834Apache Answer: Denial of service via crafted Accept-Language header parsingApache Software Foundation Apache Answer
- CVE-2026-16442Keycloak-services: keycloak-services: saml idp-initiated broker login bypasses link-only restrictionRed Hat build of Keycloak · Red Hat Data Grid +2
- CVE-2026-39924Flarum < 1.8.16 Session Persistence via Improper Access Token RevocationFlarum Framework
- CVE-2026-12410CCleaner local privilege escalation via link following on uninstallGen Digital CCleaner
- CVE-2026-17613CVE-2026-17613Penpot
- CVE-2026-54876Client-Side Memory Leak in OCSP Response CheckingOpenSSL
- CVE-2026-16102Keycloak-services: keycloak-services: default dcr policy allows role forgery via user property mappersRed Hat build of Keycloak · Red Hat Data Grid +2
- CVE-2026-15573Keycloak-services: keycloak-services: authorization bypass via unnormalized uri matching in pathmatcherRed Hat build of Keycloak · Red Hat Data Grid +2
- CVE-2026-16443Keycloak-services: keycloak-services: saml broker metadata import disables response signature validationRed Hat build of Keycloak · Red Hat Data Grid +2
- CVE-2026-67623Mistral Vibe < 2.23.3 Arbitrary Command Execution via git fsmonitor Hookmistralai mistral-vibe
- CVE-2026-15979Content Egg <= 11.3.0 - Authenticated (Author+) Arbitrary File Deletionkeywordrush Content Egg – Affiliate Product Importer & Pric…
- CVE-2026-7529wiseCampaign <= 1.1.16 - Missing Authorization to Unauthenticated Plugin Configuration Modification via REST APIwisemattic wiseCampaign – WooCommerce Conversions Made Easy
- CVE-2026-17506Independent Analytics <= 2.15.0 - Unauthenticated Stored Cross-Site Scriptingbensibley Independent Analytics – WordPress Analytics Plugin
- CVE-2026-71294Cotonti CMS Comments Plugin PHP Object Injection via Unrestricted unserialize() in Create/Edit ActionsCotonti
- CVE-2026-71292Subrion CMS Admin Grid SQL Injection via Unwhitelisted ORDER BY sort Parameterintelliants subrion
- CVE-2026-71291Bolt CMS Server-Side Template Injection via Unsandboxed allow_twig Field Renderingbolt core
- CVE-2026-71226Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio pathStephan Muelle libkcapi · Red Hat Enterprise Linux +2
- CVE-2026-71288Koha SQL Injection via order_by and {order}_ovalue Parameters in guided_reports.plKoha Community Koha
- CVE-2026-71287Cacti sanitize_sql_column() Regex Allowlist Permits SQL Time-Delay Functions Leading to Blind SQL Injectioncacti
- CVE-2026-71285Uptime Kuma Stored XSS via Matomo Analytics Site ID on Public Status Pageslouislam uptime-kuma
- CVE-2026-71284Fledge IoT Gateway Backup Restore OS Command Injection via Tar Member Filenamefledge-iot fledge
- CVE-2026-71281peft Unsafe Deserialization via torch.load() Without weights_only in LoRA-GA and CorDA Moduleshuggingface peft
- CVE-2026-71280go-shiori Server-Side Request Forgery via Unrestricted Bookmark URL Fetchgo-shiori shiori
- CVE-2026-71279Zigbee2MQTT External JS Extension Path Traversal Leading to Remote Code ExecutionKoenkk zigbee2mqtt
- CVE-2026-71276Magistrala (formerly Mainflux) IoT Platform SQL Injection via format Query Parameterabsmach magistrala
- CVE-2026-71274OpenBK7231T Stored XSS via Unsanitized MQTT-Set Channel Labelsopenshwprojects OpenBK7231T_App
- CVE-2026-71272Memos Webhook DNS Rebinding TOCTOU SSRF in safeDialContext()usememos memos
- CVE-2026-71271Memos Webhook SSRF via 0.0.0.0 Reserved-IP Bypassusememos memos
- CVE-2026-71270Stirling-PDF Server-Side Request Forgery via /api/v1/convert/url/pdf WeasyPrint SubprocessStirling-Tools Stirling-PDF
- CVE-2026-71266tinyobjloader-c Stack Buffer Overflow in MTL Material File Line Parsingsyoyo tinyobjloader-c
- CVE-2026-71265Domoticz MochadTCP Stack Buffer Overflow via MOCHAD_RFSEC strcpy()domoticz
- CVE-2026-71264WLED Unauthenticated Configuration Disclosure via /json/cfg and Global Settings-PIN Lock StateAircoookie WLED
- CVE-2026-71261dr_wav.h W64 CUE Chunk Metadata Parsing Integer Overflow Leading to Heap Buffer Overflow on 32-bit Buildsmackron dr_libs
- CVE-2026-71259ESPHome external_components file:// Scheme Validation Bypass Leading to Remote Code Executionesphome
- CVE-2026-16022Command Injection in @oblique/cliSwiss Federal Office of Information Technology, Systems and…
- CVE-2026-71255nanoMODBUS Client-Side Out-of-Bounds Write via object_length in recv_read_device_identification_res()debevv nanoMODBUS
- CVE-2026-18933wp-downloadmanager - Unrestricted File Upload via Missing Extension/MIME Validation and Path Traversalwp-downloadmanager
- CVE-2026-64582RDMA/rxe: Fix a use-after-free problem in rxe_mmapLinux
- CVE-2026-46581In Eclipse Mojarra versions 2.3 and following, URL handing in `DefaultFaceletFactory` does not properly sanitize and/or block remote URLs, aEclipse Foundation Eclipse Mojarra
- CVE-2026-61891In Eclipse Theia versions up to and including 1.73.1, the `@theia/filesystem` backend exposes HTTP file-download endpoints (`GET /file`, `GEEclipse Foundation Eclipse Theia
- CVE-2026-60009In Eclipse Theia versions up to and including 1.73.1, the `@theia/filesystem` backend binds `POST /file-upload` in every filesystem-enabled Eclipse Foundation Eclipse Theia
- CVE-2026-71252toner-management - Unauthenticated State-Changing Admin Actionsraghav993 toner-management
- CVE-2026-71243backmeup (npm) - OS Command Injection via Backup Option Valuesadaltas backmeup
- CVE-2026-71242Crater - Cross-Company IDOR on Notes via Missing Company-Ownership Check in NotePolicycrater-invoice crater
- CVE-2026-71241Book-Management-System - Unauthenticated Disclosure of Student PII and Borrowing Historylyric777 Book-Management-System
- CVE-2026-71239DjangoCRM - Server-Side Template Injection in Mass Mail Message RenderingDjangoCRM django-crm
- CVE-2026-71236Grocy - Stored XSS via HTMLPurifier Output Double-Decodegrocy
- CVE-2026-71235Magistrala IoT Platform - Unrestricted Go/Lua Script Execution in Rules Engineabsmach magistrala
- CVE-2026-71234Documize Community - Attachment Download Authorization Bypass via Non-Validated secure Tokendocumize community
- CVE-2026-71233InvoiceNinja - Stored XSS via Invoice/Quote Terms Fieldinvoiceninja
- CVE-2026-71232MacCMS10 - Incomplete Function Blacklist in Template Editor Enables Authenticated RCEmagicblack maccms10
- CVE-2026-12609In Eclipse Theia versions 1.66.0 and up until including 1.73.1, the `@theia/plugin-ext` backend exposes the `/hostedPlugin/:pluginId/:path(*Eclipse Foundation Eclipse Theia
- CVE-2026-25703Potential information leakage from manager /network/graph API in NeuVectorSUSE NeuVector
- CVE-2026-64581xfrm: fix sk_dst_cache double-free in xfrm_user_policy()Linux
- CVE-2026-64580xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()Linux
- CVE-2026-64578ksmbd: validate compound request size before reading StructureSize2Linux
- CVE-2026-64577gtp: check skb_pull_data() return in gtp1u_send_echo_resp()Linux
- CVE-2026-64576nexthop: initialize extack in nh_res_bucket_migrate()Linux
- CVE-2026-64575bpf: tcp: fix double sock release on batch reallocLinux
- CVE-2026-64574wifi: mac80211: tear down new links on vif update error pathLinux
- CVE-2026-64570wifi: mac80211: fix fils_discovery double free on alloc failureLinux
- CVE-2026-64568wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failureLinux
- CVE-2026-64567btrfs: reject free space cache with more entries than pagesLinux
- CVE-2026-55997Long-lived Rancher registration token exposed in plaintextrancher
- CVE-2026-59675Rancher Audit-Log Middleware Unauthenticated Memory Exhaustion Denial of ServiceSUSE Rancher
- CVE-2026-7520MailChimp Forms by MailMunch <= 3.2.7 - Missing Authorization to Authenticated (Subscriber+) MailMunch Integration Takeover via 'sign_in' AJAX ActionMailmunch Forms for Mailchimp
- CVE-2026-6020ShopLentor <= 3.3.7 - Authenticated (Administrator+) Arbitrary Function Execution via 'callback' Parameter via REST APIdevitemsllc ShopLentor – All-in-One WooCommerce Growth & St…
- CVE-2026-71215art-template - Path Traversal in Sub-Template Resolution via include()/extend()art-template
- CVE-2026-71211mlflow - Unvalidated Gateway Secret api_base Enables SSRF via Gateway Proxy Endpointmlflow
- CVE-2026-71209audiobookshelf - %2F Encoding Discrepancy Bypasses Cover/Image Auth Exemption Regex, Enabling Unauthenticated Path Traversaladvplyr audiobookshelf
- CVE-2026-71206shiori - JWT CheckToken Never Re-Validates Account State, Allowing Stale-Privilege Access After Deletion or Demotiongo-shiori shiori
- CVE-2026-71202raster - Integer Underflow in crop() Offset Handling Causes Capacity-Overflow Panickosinix raster
- CVE-2026-70378imagecli - Negative carve Ratio Bypasses Bounds Check and Crashes Process via Reachable Panictheotherphil imagecli
- CVE-2026-70377imagecli - Uncontrolled Memory Allocation via Unbounded scale Ratio Causes Denial of Servicetheotherphil imagecli
- CVE-2026-55739Crater - Missing Tenant-Ownership Check in CustomerPolicy Allows Cross-Company Customer Data Theft and Deletioncrater-invoice Crater
- CVE-2026-54418Leantime - Missing Authorization on TwoFA JSON-RPC Methods Allows Cross-Account 2FA Secret Disclosure and BypassLeantime
- CVE-2026-54416Pluck CMS - Unrestricted File Upload via Missing .php8 Extension in Upload Blacklistpluck-cms Pluck CMS
- CVE-2026-12000Page and Post Restriction <= 1.4.1 - Unauthenticated Missing Authorization to Sensitive Information Exposure via REST APIcyberlord92 Page and Post Restriction
- CVE-2026-7444Search Analytics for WP <= 1.4.16 - Cross-Site Request Forgerycornelraiu-1 Search Analytics for WP
- CVE-2026-7693Backup Migration <= 2.1.5.1 - Authenticated (Administrator+) OS Command Injection via 'file' Parameterinisev Backup Migration
- CVE-2026-18881TableOn <= 1.0.5.1 - Unauthenticated Blind SQL Injection via 'comment_count' Filter Parameterrealmag777 TableOn – WordPress Posts Table Filterable
- CVE-2026-6147LightSync Pro <= 2.1.6 - Authenticated (Author+) Arbitrary File Uploadlightsyncpro LightSync Pro – Connect & Sync Cloud Assets |…
- CVE-2026-6079Material Dashboard <= 1.4.10 - Missing Authorization to Unauthenticated Task Enumeration, Execution, and Deletionho3einie Material Dashboard
- CVE-2026-6627WPFormify <= 1.1.1 - Missing Authorizationsaadiqbal WPFormify – Stripe Payments with Form and Checkout
- CVE-2026-6639AI Chatbot & Workflow Automation by AIWU <= 1.4.6 - Missing Authorization to Unauthenticated Sensitive Information Exposurewupsales AI Copilot – Content Generator
- CVE-2026-61483Apache Lucy: QueryParser unbounded recursion on deeply-nested query -> C-stack-overflow DoSApache Software Foundation Apache Lucy
- CVE-2026-16055Contest Gallery < 30.0.7 - Unauthenticated Login-Protection and 2FA Bypass via post_cg_loginContest Gallery
- CVE-2026-16036miniOrange 2FA < 6.2.7 - 2FA Bypass via Password-Only Second-Factor RebindingminiOrange 2FA
- CVE-2026-15372WP 2FA < 4.1.0 - Two-Factor Authentication Bypass via Passkeys ProviderWP 2FA
- CVE-2026-15230YayPricing < 3.5.7 - Subscriber+ Pricing Configuration Modification and Coupon Code DisclosureYayPricing
- CVE-2026-14553Zportals < 6.3.4 - Subscriber+ Arbitrary File Uploadzportals
- CVE-2026-16736User Registration & Membership < 5.2.6 - Unauthenticated Account Creation While Registration DisabledUser Registration & Membership
- CVE-2026-16605MultiVendorX < 5.0.11 - Store Owner+ Cross-Vendor Store Takeover and Deletion via Missing AuthorizationMultiVendorX
- CVE-2026-16604Content Protector (Passster) < 4.3.6 - Unauthenticated Protected Content Disclosure via Content-Lock Block data-content AttributePassster
- CVE-2026-16603Content Protector (Passster) < 4.3.6 - Unauthenticated Category-Locked Content Disclosure via Core REST APIPassster
- CVE-2026-16602Content Protector (Passster) < 4.3.6 - Unauthenticated Non-Public Post Content Disclosure via Captcha REST EndpointPassster
- CVE-2026-16573Bit Form < 3.2.0 - Unauthenticated Stored XSS via SVG Signature UploadBit Form
- CVE-2026-16561Sunshine Photo Cart < 3.6.12 - Unauthenticated Private Gallery Comment DisclosureSunshine Photo Cart
- CVE-2026-70375HashBrown CMS - OS Command Injection via Git Deployer Branch FieldHashBrownCMS hashbrown-cms
- CVE-2026-70374HashBrown CMS - OS Command Injection in Media Upload Thumbnail GenerationHashBrownCMS hashbrown-cms
- CVE-2026-67592Apache Qpid ProtonJ2: Unable to govern the maximum number of transfer frames per incoming deliveryApache Software Foundation Apache Qpid ProtonJ2
- CVE-2026-67590Apache Qpid ProtonJ2: Unbounded type nesting can lead to pre-authentication stackoverflowApache Software Foundation Apache Qpid ProtonJ2
- CVE-2026-67552Apache Qpid Proton Dotnet: Unbounded type nesting can lead to pre-authentication stackoverflowApache Software Foundation Apache Qpid Proton Dotnet
- CVE-2026-68073Apache Qpid Broker-J: Unbounded type nesting can lead to pre-authentication stack overflowApache Software Foundation Apache Qpid Broker-J
- CVE-2026-66274Apache Qpid Proton-J: Unbounded type nesting can lead to pre-authentication stackoverflowApache Software Foundation Apache Qpid Proton-J
- CVE-2026-67589Apache Qpid ProtonJ2: Type size/count handling can lead to excessive allocation pre-authenticationApache Software Foundation Apache Qpid ProtonJ2
- CVE-2026-67551Apache Qpid Proton Dotnet: Type size/count handling can lead to excessive allocation pre-authenticationApache Software Foundation Apache Qpid Proton Dotnet
- CVE-2026-68060Apache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authenticationApache Software Foundation Apache Qpid Broker-J
- CVE-2026-66273Apache Qpid Proton-J: Type size/count handling can lead to excessive allocation pre-authenticationApache Software Foundation Apache Qpid Proton-J
- CVE-2026-67588Apache Qpid ProtonJ2: Unbounded symbol value caching can lead to pre-authentication resource exhaustionApache Software Foundation Apache Qpid ProtonJ2
- CVE-2026-67465Apache Qpid Proton Dotnet: Unbounded symbol value caching can lead to pre-authentication resource exhaustionApache Software Foundation Apache Qpid Proton Dotnet
- CVE-2026-68074Apache Qpid Broker-J: Unbounded symbol value caching can lead to pre-authentication resource exhaustionApache Software Foundation Apache Qpid Broker-J
- CVE-2026-66257Apache Qpid Proton-J: Unbounded symbol value caching can lead to pre-authentication resource exhaustionApache Software Foundation Apache Qpid Proton-J
- CVE-2026-71190In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnerable to catastrophic backtrackiOpenStack Swift
- CVE-2026-55707In OpenStack Neutron before 28.0.2, the subnetpool onboarding API does not verify ownership of the target subnets.OpenStack Neutron
- CVE-2026-18902H3C NX15 esps repeaterproc command injectionH3C NX15
- CVE-2026-18322Smart Popup by Supsystic <= 1.12.0 - Unauthenticated Privilege Escalation to Administratorsupsysticcom Smart Popup by Supsystic
- CVE-2026-15918VikAppointments – Services Booking Calendar <= 1.2.19 - Unauthenticated SQL Injectione4jvikwp VikAppointments Services Booking Calendar
- CVE-2026-8761Dokan <= 5.0.2 - Missing Authorization to Authenticated (Vendor+) Privilege Escalationdokaninc Dokan: AI Powered WooCommerce Multivendor Marketpl…
- CVE-2026-16143VikRentItems Flexible Rental Management System <= 1.2.1 - Unauthenticated Stored Cross-Site Scriptinge4jvikwp VikRentItems Flexible Rental Management System
- CVE-2026-18901H3C NX15 Web API esps service.add routineH3C NX15
- CVE-2026-18900H3C NX15 Backend RPC esps file.exec os command injectionH3C NX15
- CVE-2026-18898UTT HiPER 1200GW ConfigAdvideo strcpy stack-based overflowUTT HiPER 1200GW
- CVE-2026-18897UTT HiPER 1250GW getOneApConfTempEntry strcpy stack-based overflowUTT HiPER 1250GW
- CVE-2026-18907PathTravelsal Vulnerability in com.talpa.hibrowserTECNO Mobile Hi Browser
- CVE-2026-18895UTT HiPER 1250GW APSecurity_5g strcpy stack-based overflowUTT HiPER 1250GW
- CVE-2025-63822SirenGPS Android Application 2.19.44 is vulnerable to Incorrect Access Control.
- CVE-2025-70962Zosi C519M V4.2.8.823C01450BA is vulnerable to Incorrect Access Control.
- CVE-2026-67863In open62541 1.5.5, a server-side use-after-free exists in the local MonitoredItem callback path.
- CVE-2026-67864An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via the NodeManagement type-instantiation log
- CVE-2026-67865S2OPC 1.7.3 contains an out-of-bounds read in RepublishResponse handling.
- CVE-2026-67866Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the LockedStaMac_ProcessMsg_
- CVE-2026-67867Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the Alarm/Conditions wrapper
- CVE-2026-67869Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the Service_Call validates input
- CVE-2026-67871Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the AddNodes, address_space_
- CVE-2026-67872An issue in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the event monitored-item queue resize handling
Medium, low and unrated 170
- CVE-2026-18970Rongzhitong Visual Integrated Command and Dispatch Platform findAll sql injectionRongzhitong Visual Integrated Command and Dispatch Platform
- CVE-2026-18969Rongzhitong Visual Integrated Command and Dispatch Platform upload unrestricted uploadRongzhitong Visual Integrated Command and Dispatch Platform
- CVE-2026-19028HDF5 integer underflow in Fletcher32 filter leads to massive out-of-bounds readThe HDF Group HDF5
- CVE-2026-19027HDF5 out-of-bounds heap read in N-Bit filter decompressionThe HDF Group HDF5
- CVE-2026-18968ttttonyhe OBlog tags.php cross site scriptingttttonyhe OBlog
- CVE-2026-19026Nbit filter NULL/short parameter-array dereferenceThe HDF Group HDF5
- CVE-2026-19025HDF5 divide-by-zero (SIGFPE) via mismatched chunk-layout dimensionality and dataspace rank on dataset openThe HDF Group HDF5
- CVE-2026-19023HDF5 h5dump Untrusted Pointer Dereference in Binary Output of Variable-Length String DatasetsThe HDF Group HDF5
- CVE-2026-71318Nuxt: Unauthorized Component Instantiation via Server Island Propsnuxt
- CVE-2026-71313rclone: Local Encoding Path Traversalrclone · github.com/rclone/rclone
- CVE-2026-18839Popt-devel: popt-static: size_t underflow in singleoptionhelprpm-software-management popt · Red Hat Hardened Images +2
- CVE-2026-71311rclone: FTP Command Arguments Permit CRLF Injection When Custom Encoding Preserves Newlinesrclone · github.com/rclone/rclone
- CVE-2026-71310rclone: Unbounded HTTP CONNECT Response Headers Can Exhaust rclone Memoryrclone · github.com/rclone/rclone
- CVE-2026-18959yushine InnoShop Files Endpoint panel-api.php destroyFiles path traversalyushine InnoShop
- CVE-2026-15996Denial of service vulnerability in GitHub Enterprise Server allowed unauthenticated service disruption via deeply nested request parametersGitHub Enterprise Server
- CVE-2026-21766HCL Digital Experience and Digital Experience Compose insufficiently protects credentialsHCLSoftware HCL Digital Experience and Digital Experience C…
- CVE-2026-18954Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP ServerAWS documentdb-mcp-server
- CVE-2026-18958imranrisal-dev Student-Management-System Login loginCheckTest.php sql injectionimranrisal-dev Student-Management-System
- CVE-2026-70618Spacebar Server Missing Authorization via member-ids EndpointSpacebar Server
- CVE-2026-66885Livebook Teams identity callback lacks state binding, allowing login CSRFlivebook-dev livebook
- CVE-2026-66297Unescaped deployment environment variables in generated setup commandslivebook-dev livebook
- CVE-2026-7658Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcementIBM Langflow OSS
- CVE-2026-10547Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcementIBM Langflow OSS
- CVE-2026-7869Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcementIBM Langflow OSS
- CVE-2026-63457A potential denial of service vulnerability exists in HPE Integrated Lights-Out 6 (iLO 6) prior to v1.78.Hewlett Packard Enterprise (HPE) HPE Integrated Lights-Out
- CVE-2026-70612Electron: Sandboxed iframes can launch external protocol handlerselectron
- CVE-2026-70611Electron: DevTools embedder handler executes arbitrary files via shell openelectron
- CVE-2026-10128Langflow is affected by weaknesses in secret handling and sensitive configuration accessIBM Langflow OSS
- CVE-2026-70610Electron: contextBridge object copy honors prototype setterselectron
- CVE-2026-70447Missing permission checks in Jenkins AWS CodeBuild Plugin 0.59 and earlier allow attackers with Overall/Read permission to enumerate credentJenkins Project Jenkins AWS CodeBuild Plugin
- CVE-2026-70446Missing permission checks in Jenkins CodeSonar Plugin 3.6.0 and earlier allow attackers with Overall/Read permission to enumerate credentialJenkins Project Jenkins CodeSonar Plugin
- CVE-2026-70445Missing permission checks in Jenkins Sauce OnDemand Plugin 2.2.0 and earlier allow attackers with Overall/Read permission to enumerate credeJenkins Project Jenkins Sauce OnDemand Plugin
- CVE-2026-70444A missing permission check in Jenkins Violation Comments to GitLab Plugin 2.62.0 and earlier allows attackers with Overall/Read permission tJenkins Project Jenkins Violation Comments to GitLab Plugin
- CVE-2026-70443Jenkins Horreum Plugin 0.16.162.v33b_4a_a_b_5f828 and earlier does not set the appropriate context for credentials lookup, allowing attackerJenkins Project Jenkins Horreum Plugin
- CVE-2026-70442Jenkins Google Chat Notification Plugin 166.ve6b_de280f2e8 and earlier does not set the appropriate context for credentials lookup, allowingJenkins Project Jenkins Google Chat Notification Plugin
- CVE-2026-70441Jenkins Summary Display Plugin 1.15 and earlier does not escape the job name in a JavaScript context in build report pages, resulting in a sJenkins Project Jenkins Summary Display Plugin
- CVE-2026-70440Jenkins Qualys Container Scanning Connector Plugin 1.8.0.5 and earlier does not escape user-controlled field values in a JavaScript context,Jenkins Project Jenkins Qualys Container Scanning Connector…
- CVE-2026-70439Jenkins XML Job to Job DSL Plugin 0.1.13 and earlier does not perform permission checks, allowing attackers lacking appropriate permissions Jenkins Project Jenkins XML Job to Job DSL Plugin
- CVE-2026-70438A missing permission check in Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier allows attackers with Overall/Read permission toJenkins Project Jenkins Parameterized Remote Trigger Plugin
- CVE-2026-70437Jenkins Webhook Secret Credentials Provider Plugin 16.v0cfa_f0215cf5 and earlier does not use a constant-time comparison function when checkJenkins Project Jenkins Webhook Secret Credentials Provider…
- CVE-2026-70436Jenkins External Workspace Manager Plugin 1.4.1 and earlier does not perform a permission check (1.4.0 and earlier) or performs an improper Jenkins Project Jenkins External Workspace Manager Plugin
- CVE-2026-70435A missing permission check in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attackers with Overall/Read permission to connect to an aJenkins Project Jenkins SCM-Manager Plugin
- CVE-2026-70434A cross-site request forgery (CSRF) vulnerability in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attackers to connect to an attackeJenkins Project Jenkins SCM-Manager Plugin
- CVE-2026-70433Missing permission checks in Jenkins HCL AppScan Plugin 1.8.3 and earlier allow attackers with Overall/Read permission to enumerate credentiJenkins Project Jenkins HCL AppScan Plugin
- CVE-2026-70430Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not restrict the types of objects that can be instantiated as part of the project naJenkins Project Jenkins
- CVE-2026-70428Jenkins 2.575 and earlier, LTS 2.568.1 and earlier improperly identifies file paths attempting path traversal in file parameter names, allowJenkins Project Jenkins
- CVE-2026-70427Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not safely handle symbolic links with effectively empty names during the extraction Jenkins Project Jenkins
- CVE-2026-7657Langflow OSS is affected by server-side request forgery in provider validation and API request functionalityIBM Langflow OSS
- CVE-2026-70609Electron: DevTools JavaScript Injection via Unsanitized Dock State Parameterelectron
- CVE-2026-44605Rpm: heap buffer overflow in ndb slot table parsingRed Hat Hardened Images · Red Hat Enterprise Linux
- CVE-2026-20311Cisco IOS XE Software Web UI Denial of Service VulnerabilityCisco IOS XE Software
- CVE-2026-20289Cisco RoomOS Logging Subsystem Information Disclosure VulnerabilityCisco RoomOS Software
- CVE-2026-18927imranrisal-dev Student-Management-System Shared Upload Helper student_profile_pic.php storeProfileImage unrestricted uploadimranrisal-dev Student-Management-System
- CVE-2026-20294Cisco Catalyst SD-WAN Manager Information Disclosure VulnerabilityCisco Catalyst SD-WAN Manager
- CVE-2026-20288Cisco IMC Remote Code Execution Vulnerability Remote Code Execution VulnerabilityCisco Enterprise NFV Infrastructure Software · Cisco Unifie…
- CVE-2026-7646Langflow is affected by security vulnerabilities in Model Context Protocol featuresIBM Langflow OSS
- CVE-2026-70607Electron: window.open features string controls some window options considered privilegedelectron
- CVE-2026-20308Cisco IOS XE Software Web-Based Management Interface VulnerabilityCisco IOS XE Software
- CVE-2026-20198Cisco Integrated Management Controller Cross-Site Scripting VulnerabilityCisco Enterprise NFV Infrastructure Software · Cisco Unifie…
- CVE-2026-20028Cisco Terminal Services Agent Firewall Rules Bypass VulnerabilityCisco Terminal Services Agent
- CVE-2026-14587Unathenticated connection can hold Bolt channel openneo4j Enterprise Edition · neo4j Community Edition
- CVE-2026-70606Electron: ProtocolResponse.url reuses the default session cache instead of the registering sessionelectron
- CVE-2026-15656IBM MAS uses axios-1.15.2, protobufjs-8.0.1 and undici-7.26 which is vulnerable to multiple CVEs, and contains vulnerabilities related to missing Secure attribute on mas-redirect-uri cookie and weak HMAC Session SecretIBM Maximo Application Suite
- CVE-2026-18531IBM MAS uses axios-1.15.2, protobufjs-8.0.1 and undici-7.26 which is vulnerable to multiple CVEs, and contains vulnerabilities related to missing Secure attribute on mas-redirect-uri cookie and weak HMAC Session SecretIBM Maximo Application Suite
- CVE-2026-70605Electron: HTTP redirect followed into local file loaderelectron
- CVE-2026-13477IBM QRadar SIEM is vulnerable to remote code execution by privileged usersIBM QRadar
- CVE-2026-12730Improper Validation of Certificate with Host Mismatch in IBM Business Automation Workflow containersIBM Business Automation Workflow containers and traditional
- CVE-2026-70603Electron: shell.openPath path validation bypass via embedded null byteelectron
- CVE-2026-70602Electron: Extension tab APIs operate across session boundarieselectron
- CVE-2026-12762Insertion of Sensitive Information into Externally-Accessible File in IBM Business Automation InsightsIBM Cloud Pak For Business Automation
- CVE-2026-70600Electron: Cross-origin iframe can position native autofill popupelectron
- CVE-2026-70599Electron: Permission Check Handler Receives Main Frame Origin Instead of Requesting Iframe Originelectron
- CVE-2026-70598Electron: Off-screen rendering trusts GPU-supplied geometry over shared-memory sizeelectron
- CVE-2026-70597Electron: Parent process code-sign check is spoofableelectron
- CVE-2026-50749Apache Answer: Missing authorization in revision audit reject allows authenticated users to reject pending revisionsApache Software Foundation Apache Answer
- CVE-2026-48912Apache Answer: Improper authorization in avatar update cleanup allows authenticated users to delete arbitrary uploaded files by URLApache Software Foundation Apache Answer
- CVE-2026-53992Reflected XSS in ProjectSend thumbnails-regenerate.php via start_date / end_date ParametersProjectSend
- CVE-2026-49331Openshift/oauth-proxy: openshift/oauth-proxy: unauthenticated identity header injection on whitelisted pathsRed Hat OpenShift Container Platform
- CVE-2026-70596Ghost: Cross-Site Scripting in Feature Image CaptionsTryGhost Ghost · ghost
- CVE-2026-70595Ghost: Server-Side Request Forgery Mitigation IssueTryGhost Ghost · ghost
- CVE-2026-16100Keycloak-services: keycloak-services: unbounded metric cardinality in user event metrics via request-controlled error textRed Hat build of Keycloak · Red Hat Data Grid +2
- CVE-2026-16071Keycloak-services: keycloak-services: ldap entry-dn user search bypasses configured users dn boundaryRed Hat build of Keycloak · Red Hat Data Grid +2
- CVE-2026-7456Udimi Tools <= 3.2 - Missing Authorization to Authenticated (Subscriber+) Plugin Configuration Reset via 'disconnect' AJAX Actionwebocoders Udimi Tools
- CVE-2026-71227Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout returnStephan Muelle libkcapi · Red Hat Enterprise Linux +2
- CVE-2026-71293Statamic CMS Unguarded Exposure of 2FA Recovery Codes via Antlers current_user Variablestatamic cms · statamic/cms
- CVE-2026-71286ember-dynamic-render-template Client-Side Template Injection via Unsanitized templateStringmiguelcobain ember-dynamic-render-template
- CVE-2026-71283Fledge IoT Gateway Backup Restore Tar Path Traversalfledge-iot fledge
- CVE-2026-71282ChirpStack SQLite Backend SQL Injection via Device Tag Key in ListDevices Filterchirpstack
- CVE-2026-71275OpenBK7231T - Reflected XSS via OTA host Parameteropenshwprojects OpenBK7231T_App
- CVE-2026-71273OpenBK7231T CSRF in /cfg_wifi_set Leading to Implicit Web Password Disable and WiFi Hijackopenshwprojects OpenBK7231T_App
- CVE-2026-71260ESPHome web_server Plaintext Password Disclosure via JSON "value" Fieldesphome
- CVE-2026-71225Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundariesStephan Muelle libkcapi · Red Hat Enterprise Linux +2
- CVE-2026-0516A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the HostSonicWall SonicOS
- CVE-2026-71251Akaunting - Cross-Company Media IDOR in Customer Portal Download Endpointakaunting
- CVE-2026-71250Firefly III - Webhook URL Validation Explicitly Allows Loopback and Is Bypassable via DNS Rebindingfirefly-iii
- CVE-2026-71249299Ko - Unauthenticated Reflected XSS in Public Contact Form299Ko
- CVE-2026-71247Documenso - Assistant Recipient Can Forge Another Signer's Signature in Sequential-Signing Documentsdocumenso
- CVE-2026-71246Pixelfed - Authenticated SSRF via Remote URL Searchpixelfed
- CVE-2026-71244Paperless-ngx - Mail Account Test Connection Leaks Stored IMAP/OAuth Credentials to Attacker-Controlled Hostpaperless-ngx
- CVE-2026-71240DjangoCRM - Unauthenticated Open Redirect via toggle_default_sorting next_url ParameterDjangoCRM django-crm
- CVE-2026-14574In Eclipse Theia versions 0.7.0 and up until including 1.73.1, the `PreferenceUtils.merge` function in `@theia/core` recursively merges prefEclipse Foundation Eclipse Theia
- CVE-2026-14304In Eclipse Accessibility Tools Framework (ACTF) versions up to 1.6.0 (including source code versions up to v20260630 and ACTF based applicatEclipse Foundation Eclipse Accessibility Tools Framework
- CVE-2026-17578Kong Event Gateway AES-GCM nonce reuse due to missing key rotation enforcementKong Event Gateway
- CVE-2026-0931Denial-of-service vulnerability in M-Files ServerM-Files Server
- CVE-2026-15452Smash Balloon Social Photo Feed <= 6.11.3 - Reflected Cross-Site Scripting via REQUEST_URI Query Stringsmub Smash Balloon Social Photo Feed – Easy Social Feeds Pl…
- CVE-2026-8029SQL Injection Vulnerability in ZTE SmartLife AppZTE SmartLife
- CVE-2026-64579xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsertLinux
- CVE-2026-64573Bluetooth: qca: fix NVM tag length underflow in TLV parserLinux
- CVE-2026-64572ipv4: fib: free fib_alias with kfree_rcu() on insert error pathLinux
- CVE-2026-64571wifi: p54: validate RX frame length in p54_rx_eeprom_readback()Linux
- CVE-2026-64569mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=nLinux
- CVE-2026-55998Cluster Existence Oracle via Unauthenticated Import EndpointSUSE Rancher
- CVE-2026-55996Unauthenticated Denial-of-Service via TLS SAN Stuffing in Rancher and cattle-cluster-agentSUSE Rancher
- CVE-2026-11920JoomSport <= 5.7.9 - Authenticated (Administrator+) SQL Injection via 'order' Parameterbeardev JoomSport – for Sports: Team & League, Football, Ho…
- CVE-2026-11977WP Post Author <= 3.9.1 - Authenticated (Author+) SQL Injectionafthemes WP Post Author – Author Box, Multiple Authors, Gue…
- CVE-2026-11969WP TripAdvisor Review Slider <= 14.3 - Authenticated (Administrator+) SQL Injectionjgwhite33 WP TripAdvisor Review Slider
- CVE-2026-71212xidown - Argument Injection via Unterminated yt-dlp Command Line Constructionindravoyager xidown
- CVE-2026-71210mealie - DNS-Rebinding TOCTOU in SSRF Guard Allows Internal Network and Cloud Metadata Accessmealie-recipes mealie
- CVE-2026-71208KubeSphere - SSRF via Unvalidated Cluster CRD Connection Endpoint in Cluster ReconciliationKubeSphere
- CVE-2026-71205changedetection.io - No Rate Limiting on /login Enables Unlimited Password Brute-Forcedgtlmoon changedetection.io
- CVE-2026-71204changedetection.io - Omitted Checkbox in /settings Save Silently Disables API Key Enforcementdgtlmoon changedetection.io
- CVE-2026-71203changedetection.io - Missing Authentication on /api/v1/full-spec Discloses Full OpenAPI Schemadgtlmoon changedetection.io
- CVE-2026-55747PocketFlow - Path Traversal in pocketflow-coding-agent Cookbook Example File ToolsThe-Pocket PocketFlow
- CVE-2026-7105Xpro Addons <= 1.5.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Creation via get_menu_content_editor() FunctionXpro Addons — 140+ Widgets for Elementor
- CVE-2026-6972SKT Skill Bar <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scriptingsonalsinha21 SKT Skill Bar
- CVE-2026-7441Simple Yearly Archive <= 2.2.4 - Authenticated (Contributor+) Stored Cross-Site Scriptingalphawolf Simple Yearly Archive
- CVE-2026-5651Askeet <= 3.0 - Authenticated (Administrator+) SQL Injection via 'sql_query' Parameter2wstechnologies Askeet — Talk to Your WooCommerce Data
- CVE-2026-15281User Access Manager <= 2.3.12 - Authenticated (Subscriber+) SQL Injectiongm_alex User Access Manager
- CVE-2026-17505TranslatePress <= 3.2.5 - Reflected Cross-Site Scriptingcozmoslabs TranslatePress – Translate Multilingual sites wi…
- CVE-2026-11454Groundhogg — CRM, Newsletters, and Marketing Automation <= 4.5.2 - Insecure Direct Object Referencetrainingbusinesspros Groundhogg — CRM, Newsletters, and Mar…
- CVE-2026-5116Contact Form 7 – Dynamic Text Extension <= 5.0.5 - Authenticated (Editor+) Stored Cross-Site Scriptingsevenspark DTX – Dynamic Text Extension for Contact Form
- CVE-2026-17532Seraphinite Accelerator <= 2.29.18 - Reflected Cross-Site Scriptingseraphinitesoft Seraphinite Accelerator
- CVE-2026-7726Layouts for WPBakery <= 1.1.3 - Missing Authorization to Unauthenticated Template Cache Manipulation via 'handle_sync' AJAX Actiontecheshta Layouts for WPBakery
- CVE-2026-5108Super Progressive Web Apps <= 2.2.43 - Authenticated (Administrator+) Stored Cross-Site Scripting via Offline Message Settingsuperpwa Super Progressive Web Apps
- CVE-2026-71201In OpenStack Ironic through 38.0.0, a project reader that makes a crafted request to Ironic can return Portgroups assigned to Nodes owned orOpenStack Ironic
- CVE-2026-49004PostgreSQL Misconfiguration and Command Injection Vulnerability in ZTE NX799J (Red Magic 11 Air) ProductZTE NX799J
- CVE-2026-17515MLS Import < 7.0.4 - Subscriber+ Sensitive Information Disclosure via mlsimport_logger_per_itemMLSImport: IDX Plugin & MLS Plugin for Real Estate Listings
- CVE-2025-15677GeoDirectory < 2.8.110 - Editor+ Stored XSS via Place CategoriesGeoDirectory
- CVE-2026-16993DHL for WooCommerce < 4.0.1 - Unauthenticated Shipping Label Disclosure via Unprotected Uploads DirectoryDHL Shipping Germany for WooCommerce
- CVE-2026-16981DHL for WooCommerce < 4.0.1 - Unauthenticated Shipping Label Download via IDORDHL Shipping Germany for WooCommerce
- CVE-2026-16968GeoDirectory < 2.8.168 - Contributor+ User Email Disclosure via geodir_json_search_usersGeoDirectory
- CVE-2026-16942WP Custom HTML Pages <= 0.6.2 - Author+ Stored XSSWP Custom HTML Page
- CVE-2026-16746MultiVendorX < 5.0.11 - Store Owner+ Cross-Store Commission Data Disclosure via commissions REST EndpointMultiVendorX
- CVE-2026-16613GDPR Cookie Compliance < 5.1.0 - Cookie Deletion and Forced Logout via CSRFGDPR Cookie Compliance
- CVE-2026-16583Orbit Fox by ThemeIsle < 3.0.8 - Author+ Stored XSS via SVG UploadOrbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie…
- CVE-2026-68080Apache Qpid Broker-J: Unbounded echo flow responses can lead to denial of serviceApache Software Foundation Apache Qpid Broker-J
- CVE-2026-67555Apache Qpid Proton Dotnet: Unable to govern the maximum number of transfer frames per incoming deliveryApache Software Foundation Apache Qpid Proton Dotnet
- CVE-2026-68078Apache Qpid Broker-J: Unable to govern the maximum number of transfer frames per incoming deliveryApache Software Foundation Apache Qpid Broker-J
- CVE-2026-66277Apache Qpid Proton-J: Unable to govern the maximum number of transfer frames per incoming deliveryApache Software Foundation Apache Qpid Proton-J
- CVE-2026-67554Apache Qpid Proton Dotnet: Unbounded disposition range handling can lead to denial of serviceApache Software Foundation Apache Qpid Proton Dotnet
- CVE-2026-68077Apache Qpid Broker-J: Unbounded disposition range handling can lead to denial of serviceApache Software Foundation Apache Qpid Broker-J
- CVE-2026-66276Apache Qpid Proton-J: Unbounded disposition range handling can lead to denial of serviceApache Software Foundation Apache Qpid Proton-J
- CVE-2026-67591Apache Qpid ProtonJ2: Incoming session flow control window can be exceededApache Software Foundation Apache Qpid ProtonJ2
- CVE-2026-67553Apache Qpid Proton Dotnet: Incoming session flow control window can be exceededApache Software Foundation Apache Qpid Proton Dotnet
- CVE-2026-68075Apache Qpid Broker-J: Incoming session flow control window can be exceededApache Software Foundation Apache Qpid Broker-J
- CVE-2026-66275Apache Qpid Proton-J: Incoming session flow control window can be exceededApache Software Foundation Apache Qpid Proton-J
- CVE-2026-5062PrettyLinks <= 3.6.20 - Authenticated (Administrator+) SQL Injection via 's' Parametersupercleanse PrettyLinks – Affiliate Link Management, URL S…
- CVE-2026-7753Cost Calculator Builder <= 3.6.17 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosurestylemix Cost Calculator Builder
- CVE-2026-15941Relevanssi <= 4.27.1 and Relevanssi Premium <= 2.30.2 - Authenticated (Contributor+) SQL InjectionRelevanssi Premium – A Better Search · comesio Relevanssi –…
- CVE-2026-71192In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control headers (X-Copy-From, X-Copy-From-Account) frOpenStack Swift
- CVE-2026-71191In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz-* headers are covered by the SigV4 signature on preOpenStack Swift
- CVE-2026-18903yeqifu warehouse FileController.java path traversalyeqifu warehouse
- CVE-2026-66839NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Unquoted Search Path or Element vulnerability (CWE-428).Integrated Systems Technologies NetKids iMark
- CVE-2026-66344NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Uncontrolled Search Path Element vulnerability (CWE-427).Integrated Systems Technologies NetKids iMark
- CVE-2026-11421ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support <= 1.17.4 - Authenticated (Custom+) SQL Injection via 'erpadvancefilter' Parameterwedevs ERP: Complete HR, Accounting & CRM Suite Built for W…
- CVE-2026-8790Football Pool <= 2.13.4 - Authenticated (Subscriber+) Reflected Cross-Site Scriptingantoineh Football Pool
- CVE-2026-18896lavkush-maurya Student-Registration-System changepass.php sql injectionlavkush-maurya Student-Registration-System
- CVE-2026-18859ESAFENET CDG usbkey;logindojojs sql injectionESAFENET CDG
- CVE-2026-18856Poesis Rhymix CMS Data Import importer.admin.controller.php procImporterAdminCheckXmlFile server-side request forgeryPoesis Rhymix CMS
- CVE-2026-18854Shandong Hoteam PDM Product Data Management System DataService GetStoredClassByFilter sql injectionShandong Hoteam PDM Product Data Management System