CVEs published August 17, 2026
337 CVEs were published on August 17, 2026: 64 critical, 116 high. 1 is now in CISA KEV.
- Published
- 337
- Critical
- 64
- High
- 116
- Medium
- 142
- Low
- 15
- Unrated
- 0
- Now in CISA KEV
- 1
- Fix available
- 194
Most affected products
- jahlives openssl_encrypt · openssl-encrypt
- 30
- Apple Safari · Apple iOS and iPadOS +2
- 16
- Mattermost
- 13
- Roundcube Webmail
- 10
- JetBrains YouTrack
- 8
- Apple iOS and iPadOS · Apple macOS +3
- 7
- Dell ObjectScale
- 7
- Huawei HarmonyOS
- 7
- JetBrains IntelliJ IDEA
- 7
- Apple Safari · Apple iOS and iPadOS +4
- 6
Critical 64
- CVE-2026-71424Onyx: Cross-user OAuth-token leak via /api/mcp/servers* for per-user MCP serversonyx-dot-app onyx
- CVE-2026-64849MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)mlflow
- CVE-2026-47686vm2: Missing Error.cause Sanitization Enables VM2 Sandbox Escape to RCEpatriksimek vm2 · vm2
- CVE-2026-47698vm2: Sandbox Breakout Using Dangerous Host Proto Mutatorspatriksimek vm2 · vm2
- CVE-2026-66795Managedcluster-import-controller: csr auto-approver does not validate certificate subject or signername (spoke→hub cluster-admin)Red Hat multicluster engine for Kubernetes
- CVE-2026-65974ERPNext: Server-Side Template Injection leading to Remote Code Executionfrappe erpnext
- CVE-2026-75110MemOS Authentication Bypass via Unset INTERNAL_SERVICE_SECRETMemTensor MemOS
- CVE-2026-75106OpnForm Editable Submission Secret Derivation via Empty Hashids SaltOpnForm
- CVE-2026-19478Improper Control of Generation of Code ('Code Injection') in GitLabGitLab
- CVE-2026-71472Acm-search-v2-rhel9: search-v2-operator: shell-command and sql injection in postgresql-start.sh via cr-supplied work_memRed Hat Advanced Cluster Management for Kubernetes
- CVE-2026-66792Multicloud-operators-subscription: multicloud-operators-subscription: isclusteradmin() trusts user-settable annotations on managed clustersRed Hat Multicluster Global Hub · Red Hat Advanced Clust… +2
- CVE-2026-74253Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer < 16.0.0regularlabs.com Sourcerer extension for Joomla
- CVE-2026-74254Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5joomlack.fr Page Builder CK extension for Joomla
- CVE-2026-71479New API: Integer overflow in quota billing yields negative charges (self-crediting)QuantumNous new-api · github.com/QuantumNous/new-api
- CVE-2026-75045In JetBrains YouTrack before 2025.3.156085, 2026.1.13913, 2026.2.18112 an unauthenticated attacker could download database backups via shaJetBrains YouTrack
- CVE-2026-64859New API: User List API Leaks Root User Access Token Leading to Privilege EscalationQuantumNous new-api · github.com/QuantumNous/new-api
- CVE-2026-55674Discourse: Cache poisoning/XSS via color scheme cookiesdiscourse
- CVE-2026-71566KubeVirt backend is not authenticatedopenshift-metal3 fakefish
- CVE-2026-14564Sensitive Data Exposure in Innotim Software's Logsign SIEMInnotim Software Telecommunications and Consulting Trade Lt…
- CVE-2026-74843Wavlink WN531P3/WN535M1 Export Pingortrace CGI export_pingortrace.cgi strcpy stack-based overflowWavlink WN531P3 · Wavlink WN535M1
- CVE-2026-74901openssl_encrypt before 1.4.0 Authentication Bypass via AES-CTR Fallbackjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74900openssl_encrypt before 1.4.0 Weak Shared Secret via PQC Simulation Modejahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74899openssl_encrypt before 1.4.0 Sandbox Escape via Type Hierarchyjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74896openssl_encrypt before 1.4.0 Sandbox Escape via Dunder Attribute Traversaljahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74895openssl_encrypt before 1.4.0 Plugin Sandbox Bypass via Process Isolationjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74894openssl_encrypt before 1.4.0 Authentication Bypass via Bearer Tokenjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74890openssl_encrypt before 1.4.0 HMAC Authentication Bypass via Environment Variablejahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74889openssl_encrypt before 1.4.0 Weak Key Derivation via HKDFjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74886openssl_encrypt before 1.4.0 Plugin Import Guard Bypassjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74885openssl_encrypt before 1.4.0 Logging Bug and Race Conditionjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74880openssl_encrypt before 1.4.0 Token Leakage via Query Parametersjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74878openssl_encrypt before 1.4.0 TOTP Rate Limiter Bypassjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74876openssl_encrypt before 1.4.0 Unverified Key Bundle Encryptionjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74875openssl_encrypt before 1.4.0 Schema Validation Bypassjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74872openssl_encrypt before 1.4.0 Arbitrary Code Execution via Whirlpooljahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74800SiYuan before v3.7.4 Stored XSS via assets endpointsiyuan-note siyuan
- CVE-2026-74799SiYuan before 3.7.4 Unauthenticated Debug Endpoint Information Disclosuresiyuan-note siyuan
- CVE-2026-74798SiYuan kernel Path Traversal via database_clean MCP toolsiyuan-note siyuan
- CVE-2026-15623Authenticated Blind SQL Injection in Google Cloud SecOps SOAR Dashboard Widget Query ServiceGoogle Cloud Google SecOps
- CVE-2026-19977EFM ipTIME A3004T Session Validation httpcon_check_session_url improper authenticationEFM ipTIME A3004T
- CVE-2026-38165A Server-Side Template Injection (SSTI) vulnerability in the Velocity template engine configuration of xdocreport v0.9.2 to v2.2.0 allows at
- CVE-2026-39254Buffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to execute arbitrary code via the libSSEdevice.dy
- CVE-2026-39255Buffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to execute arbitrary code via the libSSEdevice.dy
- CVE-2026-42162Mahara before 25.04.5 and 26.04.0 is vulnerable to artefacts being accessible to others under certain circumstances when the file path to an
- CVE-2026-42163Mahara before 25.04.5 and 26.04.0 is vulnerable to unauthorized access to internal accounts via Learning Tools Interoperability (LTI) under
- CVE-2026-42164Mahara before 25.04.5 and 26.04.0 is vulnerable in the Text block/section functionality when a call is crafted in a certain way that allows
- CVE-2026-50769The CRM+ application before and including version 2025.6 from Brainformatik is vulnerable to SQL Injection (time-based) vulnerability.
- CVE-2026-50770An issue in Squirro Cognitive Search before v.3.14.2 allows a remote attacker to escalate privileges via a crafted request.
- CVE-2026-50772An issue in Squirro Cognitive Search < 3.14.2 allows a remote attacker to execute arbitrary code via a crafted payload to the password reset
- CVE-2026-50774An issue in GAPTEQ Designer v.3.5 allows a remote attacker to escalate privileges via the Company Manger role.
- CVE-2026-50775A blind SSRF attack in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code via the server retrieving an image from a crafte
- CVE-2026-51346SQL Injection vulnerability in StudIP 6.0.x before 6.0.3 and 5.4.x before 5.4.12 allows a remote attacker to execute arbitrary code and obta
- CVE-2026-51977An issue in Trueview T18061 WiFi 3MP Robot Pan-Tilt Security Camera Version 1.0 allows a physically proximate attacker to escalate privilege
- CVE-2026-67678File Upload vulnerability in RainyGao-Hithub DocSys v.2.02.80 allows a remote attacker to execute arbitrary code
- CVE-2026-67854SQL Injection vulnerability in Qcms v.6.0.6 allows a remote attacker to execute arbitrary code
- CVE-2026-67868A heap-based out-of-bounds write vulnerability exists in S2OPC 1.7.3 in server-side EventFilter handling during CreateMonitoredItems process
- CVE-2026-67917zuraCast versions up to and including 0.23.7 contain a SQL injection vulnerability in the backup restore functionality.
- CVE-2026-67919An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the PluginEndpoint.java, installFromUri method, and DefaultPl
- CVE-2026-67926An issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files Parameter in JeecgBoot AI Chat Module
- CVE-2026-67960An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the MemberController.php, UserController.php, CommentControll
- CVE-2026-67965An issue in Tneda W20E v.16.01.0.6(2782) allows a remote attacker to execute arbitrary code via the url_need_login function
- CVE-2026-67966Tenda W20E V16.01.0.6(2782) /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemon and obtain root sh
- CVE-2026-67967Buffer Overflow vulnerability in Tenda W20E V16.01.0.6(2782) allows an attacker to execute arbitrary code.
- CVE-2026-68004An issue in OSSRS SRS (Simple Realtime Server) <v5.0.213 allows a remote attacker to execute arbitrary code via RTMP publish authorization,
High 116
- CVE-2026-9816Insufficient server-side validation of board member role fields permits privilege escalationMattermost
- CVE-2026-43794A memory corruption issue was addressed with improved memory handling.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-65346An integer overflow was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-65343A use after free issue was addressed with improved memory management.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-45790Dokploy: Invitation Role Escalation Allows Organization Takeoverdokploy
- CVE-2026-69148MLflow: CreateModelVersion source validation does not check READ permission on referenced run_idmlflow
- CVE-2026-566779Router: Authenticated Server-Side Request Forgery (SSRF) via OIDC Provider Test Endpointdecolua 9router · 9router
- CVE-2026-71518Typemill < 2.26.0 Authorization Bypass via Media File Download Routetypemill
- CVE-2026-75531Stored Cross-Site Scripting in URL Observables via Lookyloo Submission Handler in Pandorapandora-analysis pandora
- CVE-2026-65832Deskflow - Unauthenticated server-controlled out-of-bounds read in ServerProxy::setOptions / translateKey modifier-table indexingdeskflow
- CVE-2026-63409Deskflow: Odd-length DSOP options vector causes out-of-bounds read in Deskflow clientdeskflow
- CVE-2026-65640WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher.WordPress
- CVE-2026-47683vm2: bufferAllocLimit cap bypassed by Buffer.concat and Buffer.from arrayLikepatriksimek vm2 · vm2
- CVE-2026-34398FreeCAD: Arbitrary Code Execution via eval() on untrusted project file metadata in BIM WorkbenchFreeCAD
- CVE-2026-34399FreeCAD: Arbitrary Code Execution via eval() on untrusted SVG template scale field in BIM TechDraw PageFreeCAD
- CVE-2026-34789FreeCAD: Arbitrary code execution via unsandboxed PyImport_ImportModule in PropertyPythonObject::RestoreFreeCAD
- CVE-2026-65822ERPNext: SQL Injection in "Inactive Customers" report via unvalidated `doctype` filterfrappe erpnext
- CVE-2026-40506OpenEMR Path Traversal Arbitrary Directory Deletion via standard_tables_manage.phpopenemr
- CVE-2026-75482SWE-agent Trajectory Inspector Path Traversal File DisclosureSWE-agent
- CVE-2026-75481SkyPilot Authentication Bypass via Service Account Role Escalationskypilot-org skypilot
- CVE-2026-75480OpenViking Debug Vector Endpoints Multi-tenant Data Exposurevolcengine OpenViking
- CVE-2026-75479JimuReport Unauthenticated Report Listing and Share Token Disclosurejeecgboot jimureport
- CVE-2026-75111Evidently UI Path Traversal via Dataset Materialization Filenameevidentlyai evidently
- CVE-2026-75109Determined Missing Authorization Check on Generic Task Endpointsdetermined-ai determined
- CVE-2026-75105phpIPAM Temporary Subnet Share Information Disclosure via Address Parameterphpipam
- CVE-2026-75103Crawlab Missing Authorization on Password Change Endpoint Allows Account Takeovercrawlab-team crawlab
- CVE-2026-54356Budibase authenticated arbitrary S3 signed upload URL issuance via `/api/attachments/:datasourceId/url`budibase · @budibase/server
- CVE-2026-35219Budibase: SSRF in Automation Steps - Webhook, Zapier, N8N, Slack, Discord Bypass IP Blacklistbudibase · @budibase/server
- CVE-2026-73410Budibase: SSRF via DNS rebinding in the REST datasource integrationbudibase · @budibase/server
- CVE-2026-64657Budibase: Database Connector SQL Injections in PostgreSQL, MS SQL, and MySQLbudibase
- CVE-2026-19589Packer vulnerable to arbitrary file write via crafted plugin archive during installationHashiCorp Packer
- CVE-2026-57233Notepad++: Path Traversal (Zip Slip) in WinGup Plugin Extractionnotepad-plus-plus
- CVE-2026-54758Notepad++: Stack Buffer Overflow in expandNppEnvironmentStrsnotepad-plus-plus
- CVE-2026-19650Cross-Site Request Forgery (CSRF) in GitLabGitLab
- CVE-2026-71553ApostropheCMS: 2nd-order prototype pollution via PATCH leading to single-request persistent DoSapostrophecms apostrophe · apostrophe
- CVE-2026-57485Stirling-PDF: Internal Service Account API Key Disclosure via Pipeline EndpointStirling-Tools Stirling-PDF
- CVE-2026-75013TOTOLINK EX1200L cstecgi.cgi setWizardCfg null pointer dereferenceTOTOLINK EX1200L
- CVE-2026-70495Search-v2-operator: search-v2-operator: cluster-wide impersonate on users/groups shared across 4 pods grants hub system:mastersRed Hat Advanced Cluster Management for Kubernetes
- CVE-2026-75012TOTOLINK EX1200L Password Configuration cstecgi.cgi setPasswordCfg null pointer dereferenceTOTOLINK EX1200L
- CVE-2026-45698Netatalk has Integer Underflow → Stack Buffer Overflow in deletedir()netatalk
- CVE-2026-12553HP Web Jetadmin (WJA) - Potential Arbitrary File Read/WriteHP Web Jetadmin
- CVE-2026-74238TIER IV Nebula 1.2.0 Heap Out-of-Bounds Read via VLP32 UDP Decodertier4 nebula
- CVE-2026-73523COVESA Open1722 0.9.2 Stack Memory Disclosure via acf-can-listener.c Integer TruncationCOVESA Open1722
- CVE-2026-33437Stirling PDF: Stored XSS in Info SummaryStirling-Tools Stirling-PDF
- CVE-2026-46345compliance-trestle - jinja has an Arbitrary File Write via Path Traversaloscal-compass compliance-trestle · compliance-trestle
- CVE-2026-73522COVESA Open1722 0.9.2 Stack Buffer Overflow via avtp_to_can() in acf-can-listenerCOVESA Open1722
- CVE-2026-71980Belledonne Communications bcg729 1.1.2 Out-of-Bounds Read via decodeSIDframe()BelledonneCommunications bcg729
- CVE-2026-59902Netty: Memory Exhaustion in SctpMessageCompletionHandlernetty · io.netty:netty-transport-sctp
- CVE-2026-54284sqlparse: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps triggerandialbrecht sqlparse · sqlparse
- CVE-2026-59893sqlparse: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS (Denial of Service)andialbrecht sqlparse · sqlparse
- CVE-2026-71979INDI indiserver 2.2.4.2 Stack Buffer Overflow via XML Tag Parsingindilib indi
- CVE-2026-71491sqlparse: Quadratic O(n²) DoS in group_commentsandialbrecht sqlparse · sqlparse
- CVE-2026-68519Glances: `--disable-config-exec` does not cover on-alert action commands (incomplete fix of CVE-2026-53925)nicolargo glances · glances
- CVE-2026-62982Glances: Incomplete fix of CVE-2026-32608: action-template sanitizer is bypassed by nested stat values (process 'cmdline') → OS command injectionnicolargo glances · glances
- CVE-2026-40145Control protections bypass in BeyondTrust Endpoint Privilege Management (Windows deployment) support utilityBeyondTrust Endpoint Privilege Management
- CVE-2026-9771Missing device-pointer validation in flash_copy() syscall allows userspace privilege escalationzephyrproject zephyr
- CVE-2026-68518Glances: Command injection bypass of action-template sanitizer via cross-field shell-operator reconstructionnicolargo glances · glances
- CVE-2026-61666websocket-driver: Denial of service via malformed Host headerfaye websocket-driver-ruby · websocket-driver
- CVE-2026-40144Memory corruption vulnerability in Endpoint Privilege Management (Windows deployments)BeyondTrust Endpoint Privilege Management
- CVE-2026-75060In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP toolsJetBrains PyCharm
- CVE-2026-75056In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possibleJetBrains IntelliJ IDEA
- CVE-2026-75051In JetBrains YouTrack before 2026.2.17917 unauthorised project transfer between organisations was possibleJetBrains YouTrack
- CVE-2026-75050In JetBrains YouTrack before 2026.1.13901, 2026.2.17950 doS attack was possible via crafted type parametersJetBrains YouTrack
- CVE-2026-75048In JetBrains YouTrack before 2026.2.18068 stored XSS via the fenced code-block language label was possibleJetBrains YouTrack
- CVE-2026-75044In JetBrains YouTrack before 2025.3.156085, 2026.1.13914, 2026.2.18095 missing authorisation allowed an authenticated user to delete arbitJetBrains YouTrack
- CVE-2025-27772Uptrain vulnerable to remote code execution via `/new_run` endpointuptrain-ai uptrain
- CVE-2025-27771Uptrain vulnerable to remote code execution via `/add_prompts` endpointuptrain-ai uptrain
- CVE-2026-64868New API: Unauthenticated payment webhooks allow memory and disk DoS via unbounded body reads and full-body loggingQuantumNous new-api · github.com/QuantumNous/new-api
- CVE-2025-27770UpTrain vulnerable to Remote code execution at `/create_project`uptrain-ai uptrain
- CVE-2025-27621UpTrain has a Constant Default API Keyuptrain-ai uptrain
- CVE-2026-73646PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosurepostcss
- CVE-2026-13202HTML Injection in OTDS Swagger UIOpentext Directory Services
- CVE-2026-71567User-controlled variables inserted unescaped into shell scripts and Kubernetes manifestsopenshift-metal3 fakefish
- CVE-2026-59909Dell ObjectScale, versions prior to 4.3.0.1, contain(s) a Path Traversal vulnerability.Dell ObjectScale
- CVE-2026-56090Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Uncontrolled Search Path Element vulnerability.Dell ObjectScale
- CVE-2026-56685Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command InDell ObjectScale
- CVE-2026-15218Models-as-a-service: red hat openshift ai: maas-api and maas-controller serviceaccounts with excessive permissions lead to privilege escalationmaas-api · maas-controller +1
- CVE-2026-16137Path traversal via unsanitized upload filename leads to arbitrary file write in Progress ShareFile Storage Zones ControllerProgress ShareFile Storage Zones Controller
- CVE-2026-16138Remote code execution via unsafe deserialization in Progress ShareFile Storage Zones Controller's CICO serviceProgress ShareFile Storage Zones Controller
- CVE-2026-16139Arbitrary file write via path traversal in Progress ShareFile Storage Zones Controller potentially leading to remote code executionProgress ShareFile Storage Zones Controller
- CVE-2026-59910Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command InDell ObjectScale
- CVE-2026-19693extract-zip arbitrary file write outside the destination directory via a symlink at the final path componentmax-mapper extract-zip · extract-zip
- CVE-2026-56686Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command InDell ObjectScale
- CVE-2026-16471Broken Access Control in Dolusoft Software's SonloggerDolusoft Software Technologies Sonlogger
- CVE-2026-16467Broken Access Control in Dolusoft Software's FortiloggerDolusoft Software Technologies Fortilogger
- CVE-2026-75002In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, mail search and LITERAL+ byte-count desynchronization could lead to information dRoundcube Webmail
- CVE-2026-74998In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, responses from the CSS (Cascading Style Sheets) proxy were not validated, which mRoundcube Webmail
- CVE-2026-74997In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the cmd_learn driver of the markasjunk plugin is subject to remote code executionRoundcube Webmail
- CVE-2026-18674Kong Mesh multi-zone: the global control plane attributes KDS-synced resources by an unvalidated in-band zone identifierKong Mesh
- CVE-2026-74893openssl_encrypt before 1.4.0 JWT Token Forgery via Hardcoded Secretsjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74892openssl_encrypt before 1.4.0 Hardcoded Secret Keyjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74891openssl_encrypt before 1.4.0 Hardcoded Database Credentialsjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74888openssl_encrypt before 1.4.0 Non-Standard PBKDF2 Key Derivationjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74884openssl_encrypt before 1.4.0 Path Traversal via plugin_idjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74883openssl_encrypt before 1.4.0 Sandbox Bypass via pathlib and iojahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74882openssl_encrypt before 1.4.0 Insecure Default Configurationjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74881openssl_encrypt before 1.4.0 CORS Misconfiguration via Wildcard Originsjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74879openssl_encrypt before 1.4.0 Information Disclosure via /ready endpointjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74877openssl_encrypt before 1.4.0 Missing Ownership Verification via revoke_keyjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74874openssl_encrypt before 1.4.0 Weak PRNG Steganography Pixel Selectionjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74873openssl_encrypt before 1.4.0 Password Exposure via CLI Argumentjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74870openssl_encrypt before 1.4.8 Hardware Pepper Information Disclosurejahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74869stoatchat before 0.15.0 Missing Authorization via Subscribestoatchat
- CVE-2026-74868SiYuan before 3.7.4 Brute-Force Authentication via Publish Servicesiyuan-note siyuan
- CVE-2026-74802SiYuan 3.7.3 Cross-Site WebSocket Hijacking via network proxysiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-74801SiYuan before 3.7.4 Local Privilege Escalation via elevator.exesiyuan-note siyuan
- CVE-2026-748452100 Technology｜Official Document Management System - Arbitrary File Upload2100 Technology Official Document Management System
- CVE-2026-22072Arbitrary URL Loading in WebView Leading to Token Leakage RiskOPPO Health
- CVE-2026-74579netfilter: nft_payload: fix mask build for partial field offloadLinux
- CVE-2026-50602Planet9 Incorrect Permission Assignment Vulnerability InformationAcer Planet9 background service
- CVE-2026-50768File Upload vulnerability in T-Systems International GmbH ImageMaster Version: 9.14.2.8.1 allows a remote attacker to execute arbitrary code
- CVE-2026-50773An issue in CGM Germany - CompuGroup Medical CGM ISIS MED 2510.1.0.20 allows a remote attacker to execute arbtirary code via a crafted .dll
- CVE-2026-50776Directory Traversal vulnerability in Pronis Loisirs Billetterie CSE - < 04/2026 allows a remote attacker to obtain sensitive information and
- CVE-2026-67918Directory Traversal vulnerability in hermes-studio v.0.6.26 allows a remote attacker to obtain sensitive information via the validatePath fu
- CVE-2026-67961An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the Invoke script execution.
- CVE-2026-68005An issue in ACME mini_httpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the h
Medium, low and unrated 157
- CVE-2026-75081Webkul Bagisto store behavioral workflowWebkul Bagisto
- CVE-2026-75080SourceCodester Class and Exam Timetabling System edit_subject1.php sql injectionSourceCodester Class and Exam Timetabling System
- CVE-2026-75079SourceCodester Class and Exam Timetabling System edit_subject2.php sql injectionSourceCodester Class and Exam Timetabling System
- CVE-2026-75078SourceCodester Class and Exam Timetabling System BSHRM1.php cross site scriptingSourceCodester Class and Exam Timetabling System
- CVE-2026-75587Plaintext pre-auth secret exposure via Desktop App diagnostics reportMattermost
- CVE-2026-9693Mattermost thread memberships persist after team removal, exposing private channel thread metadata on re-inviteMattermost
- CVE-2026-9859Mattermost Boards plugin didn’t enforce role-based authorization on board channel link allowing board editors to expose boards to arbitrary channelsMattermost
- CVE-2026-10080Boards plugin panics on WebSocket command with non-string field typesMattermost
- CVE-2026-65331This issue was addressed through improved state management.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-64760An information leakage was addressed with additional validation.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-65351This issue was addressed through improved state management.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-64782A memory corruption vulnerability was addressed with improved locking.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-65347The issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-43795The issue was addressed with improved memory handling.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-65330The issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-65340This issue was addressed through improved state management.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-65337This issue was addressed through improved state management.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-64788The issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-65336This issue was addressed through improved state management.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-64784An out-of-bounds access issue was addressed with improved bounds checking.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-65341The issue was addressed with improved memory handling.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-63178Onyx Curator-scope IDOR: any curator can modify membership of arbitrary user groups via unscoped PATCH /manage/admin/user-group/{id} and /add-users leading to cross-group document disclosureonyx-dot-app onyx
- CVE-2026-28984The issue was addressed with improved memory handling.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-64787A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-65339A logic issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-65335This issue was addressed through improved state management.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-65334A memory corruption issue was addressed with improved state management.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-65338The issue was addressed with improved memory handling.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-65333This issue was addressed through improved state management.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-64778The issue was addressed with improved checks.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-43667A reachable assertion was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-64781The issue was addressed with improved input validation.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-64715A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-65329An authentication issue was addressed with improved state management.Apple iOS and iPadOS
- CVE-2026-64780The issue was addressed with improved checks.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-64779A memory corruption vulnerability was addressed with improved locking.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-65332This issue was addressed through improved state management.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-65349An out-of-bounds read was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-11817CVE-2026-11817 CVE RecordGrafana OSS · Grafana Enterprise
- CVE-2026-45791Dokploy: Password Change Does Not Revoke Active Sessionsdokploy
- CVE-2026-69146MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-authmlflow
- CVE-2026-75077SourceCodester Class and Exam Timetabling System BSCE2.php cross site scriptingSourceCodester Class and Exam Timetabling System
- CVE-2026-44846JumpServer: Privilege Overwrite via Organization Invite Logic Flawjumpserver
- CVE-2026-44845JumpServer: Remote Command Execution (RCE) via Jinja Template Injection in Applet Host Deploymentjumpserver
- CVE-2026-54336JumpServer: KoKo Web Terminal SFTP Path Traversal on Authorized Assetjumpserver
- CVE-2026-65976Deskflow: Clipboard receiver can accumulate data beyond Deskflow's configured clipboard size limitdeskflow
- CVE-2026-75529Stored Cross-Site Scripting via MIME-Type Confusion in PDF Downloads of Pandorapandora-analysis pandora
- CVE-2026-68765hashcat KeePass KDBX v4 Module Heap Buffer Overflow via Token Fieldhashcat
- CVE-2026-75483powerlevel10k Control Character Injection via package.json Versionromkatv powerlevel10k
- CVE-2026-75108Next Terminal Missing Per-Asset Authorization on Portal Endpointsnext-terminal
- CVE-2026-75104Hugging Face Transformers Path Traversal via Checkpoint Indexhuggingface transformers
- CVE-2026-73560vLLM: SSRF + arbitrary local file read in MiMoV2OmniMultiModalProcessor `_fetch_image` and audio loader bypass MediaConnector protectionsvllm-project vllm · vllm
- CVE-2026-71486vLLM: Derender endpoints decode caller-supplied GenerateResponse token IDs without output boundsvllm-project vllm · vllm
- CVE-2026-52886Notepad++: session.xml backupFilePath starts_with Bypassnotepad-plus-plus
- CVE-2026-71858Notepad++: shortcuts.xml Macro HMAC Bypass Enables Conditional Elevated Command Executionnotepad-plus-plus
- CVE-2026-63667ApostropheCMS: Arbitrary file read via import-export attachment-name path traversalapostrophecms apostrophe · @apostrophecms/import-export
- CVE-2026-63670ApostropheCMS: Mutation-XSS / allowedTags bypass via literal `</textarea/>` solidus closeapostrophecms apostrophe · sanitize-html
- CVE-2026-75014SourceCodester Pet Grooming Management Software get_barcode_data.php sql injectionSourceCodester Pet Grooming Management Software
- CVE-2026-63669ApostropheCMS: Missing destination-parent authorization in page `move()` allows a low-privileged editor to move and re-rank pages inside a restricted subtreeapostrophecms apostrophe · apostrophe
- CVE-2026-17639Certain HP Smart Tank All in One – Potential Denial of ServiceHP Smart Tank 5101 All-in-One Printer · HP Smart Tank 5… +37
- CVE-2026-75011kylecui NetForensicMCP index.js execAsync command injectionkylecui NetForensicMCP
- CVE-2026-48053Kolibri has Unauthenticated Server-Side Request Forgery (SSRF) in RemoteFacilityUserViewsetlearningequality kolibri · kolibri
- CVE-2026-59903Netty: Cache Poisoning and Information Disclosure via CORS Vary Header Overwritenetty · io.netty:netty-codec-http
- CVE-2026-59894sqlparse: Generated Python and PHP snippets allow SQL string breakout through unescaped backslashesandialbrecht sqlparse · sqlparse
- CVE-2026-73424Astro: Unauthenticated path override in the @astrojs/vercel ISR functionwithastro astro · @astrojs/vercel
- CVE-2026-68520Glances: as_dict_secure() Value-Level Bypass Leaks Credentials in URL Values via /api/4/confignicolargo glances · glances
- CVE-2026-68517Glances: REST API CORS Credentials Guard Uses Exact-Match Instead of Membership Test — Bypassed by Any Multi-Origin Allowlist Containing the Wildcardnicolargo glances · glances
- CVE-2026-12519Out-of-bounds stack read and write in Zephyr WNC-M14A2A modem socket-notify parsingzephyrproject zephyr
- CVE-2026-126306LoWPAN IPHC uncompression out-of-bounds read on reserved destination addressing modezephyrproject zephyr
- CVE-2026-12629PL011 UART error interrupts never cleared, enabling an external-peer interrupt-storm denial of servicezephyrproject zephyr
- CVE-2026-64865New API: Redis user quota cache overwrite via PUT /api/user/self allows quota bypassQuantumNous new-api · github.com/QuantumNous/new-api
- CVE-2026-64866New API: Admin can reset passkeys for same-level or higher-privileged usersQuantumNous new-api · github.com/QuantumNous/new-api
- CVE-2026-75059In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possibleJetBrains PyCharm
- CVE-2026-75058In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importersJetBrains IntelliJ IDEA
- CVE-2026-75057In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE logJetBrains IntelliJ IDEA
- CVE-2026-75055In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXEJetBrains IntelliJ IDEA
- CVE-2026-75054In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in untrusted projectsJetBrains IntelliJ IDEA
- CVE-2026-75053In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpointJetBrains IntelliJ IDEA
- CVE-2026-75052In JetBrains IntelliJ IDEA before 2026.2.1 command execution via crafted Markdown preview content was possible in trusted projectsJetBrains IntelliJ IDEA
- CVE-2026-75049In JetBrains YouTrack before 2026.1.13903, 2026.2.17950 an authenticated user could read restricted articles from other projects via the drJetBrains YouTrack
- CVE-2026-75047In JetBrains YouTrack before 2026.2.18177 doS attack was possible via a decompression bomb in the import endpointJetBrains YouTrack
- CVE-2026-75046In JetBrains YouTrack before 2026.2.18112 an authenticated user could enumerate accounts via the users search endpointJetBrains YouTrack
- CVE-2026-68762In JetBrains Ktor before 3.4.1 potential DoS attack via WebSocket decompression was possibleJetBrains Ktor
- CVE-2026-53960Discourse: Hidden first-post excerpt is emitted in Q&A schema JSON-LDdiscourse
- CVE-2026-55704Discourse: Shared-draft titles and excerpts leak through group post serializationdiscourse
- CVE-2026-59829Discourse: Review queue exposes flag-related private message excerpts to category group moderatorsdiscourse
- CVE-2026-74858jae-jae fetcher-mcp URL Validation security-credentials fetch_urls server-side request forgeryjae-jae fetcher-mcp
- CVE-2026-73851Kiota: Path traversal in generated plugin manifest static_template.file reference (percent-encoding bypass)microsoft kiota · Microsoft.OpenApi.Kiota
- CVE-2026-10527Boards plugin retains Board Admin rights for users demoted to System GuestMattermost
- CVE-2026-15754Missing per-channel team-scope check in ABAC access control policy unassign allows cross-team policy removalMattermost
- CVE-2026-16044Insufficient validation of guest board admin privileges on archive importMattermost
- CVE-2026-16045Delegated OAuth tokens could revoke unrelated OAuth application authorizationsMattermost
- CVE-2026-16049_GitLab Plugin allows cross-channel post injection and phishing via missing channel permission checks in issue API endpoints_Mattermost
- CVE-2026-16047Board channel linking without read channel permission validationMattermost
- CVE-2026-16046Missing run-state validation on finished playbook runsMattermost
- CVE-2026-16048Channel member roles accept out-of-scope rolesMattermost
- CVE-2026-56089Dell ObjectScale, versions prior to 4.3.0.1, contain(s) a Path Traversal vulnerability.Dell ObjectScale
- CVE-2026-59911Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Insertion of Sensitive Information into Log File vulnerability in the svc_tools.Dell ObjectScale
- CVE-2026-70412Dell iDRAC9, versions prior to 7.20.30.50, and Dell iDRAC10, version prior to 1.20.60.50, contain a Remanent Data Readable after Memory ErasDell iDRAC9 · Dell iDRAC10
- CVE-2026-75010In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the modoboa driver of the password plugin could leak a Modoboa API authenticationRoundcube Webmail
- CVE-2026-75007In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the LDAP search filter was subject to injection via unescaped %u/%fu/%d substitutRoundcube Webmail
- CVE-2026-75006In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, insufficient Cascading Style Sheets (CSS) sanitization in HTML e-mail messages maRoundcube Webmail
- CVE-2026-75004In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, improper rule name quoting could lead to managesieve_disabled_actions setting bypRoundcube Webmail
- CVE-2026-75003In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, an unclosed url() in a FuncIRI attribute of an SVG image could evade the remote iRoundcube Webmail
- CVE-2026-75000In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, improper HTML/CSS sanitization of the SVG animate "by" attribute may lead to remoRoundcube Webmail
- CVE-2026-74999In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the "Add to address book" action was subject to stored XSS.Roundcube Webmail
- CVE-2026-40126DOM-based Cross-Site Scripting in OutSystems Service CenterOutSystems Service Center
- CVE-2026-74887openssl_encrypt before 1.4.0 Insecure Random Import in PQC Modulejahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74871openssl_encrypt before 1.4.6 KDF Bypass via Sequential-XORjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74867SiYuan before 3.7.4 Cross-Site Request Forgery via CheckAuthsiyuan-note siyuan
- CVE-2026-74842Kira-Pgr PromptShopMCP Image-Toolkit-MCP-Server server.py download_image server-side request forgeryKira-Pgr PromptShopMCP
- CVE-2026-49303Permission control vulnerability in the notification module.Huawei HarmonyOS · Huawei EMUI
- CVE-2026-49301Permission control vulnerability in the Gallery module.Huawei HarmonyOS · Huawei EMUI
- CVE-2026-49305Permission control vulnerability in the Wi-Fi enhancement module.Huawei HarmonyOS · Huawei EMUI
- CVE-2026-49308Permission control vulnerability in the clipboard module.Huawei HarmonyOS
- CVE-2026-49306UAF vulnerability in the time and time zone module.Huawei HarmonyOS
- CVE-2026-49304Permission control vulnerability in the device key management module.Huawei HarmonyOS
- CVE-2026-49302Permission control vulnerability in the notification service module.Huawei HarmonyOS
- CVE-2026-58561Null pointer dereference issue in the image codec module.Huawei HarmonyOS
- CVE-2026-58560Null pointer dereference issue in the image codec module.Huawei HarmonyOS
- CVE-2026-49307Permission control vulnerability in the multi-mode input module.Huawei HarmonyOS
- CVE-2026-20000itsourcecode Hospital Management System viewprescriptionrecord.php sql injectionitsourcecode Hospital Management System
- CVE-2026-19999Open Asset Import Library Assimp 3DGS MDL7 Bone Transformation Key MDLLoader.cpp ParseBoneTrafoKeys_3DGS_MDL7 buffer overflowOpen Asset Import Library Assimp Assimp
- CVE-2026-19998code-projects Online Shopping System offersmail.php cross site scriptingcode-projects Online Shopping System
- CVE-2026-19997Webkul Bagisto Backend Sales RMA Endpoint requests authorizationWebkul Bagisto
- CVE-2026-19996Webkul Bagisto Backend Customer Behavior Data Endpoint customers privileges managementWebkul Bagisto
- CVE-2026-19995Webkul Bagisto RMA Message send-message cross site scriptingWebkul Bagisto
- CVE-2026-19994Webkul Bagisto Configuration Management execute authorizationWebkul Bagisto
- CVE-2026-13700WooMS <= 9.14 - Unauthenticated Server-Side Request Forgery and Sensitive Information DisclosureWooMS
- CVE-2026-14832ShopSmart Loyalty for WooCommerce <= 1.0.0 - Unauthenticated Sensitive Information Disclosure via shopsmart_check_phoneShopSmart Loyalty for WooCommerce
- CVE-2026-19993Webkul Bagisto RMA State Validation update-status behavioral workflowWebkul Bagisto
- CVE-2026-19992Orange View Limited DualSafe Password Manager & Digital Vault Extension postMessage-based Bridge information disclosureOrange View Limited DualSafe Password Manager & Digital Vau…
- CVE-2026-19988Alaev SEO Tools Extension Popup UI popup.html addDiv cross site scriptingAlaev SEO Tools Extension
- CVE-2026-19987SourceCodester Best Employee Management System Profile exposure of information through directory listingSourceCodester Best Employee Management System
- CVE-2026-19986Adblock for Youtube Extension Event Listener contentscript.js updateDynamicRules improper authorizationAdblock for Youtube Extension
- CVE-2026-19984jkawamoto mcp-florence2 __init__.py get_images server-side request forgeryjkawamoto mcp-florence2
- CVE-2026-19983GL.iNet XE3000 NAS Command Service gl_nas_sys os command injectionGL.iNet A1300 · GL.iNet AX1800 +6
- CVE-2026-19982GL.iNet BE9300/MT6000 Firewall-management RPC os command injectionGL.iNet BE9300 · GL.iNet MT6000
- CVE-2026-19981GL.iNet XE3000 Wi-Fi Timer Power-Schedule Feature os command injectionGL.iNet A1300 · GL.iNet AX1800 +15
- CVE-2026-19980GL.iNet XE3000 Language Update ui.update_langs code injectionGL.iNet A1300 · GL.iNet AX1800 +15
- CVE-2026-19979GL.iNet XE3000 WebDAV Service MOVE authorizationGL.iNet A1300 · GL.iNet AX1800 +15
- CVE-2026-19978jiantao88 android-mcp-server Command Execution index.js child_process.exec os command injectionjiantao88 android-mcp-server
- CVE-2026-19976COMFAST CF-N1-S mbox-config sub_44A968 command injectionCOMFAST CF-N1-S
- CVE-2026-19975Azuriom CMS Money Transfer ProfileController.php transferMoney toctouAzuriom CMS
- CVE-2026-19974treefrogframework treefrog-framework Session Cookie tsessioncookiestore.cpp strncmp improper authenticationtreefrogframework treefrog-framework
- CVE-2026-50601Planet9 Hardcoded Credentials Vulnerability InformationAcer Planet9 desktop application
- CVE-2026-19973itsourcecode Hospital Management System viewpaymentreport.php sql injectionitsourcecode Hospital Management System
- CVE-2026-19972itsourcecode Hospital Management System viewpatient.php sql injectionitsourcecode Hospital Management System
- CVE-2026-19971LB-Link WR1210M Backup Endpoint backup.cgi main missing authenticationLB-Link WR1210M
- CVE-2026-19970Open Asset Import Library Assimp Node MDLLoader.cpp AddBonesToNodeGraph_3DGS_MDL7 heap-based overflowOpen Asset Import Library Assimp
- CVE-2026-19969Open Asset Import Library Assimp 3DGS MDL7 Model Output Mesh Generator MDLLoader.cpp GenerateOutputMeshes_3DGS_MDL7 buffer overflowOpen Asset Import Library Assimp
- CVE-2026-19968Open Asset Import Library Assimp 3DGS MDL7 Model LWOLoader.h ReadFaces_3DGS_MDL7 heap-based overflowOpen Asset Import Library Assimp
- CVE-2026-19967Open Asset Import Library Assimp File Compression.cpp decompressBlock heap-based overflowOpen Asset Import Library Assimp
- CVE-2026-19966CodeCanyon TimeCamp Integration for CRM Contact Information Update save_contact authorizationCodeCanyon TimeCamp Integration for CRM
- CVE-2026-19965automad Password Reset Endpoint UserController.php requestPasswordResetToken response discrepancyautomad
- CVE-2026-50771Cross Site Scripting vulnerability in Squirro Cognitive Search < 3.14.2 allows a remote attacker to execute arbtirary code via the Email Not
- CVE-2026-67925Cross Site Scripting vulnerability in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the endpoint /airag/chat/uplo