CVEs published August 6, 2026
483 CVEs were published on August 6, 2026: 84 critical, 186 high. 2 are now in CISA KEV.
- Published
- 483
- Critical
- 84
- High
- 186
- Medium
- 182
- Low
- 19
- Unrated
- 12
- Now in CISA KEV
- 2
- Fix available
- 263
Most affected products
- Google Chrome
- 41
- Linux
- 22
- open-reception appointment-booking-software
- 16
- Apache Software Foundation Apache CXF
- 12
- ggml-org llama.cpp
- 10
- itsourcecode Hospital Management System
- 6
- rrrene html_sanitize_ex
- 6
- statamic cms · statamic/cms
- 6
- Apache Software Foundation Apache Portable Runtime Utility
- 5
- Autodesk Revit · Autodesk AutoCAD +1
- 5
Critical 84
- CVE-2026-70332Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft SharePoint Online
- CVE-2026-62873Microsoft 365 Admin Center Elevation of Privilege VulnerabilityMicrosoft 365 Admin Center
- CVE-2026-63508Microsoft Planetary Computer Pro Elevation of Privilege VulnerabilityMicrosoft Planetary Computer Pro
- CVE-2026-50515Azure Service Bus Remote Code Execution VulnerabilityMicrosoft Azure Service Bus
- CVE-2026-56162Azure SQL Database Elevation of Privilege VulnerabilityMicrosoft Azure SQL Database
- CVE-2026-65667Microsoft Teams Elevation of Privilege VulnerabilityMicrosoft Teams
- CVE-2026-62830Azure SRE Agent Elevation of Privilege VulnerabilityMicrosoft Azure SRE Agent
- CVE-2026-56161Azure Logic Apps Information Disclosure VulnerabilityMicrosoft Azure Logic Apps
- CVE-2026-68823Azure Confidential Ledger Remote Code Execution VulnerabilityMicrosoft Azure Confidential Ledger
- CVE-2026-59115Microsoft Entra Provisioning Service Elevation of Privilege VulnerabilityMicrosoft Entra Provisioning Service
- CVE-2026-50481Azure Active Directory Elevation of Privilege VulnerabilityMicrosoft Azure Active Directory
- CVE-2026-59118Copilot Cowork Elevation of Privilege VulnerabilityMicrosoft Copilot Cowork
- CVE-2026-62896Microsoft Teams Elevation of Privilege VulnerabilityMicrosoft Teams
- CVE-2026-48088OpenReception vulnerable to unauthenticated staff crypto poisoning that breaks E2E recipient directoryopen-reception appointment-booking-software
- CVE-2026-48087OpenReception: WebAuthn passkey injection allows account takeoveropen-reception appointment-booking-software
- CVE-2026-48086OpenReception: Tenant admin self-promotes to GLOBAL_ADMINopen-reception appointment-booking-software
- CVE-2026-48085OpenReception has unauthenticated GLOBAL_ADMIN account creation post-bootstrapopen-reception appointment-booking-software
- CVE-2026-19175Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a Google Chrome
- CVE-2026-19171Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escapGoogle Chrome
- CVE-2026-19166Use after free in Web Authentication in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escGoogle Chrome
- CVE-2026-19164Insufficient validation of untrusted input in Codecs in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perfoGoogle Chrome
- CVE-2026-19170Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escapGoogle Chrome
- CVE-2026-19157Out of bounds write in ANGLE in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox Google Chrome
- CVE-2026-19149Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape vGoogle Chrome
- CVE-2026-18367A privilege escalation vulnerability allows local users to execute arbitrary code as root via Sophos Endpoint for macOS older than version 2Sophos Endpoint for macOS · Sophos Home for macOS
- CVE-2026-15734WGDashboard Server-Side Template Injection vulnerabilityWGDashboard
- CVE-2026-15733WGDashboard Remote Code Execution vulnerabilityWGDashboard
- CVE-2026-15732WGDashboard Server-Side Request Forgery VulnerabilityWGDashboard
- CVE-2026-70558Dinky Unauthenticated Arbitrary File Write via /download/uploadFromRsByLocal Gated Only by Hardcoded Default TokenDataLinkDC Dinky
- CVE-2026-65400An authentication issue was addressed with improved state management.Apple macOS
- CVE-2026-3418Arbitrary File Upload via System REST API in Multiple WSO2 Products Allows Remote Code ExecutionWSO2 API Manager · WSO2 Traffic Manager +4
- CVE-2025-14561Access Control Bypass via Publisher REST APIs in Multiple WSO2 Products Allows Cross-Tenant OperationsWSO2 API Manager · WSO2 API Control Plane +4
- CVE-2026-17032Supsystic Multiple Pro Plugins - Backdoor via Compromised Vendor Update Servergoogle-maps-easy-pro · supsystic-gallery-pro +1
- CVE-2026-14812Premium SEO - Unauthenticated Backdoor (Admin Creation / RCE / SSRF / Content Injection)Premium SEO
- CVE-2026-11976MonsterInsights Pro 10.2.0/10.2.2 - Backdoored via AWS S3 bucket compromiseMonsterInsights Pro
- CVE-2026-43632llama.cpp b7492–b9060 Use-After-Free in Tokenization Endpointsggml-org llama.cpp
- CVE-2026-43631llama.cpp b7492–b9060 Use-After-Free RCE via llama-serverggml-org llama.cpp
- CVE-2026-43629llama.cpp b4882–b9058 Buffer Overflow in KV Cache State Restoreggml-org llama.cpp
- CVE-2026-53983Ground Station prior to 0.6.0 Unauthenticated Persistent Blind Server-Side Request Forgery via Orbital Data Source URLEfstratios Goudelis Ground Station
- CVE-2026-32327Apache Portable Runtime Utility: apr-util XML stack recursion crashApache Software Foundation Apache Portable Runtime Utility
- CVE-2026-34191Apache Portable Runtime Utility: SQL Injection in apr_dbd_oracleApache Software Foundation Apache Portable Runtime Utility
- CVE-2026-66709WordPress CTX Feed plugin <= 6.6.42 - Remote Code Execution (RCE) vulnerabilityWebAppick CTX Feed
- CVE-2026-66665WordPress Type Hub plugin <= 2.0.6 - Arbitrary File Upload vulnerabilityBrandexponents Type Hub
- CVE-2026-66662WordPress Frontend Admin by DynamiApps plugin <= 3.29.10 - Privilege Escalation vulnerabilityShabti Kaplan Frontend Admin by DynamiApps
- CVE-2026-66447WordPress WordPress File Upload plugin <= 5.1.7 - SQL Injection vulnerabilitynickboss WordPress File Upload
- CVE-2026-65581WordPress AI ANN theme <= 1.29.0 - PHP Object Injection vulnerabilityAxiomthemes AI ANN
- CVE-2026-65579WordPress Agricola theme <= 1.21.0 - PHP Object Injection vulnerabilityaxiomthemes Agricola
- CVE-2026-65578WordPress Agora theme <= 1.9 - PHP Object Injection vulnerabilityAncoraThemes Agora
- CVE-2026-65577WordPress Advice theme <= 1.18.0 - PHP Object Injection vulnerabilityAncoraThemes Advice
- CVE-2026-65576WordPress Adrena theme <= 1.2.14 - PHP Object Injection vulnerabilityAncoraThemes Adrena
- CVE-2026-65575WordPress Accalia theme <= 1.5.3 - PHP Object Injection vulnerabilityAncoraThemes Accalia
- CVE-2026-65574WordPress Abogado theme <= 1.18 - PHP Object Injection vulnerabilityAncoraThemes Abogado
- CVE-2026-65573WordPress Abelle theme <= 1.22 - PHP Object Injection vulnerabilityThemeREX Abelle
- CVE-2026-65572WordPress A.Williams theme <= 1.3.1 - PHP Object Injection vulnerabilityAxiomthemes A.Williams
- CVE-2026-65571WordPress 69 Clothing theme <= 1.2.11.1 - PHP Object Injection vulnerabilityAxiomthemes 69 Clothing
- CVE-2026-65556WordPress WPBruiser {no- Captcha anti-Spam} plugin <= 3.1.43 - PHP Object Injection vulnerabilityMihChe WPBruiser {no- Captcha anti-Spam}
- CVE-2026-65553WordPress Spider Analyser – WordPress搜索引擎蜘蛛分析插件 plugin <= 2.1.3 - Remote Code Execution (RCE) vulnerabilitywbolt.com Spider Analyser – WordPress搜索引擎蜘蛛分析插件
- CVE-2026-65552WordPress Export User Data plugin <= 2.2.6 - PHP Object Injection vulnerabilityqstudio Export User Data
- CVE-2026-65548WordPress Betheme theme <= 28.4.2 - Remote Code Execution (RCE) vulnerabilityMuffingroup Betheme
- CVE-2026-65546WordPress Qode Tours plugin <= 3.1.3.1 - SQL Injection vulnerabilityQode Tours
- CVE-2026-65520WordPress WP OAuth Server plugin <= 6.2.0 - SQL Injection vulnerabilityminiOrange WP OAuth Server
- CVE-2026-65508WordPress Simply Schedule Appointments plugin <= 1.6.12.10 - SQL Injection vulnerabilityNSquared Simply Schedule Appointments
- CVE-2026-65507WordPress AIWU plugin <= 1.5.6 - Privilege Escalation vulnerabilitySergey AIWU
- CVE-2026-28139WordPress Ajax Search Lite plugin <= 4.14.4 - PHP Object Injection vulnerabilitywpdreams Ajax Search Lite
- CVE-2026-28005WordPress Kadence WooCommerce Email Designer plugin <= 1.5.19 - Privilege Escalation vulnerabilityNexcess Kadence WooCommerce Email Designer
- CVE-2026-53976OpenChamber 1.11.7 Path Traversal File Read via allowOutsideWorkspace ParameterBohdan Triapitsyn OpenChamber
- CVE-2026-53975OpenChamber 1.11.7 Unauthenticated RCE via /api/fs/execBohdan Triapitsyn OpenChamber
- CVE-2026-54489Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) a Sensitive Information Disclosure vulnerDell Virtual Storage Integrator for VMware vSphere Client
- CVE-2026-67261Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) an OS Command Injection vulnerability in Dell Virtual Storage Integrator for VMware vSphere Client
- CVE-2026-5134SQLi in Loca Software's CMSLoca Software Informatics Technology Ltd. CMS
- CVE-2026-12605In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet ContentSources leaks the admin `gfresttoken` to attacker-coEclipse Foundation Eclipse GlassFish
- CVE-2026-61466Apache CXF: OAuth2 Dynamic Client Registration Scope Self-EscalationApache Software Foundation Apache CXF
- CVE-2026-63687Apache CXF: JwtRequestCodeFilter silently overrides outer PKCE and nonce parametersApache Software Foundation Apache CXF
- CVE-2026-65583Apache CXF: Self-issued ID token claims validation skippedApache Software Foundation Apache CXF
- CVE-2026-68079Apache CXF: DefaultEncryptingCodeDataProvider allows unlimited authorization code replayApache Software Foundation Apache CXF
- CVE-2026-66909Apache CXF: Unsafe deserialization of inbound JMS ObjectMessageApache Software Foundation Apache CXF
- CVE-2026-5430Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account TakeoverWSO2 Universal Gateway · WSO2 Traffic Manager +3
- CVE-2026-1728Privilege Escalation via System REST APIs in Multiple WSO2 Products Permits Admin Account TakeoverWSO2 API Manager · WSO2 API Control Plane +4
- CVE-2025-15039Account Takeover via Conditional Authentication Script Logic in Multiple WSO2 ProductsWSO2 Identity Server · WSO2 API Manager +7
- CVE-2026-64597smb: client: fix double-free in SMB2_close() replayLinux
- CVE-2026-12713WPCargo Track & Trace < 8.0.4 - Unauthenticated SQL Injection via wpcargo_tracking_numberWPCargo Track & Trace
- CVE-2026-16054Drag and Drop Multiple File Upload for WooCommerce < 1.1.8 - Unauthenticated File Deletion via Nonce OracleDrag and Drop Multiple File Upload for WooCommerce
- CVE-2026-67688ICS-Park Smart Park Management System v2.0 contains an unrestricted file upload vulnerability in the file upload module.
- CVE-2026-67689SQL Injection vulnerability in FineAdmin V1.0 allows a remote attacker to execute arbitrary code via the `field` and `order` parameters in p
High 186
- CVE-2026-49163Application Insights Profiler Elevation of Privilege VulnerabilityMicrosoft Application Insights Profiler
- CVE-2026-62918Microsoft Teams Spoofing VulnerabilityMicrosoft Teams
- CVE-2026-65668Microsoft Purview eDiscovery Elevation of Privilege VulnerabilityMicrosoft Purview eDiscovery
- CVE-2026-62836Azure SQL Managed Instance Elevation of Privilege VulnerabilityMicrosoft Azure SQL Managed Instance
- CVE-2026-48054OpenZeppelin Contracts Wizard has Code Injection in Generated Hardhat and Foundry Tests via Unsanitized opts.name / opts.uriOpenZeppelin contracts-wizard · @openzeppelin/wizard
- CVE-2026-70636Flowise 3.1.4 Authentication Bypass via OAuth2 Credential Refresh EndpointFlowiseAI Flowise
- CVE-2026-67622Flowise 3.1.4 IDOR in OpenAI Assistants IntegrationFlowiseAI Flowise
- CVE-2026-67434PHP_CodeSniffer gitblame report command injection via crafted filenamePHPCSStandards PHP_CodeSniffer · squizlabs/php_codesniffer
- CVE-2026-67621Flowise 3.1.4 Missing Authorization on Document Store Mutation EndpointsFlowiseAI Flowise
- CVE-2026-70632FFmpeg 4.4 < 9.0 Heap Out-of-Bounds Write in CFHD Decoder via AVI DemuxingFFmpeg
- CVE-2026-47765Frappe: Lack of Permissions in restore/bulk_restorefrappe
- CVE-2026-70628FFmpeg 0.5 < 9.0 DVB Subtitle Parser Heap Buffer Overflow via WTV FileFFmpeg
- CVE-2026-47194Frappe: Host header poisoning can redirect magic login links to an attacker-controlled domainfrappe
- CVE-2026-48084OpenReception doesn't rate limit passphrase login attemptsopen-reception appointment-booking-software
- CVE-2026-48081OpenReception vulnerable to stored click-triggered XSS via javascript: tenant links rendered into patient-facing footeropen-reception appointment-booking-software
- CVE-2026-62857Fedify: Server-Side Request Forgery in getNodeInfo() Allows Access to Internal Network Resourcesfedify-dev fedify
- CVE-2026-48079OpenReception's logout page clears local access_token before server-side revocation, leaving duplicated tokens valid until expiryopen-reception appointment-booking-software
- CVE-2026-71488league/commonmark: Quadratic-time denial of service when parsing crafted Markdownthephpleague commonmark · league/commonmark
- CVE-2026-19177Insufficient validation of untrusted input in UI in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the Google Chrome
- CVE-2026-19176Use after free in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to executGoogle Chrome
- CVE-2026-19174Integer overflow in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a cGoogle Chrome
- CVE-2026-19173Out of bounds write in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to pGoogle Chrome
- CVE-2026-19165Use after free in Extensions in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extensGoogle Chrome
- CVE-2026-19163Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer proceGoogle Chrome
- CVE-2026-19162Out of bounds write in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via Google Chrome
- CVE-2026-19159Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gesGoogle Chrome
- CVE-2026-19158Use after free in Views in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specGoogle Chrome
- CVE-2026-19156Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extensGoogle Chrome
- CVE-2026-19155Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to poGoogle Chrome
- CVE-2026-19153Insufficient validation of untrusted input in Workers in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromisedGoogle Chrome
- CVE-2026-19152Insufficient policy enforcement in Navigation in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renGoogle Chrome
- CVE-2026-19151Use after free in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a craGoogle Chrome
- CVE-2026-19150Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sanGoogle Chrome
- CVE-2026-19148Out of bounds write in GPU in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer procGoogle Chrome
- CVE-2026-19147Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process Google Chrome
- CVE-2026-19145Use after free in Translate in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox viGoogle Chrome
- CVE-2026-19144Use after free in HTML in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially exploit heap corruption via a craftGoogle Chrome
- CVE-2026-19143Insufficient validation of untrusted input in WebAPKs in Google Chrome on Android prior to 151.0.7922.109 allowed a local attacker to potentGoogle Chrome
- CVE-2026-19142Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gesGoogle Chrome
- CVE-2026-19141Use after free in Resources in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer pGoogle Chrome
- CVE-2026-19140Use after free in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentiGoogle Chrome
- CVE-2026-19139Race in CredentialProvider in Google Chrome on Windows prior to 151.0.7922.109 allowed a local attacker to perform OS-level privilege escalaGoogle Chrome
- CVE-2026-19138Heap buffer overflow in CrashReporting in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer pGoogle Chrome
- CVE-2026-19168Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sanGoogle Chrome
- CVE-2026-19169Insufficient validation of untrusted input in Contextual Tasks in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to performGoogle Chrome
- CVE-2026-19172Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potenGoogle Chrome
- CVE-2026-19154Use after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer procesGoogle Chrome
- CVE-2026-19137Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer proceGoogle Chrome
- CVE-2026-67422pymdown-extensions: Exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processorsfacelessuser pymdown-extensions · pymdown-extensions
- CVE-2026-63637Dgraph: DQL Injection via unvalidated regexp filter argument in GraphQL query rewriterdgraph-io dgraph
- CVE-2026-45378Decidim: Verification documents can be downloaded through reusable linksdecidim · decidim-verifications
- CVE-2026-71476Nx: Zip-Slip in the self-hosted remote cachenrwl nx · nx +8
- CVE-2026-70559Dinky Unauthenticated System Configuration and Credential Disclosure via GET /api/sysConfig/getAllDataLinkDC Dinky
- CVE-2026-64665Statamic: Account takeover via OAuth email matching without email-verification checkstatamic cms · statamic/cms
- CVE-2026-45414Decidim: JWT-backed authentication can be replayed across organizationsdecidim
- CVE-2026-5857Contiki-NG MQTT Client Out-of-Bounds Write in PUBLISH Topic Parser via Persistent State Between TCP SegmentsContiki-NG
- CVE-2026-5856Contiki-NG DNS/mDNS Resolver Out-of-Bounds Read via Unchecked skip_name Traversal Before Transaction-ID ValidationContiki-NG
- CVE-2026-5855Contiki-NG LwM2M TLV Parser Out-of-Bounds Read via Unchecked Buffer Length in lwm2m_tlv_readContiki-NG
- CVE-2026-48080OpenReception's tenant detail endpoint discloses live PostgreSQL connection string, superuser-scoped in the tested official deploymentopen-reception appointment-booking-software
- CVE-2026-19111Insecure direct object reference in Strands Agents Tools memory tool namespace isolationAWS strands-agents-tools
- CVE-2026-63725sysPass FileBackupService Authenticated OS Command Injection via Backup Pathnuxsmin sysPass
- CVE-2026-3415XML External Entity (XXE) Injection via Schema Validation in Multiple WSO2 Products Allows File Reading and Denial of ServiceWSO2 API Manager · WSO2 Universal Gateway +4
- CVE-2026-16620WPC Name Your Price for WooCommerce < 2.2.5 - Unauthenticated Price Manipulation via Select ModeWPC Name Your Price for WooCommerce
- CVE-2026-16619miniOrange 2FA < 6.2.8 - 2FA Bypass via Unlimited Second-Factor AttemptsminiOrange 2FA
- CVE-2026-10524CoCart < 4.9.0 - Unauthenticated Arbitrary Price ManipulationCoCart
- CVE-2026-70635TimescaleDB 2.29.1 Out-of-Bounds Read DoS via Bulk Dictionary Decompression Negative Indextimescaledb
- CVE-2026-70634TimescaleDB 2.29.1 Out-of-Bounds Read Information Disclosure via Dictionary Compression Reverse Iteratortimescaledb
- CVE-2026-13399Payment Plugins for PayPal WooCommerce < 2.0.20 - Unauthenticated Payment Bypass via Reuse of a Completed PayPal OrderPayment Plugins for PayPal WooCommerce
- CVE-2026-70633TimescaleDB 2.29.1 Out-of-Bounds Read DoS via Gorilla Compression Reverse Iteratortimescaledb
- CVE-2026-71445Authenticated Reflected Cross-Site Scripting in Tag Error Responses in ail-frameworkail-project ail-framework
- CVE-2026-12584Payment Gateway for Redsys & WooCommerce Lite < 7.0.2 - Unauthenticated Payment Confirmation via Unverified Inespay CallbackPayment Gateway for Redsys & WooCommerce Lite
- CVE-2026-10599Integrate PhonePe with WooCommerce <= 1.2.1 - Unauthenticated Payment Bypass via Transaction ID ReuseIntegrate PhonePe with WooCommerce
- CVE-2026-71327Traefik: Gateway API route identity collision allows cross-namespace backend hijackingtraefik · github.com/traefik/traefik +2
- CVE-2026-7406BMP File Parsing Untrusted Pointer Dereference in certain Autodesk productsAutodesk Revit · Autodesk AutoCAD +1
- CVE-2026-11803PDF File Parsing Vulnerabilities in Certain Autodesk Desktop ProductsAutodesk Revit · Autodesk AutoCAD +1
- CVE-2026-8325PDF File Parsing Vulnerabilities in Certain Autodesk Desktop ProductsAutodesk Revit · Autodesk AutoCAD +1
- CVE-2026-1289PDF File Parsing Vulnerabilities in Certain Autodesk Desktop ProductsAutodesk Revit · Autodesk AutoCAD +1
- CVE-2026-71324Traefik: Cross-user response poisoning via proxied CONNECT on Traefik's shared backend keep-alive pooltraefik · github.com/traefik/traefik/v2 +2
- CVE-2026-43628llama.cpp b3978–b9058 Integer Underflow via DRY Samplerggml-org llama.cpp
- CVE-2026-43627llama.cpp b1283–b9058 Integer Overflow in llama_batch_init() Functionggml-org llama.cpp
- CVE-2026-70640llama.cpp b1886–b7445 Race Condition Use-After-Free via llama-android.cppggml-org llama.cpp
- CVE-2026-7867Udisks2: udisks2: local privilege escalation via as-user option spoofingudisks · Red Hat Enterprise Linux
- CVE-2026-70638llama.cpp b1886–b7445 Integer Overflow via new_1batch() in llama-android.cppggml-org llama.cpp
- CVE-2026-53984Ground Station prior to 0.6.0 Unauthenticated Database Wipe and Arbitrary Data Injection via Socket.IO database_backup full_restore ActionEfstratios Goudelis Ground Station
- CVE-2026-43622llama.cpp b1886–b7445 Double Free via llama-android.cppggml-org llama.cpp
- CVE-2026-53985Ground Station prior to 0.6.0 Unauthenticated DoS via service_control Socket.IOEfstratios Goudelis Ground Station
- CVE-2026-5423Subscription Authentication Bypass via Unverified connectionParams.jwtneo4j graphql
- CVE-2026-18258Authorization Bypass Through User-Controlled Key in eScriptoriumScripta eScriptorium
- CVE-2026-18277Missing Authorization in eScriptoriumScripta eScriptorium
- CVE-2026-18359Server-Side Request Forgery (SSRF) in eScriptoriumScripta eScriptorium
- CVE-2026-3430Creative Mail 1.6.5 - 1.6.9 - Unauthenticated SQLiCreative Mail
- CVE-2026-18427@fastify/static vulnerable to route guard bypass via non-canonical path segments@fastify/static
- CVE-2026-68750Quadratic sibling re-flattening in the html_sanitize_ex traversal engine allows CPU-exhaustion denial of servicerrrene html_sanitize_ex
- CVE-2026-68749Quadratic regex backtracking in the html_sanitize_ex CSS scrubber allows CPU-exhaustion denial of servicerrrene html_sanitize_ex
- CVE-2026-53977OpenChamber 1.11.7 Unauthenticated DoS via /api/system/shutdownBohdan Triapitsyn OpenChamber
- CVE-2026-70646aiosend: Deserialization of request body before signature verification (Pre-auth DoS) in webhook handlervovchic17 aiosend · aiosend
- CVE-2025-49506Apache Portable Runtime Utility: apr_password_validate() vulnerable to timing attackApache Software Foundation Apache Portable Runtime Utility
- CVE-2026-34501Apache Portable Runtime Utility: Heap buffer overflow in APR redis clientApache Software Foundation Apache Portable Runtime Utility
- CVE-2026-34502Apache Portable Runtime Utility: Heap buffer overflow in APR memcached clientApache Software Foundation Apache Portable Runtime Utility
- CVE-2026-66711WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.5.6 - Cross Site Scripting (XSS) vulnerabilityAmir Helzer WooCommerce Multilingual & Multicurrency
- CVE-2026-66710WordPress e2pdf plugin <= 1.32.40 - Local File Inclusion vulnerabilitye2pdf
- CVE-2026-66708WordPress Total Upkeep plugin <= 1.17.2 - Broken Access Control vulnerabilityBoldGrid Total Upkeep
- CVE-2026-66707WordPress Facebook for WooCommerce plugin <= 3.7.5 - Cross Site Scripting (XSS) vulnerabilityFacebook for WooCommerce
- CVE-2026-66705WordPress Facebook for WordPress plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerabilityFacebook for WordPress
- CVE-2026-66702WordPress Rank Math SEO plugin <= 1.0.274.1 - Cross Site Scripting (XSS) vulnerabilityRank Math SEO
- CVE-2026-66694WordPress Thrive Architect plugin <= 10.9.3.1 - Cross Site Scripting (XSS) vulnerabilityThrive Themes Coupon Thrive Architect
- CVE-2026-66690WordPress GiveWP plugin <= 4.16.5 - Cross Site Scripting (XSS) vulnerabilityNexcess GiveWP
- CVE-2026-66664WordPress SEO plugin by Squirrly SEO plugin <= 14.2.0 - Cross Site Scripting (XSS) vulnerabilitySEO Squirrly SEO Plugin by Squirrly SEO
- CVE-2026-66663WordPress WP Data Access plugin <= 5.5.79 - Cross Site Scripting (XSS) vulnerabilityPassionate Programmer Peter WP Data Access
- CVE-2026-66470WordPress Frontend Admin by DynamiApps plugin <= 3.29.10 - Broken Access Control vulnerabilityShabti Kaplan Frontend Admin by DynamiApps
- CVE-2026-66457WordPress Events Manager plugin <= 7.4.2 - Cross Site Scripting (XSS) vulnerabilityPixelite Events Manager
- CVE-2026-66440WordPress WPIDE – File Manager & Code Editor plugin <= 3.5.7 - Cross Site Scripting (XSS) vulnerabilityXplodedThemes WPIDE – File Manager & Code Editor
- CVE-2026-66439WordPress Advanced AJAX Product Filters plugin <= 3.2.0.3 - Cross Site Scripting (XSS) vulnerabilityBeRocket Advanced AJAX Product Filters
- CVE-2026-65570WordPress Login with phone number plugin <= 1.8.70 - Bypass vulnerability vulnerabilityHamid Alinia Login with phone number
- CVE-2026-65569WordPress WP Job Portal plugin <= 2.5.6 - SQL Injection vulnerabilitywpjobportal WP Job Portal
- CVE-2026-65565WordPress Survey Maker plugin <= 5.2.3.3 - Cross Site Scripting (XSS) vulnerabilityAys Pro Survey Maker
- CVE-2026-65560WordPress Houzez Property Feed plugin <= 2.5.48 - Cross Site Scripting (XSS) vulnerabilityProperty Hive Houzez Property Feed
- CVE-2026-65559WordPress Order Delivery Date for WooCommerce plugin <= 4.6.0 - Privilege Escalation vulnerabilitytychesoftwares Order Delivery Date for WooCommerce
- CVE-2026-65554WordPress AnsPress – Question and answer plugin 4.4.4 - Broken Access Control vulnerabilitylattepress AnsPress – Question and answer
- CVE-2026-65549WordPress Jeg Elementor Kit plugin <= 3.2.10 - PHP Object Injection vulnerabilityjegtheme Jeg Kit for Elementor
- CVE-2026-65545WordPress AI Engine plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerabilityJordy Meow AI Engine
- CVE-2026-65544WordPress Super Socializer plugin <= 7.14.5 - Cross Site Scripting (XSS) vulnerabilityRajat Varlani Super Socializer
- CVE-2026-65543WordPress Vimeo plugin <= 1.2.2 - Sensitive Data Exposure vulnerabilityvimeodev Vimeo
- CVE-2026-65542WordPress Super Socializer plugin <= 7.14.5 - Broken Authentication vulnerabilityRajat Varlani Super Socializer
- CVE-2026-65541WordPress Staff Training plugin <= 1.0.7 - Broken Access Control vulnerabilitysolutioned Staff Training
- CVE-2026-65523WordPress Formidable Forms Signature Online Contract Automation plugin <= 2.0.1 - Insecure Direct Object References (IDOR) vulnerabilityapproveme Formidable Forms Signature Online Contract Automa…
- CVE-2026-65517WordPress Easy PayPal Buy Now Button plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerabilityScott Paterson Easy PayPal Buy Now Button
- CVE-2026-65515WordPress AffiliateWP plugin <= 2.35.0 - Cross Site Scripting (XSS) vulnerabilityAffiliateWP
- CVE-2026-65513WordPress Simply Schedule Appointments plugin <= 1.6.12.10 - Cross Site Scripting (XSS) vulnerabilityNSquared Simply Schedule Appointments
- CVE-2026-65509WordPress wpDataTables plugin <= 7.5.1 - Cross Site Scripting (XSS) vulnerabilitywpDataTables
- CVE-2026-65504WordPress BOX NOW Delivery Croatia plugin <= 3.3.0 - Broken Access Control vulnerabilityivanbebek BOX NOW Delivery Croatia
- CVE-2026-61982WordPress SiteGuard WP Plugin plugin <= 1.8.6 - Cross Site Scripting (XSS) vulnerabilityjp-secure SiteGuard WP Plugin
- CVE-2026-61964WordPress Ninja Tables plugin <= 5.2.9 - Cross Site Scripting (XSS) vulnerabilityWPManageNinja Ninja Tables
- CVE-2026-61963WordPress Media LIbrary Assistant plugin <= 3.38 - Cross Site Scripting (XSS) vulnerabilityDavid Lingren Media LIbrary Assistant
- CVE-2026-61961WordPress EmbedPress plugin <= 4.5.6 - Cross Site Scripting (XSS) vulnerabilityWPDeveloper EmbedPress
- CVE-2026-28183WordPress PublishPress Capabilities plugin <= 2.45.0 - Privilege Escalation vulnerabilityPublishPress Capabilities
- CVE-2026-28177WordPress Popup Maker plugin <= 1.23.0 - Cross Site Scripting (XSS) vulnerabilityCode Atlantic Popup Maker
- CVE-2026-28172WordPress Tracking Code Manager plugin <= 2.6.0 - CSRF to Stored XSS vulnerabilityData443 Risk Mitigation Tracking Code Manager
- CVE-2026-28143WordPress Forminator plugin <= 1.56.0 - Cross Site Scripting (XSS) vulnerabilityWPMU DEV Forminator
- CVE-2026-28141WordPress NextGEN Gallery plugin <= 4.2.3 - Cross Site Scripting (XSS) vulnerabilitySyed Balkhi NextGEN Gallery
- CVE-2026-28140WordPress JetFormBuilder plugin <= 3.6.4.1 - Broken Access Control vulnerabilityjetmonsters JetFormBuilder
- CVE-2026-28111WordPress Forminator plugin <= 1.56.0 - Privilege Escalation vulnerabilityWPMU DEV Forminator
- CVE-2026-28082WordPress JetEngine plugin <= 3.8.13.1 - Cross Site Scripting (XSS) vulnerabilityCrocoblock. Jetimpex JetEngine
- CVE-2026-66712WordPress Simple Membership plugin <= 4.7.8 - Broken Access Control vulnerabilitywp.insider Simple Membership
- CVE-2026-70637LightFTP 2.4 Data Race Condition via ABOR Command in ftpserv.chfiref0x LightFTP
- CVE-2026-16731Authentication and authorization bypass via cryptographic timing side-channel attack in StationScoutOMICRON electronics OMICRON StationScout
- CVE-2026-16315Authentication and authorization bypass via cryptographic timing side-channel attack in StationGuardOMICRON electronics OMICRON StationGuard
- CVE-2026-66733Sonic 3 A.I.R. Unbounded Memory Allocation DoS via ReceivedPacketCacheEukaryot sonic3air
- CVE-2026-66732Sonic 3 A.I.R. Missing Source Address Validation in ConnectionManagerEukaryot sonic3air
- CVE-2026-65551WordPress Breakdance plugin < 2.7 - Broken Access Control vulnerabilitySoflyy Breakdance
- CVE-2026-19036Shibby Tomato wanoptions sub_40F88C os command injectionShibby Tomato
- CVE-2026-19035Shibby Tomato qoslimit new_qoslimit_start os command injectionShibby Tomato
- CVE-2025-15028FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More <= 1.9.2 - Unauthenticated Stored Cross-Site Scriptingwpwax FormGent – Next-Gen AI Form Builder for WordPress wit…
- CVE-2026-57818Apache CXF: OAuth2 Authorization Code Replay via TOCTOU in JCacheCodeDataProviderApache Software Foundation Apache CXF
- CVE-2026-68481Apache CXF: Revocation bypass in DefaultEncryptingOAuthDataProviderApache Software Foundation Apache CXF
- CVE-2026-19034Shibby Tomato qoslimittc_stop.sh new_qoslimit_stop os command injectionShibby Tomato
- CVE-2026-65432Apache CXF: XXE via WSDL/XSD import parsingApache Software Foundation Apache CXF
- CVE-2026-57817Apache CXF: The authorization code hash (c_hash) is not enforced for the hybrid OIDC flowApache Software Foundation Apache CXF
- CVE-2026-64958Apache CXF: Denial of service via message header attachmentsApache Software Foundation Apache CXF
- CVE-2026-57819Apache CXF: No default restriction on the amount of form parameters per messageApache Software Foundation Apache CXF
- CVE-2026-54225Apache CXF: Denial of Service attack via large attachmentsApache Software Foundation Apache CXF
- CVE-2026-55978Improper access control vulnerability in CatchPulseSecureAge CatchPulse
- CVE-2026-18597Blind SSRF on Foxit PDF Services APIFoxit Software Foxit PDF Services API
- CVE-2026-64601ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_urb corrupts anchor list on each resubmissionLinux
- CVE-2026-64599crypto: amlogic - avoid double cleanup in meson_crypto_probe()Linux
- CVE-2026-64598smb/client: Fix error code in smb2_aead_req_alloc()Linux
- CVE-2026-64588fuse-uring: fix data races on ring->readyLinux
- CVE-2026-64587net: ethernet: arc: emac: quiesce interrupts before requesting IRQLinux
- CVE-2026-64586wifi: brcmfmac: drain bus_reset work on device removalLinux
- CVE-2026-64585can: esd_usb: kill anchored URBs before freeing netdevsLinux
- CVE-2026-64584usb: gadget: f_midi: cancel pending IN work before freeing the midi objectLinux
- CVE-2026-64583usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardownLinux
- CVE-2026-18649Gstreamer1-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay rtp depayloadersRed Hat Enterprise Linux
- CVE-2026-13154Essential Blocks < 6.4.0 - Unauthenticated Non-Public Custom Post Type Content Disclosure via queries EndpointGutenberg Essential Blocks
- CVE-2026-13153Essential Blocks < 6.4.0 - Unauthenticated WooCommerce Sales Data Disclosure via REST products EndpointGutenberg Essential Blocks
- CVE-2026-14829Checkimate <= 1.0.13 - Unauthenticated License Deactivation via Hardcoded SecretCheckimate — WooCommerce Checkout, Abandoned Cart Recovery…
- CVE-2026-18050Events Manager < 7.4 - Unauthenticated Pending Upload Disclosure via events-manager/v1/uploadsEvents Manager
- CVE-2026-16734Stripe Payment Forms by WP Full Pay < 8.5.2 - Unauthenticated Payment Intent Amount ManipulationStripe Payment Forms by WP Full Pay
- CVE-2026-16268Newsletters < 4.16 - Unauthenticated Server-Side Request Forgery via SNS Bounce HandlerNewsletters
- CVE-2026-18510TranslatePress <= 3.2.6 - Unauthenticated Stored Cross-Site Scripting via Comment Contentcozmoslabs TranslatePress – Translate Multilingual sites wi…
- CVE-2026-15459WPMU DEV Dashboard <= 5.0.0 - Authentication Bypass to Arbitrary Plugin Installation (Remote Code Execution) via Forged WDP_AUTH HMAC on ?wpmudev-hub= Endpointwpmudev WPMU DEV Dashboard
- CVE-2026-18325Forminator Forms <= 1.56.1 - Unauthenticated Stored Cross-Site Scripting via Forged Upload Record via Select Fieldwpmudev Forminator Forms – Contact Form, Payment Form & Cus…
- CVE-2026-15991File Manager 6.0 - 6.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read and Deletion via 'cmd' Query Parameterbitpressadmin File Manager
- CVE-2026-16636FluentSMTP <= 2.2.95 - Unauthenticated Stored Cross-Site Scripting via Recipient Display Name (to.name) in Email Logswpmanageninja FluentSMTP – WP SMTP Plugin with Amazon SES,…
- CVE-2024-39024In Packetfence 13.2.0, the WebGui interface setting allows authenticated remote code execution.
- CVE-2026-67687Insecure Permissions vulnerability in ics-park v.2.0 allows a remote attacker to escalate privileges via the /system/role/save endpoint in R
Medium, low and unrated 213
- CVE-2026-17264Medixant RadiAnt DICOM Out-of-bounds writeMedixant RadiAnt DICOM
- CVE-2026-71555PILOS: Reverse tabnabbing in room descriptionTHM-Health PILOS
- CVE-2026-71554h2: Duplicate Host header could facilitate request smugglingpython-hyper h2 · h2
- CVE-2026-49391Frappe: Stored XSS in Column Headers via Data Importfrappe
- CVE-2026-71498node-re2: Out-of-bounds heap read in `replace`/`split` via a `Buffer` ending in a truncated multi-byte UTF-8 character → adjacent heap memory disclosed to JavaScriptuhop node-re2 · re2
- CVE-2026-70631FFmpeg 0.5 < 9.0 Uninitialized Heap Memory Read in TIFF DecoderFFmpeg
- CVE-2026-70630FFmpeg 3.0 < 9.0 Uninitialized Heap Memory Read in Screenpresso DecoderFFmpeg
- CVE-2026-70629FFmpeg 3.0 < 9.0 Uninitialized Heap Memory Read in RSCC DecoderFFmpeg
- CVE-2026-71430node-re2: String.prototype.replace(re2, template) aborts the Node process (uncatchable ToLocalChecked on empty MaybeLocal) when the result exceeds V8's max string lengthuhop node-re2 · re2
- CVE-2026-48083OpenReception: Unauthenticated POST /api/log accepts arbitrary content with CRLF injection and no size or rate limitsopen-reception appointment-booking-software
- CVE-2026-48082OpenReception's bootstrap challenge proof-of-work difficulty hardcoded to 16 bits, which enables abuse rate amplificationopen-reception appointment-booking-software
- CVE-2026-71497jsoup: Cleaner may expose markup with custom raw-text elementsjhy jsoup · org.jsoup:jsoup
- CVE-2026-47185Frappe Has Broken Access Control in its Workspace Save APIfrappe
- CVE-2026-61632PyMdown Extensions: Path traversal in the b64 extension lets <img src> read files outside base_pathfacelessuser pymdown-extensions · pymdown-extensions
- CVE-2026-48078OpenReception's schedule endpoint discloses isPublic=false channels and slot availability to unauthenticated callersopen-reception appointment-booking-software
- CVE-2026-48077OpenReception: GET appointment by ID returns full appointment record without authorizationopen-reception appointment-booking-software
- CVE-2026-19110DataGear Chart Name HtmlTplDashboardWidgetHtmlRenderer.java HtmlTplDashboardWidgetHtmlRenderer cross site scriptingDataGear
- CVE-2026-48076OpenReception's bootstrap booking flow allows unauthenticated booking on isPublic=false channelsopen-reception appointment-booking-software
- CVE-2026-48075OpenReception's unauthenticated add-to-tunnel endpoint accepts arbitrary appointment injectionsopen-reception appointment-booking-software
- CVE-2026-19167Integer overflow in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak Google Chrome
- CVE-2026-19161Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leaGoogle Chrome
- CVE-2026-19160Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leaGoogle Chrome
- CVE-2026-19146Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer procGoogle Chrome
- CVE-2026-71478league/commonmark: AttributesExtension href/src unsafe-link filter bypass via embedded control bytesthephpleague commonmark · league/commonmark
- CVE-2026-19108MZ Automation libiec61850 URCB Revalidation reporting.c deleteDataSetValuesShadowBuffer use after freeMZ Automation libiec61850
- CVE-2026-71502Unauthenticated Stored Vue Template Injection Leads to Cross-Site Scripting in CTI-Transmutemisp cti-transmute
- CVE-2026-48074OpenReception: Staff deletion removes pending invites cross-tenant by email matchopen-reception appointment-booking-software
- CVE-2026-54717Silverstripe: XSS in breadcrumbs in page list viewsilverstripe-cms · silverstripe/cms
- CVE-2026-19071itsourcecode Hospital Management System viewappointment.php sql injectionitsourcecode Hospital Management System
- CVE-2026-45573Decidim: Push subscriptions can be abused for server-side requestsdecidim · decidim-core
- CVE-2026-45572Decidim: HTML content blocks allow stored script executiondecidim · decidim-core
- CVE-2026-71439Mermaid radar diagrams are vulnerable to DoSmermaid-js mermaid · mermaid
- CVE-2026-19070itsourcecode Hospital Management System viewadmin.php sql injectionitsourcecode Hospital Management System
- CVE-2026-71438Mermaid configuration APIs allow prototype pollutionmermaid-js mermaid · mermaid
- CVE-2026-50159Mermaid allows CSS injection applying to sibling elements of the diagrammermaid-js mermaid · mermaid
- CVE-2026-71437Mermaid Architecture diagrams are vulnerable to prototype pollutionmermaid-js mermaid · mermaid
- CVE-2026-71436Mermaid XY Charts are vulnerable to an infinite loop DoSmermaid-js mermaid · mermaid
- CVE-2026-19069itsourcecode Hospital Management System treatmentrecord.php sql injectionitsourcecode Hospital Management System
- CVE-2026-71435Statamic: Stored Cross-Site Scripting in Automagic Form Notification Email Templatestatamic cms · statamic/cms
- CVE-2026-71434Statamic: Missing file upload validation on frontend forms allows uploading disallowed file typesstatamic cms · statamic/cms
- CVE-2026-45415Decidim: CSV census record endpoints improper authorizationdecidim · decidim-verifications
- CVE-2026-64662Statamic: Missing authorization on navigation endpoint allows disclosure of restricted entriesstatamic cms · statamic/cms
- CVE-2026-64663Statamic: Unsafe method invocation via Antlers template resolution allows data destructionstatamic cms · statamic/cms
- CVE-2026-64664Statamic: Missing authorization on Control Panel endpoint allows disclosure of user existencestatamic cms · statamic/cms
- CVE-2026-70557diboot-core Authenticated Arbitrary Field Read via loadRelatedData Discloses Password Hashes and Saltsdiboot-core
- CVE-2026-19068itsourcecode Hospital Management System treatmentdetail.php sql injectionitsourcecode Hospital Management System
- CVE-2026-71433LangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite storeslangchain-ai langgraph · langchain-ai langgraph-checkpoi… +3
- CVE-2026-48071OpenReception's client PIN challenge throttle is keyed by emailHash only, allowing cross-tenant lockoutopen-reception appointment-booking-software
- CVE-2026-19067itsourcecode Hospital Management System treatment.php sql injectionitsourcecode Hospital Management System
- CVE-2026-64655GitHub CLI: Attestation Verification Bypass via Unescaped Regex Metacharacters in SAN Matchingcli · github.com/cli/cli/v2 +1
- CVE-2026-19066SourceCodester Online Examination & Learning Management System view_students.php authorizationSourceCodester Online Examination & Learning Management Sys…
- CVE-2026-41861Arbitrary Root File Write via Path Traversal in BOSH agentCloudFoundry Foundation BOSH
- CVE-2026-64654GitHub CLI: Terminal escape sequence injection in multiple `gh` commandscli
- CVE-2026-19065SourceCodester Online Examination & Learning Management System upload_files.php unrestricted uploadSourceCodester Online Examination & Learning Management Sys…
- CVE-2026-64653GitHub CLI: Unescaped variable components in request URLs could allow path traversalcli · github.com/cli/cli/v2 +1
- CVE-2026-64652GitHub CLI: Partial token disclosure in `gh auth status` outputcli · github.com/cli/cli +1
- CVE-2026-68480x86/bugs: Make Safe-RET robust against interrupt injectionLinux
- CVE-2025-12317Improper Token Revocation via SOAP Services in Multiple WSO2 Products Allows Retained Access PrivilegesWSO2 Enterprise Integrator · WSO2 Identity Server
- CVE-2025-6508User Interface Misrepresentation via Swagger UI Try-out Console in WSO2 API Manager Allows Sensitive Information Exposure or Unintended RequestsWSO2 API Manager
- CVE-2024-6541Information Disclosure and Integrity Violation via Improper Message Context Handling in Multiple WSO2 ProductsWSO2 Micro Integrator · WSO2 Enterprise Integrator +2
- CVE-2026-19064SourceCodester Online Examination & Learning Management System view.php authorizationSourceCodester Online Examination & Learning Management Sys…
- CVE-2026-64677Anki's local HTTP server is vulnerable to directory traversal attacksankitects anki
- CVE-2025-15674Content Protector (Passster) < 4.3.7 - Contributor+ Protected Content Disclosure via Core REST APIPassster
- CVE-2026-19062chiuwingyan house selectall.action sql injectionchiuwingyan house
- CVE-2026-16067Event Booking Manager for WooCommerce (Pro) < 5.0.3 - Unauthenticated Payment Bypass via Client-Controlled Ticket PriceEvent Booking Manager for WooCommerce
- CVE-2026-15256Ninja Forms < 3.14.10 - Unauthenticated Arbitrary Shortcode Execution via Query-String Populated Field DefaultNinja Forms
- CVE-2026-13342Security Optimizer – The All-In-One Protection Plugin < 1.6.5 - Login Access IP Allowlist Bypass via post_passwordSecurity Optimizer
- CVE-2026-15149WP Hotel Booking < 2.3.3 - Unauthenticated Payment Bypass via Price ManipulationWP Hotel Booking
- CVE-2026-15208RegistrationMagic < 6.0.9.5 - Unauthenticated Payment Bypass via Amount-Blind PayPal VerificationRegistrationMagic
- CVE-2026-15147Five Star Restaurant Reservations < 2.7.23 - Unauthenticated Payment Bypass and Booking Confirmation via IDORFive Star Restaurant Reservations
- CVE-2026-71447Stored Cross-Site Scripting in Chat and Forum Translation Controls in ail-frameworkail-project ail-framework
- CVE-2026-14936Simple Membership < 4.7.7 - Unauthenticated Payment Bypass via Missing PayPal IPN Receiver VerificationSimple Membership
- CVE-2026-14831Easy Booking < 3.5.0 - Unauthenticated Minimum Booking Duration BypassEasy Booking
- CVE-2026-19127Insufficient verification of lifetime-deal redemption codes allows forgery of permanent paid subscriptionsGitroomHQ postiz-app
- CVE-2026-12901GetPaid < 2.8.55 - Unauthenticated Worldpay Payment Bypass via Insufficient IPN VerificationGetPaid
- CVE-2026-12501WP Travel Engine < 6.8.2 - Unauthenticated Payment Bypass via Missing PayPal IPN Receiver and Amount VerificationWP Travel Engine
- CVE-2026-15152WP Hotel Booking < 2.3.2 - Unauthenticated PayPal Payment BypassWP Hotel Booking
- CVE-2026-14225Easy Appointments < 3.12.28 - Contributor+ Shortcode Allowlist BypassEasy Appointments
- CVE-2026-14842Events Made Easy < 3.1.2 - Unauthenticated Payment BypassEvents Made Easy
- CVE-2026-19061Insta InstaKNXServiceApp Firmware Update CreateWebClientAndDownloadFileList data authenticityInstaKNXServiceApp
- CVE-2026-71446Stored Cross-Site Scripting in AIL Framework Domain Screenshot Viewail-project ail-framework
- CVE-2026-14306Tutor LMS < 3.9.14 - Subscriber+ Paid Course Content Disclosure via Enrollment Check BypassTutor LMS
- CVE-2026-11361Formidable Forms < 6.32.1 - Unauthenticated Payment Bypass via PayPal APPROVAL_PENDING Subscription StatusFormidable Forms
- CVE-2026-19060FoundationAgents MetaGPT code injectionFoundationAgents MetaGPT
- CVE-2026-5336Dataverse Integration < 2.91 - Contributor+ Server-Side Template Injection (SSTI) to Information DisclosureDataPress
- CVE-2026-71326Traefik: BasicAuth singleflight key collision allows authenticated identity spoofingtraefik · github.com/traefik/traefik +2
- CVE-2026-18487Epiphany: address bar / host spoofing via userinfo in ephy_uri_get_decoded_host()GNOME Epiphany
- CVE-2026-19059FoundationAgents MetaGPT editor.py read path traversalFoundationAgents MetaGPT
- CVE-2026-71325Traefik: `allowCrossNamespace=false` bypass via `@kubernetescrd` TraefikService backendReftraefik · github.com/traefik/traefik +2
- CVE-2026-7405TIF File Parsing Out-of-Bounds Read in certain Autodesk productsAutodesk Revit · Autodesk AutoCAD +1
- CVE-2026-43630llama.cpp b4882-b8487 Out-of-Bounds Read Information Disclosureggml-org llama.cpp
- CVE-2026-19058FoundationAgents MetaGPT data_interpreter.py DataInterpreter code injectionFoundationAgents MetaGPT
- CVE-2026-70639llama.cpp b1886–b7445 Null Pointer Dereference DoS via llama-android.cppggml-org llama.cpp
- CVE-2026-19054Lspace-io lspace-server Repositories File API repository.ts deleteFile path traversalLspace-io lspace-server
- CVE-2026-18275Authorization Bypass Through User-Controlled Key in eScriptoriumScripta eScriptorium
- CVE-2026-18276Missing Authorization in eScriptoriumScripta eScriptorium
- CVE-2026-19047NocteDefensor LudusMCP ludus_cli_execute cliWrapper.ts executeCommand command injectionNocteDefensor LudusMCP
- CVE-2026-68747CSS sanitizer allowlist bypass in html_sanitize_ex via non-declaration inputrrrene html_sanitize_ex
- CVE-2026-66829html_sanitize_ex HTML5 scrubber keeps attacker-supplied meta refresh, allowing forced cross-origin redirectionrrrene html_sanitize_ex
- CVE-2026-66370html_sanitize_ex HTML5 scrubber keeps attacker-supplied form-association attributes, allowing form hijackingrrrene html_sanitize_ex
- CVE-2026-66843html_sanitize_ex HTML5 scrubber keeps attacker-supplied `<object>` elements, allowing untrusted content embeddingrrrene html_sanitize_ex
- CVE-2026-19046NocteDefensor LudusMCP ludus_environment_guides_search ludusEnvironmentGuidesSearch.ts path traversalNocteDefensor LudusMCP
- CVE-2026-19045NocteDefensor LudusMCP get_credential_from_user secretDialog.ts SecretDialog.showSecretDialog command injectionNocteDefensor LudusMCP
- CVE-2026-66706WordPress Subscribe to Comments plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerabilityMark Jaquith Subscribe to Comments
- CVE-2026-66703WordPress MailOptin plugin <= 1.2.78.0 - Cross Site Scripting (XSS) vulnerabilityproperfraction MailOptin
- CVE-2026-66701WordPress Profile Builder plugin <= 3.16.5 - Broken Access Control vulnerabilityCozmoslabs Profile Builder
- CVE-2026-66699WordPress Dokan plugin <= 5.0.10 - Broken Access Control vulnerabilityDokan
- CVE-2026-66696WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.7.8 - Sensitive Data Exposure vulnerabilityNexcess Gutenberg Blocks by Kadence Blocks
- CVE-2026-66695WordPress W3 Total Cache plugin <= 2.10.2 - Path Traversal vulnerabilityBoldGrid W3 Total Cache
- CVE-2026-66692WordPress Colissimo Officiel : Méthodes de livraison pour WooCommerce plugin <= 2.10.0 - Insecure Direct Object References (IDOR) vulnerabilityColissimo Officiel : Méthodes de livraison pour WooCommerce
- CVE-2026-66688WordPress Ultimate Addons for Elementor plugin <= 1.45.2 - Cross Site Scripting (XSS) vulnerabilityBrainstorm Force Ultimate Addons for Elementor
- CVE-2026-66686WordPress Plugins Garbage Collector (Database Cleanup) plugin <= 0.14 - Cross Site Request Forgery (CSRF) vulnerabilityVladimir Garagulya Plugins Garbage Collector
- CVE-2026-66685WordPress Featured Video Plus plugin <= 2.3.3 - Sensitive Data Exposure vulnerabilityAlex Featured Video Plus
- CVE-2026-66684WordPress Export Import Menus plugin <= 1.9.2 - Sensitive Data Exposure vulnerabilityAkshay Menariya Export Import Menus
- CVE-2026-66683WordPress Custom CSS and JavaScript plugin <= 2.0.16 - Sensitive Data Exposure vulnerabilityWP Zone Custom CSS and JavaScript
- CVE-2026-66681WordPress theme My Login plugin <= 7.1.14 - Cross Site Request Forgery (CSRF) vulnerabilityJeff Farthing Theme My Login
- CVE-2026-66678WordPress Advanced Custom Fields: Font Awesome Field plugin <= 6.1.1 - Broken Access Control vulnerabilityJustin Kruit Advanced Custom Fields: Font Awesome Field
- CVE-2026-66452WordPress Legal Text Connector of the IT-Recht Kanzlei plugin <= 1.0.13 - Broken Access Control vulnerabilityLegal Text Connector of the IT-Recht Kanzlei
- CVE-2026-66451WordPress WP Event SOlution plugin <= 4.1.9 - Broken Authentication vulnerabilityArraytics WP Event SOlution
- CVE-2026-66425WordPress Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder plugin <= 1.9.0 - Broken Authentication vulnerabilitySaad Iqbal Gutena Forms – Contact Form, Survey Form, Feedba…
- CVE-2026-65502WordPress Element Pack Elementor Addons plugin <= 8.7.13 - Captcha Bypass vulnerabilitybdthemes Element Pack Elementor Addons
- CVE-2026-61959WordPress Business Directory plugin <= 6.4.24 - Cross Site Scripting (XSS) vulnerabilityStrategy11 Team Business Directory
- CVE-2026-32548WordPress SureCart plugin <= 4.6.2 - Broken Access Control vulnerabilitySureCart
- CVE-2026-32469WordPress CAPTCHA 4WP plugin <= 7.6.0 - Captcha Bypass vulnerabilityWPKube CAPTCHA 4WP
- CVE-2026-28180WordPress Mercado Pago payments for WooCommerce plugin <= 8.9.0 - Insecure Direct Object References (IDOR) vulnerabilityMercado Pago payments for WooCommerce
- CVE-2026-28179WordPress FiboSearch plugin <= 1.33.0 - Cross Site Scripting (XSS) vulnerabilityDamian Góra FiboSearch
- CVE-2026-28178WordPress Powerkit plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerabilitycodesupplyco Powerkit
- CVE-2026-28169WordPress YITH WooCommerce Zoom Magnifier plugin <= 2.52.0 - Sensitive Data Exposure vulnerabilityYITHEMES YITH WooCommerce Zoom Magnifier
- CVE-2026-28146WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.14 - Arbitrary File Download vulnerabilityUnlimited Elements For Elementor
- CVE-2026-25403WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Broken Access Control vulnerabilitybdthemes Ultimate Store Kit Elementor Addons
- CVE-2026-15246RealHomes Memberships < 3.1.0 - Subscriber+ Membership Payment BypassRealHomes Memberships
- CVE-2026-19044LeeSinLiang godot-mcp create_scene/add_node index.ts executeOperation command injectionLeeSinLiang godot-mcp
- CVE-2026-64993Dell RVTools versions prior to 4.8.1, contains an improper certificate validation vulnerability in the collector.Dell RVTools
- CVE-2026-19041MissionSquad mcp-api NPM Package Version packages.ts this.packageService.installPackage command injectionMissionSquad mcp-api
- CVE-2026-18501UsersWP <= 1.2.69 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Badge Widget Variable Substitutionstiofansisland UsersWP – Front-end login form, User Registr…
- CVE-2026-19040MissionSquad mcp-api dcrClients.ts server-side request forgeryMissionSquad mcp-api
- CVE-2026-16316Malformed IEC 61850 Sampled Values frames cause partial denial of service in StationGuardOMICRON electronics OMICRON StationGuard
- CVE-2026-19039Kino-Kafkaesque ssh-mcp-server SSH index.ts ssh_exec command injectionKino-Kafkaesque ssh-mcp-server
- CVE-2026-19038MonomythDevelopment la-forge-mcp screenshot_element Tool index.ts screenshotElement path traversalMonomythDevelopment la-forge-mcp
- CVE-2026-15599Arbitrary Process Termination in TÜBİTAK BİLGEM's pardus-domain-joinerTÜBİTAK BİLGEM Software Technologies Research Institute par…
- CVE-2026-19037WonderTrader Internal Limit Order Book Cache MatchEngine.cpp update_lob behavioral workflowWonderTrader
- CVE-2026-0673Element Pack Addons for Elementor <= 8.3.15 - Unauthenticated SMTP Header Injectionbdthemes Element Pack Addons for Elementor – Elementor Widg…
- CVE-2026-70556Hubzilla version prior to 11.4 CSRF via OAuth2 /authorize Endpoint App RegistrationHubzilla
- CVE-2026-8166Stored XSS in Logo Software's e-Logo Purchasing PortalLogo Software Industry and Trade e-Logo Purchasing Portal
- CVE-2025-9266Accelerate <= 1.5.3 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installationthemegrill Accelerate
- CVE-2026-11983Ad Inserter <= 2.8.16 - Missing Authorization to Block Visibility Bypass via ai_ajaxspacetime Ad Inserter – Ad Manager & AdSense Ads
- CVE-2026-5391LatePoint <= 5.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode AttributesAppointment Booking Plugin – LatePoint | Calendar & Schedul…
- CVE-2026-5158PostX <= 5.0.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Comments Blockwpxpo Post Grid Gutenberg Blocks – PostX
- CVE-2026-55980Denial-of-service vulnerability in CatchPulseSecureAge CatchPulse
- CVE-2026-55979Improper access control check in CatchPulse's named pipe communication interfaceSecureAge CatchPulse
- CVE-2026-64640Apache Polaris: register endpoint reads attacker-controlled storage location before allowed-locations validationApache Software Foundation Apache Polaris · apache-polaris
- CVE-2026-19022OpenHands send_pull_request.py initialize_repo command injectionOpenHands
- CVE-2026-19021SourceCodester Computer Repair Shop Management System Master.php delete_product sql injectionSourceCodester Computer Repair Shop Management System
- CVE-2026-19020itsourcecode Hospital Management System servicetype.php sql injectionitsourcecode Hospital Management System
- CVE-2026-0637Sensitive Information Disclosure via Event Publisher Logging in Multiple WSO2 ProductsWSO2 API Manager · WSO2 Traffic Manager +6
- CVE-2025-13394Cross-Site Request Forgery via Ajax Processor Endpoints in Multiple WSO2 Products Enables Unauthorized ActionsWSO2 Identity Server · WSO2 API Manager +44
- CVE-2026-18915Exposure of OTP Secret Through Process Command-Line Arguments in TÜBİTAK BİLGEM's eta-otp-lockTÜBİTAK BİLGEM Software Technologies Research Institute eta…
- CVE-2025-13909Information Disclosure via Multi-Tenant Authentication Flows in WSO2 Identity Server Allows Cross-Tenant PII ExposureWSO2 Identity Server · WSO2 Carbon Identity Application… +3
- CVE-2025-12627Improper Refresh Token Implementation via User Impersonation Flow in WSO2 Identity Server Enables Continued Unauthorized ActionsWSO2 Identity Server · WSO2 Carbon OAuth
- CVE-2025-14779Improper Access Control via Secret Type Management API in WSO2 Identity ServerWSO2 Identity Server · WSO2 Carbon Identity API Server S… +1
- CVE-2025-11850Improper Implicit Association via User Store Initialization in WSO2 Identity Server [Identity Confusion / External IDP Use]WSO2 Identity Server · WSO2 Token Exchange Grant Type For O…
- CVE-2025-13736Username Enumeration via Login Interface in Multiple WSO2 Products Allows User Account DiscoveryWSO2 Identity Server as Key Manager · WSO2 Identity Serv… +3
- CVE-2024-10302Improper Input Validation via Signup Process in Multiple WSO2 Products Enables Content Manipulation and Data ExposureWSO2 API Control Plane · WSO2 Traffic Manager +6
- CVE-2024-6832Account Lockout Failure via Secondary User Store Inaccessibility in Multiple WSO2 Products Allows Brute Force AttacksWSO2 Enterprise Integrator · WSO2 API Control Plane +7
- CVE-2024-8995Authorization Code issued for Deleted User reuse in Multiple WSO2 Products Allows Unauthorized AccessWSO2 API Manager · WSO2 Traffic Manager +6
- CVE-2026-19019poco-ai poco-agent Claude File workspace.py WorkspaceManager._setup_session_persistence cleanuppoco-ai poco-agent
- CVE-2026-19011TinyAGI agents.ts buildSystemPrompt file inclusionTinyAGI
- CVE-2026-64604KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest modeLinux
- CVE-2026-64603platform/x86: intel-hid: Protect ACPI notify handler against recursionLinux
- CVE-2026-64602iio: adc: spear: Initialize completion before requesting IRQLinux
- CVE-2026-64596libfs: set SB_I_NOEXEC and SB_I_NODEV by default in init_pseudo()Linux
- CVE-2026-64595HID: hid-lenovo-go: cancel cfg_setup work in hid_go_cfg_remove()Linux
- CVE-2026-64594usb: gadget: f_fs: initialize reset_work at allocation timeLinux
- CVE-2026-64593btrfs: do not trim a device which is not writeableLinux
- CVE-2026-64592riscv: mm: Unconditionally sfence.vma for spurious faultLinux
- CVE-2026-64591iommu/vt-d: Avoid WARNING in sva unbind pathLinux
- CVE-2026-64590dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warningLinux
- CVE-2026-64589i2c: core: fix NULL-deref on adapter registration failureLinux
- CVE-2026-19010TinyAGI Message API Endpoint index.ts processMessage authorizationTinyAGI
- CVE-2026-19009TinyAGI Message API Endpoint response.ts collectFiles file inclusionTinyAGI
- CVE-2026-19008mf-yang openclaw-cn apply_patch Tool sandbox-paths.ts assertNoSymlinkEscape link followingmf-yang openclaw-cn
- CVE-2026-19007mf-yang openclaw-cn reply-elevated.ts isApprovedElevatedSender privileges managementmf-yang openclaw-cn
- CVE-2026-14204Google Authenticator < 0.56 - 2FA Secret Overwrite via CSRFGoogle Authenticator
- CVE-2026-13703SEO Redirection Plugin – 301 Redirect Manager < 9.19 - Subscriber+ Redirect Rule DisclosureSEO Redirection Plugin
- CVE-2025-15678Nexter Blocks < 5.0.2 - Author+ Stored XSS via SVG UploadNexter Blocks
- CVE-2026-16537Slick Slider < 0.5.3 - Contributor+ Stored XSS via Gallery ShortcodeSlick Slider
- CVE-2026-18395Child Pages Card < 1.09 - Contributor+ Stored XSS via Shortcode AttributesChild Pages Card
- CVE-2026-16065Welcart e-Commerce < 2.11.32 - Editor+ SQL Injection via CSV ImportWelcart e-Commerce
- CVE-2026-19006mf-yang openclaw-cn Ggateway Exec Approval Flow bash-tools.exec.ts authorizationmf-yang openclaw-cn
- CVE-2026-11588EONSR AEO Agent <= 3.7.9 - Unauthenticated Stored XSS via Scheduled Post CreationEONSR AEO Agent
- CVE-2026-16954AI Engine < 3.6.4 - Editor+ Sensitive Information Disclosure of API Key and Bearer TokensAI Engine
- CVE-2026-16290ProfileGrid < 6.0.0.0 - Unauthenticated Group Member List Disclosure via pm_get_all_users_from_groupProfileGrid
- CVE-2026-14547Estatik Real Estate Plugin < 4.3.3 - Unauthenticated Arbitrary-Recipient Mail Relay via Request FormEstatik Real Estate Plugin
- CVE-2026-14240Tourmaster < 5.4.9 - Unauthenticated Sensitive Data Disclosure via Order Exporttourmaster
- CVE-2026-14314PeproDev WooCommerce Receipt Uploader <= 2.8.0 - Unauthenticated Image Attachment Disclosure via IDORPeproDev WooCommerce Receipt Uploader
- CVE-2026-14313PeproDev WooCommerce Receipt Uploader <= 2.8.0 - Unauthenticated Order Receipt Tampering via IDORPeproDev WooCommerce Receipt Uploader
- CVE-2026-19005nanocoai NanoClaw Child-Agent Creation create-agent.ts handleCreateAgent privileges managementnanocoai NanoClaw
- CVE-2026-18967Keycloak-services: keycloak-services: saml onetimeuse assertion replay in idp-initiated broker flowRed Hat Build of Keycloak · Red Hat JBoss Enterprise App… +1
- CVE-2026-18400Slider, Gallery, and Carousel by MetaSlider <= 3.111.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'delay' Post Meta SettingSlider, Gallery, and Carousel by MetaSlider – Image Slider,…
- CVE-2026-19000JeecgBoot Anonymous Chat Attachment send server-side request forgeryJeecgBoot
- CVE-2026-18998cosmicstack-labs mercury-agent delegate_task Tool sub-agent.ts SubAgent.run improper authorizationcosmicstack-labs mercury-agent
- CVE-2026-18997cosmicstack-labs mercury-agent bg agent.ts Agent.handleBgCommand authorizationcosmicstack-labs mercury-agent
- CVE-2026-18996cosmicstack-labs mercury-agent run_command permissions.ts PermissionManager.checkShellCommand privileges assignmentcosmicstack-labs mercury-agent
- CVE-2026-18995netease-youdao LobsterAI MEDIA Path artifactParser.ts parseMediaTokensFromText information disclosurenetease-youdao LobsterAI
- CVE-2026-18909A stack-based buffer overflow vulnerability exists in ELAN Microelectronics Corp.ELAN Microelectronics ELAN Smart-Pad
- CVE-2026-18993NousResearch hermes-agent Memory Toolset model_tools.py access controlNousResearch hermes-agent
- CVE-2026-18992zhayujie CowAgent Self-Evolution Review Agent executor.py _select_tools authorizationzhayujie CowAgent
- CVE-2026-18991nanocoai NanoClaw send_file core.ts path traversalnanocoai NanoClaw
- CVE-2026-18990letta-ai LettaBot API Status Route server.ts missing authenticationletta-ai LettaBot
- CVE-2026-18980nearai ironclaw shell.rs classify_command_risk command injectionnearai ironclaw
- CVE-2026-18976NousResearch hermes-agent disabled_toolsets agent_init.py get_tool_definitions privileges assignmentNousResearch hermes-agent
- CVE-2026-18974heshengtao super-agent-party execute_tool_manually Endpoint server.py get_file_content information disclosureheshengtao super-agent-party
- CVE-2026-18973heshengtao super-agent-party extension_proxy Route server.py sanitize_proxy_url server-side request forgeryheshengtao super-agent-party