# CVEs published 2026-08-13

606 CVEs were published on August 13, 2026: 76 critical, 270 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2026-19761](https://cve.now/CVE-2026-19761.md): DTStack Taier Upload Controller UploadController.java MultipartFile.getOriginalFilename path traversal (CVSS 5.1, DTStack Taier)
- [CVE-2026-19758](https://cve.now/CVE-2026-19758.md): dromara lamp-cloud chunk-check endpoint FileChunkController.java path traversal (CVSS 6.9, dromara lamp-cloud)
- [CVE-2026-19757](https://cve.now/CVE-2026-19757.md): Dromara lamp-cloud File-Upload Controller FileAnyoneController.java path traversal (CVSS 6.9, Dromara lamp-cloud)
- [CVE-2026-19756](https://cve.now/CVE-2026-19756.md): Dromara lamp-cloud Code Generator DefGenProjectController.java path traversal (CVSS 5.3, Dromara lamp-cloud)
- [CVE-2026-19753](https://cve.now/CVE-2026-19753.md): Model Context Protocol mcp-rdf-explorer MCP Server server.py explore\_url server-side request forgery (CVSS 6.9, Model Context Protocol mcp-rdf-explorer)
- [CVE-2026-73305](https://cve.now/CVE-2026-73305.md): Budibase: Privilege escalation via public role assignment API missing app-level authorization (CVSS 8.8, budibase · @budibase/server)
- [CVE-2026-73304](https://cve.now/CVE-2026-73304.md): Budibase: SSO OAuth2 Token Leakage via User Metadata Endpoints to Power-Role Users (CVSS 4.9, budibase · @budibase/server)
- [CVE-2026-73408](https://cve.now/CVE-2026-73408.md): Budibase: MySQL DESCRIBE Backtick Injection via multipleStatements in Database Connector (CVSS 7.6, budibase · @budibase/server)
- [CVE-2026-73302](https://cve.now/CVE-2026-73302.md): Budibase: OIDC SSO account takeover: incoming identity linked by email without checking email\_verified (CVSS 9.0, budibase · @budibase/server)
- [CVE-2026-73489](https://cve.now/CVE-2026-73489.md): Russh: Post-auth remote panic via pty-req with more than 130 terminal-mode records (CVSS 4.3, Eugeny russh · russh)
- [CVE-2026-73421](https://cve.now/CVE-2026-73421.md): NextAuth.js: Configuration errors can cause existence-based auth checks to fail open (auth object populated with an error) (CVSS 9.1, nextauthjs next-auth · next-auth)
- [CVE-2026-73417](https://cve.now/CVE-2026-73417.md): JupyterLab: Cross-site scripting (XSS) via crafted settings file (\`overrides.json\`) (CVSS 8.6, jupyterlab)
- [CVE-2026-73416](https://cve.now/CVE-2026-73416.md): jupyterlab: PyPI extension blocklist package-name canonicalization bypass (CVSS 6.1, jupyterlab)
- [CVE-2026-73428](https://cve.now/CVE-2026-73428.md): Trix: Stored XSS via HTMLParser attribute injection on paste (CVSS 4.6, basecamp trix · trix +1)
- [CVE-2026-73420](https://cve.now/CVE-2026-73420.md): NextAuth.js: Email normalizer validates the address before Unicode normalization, allowing a homoglyph @ bypass (CVSS 9.1, nextauthjs next-auth · @auth core +2)
- [CVE-2026-73843](https://cve.now/CVE-2026-73843.md): OpenChoreo: Unauthenticated access to data-plane operations via OpenChoreo cluster-gateway management APIs (CVSS 9.6, openchoreo · github.com/openchoreo/openchoreo)
- [CVE-2026-19752](https://cve.now/CVE-2026-19752.md): EnzoVezzaro mcp-dominican-layer PDF Parsing index.ts parse-pdf server-side request forgery (CVSS 5.3, EnzoVezzaro mcp-dominican-layer)
- [CVE-2026-73842](https://cve.now/CVE-2026-73842.md): OpenChoreo: cluster-gateway internal proxy performs no caller authentication and is not read-only — data-plane Secret disclosure and arbitrary Kubernetes mutation (CVSS 9.0, openchoreo · github.com/openchoreo/openchoreo)
- [CVE-2026-56860](https://cve.now/CVE-2026-56860.md): Avoid quadratic complexity in resolvePath in net/url (CVSS 5.9, Go standard library net/url · stdlib)
- [CVE-2026-56864](https://cve.now/CVE-2026-56864.md): Ignore unrelated, unauthenticated hashes in Lookup in golang.org/x/mod/sumdb (CVSS 7.5, Go toolchain cmd/go · golang.org/x/mod/sumdb +2)
- [CVE-2026-56865](https://cve.now/CVE-2026-56865.md): Fix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlog (CVSS 8.4, Go toolchain cmd/go · golang.org/x/mod/sumdb/tlog +2)
- [CVE-2026-56858](https://cve.now/CVE-2026-56858.md): Fix Javascript regexp context tracking in html/template (CVSS 6.1, Go standard library html/template · stdlib)
- [CVE-2026-56862](https://cve.now/CVE-2026-56862.md): Limit handshake messages we are willing to accept post-handshake in crypto/tls (CVSS 7.5, Go standard library crypto/tls · stdlib)
- [CVE-2026-56853](https://cve.now/CVE-2026-56853.md): Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http (CVSS 7.5, Go standard library net/http · stdlib)
- [CVE-2026-56859](https://cve.now/CVE-2026-56859.md): Add recursion depth guard during decode in encoding/xml (CVSS 7.5, Go standard library encoding/xml · stdlib)
- [CVE-2026-33818](https://cve.now/CVE-2026-33818.md): Enforce maximum recursion depth in encoding/asn1 (CVSS 7.5, Go standard library encoding/asn1)
- [CVE-2026-73841](https://cve.now/CVE-2026-73841.md): OpenChoreo: Cross-project command execution and wirelog view access via OpenChoreo openchoreo-api exec and wirelogs endpoints (CVSS 8.8, openchoreo · github.com/openchoreo/openchoreo)
- [CVE-2026-72857](https://cve.now/CVE-2026-72857.md): Budibase before 3.40.0 Credential Exposure via STRING Fields (CVSS 8.3, budibase)
- [CVE-2026-72856](https://cve.now/CVE-2026-72856.md): Budibase before 3.40.0 Authentication Bypass via Tenant Owner Email (CVSS 8.6, budibase)
- [CVE-2026-72855](https://cve.now/CVE-2026-72855.md): Budibase before 3.40.0 DNS Rebinding SSRF via OpenAPI and REST (CVSS 8.4, budibase server · @budibase/server)
- [CVE-2026-72853](https://cve.now/CVE-2026-72853.md): Budibase before 3.40.0 SQL Injection via Oracle connector (CVSS 8.8, budibase)
- [CVE-2026-72851](https://cve.now/CVE-2026-72851.md): Budibase before 3.40.0 SQL Injection via Unauthenticated Webhook (CVSS 9.0, budibase server)
- [CVE-2026-72850](https://cve.now/CVE-2026-72850.md): Budibase before 3.40.0 Arbitrary File Write via Path Traversal (CVSS 9.4, budibase server)
- [CVE-2026-72849](https://cve.now/CVE-2026-72849.md): Budibase before 3.40.0 Identity Confusion via Chat-Link Handoff CSRF (CVSS 8.7, budibase server · @budibase/server)
- [CVE-2026-72842](https://cve.now/CVE-2026-72842.md): OpenWrt luci-app-lxc ACL Inconsistency Authentication Bypass (CVSS 9.4, openwrt luci)
- [CVE-2026-72841](https://cve.now/CVE-2026-72841.md): luci-app-openvpn Path Traversal RCE via instance\_name2 (CVSS 9.4, openwrt luci)
- [CVE-2026-72840](https://cve.now/CVE-2026-72840.md): OpenWrt LuCI luci-mod-system-mounts ACL Root RCE via Crontab Write (CVSS 8.7, openwrt luci)
- [CVE-2026-72839](https://cve.now/CVE-2026-72839.md): filebrowser through 2.63.16 Privilege Escalation via Signup (CVSS 9.3, filebrowser)
- [CVE-2026-73840](https://cve.now/CVE-2026-73840.md): OpenChoreo: Unauthenticated build/workflow trigger via git-provider confusion (webhook signature bypass) (CVSS 5.3, openchoreo · github.com/openchoreo/openchoreo)
- [CVE-2026-19751](https://cve.now/CVE-2026-19751.md): EnzoVezzaro mcp-dominican-layer parse-csv tool index.ts axios.get server-side request forgery (CVSS 5.3, EnzoVezzaro mcp-dominican-layer)
- [CVE-2026-73667](https://cve.now/CVE-2026-73667.md): OpenChoreo: Authenticated OS command injection via OpenChoreo Workflow Plane templates enables code execution in privileged pods (CVSS 8.8, openchoreo · github.com/openchoreo/openchoreo)
- [CVE-2026-73666](https://cve.now/CVE-2026-73666.md): OpenChoreo: Unauthenticated Backstage developer-portal API exposes OpenChoreo catalog data, scaffolder logs, and allows unauthenticated catalog write/delete (CVSS 8.2, openchoreo backstage-plugins)
- [CVE-2026-73039](https://cve.now/CVE-2026-73039.md): streama Insecure Direct Object Reference via ViewingStatusController (CVSS 5.3, streamaserver streama)
- [CVE-2026-73665](https://cve.now/CVE-2026-73665.md): FreePBX UCP: Unauthenticated remote code execution via socket.io namespace auth bypass and AMI action injection (CVSS 9.3, FreePBX ucp)
- [CVE-2026-73664](https://cve.now/CVE-2026-73664.md): FreePBX: Authenticated Arbitrary SSH Key Injection via Backup Module (CVSS 8.6, FreePBX backup)
- [CVE-2026-19750](https://cve.now/CVE-2026-19750.md): Tenda CH/CP/TX3 SSH hard-coded password (CVSS 9.2, Tenda CH · Tenda CP +1)
- [CVE-2026-73663](https://cve.now/CVE-2026-73663.md): FreePBX: Unauthenticated SQL injection in FreePBX missedcall via inbound Caller ID name leads to administrator takeover (CVSS 9.3, FreePBX missedcall)
- [CVE-2026-73662](https://cve.now/CVE-2026-73662.md): Authenticated FreePBX Music RCE via mpg123 and Asterisk Call Files (CVSS 7.6, FreePBX music)
- [CVE-2026-73661](https://cve.now/CVE-2026-73661.md): FreePBX: Authenticated Framework AUTHTYPE Can Be Restored From a Crafted Backup (CVSS 8.6, FreePBX framework)
- [CVE-2026-73660](https://cve.now/CVE-2026-73660.md): FreePBX: Authenticated TTS AGI Command Injection Through TTS Name (CVSS 7.5, FreePBX tts)
- [CVE-2026-73659](https://cve.now/CVE-2026-73659.md): Trigger.dev: Cross-tenant object read/write via path traversal in packet presign API (CVSS 8.1, triggerdotdev trigger.dev)
- [CVE-2026-73479](https://cve.now/CVE-2026-73479.md): dua-cli Terminal Escape Sequence Injection via Marked Paths (CVSS 4.8, Byron dua-cli)
- [CVE-2026-73658](https://cve.now/CVE-2026-73658.md): Trigger.dev: Cross-tenant object store read and write via URL path traversal (CVSS 8.2, triggerdotdev trigger.dev)
- [CVE-2026-73657](https://cve.now/CVE-2026-73657.md): Trigger.dev: Cross-tenant payload poisoning via packet write + replay (CVSS 4.2, triggerdotdev trigger.dev)
- [CVE-2026-72776](https://cve.now/CVE-2026-72776.md): AgenticSeek Unauthenticated RCE via /query API Endpoint (CVSS 9.3, Fosowl AgenticSeek)
- [CVE-2026-73480](https://cve.now/CVE-2026-73480.md): gdu Terminal Injection via Unstripped Escape Sequences (CVSS 4.8, dundee gdu)
- [CVE-2026-19483](https://cve.now/CVE-2026-19483.md): The following vulnerabilities that can affect IBM Storage Scale and the Management GUI are now fixed in 5.2.3.9 or higher and 6.0.1.1 or higher (CVSS 7.1, IBM Storage Scale)
- [CVE-2026-19297](https://cve.now/CVE-2026-19297.md): Insufficient Authentication Brute Force Protection on Login Endpoint (CVSS 9.1, IBM Langflow OSS)
- [CVE-2026-18715](https://cve.now/CVE-2026-18715.md): IBM i is Affected By Multiple Vulnerabilities in WebSphere Application Server Liberty (CVSS 6.5, IBM i)
- [CVE-2026-18671](https://cve.now/CVE-2026-18671.md): IBM i is Affected By Multiple Vulnerabilities in NetServer (CVSS 6.5, IBM i)
- [CVE-2026-19749](https://cve.now/CVE-2026-19749.md): Tenda CH7 RTSP/ONVIF missing authentication (CVSS 6.3, Tenda CH7 · Tenda CH7G +7)
- [CVE-2026-18741](https://cve.now/CVE-2026-18741.md): Worksuite SaaS version prior to 6.0.14 Stored XSS via Asset Management Location and Description Fields (CVSS 4.8, Froiden Worksuite SaaS)
- [CVE-2026-18511](https://cve.now/CVE-2026-18511.md): IBM i is Affected By Multiple Vulnerabilities in Java Secure Sockets Extension (CVSS 7.3, IBM i)
- [CVE-2026-18509](https://cve.now/CVE-2026-18509.md): IBM i is Affected By A Prvilege Escalation Vulnerability \[\] (CVSS 8.2, IBM i)
- [CVE-2026-18249](https://cve.now/CVE-2026-18249.md): IBM i Is Affected By Multiple Vulnerabilities in IBM Java SDK and IBM Java Runtime (CVSS 8.4, IBM i)
- [CVE-2026-18193](https://cve.now/CVE-2026-18193.md): IBM i Is Affected By Multiple Vulnerabilities in IBM Java SDK and IBM Java Runtime (CVSS 8.9, IBM i)
- [CVE-2026-18101](https://cve.now/CVE-2026-18101.md): IBM i is Affected By Multiple Vulnerabilities in WebSphere Application Server Liberty (CVSS 8.8, IBM i)
- [CVE-2026-18086](https://cve.now/CVE-2026-18086.md): IBM i is Affected By Multiple Vulnerabilities in Java Secure Sockets Extension (CVSS 4.5, IBM i)
- [CVE-2026-18077](https://cve.now/CVE-2026-18077.md): IBM i is Affected By Multiple Vulnerabilities in Simple Mail Transfer Protocol (CVSS 7.5, IBM i)
- [CVE-2026-18068](https://cve.now/CVE-2026-18068.md): IBM i is Affected By Multiple Vulnerabilities in Java Secure Sockets Extension (CVSS 4.3, IBM i)
- [CVE-2026-18020](https://cve.now/CVE-2026-18020.md): IBM i is Affected By Multiple Vulnerabilities in NetServer (CVSS 5.3, IBM i)
- [CVE-2026-17649](https://cve.now/CVE-2026-17649.md): IBM i is Affected By Multiple Vulnerabilities in NetServer (CVSS 5.3, IBM i)
- [CVE-2026-17502](https://cve.now/CVE-2026-17502.md): IBM i is Affected By Multiple Vulnerabilities in NetServer (CVSS 8.6, IBM i)
- [CVE-2026-17482](https://cve.now/CVE-2026-17482.md): IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution (CVSS 9.8, IBM Documentation Offline)
- [CVE-2026-17481](https://cve.now/CVE-2026-17481.md): IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution (CVSS 8.8, IBM Documentation Offline)
- [CVE-2026-17476](https://cve.now/CVE-2026-17476.md): IBM i Is Affected By Multiple Vulnerabilities in IBM Java SDK and IBM Java Runtime (CVSS 4.8, IBM i)
- [CVE-2026-17473](https://cve.now/CVE-2026-17473.md): IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution (CVSS 7.5, IBM Documentation Offline)
- [CVE-2026-17438](https://cve.now/CVE-2026-17438.md): IBM i is Affected By An Improper Privilege Management Vulnerability in LDAP \[\] (CVSS 4.4, IBM i)
- [CVE-2026-17468](https://cve.now/CVE-2026-17468.md): IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution (CVSS 5.3, IBM Documentation Offline)
- [CVE-2026-17075](https://cve.now/CVE-2026-17075.md): IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager (CVSS 6.5, IBM i)
- [CVE-2026-17272](https://cve.now/CVE-2026-17272.md): IBM i is Affected By a Denial of Service in HTTP Server \[\] (CVSS 8.2, IBM i)
- [CVE-2026-17226](https://cve.now/CVE-2026-17226.md): IBM i is Affected By Multiple Vulnerabilities in NetServer (CVSS 5.4, IBM i)
- [CVE-2026-17216](https://cve.now/CVE-2026-17216.md): IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM (CVSS 5.3, IBM i)
- [CVE-2026-17212](https://cve.now/CVE-2026-17212.md): IBM i is Affected By Multiple Vulnerabilities in NetServer (CVSS 5.3, IBM i)
- [CVE-2026-8715](https://cve.now/CVE-2026-8715.md): Vault Secrets Operator vulnerable to arbitrary file read and credential exfiltration via AppRole secretIDPath (CVSS 9.6, HashiCorp Tooling)
- [CVE-2026-17101](https://cve.now/CVE-2026-17101.md): IBM i is Affected By Multiple Vulnerabilities in Navigator for i (CVSS 8.3, IBM i)
- [CVE-2026-17099](https://cve.now/CVE-2026-17099.md): IBM i is Affected By Multiple Vulnerabilities in Navigator for i (CVSS 7.3, IBM i)
- [CVE-2026-17088](https://cve.now/CVE-2026-17088.md): IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager (CVSS 4.3, IBM i)
- [CVE-2026-17078](https://cve.now/CVE-2026-17078.md): IBM i is Affected By A Denial of Service Vulnerability in DRDA / DDM \[\] (CVSS 5.3, IBM i)
- [CVE-2026-17077](https://cve.now/CVE-2026-17077.md): IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM (CVSS 5.3, IBM i)
- [CVE-2026-17076](https://cve.now/CVE-2026-17076.md): IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM (CVSS 5.3, IBM i)
- [CVE-2026-17074](https://cve.now/CVE-2026-17074.md): IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM (CVSS 3.1, IBM i)
- [CVE-2026-17071](https://cve.now/CVE-2026-17071.md): IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager (CVSS 2.7, IBM i)
- [CVE-2026-19748](https://cve.now/CVE-2026-19748.md): Tenda CH7 Kylin Web Service CWebSessionManager\_ParseSession entropy (CVSS 6.3, Tenda CH7 · Tenda CH7G +7)
- [CVE-2026-73656](https://cve.now/CVE-2026-73656.md): Trigger.dev: Cross-project deployment worker registration can modify another project's deployment state (CVSS 9.9, triggerdotdev trigger.dev)
- [CVE-2026-17069](https://cve.now/CVE-2026-17069.md): IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager (CVSS 8.1, IBM i)
- [CVE-2026-17045](https://cve.now/CVE-2026-17045.md): IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager (CVSS 8.1, IBM i)
- [CVE-2026-17043](https://cve.now/CVE-2026-17043.md): IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager (CVSS 3.8, IBM i)
- [CVE-2026-17029](https://cve.now/CVE-2026-17029.md): IBM i is Affected By Multiple Vulnerabilities in Java Secure Sockets Extension (CVSS 8.8, IBM i)
- [CVE-2026-16987](https://cve.now/CVE-2026-16987.md): IBM i is Affected By An Improper Validation Vulnerability in PASE \[\] (CVSS 8.8, IBM i)
- [CVE-2026-16975](https://cve.now/CVE-2026-16975.md): IBM i is Affected By A Remote Code Execution Vulnerability \[\] (CVSS 8.8, IBM i)
- [CVE-2026-73655](https://cve.now/CVE-2026-73655.md): Trigger.dev: Account Takeover via Cross-Provider OAuth Email Matching in Google Login (CVSS 7.4, triggerdotdev trigger.dev)
- [CVE-2026-16967](https://cve.now/CVE-2026-16967.md): IBM i is Affected By Multiple SQL Vulnerabilities \[, \] (CVSS 8.5, IBM i)
- [CVE-2026-16961](https://cve.now/CVE-2026-16961.md): IBM i is Affected By SQL Injection Vulnerability in Db2 Mirror \[\] (CVSS 7.6, IBM i)
- [CVE-2026-16908](https://cve.now/CVE-2026-16908.md): IBM i is Affected By Multiple SQL Vulnerabilities \[, \] (CVSS 8.5, IBM i)
- [CVE-2026-16898](https://cve.now/CVE-2026-16898.md): IBM i is Affected By Multiple Vulnerabilities in Network Authentication Service (CVSS 7.8, IBM i)
- [CVE-2026-16896](https://cve.now/CVE-2026-16896.md): IBM i is Affected By Multiple Vulnerabilities in Network Authentication Service (CVSS 7.1, IBM i)
- [CVE-2026-16887](https://cve.now/CVE-2026-16887.md): IBM i is Affected By A Denial of Service Vulnerability DST/SST \[\] (CVSS 7.5, IBM i)
- [CVE-2026-16878](https://cve.now/CVE-2026-16878.md): IBM i is Affected By Multiple Vulnerabilities in NetServer (CVSS 5.4, IBM i)
- [CVE-2026-16871](https://cve.now/CVE-2026-16871.md): IBM i is Affected By Multiple Vulnerabilities in NetServer (CVSS 4.3, IBM i)
- [CVE-2026-16868](https://cve.now/CVE-2026-16868.md): IBM i is Affected By Multiple Vulnerabilities in NetServer (CVSS 8.1, IBM i)
- [CVE-2026-16867](https://cve.now/CVE-2026-16867.md): IBM i is Affected By Multiple Vulnerabilities in NetServer (CVSS 8.1, IBM i)
- [CVE-2026-16861](https://cve.now/CVE-2026-16861.md): IBM i is Affected By Multiple Vulnerabilities in NetServer (CVSS 5.3, IBM i)
- [CVE-2026-16859](https://cve.now/CVE-2026-16859.md): IBM i is Affected By Multiple Vulnerabilities in NetServer (CVSS 5.3, IBM i)
- [CVE-2026-19747](https://cve.now/CVE-2026-19747.md): Tenda CH7 ATE Module Kylin HandleCmd command injection (CVSS 9.3, Tenda CH7 · Tenda CH7G +7)
- [CVE-2026-16853](https://cve.now/CVE-2026-16853.md): IBM i is Affected By Multiple Vulnerabilities in NetServer (CVSS 6.5, IBM i)
- [CVE-2026-16815](https://cve.now/CVE-2026-16815.md): IBM i is Affected By Multiple Vulnerabilities in Simple Mail Transfer Protocol (CVSS 8.6, IBM i)
- [CVE-2026-16722](https://cve.now/CVE-2026-16722.md): IBM i is Affected By An Unauthorized Privileges Vulnerability in SQL \[\] (CVSS 8.8, IBM i)
- [CVE-2026-16713](https://cve.now/CVE-2026-16713.md): IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution (CVSS 4.3, IBM Documentation Offline)
- [CVE-2026-16692](https://cve.now/CVE-2026-16692.md): IBM i is Affected By Multiple Vulnerabilities in Simple Mail Transfer Protocol (CVSS 6.5, IBM i)
- [CVE-2026-16674](https://cve.now/CVE-2026-16674.md): IBM i is Affected By Multiple Vulnerabilities in WebSphere Application Server Liberty (CVSS 8.8, IBM i)
- [CVE-2026-14875](https://cve.now/CVE-2026-14875.md): IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities (CVSS 7.3, IBM i Access Client Solutions)
- [CVE-2026-14525](https://cve.now/CVE-2026-14525.md): IBM WebSphere Application Server Liberty is affected by an authenication bypass (CVSS 9.4, IBM WebSphere Application Server - Liberty)
- [CVE-2026-13460](https://cve.now/CVE-2026-13460.md): The following vulnerabilities that can affect IBM Storage Scale and the Management GUI are now fixed in 5.2.3.9 or higher and 6.0.1.1 or higher (CVSS 7.5, IBM Storage Scale)
- [CVE-2026-13365](https://cve.now/CVE-2026-13365.md): IBM Planning Analytics Local is affected by security vulnerabilities (CVSS 7.1, IBM Planning Analytics)
- [CVE-2026-10571](https://cve.now/CVE-2026-10571.md): IBM WebSphere Application Server Liberty is affected by a denial of service (CVSS 5.7, IBM WebSphere Application Server - Liberty)
- [CVE-2026-73654](https://cve.now/CVE-2026-73654.md): Trigger.dev: Prototype pollution via run metadata operations → process-wide cross-tenant DoS (CVSS 8.5, triggerdotdev trigger.dev · @trigger.dev/core)
- [CVE-2026-45774](https://cve.now/CVE-2026-45774.md): compliance-trestle Profile Import has an Arbitrary File Read via trestle:// URI and Relative Path Traversal (CVSS 6.9, oscal-compass compliance-trestle · compliance-trestle)
- [CVE-2026-45725](https://cve.now/CVE-2026-45725.md): compliance-trestle Remote Fetching Mechanism has an Arbitrary File Write via Cache Path Traversal (CVSS 7.1, oscal-compass compliance-trestle · compliance-trestle)
- [CVE-2026-19746](https://cve.now/CVE-2026-19746.md): Calix GigaSpire traceroute.cmd denial of service (CVSS 5.3, Calix GigaSpire)
- [CVE-2026-48099](https://cve.now/CVE-2026-48099.md): WsgiDAV encoded dot segments can escape filesystem share roots (CVSS 7.1, mar10 wsgidav · wsgidav)
- [CVE-2026-49096](https://cve.now/CVE-2026-49096.md): Uncaught Exception in Kibana Cases Leading to Denial of Service (CVSS 4.3, Elastic Kibana)
- [CVE-2026-72636](https://cve.now/CVE-2026-72636.md): Uncontrolled Recursion in Elasticsearch Wildcard Matching Leading to Denial of Service (CVSS 6.5, Elasticsearch)
- [CVE-2026-72632](https://cve.now/CVE-2026-72632.md): Observable Discrepancy in Kibana Fleet Leading to Disclosure of Elastic Agent Elasticsearch API Keys (CVSS 7.1, Elastic Kibana)
- [CVE-2026-72631](https://cve.now/CVE-2026-72631.md): Improper Privilege Management in Kibana Fleet Leading to Over-Scoped Elastic Agent API Keys (CVSS 6.5, Elastic Kibana)
- [CVE-2026-72630](https://cve.now/CVE-2026-72630.md): Incorrect Authorization in Kibana Fleet Leading to Privilege Escalation (CVSS 7.1, Elastic Kibana)
- [CVE-2026-72629](https://cve.now/CVE-2026-72629.md): Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Space Access to Machine Learning Trained Models (CVSS 7.1, Elastic Kibana)
- [CVE-2026-72643](https://cve.now/CVE-2026-72643.md): Incorrect Authorization in Kibana Agent Builder Leading to Disclosure and Tampering of Private Agents (CVSS 7.1, Elastic Kibana)
- [CVE-2026-72642](https://cve.now/CVE-2026-72642.md): Use of Out-of-range Pointer Offset in the Elasticsearch Machine Learning Native Inference Process (CVSS 8.8, Elasticsearch)
- [CVE-2026-72640](https://cve.now/CVE-2026-72640.md): Unintended Proxy or Intermediary in Elastic Cloud on Kubernetes Leading to Cross-Namespace Secret Disclosure (CVSS 6.5, Elastic Eck Operator)
- [CVE-2026-72639](https://cve.now/CVE-2026-72639.md): Memory Allocation with Excessive Size Value in Elasticsearch Highlighting Leading to Denial of Service (CVSS 6.5, Elasticsearch)
- [CVE-2026-72638](https://cve.now/CVE-2026-72638.md): Uncontrolled Recursion in Elasticsearch Leading to Denial of Service (CVSS 6.5, Elasticsearch)
- [CVE-2026-72647](https://cve.now/CVE-2026-72647.md): Uncontrolled Recursion in Elasticsearch Leading to Denial of Service (CVSS 6.5, Elasticsearch)
- [CVE-2026-72645](https://cve.now/CVE-2026-72645.md): Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service (CVSS 6.5, Elasticsearch)
- [CVE-2026-72648](https://cve.now/CVE-2026-72648.md): Cleartext Storage of Sensitive Information in an Environment Variable in Elastic Cloud on Kubernetes Leading to Information Disclosure (CVSS 6.5, Elastic Eck Operator)
- [CVE-2026-72657](https://cve.now/CVE-2026-72657.md): Authorization Bypass Through User-Controlled Key in Fleet Server Leading to Information Disclosure (CVSS 6.5, Elastic Fleet Server)
- [CVE-2026-72656](https://cve.now/CVE-2026-72656.md): Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service (CVSS 6.5, Elasticsearch)
- [CVE-2026-72655](https://cve.now/CVE-2026-72655.md): Improperly Controlled Modification of Dynamically-Determined Object Attributes in Kibana Leading to Unauthorized Data Modification (CVSS 4.3, Elastic Kibana)
- [CVE-2026-72653](https://cve.now/CVE-2026-72653.md): Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service (CVSS 6.5, Elastic Kibana)
- [CVE-2026-72651](https://cve.now/CVE-2026-72651.md): Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service (CVSS 6.5, Elastic Kibana)
- [CVE-2026-72650](https://cve.now/CVE-2026-72650.md): Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure (CVSS 4.3, Elastic Kibana)
- [CVE-2026-18164](https://cve.now/CVE-2026-18164.md): Flow Neuroscience FL-100 Use of Hard-coded Credentials (CVSS 7.2, Flow Neuroscience FL-100 · Halo Neuroscience FL-100)
- [CVE-2026-72663](https://cve.now/CVE-2026-72663.md): Inefficient Algorithmic Complexity in Kibana Leading to Denial of Service (CVSS 6.5, Elastic Kibana)
- [CVE-2026-72661](https://cve.now/CVE-2026-72661.md): Missing Authorization in Kibana Leading to Information Disclosure (CVSS 6.5, Elastic Kibana)
- [CVE-2026-72660](https://cve.now/CVE-2026-72660.md): Uncaught Exception in Kibana Leading to Denial of Service (CVSS 6.5, Elastic Kibana)
- [CVE-2026-72659](https://cve.now/CVE-2026-72659.md): Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service (CVSS 6.5, Elastic Kibana)
- [CVE-2026-72658](https://cve.now/CVE-2026-72658.md): Cross-Site Request Forgery in Kibana Leading to Privilege Escalation (CVSS 7.3, Elastic Kibana)
- [CVE-2026-72667](https://cve.now/CVE-2026-72667.md): Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service (CVSS 6.5, Elastic Kibana)
- [CVE-2026-72666](https://cve.now/CVE-2026-72666.md): Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Query Execution on Managed Hosts (CVSS 6.8, Elastic Kibana)
- [CVE-2026-72665](https://cve.now/CVE-2026-72665.md): Missing Authorization in Kibana Leading to Unauthorized Execution of Host Response Actions (CVSS 8.1, Elastic Kibana)
- [CVE-2026-72664](https://cve.now/CVE-2026-72664.md): Missing Authorization in Kibana Leading to Unauthorized Execution of Endpoint Response Actions (CVSS 6.5, Elastic Kibana)
- [CVE-2026-72677](https://cve.now/CVE-2026-72677.md): Relative Path Traversal in Kibana Fleet Leading to Unauthorized Deletion of Users and Other Resources (CVSS 7.3, Elastic Kibana)
- [CVE-2026-72676](https://cve.now/CVE-2026-72676.md): Improper Control of Generation of Code in Fleet Server Leading to Code Injection (CVSS 6.5, Elastic Fleet Server)
- [CVE-2026-72675](https://cve.now/CVE-2026-72675.md): Missing Authorization in Kibana Machine Learning Leading to Cross-Space Information Disclosure and Unauthorized Data Modification (CVSS 7.1, Elastic Kibana)
- [CVE-2026-72674](https://cve.now/CVE-2026-72674.md): Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service (CVSS 6.5, Elastic Kibana)
- [CVE-2026-72673](https://cve.now/CVE-2026-72673.md): Incorrect Authorization in Kibana Leading to Unauthorized Deletion of Synthetics Private Locations (CVSS 5.4, Elastic Kibana)
- [CVE-2026-72672](https://cve.now/CVE-2026-72672.md): Incorrect Authorization in Kibana Leading to Disclosure of Elastic Defend Endpoint Event Data (CVSS 7.7, Elastic Kibana)
- [CVE-2026-72671](https://cve.now/CVE-2026-72671.md): Missing Authorization in Kibana Leading to Unauthorized Modification of Machine Learning Trained Model Space Assignments (CVSS 4.3, Elastic Kibana)
- [CVE-2026-72670](https://cve.now/CVE-2026-72670.md): Exposure of Sensitive Information to an Unauthorized Actor in Kibana Leading to Disclosure of Fleet Proxy Credentials (CVSS 7.7, Elastic Kibana)
- [CVE-2026-72669](https://cve.now/CVE-2026-72669.md): Missing Authorization in Kibana Leading to Cross-User Information Disclosure and Data Tampering (CVSS 7.6, Elastic Kibana)
- [CVE-2026-72681](https://cve.now/CVE-2026-72681.md): Missing Authorization in Kibana Leading to Privilege Escalation and Information Disclosure (CVSS 6.5, Elastic Kibana)
- [CVE-2026-72680](https://cve.now/CVE-2026-72680.md): Authorization Bypass Through User-Controlled Key in Kibana Agent Builder Leading to Unauthorized Data Modification (CVSS 6.5, Elastic Kibana)
- [CVE-2026-72679](https://cve.now/CVE-2026-72679.md): Uncontrolled Recursion in Elasticsearch Leading to Denial of Service (CVSS 6.5, Elasticsearch)
- [CVE-2026-72678](https://cve.now/CVE-2026-72678.md): Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service (CVSS 6.5, Elasticsearch)
- [CVE-2026-72687](https://cve.now/CVE-2026-72687.md): Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service (CVSS 6.5, Elasticsearch)
- [CVE-2026-72686](https://cve.now/CVE-2026-72686.md): Uncontrolled Recursion in Elasticsearch Leading to Denial of Service (CVSS 6.5, Elasticsearch)
- [CVE-2026-72685](https://cve.now/CVE-2026-72685.md): Inefficient Algorithmic Complexity in Elasticsearch Leading to Denial of Service (CVSS 4.3, Elasticsearch)
- [CVE-2026-72684](https://cve.now/CVE-2026-72684.md): Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service (CVSS 6.5, Elasticsearch)
- [CVE-2026-72683](https://cve.now/CVE-2026-72683.md): Uncontrolled Recursion in Elasticsearch Leading to Denial of Service (CVSS 6.5, Elasticsearch)
- [CVE-2026-59714](https://cve.now/CVE-2026-59714.md): Open WebUI: Cross-channel message overwrite via chat completion API (single-model and multimodel message\_ids) (CVSS 7.1, open-webui)
- [CVE-2026-49864](https://cve.now/CVE-2026-49864.md): wetty vulnerable to DOM XSS via file-download filename (CVSS 8.6, butlerx wetty · wetty)
- [CVE-2026-49089](https://cve.now/CVE-2026-49089.md): Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service (CVSS 6.5, Elastic Kibana)
- [CVE-2026-73531](https://cve.now/CVE-2026-73531.md): django-helpdesk \< 2.3.3 Stored XSS via HTML Attachments (CVSS 5.3, django-helpdesk)
- [CVE-2026-73530](https://cve.now/CVE-2026-73530.md): Flyto2 Core \< 2.28.0 SSRF Guard Bypass via is\_private\_ip() (CVSS 6.3, flytohub flyto-core)
- [CVE-2026-19745](https://cve.now/CVE-2026-19745.md): Calix GigaSpire Web Management utilities\_configurationsave.cgi denial of service (CVSS 5.3, Calix GigaSpire)
- [CVE-2026-73669](https://cve.now/CVE-2026-73669.md): Signify Philips Hue Bridge Pro MQTT broker missing authentication (CVSS 6.9, Signify Philips Hue Bridge Pro)
- [CVE-2026-18846](https://cve.now/CVE-2026-18846.md): IBM i is Affected By Multiple Vulnerabilities in Host Servers (CVSS 7.5, IBM i)
- [CVE-2026-17223](https://cve.now/CVE-2026-17223.md): IBM i is Affected By Multiple Vulnerabilities in Host Servers (CVSS 8.8, IBM i)
- [CVE-2026-17206](https://cve.now/CVE-2026-17206.md): IBM i is Affected By Multiple Vulnerabilities in Host Servers (CVSS 8.1, IBM i)
- [CVE-2026-16929](https://cve.now/CVE-2026-16929.md): IBM i is Affected By Multiple Vulnerabilities in Host Servers (CVSS 5.3, IBM i)
- [CVE-2026-17004](https://cve.now/CVE-2026-17004.md): IBM i is Affected By Multiple Vulnerabilities in Host Servers (CVSS 7.5, IBM i)
- [CVE-2026-17199](https://cve.now/CVE-2026-17199.md): IBM i is Affected By Multiple Vulnerabilities in Host Servers (CVSS 7.5, IBM i)
- [CVE-2026-17229](https://cve.now/CVE-2026-17229.md): IBM i is Affected By Multiple Vulnerabilities in Host Servers (CVSS 7.5, IBM i)
- [CVE-2026-16982](https://cve.now/CVE-2026-16982.md): IBM i is Affected By Multiple Vulnerabilities in Host Servers (CVSS 7.5, IBM i)
- [CVE-2026-17220](https://cve.now/CVE-2026-17220.md): IBM i is Affected By Multiple Vulnerabilities in Host Servers (CVSS 8.2, IBM i)
- [CVE-2026-17197](https://cve.now/CVE-2026-17197.md): IBM i is Affected By Multiple Vulnerabilities in Host Servers (CVSS 8.1, IBM i)
- [CVE-2026-73482](https://cve.now/CVE-2026-73482.md): phpList \< 3.7.0-RC5 Cross-Site Request Forgery via admins.php (CVSS 7.2, phplist3)
- [CVE-2026-73481](https://cve.now/CVE-2026-73481.md): phpList \< 3.7.0-RC5 Cross-Site Request Forgery via Bounce Rules (CVSS 5.3, phplist3)
- [CVE-2026-18071](https://cve.now/CVE-2026-18071.md): IBM i is Affected By An Improper Management Vulnerability in HTTP Server \[\] (CVSS 7.8, IBM i)
- [CVE-2026-73038](https://cve.now/CVE-2026-73038.md): NodeBB \< 4.15.0 Stored XSS via ActivityPub emoji tag.icon.url and tag.name (CVSS 5.3, NodeBB)
- [CVE-2026-72777](https://cve.now/CVE-2026-72777.md): Next AI Draw.io 0.4.16 SSRF via DNS Rebinding in parse-url (CVSS 7.7, DayuanJiang next-ai-draw-io)
- [CVE-2026-73653](https://cve.now/CVE-2026-73653.md): Vitest: Browser Mode provider commands bypass the file-access permission gate (CVSS 9.4, vitest-dev vitest · @vitest/browser)
- [CVE-2026-73037](https://cve.now/CVE-2026-73037.md): Next AI Draw.io 0.2.1 - 0.4.16 Reflected XSS via unsanitized mcp query parameter (CVSS 5.1, DayuanJiang next-ai-draw-io)
- [CVE-2026-73652](https://cve.now/CVE-2026-73652.md): vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review (CVSS 7.1, vantage6)
- [CVE-2026-73651](https://cve.now/CVE-2026-73651.md): TypeORM: migration:generate template-literal code injection (CVSS 5.7, typeorm)
- [CVE-2026-73650](https://cve.now/CVE-2026-73650.md): SVGO: removeScripts plugin leaves some executable scripts intact (CVSS 8.2, svgo)
- [CVE-2026-73649](https://cve.now/CVE-2026-73649.md): Velocity.js: Remote Code Execution via property-read to Function constructor (bypass of CVE-2026-44966 fix) (CVSS 9.8, shepherdwind velocity.js · velocityjs)
- [CVE-2026-73648](https://cve.now/CVE-2026-73648.md): rails-html-sanitizer: Possible XSS vulnerability with certain configurations (CVSS 5.1, rails-html-sanitizer)
- [CVE-2026-72741](https://cve.now/CVE-2026-72741.md): Rainbond 6.9.7 Region API Cross-Enterprise IDOR via Tenant Access (CVSS 8.6, goodrain rainbond)
- [CVE-2026-73647](https://cve.now/CVE-2026-73647.md): Quasar Framework: Prototype pollution in Quasar extend() utility (CVSS 5.6, quasarframework quasar · quasar)
- [CVE-2026-73645](https://cve.now/CVE-2026-73645.md): OpenZeppelin Confidential Contracts ERC7984ERC20Wrapper: once a wrapper is filled, subsequent wrap requests do not revert and result in loss of funds. (CVSS 6.6, openzeppelin-confidential-contracts · @openzeppelin/confide…)
- [CVE-2026-19730](https://cve.now/CVE-2026-19730.md): Podman: podman: quadlet install --replace non-truncating write retains removed host-access directives (CVSS 4.2, Red Hat Enterprise Linux · Red Hat Ansible Automation P… +10)
- [CVE-2026-73644](https://cve.now/CVE-2026-73644.md): OpenDJ: Authorization bypass in SASL PLAIN allowing a \`proxied-auth\` holder to impersonate any resolvable non-root user without an ACI proxy grant (CVSS 9.6, OpenIdentityPlatform OpenDJ · org.openidentityplatform.open…)
- [CVE-2026-73643](https://cve.now/CVE-2026-73643.md): js-yaml: Exponential parsing time in the flow collections leads to denial of service (CVSS 7.5, nodeca js-yaml · js-yaml)
- [CVE-2026-73569](https://cve.now/CVE-2026-73569.md): fast-xml-parser: Repeated DOCTYPE declarations reset entity expansion limits (CVSS 8.7, NaturalIntelligence fast-xml-parser · fast-xml-parser)
- [CVE-2026-73568](https://cve.now/CVE-2026-73568.md): py-libp2p: yamux connection DoS via oversized data frame (CVSS 7.5, py-libp2p · libp2p)
- [CVE-2026-73567](https://cve.now/CVE-2026-73567.md): sm-crypto: Predictable SM2 key generation in Node.js: default RNG uses Math.random + wall clock (CVSS 9.1, JuneAndGreen sm-crypto · sm-crypto)
- [CVE-2026-73566](https://cve.now/CVE-2026-73566.md): node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection (CVSS 7.5, isaacs node-tar · tar)
- [CVE-2026-73565](https://cve.now/CVE-2026-73565.md): @hono/node-server: Unauthenticated memory-leak DoS via aborted WebSocket handshake (CVSS 5.3, honojs node-server · @hono/node-server)
- [CVE-2026-73564](https://cve.now/CVE-2026-73564.md): frp: Unauthenticated Remote Denial of Service in the frp SSH Tunnel Gateway via Integer Overflow (CVSS 8.7, fatedier frp · github.com/fatedier/frp)
- [CVE-2026-18428](https://cve.now/CVE-2026-18428.md): SQL Query Validation Bypass in OpenSearch Direct Query (CVSS 8.7, AWS Opensearch · Github Opensearch)
- [CVE-2026-73563](https://cve.now/CVE-2026-73563.md): Backstage: Unauthenticated OAuth account takeover via \`redirect\_uri\` allowlist bypass in \`@backstage/plugin-auth-backend\` (CVSS 4.7, backstage · @backstage/plugin-auth-backend)
- [CVE-2026-73562](https://cve.now/CVE-2026-73562.md): Mongoose: Prototype pollution in the update casting via \_\_proto\_\_-prefixed dotted path (Schema.\_getSchema/path getter) (CVSS 6.5, Automattic mongoose · mongoose)
- [CVE-2026-73561](https://cve.now/CVE-2026-73561.md): Hub: Unauthenticated WebSocket RPC Waiter Resource Exhaustion (CVSS 7.5, anephenix hub · @anephenix/hub)
- [CVE-2019-25765](https://cve.now/CVE-2019-25765.md): ASP-CMS SQL Injection via commentList.asp id Parameter (CVSS 8.7, ASP-CMS Project ASP-CMS)
- [CVE-2024-58374](https://cve.now/CVE-2024-58374.md): Hongjing e-HR Unauthenticated SQL Injection via getSdutyTree (CVSS 8.7, Hongjing Century e-HR)
- [CVE-2026-12236](https://cve.now/CVE-2026-12236.md): Infinite loop (DoS) in Bluetooth GATT client parsing of Read-By-Type responses with zero data length (CVSS 6.5, zephyrproject zephyr)
- [CVE-2026-67613](https://cve.now/CVE-2026-67613.md): CyberPanel \< 3.0.0 Path Traversal File Read via cloudAPI ReadReport (CVSS 6.9, usmannasir cyberpanel)
- [CVE-2026-67614](https://cve.now/CVE-2026-67614.md): CyberPanel \< 3.0.0 Hard-coded JWT Secret Authentication Bypass via WebTerminal (CVSS 9.3, usmannasir cyberpanel)
- [CVE-2026-24059](https://cve.now/CVE-2026-24059.md): Gitea runner registration-token GET endpoint performs a write under a read-only token scope (CVSS 6.5, Gitea Open Source Git Server)
- [CVE-2026-24791](https://cve.now/CVE-2026-24791.md): Public-only tokens bypass private-resource restrictions on \`/api/v1/user\` self routes (CVSS 8.1, Gitea Open Source Git Server · code.gitea.io/gitea)
- [CVE-2026-59765](https://cve.now/CVE-2026-59765.md): SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud Metadata (CVSS 7.5, Gitea Open Source Git Server · gitea.dev +1)
- [CVE-2026-59763](https://cve.now/CVE-2026-59763.md): Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads (CVSS 4.3, Gitea Open Source Git Server · code.gitea.io/gitea +1)
- [CVE-2026-58511](https://cve.now/CVE-2026-58511.md): Webhook Authorization Header Returned in Plaintext via API (CVSS 2.7, Gitea Open Source Git Server · gitea.dev +1)
- [CVE-2026-58510](https://cve.now/CVE-2026-58510.md): GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public-\>private (CVSS 4.3, Gitea Open Source Git Server · code.gitea.io/gitea +1)
- [CVE-2026-58508](https://cve.now/CVE-2026-58508.md): Two SSRF vulnerabilities in Gitea migration/mirror (DNS rebinding + missing re-validation) (CVSS 9.1, Gitea Open Source Git Server)
- [CVE-2026-58507](https://cve.now/CVE-2026-58507.md): Private Repository Existence Disclosure via go-get Meta Endpoint (CVSS 5.3, Gitea Open Source Git Server · gitea.dev +1)
- [CVE-2026-58445](https://cve.now/CVE-2026-58445.md): Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API (CVSS 2.7, Gitea Open Source Git Server · gitea.dev +1)
- [CVE-2026-58444](https://cve.now/CVE-2026-58444.md): Personal access token scope enforcement bypass on the repository home page (\`GET /{owner}/{repo}\`) discloses private repository contents (CVSS 4.3, Gitea Open Source Git Server · code.gitea.io/gitea +1)
- [CVE-2026-58443](https://cve.now/CVE-2026-58443.md): Public-only repository tokens can update private PR head branches (CVSS 9.1, Gitea Open Source Git Server · code.gitea.io/gitea +1)
- [CVE-2026-58442](https://cve.now/CVE-2026-58442.md): Repository migration SSRF via multi-answer DNS allow-list bypass (CVSS 6.5, Gitea Open Source Git Server · gitea.dev +1)
- [CVE-2026-58441](https://cve.now/CVE-2026-58441.md): SSRF in restore-repo via unsanitized pull\_request.yml Head.CloneURL (CVSS 6.3, Gitea Open Source Git Server · code.gitea.io/gitea +1)
- [CVE-2026-58440](https://cve.now/CVE-2026-58440.md): Webhooks created by a collaborator keep firing after their repo access is revoked → ongoing real-time exfiltration of private repo content (incomplete revocation cleanup in \`DeleteCollaboration\`) (CVSS 6.8, Gitea Open Source Git Server · gitea.dev)
- [CVE-2026-58439](https://cve.now/CVE-2026-58439.md): Branch Protection Bypass via PR Retargeting Preserves Stale \`official\` Approval Flag (CVSS 8.1, Gitea Open Source Git Server · code.gitea.io/gitea)
- [CVE-2026-58438](https://cve.now/CVE-2026-58438.md): Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access (CVSS 7.5, Gitea Open Source Git Server · gitea.dev)
- [CVE-2026-58437](https://cve.now/CVE-2026-58437.md): Repository Visibility Manipulation via Git Push Options (CVSS 7.1, Gitea Open Source Git Server · code.gitea.io/gitea +1)
- [CVE-2026-58436](https://cve.now/CVE-2026-58436.md): ParseAcceptLanguage quadratic-time DoS via Locale middleware on unauthenticated requests (CVSS 7.5, Gitea Open Source Git Server · gitea.dev +1)
- [CVE-2026-58435](https://cve.now/CVE-2026-58435.md): Gitea LFS Deploy-Key Privilege Escalation (CVSS 5.4, Gitea Open Source Git Server · code.gitea.io/gitea +1)
- [CVE-2026-58434](https://cve.now/CVE-2026-58434.md): Private Repository Metadata Remains Accessible After Access Revocation (CVSS 7.5, Gitea Open Source Git Server · gitea.dev +1)
- [CVE-2026-58433](https://cve.now/CVE-2026-58433.md): Team-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization setting (CVSS 9.1, Gitea Open Source Git Server)
- [CVE-2026-58432](https://cve.now/CVE-2026-58432.md): Missing Authorization and Authorization Bypass Through User-Controlled Key and Incorrect Permission Assignment for Critical Resource and Exposure of Sensitive Information to an Unauthorized Actor in code.gitea.io/gitea (CVSS 5.9, Gitea Open Source Git Server · gitea.dev +1)
- [CVE-2026-58431](https://cve.now/CVE-2026-58431.md): Public-only API token restriction is not enforced on team API routes (CVSS 4.3, Gitea Open Source Git Server · gitea.dev)
- [CVE-2026-58429](https://cve.now/CVE-2026-58429.md): Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints (CVSS 4.9, Gitea Open Source Git Server · code.gitea.io/gitea +1)
- [CVE-2026-58428](https://cve.now/CVE-2026-58428.md): Release attachment extension allowlist bypass via web release edit form (variant of CVE-2025-68939) (CVSS 6.5, Gitea Open Source Git Server · gitea.dev +1)
- [CVE-2026-58427](https://cve.now/CVE-2026-58427.md): Private org member list leaked via /members API endpoint — incomplete fix for PR #38145 (CVSS 7.5, Gitea Open Source Git Server · gitea.dev)
- [CVE-2026-58425](https://cve.now/CVE-2026-58425.md): OAuth token introspection returns metadata of tokens issued to other clients (RFC 7662 section 4 violation) (CVSS 4.3, Gitea Open Source Git Server · gitea.dev +1)
- [CVE-2026-58420](https://cve.now/CVE-2026-58420.md): Local File Inclusion via file:// URI in Migration Restore (CVSS 4.4, Gitea Open Source Git Server · gitea.dev)
- [CVE-2026-58417](https://cve.now/CVE-2026-58417.md): REST API exposes organization membership of private organizations to public (CVSS 7.5, Gitea Open Source Git Server · gitea.dev)
- [CVE-2026-58416](https://cve.now/CVE-2026-58416.md): Fork-PR Actions task can read a third private repository via the collaborative-owner branch (missing fork-PR guard) (CVSS 7.1, Gitea Open Source Git Server · gitea.dev)
- [CVE-2026-58314](https://cve.now/CVE-2026-58314.md): Two SSRF findings in Gitea 1.26.2 (CVSS 7.7, Gitea Open Source Git Server · code.gitea.io/gitea +1)
- [CVE-2026-57897](https://cve.now/CVE-2026-57897.md): Cross-Repo Information Disclosure via Org-Level Actions Run/Job APIs (CVSS 6.5, Gitea Open Source Git Server · code.gitea.io/gitea +1)
- [CVE-2026-57894](https://cve.now/CVE-2026-57894.md): Repository Migration Follows Git HTTP Redirects After URL Allow/Block Validation, Enabling Internal Git Repository Exfiltration (CVSS 8.5, Gitea Open Source Git Server · gitea.dev +1)
- [CVE-2026-57886](https://cve.now/CVE-2026-57886.md): Cross-repository issue/comment attachment re-linking can expose private attachment content (CVSS 5.9, Gitea Open Source Git Server · code.gitea.io/gitea +1)
- [CVE-2026-56755](https://cve.now/CVE-2026-56755.md): Denial of Service (CPU & Memory Exhaustion) via O(N^2) String Concatenation in Debian Package Upload (CVSS 6.2, Gitea Open Source Git Server · gitea.dev +1)
- [CVE-2026-56750](https://cve.now/CVE-2026-56750.md): Gitea Remember-Me Token Theft Not Invalidating Attacker Session (CVSS 9.1, Gitea Open Source Git Server · code.gitea.io/gitea +1)
- [CVE-2026-56657](https://cve.now/CVE-2026-56657.md): Gitea SSH Key Parser Denial of Service (CVSS 6.2, Gitea Open Source Git Server · code.gitea.io/gitea +1)
- [CVE-2026-56654](https://cve.now/CVE-2026-56654.md): Privilege Escalation via Access Token Scope Escalation in API (CVSS 9.8, Gitea Open Source Git Server · code.gitea.io/gitea +1)
- [CVE-2026-56443](https://cve.now/CVE-2026-56443.md): Token public-only scope bypassed on Limited-visibility owners (Repository + Package categories) — residual after CVE-2026-25714 / PR #37118 (CVSS 9.6, Gitea Open Source Git Server · gitea.dev +1)
- [CVE-2026-55987](https://cve.now/CVE-2026-55987.md): OAuth2 sign-in reactivates an administrator-deactivated account on auth sources without refresh tokens (incomplete fix of #38009) (CVSS 8.1, Gitea Open Source Git Server · gitea.dev +1)
- [CVE-2026-55986](https://cve.now/CVE-2026-55986.md): Email Management API Bypasses ManageCredentials Feature Restrictions (CVSS 5.4, Gitea Open Source Git Server)
- [CVE-2026-55984](https://cve.now/CVE-2026-55984.md): Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service (CVSS 2.7, Gitea Open Source Git Server · code.gitea.io/gitea +1)
- [CVE-2026-55982](https://cve.now/CVE-2026-55982.md): OIDC userinfo Endpoint Returns Identity Claims Without Enforcing API Token Scopes (CVSS 9.1, Gitea Open Source Git Server · gitea.dev +1)
- [CVE-2026-54481](https://cve.now/CVE-2026-54481.md): Internal API HTTP client hardcodes InsecureSkipVerify:true with no config override (CWE-295) (CVSS 7.5, Gitea Open Source Git Server · gitea.dev +1)
- [CVE-2026-50105](https://cve.now/CVE-2026-50105.md): RSS/Atom feed handlers bypass API-token scope & public-only confinement (incomplete fix of #37698) (CVSS 4.3, Gitea Open Source Git Server · code.gitea.io/gitea +1)
- [CVE-2026-42931](https://cve.now/CVE-2026-42931.md): Denial of Service via Unbounded io.ReadAll in NPM Package Tag Endpoint (CVSS 6.5, Gitea Open Source Git Server · code.gitea.io/gitea +1)
- [CVE-2026-23603](https://cve.now/CVE-2026-23603.md): Blind SSRF in OAuth2 avatar synchronization via unvalidated OIDC picture claim (CVSS 3.1, Gitea Open Source Git Server · gitea.dev +1)
- [CVE-2026-59109](https://cve.now/CVE-2026-59109.md): Zalktis: SQL injection via partner-controlled fields in imported e-invoices (CVSS 8.8, Zalktis Programmas (SIA "Zalktis Programmas") Zalktis)
- [CVE-2026-73266](https://cve.now/CVE-2026-73266.md): Clusterclaims-controller: confused deputy: tenant-controlled clusterclaim labels propagated to managedcluster, enabling cross-tenant managedclusterset join (CVSS 7.1, Red Hat multicluster engine for Kubernetes)
- [CVE-2026-13051](https://cve.now/CVE-2026-13051.md): Form::Processor::Field::HtmlArea versions from 0.06 through 1.162360 for Perl allow attacker selected method dispatch and resource exhaustion via an HTML::Tidy diagnostic that validate passes to add\_error as a Locale::Maketext template (CVSS 9.1, Form-Processor)
- [CVE-2026-13048](https://cve.now/CVE-2026-13048.md): Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because load\_lexicon interpolates the language attribute into the catalog filename (CVSS 8.2, Data-MuForm)
- [CVE-2022-4993](https://cve.now/CVE-2022-4993.md): HTML::FormHandler versions before 0.410000 for Perl allow attacker selected method dispatch and resource exhaustion because \_apply\_actions and add\_error use error message text built from request data as a Locale::Maketext bracket notation template (CVSS 9.1, HTML-FormHandler)
- [CVE-2026-55402](https://cve.now/CVE-2026-55402.md): CVE-2026-55402 is an out of bounds read vulnerability in Secure Access servers prior to version 14.57. (CVSS 8.7, Absolute Security Secure Access)
- [CVE-2026-55401](https://cve.now/CVE-2026-55401.md): CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57. (CVSS 6.9, Absolute Security Secure Access)
- [CVE-2026-55400](https://cve.now/CVE-2026-55400.md): CVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57. (CVSS 6.0, Absolute Security Secure Access)
- [CVE-2026-73532](https://cve.now/CVE-2026-73532.md): Fluent Forms Pro 6.2.7 Embedded Malicious Code via Tampered Plugin Build (CVSS 9.3, WPManageNinja Fluent Forms Pro)
- [CVE-2026-73533](https://cve.now/CVE-2026-73533.md): Ninja Tables Pro 5.2.11 Embedded Malicious Code via Tampered Plugin Build (CVSS 9.3, WPManageNinja Ninja Tables Pro)
- [CVE-2026-73671](https://cve.now/CVE-2026-73671.md): Saurus CMS Unauthenticated Open Redirect via logout url parameter (CVSS 5.1, Saurus CMS Community Edition)
- [CVE-2026-19487](https://cve.now/CVE-2026-19487.md): Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S\_find\_byclass (CVSS 5.3, perl)
- [CVE-2026-19744](https://cve.now/CVE-2026-19744.md): Stored Cross-site Scripting in Pentestify Markdown renderer via unescaped quotes (CVSS 5.1, maalfer Pentestify)
- [CVE-2026-73515](https://cve.now/CVE-2026-73515.md): PostGIS \< 3.7.0beta2 Out-of-Bounds Read via FlatGeobuf Buffer (CVSS 7.2, PostGIS)
- [CVE-2026-73514](https://cve.now/CVE-2026-73514.md): PostGIS address\_standardizer Out-of-Bounds Write via standardize\_address() (CVSS 8.7, PostGIS address\_standardizer)
- [CVE-2026-73670](https://cve.now/CVE-2026-73670.md): CMS Admin SQL Injection via db\_data.php table\_name Parameter (CVSS 8.6, Saurus CMS Community Edition)
- [CVE-2026-73576](https://cve.now/CVE-2026-73576.md): In Zimbra Collaboration (ZCS) before 10.1.17, weak cryptographic key generation vulnerability exists in the OnlyOffice integration. (CVSS 6.3, Zimbra Collaboration)
- [CVE-2026-73575](https://cve.now/CVE-2026-73575.md): In Zimbra Collaboration (ZCS) before 10.1.17, a Cross-Site Request Forgery (CSRF) vulnerability exists in the Exchange Web Services (EWS) en (CVSS 3.1, Zimbra Collaboration)
- [CVE-2026-73574](https://cve.now/CVE-2026-73574.md): In Zimbra Collaboration before 10.1.17, a local file inclusion (LFI) vulnerability exists in the Zimbra Classic Web Client due to improper v (CVSS 3.1, Zimbra Collaboration)
- [CVE-2026-73573](https://cve.now/CVE-2026-73573.md): In Zimbra Collaboration (ZCS) before 10.1.17, a path traversal vulnerability exists in the Zimbra Briefcase document editing functionality d (CVSS 3.1, Zimbra Collaboration)
- [CVE-2026-73572](https://cve.now/CVE-2026-73572.md): In Zimbra Collaboration (ZCS) before 10.1.17, a stored cross-site scripting (XSS) vulnerability exists in the Zimbra Classic Web Client due (CVSS 6.1, Zimbra Collaboration)
- [CVE-2026-73571](https://cve.now/CVE-2026-73571.md): An authorization bypass vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.17 due to improper authorization validation in delega (CVSS 3.1, Zimbra Collaboration)
- [CVE-2026-73570](https://cve.now/CVE-2026-73570.md): A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installed (CVSS 8.9, KEV, Zimbra Collaboration)
- [CVE-2026-19710](https://cve.now/CVE-2026-19710.md): SourceCodester Simple Student Information System view\_department.php sql injection (CVSS 6.9, SourceCodester Simple Student Information System)
- [CVE-2026-73559](https://cve.now/CVE-2026-73559.md): vLLM: Completion prompt lists fan out into unbounded engine requests (CVSS 6.5, vllm-project vllm · vllm)
- [CVE-2026-73558](https://cve.now/CVE-2026-73558.md): vLLM: Cross-User Data Leak Vulnerability (CVSS 5.3, vllm-project vllm · vllm)
- [CVE-2026-49856](https://cve.now/CVE-2026-49856.md): @jshookmcp/jshook: ICMP probe and traceroute skip local-network SSRF authorization (CVSS 4.3, vmoranv jshookmcp · @jshookmcp/jshook)
- [CVE-2026-73557](https://cve.now/CVE-2026-73557.md): vLLM: Incomplete CVE-2025-62164 remediation can be bypassed by concurrent prompt parts (CVSS 6.3, vllm-project vllm · vllm)
- [CVE-2026-73556](https://cve.now/CVE-2026-73556.md): vLLM: ReDoS via structured\_outputs.regex in the lm-format-enforcer backend (no compile timeout) — missed sibling of CVE-2026-55574 (CVSS 5.3, vllm-project vllm · vllm)
- [CVE-2026-14256](https://cve.now/CVE-2026-14256.md): ELAN reported a potential out-of-bounds write vulnerability in the ELAN TrackPoint driver that, under certain circumstances, could allow a l (CVSS 5.7, Lenovo E16 Gen 2 (Type 21M5, 21M6) Laptops (ThinkPad)… +259)
- [CVE-2026-15994](https://cve.now/CVE-2026-15994.md): During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vant (CVSS 7.3, Lenovo Commercial Vantage · Lenovo Vantage)
- [CVE-2026-63423](https://cve.now/CVE-2026-63423.md): During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise fo (CVSS 8.5, Lenovo Accessories and Display Manager)
- [CVE-2026-63424](https://cve.now/CVE-2026-63424.md): During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that could allow a local authentic (CVSS 7.0, Lenovo Dock Manager)
- [CVE-2026-63425](https://cve.now/CVE-2026-63425.md): During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Dock Manager that could allo (CVSS 8.5, Lenovo Dock Manager)
- [CVE-2026-63426](https://cve.now/CVE-2026-63426.md): During an internal security assessment, a potential vulnerability was discovered in Lenovo Dock Manager that could allow an authenticated lo (CVSS 6.9, Lenovo Dock Manager)
- [CVE-2026-12036](https://cve.now/CVE-2026-12036.md): An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Commercial Vantage that could al (CVSS 6.9, Lenovo Vantage)
- [CVE-2026-6387](https://cve.now/CVE-2026-6387.md): A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute (CVSS 7.3, Lenovo System Update)
- [CVE-2026-49857](https://cve.now/CVE-2026-49857.md): auth-fetch-mcp has SSRF Protection Bypass via IPv4-mapped IPv6 Loopback (CVSS 7.4, ymw0407 auth-fetch-mcp · auth-fetch-mcp)
- [CVE-2026-73555](https://cve.now/CVE-2026-73555.md): vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messages (CVSS 5.3, vllm-project vllm · vllm)
- [CVE-2026-70452](https://cve.now/CVE-2026-70452.md): rsync 3.1.0 \< 3.5.0 Access Control Bypass via DNS Resolution Failure (CVSS 9.1, RsyncProject rsync)
- [CVE-2026-70453](https://cve.now/CVE-2026-70453.md): rsync \< 3.5.0 Algorithmic Complexity DoS via hash\_search() (CVSS 8.7, RsyncProject rsync)
- [CVE-2026-70454](https://cve.now/CVE-2026-70454.md): rsync \< 3.5.0 TLS Certificate Validation Bypass via SSL/OpenSSL Mode (CVSS 7.6, RsyncProject rsync)
- [CVE-2026-70455](https://cve.now/CVE-2026-70455.md): rsync 3.4.2 \< 3.5.0 DoS via --zt Zstandard Compression Thread Exhaustion (CVSS 8.7, RsyncProject rsync)
- [CVE-2026-70456](https://cve.now/CVE-2026-70456.md): rsync 3.0.1 \< 3.5.0 Heap Out-of-Bounds Write via read\_args() (CVSS 8.8, RsyncProject rsync)
- [CVE-2026-70457](https://cve.now/CVE-2026-70457.md): rsync 3.2.3 \< 3.5.0 Out-of-Bounds Write via parse\_size\_arg() (CVSS 8.3, RsyncProject rsync)
- [CVE-2026-70458](https://cve.now/CVE-2026-70458.md): rsync 3.0.0 \< 3.5.0 Out-of-Bounds Write via FLAG\_HLINKED Handling (CVSS 8.8, RsyncProject rsync)
- [CVE-2026-70459](https://cve.now/CVE-2026-70459.md): rsync 3.0.0 \< 3.5.0 Daemon Crash via Malformed File List Entry (CVSS 6.9, RsyncProject rsync)
- [CVE-2026-70460](https://cve.now/CVE-2026-70460.md): rsync 2.3.3 \< 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink (CVSS 9.2, RsyncProject rsync)
- [CVE-2026-70461](https://cve.now/CVE-2026-70461.md): rsync 3.2.5 \< 3.5.0 Heap Out-of-Bounds Write via files-from Entry (CVSS 8.8, RsyncProject rsync)
- [CVE-2026-70462](https://cve.now/CVE-2026-70462.md): rsync 3.1.0 \< 3.5.0 Signed Integer Overflow via MSG\_IO\_TIMEOUT (CVSS 7.1, RsyncProject rsync)
- [CVE-2026-70463](https://cve.now/CVE-2026-70463.md): rsync 3.1.0 \< 3.5.0 Authorization Bypass via auth users Directive Parsing (CVSS 8.6, RsyncProject rsync)
- [CVE-2026-70464](https://cve.now/CVE-2026-70464.md): rsync 2.0.0 \< 3.5.0 Connection Slot Exhaustion DoS via Handshake Stall (CVSS 8.7, RsyncProject rsync)
- [CVE-2026-53801](https://cve.now/CVE-2026-53801.md): rsync \< 3.5.0 Symlink Race Condition Directory Traversal (CVSS 8.2, RsyncProject rsync)
- [CVE-2026-53800](https://cve.now/CVE-2026-53800.md): rsync \< 3.5.0 Symlink Race Condition via --remove-source-files (CVSS 5.7, RsyncProject rsync)
- [CVE-2026-53799](https://cve.now/CVE-2026-53799.md): rsync \< 3.5.0 Symlink Race Condition via ACL/xattr Application (CVSS 7.2, RsyncProject rsync)
- [CVE-2026-53797](https://cve.now/CVE-2026-53797.md): rsync \< 3.5.0 Symlink Race Condition Information Disclosure (CVSS 5.7, RsyncProject rsync)
- [CVE-2026-53796](https://cve.now/CVE-2026-53796.md): rsync \< 3.5.0 TOCTOU Race Condition via Destination Directory Handling (CVSS 5.8, RsyncProject rsync)
- [CVE-2026-53795](https://cve.now/CVE-2026-53795.md): rsync \< 3.5.0 Arbitrary File Write via --temp-dir/--link-dest (CVSS 7.2, RsyncProject rsync)
- [CVE-2026-53794](https://cve.now/CVE-2026-53794.md): rsync \< 3.5.0 Denial of Service via --max-alloc=0 Logic Error (CVSS 6.9, RsyncProject rsync)
- [CVE-2026-53793](https://cve.now/CVE-2026-53793.md): rsync \< 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode (CVSS 9.1, RsyncProject rsync)
- [CVE-2026-53792](https://cve.now/CVE-2026-53792.md): rsync \< 3.5.0 Out-of-Bounds Read via Zero-Length Checksum Block (CVSS 7.1, RsyncProject rsync)
- [CVE-2026-53791](https://cve.now/CVE-2026-53791.md): rsync \< 3.5.0 Daemon IP Spoofing via PROXY Protocol Header (CVSS 9.1, RsyncProject rsync)
- [CVE-2026-53790](https://cve.now/CVE-2026-53790.md): rsync \< 3.5.0 Command Injection via Multiple Code Paths (CVSS 9.2, RsyncProject rsync)
- [CVE-2026-53789](https://cve.now/CVE-2026-53789.md): rsync \< 3.5.0 Arbitrary File Deletion via Malicious File List (CVSS 7.1, RsyncProject rsync)
- [CVE-2026-53788](https://cve.now/CVE-2026-53788.md): rsync \< 3.5.0 Newline Injection via name-converter uid/gid mapping (CVSS 6.9, RsyncProject rsync)
- [CVE-2026-49820](https://cve.now/CVE-2026-49820.md): Probo has an open redirect bypass via path normalization (CVSS 4.7, getprobo probo · go.probo.inc/probo)
- [CVE-2026-53798](https://cve.now/CVE-2026-53798.md): rsync \< 3.5.0 Privilege Confusion via name-converter uid/gid mapping (CVSS 6.9, RsyncProject rsync)
- [CVE-2026-53786](https://cve.now/CVE-2026-53786.md): rsync \< 3.5.0 Filter Rule Bypass via --filter Merge Directive (CVSS 6.9, RsyncProject rsync)
- [CVE-2026-53785](https://cve.now/CVE-2026-53785.md): rsync \< 3.5.0 Path Traversal Write Escape via --relative Mode (CVSS 6.9, RsyncProject rsync)
- [CVE-2026-53784](https://cve.now/CVE-2026-53784.md): rsync \< 3.5.0 Path Traversal via Symlink Module Root (CVSS 8.4, RsyncProject rsync)
- [CVE-2026-53783](https://cve.now/CVE-2026-53783.md): rsync \< 3.5.0 TOCTOU Race Condition Directory Escape via rrsync (CVSS 8.6, RsyncProject rsync)
- [CVE-2026-53803](https://cve.now/CVE-2026-53803.md): rsync \< 3.5.0 Symlink Following Arbitrary File Overwrite (CVSS 8.5, RsyncProject rsync)
- [CVE-2026-53802](https://cve.now/CVE-2026-53802.md): rsync \< 3.5.0 Arbitrary File Read via Symlink Following (CVSS 8.4, RsyncProject rsync)
- [CVE-2026-73509](https://cve.now/CVE-2026-73509.md): OpenList: Authenticated users can rename files outside their base path via batch rename \`src\_name\` traversal (CVSS 7.6, OpenListTeam OpenList · github.com/OpenListTeam/OpenList… +2)
- [CVE-2026-73508](https://cve.now/CVE-2026-73508.md): Netty: Memory Leak in DNS Record Decoder via Malformed Domain Names (CVSS 5.3, netty · io.netty:netty-codec-dns)
- [CVE-2026-65936](https://cve.now/CVE-2026-65936.md): RS9116W/SiWx917 malformed packet with increased length field causes memory leak (CVSS 5.3, silabs.com WiseConnect)
- [CVE-2026-28154](https://cve.now/CVE-2026-28154.md): WordPress Samex and M.Anh WordPress themes affected by Cross Site Scripting (XSS) vulnerability (CVSS 7.1, snstheme Samex - Clean, Minimal Shop WooCommerce WordPress…)
- [CVE-2026-73507](https://cve.now/CVE-2026-73507.md): Netty: Denial of Service in XmlFrameDecoder via CPU Exhaustion (CVSS 7.5, netty · io.netty:netty-codec-xml)
- [CVE-2026-65935](https://cve.now/CVE-2026-65935.md): Bypassing passkey entry in legacy pairing (CVSS 7.6, silabs.com WiseConnect)
- [CVE-2026-73506](https://cve.now/CVE-2026-73506.md): Oh My Posh: Terminal escape sequence injection via unsanitized prompt segment data (CVSS 6.1, JanDeDobbeleer oh-my-posh · github.com/jandedobbeleer/oh-my…)
- [CVE-2026-65934](https://cve.now/CVE-2026-65934.md): BT122 plaintext pause encryption request causes DOS (CVSS 7.1, silabs.com BT122)
- [CVE-2026-65933](https://cve.now/CVE-2026-65933.md): BT122 malformed packet with increased length field causes memory leak (CVSS 5.3, silabs.com BT122)
- [CVE-2026-73505](https://cve.now/CVE-2026-73505.md): Oh My Posh: Arbitrary command execution via template injection in the path segment (CVSS 7.8, JanDeDobbeleer oh-my-posh · github.com/jandedobbeleer/oh-my…)
- [CVE-2026-65932](https://cve.now/CVE-2026-65932.md): BT122 stops advertising (CVSS 5.3, silabs.com BT122)
- [CVE-2026-19293](https://cve.now/CVE-2026-19293.md): SMP security request (CVSS 8.8, silabs.com WiseConnect)
- [CVE-2026-19292](https://cve.now/CVE-2026-19292.md): Bluetooth re-pairing with legitimate device can use lower security level (CVSS 8.8, silabs.com WiseConnect)
- [CVE-2026-19291](https://cve.now/CVE-2026-19291.md): Bluetooth re-pairing can use a lower security level than previous (CVSS 8.8, silabs.com WiseConnect)
- [CVE-2026-16101](https://cve.now/CVE-2026-16101.md): forced re-pairing with already bonded device (CVSS 8.8, silabs.com WiseConnect)
- [CVE-2026-19734](https://cve.now/CVE-2026-19734.md): IDOR in Prospero Flow CRM allows cross-tenant product disclosure and hijacking (CVSS 8.6, Roskus Prospero Flow CRM)
- [CVE-2026-68454](https://cve.now/CVE-2026-68454.md): KVM: s390: pci: Fix handling of AIF enable without AISB (CVSS 8.8, Linux)
- [CVE-2026-68453](https://cve.now/CVE-2026-68453.md): s390/zcrypt: Fix buffer over-read in cca\_cipher2protkey (CVSS 7.1, Linux)
- [CVE-2026-68452](https://cve.now/CVE-2026-68452.md): s390/zcrypt: Validate length for CCA AES cipher key requests (CVSS 7.8, Linux)
- [CVE-2026-68451](https://cve.now/CVE-2026-68451.md): s390/zcrypt: Validate length for CCA ECC private key requests (CVSS 7.8, Linux)
- [CVE-2026-14456](https://cve.now/CVE-2026-14456.md): Unbounded Memory Growth in QUIC Server Incoming Channel Queue (CVSS 7.5, OpenSSL)
- [CVE-2026-66256](https://cve.now/CVE-2026-66256.md): Apache Shindig Common, Apache Shindig Social-Api: Remote Code Execution via XStream deserialization (OpenSocial REST API) (CVSS 7.2, Apache Software Foundation Apache Shindig Common · Apache S…)
- [CVE-2026-28002](https://cve.now/CVE-2026-28002.md): WordPress Booktics plugin 1.0.22 - SQL Injection vulnerability (CVSS 8.5, Arraytics Booktics)
- [CVE-2026-73403](https://cve.now/CVE-2026-73403.md): WordPress User Registration plugin \<= 5.2.6 - Broken Access Control vulnerability (CVSS 5.3, wpeverest User Registration)
- [CVE-2026-73401](https://cve.now/CVE-2026-73401.md): WordPress InstaWP Connect plugin \<= 0.1.3.7 - Broken Access Control vulnerability (CVSS 5.3, InstaWP Connect)
- [CVE-2026-73357](https://cve.now/CVE-2026-73357.md): WordPress GiveWP plugin \< 4.16.6 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Nexcess GiveWP)
- [CVE-2026-73353](https://cve.now/CVE-2026-73353.md): WordPress Revolut Gateway for WooCommerce plugin \< 4.22.10 - Broken Access Control vulnerability (CVSS 5.3, revolutbusiness Revolut Gateway for WooCommerce)
- [CVE-2026-73349](https://cve.now/CVE-2026-73349.md): WordPress GiveWP plugin \< 4.16.6 - Broken Access Control vulnerability (CVSS 5.3, Nexcess GiveWP)
- [CVE-2026-73346](https://cve.now/CVE-2026-73346.md): WordPress MailChimp For WooCommerce plugin \< 6.2 - SQL Injection vulnerability (CVSS 7.6, MailChimp For WooCommerce)
- [CVE-2026-73344](https://cve.now/CVE-2026-73344.md): WordPress WP Data Access plugin \<= 5.5.79 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, Passionate Programmer Peter WP Data Access)
- [CVE-2026-73340](https://cve.now/CVE-2026-73340.md): WordPress Featured Image from URL plugin \<= 5.3.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, fifu.app Featured Image from URL)
- [CVE-2026-66704](https://cve.now/CVE-2026-66704.md): WordPress Gutenverse Companion plugin \<= 2.5.1 - Server Side Request Forgery (SSRF) vulnerability (CVSS 7.2, Jegstudio Gutenverse Companion)
- [CVE-2026-66700](https://cve.now/CVE-2026-66700.md): WordPress Smart Online Order for Clover plugin \<= 1.6.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, ZAYTECH Smart Online Order for Clover)
- [CVE-2026-66698](https://cve.now/CVE-2026-66698.md): WordPress SureDash plugin \<= 1.10.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Brainstorm Force SureDash)
- [CVE-2026-66697](https://cve.now/CVE-2026-66697.md): WordPress Colissimo Officiel : Méthodes de livraison pour WooCommerce plugin \<= 2.10.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Colissimo Officiel : Méthodes de livraison pour WooCommerce)
- [CVE-2026-66693](https://cve.now/CVE-2026-66693.md): WordPress Motors plugin \<= 1.4.113 - Broken Access Control vulnerability (CVSS 6.5, Stylemix Motors)
- [CVE-2026-66691](https://cve.now/CVE-2026-66691.md): WordPress Nokri theme \<= 1.6.6 - Broken Access Control vulnerability (CVSS 9.8, scriptsbundle Nokri)
- [CVE-2026-66689](https://cve.now/CVE-2026-66689.md): WordPress Anti Spam and list cleaner – AcyChecker plugin \<= 2.0.0 - Broken Access Control vulnerability (CVSS 6.3, AcyMailing Newsletter Team Anti Spam and list cleaner &#821…)
- [CVE-2026-66687](https://cve.now/CVE-2026-66687.md): WordPress WpBookingly plugin \<= 1.3.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, magepeopleteam WpBookingly)
- [CVE-2026-66661](https://cve.now/CVE-2026-66661.md): WordPress Directories Pro plugin \<= 2.0.5 - Privilege Escalation vulnerability (CVSS 7.7, Onokazu Directories Pro)
- [CVE-2026-66660](https://cve.now/CVE-2026-66660.md): WordPress Contact Form 7 – PayPal & Stripe Add-on plugin \<= 2.5.1 - Broken Access Control vulnerability (CVSS 6.5, Scott Paterson Contact Form 7 – PayPal & Stripe Add-on)
- [CVE-2026-66658](https://cve.now/CVE-2026-66658.md): WordPress Reviewer plugin \<= 3.14.2 - SQL Injection vulnerability (CVSS 8.5, MVPThemes Reviewer)
- [CVE-2026-66657](https://cve.now/CVE-2026-66657.md): WordPress Biagiotti Core plugin \<= 2.1.1 - Local File Inclusion vulnerability (CVSS 8.1, Mikado-Themes Biagiotti Core)
- [CVE-2026-66656](https://cve.now/CVE-2026-66656.md): WordPress Foton Core plugin \<= 1.1.1 - Local File Inclusion vulnerability (CVSS 8.1, Mikado-Themes Foton Core)
- [CVE-2026-66655](https://cve.now/CVE-2026-66655.md): WordPress MultiParcels Shipping For WooCommerce plugin \<= 1.30.36 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, MultiParcels Shipping For WooCommerce)
- [CVE-2026-66654](https://cve.now/CVE-2026-66654.md): WordPress Vehica Core plugin \<= 1.0.104 - Server Side Request Forgery (SSRF) vulnerability (CVSS 6.0, TangibleWP Vehica Core)
- [CVE-2026-66653](https://cve.now/CVE-2026-66653.md): WordPress Barista theme \<= 2.5.1 - Local File Inclusion vulnerability (CVSS 8.1, Edge-Themes Barista)
- [CVE-2026-66478](https://cve.now/CVE-2026-66478.md): WordPress Church Admin plugin \<= 5.1.1 - SQL Injection vulnerability (CVSS 9.3, andy\_moyle Church Admin)
- [CVE-2026-66472](https://cve.now/CVE-2026-66472.md): WordPress Everest Backup plugin \<= 2.3.12 - SQL Injection vulnerability (CVSS 9.3, everestthemes Everest Backup)
- [CVE-2026-66471](https://cve.now/CVE-2026-66471.md): WordPress Accordion plugin \<= 3.0.6 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Themepoints Accordion)
- [CVE-2026-66469](https://cve.now/CVE-2026-66469.md): WordPress Arvow AI SEO Writer plugin \<= 1.5.3 - Broken Access Control vulnerability (CVSS 7.5, Afonso Matos Arvow AI SEO Writer)
- [CVE-2026-66468](https://cve.now/CVE-2026-66468.md): WordPress Local Delivery Drivers for WooCommerce plugin \<= 3.0.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, powerfulwp Local Delivery Drivers for WooCommerce)
- [CVE-2026-66467](https://cve.now/CVE-2026-66467.md): WordPress FluentCommunity plugin \<= 2.7.5 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, WPManageNinja FluentCommunity)
- [CVE-2026-66466](https://cve.now/CVE-2026-66466.md): WordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin \<= 2.1.1 - Broken Access Control vulnerability (CVSS 7.5, weDevs StoreGrowth: Smart Sales Booster for WooCommerce | B…)
- [CVE-2026-66465](https://cve.now/CVE-2026-66465.md): WordPress Cartify theme \<= 1.3.0.1 - Account Takeover vulnerability (CVSS 9.8, AgniHD Cartify)
- [CVE-2026-66464](https://cve.now/CVE-2026-66464.md): WordPress Internal Link Optimiser plugin \<= 5.2.7 - Broken Access Control vulnerability (CVSS 6.5, Toast Plugins Internal Link Optimiser)
- [CVE-2026-66463](https://cve.now/CVE-2026-66463.md): WordPress iCARRY plugin \<= 2.9 - Sensitive Data Exposure vulnerability (CVSS 7.5, Hassan Fakih iCARRY)
- [CVE-2026-66462](https://cve.now/CVE-2026-66462.md): WordPress WooCommerce Appointments plugin \<= 5.3.8 - Sensitive Data Exposure vulnerability (CVSS 7.5, BookingWP WooCommerce Appointments)
- [CVE-2026-66461](https://cve.now/CVE-2026-66461.md): WordPress SMEPay: UPI Gateway for WooCommerce plugin \<= 1.0.5 - Payment Bypass vulnerability (CVSS 7.5, SMEPay: UPI Gateway for WooCommerce)
- [CVE-2026-66460](https://cve.now/CVE-2026-66460.md): WordPress AfterShip Tracking plugin \<= 1.18.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, AfterShip & Automizely AfterShip Tracking)
- [CVE-2026-66459](https://cve.now/CVE-2026-66459.md): WordPress AI for SEO plugin \<= 2.4.2 - Broken Access Control vulnerability (CVSS 6.5, Space Codes AI for SEO)
- [CVE-2026-66458](https://cve.now/CVE-2026-66458.md): WordPress RealPress plugin \<= 1.1.2 - SQL Injection vulnerability (CVSS 9.3, ThimPress RealPress)
- [CVE-2026-66456](https://cve.now/CVE-2026-66456.md): WordPress Profile Extra Fields by BestWebSoft plugin \<= 1.3.4 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Profile Extra Fields by BestWebSoft)
- [CVE-2026-66455](https://cve.now/CVE-2026-66455.md): WordPress ReactPress plugin \<= 3.4.0 - Broken Access Control vulnerability (CVSS 6.0, rockiger ReactPress)
- [CVE-2026-66454](https://cve.now/CVE-2026-66454.md): WordPress WP Social Avatar plugin \<= 1.5 - Broken Access Control vulnerability (CVSS 6.5, Maruti Mohanty WP Social Avatar)
- [CVE-2026-66453](https://cve.now/CVE-2026-66453.md): WordPress Salon booking system plugin \<= 10.30.26 - Broken Authentication vulnerability (CVSS 9.8, Dimitri Grassi Salon booking system)
- [CVE-2026-66450](https://cve.now/CVE-2026-66450.md): WordPress Geo Mashup plugin \<= 1.13.18 - Local File Inclusion vulnerability (CVSS 8.1, Dylan Kuhn Geo Mashup)
- [CVE-2026-66449](https://cve.now/CVE-2026-66449.md): WordPress Geo Mashup plugin \<= 1.13.18 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Dylan Kuhn Geo Mashup)
- [CVE-2026-66446](https://cve.now/CVE-2026-66446.md): WordPress If-So Dynamic Content Personalization plugin \<= 1.10 - SQL Injection vulnerability (CVSS 9.3, If-So Dynamic Content Personalization)
- [CVE-2026-66444](https://cve.now/CVE-2026-66444.md): WordPress Payment Forms for Paystack plugin \<= 4.0.5 - Sensitive Data Exposure vulnerability (CVSS 6.5, kendysond Payment Forms for Paystack)
- [CVE-2026-66443](https://cve.now/CVE-2026-66443.md): WordPress REST API Log plugin \<= 1.7.1 - Sensitive Data Exposure vulnerability (CVSS 7.5, Pete Nelson REST API Log)
- [CVE-2026-66441](https://cve.now/CVE-2026-66441.md): WordPress MultiVendorX plugin \<= 5.0.10 - Broken Access Control vulnerability (CVSS 7.5, MultiVendorX)
- [CVE-2026-66436](https://cve.now/CVE-2026-66436.md): WordPress Active Products Tables for WooCommerce plugin \<= 1.1.1 - SQL Injection vulnerability (CVSS 9.3, RealMag777 Active Products Tables for WooCommerce)
- [CVE-2026-66432](https://cve.now/CVE-2026-66432.md): WordPress WPJAM Basic plugin \<= 7.0.2.1 - Sensitive Data Exposure vulnerability (CVSS 7.5, denishua WPJAM Basic)
- [CVE-2026-66431](https://cve.now/CVE-2026-66431.md): WordPress Bitcoin Lightning Payment Gateway for WooCommerce (via CLINK) plugin \<= 1.0.7 - Broken Access Control vulnerability (CVSS 7.5, WoompaLoompa Bitcoin Lightning Payment Gateway for WooComme…)
- [CVE-2026-66430](https://cve.now/CVE-2026-66430.md): WordPress Visitor Traffic Real Time Statistics Pro plugin \<= 11.10 - SQL Injection vulnerability (CVSS 8.5, CODEPRESS Visitor Traffic Real Time Statistics Pro)
- [CVE-2026-66429](https://cve.now/CVE-2026-66429.md): WordPress Visitor Traffic Real Time Statistics Pro plugin \<= 11.10 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, CODEPRESS Visitor Traffic Real Time Statistics Pro)
- [CVE-2026-66426](https://cve.now/CVE-2026-66426.md): WordPress WP-Stats plugin \<= 2.56 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Lester Chan WP-Stats)
- [CVE-2026-66424](https://cve.now/CVE-2026-66424.md): WordPress SMS Alert Order Notifications plugin \<= 3.9.7 - Privilege Escalation vulnerability (CVSS 9.8, Cozy Vision Technologies Pvt. SMS Alert Order Notifications)
- [CVE-2026-65582](https://cve.now/CVE-2026-65582.md): WordPress AI Hub theme \<= 1.3.10 - Arbitrary File Download vulnerability (CVSS 7.7, LiquidThemes AI Hub)
- [CVE-2026-65580](https://cve.now/CVE-2026-65580.md): WordPress Agrion theme \<= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, bracketweb Agrion)
- [CVE-2026-61984](https://cve.now/CVE-2026-61984.md): WordPress WPMobile.App plugin \<= 11.77 - Broken Access Control vulnerability (CVSS 7.5, Amauri WPMobile.App)
- [CVE-2026-61980](https://cve.now/CVE-2026-61980.md): WordPress OMGF Pro plugin \<= 5.2.7 - Arbitrary File Download vulnerability (CVSS 7.5, Daan.dev OMGF Pro)
- [CVE-2026-61979](https://cve.now/CVE-2026-61979.md): WordPress SAML SP Single Sign On plugin \<= 5.4.3 - Privilege Escalation vulnerability (CVSS 8.1, miniOrange SAML SP Single Sign On)
- [CVE-2026-61978](https://cve.now/CVE-2026-61978.md): WordPress Secure Card Gateway for ePay Paycenter (Piraeus Bank) plugin \<= 1.0.32 - Broken Access Control vulnerability (CVSS 6.5, webhosting4ugr Secure Card Gateway for ePay Paycenter)
- [CVE-2026-61974](https://cve.now/CVE-2026-61974.md): WordPress Mang Board WP plugin \<= 2.3.4 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Kitae Park Mang Board WP)
- [CVE-2026-61969](https://cve.now/CVE-2026-61969.md): WordPress Listdom plugin \<= 5.6.0 - SQL Injection vulnerability (CVSS 9.3, Webilia Listdom)
- [CVE-2026-61967](https://cve.now/CVE-2026-61967.md): WordPress miniorange otp verification plugin \<= 5.5.1 - Privilege Escalation vulnerability (CVSS 9.8, miniorange otp verification)
- [CVE-2026-61966](https://cve.now/CVE-2026-61966.md): WordPress WPJAM Basic plugin \<= 7.0.1 - SQL Injection vulnerability (CVSS 9.3, denishua WPJAM Basic)
- [CVE-2026-61965](https://cve.now/CVE-2026-61965.md): WordPress GeekyBot plugin \<= 1.2.6 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, ahmadgb GeekyBot)
- [CVE-2026-61962](https://cve.now/CVE-2026-61962.md): WordPress WP BASE Booking plugin \<= 6.3.0 - Arbitrary Code Execution vulnerability (CVSS 10.0, Hakan Ozevin WP BASE Booking)
- [CVE-2026-61960](https://cve.now/CVE-2026-61960.md): WordPress WP Full Stripe Free plugin \<= 8.5.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Themeisle WP Full Stripe Free)
- [CVE-2026-28189](https://cve.now/CVE-2026-28189.md): WordPress Participants Database plugin \<= 2.7.8.4 - Arbitrary File Deletion vulnerability (CVSS 7.4, Roland Barker Participants Database)
- [CVE-2026-28188](https://cve.now/CVE-2026-28188.md): WordPress Hydra Booking plugin \<= 1.2.2 - Broken Access Control vulnerability (CVSS 7.3, themefic Hydra Booking)
- [CVE-2026-28187](https://cve.now/CVE-2026-28187.md): WordPress Knowledge Base for Documentation, FAQs with AI Assistance plugin \<= 17.211.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, echoplugins Knowledge Base for Documentation, FAQs with AI…)
- [CVE-2026-28186](https://cve.now/CVE-2026-28186.md): WordPress Travelfic Toolkit plugin \<= 1.5.1 - Broken Access Control vulnerability (CVSS 8.1, themefic Travelfic Toolkit)
- [CVE-2026-28185](https://cve.now/CVE-2026-28185.md): WordPress Log in with Google plugin \<= 1.4.2 - Broken Authentication vulnerability (CVSS 9.8, rtCamp Log in with Google)
- [CVE-2026-28182](https://cve.now/CVE-2026-28182.md): WordPress AcyMailing SMTP Newsletter plugin \<= 10.11.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, AcyMailing Newsletter Team AcyMailing SMTP Newsletter)
- [CVE-2026-28181](https://cve.now/CVE-2026-28181.md): WordPress AcyMailing SMTP Newsletter plugin \<= 10.11.1 - Broken Access Control vulnerability (CVSS 6.5, AcyMailing Newsletter Team AcyMailing SMTP Newsletter)
- [CVE-2026-28176](https://cve.now/CVE-2026-28176.md): WordPress Booking Activities plugin \<= 1.18.4 - PHP Object Injection vulnerability (CVSS 8.8, Booking Activities Team Booking Activities)
- [CVE-2026-28175](https://cve.now/CVE-2026-28175.md): WordPress Visitors Traffic Real Time Statistics plugin \<= 8.11 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, wp-buy Visitors Traffic Real Time Statistics)
- [CVE-2026-28174](https://cve.now/CVE-2026-28174.md): WordPress WP Event SOlution plugin \<= 4.1.18 - Sensitive Data Exposure vulnerability (CVSS 6.5, Arraytics WP Event SOlution)
- [CVE-2026-28173](https://cve.now/CVE-2026-28173.md): WordPress WP Event SOlution plugin \<= 4.1.19 - Arbitrary Content Deletion vulnerability (CVSS 7.1, Arraytics WP Event SOlution)
- [CVE-2026-28170](https://cve.now/CVE-2026-28170.md): WordPress Blog Floating Button plugin \<= 1.4.20 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, 1meril Blog Floating Button)
- [CVE-2026-28168](https://cve.now/CVE-2026-28168.md): WordPress CubeWP plugin \<= 1.1.30 - SQL Injection vulnerability (CVSS 8.5, Imran Tauqeer CubeWP)
- [CVE-2026-28161](https://cve.now/CVE-2026-28161.md): WordPress Service Finder Booking plugin \<= 6.2 - Privilege Escalation vulnerability (CVSS 8.8, Aonetheme Service Finder Booking)
- [CVE-2026-28159](https://cve.now/CVE-2026-28159.md): WordPress Service Finder Booking plugin \<= 6.2 - Broken Access Control vulnerability (CVSS 6.5, Aonetheme Service Finder Booking)
- [CVE-2026-28158](https://cve.now/CVE-2026-28158.md): WordPress Do Lasso plugin \<= 358 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Lasso Analytics Do Lasso)
- [CVE-2026-28157](https://cve.now/CVE-2026-28157.md): WordPress Do Lasso plugin \<= 358 - Path Traversal vulnerability (CVSS 7.5, Lasso Analytics Do Lasso)
- [CVE-2026-28156](https://cve.now/CVE-2026-28156.md): WordPress Do Lasso plugin \<= 358 - SQL Injection vulnerability (CVSS 8.5, Lasso Analytics Do Lasso)
- [CVE-2026-28155](https://cve.now/CVE-2026-28155.md): WordPress Do Lasso plugin \<= 358 - Insecure Direct Object References (IDOR) vulnerability (CVSS 6.5, Lasso Analytics Do Lasso)
- [CVE-2026-28149](https://cve.now/CVE-2026-28149.md): WordPress Headless Single Sign On plugin \<= 1.6 - PHP Object Injection vulnerability (CVSS 9.8, miniOrange Headless Single Sign On)
- [CVE-2026-28148](https://cve.now/CVE-2026-28148.md): WordPress Headless Single Sign On plugin \<= 1.6 - Bypass Vulnerability vulnerability (CVSS 9.8, miniOrange Headless Single Sign On)
- [CVE-2026-28142](https://cve.now/CVE-2026-28142.md): WordPress Web Directory Free plugin \<= 1.7.13 - SQL Injection vulnerability (CVSS 9.3, Shamalli Web Directory Free)
- [CVE-2026-28008](https://cve.now/CVE-2026-28008.md): WordPress OAuth Single Sign On – SSO (OAuth Client) plugin \<= 7.0.0 - Broken Authentication vulnerability (CVSS 9.8, miniOrange OAuth Single Sign On – SSO)
- [CVE-2026-28004](https://cve.now/CVE-2026-28004.md): WordPress Business Directory plugin \<= 6.4.25 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Strategy11 Team Business Directory)
- [CVE-2026-28003](https://cve.now/CVE-2026-28003.md): WordPress Maspik – Spam blacklist plugin \<= 2.9.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, yonifre Maspik – Spam blacklist)
- [CVE-2026-28001](https://cve.now/CVE-2026-28001.md): WordPress WP Directory Kit plugin \<= 1.5.4 - SQL Injection vulnerability (CVSS 9.3, WPDirectoryKit WP Directory Kit)
- [CVE-2026-27999](https://cve.now/CVE-2026-27999.md): WordPress Tourfic plugin \<= 2.23.1 - Broken Access Control vulnerability (CVSS 6.5, themefic Tourfic)
- [CVE-2026-27544](https://cve.now/CVE-2026-27544.md): WordPress QA Analytics plugin \<= 5.2.0.0 - Remote Code Execution (RCE) vulnerability (CVSS 10.0, QuarkA QA Analytics)
- [CVE-2026-27543](https://cve.now/CVE-2026-27543.md): WordPress MStore API plugin \<= 4.20.0 - Privilege Escalation vulnerability (CVSS 8.1, FluxBuilder MStore API)
- [CVE-2026-27539](https://cve.now/CVE-2026-27539.md): WordPress Welcart e-Commerce plugin \<= 2.11.31 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Welcart e-Commerce)
- [CVE-2026-27538](https://cve.now/CVE-2026-27538.md): WordPress WP Directory Kit plugin \<= 1.5.4 - SQL Injection vulnerability (CVSS 7.5, WPDirectoryKit WP Directory Kit)
- [CVE-2026-27537](https://cve.now/CVE-2026-27537.md): WordPress Popup by Supsystic plugin \<= 1.11.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Popup by Supsystic)
- [CVE-2026-27536](https://cve.now/CVE-2026-27536.md): WordPress MailChimp Subscribe Forms plugin \<= 4.3.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, PluginOps MailChimp Subscribe Forms)
- [CVE-2026-27535](https://cve.now/CVE-2026-27535.md): WordPress Solace Extra plugin \<= 1.6.0 - Broken Access Control vulnerability (CVSS 7.1, solacewp Solace Extra)
- [CVE-2026-27380](https://cve.now/CVE-2026-27380.md): WordPress Car Rental Manager plugin \<= 1.3.9 - PHP Object Injection vulnerability (CVSS 7.2, magepeopleteam Car Rental Manager)
- [CVE-2026-27345](https://cve.now/CVE-2026-27345.md): WordPress Taxi Booking Manager for WooCommerce plugin \<= 2.0.3 - Broken Access Control vulnerability (CVSS 7.5, magepeopleteam Taxi Booking Manager for WooCommerce)
- [CVE-2026-19716](https://cve.now/CVE-2026-19716.md): Stored Cross-site Scripting in Pentestify user account deletion via unescaped username (CVSS 5.1, maalfer Pentestify)
- [CVE-2026-21832](https://cve.now/CVE-2026-21832.md): HCL AION is affected by multiple security vulnerabilities. (CVSS 4.3, HCL Software AION)
- [CVE-2025-62315](https://cve.now/CVE-2025-62315.md): HCL AION is affected by multiple security vulnerabilities. (CVSS 3.4, HCL Software AION)
- [CVE-2025-62318](https://cve.now/CVE-2025-62318.md): HCL AION is affected by multiple security vulnerabilities. (CVSS 3.7, HCL Software AION)
- [CVE-2025-62314](https://cve.now/CVE-2025-62314.md): HCL AION is affected by multiple security vulnerabilities. (CVSS 5.6, HCL Software AION)
- [CVE-2026-48702](https://cve.now/CVE-2026-48702.md): Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic (CVSS 7.5, sigstore rekor · github.com/sigstore/rekor)
- [CVE-2026-49478](https://cve.now/CVE-2026-49478.md): Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage (CVSS 8.7, sigstore fulcio · github.com/sigstore/fulcio)
- [CVE-2025-52640](https://cve.now/CVE-2025-52640.md): HCL AION is affected by multiple security vulnerabilities. (CVSS 4.7, HCL Software AION)
- [CVE-2026-14671](https://cve.now/CVE-2026-14671.md): PostgreSQL refint plan cache type confusion executes arbitrary code (CVSS 8.8, PostgreSQL)
- [CVE-2026-6471](https://cve.now/CVE-2026-6471.md): PostgreSQL logical decoding can dlopen arbitrary file (CVSS 7.2, PostgreSQL)
- [CVE-2026-6470](https://cve.now/CVE-2026-6470.md): PostgreSQL fails to check type USAGE privilege (CVSS 4.3, PostgreSQL)
- [CVE-2026-6469](https://cve.now/CVE-2026-6469.md): PostgreSQL ALTER TABLE ALTER TYPE resets extended statistics ownership (CVSS 3.8, PostgreSQL)
- [CVE-2026-6464](https://cve.now/CVE-2026-6464.md): PostgreSQL psql COPY FROM STDIN early failure processes data lines as psql commands (CVSS 8.1, PostgreSQL)
- [CVE-2026-19385](https://cve.now/CVE-2026-19385.md): PostgreSQL pg\_dump heap buffer overflow executes arbitrary code (CVSS 8.8, PostgreSQL)
- [CVE-2026-18408](https://cve.now/CVE-2026-18408.md): PostgreSQL psql \\unrestrict lets superuser of pg\_dump origin server execute arbitrary code in psql client (CVSS 8.8, PostgreSQL)
- [CVE-2026-18024](https://cve.now/CVE-2026-18024.md): PostgreSQL ascii() function reads past end of buffer (CVSS 4.3, PostgreSQL)
- [CVE-2026-16241](https://cve.now/CVE-2026-16241.md): PostgreSQL ECPG integer underflow can crash the client (CVSS 3.8, PostgreSQL)
- [CVE-2026-16239](https://cve.now/CVE-2026-16239.md): PostgreSQL type confusion in cursor CLOSE + DECLARE executes arbitrary code (CVSS 8.8, PostgreSQL)
- [CVE-2026-16238](https://cve.now/CVE-2026-16238.md): PostgreSQL type confusion in pg\_restore\_attribute\_stats() executes arbitrary code (CVSS 8.8, PostgreSQL)
- [CVE-2026-15742](https://cve.now/CVE-2026-15742.md): PostgreSQL fuzzystrmatch writes effectively-arbitrary addresses, via integer wraparound (CVSS 8.8, PostgreSQL)
- [CVE-2026-15741](https://cve.now/CVE-2026-15741.md): PostgreSQL expression deparse allows SQL injection via EXTRACT argument (CVSS 8.8, PostgreSQL)
- [CVE-2026-14681](https://cve.now/CVE-2026-14681.md): PostgreSQL improper enforcement of GSSAPI encryption when coupled with SSL (CVSS 4.2, PostgreSQL)
- [CVE-2026-14680](https://cve.now/CVE-2026-14680.md): PostgreSQL type confusion via "internal" arguments (CVSS 8.8, PostgreSQL)
- [CVE-2026-14679](https://cve.now/CVE-2026-14679.md): PostgreSQL stack buffer overflow in argument match writes 0x0 and 0x1 to server memory (CVSS 8.2, PostgreSQL)
- [CVE-2026-14678](https://cve.now/CVE-2026-14678.md): PostgreSQL pg\_trgm picksplit reads past end of buffer (CVSS 4.3, PostgreSQL)
- [CVE-2026-14677](https://cve.now/CVE-2026-14677.md): PostgreSQL 32-bit pltcl and plperl undersize allocations, via integer wraparound (CVSS 8.8, PostgreSQL)
- [CVE-2026-14676](https://cve.now/CVE-2026-14676.md): PostgreSQL pg\_stat\_statements heap buffer overflow executes arbitrary code (CVSS 8.8, PostgreSQL)
- [CVE-2026-14673](https://cve.now/CVE-2026-14673.md): PostgreSQL amcheck does not clear untrusted search path (CVSS 3.8, PostgreSQL)
- [CVE-2026-14672](https://cve.now/CVE-2026-14672.md): PostgreSQL observable response discrepancy with non-default scram\_iterations provides user existence oracle (CVSS 5.3, PostgreSQL)
- [CVE-2026-14670](https://cve.now/CVE-2026-14670.md): PostgreSQL plperl tied object heap buffer overflow executes arbitrary code (CVSS 8.8, PostgreSQL)
- [CVE-2026-14669](https://cve.now/CVE-2026-14669.md): PostgreSQL to\_char heap buffer overflow executes arbitrary code (CVSS 8.8, PostgreSQL)
- [CVE-2026-14668](https://cve.now/CVE-2026-14668.md): PostgreSQL ctid type confusion in selectivity estimator discloses derivative of arbitrary read (CVSS 8.1, PostgreSQL)
- [CVE-2026-14666](https://cve.now/CVE-2026-14666.md): PostgreSQL row security caching disregards role modifications (CVSS 4.2, PostgreSQL)
- [CVE-2026-14664](https://cve.now/CVE-2026-14664.md): PostgreSQL regexp heap buffer overflow executes arbitrary code (CVSS 8.8, PostgreSQL)
- [CVE-2026-14663](https://cve.now/CVE-2026-14663.md): PostgreSQL pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartext (CVSS 6.5, PostgreSQL)
- [CVE-2026-14662](https://cve.now/CVE-2026-14662.md): PostgreSQL tsvector and tsquery undersize allocations, via integer wraparound (CVSS 8.8, PostgreSQL)
- [CVE-2026-49827](https://cve.now/CVE-2026-49827.md): WebErpMesv2 has Unauthenticated RCE via Unrestricted File Upload in HR Expense scan\_file (CWE-434) (CVSS 9.8, SMEWebify WebErpMesv2)
- [CVE-2026-73584](https://cve.now/CVE-2026-73584.md): Sblim-sfcb: sblim-sfcb: privileged file corruption and denial of service via insecure temporary file handling (CVSS 6.3, Red Hat Enterprise Linux)
- [CVE-2026-73583](https://cve.now/CVE-2026-73583.md): Sblim-sfcb: unsafe deserialization in sblim-sfcb provider-manager ipc allows out-of-bounds memory access via malformed operationhdr (CVSS 6.6, Red Hat Enterprise Linux)
- [CVE-2026-73585](https://cve.now/CVE-2026-73585.md): Sblim-cmpi-base: insecure temporary file creation in sblim-cmpi-base provider registration scripts allows local symlink attack (CVSS 6.3, Red Hat Enterprise Linux)
- [CVE-2026-73629](https://cve.now/CVE-2026-73629.md): Serendipity before 2.6.0 SSRF via hex IPv4 and IPv6 addresses (CVSS 8.4, s9y Serendipity)
- [CVE-2026-73628](https://cve.now/CVE-2026-73628.md): Serendipity 2.3.5 Reflected XSS via search clean-URL route (CVSS 5.3, s9y Serendipity)
- [CVE-2026-73627](https://cve.now/CVE-2026-73627.md): JupyterLab 4.6.0 Plugin Manager Lock-Rule Enforcement Bypass (CVSS 6.0, jupyterlab)
- [CVE-2026-73626](https://cve.now/CVE-2026-73626.md): JupyterLab before 4.6.2 Authentication Bypass via PyPIExtensionManager (CVSS 7.7, jupyterlab)
- [CVE-2026-73625](https://cve.now/CVE-2026-73625.md): GitPython before 3.1.54 Remote Code Execution via kwarg value smuggling (CVSS 8.7, gitpython-developers GitPython · gitpython)
- [CVE-2026-73624](https://cve.now/CVE-2026-73624.md): GitPython before 3.1.54 Arbitrary File Overwrite via diff (CVSS 7.2, gitpython-developers GitPython · gitpython)
- [CVE-2026-73623](https://cve.now/CVE-2026-73623.md): GitPython before 3.1.54 Remote Code Execution via --template (CVSS 7.7, gitpython-developers GitPython · gitpython)
- [CVE-2026-73622](https://cve.now/CVE-2026-73622.md): GitPython before 3.1.55 Environment Variable Exfiltration via Remote.add() (CVSS 8.7, gitpython-developers GitPython · gitpython)
- [CVE-2026-73621](https://cve.now/CVE-2026-73621.md): GitPython before 3.1.56 Arbitrary File Truncation via Commit.count (CVSS 5.3, gitpython-developers GitPython · gitpython)
- [CVE-2026-73620](https://cve.now/CVE-2026-73620.md): GitPython before 3.1.57 Arbitrary File Overwrite and Read (CVSS 7.2, gitpython-developers GitPython · gitpython)
- [CVE-2026-73619](https://cve.now/CVE-2026-73619.md): GitPython before 3.1.57 Arbitrary File Read via Repo.archive() (CVSS 7.1, gitpython-developers GitPython · gitpython)
- [CVE-2026-73618](https://cve.now/CVE-2026-73618.md): Budibase Server before 3.40.0 NoSQL Injection via JSON Parameter (CVSS 8.7, budibase server · @budibase/server)
- [CVE-2026-73617](https://cve.now/CVE-2026-73617.md): Budibase before 3.40.0 NoSQL Injection via MongoDB datasource (CVSS 7.1, budibase server · @budibase/server)
- [CVE-2026-73616](https://cve.now/CVE-2026-73616.md): OpenRemote Notification Delete Cross-Realm Insecure Direct Object Reference (CVSS 7.1, openremote)
- [CVE-2026-73615](https://cve.now/CVE-2026-73615.md): Network-AI SandboxPolicy before 5.15.1 Blocklist Bypass via Quote Mismatch (CVSS 8.7, Jovancoding Network-AI)
- [CVE-2026-73614](https://cve.now/CVE-2026-73614.md): Network-AI ClaudeHookBridge Deny Pattern Bypass via Truncation (CVSS 8.7, Jovancoding Network-AI)
- [CVE-2026-73613](https://cve.now/CVE-2026-73613.md): filebrowser before 2.63.19 Out-of-Scope File Deletion via Symlink (CVSS 7.2, filebrowser)
- [CVE-2026-73612](https://cve.now/CVE-2026-73612.md): File Browser before v2.63.22 Authorization Bypass via Recursive Operations (CVSS 8.6, filebrowser)
- [CVE-2026-73611](https://cve.now/CVE-2026-73611.md): File Browser 2.50.0 through 2.63.21 JWT Expiration Bypass (CVSS 7.6, filebrowser)
- [CVE-2026-73610](https://cve.now/CVE-2026-73610.md): SiYuan before v3.7.4 Information Disclosure via Local Storage (CVSS 6.9, siyuan-note siyuan)
- [CVE-2026-73609](https://cve.now/CVE-2026-73609.md): SiYuan before v3.7.4 Information Disclosure via getBookmarkLabels (CVSS 6.9, siyuan-note siyuan · github.com/siyuan-note/siyuan/kernel)
- [CVE-2026-73608](https://cve.now/CVE-2026-73608.md): SiYuan v3.7.4-alpha.2 Authorization Bypass via getAttributeViewSearchTarget (CVSS 9.2, siyuan-note siyuan · github.com/siyuan-note/siyuan/kernel)
- [CVE-2026-73607](https://cve.now/CVE-2026-73607.md): SiYuan before v3.7.4 Information Disclosure via getOutlineStorage (CVSS 6.9, siyuan-note siyuan · github.com/siyuan-note/siyuan/kernel)
- [CVE-2026-73606](https://cve.now/CVE-2026-73606.md): SiYuan before v3.7.4 Information Disclosure via getRefIDs (CVSS 6.9, siyuan-note siyuan · github.com/siyuan-note/siyuan/kernel)
- [CVE-2026-73605](https://cve.now/CVE-2026-73605.md): SiYuan before v3.7.4 Path Traversal via getUniqueFilename (CVSS 6.9, siyuan-note siyuan · github.com/siyuan-note/siyuan/kernel)
- [CVE-2026-73604](https://cve.now/CVE-2026-73604.md): Flowise before 3.1.3 Credential Exposure via API (CVSS 7.1, FlowiseAI Flowise · flowise)
- [CVE-2026-73603](https://cve.now/CVE-2026-73603.md): Flowise before 3.1.4 Credential Abuse via Text-to-Speech (CVSS 6.3, FlowiseAI Flowise · flowise)
- [CVE-2026-73602](https://cve.now/CVE-2026-73602.md): Flowise before 3.1.3 Sandbox Escape to RCE (CVSS 9.0, FlowiseAI Flowise)
- [CVE-2026-73601](https://cve.now/CVE-2026-73601.md): Flowise before 3.1.3 Remote Code Execution via Custom MCP (CVSS 9.0, FlowiseAI Flowise)
- [CVE-2026-73488](https://cve.now/CVE-2026-73488.md): Flowise before 3.1.3 IDOR via customer-default-source endpoint (CVSS 6.0, FlowiseAI Flowise · flowise)
- [CVE-2026-73487](https://cve.now/CVE-2026-73487.md): Flowise before 3.1.3 Prompt Injection RCE via CSV Agent (CVSS 9.0, FlowiseAI Flowise · flowise +1)
- [CVE-2026-73486](https://cve.now/CVE-2026-73486.md): Flowise before 3.1.3 Code Injection via CSV Agent customReadCSV (CVSS 9.0, FlowiseAI Flowise)
- [CVE-2026-73485](https://cve.now/CVE-2026-73485.md): Flowise before 3.1.3 Remote Code Execution via Airtable Agent (CVSS 9.0, FlowiseAI Flowise)
- [CVE-2026-73484](https://cve.now/CVE-2026-73484.md): Flowise before 3.1.3 Sandbox Escape via Pandas Methods (CVSS 8.6, FlowiseAI Flowise)
- [CVE-2026-73483](https://cve.now/CVE-2026-73483.md): Flowise before 3.1.3 Sandbox Escape via Puppeteer (CVSS 9.4, FlowiseAI Flowise · flowise +1)
- [CVE-2026-45819](https://cve.now/CVE-2026-45819.md): baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trig (CVSS 6.6, web-platform-dx baseline-browser-mapping · baseline-browser…)
- [CVE-2026-18368](https://cve.now/CVE-2026-18368.md): Heap buffer overflow in Modbusgwd (CVSS 6.0, Teltonika Networks RUTOS)
- [CVE-2026-16455](https://cve.now/CVE-2026-16455.md): Local privilege escalation via improper input sanitization in execl() call (CVSS 6.9, Teltonika Networks RUTOS · Teltonika Networks TSWOS)
- [CVE-2026-12263](https://cve.now/CVE-2026-12263.md): Authentication Bypass (CVSS 8.8, Zohocorp ManageEngine Password Manager Pro · Zohocorp Manag…)
- [CVE-2026-11970](https://cve.now/CVE-2026-11970.md): This vulnerability allows a normal (non-admin) user to disable the Forcepoint One Endpoint SafariExtension and bypass DLP protection in F1E (CVSS 4.8, Forcepoint F1E mac)
- [CVE-2026-59507](https://cve.now/CVE-2026-59507.md): Priority – CWE-798: Use of Hard-coded Credentials CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-284: Improper Access Control (CVSS 9.3, Portal Generator addon to Priority ERP)
- [CVE-2026-59506](https://cve.now/CVE-2026-59506.md): Priority – CWE-306: Missing Authentication for Critical Function (CVSS 9.3, Portal Generator addon to Priority ERP)
- [CVE-2026-59505](https://cve.now/CVE-2026-59505.md): Priority - CWE-284: Improper Access Control (CVSS 8.6, Portal Generator addon to Priority ERP)
- [CVE-2026-59504](https://cve.now/CVE-2026-59504.md): Priority – CWE-602: Client-Side Enforcement of Server-Side Security (CVSS 9.1, Portal Generator addon to Priority ERP)
- [CVE-2026-59503](https://cve.now/CVE-2026-59503.md): Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-359: Exposure of Private Personal Information to an Unauthorized Actor (CVSS 9.1, Portal Generator addon to Priority ERP)
- [CVE-2026-59502](https://cve.now/CVE-2026-59502.md): Priority - CWE-203: Observable Discrepancy (CVSS 5.3, Portal Generator addon to Priority ERP)
- [CVE-2026-59501](https://cve.now/CVE-2026-59501.md): Priority – CWE-284: Improper Access Control (CVSS 8.2, Portal Generator addon to Priority ERP)
- [CVE-2026-59500](https://cve.now/CVE-2026-59500.md): Priority - CWE-287: Improper Authentication (CVSS 10.0, Portal Generator addon to Priority ERP)
- [CVE-2026-59499](https://cve.now/CVE-2026-59499.md): Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor (CVSS 8.6, Portal Generator addon to Priority ERP (developed by Soft S…)
- [CVE-2026-19484](https://cve.now/CVE-2026-19484.md): @fastify/busboy vulnerable to Denial of Service via oversized multipart boundary (CVSS 7.5, @fastify/busboy)
- [CVE-2026-16458](https://cve.now/CVE-2026-16458.md): Timing side-channel in RSA PKCS#1 v1.5 decryption in ocrypto (CVSS 5.9, Oberon microsystems AG ocrypto)
- [CVE-2026-19481](https://cve.now/CVE-2026-19481.md): @fastify/busboy vulnerable to Denial of Service via prototype-named multipart part header (CVSS 7.5, @fastify/busboy)
- [CVE-2026-16459](https://cve.now/CVE-2026-16459.md): Timing side-channel in RSA PKCS#1 v1.5 decryption in Oberon PSA Crypto (CVSS 5.9, Oberon microsystems AG Oberon PSA Crypto)
- [CVE-2026-15413](https://cve.now/CVE-2026-15413.md): Link Factory - Backdoor (CVSS 10.0, Link Factory)
- [CVE-2026-14332](https://cve.now/CVE-2026-14332.md): Ecwid by Lightspeed Ecommerce Shopping Cart \< 7.0.9 - Subscriber+ Store Disconnection via 'ec\_disconnect' Action (CVSS 5.4, Ecwid by Lightspeed Ecommerce Shopping Cart)
- [CVE-2026-19694](https://cve.now/CVE-2026-19694.md): Heap-based Buffer Overflow in Wireshark (CVSS 4.7, Wireshark Foundation Wireshark)
- [CVE-2026-19695](https://cve.now/CVE-2026-19695.md): Stack-based Buffer Overflow in Wireshark (CVSS 4.7, Wireshark Foundation Wireshark)
- [CVE-2026-19696](https://cve.now/CVE-2026-19696.md): Out-of-bounds Write in Wireshark (CVSS 6.6, Wireshark Foundation Wireshark)
- [CVE-2026-14298](https://cve.now/CVE-2026-14298.md): Boards archive import endpoint allows resource exhaustion via zip bomb and file size limit bypass in Mattermost (CVSS 6.5, Mattermost)
- [CVE-2026-3639](https://cve.now/CVE-2026-3639.md): PPWP – Password Protect Pages \<= 1.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes (CVSS 6.4, buildwps PPWP – Password Protect Pages)
- [CVE-2026-11840](https://cve.now/CVE-2026-11840.md): SQL Injection (CVSS 8.8, Zohocorp ManageEngine Password Manager Pro · Zohocorp Manag…)
- [CVE-2026-18622](https://cve.now/CVE-2026-18622.md): Foxit PDF Editor/Reader's signature-validation pop-up reports modified certified documents as valid (CVSS 4.7, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-18146](https://cve.now/CVE-2026-18146.md): Fluent Forms \<= 6.2.11 - Unauthenticated Stored Cross-Site Scripting via Notification Smartcode Values (CVSS 7.2, wpmanageninja Fluent Forms – Customizable Contact Forms, Su…)
- [CVE-2026-19088](https://cve.now/CVE-2026-19088.md): ShopEngine \< 4.9.3 - Customer PII Disclosure via Forced Authentication (CVSS 5.4, ShopEngine Elementor WooCommerce Builder Addon)
- [CVE-2026-18945](https://cve.now/CVE-2026-18945.md): WP Helper Premium \< 4.7.6 - Unauthenticated Order Data Disclosure and Order Manipulation via Missing Order Key Validation (CVSS 8.2, WP Helper Premium)
- [CVE-2026-14213](https://cve.now/CVE-2026-14213.md): Amelia \< 2.4.6 - Provider+ Cross-Customer Appointment Data Disclosure via IDOR (CVSS 3.7, Booking for Appointments and Events Calendar)
- [CVE-2026-14182](https://cve.now/CVE-2026-14182.md): Customer Email Verification for WooCommerce \< 3.2.6 - Unauthenticated Account Takeover via Type-Juggling Authentication Bypass (CVSS 9.8, Customer Email Verification for WooCommerce)
- [CVE-2026-13610](https://cve.now/CVE-2026-13610.md): KiviCare \< 4.5.2 - Unauthenticated Privilege Escalation via Registration (CVSS 7.5, KiviCare)
- [CVE-2026-13328](https://cve.now/CVE-2026-13328.md): TLP Food Menu \< 6.0.2 - Unauthenticated Reservation Status Modification (CVSS 5.3, Food Menu)
- [CVE-2026-3835](https://cve.now/CVE-2026-3835.md): Prevent Direct Access – Protect WordPress Files \<= 2.8.8.8 - Unauthenticated Protected File Access (CVSS 5.3, buildwps Prevent Direct Access – Protect WordPress Files)
- [CVE-2026-19182](https://cve.now/CVE-2026-19182.md): OpenNMS v2 Alarm REST API inverted authorization check lets ROLE\_REST users acknowledge alarms as any user and bypass read-only (CVSS 4.3, The OpenNMS Group Meridian · The OpenNMS Group Horizon)
- [CVE-2026-19135](https://cve.now/CVE-2026-19135.md): OpenNMS JEXL sandbox bypass in Measurements REST API allows ROLE\_USER to load arbitrary classes (CVSS 5.4, The OpenNMS Group Meridian · The OpenNMS Group Horizon)
- [CVE-2026-72506](https://cve.now/CVE-2026-72506.md): VoiceTra provided by National Institute of Information and Communications Technology (NICT) contains an incorrectly specified destination in (CVSS 5.4, National Institute of Information and Communications Techno…)
- [CVE-2026-18728](https://cve.now/CVE-2026-18728.md): Open-iscsi: open-iscsi: integer underflow in iscsiuio ipv4 dhcp parsing (CVSS 6.5, Red Hat Enterprise Linux)
- [CVE-2026-0301](https://cve.now/CVE-2026-0301.md): PAN-OS: Information Disclosure Vulnerability in URL Filtering (CVSS 1.7, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0299](https://cve.now/CVE-2026-0299.md): GlobalProtect App: Local Privilege Escalation Vulnerabilities (CVSS 5.9, Palo Alto Networks GlobalProtect App)
- [CVE-2026-0298](https://cve.now/CVE-2026-0298.md): GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) (CVSS 5.2, Palo Alto Networks GlobalProtect App)
- [CVE-2026-0297](https://cve.now/CVE-2026-0297.md): GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake (CVSS 5.2, Palo Alto Networks GlobalProtect App)
- [CVE-2026-0296](https://cve.now/CVE-2026-0296.md): GlobalProtect App: Improper Certificate Validation Bypass Vulnerability (CVSS 4.5, Palo Alto Networks GlobalProtect App)
- [CVE-2026-0295](https://cve.now/CVE-2026-0295.md): GlobalProtect App: Local Privilege Escalation via Race Condition on macOS (CVSS 4.1, Palo Alto Networks GlobalProtect App)
- [CVE-2026-0294](https://cve.now/CVE-2026-0294.md): Prisma Access Agent: Local Privilege Escalation (CVSS 6.0, Palo Alto Networks Prisma Access Agent)
- [CVE-2026-0293](https://cve.now/CVE-2026-0293.md): Prisma Access Agent: Anti-Tamper Protection Bypass on Windows (CVSS 5.6, Palo Alto Networks Prisma Access Agent)
- [CVE-2026-0292](https://cve.now/CVE-2026-0292.md): Prisma Access Agent: Local Security Inspection Bypass Vulnerability on Windows (CVSS 2.1, Palo Alto Networks Prisma Access Agent)
- [CVE-2026-0291](https://cve.now/CVE-2026-0291.md): Prisma Access Agent: Authenticated Limited File Deletion on Linux (CVSS 1.1, Palo Alto Networks Prisma Access Agent)
- [CVE-2026-0290](https://cve.now/CVE-2026-0290.md): Prisma Browser: Sensitive Information Disclosure Vulnerability (CVSS 0.5, Palo Alto Networks Prisma Browser)
- [CVE-2026-0289](https://cve.now/CVE-2026-0289.md): Prisma Browser: Inappropriate Implementation in Account Protection (CVSS 0.5, Palo Alto Networks Prisma Browser)
- [CVE-2026-67986](https://cve.now/CVE-2026-67986.md): amazing-print/amazing\_print at commit dc890dfafdf07088ea901df53c19c2710e5c5234 contains a Ruby code injection condition in AwesomeMethodArra (CVSS 8.4)
- [CVE-2026-67990](https://cve.now/CVE-2026-67990.md): basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f disables Rails CSRF protection for its Alertmanager and Prometheus proxy (CVSS 5.4)
- [CVE-2026-67991](https://cve.now/CVE-2026-67991.md): crmne/ruby\_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains a polynomial-time regular expression denial-of-service condition (CVSS 7.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-08-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.