# CVEs published 2026-08-19

674 CVEs were published on August 19, 2026: 110 critical, 287 high. 3 are now in CISA KEV. Days are UTC.

- [CVE-2022-4996](https://cve.now/CVE-2022-4996.md): mruby bigint.c udiv floating point comparison with incorrect operator (CVSS 6.9, mruby)
- [CVE-2026-76762](https://cve.now/CVE-2026-76762.md): code-projects Assessment Management welcome.php sql injection (CVSS 6.9, code-projects Assessment Management)
- [CVE-2026-8619](https://cve.now/CVE-2026-8619.md): Unauthenticated Denial-of-Service Vulnerability in HTTP Service in TP-Link TL-MR100, TL-MR150, TL-MR6400 and Archer MR600 (CVSS 7.1, TP-Link Systems TL-MR100 · TP-Link Systems TL-MR150 v.3.2 +2)
- [CVE-2026-76929](https://cve.now/CVE-2026-76929.md): Out-of-bounds Read in Wireshark (CVSS 4.7, Wireshark Foundation Wireshark)
- [CVE-2026-76928](https://cve.now/CVE-2026-76928.md): NULL Pointer Dereference in Wireshark (CVSS 7.5, Wireshark Foundation Wireshark)
- [CVE-2026-76761](https://cve.now/CVE-2026-76761.md): chenhg5 cc-connect Management API engine.go shellExecCommand os command injection (CVSS 6.9, chenhg5 cc-connect)
- [CVE-2026-76927](https://cve.now/CVE-2026-76927.md): NULL Pointer Dereference in Wireshark (CVSS 4.7, Wireshark Foundation Wireshark)
- [CVE-2026-76926](https://cve.now/CVE-2026-76926.md): Reachable Assertion in Wireshark (CVSS 3.1, Wireshark Foundation Wireshark)
- [CVE-2026-76891](https://cve.now/CVE-2026-76891.md): Expired Pointer Dereference in Wireshark (CVSS 3.1, Wireshark Foundation Wireshark)
- [CVE-2026-76890](https://cve.now/CVE-2026-76890.md): Expired Pointer Dereference in Wireshark (CVSS 3.1, Wireshark Foundation Wireshark)
- [CVE-2026-76885](https://cve.now/CVE-2026-76885.md): Buffer Over-read in Wireshark (CVSS 3.1, Wireshark Foundation Wireshark)
- [CVE-2026-76924](https://cve.now/CVE-2026-76924.md): Out-of-bounds Read in Wireshark (CVSS 5.5, Wireshark Foundation Wireshark)
- [CVE-2026-76923](https://cve.now/CVE-2026-76923.md): Out-of-bounds Read in Wireshark (CVSS 5.5, Wireshark Foundation Wireshark)
- [CVE-2026-76922](https://cve.now/CVE-2026-76922.md): NULL Pointer Dereference in Wireshark (CVSS 5.5, Wireshark Foundation Wireshark)
- [CVE-2026-76921](https://cve.now/CVE-2026-76921.md): Use After Free in Wireshark (CVSS 5.5, Wireshark Foundation Wireshark)
- [CVE-2026-76920](https://cve.now/CVE-2026-76920.md): Out-of-bounds Write in Wireshark (CVSS 4.7, Wireshark Foundation Wireshark)
- [CVE-2026-76760](https://cve.now/CVE-2026-76760.md): chenhg5 cc-connect webhook.go authenticate code injection (CVSS 6.9, chenhg5 cc-connect)
- [CVE-2026-76919](https://cve.now/CVE-2026-76919.md): Use of Uninitialized Variable in Wireshark (CVSS 5.3, Wireshark Foundation Wireshark)
- [CVE-2026-76918](https://cve.now/CVE-2026-76918.md): Heap-based Buffer Overflow in Wireshark (CVSS 5.5, Wireshark Foundation Wireshark)
- [CVE-2026-76917](https://cve.now/CVE-2026-76917.md): Heap-based Buffer Overflow in Wireshark (CVSS 5.5, Wireshark Foundation Wireshark)
- [CVE-2026-76880](https://cve.now/CVE-2026-76880.md): Out-of-bounds Write in Wireshark (CVSS 7.5, Wireshark Foundation Wireshark)
- [CVE-2026-76879](https://cve.now/CVE-2026-76879.md): Stack-based Buffer Overflow in Wireshark (CVSS 7.5, Wireshark Foundation Wireshark)
- [CVE-2026-76889](https://cve.now/CVE-2026-76889.md): Heap-based Buffer Overflow in Wireshark (CVSS 4.7, Wireshark Foundation Wireshark)
- [CVE-2026-76888](https://cve.now/CVE-2026-76888.md): Heap-based Buffer Overflow in Wireshark (CVSS 3.1, Wireshark Foundation Wireshark)
- [CVE-2026-76887](https://cve.now/CVE-2026-76887.md): Heap-based Buffer Overflow in Wireshark (CVSS 3.1, Wireshark Foundation Wireshark)
- [CVE-2026-76886](https://cve.now/CVE-2026-76886.md): Heap-based Buffer Overflow in Wireshark (CVSS 8.1, Wireshark Foundation Wireshark)
- [CVE-2026-76884](https://cve.now/CVE-2026-76884.md): Buffer Over-read in Wireshark (CVSS 3.1, Wireshark Foundation Wireshark)
- [CVE-2026-76883](https://cve.now/CVE-2026-76883.md): Heap-based Buffer Overflow in Wireshark (CVSS 4.7, Wireshark Foundation Wireshark)
- [CVE-2026-76882](https://cve.now/CVE-2026-76882.md): Out-of-bounds Read in Wireshark (CVSS 4.7, Wireshark Foundation Wireshark)
- [CVE-2026-76881](https://cve.now/CVE-2026-76881.md): NULL Pointer Dereference in Wireshark (CVSS 4.7, Wireshark Foundation Wireshark)
- [CVE-2026-76878](https://cve.now/CVE-2026-76878.md): In OpenStack Aodh before 22.0.1, the alarm list API bypasses project scoping when the all\_projects query parameter is set to false. (CVSS 8.4, OpenStack Aodh)
- [CVE-2026-76591](https://cve.now/CVE-2026-76591.md): TRENDnet TEW-755AP ssi email.cgi log\_email\_server command injection (CVSS 5.3, TRENDnet TEW-755AP)
- [CVE-2026-76832](https://cve.now/CVE-2026-76832.md): Agno PythonTools Path Traversal via joinpath file\_name argument (CVSS 8.5, Agno AGI Agno)
- [CVE-2026-76590](https://cve.now/CVE-2026-76590.md): TRENDnet TEW-755AP ssi wan.cgi stack-based overflow (CVSS 9.4, TRENDnet TEW-755AP)
- [CVE-2026-76850](https://cve.now/CVE-2026-76850.md): LMDeploy Remote Code Execution via Unsafe Pickle Deserialization in the Disaggregated Serving Peer Connector (CVSS 9.3, InternLM lmdeploy)
- [CVE-2026-63123](https://cve.now/CVE-2026-63123.md): Tina: Cross-origin \`POST /media/upload/\*\` requests can write arbitrary files into the Tina dev server media root (CVSS 6.5, tinacms · @tinacms/cli)
- [CVE-2026-76405](https://cve.now/CVE-2026-76405.md): Information Disclosure through Cleartext Storage in the App Key Value Store in the Splunk On-Call (VictorOps) app (CVSS 4.3, Splunk On-Call)
- [CVE-2026-76404](https://cve.now/CVE-2026-76404.md): Remote Code Execution (RCE) through Deserialization of Untrusted Data in Splunk MCP Server app (CVSS 9.1, Splunk MCP Server app)
- [CVE-2026-76403](https://cve.now/CVE-2026-76403.md): Improper Certificate Validation through HTTP Event Collector Kerberos Authentication in Splunk Connect for Kafka (CVSS 7.4, Splunk Connect for Kafka)
- [CVE-2026-76402](https://cve.now/CVE-2026-76402.md): Server-Side Request Forgery (SSRF) through the REST API in Splunk Connect for Kafka (CVSS 8.2, Splunk Connect for Kafka)
- [CVE-2026-76401](https://cve.now/CVE-2026-76401.md): Regular Expression Denial of Service (DoS) through the REST API in Splunk Connect for Kafka (CVSS 5.9, Splunk Connect for Kafka)
- [CVE-2026-76400](https://cve.now/CVE-2026-76400.md): Denial of Service (DoS) through the REST API in Splunk Connect for Kafka (CVSS 5.9, Splunk Connect for Kafka)
- [CVE-2026-76399](https://cve.now/CVE-2026-76399.md): Incorrect Permission Assignment for Scheduled Searches in Splunk AI Toolkit (CVSS 8.1, Splunk AI Toolkit)
- [CVE-2026-76398](https://cve.now/CVE-2026-76398.md): Improper Access Control during Experiment History Deletion through the REST API in Splunk AI Toolkit (CVSS 4.3, Splunk AI Toolkit)
- [CVE-2026-76397](https://cve.now/CVE-2026-76397.md): Improper Access Control in Experiment History through the REST API in Splunk AI Toolkit (CVSS 8.1, Splunk AI Toolkit)
- [CVE-2026-76396](https://cve.now/CVE-2026-76396.md): Improper Access Control through Scheduled Searches in Splunk AI Toolkit (CVSS 7.5, Splunk AI Toolkit)
- [CVE-2026-76395](https://cve.now/CVE-2026-76395.md): Remote Code Execution (RCE) through Deserialization of Untrusted Data in the Model Loading REST API in Splunk AI Toolkit (CVSS 8.8, Splunk AI Toolkit)
- [CVE-2026-76394](https://cve.now/CVE-2026-76394.md): Missing Authorization in Container and Connection Management through the REST API in Splunk AI Toolkit (CVSS 8.3, Splunk AI Toolkit)
- [CVE-2026-76393](https://cve.now/CVE-2026-76393.md): Race Condition during Model Upload through the REST API in Splunk AI Toolkit (CVSS 5.9, Splunk AI Toolkit)
- [CVE-2026-76392](https://cve.now/CVE-2026-76392.md): Use of Hard-coded Credentials in Container Connections in Splunk AI Toolkit (CVSS 5.4, Splunk AI Toolkit)
- [CVE-2026-76391](https://cve.now/CVE-2026-76391.md): Improper Privilege Management through Agent Run History in Splunk AI Toolkit (CVSS 8.3, Splunk AI Toolkit)
- [CVE-2026-76390](https://cve.now/CVE-2026-76390.md): Information Disclosure through Splunk Web in Cisco Talos Intelligence for Enterprise Security Cloud (CVSS 5.3, Splunk Cisco Talos Intelligence for Enterprise Security Clo…)
- [CVE-2026-76389](https://cve.now/CVE-2026-76389.md): Server-Side Request Forgery (SSRF) through the REST API in Cisco Talos Intelligence for Enterprise Security Cloud (CVSS 8.8, Splunk Cisco Talos Intelligence for Enterprise Security Clo…)
- [CVE-2026-76388](https://cve.now/CVE-2026-76388.md): Privilege Escalation through Search Macro Permissions in Splunk Enterprise Security (CVSS 8.1, Splunk Enterprise Security)
- [CVE-2026-76387](https://cve.now/CVE-2026-76387.md): SPL Injection through the REST API in Splunk Enterprise Security (CVSS 8.1, Splunk Enterprise Security)
- [CVE-2026-76386](https://cve.now/CVE-2026-76386.md): Information Disclosure through Action Parameters in Zoom app for Splunk SOAR (CVSS 4.3, Zoom app for Splunk SOAR)
- [CVE-2026-76385](https://cve.now/CVE-2026-76385.md): Information Disclosure through Action Parameters in Venafi app for Splunk SOAR (CVSS 4.3, Venafi app for Splunk SOAR)
- [CVE-2026-76384](https://cve.now/CVE-2026-76384.md): Information Disclosure through Action Parameters in Splunk Attack Analyzer Connector for Splunk SOAR (CVSS 4.3, Splunk Attack Analyzer Connector for Splunk SOAR)
- [CVE-2026-76383](https://cve.now/CVE-2026-76383.md): Information Disclosure through Action Parameters in RSA SecurID Authentication Manager app for Splunk SOAR (CVSS 4.3, RSA SecurID Authentication Manager app for Splunk SOAR)
- [CVE-2026-76382](https://cve.now/CVE-2026-76382.md): Information Disclosure through Action Parameters in Phantom app for Splunk SOAR (CVSS 4.3, Phantom app for Splunk SOAR)
- [CVE-2026-76381](https://cve.now/CVE-2026-76381.md): Information Disclosure through Action Parameters in MS Graph for Active Directory app for Splunk SOAR (CVSS 4.3, MS Graph for Active Directory app for Splunk SOAR)
- [CVE-2026-76380](https://cve.now/CVE-2026-76380.md): Information Disclosure through Action Parameters in CrowdStrike OAuth API app for Splunk SOAR (CVSS 4.3, CrowdStrike OAuth API app for Splunk SOAR)
- [CVE-2026-76379](https://cve.now/CVE-2026-76379.md): Information Disclosure through Action Parameters in Cisco Webex app for Splunk SOAR (CVSS 4.3, Cisco Webex app for Splunk SOAR)
- [CVE-2026-76378](https://cve.now/CVE-2026-76378.md): Information Disclosure through Action Parameters in Cisco Secure Malware Analytics app for Splunk SOAR (CVSS 4.3, Cisco Secure Malware Analytics app for Splunk SOAR)
- [CVE-2026-76377](https://cve.now/CVE-2026-76377.md): Information Disclosure through Action Parameters in Azure AD Graph app for Splunk SOAR (CVSS 4.3, Azure AD Graph app for Splunk SOAR)
- [CVE-2026-76376](https://cve.now/CVE-2026-76376.md): Information Disclosure through Action Parameters in AWS IAM app for Splunk SOAR (CVSS 4.3, AWS IAM app for Splunk SOAR)
- [CVE-2026-76375](https://cve.now/CVE-2026-76375.md): Information Disclosure through Environment Data Logging in AD LDAP app for Splunk SOAR (CVSS 5.0, AD LDAP app for Splunk SOAR)
- [CVE-2026-76374](https://cve.now/CVE-2026-76374.md): Information Disclosure through Sensitive Data Logging in AD LDAP app for Splunk SOAR (CVSS 4.3, AD LDAP app for Splunk SOAR)
- [CVE-2026-76373](https://cve.now/CVE-2026-76373.md): Filter Injection through Action Parameters in AD LDAP app for Splunk SOAR (CVSS 5.4, AD LDAP app for Splunk SOAR)
- [CVE-2026-76372](https://cve.now/CVE-2026-76372.md): Incorrect Permission Assignment through Safe Mode in Nmap Scanner for Splunk SOAR (CVSS 6.6, Splunk Nmap Scanner)
- [CVE-2026-76371](https://cve.now/CVE-2026-76371.md): Incorrect Permission Assignment through Safe Mode in FireAMP for Splunk SOAR (CVSS 2.7, Splunk FireAMP)
- [CVE-2026-76370](https://cve.now/CVE-2026-76370.md): Information Disclosure through the REST API in Splunk SOAR (CVSS 4.3, Splunk SOAR)
- [CVE-2026-76369](https://cve.now/CVE-2026-76369.md): Path Traversal through Automation Broker in Splunk SOAR (CVSS 2.7, Splunk SOAR)
- [CVE-2026-76368](https://cve.now/CVE-2026-76368.md): Missing Authorization through Playbooks in Splunk SOAR (CVSS 2.7, Splunk SOAR)
- [CVE-2026-76367](https://cve.now/CVE-2026-76367.md): Stored Cross-Site Scripting (XSS) through Notes in Splunk SOAR (CVSS 4.0, Splunk SOAR)
- [CVE-2026-76366](https://cve.now/CVE-2026-76366.md): Information Disclosure through the REST API in Splunk SOAR (CVSS 6.5, Splunk SOAR)
- [CVE-2026-76365](https://cve.now/CVE-2026-76365.md): Structured Query Language (SQL) Injection through Custom Lists in Splunk SOAR (CVSS 6.5, Splunk SOAR)
- [CVE-2026-76364](https://cve.now/CVE-2026-76364.md): Structured Query Language (SQL) Injection through Custom Function Results in Splunk SOAR (CVSS 6.5, Splunk SOAR)
- [CVE-2026-76363](https://cve.now/CVE-2026-76363.md): Structured Query Language Injection through the REST API in Splunk SOAR (CVSS 6.5, Splunk SOAR)
- [CVE-2026-76362](https://cve.now/CVE-2026-76362.md): Improper Certificate Validation through CyberArk Vault Privileged Access Manager in Splunk SOAR (CVSS 7.4, Splunk SOAR)
- [CVE-2026-76361](https://cve.now/CVE-2026-76361.md): Server-Side Request Forgery (SSRF) through the Connectivity Check REST API in Splunk SOAR (CVSS 2.7, Splunk SOAR)
- [CVE-2026-76360](https://cve.now/CVE-2026-76360.md): Information Disclosure through Missing Authorization in the Health REST API in Splunk SOAR (CVSS 4.3, Splunk SOAR)
- [CVE-2026-76359](https://cve.now/CVE-2026-76359.md): Path Traversal through Universal Forwarder Installer Archive Extraction in Splunk SOAR (CVSS 6.5, Splunk SOAR)
- [CVE-2026-76358](https://cve.now/CVE-2026-76358.md): Path Traversal through App Installation Tar Extraction in Splunk SOAR (CVSS 6.5, Splunk SOAR)
- [CVE-2026-76357](https://cve.now/CVE-2026-76357.md): Remote Code Execution (RCE) through Path Traversal in the REST API in Splunk SOAR (CVSS 7.6, Splunk SOAR)
- [CVE-2026-76356](https://cve.now/CVE-2026-76356.md): Authentication Bypass through IP Address Spoofing in the Automation Broker in Splunk SOAR (CVSS 8.1, Splunk SOAR)
- [CVE-2026-76355](https://cve.now/CVE-2026-76355.md): Unauthenticated Information Disclosure through an Edge Processor Service Endpoint in Splunk Enterprise (CVSS 7.5, Splunk Enterprise)
- [CVE-2026-76354](https://cve.now/CVE-2026-76354.md): Path Traversal through Search Head Clustering in Splunk Enterprise (CVSS 8.1, Splunk Enterprise)
- [CVE-2026-76353](https://cve.now/CVE-2026-76353.md): Path Traversal through Knowledge Bundle Replication in Splunk Enterprise (CVSS 5.4, Splunk Enterprise)
- [CVE-2026-76352](https://cve.now/CVE-2026-76352.md): Improper Authorization through the REST API in Splunk Enterprise (CVSS 8.8, Splunk Enterprise)
- [CVE-2026-76351](https://cve.now/CVE-2026-76351.md): Server-Side Request Forgery (SSRF) through the Report Notification REST API in Splunk Secure Gateway (CVSS 8.8, Splunk Enterprise · Splunk Secure Gateway)
- [CVE-2026-76350](https://cve.now/CVE-2026-76350.md): Improper Privilege Management through PDF Attachments for Email Alert Actions in Splunk Enterprise (CVSS 8.8, Splunk Enterprise)
- [CVE-2026-76349](https://cve.now/CVE-2026-76349.md): SPL Injection through Splunk Web Form Tokens in Splunk Enterprise (CVSS 6.4, Splunk Enterprise)
- [CVE-2026-76348](https://cve.now/CVE-2026-76348.md): Missing Authorization in Search Head Cluster Member Controls in Splunk Enterprise (CVSS 3.8, Splunk Enterprise)
- [CVE-2026-76347](https://cve.now/CVE-2026-76347.md): Server-Side Request Forgery (SSRF) through the Report Notifications REST API in Splunk Secure Gateway (CVSS 5.4, Splunk Enterprise · Splunk Secure Gateway)
- [CVE-2026-76346](https://cve.now/CVE-2026-76346.md): Stored Cross-Site Scripting (XSS) through Splunk Web Dashboard Sparkline Format Options in Splunk Enterprise (CVSS 5.4, Splunk Enterprise)
- [CVE-2026-76345](https://cve.now/CVE-2026-76345.md): Remote Code Execution (RCE) through the REST API in Splunk Enterprise (CVSS 6.0, Splunk Enterprise)
- [CVE-2026-76344](https://cve.now/CVE-2026-76344.md): Path Traversal through the Search Dispatch REST API in Splunk Enterprise (CVSS 7.7, Splunk Enterprise)
- [CVE-2026-76343](https://cve.now/CVE-2026-76343.md): Structured Query Language (SQL) Injection through the REST API in Splunk Enterprise (CVSS 6.5, Splunk Enterprise)
- [CVE-2026-76342](https://cve.now/CVE-2026-76342.md): Risky Commands Safeguards Bypass through Splunk Web in Splunk Enterprise (CVSS 5.4, Splunk Enterprise)
- [CVE-2026-76341](https://cve.now/CVE-2026-76341.md): Risky Commands Safeguards Bypass through Table Editor Dataset Initial Data in Splunk Enterprise (CVSS 5.4, Splunk Enterprise)
- [CVE-2026-76340](https://cve.now/CVE-2026-76340.md): Missing Authorization for Reloading Token-Signing Keys through the REST API in Splunk Enterprise (CVSS 5.3, Splunk Enterprise)
- [CVE-2026-76339](https://cve.now/CVE-2026-76339.md): SPL Injection through the geostats Command in Splunk Enterprise (CVSS 5.4, Splunk Enterprise)
- [CVE-2026-76338](https://cve.now/CVE-2026-76338.md): Improper Authentication through REST API Distributed Search Token Requests in Splunk Enterprise (CVSS 8.1, Splunk Enterprise)
- [CVE-2026-76337](https://cve.now/CVE-2026-76337.md): Path Traversal through Splunk Web Static File Serving in Splunk Enterprise (CVSS 5.3, Splunk Enterprise)
- [CVE-2026-76336](https://cve.now/CVE-2026-76336.md): Improper Access Control through the REST API in Splunk Enterprise (CVSS 7.1, Splunk Enterprise)
- [CVE-2026-76335](https://cve.now/CVE-2026-76335.md): Remote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprise (CVSS 8.8, Splunk Enterprise)
- [CVE-2026-76334](https://cve.now/CVE-2026-76334.md): SPL Injection through Dashboard Studio Workflow Actions in Splunk Enterprise (CVSS 6.4, Splunk Enterprise)
- [CVE-2026-76333](https://cve.now/CVE-2026-76333.md): Stored Cross-Site Scripting (XSS) through Dashboard Studio Workflow Actions in Splunk Enterprise (CVSS 7.1, Splunk Enterprise)
- [CVE-2026-76332](https://cve.now/CVE-2026-76332.md): SPL Injection through Splunk Web in Splunk Enterprise (CVSS 7.1, Splunk Enterprise)
- [CVE-2026-76331](https://cve.now/CVE-2026-76331.md): SPL Injection through the REST API in Splunk Enterprise (CVSS 8.1, Splunk Enterprise)
- [CVE-2026-76330](https://cve.now/CVE-2026-76330.md): SPL Injection through Monitoring Console Forwarder Filters in Splunk Enterprise (CVSS 7.1, Splunk Enterprise)
- [CVE-2026-76329](https://cve.now/CVE-2026-76329.md): SPL Injection through Monitoring Console Dashboard Inputs in Splunk Enterprise (CVSS 6.4, Splunk Enterprise)
- [CVE-2026-76328](https://cve.now/CVE-2026-76328.md): SPL Injection through Splunk Web in Splunk Enterprise (CVSS 6.7, Splunk Enterprise)
- [CVE-2026-76327](https://cve.now/CVE-2026-76327.md): SPL Injection through Splunk Web in Splunk Secure Gateway (CVSS 6.4, Splunk Enterprise · Splunk Secure Gateway)
- [CVE-2026-76326](https://cve.now/CVE-2026-76326.md): Stored Cross-Site Scripting through Dashboard Sparkline Tooltip Options in Splunk Enterprise (CVSS 5.7, Splunk Enterprise)
- [CVE-2026-76325](https://cve.now/CVE-2026-76325.md): Stored Cross-Site Scripting (XSS) through Splunk Web in Splunk Enterprise (CVSS 7.3, Splunk Enterprise)
- [CVE-2026-76324](https://cve.now/CVE-2026-76324.md): Stored Cross-Site Scripting (XSS) in Splunk Web Tours in Splunk Enterprise (CVSS 5.7, Splunk Enterprise)
- [CVE-2026-76323](https://cve.now/CVE-2026-76323.md): SPL Risky Command Safeguards Bypass through the Job Details Dashboard in Splunk Enterprise (CVSS 6.4, Splunk Enterprise)
- [CVE-2026-76322](https://cve.now/CVE-2026-76322.md): SPL Injection through Dashboard Studio Search Query Options in Splunk Enterprise (CVSS 6.7, Splunk Enterprise)
- [CVE-2026-76321](https://cve.now/CVE-2026-76321.md): SPL Injection through Nearby Event Searches in Splunk Enterprise (CVSS 7.3, Splunk Enterprise)
- [CVE-2026-76320](https://cve.now/CVE-2026-76320.md): SPL Injection through Cross-Site Request Forgery (CSRF) in the Event Type Builder in Splunk Web for Splunk Enterprise (CVSS 5.9, Splunk Enterprise)
- [CVE-2026-76319](https://cve.now/CVE-2026-76319.md): Remote Code Execution (RCE) through Federated Search in Splunk Enterprise (CVSS 8.8, Splunk Enterprise)
- [CVE-2026-76318](https://cve.now/CVE-2026-76318.md): Stored Cross-Site Scripting (XSS) through Splunk Web in Splunk Enterprise (CVSS 5.7, Splunk Enterprise)
- [CVE-2026-76317](https://cve.now/CVE-2026-76317.md): Path Traversal through the Lookup Configuration REST API in Splunk Enterprise (CVSS 8.8, Splunk Enterprise)
- [CVE-2026-76316](https://cve.now/CVE-2026-76316.md): Stored SPL Injection through Deployment Server Broker Registration in Splunk Enterprise (CVSS 8.8, Splunk Enterprise)
- [CVE-2026-76315](https://cve.now/CVE-2026-76315.md): Code Injection through Splunk Web Manager Configuration in Splunk Enterprise (CVSS 8.8, Splunk Enterprise)
- [CVE-2026-76314](https://cve.now/CVE-2026-76314.md): Remote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprise (CVSS 8.8, Splunk Enterprise)
- [CVE-2026-76313](https://cve.now/CVE-2026-76313.md): Remote Code Execution (RCE) through the REST API in Splunk Enterprise (CVSS 8.8, Splunk Enterprise)
- [CVE-2026-76312](https://cve.now/CVE-2026-76312.md): Improper Access Control through Embedded Reports in Splunk Enterprise (CVSS 9.4, Splunk Enterprise)
- [CVE-2026-76311](https://cve.now/CVE-2026-76311.md): Improper Access Control in Embedded Report Dispatch Archives in Splunk Enterprise (CVSS 9.4, Splunk Enterprise)
- [CVE-2026-76310](https://cve.now/CVE-2026-76310.md): Improper Access Control through Embedded Report REST API Requests in Splunk Enterprise (CVSS 9.4, Splunk Enterprise)
- [CVE-2026-76309](https://cve.now/CVE-2026-76309.md): Structured Query Language (SQL) Injection through the REST API in Splunk Enterprise (CVSS 4.3, Splunk Enterprise)
- [CVE-2026-76263](https://cve.now/CVE-2026-76263.md): Improper Access Control through the REST API in Splunk Enterprise (CVSS 5.4, Splunk Enterprise)
- [CVE-2026-76262](https://cve.now/CVE-2026-76262.md): Exposure of Sensitive Information to an Unauthorized Actor through the REST API in Splunk Enterprise (CVSS 7.5, Splunk Enterprise)
- [CVE-2026-76261](https://cve.now/CVE-2026-76261.md): Insecure Default Access Control List through the REST API in Splunk Secure Gateway (CVSS 5.3, Splunk Enterprise · Splunk Secure Gateway)
- [CVE-2026-76260](https://cve.now/CVE-2026-76260.md): Incorrect Permission Assignment for Critical Resource through the REST API in Splunk Enterprise (CVSS 6.5, Splunk Enterprise)
- [CVE-2026-76259](https://cve.now/CVE-2026-76259.md): Improper Privilege Management on the Management Port in Splunk Enterprise for Windows (CVSS 8.8, Splunk Enterprise)
- [CVE-2026-76258](https://cve.now/CVE-2026-76258.md): Use of Hard-coded Cryptographic Key through Companion App Registration in Splunk Secure Gateway (CVSS 6.5, Splunk Enterprise · Splunk Secure Gateway)
- [CVE-2026-76257](https://cve.now/CVE-2026-76257.md): Missing Authorization through REST API Endpoints in Splunk Secure Gateway (CVSS 6.5, Splunk Enterprise · Splunk Secure Gateway)
- [CVE-2026-76256](https://cve.now/CVE-2026-76256.md): Information Exposure through REST API Endpoints in Splunk Secure Gateway (CVSS 4.3, Splunk Enterprise · Splunk Secure Gateway)
- [CVE-2026-76255](https://cve.now/CVE-2026-76255.md): Risky Command Safeguards Bypass through Splunk Web in Splunk Enterprise (CVSS 6.4, Splunk Enterprise)
- [CVE-2026-76254](https://cve.now/CVE-2026-76254.md): SPL Command Safeguards Bypass through Splunk Web in Splunk Enterprise (CVSS 7.5, Splunk Enterprise)
- [CVE-2026-76253](https://cve.now/CVE-2026-76253.md): Privilege Escalation through Scheduled Search Alert Action Configuration in Splunk Enterprise (CVSS 8.8, Splunk Enterprise)
- [CVE-2026-76252](https://cve.now/CVE-2026-76252.md): Cross-Site Scripting (XSS) through Splunk Web Message Validation in Splunk Enterprise (CVSS 6.8, Splunk Enterprise)
- [CVE-2026-76251](https://cve.now/CVE-2026-76251.md): Missing Authorization through REST API Endpoints in the Splunk App for Splunk Observability Cloud (CVSS 7.1, Splunk Enterprise)
- [CVE-2026-59992](https://cve.now/CVE-2026-59992.md): Tina: Broken Access Control: arbitrary bucket-key write/delete in \`next-tinacms-s3\` (and sibling production media adapters) (CVSS 5.4, tinacms · next-tinacms-s3 +3)
- [CVE-2026-76589](https://cve.now/CVE-2026-76589.md): TRENDnet TEW-755AP mycli FUN\_401000 stack-based overflow (CVSS 9.4, TRENDnet TEW-755AP)
- [CVE-2025-36254](https://cve.now/CVE-2025-36254.md): DS8900F and DS8A00 Authentication Bypass (CVSS 7.4, IBM DS8A00 · IBM DS8900F)
- [CVE-2025-36255](https://cve.now/CVE-2025-36255.md): DS8900F and DS8A00 Privilege Escalation (CVSS 7.5, IBM DS8A00 · IBM DS8900F)
- [CVE-2025-36398](https://cve.now/CVE-2025-36398.md): DS8900F and DS8A00 Information Disclosure (CVSS 5.4, IBM DS8A00 · IBM DS8900F)
- [CVE-2026-69550](https://cve.now/CVE-2026-69550.md): Windows App for Mac Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows App for Mac)
- [CVE-2026-14978](https://cve.now/CVE-2026-14978.md): Unicode normalization mismatch in go-slug ignore pattern matching may bypass intended file exclusions (CVSS 5.5, HashiCorp go-slug)
- [CVE-2026-11617](https://cve.now/CVE-2026-11617.md): Tanium addressed a compression bomb vulnerability in Findings. (CVSS 3.1, Tanium Findings)
- [CVE-2026-75476](https://cve.now/CVE-2026-75476.md): Tanium addressed a compression bomb vulnerability in Threat Response. (CVSS 3.1, Tanium Threat Response)
- [CVE-2026-14514](https://cve.now/CVE-2026-14514.md): Reliable Scalable Cluster Technology Denial-of-Service (CVSS 6.5, IBM Reliable Scalable Cluster Technology)
- [CVE-2026-75595](https://cve.now/CVE-2026-75595.md): Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext (CVSS 9.1, netty · io.netty:netty-handler)
- [CVE-2026-76584](https://cve.now/CVE-2026-76584.md): TRENDnet TV-IP751WIC alphapd set\_time.cgi stack-based overflow (CVSS 9.4, TRENDnet TV-IP751WIC)
- [CVE-2026-62727](https://cve.now/CVE-2026-62727.md): Windows Telephony Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-75596](https://cve.now/CVE-2026-75596.md): Netty: Fragmented ClientHello records trigger quadratic pre-handshake reassembly in default SNI parsing (CVSS 8.7, netty · io.netty:netty-handler)
- [CVE-2026-76827](https://cve.now/CVE-2026-76827.md): Search-indexer: search-indexer: update/delete operations not scoped to caller's cluster (cross-tenant data tampering) (CVSS 6.8, Red Hat Advanced Cluster Management for Kubernetes)
- [CVE-2026-69222](https://cve.now/CVE-2026-69222.md): LiquidJS: Uncontrolled Resource Consumption in \`join\` filter allows template authors to bypass \`memoryLimit\` and crash the process (CVSS 7.5, harttle liquidjs · liquidjs)
- [CVE-2026-61556](https://cve.now/CVE-2026-61556.md): LiquidJS: An infinite loop vulnerability in \`strip\_html\` filter (CVSS 8.7, harttle liquidjs · liquidjs)
- [CVE-2026-54491](https://cve.now/CVE-2026-54491.md): Koel: Incomplete fix for CVE-2026-47260 — systemic SSRF in podcast & radio fetch paths (CVSS 7.1, koel · phanan/koel)
- [CVE-2026-76139](https://cve.now/CVE-2026-76139.md): Acm-operator-bundle: acm-operator-bundle: bundle build execs unpinned stolostron/release@master with full build credentials (CVSS 8.0, Red Hat Advanced Cluster Management for Kubernetes)
- [CVE-2026-75569](https://cve.now/CVE-2026-75569.md): Mce-operator-bundle: all github actions pinned by mutable tag, not commit sha (CVSS 7.7, Red Hat multicluster engine for Kubernetes)
- [CVE-2026-54493](https://cve.now/CVE-2026-54493.md): Koel: Authenticated Full-Read SSRF via Subsonic Internet Radio Stations (CVSS 7.7, koel · phanan/koel)
- [CVE-2026-54494](https://cve.now/CVE-2026-54494.md): Koel: Full-read SSRF via podcast enclosure URL: isPublicHost() filter\_var guard does not reject NAT64 (64:ff9b::/96) or 6to4 (2002::/16) IPv6-transition wrappers of internal IPv4 (CVSS 5.3, koel · phanan/koel)
- [CVE-2026-76583](https://cve.now/CVE-2026-76583.md): TRENDnet TV-IP751WIC alphapd set\_time.cgi command injection (CVSS 5.3, TRENDnet TV-IP751WIC)
- [CVE-2026-54492](https://cve.now/CVE-2026-54492.md): Koel: Authenticated Blind SSRF via Subsonic Podcast Channel Creation (CVSS 4.3, koel · phanan/koel)
- [CVE-2026-75616](https://cve.now/CVE-2026-75616.md): Command Injection in Router Web Management Interface (CVSS 8.5, TP-Link Systems Archer C20)
- [CVE-2026-68555](https://cve.now/CVE-2026-68555.md): coturn: Chained mobility resumes allow authenticated remote memory exhaustion (CVSS 6.5, coturn)
- [CVE-2026-68552](https://cve.now/CVE-2026-68552.md): Coturn: uint16\_t truncation overflow in STUN message length causes TCP stream framing bypass (CVSS 5.3, coturn)
- [CVE-2026-68554](https://cve.now/CVE-2026-68554.md): Coturn: STUN attributes after MESSAGE-INTEGRITY are processed, letting on-path attackers modify authenticated TURN requests (CVSS 2.3, coturn)
- [CVE-2026-68553](https://cve.now/CVE-2026-68553.md): Coturn: Format String Injection via TURN USERNAME/REALM into hiredis Redis Command (CVSS 7.1, coturn)
- [CVE-2026-12634](https://cve.now/CVE-2026-12634.md): Out-of-bounds stack write in the settings NVS backend from over-reported nvs\_read length (CVSS 5.3, zephyrproject zephyr)
- [CVE-2026-12522](https://cve.now/CVE-2026-12522.md): Stack buffer overflow in Zephyr hl7800 modem driver parsing network-supplied +CGCONTRDP address fields (CVSS 8.8, zephyrproject zephyr)
- [CVE-2026-12633](https://cve.now/CVE-2026-12633.md): Out-of-bounds write in IPv6 6LoWPAN Context Option handling via unauthenticated Router Advertisement (CVSS 8.1, zephyrproject zephyr)
- [CVE-2026-53545](https://cve.now/CVE-2026-53545.md): Termix: Remote Code Execution via Tunnel Disconnect pkill Command Injection (CVSS 9.8, Termix-SSH Termix)
- [CVE-2026-53546](https://cve.now/CVE-2026-53546.md): Termix: Missing authorization in SSH host credential resolution exposes stored credentials (CVSS 9.6, Termix-SSH Termix)
- [CVE-2026-53542](https://cve.now/CVE-2026-53542.md): Termix: Tar option injection in file-manager archive creation allows command execution on managed SSH hosts (CVSS 8.8, Termix-SSH Termix)
- [CVE-2026-53548](https://cve.now/CVE-2026-53548.md): Termix: IDOR — Authenticated user can fetch SSH passwords for hosts owned by other users (CVSS 9.6, Termix-SSH Termix)
- [CVE-2026-53547](https://cve.now/CVE-2026-53547.md): Termix: Account Takeover via Global Settings Disclosure (CVSS 8.8, Termix-SSH Termix)
- [CVE-2026-53549](https://cve.now/CVE-2026-53549.md): Termix: Server-Side Request Forgery via Proxy Connectivity Test (CVSS 7.7, Termix-SSH Termix)
- [CVE-2026-17015](https://cve.now/CVE-2026-17015.md): IBM i Denial of Service (CVSS 5.4, IBM i)
- [CVE-2026-18102](https://cve.now/CVE-2026-18102.md): IBM i Buffer Overflow (CVSS 3.5, IBM i)
- [CVE-2026-76582](https://cve.now/CVE-2026-76582.md): TRENDnet TEW-821DAP ssi ping.cgi system command injection (CVSS 5.3, TRENDnet TEW-821DAP)
- [CVE-2026-18544](https://cve.now/CVE-2026-18544.md): Portieris is vulnerable to Image Policy Bypass via Unvalidated ownerReference (CVSS 8.1, IBM Portieris)
- [CVE-2026-54738](https://cve.now/CVE-2026-54738.md): Lemmy: Rate limit bypass via X-Forwarded-For header spoofing in actix-web ConnectionInfo (CVSS 6.5, LemmyNet lemmy)
- [CVE-2026-18849](https://cve.now/CVE-2026-18849.md): IBM OpenBMC Code Execution (CVSS 6.8, IBM OPENBMC)
- [CVE-2026-54743](https://cve.now/CVE-2026-54743.md): Lemmy: Stored XSS via markdown image alt-text in lemmy-ui html5-embed (CVSS 6.4, LemmyNet lemmy)
- [CVE-2026-54739](https://cve.now/CVE-2026-54739.md): Lemmy: Login Endpoint User Enumeration via HTTP Response Code Differential (CVSS 6.9, LemmyNet lemmy)
- [CVE-2026-76576](https://cve.now/CVE-2026-76576.md): yangzongzhuan RuoYi-Vue Common Download Endpoint CommonController.java resourceDownload path traversal (CVSS 5.3, yangzongzhuan RuoYi-Vue)
- [CVE-2026-4936](https://cve.now/CVE-2026-4936.md): Power System Insufficient Entropy (CVSS 5.1, IBM PowerVM Hypervisor)
- [CVE-2026-54740](https://cve.now/CVE-2026-54740.md): Lemmy: Lower-ranked federated moderator can remove higher-ranked moderators (CVSS 6.5, LemmyNet lemmy)
- [CVE-2026-54741](https://cve.now/CVE-2026-54741.md): Lemmy: Blocked users can edit private messages sent before the block (CVSS 5.3, LemmyNet lemmy)
- [CVE-2026-4937](https://cve.now/CVE-2026-4937.md): Power System Insufficient Entropy (CVSS 5.3, IBM PowerVM Hypervisor)
- [CVE-2026-54742](https://cve.now/CVE-2026-54742.md): Lemmy: \`CollectionAdd::Featured\` does not check the post is in the community (CVSS 5.1, LemmyNet lemmy)
- [CVE-2026-16707](https://cve.now/CVE-2026-16707.md): Power System Out-of-bounds Read (CVSS 8.2, IBM PowerVM Hypervisor)
- [CVE-2026-75593](https://cve.now/CVE-2026-75593.md): BuildKit: Malicious client can bypass destination directory validation on local sources upload (CVSS 7.2, moby buildkit)
- [CVE-2026-61711](https://cve.now/CVE-2026-61711.md): BuildKit: Custom frontend could bypass Seccomp/AppArmor (CVSS 5.3, moby buildkit · github.com/moby/buildkit)
- [CVE-2026-61712](https://cve.now/CVE-2026-61712.md): BuildKit: Possible runtime DoS via unbounded group parsing (CVSS 2.3, moby buildkit · github.com/moby/buildkit)
- [CVE-2026-76574](https://cve.now/CVE-2026-76574.md): code-projects Hospital Information System User Login UsersController.php login sql injection (CVSS 6.9, code-projects Hospital Information System)
- [CVE-2026-16919](https://cve.now/CVE-2026-16919.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 9.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16917](https://cve.now/CVE-2026-16917.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 9.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16914](https://cve.now/CVE-2026-16914.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 6.7, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16913](https://cve.now/CVE-2026-16913.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 9.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16911](https://cve.now/CVE-2026-16911.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 8.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16909](https://cve.now/CVE-2026-16909.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 8.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16903](https://cve.now/CVE-2026-16903.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 9.6, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16901](https://cve.now/CVE-2026-16901.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 8.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16897](https://cve.now/CVE-2026-16897.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 4.4, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16894](https://cve.now/CVE-2026-16894.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 9.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16891](https://cve.now/CVE-2026-16891.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 3.3, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16890](https://cve.now/CVE-2026-16890.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 3.6, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16886](https://cve.now/CVE-2026-16886.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 4.3, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16888](https://cve.now/CVE-2026-16888.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 3.7, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16885](https://cve.now/CVE-2026-16885.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 9.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-63187](https://cve.now/CVE-2026-63187.md): Logto: OS command injection vulnerability exists in the Commitlint workflow (CVSS 6.3, logto-io logto)
- [CVE-2026-17028](https://cve.now/CVE-2026-17028.md): Power System Out-of-bounds Read (CVSS 6.5, IBM PowerVM Hypervisor)
- [CVE-2026-63188](https://cve.now/CVE-2026-63188.md): logto-tunnel serves files outside --experience-path via path traversal (CVSS 8.7, logto-io logto · @logto/tunnel)
- [CVE-2026-17091](https://cve.now/CVE-2026-17091.md): Power System Integer Overflow (CVSS 8.4, IBM PowerVM Hypervisor)
- [CVE-2026-16883](https://cve.now/CVE-2026-16883.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 5.5, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16882](https://cve.now/CVE-2026-16882.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 9.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-17097](https://cve.now/CVE-2026-17097.md): Power System Improper Validation (CVSS 7.3, IBM PowerVM Hypervisor)
- [CVE-2026-16877](https://cve.now/CVE-2026-16877.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 8.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16875](https://cve.now/CVE-2026-16875.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16874](https://cve.now/CVE-2026-16874.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16873](https://cve.now/CVE-2026-16873.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-18821](https://cve.now/CVE-2026-18821.md): Power System Out-of-bounds Write (CVSS 7.5, IBM PowerVM Hypervisor)
- [CVE-2026-62317](https://cve.now/CVE-2026-62317.md): Logto: ReDoS via unescaped user input in email subaddressing regex (blockSubaddressing) (CVSS 7.5, logto-io logto)
- [CVE-2026-16872](https://cve.now/CVE-2026-16872.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 9.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16869](https://cve.now/CVE-2026-16869.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16724](https://cve.now/CVE-2026-16724.md): Power System Integer Overflow (CVSS 4.5, IBM Virtualization Management Interface)
- [CVE-2026-16866](https://cve.now/CVE-2026-16866.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 4.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16865](https://cve.now/CVE-2026-16865.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 8.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16864](https://cve.now/CVE-2026-16864.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 9.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16862](https://cve.now/CVE-2026-16862.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 9.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16857](https://cve.now/CVE-2026-16857.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 8.2, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16855](https://cve.now/CVE-2026-16855.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 5.5, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16852](https://cve.now/CVE-2026-16852.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.5, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16851](https://cve.now/CVE-2026-16851.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.4, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16850](https://cve.now/CVE-2026-16850.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 8.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16849](https://cve.now/CVE-2026-16849.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 4.3, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-18871](https://cve.now/CVE-2026-18871.md): Power System Buffer Overflow (CVSS 7.3, IBM PowerVM Hypervisor)
- [CVE-2026-16848](https://cve.now/CVE-2026-16848.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 8.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-55086](https://cve.now/CVE-2026-55086.md): Etherpad: Import/export use Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite (CVSS 4.2, etherpad · ep\_etherpad-lite)
- [CVE-2026-55085](https://cve.now/CVE-2026-55085.md): Etherpad: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in etherpad-lite (CVSS 9.6, etherpad)
- [CVE-2026-17414](https://cve.now/CVE-2026-17414.md): Power System Improper Input Validation (CVSS 8.1, IBM PowerVM Hypervisor)
- [CVE-2026-16847](https://cve.now/CVE-2026-16847.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 8.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-55089](https://cve.now/CVE-2026-55089.md): Etherpad: JWT \`admin\` claim presence-only check lets non-admin OAuth users invoke every Etherpad HTTP API endpoint (CVSS 9.9, etherpad)
- [CVE-2026-16846](https://cve.now/CVE-2026-16846.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 6.5, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16845](https://cve.now/CVE-2026-16845.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 9.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-55090](https://cve.now/CVE-2026-55090.md): Etherpad: Stored XSS in HTML export via unescaped attribute-pool values (CVSS 5.3, etherpad · ep\_etherpad-lite)
- [CVE-2026-16844](https://cve.now/CVE-2026-16844.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 8.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16842](https://cve.now/CVE-2026-16842.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 8.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16841](https://cve.now/CVE-2026-16841.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 8.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16661](https://cve.now/CVE-2026-16661.md): Power System Integer Overflow (CVSS 8.2, IBM PowerVM Hypervisor)
- [CVE-2026-16840](https://cve.now/CVE-2026-16840.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 9.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16839](https://cve.now/CVE-2026-16839.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 9.4, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16838](https://cve.now/CVE-2026-16838.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.0, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16837](https://cve.now/CVE-2026-16837.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.5, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-55088](https://cve.now/CVE-2026-55088.md): Etherpad: Device-to-device author-token transfer endpoint is replayable, never expires, and exposes the cleartext author token (CVSS 6.8, etherpad · ep\_etherpad-lite)
- [CVE-2026-76572](https://cve.now/CVE-2026-76572.md): pkp pkp-lib XSLTransformer.php \_transformPHP xml external entity reference (CVSS 5.1, pkp-lib)
- [CVE-2026-16836](https://cve.now/CVE-2026-16836.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.5, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16834](https://cve.now/CVE-2026-16834.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 9.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-55087](https://cve.now/CVE-2026-55087.md): Etherpad: x-proxy-path header reflected into admin HTML/JS/CSS (cache-poisoning XSS) and concatenated into redirect (open-redirect) (CVSS 6.1, etherpad · ep\_etherpad-lite)
- [CVE-2026-16833](https://cve.now/CVE-2026-16833.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 5.3, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16831](https://cve.now/CVE-2026-16831.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.5, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-19508](https://cve.now/CVE-2026-19508.md): RDK WebUI heap-based buffer overflow vulnerability (CVSS 9.8, RDK-B WebUI)
- [CVE-2026-16829](https://cve.now/CVE-2026-16829.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 5.3, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-19509](https://cve.now/CVE-2026-19509.md): RDK WebUI DOS vulnerability (CVSS 6.5, RDK-B WebUI)
- [CVE-2026-19507](https://cve.now/CVE-2026-19507.md): RDK WebUI uncontrolled resource consumption (CVSS 7.5, RDK-B WebUI)
- [CVE-2026-68901](https://cve.now/CVE-2026-68901.md): WeKan Board Export REST Endpoints: NULL Pointer Dereference on Invalid authToken Leads to Uncaught Exception / Remote Denial of Service (CVSS 6.5, wekan)
- [CVE-2026-16827](https://cve.now/CVE-2026-16827.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 5.9, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-19506](https://cve.now/CVE-2026-19506.md): RDK-B WebUI race condition vulnerability (CVSS 8.1, RDK-B WebUI)
- [CVE-2026-19505](https://cve.now/CVE-2026-19505.md): RDK-B WebUI improper cryptographic signature verification vulnerability (CVSS 9.8, RDK-B WebUI)
- [CVE-2026-68900](https://cve.now/CVE-2026-68900.md): Wekan: Stored XSS in HTML board exports through a card-title second parse (CVSS 7.6, wekan)
- [CVE-2026-16825](https://cve.now/CVE-2026-16825.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 4.2, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-76647](https://cve.now/CVE-2026-76647.md): Leantime JSON-RPC API contains a missing authorization vulnerability (CVSS 8.8, Leantime JSON-RPC API)
- [CVE-2026-16824](https://cve.now/CVE-2026-16824.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.5, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-68899](https://cve.now/CVE-2026-68899.md): Wekan: File Upload MIME Type Validation Bypass — Stored XSS via Missing System Binary Fallback (CVSS 8.7, wekan)
- [CVE-2026-16822](https://cve.now/CVE-2026-16822.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 9.3, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-22306](https://cve.now/CVE-2026-22306.md): Critical flaw impacting OZOLS ERP's automatic update channel (CVSS 10.0, Ozols Grupa OZOLS)
- [CVE-2026-68561](https://cve.now/CVE-2026-68561.md): Wekan: a low-privilege board member escalates to board admin and takes over a private board via the \`sort\` collection-allow rule (CVSS 8.8, wekan)
- [CVE-2026-68560](https://cve.now/CVE-2026-68560.md): Wekan:hell Injection in External Antivirus Scanner Path via asyncExec (CVSS 7.7, wekan)
- [CVE-2026-68558](https://cve.now/CVE-2026-68558.md): Wekan: SSRF filter bypass via DNS-resolving hostname in outgoing webhooks (incomplete fix of CVE-2026-53446) (CVSS 8.5, wekan)
- [CVE-2026-68559](https://cve.now/CVE-2026-68559.md): Wekan: Broken access control in the Excel-export route (\`/api/boards/:boardId/exportExcel\`) (CVSS 6.5, wekan)
- [CVE-2026-67189](https://cve.now/CVE-2026-67189.md): pfSense Plus/CE Stored XSS via Traffic Graphs PTR Record (CVSS 5.3, Netgate pfSense Plus · Netgate pfSense CE)
- [GHSA-QWGH-2VCV-G2F7](https://cve.now/GHSA-QWGH-2VCV-G2F7.md): block\_buffer: panic corrupts inline buffer position (medium (no CVSS), block\_buffer)
- [CVE-2026-63722](https://cve.now/CVE-2026-63722.md): ICEcoder 8.1 Unauthenticated RCE via terminal-xhr.php (CVSS 8.7, ICEcoder)
- [CVE-2026-16933](https://cve.now/CVE-2026-16933.md): Power System Integer Overflow (CVSS 8.2, IBM Power Systems Firmware)
- [CVE-2026-17042](https://cve.now/CVE-2026-17042.md): Power System Out-of-bounds Read (CVSS 7.3, IBM Power Systems Firmware)
- [CVE-2026-17063](https://cve.now/CVE-2026-17063.md): Power System Incorrect Authorization (CVSS 7.9, IBM Power Systems Firmware)
- [CVE-2026-75112](https://cve.now/CVE-2026-75112.md): OTTO® Fleet Manager – Weak Password Hashing Configuration (CVSS 6.9, Rockwell Automation OTTO® Fleet Manager)
- [CVE-2026-19198](https://cve.now/CVE-2026-19198.md): Akaunting 3.1.21 - Improper authorization in BulkActions handle dispatch (CVSS 8.7, Akaunting)
- [CVE-2026-16687](https://cve.now/CVE-2026-16687.md): Power System Buffer Overflow (CVSS 9.6, IBM Power Systems Firmware)
- [CVE-2026-16835](https://cve.now/CVE-2026-16835.md): Power System Improper Certificate Validation (CVSS 9.6, IBM Power Systems Firmware)
- [CVE-2026-16832](https://cve.now/CVE-2026-16832.md): Power System Buffer Overflow (CVSS 8.4, IBM Power Systems Firmware)
- [CVE-2026-16938](https://cve.now/CVE-2026-16938.md): Power System Missing Authorization (CVSS 6.9, IBM Power Systems Firmware)
- [CVE-2026-18848](https://cve.now/CVE-2026-18848.md): Power System Cross-Site Request Forgery (CSRF) (CVSS 8.3, IBM Power Systems Firmware)
- [CVE-2026-16828](https://cve.now/CVE-2026-16828.md): Power System Out-of-bounds Read (CVSS 7.6, IBM Power Systems Firmware)
- [CVE-2026-17494](https://cve.now/CVE-2026-17494.md): Power System Buffer Overflow (CVSS 8.2, IBM Power Systems Firmware)
- [CVE-2026-17429](https://cve.now/CVE-2026-17429.md): Power System Incorrect Authorization (CVSS 8.1, IBM Power Systems Firmware)
- [CVE-2026-16930](https://cve.now/CVE-2026-16930.md): Power System Missing Authorization (CVSS 8.2, IBM Power Systems Firmware)
- [CVE-2026-18681](https://cve.now/CVE-2026-18681.md): This Power System Buffer Overflow (CVSS 6.8, IBM Server Firmware)
- [CVE-2026-75619](https://cve.now/CVE-2026-75619.md): RTSP Heap Buffer Overflow Denial-of-Service Vulnerability on TP-Link Tapo C100 and C101 (CVSS 6.9, TP-Link Systems Tapo C100 · TP-Link Systems Tapo C101)
- [CVE-2026-17093](https://cve.now/CVE-2026-17093.md): Power System Buffer Overflow (CVSS 8.2, IBM Power Systems Firmware)
- [CVE-2026-75618](https://cve.now/CVE-2026-75618.md): RTSP Null Pointer Dereference Denial-of-Service Vulnerability on TP-Link Tapo C100 and C101 (CVSS 7.1, TP-Link Systems Tapo C100 · TP-Link Systems Tapo C101)
- [CVE-2026-55694](https://cve.now/CVE-2026-55694.md): Snipe-IT: Chained Information Disclosure and IDOR Leads to Full EULA File Takeover (CVSS 7.1, grokability snipe-it · snipe/snipe-it)
- [CVE-2026-18315](https://cve.now/CVE-2026-18315.md): TrueBooker \<= 1.2.6 - Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover to 'truebooker\_wp\_user\_id' Parameter (CVSS 9.8, themetechmount TrueBooker – Appointment Booking and Schedul…)
- [CVE-2026-17100](https://cve.now/CVE-2026-17100.md): Power System Out-of-bounds Write (CVSS 8.2, IBM Power Systems Firmware)
- [CVE-2026-55643](https://cve.now/CVE-2026-55643.md): Snipe-IT: Tenant Isolation Bypass in FMCS Floater Mode (CVSS 7.6, grokability snipe-it · snipe/snipe-it)
- [CVE-2026-55703](https://cve.now/CVE-2026-55703.md): Snipe-IT: Maintenance Record Disclosure via Missing Authorization on GET (CVSS 4.3, grokability snipe-it · snipe/snipe-it)
- [CVE-2026-61807](https://cve.now/CVE-2026-61807.md): Snipe-IT: Stored DOM XSS via table selected-count IDs (CVSS 6.3, grokability snipe-it · snipe/snipe-it)
- [CVE-2026-19321](https://cve.now/CVE-2026-19321.md): Power System Integer Overflow (CVSS 6.7, IBM Power Systems Firmware)
- [CVE-2026-55519](https://cve.now/CVE-2026-55519.md): Snipe-IT: Improper Authorization in File Deletion (IDOR) (CVSS 5.4, grokability snipe-it · snipe/snipe-it)
- [CVE-2026-55482](https://cve.now/CVE-2026-55482.md): Snipe-IT: Multi-Tenancy Bypass via Bulk Asset Update (CVSS 6.3, grokability snipe-it · snipe/snipe-it)
- [CVE-2026-55483](https://cve.now/CVE-2026-55483.md): Snipe-IT: Privilege Escalation via Missing admin Permission Check in User Creation (CVSS 4.9, grokability snipe-it · snipe/snipe-it)
- [CVE-2026-70496](https://cve.now/CVE-2026-70496.md): Search-v2-operator: search-v2-operator: operator clusterrole is cluster-admin equivalent via impersonate, rbac write, csr approve, and manifestwork (CVSS 9.9, Red Hat Advanced Cluster Management for Kubernetes)
- [CVE-2026-50550](https://cve.now/CVE-2026-50550.md): Snipe-IT: 2FA reset privilege bypass (CVSS 5.8, grokability snipe-it · snipe/snipe-it)
- [CVE-2026-49870](https://cve.now/CVE-2026-49870.md): Snipe-IT: TOTP Brute-Forceable Due to Missing Rate Limiting on \`POST /two-factor\` (CVSS 5.9, grokability snipe-it · snipe/snipe-it)
- [CVE-2026-49976](https://cve.now/CVE-2026-49976.md): Snipe-IT: User Account Escalation via CSV Import (CVSS 6.5, grokability snipe-it · snipe/snipe-it)
- [CVE-2026-19234](https://cve.now/CVE-2026-19234.md): Power System Buffer Overflow (CVSS 8.2, IBM Power Systems Firmware)
- [CVE-2026-63633](https://cve.now/CVE-2026-63633.md): FreeRDP: Heap buffer overflow in Opus audio decode (\`freerdp\_dsp\_decode\_opus\` resizes the wrong stream) — server→client (CVSS 7.7, FreeRDP)
- [CVE-2026-63652](https://cve.now/CVE-2026-63652.md): FreeRDP: Double-free of \`client\_formats\` in the rdpsnd server channel on a malformed Client Audio Formats PDU (CVSS 7.1, FreeRDP)
- [CVE-2026-63117](https://cve.now/CVE-2026-63117.md): FreeRDP: Denial of service through ADPCM frame size calculation (CVSS 6.5, FreeRDP)
- [CVE-2026-18874](https://cve.now/CVE-2026-18874.md): Volsync-addon-controller: volsync-addon-controller: annotation values rendered into yaml via text/template without escaping allows yaml injection into subscription (CVSS 6.2, Red Hat Advanced Cluster Management for Kubernetes)
- [CVE-2026-55192](https://cve.now/CVE-2026-55192.md): FreeRDP: Out-of-bounds read in H.264 YUV-to-RGB conversion due to decoder/surface dimension mismatch (CVSS 7.2, FreeRDP)
- [CVE-2026-55194](https://cve.now/CVE-2026-55194.md): FreeRDPHeap-buffer-overflow write in TS Gateway RPC RESPONSE reassembly due to alloc\_hint capacity mismatch (CVSS 8.7, FreeRDP)
- [CVE-2026-55648](https://cve.now/CVE-2026-55648.md): FreeRDP: Integer Overflow in \`freerdp\_image\_copy\_from\_icon\_data\` Bypasses Bounds Check (CVSS 6.1, FreeRDP)
- [CVE-2026-75149](https://cve.now/CVE-2026-75149.md): marimo \< 0.23.15 Code Injection via MCP Server Configuration (CVSS 8.7, marimo-team marimo)
- [CVE-2026-55193](https://cve.now/CVE-2026-55193.md): FreeRDP: Heap-buffer-overflow write in TS Gateway RPC fragment receive due to uncapped bind\_ack max\_xmit\_frag (CVSS 8.7, FreeRDP)
- [CVE-2026-61518](https://cve.now/CVE-2026-61518.md): ISPConfig Authenticated SQL Injection via Remote API primary\_id Parameter (CVSS 8.7, ispconfig3)
- [CVE-2026-55564](https://cve.now/CVE-2026-55564.md): FreeRDP: Out-of-bounds read in glyph\_cache\_get via crafted glyph fragments (CVSS 5.4, FreeRDP)
- [CVE-2026-19653](https://cve.now/CVE-2026-19653.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 6.5, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-55191](https://cve.now/CVE-2026-55191.md): FreeRDP: Heap-buffer-overflow write in AVC444 YUV buffer allocation (CVSS 8.7, FreeRDP)
- [CVE-2026-62680](https://cve.now/CVE-2026-62680.md): Orval: Generation-time SSRF + remote/local file inclusion via unrestricted $ref (CVSS 7.1, orval-labs orval · orval)
- [CVE-2026-62682](https://cve.now/CVE-2026-62682.md): Orval: RCE via servers\[\].url -\> unescaped request-URL template literal (with getBaseUrlFromSpecification) (CVSS 9.3, orval-labs orval · orval)
- [CVE-2025-14600](https://cve.now/CVE-2025-14600.md): Admin Account Takeover via Path Traversal in vsDesk (CVSS 9.3, vsDesk)
- [CVE-2026-72717](https://cve.now/CVE-2026-72717.md): Orval: Import-time RCE via schema default -\> zod module-level template literal (CVSS 9.3, orval-labs orval · orval)
- [CVE-2026-71867](https://cve.now/CVE-2026-71867.md): Orval: RCE via schema property name -\> computed-property-key injection in the MSW mock generator (CVSS 9.3, orval-labs orval · orval)
- [CVE-2026-19875](https://cve.now/CVE-2026-19875.md): Unauthenticated Registration POST Endpoint Permits Admin Email Overwrite and Outbound Relay Abuse in Langflow (CVSS 7.5, IBM Langflow OSS)
- [CVE-2026-71868](https://cve.now/CVE-2026-71868.md): Orval: Import-time RCE via enum-typed default -\> zod module-level template literal (CVSS 9.3, orval-labs orval · orval)
- [CVE-2026-71865](https://cve.now/CVE-2026-71865.md): Orval: Import-time RCE via query parameter name -\> computed-property-key injection in the zod cli (CVSS 9.3, orval-labs orval · orval)
- [CVE-2026-71869](https://cve.now/CVE-2026-71869.md): Orval: Import-time RCE via array-items default -\> zod module-level template literal (CVSS 9.3, orval-labs orval · orval)
- [CVE-2026-71864](https://cve.now/CVE-2026-71864.md): Orval: Import-time RCE via header parameter name -\> computed-property-key injection in the zod client (CVSS 9.3, orval-labs orval · orval)
- [CVE-2026-71871](https://cve.now/CVE-2026-71871.md): Orval: Import-time RCE via header-parameter default -\> zod module-level template literal (CVSS 9.3, orval-labs orval · orval)
- [CVE-2026-72716](https://cve.now/CVE-2026-72716.md): Orval: Import-time RCE via query-parameter default -\> zod module-level template literal (CVSS 9.3, orval-labs orval · orval)
- [CVE-2026-62681](https://cve.now/CVE-2026-62681.md): Orval: RCE via OpenAPI path -\> unescaped request-URL template literal (backtick breakout) (CVSS 9.3, orval-labs orval · orval)
- [CVE-2026-66794](https://cve.now/CVE-2026-66794.md): Cluster-proxy-addon: cluster-proxy-addon: unauthenticated ssrf to arbitrary managed-cluster services via public route (CVSS 9.3, Red Hat multicluster engine for Kubernetes)
- [CVE-2026-17183](https://cve.now/CVE-2026-17183.md): CVE-2026-17183 CVE Record (CVSS 7.1, Grafana OSS · Grafana Enterprise)
- [CVE-2026-71866](https://cve.now/CVE-2026-71866.md): Orval: Import-time RCE via schema property name -\> computed-property-key injection in the zod client (CVSS 9.3, orval-labs orval · orval)
- [CVE-2026-32475](https://cve.now/CVE-2026-32475.md): WordPress Elementor Pro plugin \<= 4.2.1 - Arbitrary File Upload vulnerability (CVSS 9.0, Elementor Pro)
- [CVE-2026-67581](https://cve.now/CVE-2026-67581.md): On-chain transfer proof is not single-use in mpp EVM payment method, enabling cross-challenge replay (CVSS 8.7, ZenHive mpp)
- [CVE-2026-73541](https://cve.now/CVE-2026-73541.md): Tempo fee sponsorship in mpp bounds each transaction but not aggregate exposure, allowing concurrent sponsor-wallet drain (CVSS 8.3, ZenHive mpp)
- [CVE-2026-73136](https://cve.now/CVE-2026-73136.md): Static memo configuration in mpp Tempo disables per-challenge attribution binding, enabling third-party replay (CVSS 8.2, ZenHive mpp)
- [CVE-2026-73829](https://cve.now/CVE-2026-73829.md): Non-atomic hash-credential dedup in mpp Tempo allows replay of a confirmed payment under a concurrent race (CVSS 6.3, ZenHive mpp)
- [CVE-2025-14603](https://cve.now/CVE-2025-14603.md): Use of user input in raw SQL queries in vsDesk leading to blind SQL injection (CVSS 8.8, vsDesk)
- [CVE-2026-71470](https://cve.now/CVE-2026-71470.md): Acm-search-v2-rhel9: search-v2-operator: search cr imageoverride/arguments/envvar flow unsanitized into pods running impersonating sa (CVSS 9.1, Red Hat Advanced Cluster Management for Kubernetes)
- [CVE-2026-50173](https://cve.now/CVE-2026-50173.md): Flow-Like: Azure invoke presign grants app content write SAS to ExecuteEvents-only users (CVSS 7.2, Rheosoph flow-like)
- [CVE-2026-72530](https://cve.now/CVE-2026-72530.md): A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X t (CVSS 9.5, KEV, TrueConf Server)
- [CVE-2026-72529](https://cve.now/CVE-2026-72529.md): A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X t (CVSS 9.3, KEV, TrueConf Server)
- [CVE-2024-13942](https://cve.now/CVE-2024-13942.md): Rockchip RK3588s Secure BootROM TOCTOU (time-of-check to time-of-use) vulnerability leading to arbitrary code execution with highest privileges (CVSS 7.6, Rockchip RK3588s)
- [CVE-2026-20320](https://cve.now/CVE-2026-20320.md): A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read se (CVSS 7.5, Cisco BroadWorks)
- [CVE-2026-75583](https://cve.now/CVE-2026-75583.md): keeper.sh Calendar version prior to 2.18.14 SSRF Guard Bypass via DNS Rebinding (CVSS 2.3, ridafkih keeper.sh)
- [CVE-2026-75147](https://cve.now/CVE-2026-75147.md): FFmpeg Out-of-Bounds Read in AV1 RTP Packetizer via rtpenc\_av1.c (CVSS 6.9, FFmpeg)
- [CVE-2026-75146](https://cve.now/CVE-2026-75146.md): FFmpeg Out-of-Bounds Read in DASH Demuxer via dashdec.c (CVSS 7.2, FFmpeg)
- [CVE-2026-75145](https://cve.now/CVE-2026-75145.md): FFmpeg Integer Narrowing Conversion OOB Memory Access in AV1 RTP Packetizer (CVSS 5.8, FFmpeg)
- [CVE-2026-75144](https://cve.now/CVE-2026-75144.md): FFmpeg Heap Buffer Overflow in VC-2/Dirac RTP Packetizer (CVSS 8.5, FFmpeg)
- [CVE-2026-75143](https://cve.now/CVE-2026-75143.md): FFmpeg Heap Buffer Overflow via RIST Protocol Reader (CVSS 9.3, FFmpeg)
- [CVE-2026-75142](https://cve.now/CVE-2026-75142.md): FFmpeg Stack Buffer Overflow in MPEG-PS Muxer via mpegenc.c (CVSS 8.5, FFmpeg)
- [CVE-2026-75141](https://cve.now/CVE-2026-75141.md): FFmpeg Heap Buffer Overflow in hvcC Box Writer via HEVC Muxing (CVSS 8.5, FFmpeg)
- [CVE-2026-49392](https://cve.now/CVE-2026-49392.md): Wazuh: Local SQL injection in FIM db due to path lookup interpolation in wazuh-syscheckd (CVSS 5.3, wazuh)
- [CVE-2026-20327](https://cve.now/CVE-2026-20327.md): Cisco Unified Intelligence Center SQL Injection Vulnerability (CVSS 6.5, Cisco Unified Intelligence Center)
- [CVE-2026-44256](https://cve.now/CVE-2026-44256.md): Wazuh: CRLF Log Injection via Unsanitized Basic-Auth Username (CVSS 5.3, wazuh)
- [CVE-2026-45798](https://cve.now/CVE-2026-45798.md): Wazuh: Pre-auth stack-buffer-overflow in compare\_wazuh\_versions reachable from wazuh-authd (TCP/1515) via crafted enrollment V: field (CVSS 7.5, wazuh)
- [CVE-2026-20314](https://cve.now/CVE-2026-20314.md): Cisco Packaged Contact Center Enterprise & Cisco Unified Contact Center Enterprise Server-Side Request Forgery Vulnerability (CVSS 5.0, Cisco Packaged Contact Center Enterprise · Cisco Unified Co…)
- [CVE-2026-20319](https://cve.now/CVE-2026-20319.md): Cisco Secure Workload Software Security Hardening Release August 2026 - Buffer Management Vulnerabilities (CVSS 7.5, Cisco Secure Workload)
- [CVE-2026-49441](https://cve.now/CVE-2026-49441.md): Wazuh : peer-controlled metadata key in process\_files\_from\_worker non-merged branch allows arbitrary file write under WAZUH\_PATH on Wazuh manager (CVSS 9.1, wazuh)
- [CVE-2026-20315](https://cve.now/CVE-2026-20315.md): Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Access Control Vulnerabilities (CVSS 10.0, Cisco Secure Workload)
- [CVE-2026-20317](https://cve.now/CVE-2026-20317.md): Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Authentication Vulnerabilities (CVSS 10.0, Cisco Secure Workload)
- [CVE-2026-20318](https://cve.now/CVE-2026-20318.md): Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Input Validation Vulnerabilities (CVSS 9.6, Cisco Secure Workload)
- [CVE-2026-20359](https://cve.now/CVE-2026-20359.md): Cisco Crosswork Security Hardening Release: August 2026 (CVSS 9.9, Cisco Crosswork Planning)
- [CVE-2026-20357](https://cve.now/CVE-2026-20357.md): Cisco Crosswork Security Hardening Release: August 2026 (CVSS 10.0, Cisco Crosswork Planning)
- [CVE-2026-20358](https://cve.now/CVE-2026-20358.md): Cisco Crosswork Security Hardening Release: August 2026 (CVSS 10.0, Cisco Crosswork Planning)
- [CVE-2026-41424](https://cve.now/CVE-2026-41424.md): Wazuh: Privilege Escalation via Admin-Protection Bypass in update-user API Endpoint (CVSS 8.2, wazuh)
- [CVE-2026-20302](https://cve.now/CVE-2026-20302.md): Cisco RoomOS Stack Overflow Vulnerability (CVSS 6.1, Cisco RoomOS Software)
- [CVE-2026-20232](https://cve.now/CVE-2026-20232.md): Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability (CVSS 5.4, Cisco Industrial Ethernet Switches)
- [CVE-2026-20231](https://cve.now/CVE-2026-20231.md): Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Neutralization of Special Elements Vulnerabilities (CVSS 9.9, Cisco Secure Workload)
- [CVE-2026-20030](https://cve.now/CVE-2026-20030.md): Cisco Crosswork Security Hardening Release: August 2026 (CVSS 10.0, Cisco Crosswork Planning)
- [CVE-2026-20177](https://cve.now/CVE-2026-20177.md): Cisco Industrial Ethernet 1000 Series Switches Denial of Service Vulnerability (CVSS 5.3, Cisco Industrial Ethernet Switches)
- [CVE-2026-44255](https://cve.now/CVE-2026-44255.md): Wazuh: Username Enumeration via Timing Side-Channel (CVSS 5.3, wazuh)
- [CVE-2026-48024](https://cve.now/CVE-2026-48024.md): Wazuh: merged-file header path traversal in cluster sync allows arbitrary file write under WAZUH\_PATH in Wazuh manager (CVSS 9.1, wazuh)
- [CVE-2026-48162](https://cve.now/CVE-2026-48162.md): Wazuh: cluster peer can read arbitrary master files and forge offline REST API administrator tokens via DAPI tmp\_file path injection in Wazuh manager (CVSS 9.1, wazuh)
- [CVE-2026-44901](https://cve.now/CVE-2026-44901.md): Wazuh Cluster DAPI Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 8.4, wazuh)
- [CVE-2026-44254](https://cve.now/CVE-2026-44254.md): Wazuh: Stack Out-of-Bounds Write in remoted Decompression Path (CVSS 5.3, wazuh)
- [CVE-2026-46343](https://cve.now/CVE-2026-46343.md): Wazuh: Arbitrary File Deletion via Cluster Protocol – Incomplete Path Validation in end\_receiving\_file() (CVSS 7.5, wazuh)
- [CVE-2026-44253](https://cve.now/CVE-2026-44253.md): Wazuh: Cluster Protocol Memory Exhaustion (DoS) via unbounded receive\_str allocation and div\_msg\_box accumulation (CVSS 4.9, wazuh)
- [CVE-2026-44252](https://cve.now/CVE-2026-44252.md): Wazuh Manager dapi RBAC Bypass Allows Privilege Escalation (CVSS 7.7, wazuh)
- [CVE-2026-64852](https://cve.now/CVE-2026-64852.md): Grav API Plugin: Missing authorization on API-key generate/revoke lets any admin.login user forge keys for any account (CVSS 8.7, getgrav grav-plugin-api)
- [CVE-2026-64850](https://cve.now/CVE-2026-64850.md): Grav: Remote code execution via unrestricted callable in Blueprint::dynamicData() (CVSS 8.7, getgrav grav · getgrav/grav)
- [CVE-2026-64851](https://cve.now/CVE-2026-64851.md): Grav Shortcode Core Plugin: Stored XSS in shortcode-core attribute handlers (CVSS 8.5, getgrav grav-plugin-shortcode-core)
- [CVE-2026-63408](https://cve.now/CVE-2026-63408.md): Grav API Plugin: JWT Access Token Accepted via \`?token=\` URL Query Parameter (CVSS 7.5, getgrav grav-plugin-api)
- [CVE-2026-18430](https://cve.now/CVE-2026-18430.md): HumHub 1.18.4 - Stored XSS in comment-deletion notifications through unescaped administrator reason (CVSS 7.2, HumHub)
- [CVE-2026-63407](https://cve.now/CVE-2026-63407.md): Grav API Plugin: CORS 'Access-Control-Allow-Origin: \*' on Authenticated API Responses (CVSS 8.2, getgrav grav-plugin-api)
- [CVE-2026-62671](https://cve.now/CVE-2026-62671.md): CSRF in grav-plugin-login: anonymous attacker rotates a logged-in user's 2FA (TOTP) secret (no nonce on task=login.regenerate2FASecret) (CVSS 5.4, getgrav grav-plugin-login)
- [CVE-2026-62673](https://cve.now/CVE-2026-62673.md): Grav: .htaccess file extension rules bypass via case variation on case-insensitive filesystems (CVSS 8.2, getgrav grav · getgrav/grav)
- [CVE-2026-62672](https://cve.now/CVE-2026-62672.md): Grav: Authenticated ReDoS via regex\_replace in Twig Sandbox (CVSS 6.0, getgrav grav · getgrav/grav)
- [CVE-2026-62667](https://cve.now/CVE-2026-62667.md): Grav API Plugin : API Key 'scopes' Never Enforced - Delegated Least-Privilege Keys Carry Full User ACL (CVSS 8.1, getgrav grav-plugin-api)
- [CVE-2026-62669](https://cve.now/CVE-2026-62669.md): Grav Login Plugin: 2FA Bypass via 'login.regenerate2FASecret' - Secret Rotation During Pending Challenge (CVSS 7.4, getgrav grav · getgrav grav-plugin-login +1)
- [CVE-2026-62666](https://cve.now/CVE-2026-62666.md): Grav API Plugin: non-super api.users.write manager -\> super-admin via createApiKey (incomplete fix of CVE-2026-59190); + 2FA strip of super (CVSS 8.8, getgrav grav-plugin-api)
- [CVE-2026-62668](https://cve.now/CVE-2026-62668.md): Grav API Plugin: Webhook SSRF via Unrestricted cURL Protocols (CVSS 9.4, getgrav grav · getgrav grav-plugin-api)
- [CVE-2026-62670](https://cve.now/CVE-2026-62670.md): Fail-open authorization in grav-plugin-flex-objects admin-next API: api.access user gets full CRUD on permission-less directories (requireFlexPermission missing else-deny) (CVSS 6.3, getgrav grav-plugin-flex-objects)
- [CVE-2026-19672](https://cve.now/CVE-2026-19672.md): tarfile extraction filter bypass allows creation of directories outside the destination (CVSS 6.3, Python Software Foundation CPython)
- [CVE-2026-61842](https://cve.now/CVE-2026-61842.md): Grav: Twig sandbox config exfiltration via grav.offsetGet + dump filter (CVE-2026-44738 bypass) (CVSS 6.5, getgrav grav · getgrav/grav)
- [CVE-2026-61690](https://cve.now/CVE-2026-61690.md): Grav: Decompression Bomb via ZipArchiver - Missing Extraction Limits (CVSS 6.5, getgrav grav · getgrav/grav)
- [CVE-2026-61607](https://cve.now/CVE-2026-61607.md): Grav API Plugin: Stored XSS via SVG Upload - API Media Pipeline Bypasses Sanitizer (CVSS 4.6, getgrav grav-plugin-api)
- [CVE-2026-53654](https://cve.now/CVE-2026-53654.md): Grav: Unauthenticated open redirect via login twofa\_cancel \_redirect (CVSS 5.3, getgrav grav)
- [CVE-2026-16819](https://cve.now/CVE-2026-16819.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.7, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-53477](https://cve.now/CVE-2026-53477.md): Dell Command Update (DCU), versions prior to 5.7.1, contain a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. (CVSS 7.8, Dell Command Update)
- [CVE-2026-58564](https://cve.now/CVE-2026-58564.md): Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Default Permissions vulnerability. (CVSS 7.8, Dell Command Update)
- [CVE-2026-16818](https://cve.now/CVE-2026-16818.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.5, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16817](https://cve.now/CVE-2026-16817.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.5, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-67268](https://cve.now/CVE-2026-67268.md): Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Restriction of XML External Entity Reference vulnerability. (CVSS 6.5, Dell Command Update)
- [CVE-2026-16816](https://cve.now/CVE-2026-16816.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 9.9, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16814](https://cve.now/CVE-2026-16814.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 8.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16706](https://cve.now/CVE-2026-16706.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.5, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16703](https://cve.now/CVE-2026-16703.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-58565](https://cve.now/CVE-2026-58565.md): Dell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability. (CVSS 8.8, Dell Command Update)
- [CVE-2026-16690](https://cve.now/CVE-2026-16690.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.5, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-67266](https://cve.now/CVE-2026-67266.md): Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Authorization vulnerability. (CVSS 5.5, Dell Command Update)
- [CVE-2026-52889](https://cve.now/CVE-2026-52889.md): Formie: Server-Side Template Injection in Formie Hidden field defaults (CVSS 9.8, verbb formie · verbb/formie)
- [CVE-2026-16686](https://cve.now/CVE-2026-16686.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 8.2, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-14970](https://cve.now/CVE-2026-14970.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.5, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-76614](https://cve.now/CVE-2026-76614.md): OpenEMR \< 8.3.0 Path Traversal Information Disclosure via EDI Archive Restore (CVSS 5.3, openemr)
- [CVE-2026-16656](https://cve.now/CVE-2026-16656.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 9.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-52834](https://cve.now/CVE-2026-52834.md): jxl-oxide: Out-of-bounds writes due to integer overflow in jxl-grid on 32-bit platforms (CVSS 7.3, tirr-c jxl-oxide · tirr-c jxl-grid +1)
- [CVE-2026-58562](https://cve.now/CVE-2026-58562.md): Dell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability. (CVSS 7.3, Dell Command Update)
- [CVE-2026-67267](https://cve.now/CVE-2026-67267.md): Dell Command Update (DCU), versions prior to 5.7.1, contain an Exposure of Sensitive System Information to an Unauthorized Control Sphere vu (CVSS 5.5, Dell Command Update)
- [CVE-2026-40509](https://cve.now/CVE-2026-40509.md): OpenEMR \< 8.3.0 CSRF via DICOM Viewer web\_path Parameter (CVSS 5.3, openemr)
- [CVE-2026-56797](https://cve.now/CVE-2026-56797.md): Dell Command Update (DCU), versions prior to 5.7.1, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. (CVSS 7.3, Dell Command Update)
- [CVE-2026-40508](https://cve.now/CVE-2026-40508.md): OpenEMR \< 8.3.0 Stored XSS via Patient Portal Template Import Handler (CVSS 5.1, openemr)
- [CVE-2026-49816](https://cve.now/CVE-2026-49816.md): Dell Command Update (DCU), versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability. (CVSS 7.8, Dell Command Update)
- [CVE-2026-52792](https://cve.now/CVE-2026-52792.md): Algernon: Server-side script source disclosure on Windows via NTFS filename (CVSS 8.7, xyproto algernon · github.com/xyproto/algernon)
- [CVE-2026-49289](https://cve.now/CVE-2026-49289.md): SimpleSAMLphp SAML2: Possible DoS via XPath Transform (CVSS 7.5, simplesamlphp saml2 · simplesamlphp/saml2 +1)
- [CVE-2026-40507](https://cve.now/CVE-2026-40507.md): OpenEMR \< 8.3.0 Reflected XSS via templateHtml Parameter in Patient Portal (CVSS 5.1, openemr)
- [CVE-2026-49817](https://cve.now/CVE-2026-49817.md): Dell Command Update (DCU), versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability. (CVSS 7.8, Dell Command Update)
- [CVE-2026-49283](https://cve.now/CVE-2026-49283.md): SimpleSAMLphp HTTP-Artifact TLS validator confusion allows cross-IdP authentication bypass (CVSS 8.7, simplesamlphp saml2 · simplesamlphp/saml2 +1)
- [CVE-2026-75952](https://cve.now/CVE-2026-75952.md): Joomla Extension - cmsjunkie.com - Cross-site request forgery in J-BusinessDirectory \< 6.2.3 (CVSS 4.6, cmsjunkie.com J-BusinessDirectory extension for Joomla)
- [CVE-2026-18756](https://cve.now/CVE-2026-18756.md): HumHub Community Edition 1.18.4-pl1 - Reflected XSS in Space membership request button rendering (CVSS 7.2, HumHub)
- [CVE-2026-56796](https://cve.now/CVE-2026-56796.md): Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. (CVSS 6.6, Dell Command Update)
- [CVE-2026-75953](https://cve.now/CVE-2026-75953.md): Joomla Extension - cmsjunkie.com - Open mail relay in J-BusinessDirectory \< 6.2.3 (CVSS 7.5, cmsjunkie.com J-BusinessDirectory extension for Joomla)
- [CVE-2026-53451](https://cve.now/CVE-2026-53451.md): Ground Station: Unauthenticated arbitrary file write (path traversal) in save-waterfall-snapshot leads to remote code execution (CVSS 9.8, sgoudelis ground-station)
- [CVE-2026-75955](https://cve.now/CVE-2026-75955.md): Joomla Extension - cmsjunkie.com - Reflected XSS / XML injection in J-BusinessDirectory \< 6.2.3 (CVSS 5.1, cmsjunkie.com J-BusinessDirectory extension for Joomla)
- [CVE-2026-53452](https://cve.now/CVE-2026-53452.md): Ground Station: Unauthenticated out-of-containment file read via \`sigmfplayback\` \`recordingPath\` (CVSS 5.3, sgoudelis ground-station)
- [CVE-2026-48711](https://cve.now/CVE-2026-48711.md): SSHFS: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') (CVSS 7.0, libfuse sshfs)
- [CVE-2026-47187](https://cve.now/CVE-2026-47187.md): SSHFS Symlink Escape: Rogue SFTP Server → Local File Read/Write (CVSS 9.3, libfuse sshfs)
- [CVE-2026-75951](https://cve.now/CVE-2026-75951.md): Joomla Extension - cmsjunkie.com - Insecure Direct Object Reference (multiple frontend/API actions) in J-BusinessDirectory \< 6.2.3 (CVSS 6.9, cmsjunkie.com J-BusinessDirectory extension for Joomla)
- [CVE-2026-75956](https://cve.now/CVE-2026-75956.md): Joomla Extension - cmsjunkie.com - DOS vector in pagination parameter handling in J-BusinessDirectory \< 6.2.3 (CVSS 8.7, cmsjunkie.com J-BusinessDirectory extension for Joomla)
- [CVE-2026-75954](https://cve.now/CVE-2026-75954.md): Joomla Extension - cmsjunkie.com - SQL injection in trips search in J-BusinessDirectory \< 6.2.3 (CVSS 9.3, cmsjunkie.com J-BusinessDirectory extension for Joomla)
- [CVE-2026-75949](https://cve.now/CVE-2026-75949.md): Joomla Extension - cmsjunkie.com - Arbitrary file upload / deletion (path traversal) in J-BusinessDirectory \< 6.2.3 (CVSS 10.0, cmsjunkie.com J-BusinessDirectory extension for Joomla)
- [CVE-2026-75950](https://cve.now/CVE-2026-75950.md): Joomla Extension - cmsjunkie.com - Unauthenticated listing ownership takeover in J-BusinessDirectory \< 6.2.3 (CVSS 6.9, cmsjunkie.com J-BusinessDirectory extension for Joomla)
- [CVE-2026-23501](https://cve.now/CVE-2026-23501.md): Dell RecoverPoint for VMs, versions 6.0.3 and 6.0.3.1, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Co (CVSS 7.2, Dell RecoverPoint for Virtual Machines)
- [CVE-2026-45272](https://cve.now/CVE-2026-45272.md): MyBooks: Remote Code Execution via SOCIAL\_AUTH Key Name Injection in Python Config File (CVSS 9.4, PoxenStudio talebook)
- [CVE-2026-45274](https://cve.now/CVE-2026-45274.md): MyBooks: Unauthenticated Registration Bypass via Missing Server-Side ALLOW\_REGISTER Enforcement (CVSS 6.9, PoxenStudio talebook)
- [CVE-2026-45273](https://cve.now/CVE-2026-45273.md): MyBooks: Privilege Escalation via Missing Authorization on Admin Settings Endpoint (CVSS 8.7, PoxenStudio talebook)
- [CVE-2026-15961](https://cve.now/CVE-2026-15961.md): Power System Information Disclosure (CVSS 5.2, IBM PowerVM Hypervisor)
- [CVE-2026-15078](https://cve.now/CVE-2026-15078.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 8.1, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-44829](https://cve.now/CVE-2026-44829.md): Gotenberg: Path traversal in zip entry name via Windows-style separators in upload filename (CVSS 8.8, gotenberg · github.com/gotenberg/gotenberg/v7 +1)
- [CVE-2026-15068](https://cve.now/CVE-2026-15068.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 9.9, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-45742](https://cve.now/CVE-2026-45742.md): Gotenberg: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') (CVSS 7.5, gotenberg · github.com/gotenberg/gotenberg/v7 +1)
- [CVE-2026-15065](https://cve.now/CVE-2026-15065.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 9.1, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-15061](https://cve.now/CVE-2026-15061.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 8.2, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-45741](https://cve.now/CVE-2026-45741.md): Gotenberg: SSRF deny-list bypass in IsPublicIP via IPv6 6to4 / NAT64 / site-local prefixes (CVSS 7.5, gotenberg · github.com/gotenberg/gotenberg/v8 +1)
- [CVE-2026-49253](https://cve.now/CVE-2026-49253.md): electerm: Path Traversal in Zmodem and Trzsz Download Filename Handling (CVSS 7.1, electerm)
- [CVE-2026-49255](https://cve.now/CVE-2026-49255.md): electerm: Command Injection in File System Operations (rmrf, mv, cp) (CVSS 8.8, electerm)
- [CVE-2026-32802](https://cve.now/CVE-2026-32802.md): Dell PowerPath, version 7.2 through to 8.0 SP1, contains an Improper Privilege Management vulnerability. (CVSS 5.3, Dell PowerPath)
- [CVE-2026-71961](https://cve.now/CVE-2026-71961.md): Cudy WR3000 2.0 OS Command Injection via Mesh MQTT Command Handler (CVSS 8.7, Shenzhen Cudy Technology Co. WR3000)
- [CVE-2026-71960](https://cve.now/CVE-2026-71960.md): Cudy WR3000 2.0 Hard-coded JWT Secret Authentication Bypass via MQTT (CVSS 9.3, Shenzhen Cudy Technology Co. WR3000 · Shenzhen Cudy Technol…)
- [CVE-2026-76203](https://cve.now/CVE-2026-76203.md): CSS sanitizer bypass in Pentestify report themes allows forced outbound requests (CVSS 5.1, maalfer Pentestify)
- [CVE-2026-18526](https://cve.now/CVE-2026-18526.md): HumHub 1.18.4 / 1.18.4-pl1 – Stored Cross-Site Scripting in oEmbed confirmation (CVSS 7.4, HumHub)
- [CVE-2026-50149](https://cve.now/CVE-2026-50149.md): Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled (CVSS 6.5, projectcontour contour · github.com/projectcontour/contour)
- [CVE-2026-71176](https://cve.now/CVE-2026-71176.md): Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL In (CVSS 8.8, Dell OpenManage Enterprise)
- [CVE-2026-54793](https://cve.now/CVE-2026-54793.md): Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Sc (CVSS 4.6, Dell OpenManage Enterprise)
- [CVE-2026-43961](https://cve.now/CVE-2026-43961.md): Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution (CVSS 7.8, vim · Red Hat Hardened Images +2)
- [CVE-2026-54794](https://cve.now/CVE-2026-54794.md): Dell OpenManage Enterprise, versions prior to 4.7.0, contains a Server-Side Request Forgery (SSRF) vulnerability. (CVSS 7.2, Dell OpenManage Enterprise)
- [CVE-2026-76245](https://cve.now/CVE-2026-76245.md): stigmem Federation Peer Token Timestamp Validation Bypass (CVSS 7.1, eidetic-labs stigmem · stigmem-node)
- [CVE-2026-76244](https://cve.now/CVE-2026-76244.md): stigmem-node Insecure Federation Transport Configuration (CVSS 9.1, eidetic-labs stigmem · stigmem-node)
- [CVE-2026-76243](https://cve.now/CVE-2026-76243.md): stigmem before 0.9.0a2 Authentication Bypass via Disabled Auth (CVSS 9.2, eidetic-labs stigmem · stigmem-node)
- [CVE-2026-76242](https://cve.now/CVE-2026-76242.md): stigmem Federation Peer Registration Authentication Bypass (CVSS 9.1, eidetic-labs stigmem · stigmem-node)
- [CVE-2026-76241](https://cve.now/CVE-2026-76241.md): stigmem Plugin Signature Enforcement Bypass via Configuration (CVSS 7.3, eidetic-labs stigmem · stigmem-node)
- [CVE-2026-76240](https://cve.now/CVE-2026-76240.md): stigmem Postgres SQL Injection via Schema Identifier (CVSS 7.5, eidetic-labs stigmem · stigmem-node)
- [CVE-2026-76239](https://cve.now/CVE-2026-76239.md): Stigmem before 0.9.0a11 SSRF via unvalidated webhook delivery\_address (CVSS 5.3, eidetic-labs stigmem-node · stigmem-node)
- [CVE-2026-76238](https://cve.now/CVE-2026-76238.md): stigmem before 0.9.0a12 Cross-Tenant BOLA via decay sweep (CVSS 7.2, eidetic-labs stigmem-node · stigmem-node)
- [CVE-2026-76237](https://cve.now/CVE-2026-76237.md): stigmem before 0.9.0a12 Cross-Tenant BOLA via quarantine (CVSS 8.6, eidetic-labs stigmem-node · stigmem-node)
- [CVE-2026-76236](https://cve.now/CVE-2026-76236.md): stigmem before 0.9.0a12 Cross-Tenant BOLA via Tombstones (CVSS 7.2, eidetic-labs stigmem-node · stigmem-node)
- [CVE-2026-76234](https://cve.now/CVE-2026-76234.md): libcrux before 0.0.6 Cryptographic Implementation Bug Fixes (CVSS 8.7, celabshq libcrux-ecdh · celabshq libcrux-ed25519 +4)
- [CVE-2026-76233](https://cve.now/CVE-2026-76233.md): Renovate 39.53.0 before 40.33.0 Command Injection via gleam manager (CVSS 8.4, renovatebot renovate · renovate)
- [CVE-2026-76232](https://cve.now/CVE-2026-76232.md): Renovate 31.51.0 before 40.33.0 Command Injection via helmv3 (CVSS 8.4, renovatebot renovate · renovate)
- [CVE-2026-76231](https://cve.now/CVE-2026-76231.md): Renovate 32.135.0 before 40.33.0 Command Injection via hermit (CVSS 8.4, renovatebot renovate · renovate)
- [CVE-2026-76230](https://cve.now/CVE-2026-76230.md): Renovate 35.63.0 before 40.33.0 Command Injection via npm (CVSS 8.4, renovatebot renovate · renovate)
- [CVE-2026-76229](https://cve.now/CVE-2026-76229.md): Renovate 39.218.0 before 40.33.0 Arbitrary Command Injection via kustomize (CVSS 8.4, renovatebot renovate · renovate)
- [CVE-2026-76228](https://cve.now/CVE-2026-76228.md): Renovate before 42.68.5 Remote Code Execution via Gradle Wrapper (CVSS 8.4, renovatebot renovate · mend renovate-ce +3)
- [CVE-2026-76227](https://cve.now/CVE-2026-76227.md): Renovate 42.68.1 before 42.96.3 and 43.0.0 before 43.4.4 Environment Variable Exposure (CVSS 6.8, renovatebot renovate · mend renovate-ce +3)
- [CVE-2026-76226](https://cve.now/CVE-2026-76226.md): Renovate 43.65.0 before 43.102.11 Remote Code Execution via lockFileMaintenance (CVSS 6.8, renovatebot renovate · renovate)
- [CVE-2026-76225](https://cve.now/CVE-2026-76225.md): ArcadeDB before 26.8.1 Server-Side Request Forgery via LOAD CSV (CVSS 8.3, ArcadeData arcadedb)
- [CVE-2026-76224](https://cve.now/CVE-2026-76224.md): ArcadeDB before 26.8.1 Remote Code Execution via Groovy Fallback (CVSS 8.7, ArcadeData arcadedb)
- [CVE-2026-76223](https://cve.now/CVE-2026-76223.md): ArcadeDB before 26.8.1 Permission Bypass via DEFINE FUNCTION (CVSS 7.1, ArcadeData arcadedb)
- [CVE-2026-76222](https://cve.now/CVE-2026-76222.md): GitPython before 3.1.58 Path Traversal via .gitmodules Submodule Name (CVSS 8.4, gitpython-developers GitPython · gitpython)
- [CVE-2026-76221](https://cve.now/CVE-2026-76221.md): GitPython before 3.1.58 Config Injection via option-name (CVSS 8.7, gitpython-developers GitPython · gitpython)
- [CVE-2026-76220](https://cve.now/CVE-2026-76220.md): GitPython before 3.1.58 Command Execution via split\_single\_char\_options (CVSS 8.7, gitpython-developers GitPython · gitpython)
- [CVE-2026-76219](https://cve.now/CVE-2026-76219.md): GitPython before 3.1.58 Arbitrary File Overwrite via read-tree (CVSS 7.2, gitpython-developers GitPython · gitpython)
- [CVE-2026-76218](https://cve.now/CVE-2026-76218.md): GitPython before 3.1.58 Remote Code Execution via Repo.init (CVSS 7.7, gitpython-developers GitPython · gitpython)
- [CVE-2026-76217](https://cve.now/CVE-2026-76217.md): GitPython before 3.1.58 Arbitrary File Read via pathspec-from-file (CVSS 7.1, gitpython-developers GitPython · gitpython)
- [CVE-2026-76216](https://cve.now/CVE-2026-76216.md): Vikunja through 2.4.0 Principal-Type Confusion via LinkSharing (CVSS 7.7, go-vikunja vikunja · code.vikunja.io/api)
- [CVE-2026-76215](https://cve.now/CVE-2026-76215.md): phpMyFAQ before 4.1.7 Missing Authorization via child resources (CVSS 6.9, thorsten phpMyFAQ)
- [CVE-2026-76214](https://cve.now/CVE-2026-76214.md): phpMyFAQ before 4.1.7 WebAuthn Replay Attack via Challenge (CVSS 9.1, thorsten phpMyFAQ)
- [CVE-2026-76213](https://cve.now/CVE-2026-76213.md): phpMyFAQ before 4.1.7 2FA Brute-Force via Session-Scoped Throttle (CVSS 9.1, thorsten phpMyFAQ)
- [CVE-2026-76212](https://cve.now/CVE-2026-76212.md): phpMyFAQ before 4.1.7 LIKE Wildcard Injection via PostgreSQL (CVSS 6.9, thorsten phpMyFAQ)
- [CVE-2026-76211](https://cve.now/CVE-2026-76211.md): phpMyFAQ before 4.1.7 Information Disclosure via Admin API (CVSS 5.3, thorsten phpMyFAQ)
- [CVE-2026-76210](https://cve.now/CVE-2026-76210.md): phpMyFAQ before v4.1.6 Local File Disclosure via PDF Export (CVSS 7.1, thorsten phpMyFAQ)
- [CVE-2026-76209](https://cve.now/CVE-2026-76209.md): phpMyFAQ before v4.1.6 Registration Bypass via API (CVSS 5.3, thorsten phpMyFAQ)
- [CVE-2026-76208](https://cve.now/CVE-2026-76208.md): phpMyFAQ 3.1.0 through 4.1.6 Authentication Bypass via LDAP (CVSS 8.8, thorsten phpMyFAQ)
- [CVE-2026-76207](https://cve.now/CVE-2026-76207.md): phpMyFAQ before 4.1.7 2FA Bypass via Remember-Me Cookie (CVSS 8.6, thorsten phpMyFAQ)
- [CVE-2026-76206](https://cve.now/CVE-2026-76206.md): phpMyFAQ before 4.1.7 Information Disclosure via PDF Export (CVSS 6.9, thorsten phpMyFAQ)
- [CVE-2026-76205](https://cve.now/CVE-2026-76205.md): phpMyFAQ before 4.1.7 SQL Injection via Glossary (CVSS 8.6, thorsten phpMyFAQ)
- [CVE-2026-75920](https://cve.now/CVE-2026-75920.md): phpMyFAQ before 4.1.6 Information Disclosure via Backup ZIP (CVSS 6.0, thorsten phpMyFAQ)
- [CVE-2026-75919](https://cve.now/CVE-2026-75919.md): phpMyFAQ before 4.1.7 Authentication Bypass via Setup API (CVSS 6.9, thorsten phpMyFAQ)
- [CVE-2026-75918](https://cve.now/CVE-2026-75918.md): phpMyFAQ before 4.1.7 Authentication Bypass via Tracking File (CVSS 8.7, thorsten phpMyFAQ)
- [CVE-2026-75917](https://cve.now/CVE-2026-75917.md): SiYuan before v3.7.4 XSS-to-RCE via pathName.ts (CVSS 9.3, siyuan-note siyuan)
- [CVE-2026-75916](https://cve.now/CVE-2026-75916.md): SiYuan XSS-to-RCE via unescaped block metadata in hint popup (CVSS 9.3, siyuan-note siyuan)
- [CVE-2024-58376](https://cve.now/CVE-2024-58376.md): Renovate 37.158.0 before 37.199.0 Command Injection via helmv3 (CVSS 8.4, renovatebot renovate · renovate)
- [CVE-2020-37267](https://cve.now/CVE-2020-37267.md): Renovate 19.180.0 before 23.25.1 Token Leakage via Logs (CVSS 8.7, renovatebot renovate · renovate)
- [CVE-2019-25766](https://cve.now/CVE-2019-25766.md): Renovate before 19.38.7 Credential Exposure via Go Modules (CVSS 8.7, renovatebot renovate · renovate)
- [CVE-2026-70424](https://cve.now/CVE-2026-70424.md): Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversa (CVSS 6.5, Dell OpenManage Enterprise)
- [CVE-2026-70422](https://cve.now/CVE-2026-70422.md): Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL In (CVSS 8.1, Dell OpenManage Enterprise)
- [CVE-2026-16019](https://cve.now/CVE-2026-16019.md): SQL Injection in Faydam Innovation's FAYDAM Datalogger (CVSS 9.8, Faydam Innovation FAYDAM Datalogger)
- [CVE-2026-70423](https://cve.now/CVE-2026-70423.md): Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Restriction of XML External Entity Reference vulnerability. (CVSS 6.5, Dell OpenManage Enterprise)
- [CVE-2026-56088](https://cve.now/CVE-2026-56088.md): Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL In (CVSS 7.1, Dell OpenManage Enterprise)
- [CVE-2026-54795](https://cve.now/CVE-2026-54795.md): Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Comm (CVSS 8.8, Dell OpenManage Enterprise)
- [CVE-2026-74803](https://cve.now/CVE-2026-74803.md): Joomla Extension - yootheme.com - Unauthenticated arbitrary file upload in Zoo \< 4.1.64 (CVSS 10.0, yootheme.com Zoo extension for Joomla)
- [CVE-2026-75114](https://cve.now/CVE-2026-75114.md): Joomla Extension - yootheme.com - Open redirect in CommentController::twitterAuthenticate() in Zoo \< 4.1.64 (CVSS 5.1, yootheme.com Zoo extension for Joomla)
- [CVE-2026-70421](https://cve.now/CVE-2026-70421.md): Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Privilege Management vulnerability. (CVSS 7.2, Dell OpenManage Enterprise)
- [CVE-2026-75148](https://cve.now/CVE-2026-75148.md): cgltf 1.15 Integer Overflow via cgltf\_validate() Accessor Bounds Check (CVSS 6.9, jkuhlmann cgltf)
- [CVE-2026-74804](https://cve.now/CVE-2026-74804.md): Joomla Extension - yootheme.com - Unauthenticated SQL injection in Zoo \< 4.1.64 (CVSS 9.3, yootheme.com Zoo extension for Joomla)
- [CVE-2026-54796](https://cve.now/CVE-2026-54796.md): Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Comm (CVSS 7.2, Dell OpenManage Enterprise)
- [CVE-2026-65612](https://cve.now/CVE-2026-65612.md): Shell Command Injection in nnn (CVSS 5.1, nnn)
- [CVE-2026-65611](https://cve.now/CVE-2026-65611.md): Shell Command Injection in nnn (CVSS 5.1, nnn)
- [CVE-2026-65610](https://cve.now/CVE-2026-65610.md): Numeric Truncation Error in nnn (CVSS 2.4, nnn)
- [CVE-2026-65609](https://cve.now/CVE-2026-65609.md): Out-of-bounds write in nnn (CVSS 2.4, nnn)
- [CVE-2026-67364](https://cve.now/CVE-2026-67364.md): Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms \< 2.4.3.2 (CVSS 10.0, balbooa.com Balbooa Forms extension for Joomla)
- [CVE-2026-67363](https://cve.now/CVE-2026-67363.md): Joomla Extension - balbooa.com - Pre-auth Payment Amount Tampering in Balbooa Forms \< 2.4.3.2 (CVSS 7.7, balbooa.com Balbooa Forms extension for Joomla)
- [CVE-2026-19490](https://cve.now/CVE-2026-19490.md): NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490 (CVSS 9.3, KEV, NetScaler ADC · NetScaler Gateway)
- [CVE-2026-19489](https://cve.now/CVE-2026-19489.md): Vulnerability in NetScaler ADC and NetScaler Gateway. (CVSS 8.8, NetScaler ADC · NetScaler Gateway)
- [CVE-2026-76235](https://cve.now/CVE-2026-76235.md): Cockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via cockpitlang cookie in send\_login\_html (CVSS 7.5, Red Hat Enterprise Linux · Red Hat OpenShift Dev Spaces)
- [CVE-2026-73391](https://cve.now/CVE-2026-73391.md): WordPress Total Donations plugin \<= 2.0.5 - SQL Injection vulnerability (CVSS 9.3, KlbTheme Total Donations)
- [CVE-2026-73390](https://cve.now/CVE-2026-73390.md): WordPress Total Donations plugin \<= 2.0.5 - Privilege Escalation vulnerability (CVSS 9.8, KlbTheme Total Donations)
- [CVE-2026-73389](https://cve.now/CVE-2026-73389.md): WordPress Kalles Addons plugin \<= 1.0.6 - PHP Object Injection vulnerability (CVSS 9.8, The4 Kalles Addons)
- [CVE-2026-73388](https://cve.now/CVE-2026-73388.md): WordPress Nikstore Core plugin \<= 1.5 - SQL Injection vulnerability (CVSS 9.3, TeconceTheme Nikstore Core)
- [CVE-2026-73387](https://cve.now/CVE-2026-73387.md): WordPress Resido theme \<= 1.5 - Local File Inclusion vulnerability (CVSS 8.1, SmartDataSoft Resido)
- [CVE-2026-73386](https://cve.now/CVE-2026-73386.md): WordPress Track Geolocation Of Users Using Contact Form 7 plugin \<= 3.0.2 - Sensitive Data Exposure vulnerability (CVSS 7.5, ZealousWeb Track Geolocation Of Users Using Contact Form)
- [CVE-2026-73385](https://cve.now/CVE-2026-73385.md): WordPress Outranking plugin Options plugin \<= 1.1.3 - Broken Access Control vulnerability (CVSS 7.5, Outanking Team Outranking Plugin Options)
- [CVE-2026-73384](https://cve.now/CVE-2026-73384.md): WordPress Pay with Contact Form 7 plugin \<= 1.0.4 - Sensitive Data Exposure vulnerability (CVSS 7.5, cmsMinds Pay with Contact Form)
- [CVE-2026-73364](https://cve.now/CVE-2026-73364.md): WordPress Flexible Subscriptions plugin \<= 1.8.1 - PHP Object Injection vulnerability (CVSS 9.8, wpdesk Flexible Subscriptions)
- [CVE-2026-73363](https://cve.now/CVE-2026-73363.md): WordPress Taxi Booking Manager for WooCommerce plugin \< 2.0.8 - Broken Access Control vulnerability (CVSS 6.5, magepeopleteam Taxi Booking Manager for WooCommerce)
- [CVE-2026-73354](https://cve.now/CVE-2026-73354.md): WordPress SimplyRETS Real Estate IDX plugin \<= 3.2.8 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, ReichertBrothers SimplyRETS Real Estate IDX)
- [CVE-2026-73347](https://cve.now/CVE-2026-73347.md): WordPress TrueBooker plugin \<= 1.2.6 - Privilege Escalation vulnerability (CVSS 9.8, ThemetechMount TrueBooker)
- [CVE-2026-73185](https://cve.now/CVE-2026-73185.md): WordPress NGG Smart Image Search plugin \< 4.0.0 - SQL Injection vulnerability (CVSS 9.3, wpo-HR NGG Smart Image Search)
- [CVE-2026-73184](https://cve.now/CVE-2026-73184.md): WordPress Global Gallery plugin \<= 11.1.2 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, LCweb Global Gallery)
- [CVE-2026-73183](https://cve.now/CVE-2026-73183.md): WordPress Maps Marker Pro plugin \<= 4.32 - SQL Injection vulnerability (CVSS 9.3, Get Maps Marker Pro Maps Marker Pro)
- [CVE-2026-73182](https://cve.now/CVE-2026-73182.md): WordPress BBQ Pro plugin \<= 3.9 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Jeff Starr BBQ Pro)
- [CVE-2026-66668](https://cve.now/CVE-2026-66668.md): WordPress Community by PeepSo plugin \<= 9.0.5.2 - SQL Injection vulnerability (CVSS 8.5, Community by PeepSo)
- [CVE-2026-66613](https://cve.now/CVE-2026-66613.md): WordPress JetEngine plugin \<= 3.8.14 - Remote Code Execution (RCE) vulnerability (CVSS 9.8, Crocoblock. Jetimpex JetEngine)
- [CVE-2026-66596](https://cve.now/CVE-2026-66596.md): WordPress Newsletter plugin \<= 9.3.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Stefano Lissa Newsletter)
- [CVE-2026-61986](https://cve.now/CVE-2026-61986.md): WordPress Contest Gallery plugin \<= 30.0.5 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Wasiliy Strecker Contest Gallery)
- [CVE-2026-32552](https://cve.now/CVE-2026-32552.md): WordPress YITH WooCommerce Membership Premium plugin \<= 2.33.0 - SQL Injection vulnerability (CVSS 8.5, YITH WooCommerce Membership Premium)
- [CVE-2026-73394](https://cve.now/CVE-2026-73394.md): WordPress Stitch Express plugin \<= 1.9.0 - Broken Access Control vulnerability (CVSS 7.5, Stitchexpress Stitch Express)
- [CVE-2026-18372](https://cve.now/CVE-2026-18372.md): CSS injection in M-Files Web (CVSS 4.8, M-Files Web)
- [CVE-2026-18371](https://cve.now/CVE-2026-18371.md): HTML injection in M-Files Web (CVSS 5.1, M-Files Web)
- [CVE-2026-16440](https://cve.now/CVE-2026-16440.md): In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotations causes a segmentation fault. (CVSS 5.7, Eclipse Foundation Eclipse OpenJ9)
- [CVE-2026-76166](https://cve.now/CVE-2026-76166.md): Modcluster-core: mod\_cluster advertise listener: unauthenticated dos via crafted multicast datagram (CVSS 4.3, Red Hat JBoss Enterprise Application Platform · Red Hat… +1)
- [CVE-2026-76164](https://cve.now/CVE-2026-76164.md): Authenticated Server-Side Request Forgery in AIL Framework Crawler Allows Access to Internal Network Resources (CVSS 7.1, ail-project ail-framework)
- [CVE-2026-58088](https://cve.now/CVE-2026-58088.md): Race condition in ELF core dump segment counting (CVSS 7.4, FreeBSD)
- [CVE-2026-58087](https://cve.now/CVE-2026-58087.md): Heap out-of-bounds access in semctl(2) (CVSS 7.8, FreeBSD)
- [CVE-2026-75900](https://cve.now/CVE-2026-75900.md): Swtpm: swtpm: out-of-bounds read in swtpm\_nvram\_checkheader due to sizeof(pointer) vs sizeof(struct) mismatch (CVSS 6.1, Red Hat Enterprise Linux)
- [CVE-2026-58086](https://cve.now/CVE-2026-58086.md): ktrace(2) privilege incorrectly validated in jails (CVSS 8.1, FreeBSD)
- [CVE-2026-58085](https://cve.now/CVE-2026-58085.md): Missing MAC validation in wg(4) packet decryption (CVSS 7.5, FreeBSD)
- [CVE-2026-58084](https://cve.now/CVE-2026-58084.md): Kernel stack disclosure via timer\_settime(2) (CVSS 5.5, FreeBSD)
- [CVE-2026-58083](https://cve.now/CVE-2026-58083.md): Use-after-free in kqueue copy-on-fork (CVSS 8.4, FreeBSD)
- [CVE-2026-75589](https://cve.now/CVE-2026-75589.md): Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant-time comparison in verify (CVSS 7.5, Net-OAuth)
- [CVE-2026-58082](https://cve.now/CVE-2026-58082.md): Stack based buffer overflow in iconv(3) (CVSS 9.8, FreeBSD)
- [CVE-2026-58081](https://cve.now/CVE-2026-58081.md): Heap based buffer overflow in iconv(3) (CVSS 9.8, FreeBSD)
- [CVE-2026-72889](https://cve.now/CVE-2026-72889.md): Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verify (CVSS 9.8, Net-OAuth)
- [CVE-2026-49425](https://cve.now/CVE-2026-49425.md): Kernel stack disclosure in 32-bit compatibility support (CVSS 5.5, FreeBSD)
- [CVE-2026-49424](https://cve.now/CVE-2026-49424.md): Kernel stack disclosure in Linux compatibility layer (CVSS 5.5, FreeBSD)
- [CVE-2026-49423](https://cve.now/CVE-2026-49423.md): Remote DOS via uninitialized memory access in KTLS receive (CVSS 3.3, FreeBSD)
- [CVE-2026-75981](https://cve.now/CVE-2026-75981.md): TranslatePress – Translate Multilingual sites with AI Translation \<= 3.2.5 - Unauthenticated Stored Cross-Site Scripting (CVSS 7.2, cozmoslabs TranslatePress – Translate Multilingual sites wi…)
- [CVE-2026-15446](https://cve.now/CVE-2026-15446.md): EWWW Image Optimizer \<= 8.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-script' Lazy Load Attribute in Post Content (CVSS 6.4, nosilver4u EWWW Image Optimizer)
- [CVE-2026-15780](https://cve.now/CVE-2026-15780.md): WP Statistics \<= 14.16.8 - Unauthenticated Stored Cross-Site Scripting via 'utm\_campaign' Parameter (CVSS 7.2, veronalabs WP Statistics – Simple, privacy-friendly Google…)
- [CVE-2026-49426](https://cve.now/CVE-2026-49426.md): Incorrect audit records for ptrace(2) syscall requests (CVSS 3.3, FreeBSD)
- [CVE-2026-8810](https://cve.now/CVE-2026-8810.md): HDD Password leakage vulnerability (CVSS 6.9, Insyde Software InsydeH2O, InsydeH2O ARM)
- [CVE-2026-19842](https://cve.now/CVE-2026-19842.md): SAML Single Sign On 4.8.85 - 5.4.6 - Unauthenticated Administrator Account Takeover via SAML Trust Anchor Overwrite (CVSS 8.8, SAML Single Sign On)
- [CVE-2026-19782](https://cve.now/CVE-2026-19782.md): WPS Bidouille \< 1.33.5 - Subscriber+ User Email Disclosure via wps\_get\_users (CVSS 5.4, WPS Bidouille)
- [CVE-2026-19709](https://cve.now/CVE-2026-19709.md): Membership For WooCommerce \< 3.1.2 - Unauthenticated Member Data Disclosure via REST Consumer Secret Bypass (CVSS 5.3, Membership For WooCommerce)
- [CVE-2026-19417](https://cve.now/CVE-2026-19417.md): KiviCare \< 4.5.4 - Patient+ Arbitrary Media Attachment Read via IDOR (CVSS 6.5, KiviCare)
- [CVE-2026-19416](https://cve.now/CVE-2026-19416.md): KiviCare \< 4.5.4 - Patient+ Cross-Patient Appointment Modification via IDOR (CVSS 4.3, KiviCare)
- [CVE-2026-19406](https://cve.now/CVE-2026-19406.md): Easy Appointments \< 4.0.1 - Contributor+ Sensitive Information Disclosure via REST Appointments Listing (CVSS 2.7, Easy Appointments)
- [CVE-2026-19056](https://cve.now/CVE-2026-19056.md): ProSolution WP Client \< 2.0.11 - Reflected XSS via 'page' Parameter (CVSS 7.1, ProSolution WP Client)
- [CVE-2026-19055](https://cve.now/CVE-2026-19055.md): ProSolution WP Client \< 2.0.11 - Reflected XSS via Multiple Parameters (CVSS 7.1, ProSolution WP Client)
- [CVE-2026-18937](https://cve.now/CVE-2026-18937.md): Broken Link Checker \< 2.4.12 - Unauthenticated RCE via Query Variable Injection (CVSS 9.0, Broken Link Checker)
- [CVE-2026-18779](https://cve.now/CVE-2026-18779.md): TrueBooker Appointment Booking \< 1.2.7 - Unauthenticated Appointment and Payment Record Deletion via update\_appointment\_booked (CVSS 5.3, TrueBooker)
- [CVE-2026-18778](https://cve.now/CVE-2026-18778.md): TrueBooker Appointment Booking \< 1.2.7 - Unauthenticated Customer PII Disclosure via Multiple AJAX Actions (CVSS 5.3, TrueBooker)
- [CVE-2026-18777](https://cve.now/CVE-2026-18777.md): TrueBooker Appointment Booking \< 1.2.7 - Unauthenticated Arbitrary Appointment Status Change via update\_appointment\_status (CVSS 5.3, TrueBooker)
- [CVE-2026-18776](https://cve.now/CVE-2026-18776.md): TrueBooker Appointment Booking \< 1.2.7 - Unauthenticated Account Takeover via Multiple AJAX Actions (CVSS 9.8, TrueBooker)
- [CVE-2026-18466](https://cve.now/CVE-2026-18466.md): WP Maps \< 4.9.8 - Subscriber+ Unlimited Autoloaded Option Creation (CVSS 5.4, WP Maps)
- [CVE-2026-18231](https://cve.now/CVE-2026-18231.md): WP Directory Kit \< 1.5.7 - Unauthenticated User Email Disclosure via select\_2\_ajax\_user (CVSS 5.3, WP Directory Kit)
- [CVE-2026-18202](https://cve.now/CVE-2026-18202.md): JetEngine \< 3.8.14 - Author+ Stored XSS via SVG Upload (CVSS 6.8, JetEngine)
- [CVE-2026-18051](https://cve.now/CVE-2026-18051.md): W3 Total Cache \< 2.10.5 - Unauthenticated Arbitrary Directory File Write and .htaccess Overwrite via Path Traversal in the Page Cache Key (CVSS 10.0, W3 Total Cache)
- [CVE-2026-18031](https://cve.now/CVE-2026-18031.md): TabaPay Gateway \<= 1.4.0 - Unauthenticated Account Takeover via Payment Callback (CVSS 9.8, TabaPay Gateway)
- [CVE-2026-17565](https://cve.now/CVE-2026-17565.md): Animation Addons for Elementor \< 2.7.2 - Unauthenticated Server-Side Request Forgery (CVSS 7.2, Animation Addons for Elementor)
- [CVE-2026-16979](https://cve.now/CVE-2026-16979.md): SmartCrawl \< 3.16.3 - Subscriber+ Private/Draft Post Title Disclosure and Post Meta Key Enumeration (CVSS 4.3, SmartCrawl SEO checker, analyzer & optimizer)
- [CVE-2026-16950](https://cve.now/CVE-2026-16950.md): Product Shortlist \<= 1.0.4 - Unauthenticated SQL Injection via get\_shortlisted\_products (CVSS 8.6, Product Shortlist)
- [CVE-2026-16617](https://cve.now/CVE-2026-16617.md): Simple File List \<= 6.3.11 - Unauthenticated Stored XSS via File Description (CVSS 8.8, Simple File List)
- [CVE-2026-16616](https://cve.now/CVE-2026-16616.md): Simple File List \<= 6.3.11 - Unauthenticated Arbitrary File Read and Move via Path Traversal (CVSS 8.6, Simple File List)
- [CVE-2026-16570](https://cve.now/CVE-2026-16570.md): NextScripts: Social Networks Auto-Poster \< 4.4.8 - Reflected XSS via Facebook OAuth Callback (CVSS 7.1, NextScripts: Social Networks Auto-Poster)
- [CVE-2026-16058](https://cve.now/CVE-2026-16058.md): YayCurrency \< 3.3.5 - Unauthenticated Order and Vendor Financial Data Disclosure via Dokan Integration (CVSS 5.3, YayCurrency)
- [CVE-2026-15253](https://cve.now/CVE-2026-15253.md): Easy Media Replace \<= 0.2.0 - Author+ Stored XSS via Attachment Title (CVSS 6.8, Easy Media Replace)
- [CVE-2026-14861](https://cve.now/CVE-2026-14861.md): User Verification \<= 2.0.47 - Unauthenticated Arbitrary Account Lockout via IDOR (CVSS 7.5, User Verification by PickPlugins)
- [CVE-2026-14826](https://cve.now/CVE-2026-14826.md): Quiz And Survey Master \< 11.2.4 - Contributor+ Cross-Quiz Email and Results Configuration Disclosure via IDOR (CVSS 2.7, Quiz and Survey Master)
- [CVE-2026-14825](https://cve.now/CVE-2026-14825.md): Quiz And Survey Master \< 11.2.4 - Contributor+ Arbitrary Quiz Text Settings Update via IDOR (CVSS 2.7, Quiz and Survey Master)
- [CVE-2026-14334](https://cve.now/CVE-2026-14334.md): Booking calendar, Appointment Booking System \<= 3.2.36 - Unauthenticated Stored XSS via SVG File Upload (CVSS 8.8, Booking calendar, Appointment Booking System)
- [CVE-2026-14287](https://cve.now/CVE-2026-14287.md): TenWeb Speed Optimizer \< 2.33.5 - Unauthenticated Stored XSS via Critical CSS Token Bypass (CVSS 4.7, 10Web Booster)
- [CVE-2026-14196](https://cve.now/CVE-2026-14196.md): WCFM Marketplace \< 3.8.1 - Store Vendor+ Cross-Vendor Review Deletion and Status Update via IDOR (CVSS 4.3, WCFM Marketplace)
- [CVE-2026-13175](https://cve.now/CVE-2026-13175.md): Eventin \< 4.1.21 - Contributor+ Schedule Deletion and Modification via IDOR (CVSS 6.5, Eventin)
- [CVE-2026-13174](https://cve.now/CVE-2026-13174.md): Eventin \< 4.1.21 - Contributor+ Speaker Account Deletion via IDOR (CVSS 7.2, Eventin)
- [CVE-2026-13173](https://cve.now/CVE-2026-13173.md): Eventin \< 4.1.21 - Contributor+ User Role and Meta Modification via Speaker Creation (CVSS 2.7, Eventin)
- [CVE-2026-13169](https://cve.now/CVE-2026-13169.md): Eventin \< 4.1.21 - Contributor+ Arbitrary Event Modification, Deletion and Ownership Takeover via IDOR (CVSS 8.1, Eventin)
- [CVE-2026-12983](https://cve.now/CVE-2026-12983.md): Dinatur \<= 1.18 - Unauthenticated SQL Injection via Column Name Injection (CVSS 8.6, Dinatur)
- [CVE-2026-11565](https://cve.now/CVE-2026-11565.md): Advanced File Manager \< 5.4.13 - Authenticated Arbitrary File Read and Write via fma\_load\_fma\_ui (CVSS 8.5, Advanced File Manager)
- [CVE-2026-49428](https://cve.now/CVE-2026-49428.md): posixshm: system calls can incorrectly free memory of largepage objects (CVSS 8.4, FreeBSD)
- [CVE-2026-49427](https://cve.now/CVE-2026-49427.md): posixshm: largepage shared memory objects not explicitly wired (CVSS 8.8, FreeBSD)
- [CVE-2026-49422](https://cve.now/CVE-2026-49422.md): Use-after-free in TCP RACK stack option handler (CVSS 8.4, FreeBSD)
- [CVE-2026-49421](https://cve.now/CVE-2026-49421.md): unlinkat(2) ignores AT\_RESOLVE\_BENEATH flag (CVSS 7.1, FreeBSD)
- [CVE-2026-49420](https://cve.now/CVE-2026-49420.md): Buffer overflow in libalias RTSP handler (CVSS 8.8, FreeBSD)
- [CVE-2026-49431](https://cve.now/CVE-2026-49431.md): Incorrect user validation in ZFS\_IOC\_SET\_PROP ioctl (CVSS 3.3, FreeBSD)
- [CVE-2026-49430](https://cve.now/CVE-2026-49430.md): Kernel heap overflow in ZFS\_IOC\_RECV\_NEW ioctl (CVSS 7.8, FreeBSD)
- [CVE-2026-49429](https://cve.now/CVE-2026-49429.md): Kernel heap overflow in ZFS\_IOC\_USERSPACE\_MANY ioctl (CVSS 7.8, FreeBSD)
- [CVE-2026-70408](https://cve.now/CVE-2026-70408.md): An incorrect authorization vulnerability exists in acmailer, which may allow a user to create a sub-account that has administrative privileg (CVSS 8.8, Extra Innovation acmailer CGI · Extra Innovation acmailer DB)
- [CVE-2026-66358](https://cve.now/CVE-2026-66358.md): A cross-site scripting vulnerability exists in acmailer, which may allow an attacker to execute an arbitrary script. (CVSS 6.1, Extra Innovation acmailer CGI · Extra Innovation acmailer DB)
- [CVE-2026-49415](https://cve.now/CVE-2026-49415.md): Local privilege escalation via execve(2) TOCTOU race (CVSS 8.8, FreeBSD)
- [CVE-2026-49419](https://cve.now/CVE-2026-49419.md): Jail reference count underflow (CVSS 8.8, FreeBSD)
- [CVE-2026-19942](https://cve.now/CVE-2026-19942.md): Atarim \<= 5.1.1 - Authenticated (Author+) Arbitrary File Deletion via '\_wp\_attached\_file' Meta (CVSS 8.1, wpfeedback Atarim – AI Agency for WordPress: Edit Pages, Fi…)
- [CVE-2026-49418](https://cve.now/CVE-2026-49418.md): Use-after-free in device pager page list (CVSS 8.8, FreeBSD)
- [CVE-2026-76050](https://cve.now/CVE-2026-76050.md): SourceCodester Simple Online Food Ordering System ajax.php delete\_menu sql injection (CVSS 6.9, SourceCodester Simple Online Food Ordering System)
- [CVE-2026-76049](https://cve.now/CVE-2026-76049.md): SourceCodester Simple Online Food Ordering System ajax.php save\_menu sql injection (CVSS 6.9, SourceCodester Simple Online Food Ordering System)
- [CVE-2026-76048](https://cve.now/CVE-2026-76048.md): SourceCodester Simple Online Food Ordering System ajax.php login sql injection (CVSS 6.9, SourceCodester Simple Online Food Ordering System)
- [CVE-2026-76014](https://cve.now/CVE-2026-76014.md): BusyBox FEATURE\_WGET\_TIMEOUT wget.c null pointer dereference (CVSS 4.8, BusyBox)
- [CVE-2026-76008](https://cve.now/CVE-2026-76008.md): Comfast CF-N1-S URI Parameter Parsing mbox-config get\_para\_from\_uri stack-based overflow (CVSS 10.0, Comfast CF-N1-S)
- [CVE-2026-76004](https://cve.now/CVE-2026-76004.md): UTT HiPER 1250GW HTTP aspApBasicConfigUrcp strcpy stack-based overflow (CVSS 9.4, UTT HiPER 1250GW)
- [CVE-2026-76003](https://cve.now/CVE-2026-76003.md): UTT HiPER 1200GW formGroupConfig strcpy stack-based overflow (CVSS 9.4, UTT HiPER 1200GW)
- [CVE-2026-75987](https://cve.now/CVE-2026-75987.md): SPLWare esProc SocketData.java ObjectInputStream.readUnshared deserialization (CVSS 6.9, SPLWare esProc)
- [CVE-2026-75986](https://cve.now/CVE-2026-75986.md): code-projects Online Job Portal System Password Recovery ForPass.php sql injection (CVSS 6.9, code-projects Online Job Portal System)
- [CVE-2026-15421](https://cve.now/CVE-2026-15421.md): Speed Optimizer \<= 7.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Tag Attributes (CVSS 6.4, siteground Speed Optimizer – The All-In-One Performance-Boo…)
- [CVE-2026-11751](https://cve.now/CVE-2026-11751.md): A vulnerability has been identified in armeria-xds versions prior to 1.41.0, where xDS upstream TLS peer verification may be silently disabl (CVSS 9.1, LY Armeria)
- [CVE-2026-75985](https://cve.now/CVE-2026-75985.md): TRENDnet Router ping.cgi command injection (CVSS 5.3, TRENDnet Router)
- [CVE-2026-75984](https://cve.now/CVE-2026-75984.md): TRENDnet TEW-823DRU admin.cgi command injection (CVSS 5.3, TRENDnet TEW-823DRU)
- [CVE-2026-75979](https://cve.now/CVE-2026-75979.md): xianrendzw EasyReport SQL Preview Endpoint DesignerController.java previewSqlText special elements in template engine (CVSS 5.3, xianrendzw EasyReport)
- [CVE-2026-75978](https://cve.now/CVE-2026-75978.md): xianrendzw EasyReport QueryerFactory DataSourceController.java DataSourceController.add permission (CVSS 5.3, xianrendzw EasyReport)
- [CVE-2026-50719](https://cve.now/CVE-2026-50719.md): The Ingenic T41, and probably also T32, T40, and A1 SoC boot ROMs parse and execute an attacker-controlled init table from the SPL header be (CVSS 6.8)
- [CVE-2026-50720](https://cve.now/CVE-2026-50720.md): The Ingenic T31 SoC boot ROM flash-boot verification path compares only a single 32-bit word of the RSA signature output against a single 32 (CVSS 6.4)
- [CVE-2026-51366](https://cve.now/CVE-2026-51366.md): SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the api\_vedo (CVSS 9.9)
- [CVE-2026-51367](https://cve.now/CVE-2026-51367.md): An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to obtain sensitive information via the api\_vedo/chat endpoin (CVSS 7.5)
- [CVE-2026-71694](https://cve.now/CVE-2026-71694.md): An issue in Berkeley Out-of-Order Machine (BOOM) / BoomTile RTL benchmark v1.2 2d08d0d8b4563212175212f9db0e69f6e68c9619 allows a remote atta (CVSS 8.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-08-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.