# CVEs published 2026-08-20

468 CVEs were published on August 20, 2026: 75 critical, 212 high. Days are UTC.

- [CVE-2026-16520](https://cve.now/CVE-2026-16520.md): Improper input validation and Exposure of sensitive information through data queries vulnerability in Genians Genian NAC V4.0, Genians Genia (CVSS 8.7, Genians Genian NAC · Genians Genian ZTNA)
- [CVE-2026-77648](https://cve.now/CVE-2026-77648.md): In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass import\_filtering\_opts, allowing an admin to fetc (CVSS 2.2, OpenStack Glance)
- [CVE-2026-77113](https://cve.now/CVE-2026-77113.md): Path Traversal Vulnerability in apport-unpack (CVSS 6.7, Canonical Apport)
- [CVE-2026-77647](https://cve.now/CVE-2026-77647.md): SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. (CVSS 9.8, SPIP)
- [CVE-2026-77646](https://cve.now/CVE-2026-77646.md): Server Side Request Forgery (SSRF) vulnerability reported in Windchill (CVSS 7.7, PTC Windchill PDMLink · PTC FlexPLM)
- [CVE-2026-77645](https://cve.now/CVE-2026-77645.md): Critical Remote Code Execution (RCE) vulnerability reported in Windchill (CVSS 9.2, PTC Windchill PDMLink · PTC FlexPLM)
- [CVE-2026-19783](https://cve.now/CVE-2026-19783.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 6.7, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-19449](https://cve.now/CVE-2026-19449.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 8.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-19448](https://cve.now/CVE-2026-19448.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 6.5, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-19446](https://cve.now/CVE-2026-19446.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.5, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-19442](https://cve.now/CVE-2026-19442.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 8.2, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-19437](https://cve.now/CVE-2026-19437.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 8.1, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-18835](https://cve.now/CVE-2026-18835.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 9.9, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-18840](https://cve.now/CVE-2026-18840.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 8.2, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-54389](https://cve.now/CVE-2026-54389.md): Ghidra \< 12.1.3 PDB Parser Uncontrolled Heap Growth DoS via AbstractPdb (CVSS 6.7, NationalSecurityAgency ghidra)
- [CVE-2026-18842](https://cve.now/CVE-2026-18842.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 8.4, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-18832](https://cve.now/CVE-2026-18832.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 8.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-49217](https://cve.now/CVE-2026-49217.md): Mailu missing authentication on PATCH /api/v1/token/\<id\>, which allows unauthenticated removal of IP restrictions (CVSS 7.5, Mailu)
- [CVE-2026-18828](https://cve.now/CVE-2026-18828.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 5.4, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-18824](https://cve.now/CVE-2026-18824.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 8.4, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-18822](https://cve.now/CVE-2026-18822.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 4.4, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-18716](https://cve.now/CVE-2026-18716.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.9, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-18670](https://cve.now/CVE-2026-18670.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 8.2, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-17436](https://cve.now/CVE-2026-17436.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 8.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-17425](https://cve.now/CVE-2026-17425.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.5, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-17424](https://cve.now/CVE-2026-17424.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 4.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-17423](https://cve.now/CVE-2026-17423.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.7, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-17422](https://cve.now/CVE-2026-17422.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 9.3, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-72848](https://cve.now/CVE-2026-72848.md): langchain-community SitemapLoader Does Not Apply restrict\_to\_same\_domain to Nested Sitemap Index Entries, Allowing Server-Side Request Forgery (CVSS 8.6, langchain-ai langchain-community)
- [CVE-2026-72846](https://cve.now/CVE-2026-72846.md): Lightdash Scheduled Delivery Webhook URLs Are Not Validated, Allowing Server-Side Request Forgery (CVSS 6.4, lightdash)
- [CVE-2026-72843](https://cve.now/CVE-2026-72843.md): EverShop Missing Authorization on PATCH /api/customers/:id Allows Unauthenticated Account Takeover (CVSS 9.3, evershopcommerce evershop)
- [CVE-2026-72818](https://cve.now/CVE-2026-72818.md): NLTK TweetTokenizer URL Pattern Backtracks Catastrophically on Naked-Domain-Like Input (CVSS 8.7, nltk)
- [CVE-2026-17195](https://cve.now/CVE-2026-17195.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 6.5, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-17171](https://cve.now/CVE-2026-17171.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-17170](https://cve.now/CVE-2026-17170.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.5, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-17168](https://cve.now/CVE-2026-17168.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 8.5, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-17165](https://cve.now/CVE-2026-17165.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.5, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-17163](https://cve.now/CVE-2026-17163.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.5, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-17160](https://cve.now/CVE-2026-17160.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 9.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-17159](https://cve.now/CVE-2026-17159.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.5, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-17157](https://cve.now/CVE-2026-17157.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 9.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-17152](https://cve.now/CVE-2026-17152.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 9.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-77644](https://cve.now/CVE-2026-77644.md): Critical Bypass Access Control Vulnerability Reported for Windchill Risk and Reliability (WRR) Enterprise Edition (CVSS 9.3, PTC Windchill Risk and Reliability Enterprise Edition)
- [CVE-2026-17145](https://cve.now/CVE-2026-17145.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 9.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-17142](https://cve.now/CVE-2026-17142.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 9.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-17141](https://cve.now/CVE-2026-17141.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 9.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-17138](https://cve.now/CVE-2026-17138.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 8.1, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-49244](https://cve.now/CVE-2026-49244.md): SFTPGo: Path confinement bypass in public browsable share partial ZIP download (CVSS 5.9, drakkan sftpgo · github.com/drakkan/sftpgo +1)
- [CVE-2026-17136](https://cve.now/CVE-2026-17136.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 9.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-17124](https://cve.now/CVE-2026-17124.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-17122](https://cve.now/CVE-2026-17122.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 9.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-49245](https://cve.now/CVE-2026-49245.md): SFTPGo: Stored XSS via inline parameter on public shares and user file download (CVSS 3.7, drakkan sftpgo · github.com/drakkan/sftpgo/v2 +1)
- [CVE-2026-17121](https://cve.now/CVE-2026-17121.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.5, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-17120](https://cve.now/CVE-2026-17120.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 5.3, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-17118](https://cve.now/CVE-2026-17118.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 9.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-17060](https://cve.now/CVE-2026-17060.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 8.1, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-62945](https://cve.now/CVE-2026-62945.md): TREK: Cross-trip reservation title disclosure via file links (CVSS 4.3, mauriceboe TREK)
- [CVE-2026-17040](https://cve.now/CVE-2026-17040.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 9.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-17024](https://cve.now/CVE-2026-17024.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.7, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-54509](https://cve.now/CVE-2026-54509.md): TREK IDOR: any authenticated user can read another user's journey share token (full journey leak) (CVSS 6.5, mauriceboe TREK)
- [CVE-2026-17009](https://cve.now/CVE-2026-17009.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 4.7, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-17007](https://cve.now/CVE-2026-17007.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 6.7, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-17006](https://cve.now/CVE-2026-17006.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 8.3, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-17003](https://cve.now/CVE-2026-17003.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.7, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-17000](https://cve.now/CVE-2026-17000.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 8.1, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16997](https://cve.now/CVE-2026-16997.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16996](https://cve.now/CVE-2026-16996.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 8.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16991](https://cve.now/CVE-2026-16991.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-69855](https://cve.now/CVE-2026-69855.md): Microsoft Copilot in Azure Information Disclosure Vulnerability (CVSS 7.7, Microsoft Copilot in Azure)
- [CVE-2026-69543](https://cve.now/CVE-2026-69543.md): Azure Virtual Machines Elevation of Privilege Vulnerability (CVSS 8.5, Microsoft Azure Virtual Machines)
- [CVE-2026-69558](https://cve.now/CVE-2026-69558.md): Microsoft Partner Center Information Disclosure Vulnerability (CVSS 8.6, Microsoft Partner Center)
- [CVE-2026-69555](https://cve.now/CVE-2026-69555.md): Azure Arc Elevation of Privilege Vulnerability (CVSS 10.0, Microsoft Azure ARC)
- [CVE-2026-69400](https://cve.now/CVE-2026-69400.md): Azure Logic Apps Elevation of Privilege Vulnerability (CVSS 9.6, Microsoft Azure Logic Apps)
- [CVE-2026-69419](https://cve.now/CVE-2026-69419.md): Azure Data Manager for Energy Remote Code Execution Vulnerability (CVSS 8.5, Microsoft Azure Data Manager for Energy)
- [CVE-2026-68782](https://cve.now/CVE-2026-68782.md): Azure SQL Database Elevation of Privilege Vulnerability (CVSS 9.9, Microsoft Azure SQL Database)
- [CVE-2026-66800](https://cve.now/CVE-2026-66800.md): Azure Data Factory Information Disclosure Vulnerability (CVSS 8.6, Microsoft Azure Data Factory)
- [CVE-2026-66309](https://cve.now/CVE-2026-66309.md): Azure SQL Database Elevation of Privilege Vulnerability (CVSS 9.1, Microsoft Azure SQL Database)
- [CVE-2026-65816](https://cve.now/CVE-2026-65816.md): Azure Arc Elevation of Privilege Vulnerability (CVSS 10.0, Microsoft Azure Web Apps)
- [CVE-2026-63509](https://cve.now/CVE-2026-63509.md): Microsoft Fabric Elevation of Privilege Vulnerability (CVSS 9.9, Microsoft Fabric)
- [CVE-2026-65770](https://cve.now/CVE-2026-65770.md): Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability (CVSS 10.0, Microsoft Azure Managed Instance for Apache Cassandra)
- [CVE-2026-16989](https://cve.now/CVE-2026-16989.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.1, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-70105](https://cve.now/CVE-2026-70105.md): Microsoft Word Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office +1)
- [CVE-2026-54508](https://cve.now/CVE-2026-54508.md): TREK: Blind SSRF via unvalidated redirect-following in Google/Naver list import and Maps URL resolution (CVSS 5.3, mauriceboe TREK)
- [CVE-2026-16980](https://cve.now/CVE-2026-16980.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 6.3, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16973](https://cve.now/CVE-2026-16973.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 5.5, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16972](https://cve.now/CVE-2026-16972.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 6.5, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16964](https://cve.now/CVE-2026-16964.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 6.5, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16958](https://cve.now/CVE-2026-16958.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 6.5, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16952](https://cve.now/CVE-2026-16952.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 5.5, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-55013](https://cve.now/CVE-2026-55013.md): Windows Remote Help Defense Spoofing Vulnerability (CVSS 7.1, Microsoft Windows Remote Help)
- [CVE-2026-55015](https://cve.now/CVE-2026-55015.md): Microsoft Remote Help Denial of Service Vulnerability (CVSS 5.5, Microsoft Windows Remote Help)
- [CVE-2026-16951](https://cve.now/CVE-2026-16951.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 6.7, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-54505](https://cve.now/CVE-2026-54505.md): TREK: Stored cross-user HTML injection via trip title in the Journey suggestion banner (CVSS 2.0, mauriceboe TREK)
- [CVE-2026-69836](https://cve.now/CVE-2026-69836.md): Microsoft Entra ID Remote Code Execution Vulnerability (CVSS 10.0, Microsoft Entra)
- [CVE-2026-69851](https://cve.now/CVE-2026-69851.md): Microsoft Entra ID Elevation of Privilege Vulnerability (CVSS 9.9, Microsoft Entra)
- [CVE-2026-69519](https://cve.now/CVE-2026-69519.md): Azure Stack HCI Information Disclosure Vulnerability (CVSS 8.6, Microsoft Azure Stack HCI)
- [CVE-2026-68789](https://cve.now/CVE-2026-68789.md): Azure SQL Database Elevation of Privilege Vulnerability (CVSS 9.9, Microsoft Azure SQL Database)
- [CVE-2026-65801](https://cve.now/CVE-2026-65801.md): Microsoft Exchange Online Elevation of Privilege Vulnerability (CVSS 10.0, Microsoft Exchange Online)
- [CVE-2026-62834](https://cve.now/CVE-2026-62834.md): Azure Data Factory Elevation of Privilege Vulnerability (CVSS 9.3, Microsoft Azure Data Factory)
- [CVE-2026-55769](https://cve.now/CVE-2026-55769.md): CloudNativePG: Overriding operators can lead to privilege escalation in CloudNativePG for SQL queries without a fixed \`search\_path\` (CVSS 9.4, cloudnative-pg)
- [CVE-2026-49436](https://cve.now/CVE-2026-49436.md): LinkAce vulnerable to stored XSS via 'javascript:' URI in Bulk Link API (CVSS 7.3, Kovah LinkAce)
- [CVE-2026-55765](https://cve.now/CVE-2026-55765.md): CloudNativePG: Cleartext role passwords recorded in pg\_stat\_statements allow privileged tenant roles to recover the PostgreSQL superuser credential and achieve RCE in the database pod (CVSS 8.5, cloudnative-pg)
- [CVE-2026-50192](https://cve.now/CVE-2026-50192.md): Kerberos Hub private key (X-Kerberos-Hub-PrivateKey) leaked to cross-host redirect target due to redirect-following HTTP client without CheckRedirect (CVSS 6.9, kerberos-io agent · github.com/kerberos-io/agent/machinery)
- [CVE-2026-55489](https://cve.now/CVE-2026-55489.md): BigBlueButton: IDOR on BBB through /api/graphql via POST parameter "presentationId" leads to Authentication Bypass (CVSS 4.9, bigbluebutton)
- [CVE-2026-55491](https://cve.now/CVE-2026-55491.md): BigBlueButton: Stored XSS in Screenshare Recording Playback via Unescaped Meeting Name (CVSS 5.4, bigbluebutton)
- [CVE-2026-72860](https://cve.now/CVE-2026-72860.md): 9router Server-Side Request Forgery via /api/provider-nodes/validate Because the IPv4-Mapped IPv6 Denylist Check Is Unreachable (CVSS 8.5, decolua 9router)
- [CVE-2026-46355](https://cve.now/CVE-2026-46355.md): BigBlueButton: Unauthenticated Session Hijack via Exposed /bigbluebutton/api/handleJoinExistingUser (CVSS 7.1, bigbluebutton)
- [CVE-2026-16946](https://cve.now/CVE-2026-16946.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16945](https://cve.now/CVE-2026-16945.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-46682](https://cve.now/CVE-2026-46682.md): BigBlueButton: Blind SQL Injection AUTH (Moderator) (CVSS 8.5, bigbluebutton)
- [CVE-2026-16944](https://cve.now/CVE-2026-16944.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 6.7, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16943](https://cve.now/CVE-2026-16943.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 8.2, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16937](https://cve.now/CVE-2026-16937.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-55893](https://cve.now/CVE-2026-55893.md): Capstone SH disassembler \`set\_reg\_n\` heap buffer overflow via crafted SH2A FPU bytecode (CVSS 7.3, capstone-engine capstone)
- [CVE-2026-16936](https://cve.now/CVE-2026-16936.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 8.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16935](https://cve.now/CVE-2026-16935.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16934](https://cve.now/CVE-2026-16934.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 8.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-55894](https://cve.now/CVE-2026-55894.md): Capstone SH disassembler \`sh\_disassemble\` out-of-bounds read via crafted SH2A bytecode (CVSS 6.8, capstone-engine capstone)
- [CVE-2026-67448](https://cve.now/CVE-2026-67448.md): Mailpit: WebSocket origin check bypass via percent-encoded path (regression of CVE-2026-22689) (CVSS 6.5, axllent mailpit · github.com/axllent/mailpit)
- [CVE-2026-77643](https://cve.now/CVE-2026-77643.md): A cross-site scripting vulnerability in queryparser/termgenerator\_internal.cc in Xapian xapian-core before 2.1.0 and before 1.4.32 exists d (CVSS 4.4, xapian-core)
- [CVE-2026-64773](https://cve.now/CVE-2026-64773.md): An attacker that can reach a container's published TCP port may be able to force the host's forwarding process to buffer an unbounded amount (CVSS 7.5, Apple container)
- [CVE-2026-77642](https://cve.now/CVE-2026-77642.md): tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached signature with unexpected signature digest type (CVSS 7.5, torproject Tor)
- [CVE-2026-67447](https://cve.now/CVE-2026-67447.md): Mailpit: SMTP DATA line reader buffers over-limit input before size enforcement (CVSS 5.3, axllent mailpit · github.com/axllent/mailpit)
- [CVE-2026-67445](https://cve.now/CVE-2026-67445.md): Mailpit: SMTP command parser buffers unbounded command lines before syntax rejection (CVSS 5.3, axllent mailpit · github.com/axllent/mailpit)
- [CVE-2026-53804](https://cve.now/CVE-2026-53804.md): OTRS Community Edition OS Command Injection via PGP Configuration (CVSS 8.6, Centuran Consulting OTRS Community Edition)
- [CVE-2026-75484](https://cve.now/CVE-2026-75484.md): HTTP/2 header field values containing CR, LF or NUL are passed to the application unvalidated in Bandit (CVSS 6.9, mtrudel bandit)
- [CVE-2026-74836](https://cve.now/CVE-2026-74836.md): HTTP/2 connection-window starvation pins Plug processes indefinitely in Bandit (CVSS 8.7, mtrudel bandit)
- [CVE-2026-67446](https://cve.now/CVE-2026-67446.md): Mailpit: Thumbnail generation decodes unbounded image dimensions before scaling (CVSS 5.3, axllent mailpit · github.com/axllent/mailpit)
- [CVE-2026-77641](https://cve.now/CVE-2026-77641.md): tor before 0.4.9.9 was prone to a NULL write after free when sending a CONFLUX\_SWITCH cell fails. (CVSS 6.5, torproject Tor)
- [CVE-2026-68921](https://cve.now/CVE-2026-68921.md): DiceBear: SVG injection via the unescaped rotate option in @dicebear/core (and fontSize/fontWeight in @dicebear/initials) (CVSS 4.7, dicebear · @dicebear/core +1)
- [CVE-2026-70654](https://cve.now/CVE-2026-70654.md): libvips: A well-crafted PPM image processed via a custom source could lead to possible heap buffer write overflow (CVSS 5.8, libvips)
- [CVE-2026-43798](https://cve.now/CVE-2026-43798.md): A single crafted SSH message gives an unauthenticated network attacker an out-of-bounds stack write of attacker-controlled length and conten (CVSS 9.8, Apple swift-nio-ssh)
- [CVE-2026-70653](https://cve.now/CVE-2026-70653.md): libvips: Possible heap-based buffer read overflow when decoding a well-crafted RLE Radiance image (CVSS 4.8, libvips)
- [CVE-2026-70651](https://cve.now/CVE-2026-70651.md): libvips: Possible integer overflow when reading multi-page TIFF images via ImageMagick (CVSS 6.9, libvips)
- [CVE-2026-70652](https://cve.now/CVE-2026-70652.md): libvips: Possible heap-based buffer read overflow when resizing and re-encoding a JPEG with gain map (CVSS 2.0, libvips)
- [CVE-2026-69242](https://cve.now/CVE-2026-69242.md): libvips: Integer overflow leading to heap buffer overflow leading to possible attacker-controlled mmap-resident write (CVSS 8.4, libvips)
- [CVE-2026-77640](https://cve.now/CVE-2026-77640.md): tor before 0.4.9.9 was prone to an infinite loop when decompressing a truncated zlib/gzip stream with done=1. (CVSS 3.7, torproject Tor)
- [CVE-2026-71485](https://cve.now/CVE-2026-71485.md): Centrifugo: Client-forgeable headers emulation lets any client spoof headers forwarded to proxy backends (CVSS 9.1, centrifugal centrifugo · github.com/centrifugal/centrifu… +4)
- [CVE-2026-77639](https://cve.now/CVE-2026-77639.md): Tor before 0.4.9.9 was prone to a compression bomb bypass where an attacker could concatenate many gzip or zlib sub-streams, each just under (CVSS 5.3, torproject Tor)
- [CVE-2026-77638](https://cve.now/CVE-2026-77638.md): Tor before 0.4.9.11 is prone to a race condition where in just the right circumstances a rendezvous point could man-in-the-middle (impersona (CVSS 8.9, torproject Tor)
- [CVE-2026-76023](https://cve.now/CVE-2026-76023.md): Improper resource control in Linux Toolkit Theming in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised th (CVSS 8.8, Google Chrome)
- [CVE-2026-76022](https://cve.now/CVE-2026-76022.md): Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox (CVSS 8.8, Google Chrome)
- [CVE-2026-76021](https://cve.now/CVE-2026-76021.md): Use after free in DOM in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-76020](https://cve.now/CVE-2026-76020.md): Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a c (CVSS 7.5, Google Chrome)
- [CVE-2026-76019](https://cve.now/CVE-2026-76019.md): Incorrect authorization in Workers in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer proce (CVSS 8.1, Google Chrome)
- [CVE-2026-76018](https://cve.now/CVE-2026-76018.md): Privilege elevation in Import in Google Chrome prior to 151.0.7922.173 allowed a remote attacker leveraging social engineering to potentiall (CVSS 8.8, Google Chrome)
- [CVE-2026-76017](https://cve.now/CVE-2026-76017.md): Use after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbo (CVSS 8.8, Google Chrome)
- [CVE-2026-77587](https://cve.now/CVE-2026-77587.md): Tor before 0.4.9.11 is prone to a use-after-free (and potential double free) of a conflux object when a recovery leg revives a conflux set w (CVSS 5.9, torproject Tor)
- [CVE-2026-18420](https://cve.now/CVE-2026-18420.md): RCE via Prototype Pollution in OpenSearch Dashboards (CVSS 8.8, AWS Amazon OpenSearch Service · OpenSearch Dashboards)
- [CVE-2026-77584](https://cve.now/CVE-2026-77584.md): Tor before 0.4.9.10 did not reject a CONFLUX\_LINK cell that arrives on a circuit which already has attached streams. (CVSS 7.0, torproject Tor)
- [CVE-2026-73137](https://cve.now/CVE-2026-73137.md): Multicloud-operators-subscription: multicloud-operators-subscription: cross-namespace secret exfiltration via helmrelease.repo.secretref.namespace (CVSS 7.7, Red Hat Advanced Cluster Management for Kubernetes)
- [CVE-2026-67567](https://cve.now/CVE-2026-67567.md): Multicloud-operators-subscription: multicloud-operators-subscription: helmrelease chart applied with controller sa without gvk or namespace restriction (CVSS 9.9, Red Hat Advanced Cluster Management for Kubernetes)
- [CVE-2026-73040](https://cve.now/CVE-2026-73040.md): Dockge Path Traversal via Unvalidated Stack Name Allows Arbitrary Compose and .env Disclosure and Arbitrary Directory Deletion (CVSS 8.7, louislam dockge)
- [CVE-2026-19755](https://cve.now/CVE-2026-19755.md): NoSleep 1.5.1 - Unauthorized disclosure of root-owned files through privileged XPC helper (CVSS 6.9, NoSleep)
- [CVE-2026-77506](https://cve.now/CVE-2026-77506.md): Znuny before LTS 6.5.22 allows AgentTicketEmailResend template XSS. (CVSS 4.8, Znuny)
- [CVE-2026-75910](https://cve.now/CVE-2026-75910.md): Incorrect privilege assignment in the Amazon aws-athena-query-federation ClickHouse connector deployment template (CVSS 6.5, AWS Athena Federated Query Clickhouse Connector deployment…)
- [CVE-2026-72861](https://cve.now/CVE-2026-72861.md): Appwrite Templates github-issue-bot Skips Webhook Signature Verification When the X-Hub-Signature-256 Header Is Absent (CVSS 5.8, appwrite templates)
- [CVE-2026-77151](https://cve.now/CVE-2026-77151.md): lin-snow Ech0 crypto.go MD5Encrypt risky encryption (CVSS 6.3, lin-snow Ech0)
- [CVE-2026-43678](https://cve.now/CVE-2026-43678.md): An unauthenticated remote peer can crash any NIOWebSocket-based server (including Vapor and Hummingbird) with a single 11-byte frame sent af (CVSS 5.3, Apple swift-nio)
- [CVE-2026-49996](https://cve.now/CVE-2026-49996.md): securedrop-proxy origin limitation can be bypassed with redirects (CVSS 3.7, freedomofpress securedrop-client)
- [CVE-2026-64777](https://cve.now/CVE-2026-64777.md): A malicious builder peer may be able to request an in-context file by name from the host and receive the contents of whatever the name resol (CVSS 4.3, Apple container)
- [CVE-2026-50190](https://cve.now/CVE-2026-50190.md): Shaarli vulnerable to stored XSS via raw bookmark title in document \<title\> element on public permalink page (CVSS 8.6, Shaarli)
- [GHSA-JM5P-837G-RV8G](https://cve.now/GHSA-JM5P-837G-RV8G.md): Wagtail: Improper restriction handling on Page translation API endpoint (medium (no CVSS), wagtail)
- [CVE-2026-53586](https://cve.now/CVE-2026-53586.md): libgit2: HTTP transport can leak credentials to an offsite redirect target (CVSS 6.5, libgit2)
- [CVE-2026-53583](https://cve.now/CVE-2026-53583.md): libgit2: Inverted IP SubjectAltName Comparison in OpenSSL Backend (CVSS 6.5, libgit2)
- [CVE-2026-53585](https://cve.now/CVE-2026-53585.md): libgit2: Unbounded Memory Allocation via Delta Object Result-Size Header (CVSS 5.3, libgit2)
- [CVE-2026-53587](https://cve.now/CVE-2026-53587.md): libgit2 - Unauthenticated network-reachable heap out-of-bounds read in transports/smart\_pkt.c:set\_data (CVSS 7.5, libgit2)
- [CVE-2026-53584](https://cve.now/CVE-2026-53584.md): libgit2: Submodule path traversal (CVSS 4.3, libgit2)
- [CVE-2026-19683](https://cve.now/CVE-2026-19683.md): Unencrypted Credential Transmission in Omada Gateway Dynamic DNS Authentication in Omada Gateways (CVSS 6.3, TP-Link Systems ER7212PC · TP-Link Systems ER605 +7)
- [CVE-2026-19586](https://cve.now/CVE-2026-19586.md): Pre-Authentication OS Command Injection in Omada Gateways on OpenVPN Server in Omada Gateways (CVSS 9.3, TP-Link Systems ER7212PC · TP-Link Systems ER605 +7)
- [CVE-2026-9033](https://cve.now/CVE-2026-9033.md): Unauthenticated Captive Portal Session Termination and Forced Logout in Omada Gateways (CVSS 6.0, TP-Link Systems ER7212PC · TP-Link Systems ER605 +16)
- [CVE-2026-75514](https://cve.now/CVE-2026-75514.md): BunkerWeb: rDNS bypass via missing forward-confirmation (FCrDNS) in blacklist, greylist, and antibot (CVSS 5.9, bunkerity bunkerweb)
- [CVE-2026-66002](https://cve.now/CVE-2026-66002.md): Frappe: User Enumeration via PDDR (CVSS 6.9, frappe)
- [CVE-2026-66001](https://cve.now/CVE-2026-66001.md): Frappe: Improper Authorization in OAuth2 Consent Endpoint (CVSS 8.5, frappe)
- [CVE-2026-62315](https://cve.now/CVE-2026-62315.md): Frappe: Mass assignment via set\_value (CVSS 7.1, frappe)
- [CVE-2026-63654](https://cve.now/CVE-2026-63654.md): Frappe: Unauthenticated Workflow approval via confirm\_action (CVSS 6.9, frappe)
- [CVE-2026-72854](https://cve.now/CVE-2026-72854.md): msgpack-c Integer Overflow in msgpack\_unpacker\_expand\_buffer Causes a False-Success Undersized Reservation (CVSS 5.3, msgpack-c)
- [CVE-2026-72852](https://cve.now/CVE-2026-72852.md): darknet Integer Overflow in Convolutional Layer Buffer Sizing Leads to Heap Buffer Overflow (CVSS 8.5, hank-ai darknet)
- [CVE-2026-66788](https://cve.now/CVE-2026-66788.md): Lighthouse: lighthouse: arbitrary namespace injection via attacker-controlled broker label (CVSS 9.9, Red Hat Advanced Cluster Management for Kubernetes)
- [CVE-2026-15743](https://cve.now/CVE-2026-15743.md): Catalyst::Plugin::Static::Simple versions through 0.38 for Perl mark responses as publicly cacheable (CVSS 5.7, Catalyst-Plugin-Static-Simple)
- [CVE-2026-66787](https://cve.now/CVE-2026-66787.md): Lighthouse: lighthouse: cross-cluster dns spoofing via unvalidated endpointslice ip addresses (CVSS 8.7, Red Hat Advanced Cluster Management for Kubernetes)
- [CVE-2026-53569](https://cve.now/CVE-2026-53569.md): Frappe: Missing authorization in toggle\_like and mark\_as\_seen (CVSS 5.3, frappe)
- [CVE-2026-77148](https://cve.now/CVE-2026-77148.md): Comfast CF-N1-S Web Management mbox-config sub\_44B50C stack-based overflow (CVSS 9.4, Comfast CF-N1-S)
- [CVE-2026-66785](https://cve.now/CVE-2026-66785.md): Submariner: submariner: missing validation of remote endpoint subnets and clusterid enables cross-cluster traffic hijack (CVSS 8.7, Red Hat Advanced Cluster Management for Kubernetes)
- [CVE-2026-75526](https://cve.now/CVE-2026-75526.md): django CMS: Stored XSS in edit-mode plugin exception rendering (CVSS 4.4, django-cms)
- [CVE-2026-63003](https://cve.now/CVE-2026-63003.md): django CMS: Broken access control in page \*Duplicate\* allows reading the content of any page (cross-site / restriction bypass) (CVSS 6.5, django-cms)
- [CVE-2026-61663](https://cve.now/CVE-2026-61663.md): django CMS: Missing authorization in \`render\_object\_structure\` discloses non-PageContent placeholder structure to low-privileged staff (CVSS 4.3, django-cms)
- [CVE-2026-54622](https://cve.now/CVE-2026-54622.md): django CMS: Clipboard copy IDOR discloses unauthorized plugin content (CVSS 6.5, django-cms)
- [CVE-2026-54624](https://cve.now/CVE-2026-54624.md): django CMS: Structure endpoint bypasses page-view permission (CVSS 6.5, django-cms)
- [CVE-2026-2334](https://cve.now/CVE-2026-2334.md): ) Missing Server-Side File Extension Validation in vsDesk (CVSS 9.4, vsDesk)
- [CVE-2026-54623](https://cve.now/CVE-2026-54623.md): django CMS: Plugin move endpoint allows cyclic reparenting (DoS) (CVSS 7.1, django-cms)
- [CVE-2026-54625](https://cve.now/CVE-2026-54625.md): django CMS: Page cache ignores plugin-declared Vary headers (disclosure & poisoning) (CVSS 4.8, django-cms)
- [CVE-2026-63385](https://cve.now/CVE-2026-63385.md): Libevent: HTTP header handling bugs create risk of access control bypass. (CVSS 9.2, libevent)
- [CVE-2026-63379](https://cve.now/CVE-2026-63379.md): Libevent: HTTP Header smuggling (CVSS 6.3, libevent)
- [CVE-2026-63387](https://cve.now/CVE-2026-63387.md): Libevent: Off-by-one stack buffer overflow in dnsname\_to\_labels via crafted DNS server response (CVSS 7.0, libevent)
- [CVE-2026-63384](https://cve.now/CVE-2026-63384.md): Libevent: \`evtag\_unmarshal\_header()\` decodes a wire \`uint32\` length into a signed \`int\` return value. (CVSS 8.7, libevent)
- [CVE-2026-63380](https://cve.now/CVE-2026-63380.md): Libevent: Null Pointer Dereference in \`evws\_new\_session\` (CVSS 5.7, libevent)
- [CVE-2026-63382](https://cve.now/CVE-2026-63382.md): libevent evhttp: Multiple HTTP Parser Bugs Enable Request Smuggling (CVSS 9.2, libevent)
- [CVE-2026-63381](https://cve.now/CVE-2026-63381.md): Libevent: Dangling Pointer in \`evbuffer\_add\_buffer\_reference\` (CVSS 5.8, libevent)
- [CVE-2026-63495](https://cve.now/CVE-2026-63495.md): Libevent: Unbounded memory accumulation in WebSocket server via fragmented frames (CVSS 7.5, libevent)
- [CVE-2026-63383](https://cve.now/CVE-2026-63383.md): Libevent: decode\_tag\_internal() can lead to out-of-bounds read (CVSS 8.7, libevent)
- [CVE-2026-63388](https://cve.now/CVE-2026-63388.md): Libevent: Heap out-of-bounds write in bufferevent\_socket\_set\_conn\_address\_ reachable via AF\_UNIX accept (CVSS 8.4, libevent)
- [CVE-2026-73253](https://cve.now/CVE-2026-73253.md): Mongoose: TLS Hostname Verification Bypass via Overly Permissive Wildcard Matching (CVSS 9.1, cesanta mongoose)
- [CVE-2026-73255](https://cve.now/CVE-2026-73255.md): Mongoose: Path traversal in SSI #include directives enables arbitrary file read (CVSS 6.5, cesanta mongoose)
- [CVE-2026-73259](https://cve.now/CVE-2026-73259.md): Mongoose: Reflected XSS via decoded URI in directory listing render (CVSS 5.4, cesanta mongoose)
- [CVE-2026-73256](https://cve.now/CVE-2026-73256.md): Mongoose: HTTP/1.0 detection off-by-one enables request smuggling via chunked TE (CVSS 9.1, cesanta mongoose)
- [CVE-2026-73254](https://cve.now/CVE-2026-73254.md): Mongoose: Stored XSS via unescaped filenames in directory listing (CVSS 5.4, cesanta mongoose)
- [CVE-2026-73258](https://cve.now/CVE-2026-73258.md): Mongoose: Multipart boundary/header scan logic error in mg\_http\_next\_multipart (CVSS 6.5, cesanta mongoose)
- [CVE-2026-73251](https://cve.now/CVE-2026-73251.md): Mongoose Built-in TLS: CA-bundle certificate chain accepted without any signature verification (CVSS 9.3, cesanta mongoose)
- [CVE-2026-76641](https://cve.now/CVE-2026-76641.md): Expat Out-of-Bounds Read via dtdCopy (CVSS 8.7, libexpat)
- [CVE-2026-73257](https://cve.now/CVE-2026-73257.md): Mongoose: Content-Length + Transfer-Encoding coexistence enables request smuggling (CVSS 9.1, cesanta mongoose)
- [CVE-2026-77036](https://cve.now/CVE-2026-77036.md): elunez eladmin GenConfigController improper authorization (CVSS 5.3, elunez eladmin)
- [CVE-2026-53424](https://cve.now/CVE-2026-53424.md): Missing one-time-use enforcement in Samly allows replay of SAML bearer assertions (CVSS 9.1, dropbox samly · handnot2 samly)
- [CVE-2026-53425](https://cve.now/CVE-2026-53425.md): Missing InResponseTo validation in Samly allows acceptance of unsolicited SAML responses (CVSS 7.6, dropbox samly · handnot2 samly)
- [CVE-2026-72847](https://cve.now/CVE-2026-72847.md): broot Terminal Escape Sequence Injection via Unsanitized File and Directory Names in the Tree View (CVSS 2.4, Canop broot)
- [CVE-2026-72844](https://cve.now/CVE-2026-72844.md): Lean 4 Kernel Type Checking Bypass via Mismatched Structure Projections (CVSS 6.3, leanprover lean4)
- [CVE-2026-77031](https://cve.now/CVE-2026-77031.md): Tenda CH22 formcreateFileName command injection (CVSS 5.3, Tenda CH22)
- [CVE-2026-77025](https://cve.now/CVE-2026-77025.md): itsourcecode Hospital Management System viewappointmentpending.php sql injection (CVSS 5.3, itsourcecode Hospital Management System)
- [CVE-2026-54136](https://cve.now/CVE-2026-54136.md): Windmill: Resource-scoped API tokens can read script contents outside their allowed path via scripts/list\_search (CVSS 5.1, windmill-labs windmill · windmill-api)
- [CVE-2026-61625](https://cve.now/CVE-2026-61625.md): VictoriaMetrics vmrestore: path traversal via crafted backup part names escapes restore root (CVSS 6.8, VictoriaMetrics · github.com/VictoriaMetrics/VictoriaMetrics)
- [CVE-2026-77022](https://cve.now/CVE-2026-77022.md): Comfast CF-N1-S SSID Configuration mbox-config sub\_44B438 stack-based overflow (CVSS 9.4, Comfast CF-N1-S)
- [CVE-2026-71428](https://cve.now/CVE-2026-71428.md): unstructured: Server-Side Request Forgery in the URL-based partitioning (CVSS 9.3, Unstructured-IO unstructured · unstructured)
- [CVE-2026-65842](https://cve.now/CVE-2026-65842.md): Plate: SSRF with response disclosure in DOCX image embedding (CVSS 8.2, udecode plate · @platejs/docx-io)
- [CVE-2026-55642](https://cve.now/CVE-2026-55642.md): dbx: Unauthenticated arbitrary SQL execution in dbx-web (authentication fails open when no password is configured) (CVSS 9.8, t8y2 dbx)
- [CVE-2026-55586](https://cve.now/CVE-2026-55586.md): SumatraPDF: Heap out-of-bounds write in vendored CHMLib LZX Huffman table construction reachable from crafted CHM files (CVSS 6.6, sumatrapdfreader sumatrapdf)
- [CVE-2026-40345](https://cve.now/CVE-2026-40345.md): deepmerge-ts: Stack exhaustion when merging recursive object graphs (CVSS 8.2, RebeccaStevens deepmerge-ts · deepmerge-ts)
- [CVE-2026-54770](https://cve.now/CVE-2026-54770.md): WebOb: Open redirect in Location header normalization via leading C0 control / space characters (CVSS 6.1, Pylons webob · webob)
- [CVE-2026-77020](https://cve.now/CVE-2026-77020.md): CodeAstro Apartment Visitor Management System password-recovery.php sql injection (CVSS 6.9, CodeAstro Apartment Visitor Management System)
- [CVE-2026-63481](https://cve.now/CVE-2026-63481.md): Hurl: Cookies in Cookies section leak when redirecting to a different host (CVSS 6.9, Orange-OpenSource hurl · hurl)
- [CVE-2026-18263](https://cve.now/CVE-2026-18263.md): Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability (CVSS 7.8, Parallels RAS Client)
- [CVE-2026-55095](https://cve.now/CVE-2026-55095.md): OpenProject: Inplace-edit dialog exposes comments from hidden admin-only project custom fields (CVSS 5.3, opf openproject)
- [CVE-2026-18262](https://cve.now/CVE-2026-18262.md): Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability (CVSS 7.8, Parallels RAS Client)
- [CVE-2026-13121](https://cve.now/CVE-2026-13121.md): Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability (CVSS 7.8, Parallels RAS Client)
- [CVE-2026-15686](https://cve.now/CVE-2026-15686.md): Adminer multi\_query Incorrect Check of Function Return Value Remote Code Execution Vulnerability (CVSS 7.2, Adminer)
- [CVE-2026-15679](https://cve.now/CVE-2026-15679.md): Hugging Face PyTorch Image Models checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 7.8, Hugging Face PyTorch Image Models)
- [CVE-2026-18309](https://cve.now/CVE-2026-18309.md): GIMP APNG File Parsing Integer Overflow Remote Code Execution Vulnerability (CVSS 7.8, GIMP)
- [CVE-2026-18308](https://cve.now/CVE-2026-18308.md): GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability (CVSS 7.8, GIMP)
- [CVE-2026-18307](https://cve.now/CVE-2026-18307.md): GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, GIMP)
- [CVE-2026-18306](https://cve.now/CVE-2026-18306.md): GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability (CVSS 7.8, GIMP)
- [CVE-2026-18305](https://cve.now/CVE-2026-18305.md): GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability (CVSS 7.8, GIMP)
- [CVE-2026-18304](https://cve.now/CVE-2026-18304.md): GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability (CVSS 7.8, GIMP)
- [CVE-2026-18303](https://cve.now/CVE-2026-18303.md): GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, GIMP)
- [CVE-2026-18302](https://cve.now/CVE-2026-18302.md): GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, GIMP)
- [CVE-2026-18301](https://cve.now/CVE-2026-18301.md): GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability (CVSS 7.8, GIMP)
- [CVE-2026-18300](https://cve.now/CVE-2026-18300.md): GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability (CVSS 7.8, GIMP)
- [CVE-2026-18299](https://cve.now/CVE-2026-18299.md): GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, GStreamer)
- [CVE-2026-18298](https://cve.now/CVE-2026-18298.md): GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, GStreamer)
- [CVE-2026-18297](https://cve.now/CVE-2026-18297.md): GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, GStreamer)
- [CVE-2026-18296](https://cve.now/CVE-2026-18296.md): GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, GStreamer)
- [CVE-2026-18295](https://cve.now/CVE-2026-18295.md): GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, GStreamer)
- [CVE-2026-18294](https://cve.now/CVE-2026-18294.md): OriginLab Origin Viewer OGW File Parsing Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, OriginLab Origin Viewer)
- [CVE-2026-18293](https://cve.now/CVE-2026-18293.md): OriginLab Origin Viewer OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, OriginLab Origin Viewer)
- [CVE-2026-18292](https://cve.now/CVE-2026-18292.md): OriginLab OriginPro OGG File Parsing Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, OriginLab OriginPro)
- [CVE-2026-18291](https://cve.now/CVE-2026-18291.md): OriginLab OriginPro OGW File Parsing Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, OriginLab OriginPro)
- [CVE-2026-61704](https://cve.now/CVE-2026-61704.md): link-preview-js DNS Rebinding SSRF Bypass / Incomplete Fix for CVE-2026-43897 (CVSS 7.5, OP-Engineering link-preview-js · link-preview-js)
- [CVE-2026-18290](https://cve.now/CVE-2026-18290.md): OriginLab OriginPro OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, OriginLab OriginPro)
- [CVE-2026-18289](https://cve.now/CVE-2026-18289.md): OriginLab OriginPro OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, OriginLab OriginPro)
- [CVE-2026-18288](https://cve.now/CVE-2026-18288.md): OriginLab OriginPro OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, OriginLab OriginPro)
- [CVE-2026-18287](https://cve.now/CVE-2026-18287.md): Aeon load\_time\_series\_segmentation\_benchmark Code Injection Remote Code Execution Vulnerability (CVSS 7.8, aeon)
- [CVE-2026-18286](https://cve.now/CVE-2026-18286.md): Aeon load\_human\_activity\_segmentation\_datasets Code Injection Remote Code Execution Vulnerability (CVSS 7.8, aeon)
- [CVE-2026-18285](https://cve.now/CVE-2026-18285.md): Aeon load\_rehab\_pile\_dataset Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 7.8, aeon)
- [CVE-2026-77176](https://cve.now/CVE-2026-77176.md): Kata-containers: insufficient validation of createcontainer mount and storage rules in genpolicy (CVSS 8.1, Red Hat OpenShift Container Platform)
- [CVE-2026-18284](https://cve.now/CVE-2026-18284.md): Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability (CVSS 7.8, Sony XAV-9500ES)
- [CVE-2026-18283](https://cve.now/CVE-2026-18283.md): Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability (CVSS 2.4, Sony XAV-9500ES)
- [CVE-2026-18282](https://cve.now/CVE-2026-18282.md): Sony XAV-9500ES AVRCP\_Br\_Response\_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.0, Sony XAV-9500ES)
- [CVE-2026-18281](https://cve.now/CVE-2026-18281.md): Sony XAV-9500ES l2\_reassemble\_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.0, Sony XAV-9500ES)
- [CVE-2026-18280](https://cve.now/CVE-2026-18280.md): Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability (CVSS 3.9, Sony XAV-9500ES)
- [CVE-2026-18279](https://cve.now/CVE-2026-18279.md): Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8, Sony XAV-9500ES)
- [CVE-2026-18278](https://cve.now/CVE-2026-18278.md): Sony XAV-9500ES prh\_l2\_decode\_packet Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.5, Sony XAV-9500ES)
- [CVE-2026-64846](https://cve.now/CVE-2026-64846.md): Nix: Arbitrary file truncation outside the sandbox with recursive-nix experimental feature (CVSS 2.8, NixOS nix)
- [CVE-2026-69183](https://cve.now/CVE-2026-69183.md): Monkeytype: Rate-limit and anti-brute-force controls bypassable via spoofed HTTP headers (forgotPasswordEmail/verificationEmail mail bombing and badAuth bypass) (CVSS 7.5, monkeytypegame monkeytype)
- [CVE-2026-18274](https://cve.now/CVE-2026-18274.md): Heimdall Data Database Proxy uploadJar Directory Traversal Remote Code Execution Vulnerability (CVSS 7.2, Heimdall Data Database Proxy)
- [CVE-2026-77019](https://cve.now/CVE-2026-77019.md): CodeAstro Apartment Visitor Management System forgotpw.php sql injection (CVSS 6.9, CodeAstro Apartment Visitor Management System)
- [CVE-2026-18273](https://cve.now/CVE-2026-18273.md): Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability (CVSS 6.6, Kenwood DNR1007XR)
- [CVE-2026-18272](https://cve.now/CVE-2026-18272.md): Kenwood DNR1007XR startUpdateProcess Command Injection Vulnerability (CVSS 6.8, Kenwood DNR1007XR)
- [CVE-2026-18271](https://cve.now/CVE-2026-18271.md): Kenwood DNR1007XR vCardParser Heap-based Buffer Overflow Code Execution Vulnerability (CVSS 6.8, Kenwood DNR1007XR)
- [CVE-2026-18270](https://cve.now/CVE-2026-18270.md): Kenwood DNR1007XR udhcpd Incorrect Permission Assignment Local Privilege Escalation Vulnerability (CVSS 7.8, Kenwood DNR1007XR)
- [CVE-2026-18269](https://cve.now/CVE-2026-18269.md): Kenwood DNR1007XR tchdr\_bytestream\_read Out-Of-Bounds Write Code Execution Vulnerability (CVSS 6.8, Kenwood DNR1007XR)
- [CVE-2026-18268](https://cve.now/CVE-2026-18268.md): Kenwood DNR1007XR JKGenService Command Injection Local Privilege Escalation Vulnerability (CVSS 7.0, Kenwood DNR1007XR)
- [CVE-2026-71492](https://cve.now/CVE-2026-71492.md): Banks: Path traversal in \`DirectoryPromptRegistry.set()\` allows arbitrary file write outside the registry root (CVSS 6.0, masci banks · banks)
- [CVE-2026-18267](https://cve.now/CVE-2026-18267.md): Kenwood DNR1007XR Firmware Update Link Following Code Execution Vulnerability (CVSS 6.8, Kenwood DNR1007XR)
- [CVE-2026-18265](https://cve.now/CVE-2026-18265.md): OSNEXUS QuantaStor Missing Authentication Remote Code Execution Vulnerability (CVSS 9.8, OSNEXUS QuantaStor)
- [CVE-2026-18264](https://cve.now/CVE-2026-18264.md): NoMachine getstat Command Injection Remote Code Execution Vulnerability (CVSS 8.8, NoMachine)
- [CVE-2026-54616](https://cve.now/CVE-2026-54616.md): NanaZip: Heap out-of-bounds read in NanaZip SquashFS LZ4 decompressor via unchecked negative return value (CVSS 7.1, M2Team NanaZip)
- [CVE-2026-54449](https://cve.now/CVE-2026-54449.md): LangBot: Authenticated RCE Via MCP Configuration (CVSS 8.8, langbot-app LangBot · langbot)
- [CVE-2026-77004](https://cve.now/CVE-2026-77004.md): Comfast CF-N1-S mbox-config sprintf command injection (CVSS 5.3, Comfast CF-N1-S)
- [CVE-2026-19611](https://cve.now/CVE-2026-19611.md): Wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: password keyspace reduction via nfkc fullwidth folding (CVSS 7.4, Red Hat Build of Apache Camel 3.33.3.SP2 · Red Hat Build… +7)
- [CVE-2026-63044](https://cve.now/CVE-2026-63044.md): Apache InLong: Authenticated SSRF via POST /api/node/testConnection (CVSS 5.4, Apache Software Foundation Apache InLong)
- [CVE-2026-75140](https://cve.now/CVE-2026-75140.md): jsoup Uncontrolled Resource Consumption in XmlTreeBuilder (CVSS 8.7, jhy soup · org.jsoup:jsoup)
- [CVE-2026-63043](https://cve.now/CVE-2026-63043.md): Apache InLong: Agent path traversal via unvalidated file source path (CVSS 7.5, Apache Software Foundation Apache InLong)
- [CVE-2026-63042](https://cve.now/CVE-2026-63042.md): Apache InLong: Missing authorization on DataNode management endpoints (CVSS 8.1, Apache Software Foundation Apache InLong)
- [CVE-2026-63040](https://cve.now/CVE-2026-63040.md): Apache InLong: Missing authorization in StreamSource forceDelete (CVSS 8.1, Apache Software Foundation Apache InLong)
- [CVE-2026-76999](https://cve.now/CVE-2026-76999.md): SourceCodester CET Automated Grading System with AI Predictive Analytics index.php add\_grade improper authorization (CVSS 5.3, SourceCodester CET Automated Grading System with AI Predict…)
- [CVE-2026-63039](https://cve.now/CVE-2026-63039.md): Apache InLong: SQL Injection via Unvalidated MyBatis Dollar-Sign Interpolation in AuditAlertRuleService (CVSS 9.8, Apache Software Foundation Apache InLong)
- [CVE-2026-63038](https://cve.now/CVE-2026-63038.md): Apache InLong: SQL Injection via String Concatenation Vulnerability Report (CVSS 9.8, Apache Software Foundation Apache InLong)
- [CVE-2026-63037](https://cve.now/CVE-2026-63037.md): Apache InLong: Unauthenticated SQL injection in Manager OpenAPI audit alert rule list endpoint (CVSS 9.8, Apache Software Foundation Apache InLong)
- [CVE-2026-63016](https://cve.now/CVE-2026-63016.md): Apache InLong: Ordinary users can create new packages (CVSS 5.3, Apache Software Foundation Apache InLong)
- [CVE-2026-63015](https://cve.now/CVE-2026-63015.md): Apache InLong: Non-template responsible persons can view template information (CVSS 4.3, Apache Software Foundation Apache InLong)
- [CVE-2026-76998](https://cve.now/CVE-2026-76998.md): SourceCodester Simple Online Food Ordering System ajax.php delete\_category sql injection (CVSS 6.9, SourceCodester Simple Online Food Ordering System)
- [CVE-2026-76997](https://cve.now/CVE-2026-76997.md): SourceCodester Simple Online Food Ordering System ajax.php save\_category sql injection (CVSS 5.3, SourceCodester Simple Online Food Ordering System)
- [CVE-2026-76996](https://cve.now/CVE-2026-76996.md): SourceCodester Simple Online Food Ordering System view\_order.php sql injection (CVSS 6.9, SourceCodester Simple Online Food Ordering System)
- [CVE-2026-63490](https://cve.now/CVE-2026-63490.md): Handlebars.java: Arbitrary file read in \`SpringTemplateLoader\` via URL-fragment suffix bypass (CVSS 7.5, jknack handlebars.java · com.github.jknack:handlebars-sprin…)
- [CVE-2026-76995](https://cve.now/CVE-2026-76995.md): SourceCodester Simple Online Food Ordering System ajax.php save\_menu unrestricted upload (CVSS 5.1, SourceCodester Simple Online Food Ordering System)
- [CVE-2026-49825](https://cve.now/CVE-2026-49825.md): lxml: javascript: URL bypass in Cleaner via xlink:href (CVSS 8.2, lxml · fedora-python lxml\_html\_clean +1)
- [CVE-2026-16932](https://cve.now/CVE-2026-16932.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 8.8, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16928](https://cve.now/CVE-2026-16928.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.5, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16927](https://cve.now/CVE-2026-16927.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.3, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16926](https://cve.now/CVE-2026-16926.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 9.1, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16925](https://cve.now/CVE-2026-16925.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.1, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16924](https://cve.now/CVE-2026-16924.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.5, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16923](https://cve.now/CVE-2026-16923.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.0, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-16922](https://cve.now/CVE-2026-16922.md): Vulnerabilities in IBM AIX and PowerVM VIOS (CVSS 7.0, IBM AIX · IBM PowerVM VIOS)
- [CVE-2026-44725](https://cve.now/CVE-2026-44725.md): EMQX: Stale plugins allow grants amplify a compromised admin/API key to remote code execution (CVSS 6.6, emqx)
- [CVE-2026-61898](https://cve.now/CVE-2026-61898.md): accountsservice: shell injection via attacker-controlled ~/.pam\_environment in Ubuntu language helper scripts (CVSS 7.8, Canonical accountsservice)
- [CVE-2026-61897](https://cve.now/CVE-2026-61897.md): accountsservice: incomplete privilege drop when running Ubuntu-specific language helper scripts (CVSS 7.8, Canonical accountsservice)
- [CVE-2026-73220](https://cve.now/CVE-2026-73220.md): CVAT: Stored XSS via annotation guides in audio tasks (CVSS 8.5, cvat-ai cvat)
- [CVE-2026-76993](https://cve.now/CVE-2026-76993.md): GreyDGL PentestGPT Web-Page Crawling injection (CVSS 2.3, GreyDGL PentestGPT)
- [CVE-2026-55558](https://cve.now/CVE-2026-55558.md): aiosmtplib: STARTTLS response injection (CVSS 5.9, cole aiosmtplib · aiosmtplib)
- [CVE-2026-76991](https://cve.now/CVE-2026-76991.md): itsourcecode Hospital Management System viewappointmentapproved.php sql injection (CVSS 5.3, itsourcecode Hospital Management System)
- [CVE-2026-70383](https://cve.now/CVE-2026-70383.md): Arbitrary file overwrite vulnerability in DigiDoc4 client (CVSS 8.4, Estonian Information System Authority (RIA) DigiDoc4)
- [CVE-2026-64972](https://cve.now/CVE-2026-64972.md): Reflected XSS in ATutor (CVSS 4.8, ATutor)
- [CVE-2026-64971](https://cve.now/CVE-2026-64971.md): Reflected XSS in ATutor (CVSS 4.8, ATutor)
- [CVE-2026-64970](https://cve.now/CVE-2026-64970.md): Stored XSS in ATutor (CVSS 5.1, ATutor)
- [CVE-2026-64969](https://cve.now/CVE-2026-64969.md): Insecure Direct Object Reference in ATutor (CVSS 5.3, ATutor)
- [CVE-2026-64968](https://cve.now/CVE-2026-64968.md): Server-Side Request Forgery in ATutor (CVSS 5.1, ATutor)
- [CVE-2026-64967](https://cve.now/CVE-2026-64967.md): Path Traversal in ATutor (CVSS 6.9, ATutor)
- [CVE-2026-64966](https://cve.now/CVE-2026-64966.md): Path Traversal leading to Remote Code Execution in ATutor (CVSS 8.7, ATutor)
- [CVE-2026-64965](https://cve.now/CVE-2026-64965.md): Missing Authorization Check in ATutor (CVSS 5.3, ATutor)
- [CVE-2026-76635](https://cve.now/CVE-2026-76635.md): baserCMS \< 5.3.0 SQL Injection and Code Injection via BcDatabaseService.php (CVSS 8.6, baserproject basercms)
- [CVE-2026-64964](https://cve.now/CVE-2026-64964.md): Generation of Predictable Email Confirmation Token in ATutor (CVSS 6.3, ATutor)
- [CVE-2026-64963](https://cve.now/CVE-2026-64963.md): Path Traversal in ATutor (CVSS 2.3, ATutor)
- [CVE-2026-64962](https://cve.now/CVE-2026-64962.md): Cross-Site Request Forgery (CSRF) in ATutor (CVSS 5.1, ATutor)
- [CVE-2026-64961](https://cve.now/CVE-2026-64961.md): Authentication Bypass in ATutor (CVSS 6.3, ATutor)
- [CVE-2026-64960](https://cve.now/CVE-2026-64960.md): Remote Code Execution via Unrestricted File Upload in ATutor (CVSS 8.7, ATutor)
- [CVE-2026-76634](https://cve.now/CVE-2026-76634.md): WeGIA \< 3.9.2 Insecure Direct Object Reference via profile\_funcionario.php (CVSS 7.1, LabRedesCefetRJ WeGIA)
- [CVE-2026-76633](https://cve.now/CVE-2026-76633.md): WeGIA \< 3.9.2 Authorization Bypass Password Change via alterarSenha (CVSS 8.6, LabRedesCefetRJ WeGIA)
- [CVE-2026-76833](https://cve.now/CVE-2026-76833.md): @cgauge/yaml npm Package Arbitrary Code Execution via eval() YAML Tag (CVSS 8.4, @cgauge/yaml)
- [CVE-2026-15706](https://cve.now/CVE-2026-15706.md): Missing Authentication for Critical Function in Management API in Baylan Water Meters's BMS (CVSS 9.8, Baylan Measuring Instruments Industry and Trade Baylan Smar…)
- [CVE-2026-76990](https://cve.now/CVE-2026-76990.md): code-projects Simple Inventory System delete.php sql injection (CVSS 6.9, code-projects Simple Inventory System)
- [CVE-2026-76989](https://cve.now/CVE-2026-76989.md): liftoff-sr CIPster TCP Encapsulation Receive Path encap.cc out-of-bounds (CVSS 6.9, liftoff-sr CIPster)
- [CVE-2026-76988](https://cve.now/CVE-2026-76988.md): liftoff-sr CIPster ForwardOpen cipconnectionmanager.cc forward\_open out-of-bounds (CVSS 6.9, liftoff-sr CIPster)
- [CVE-2026-77118](https://cve.now/CVE-2026-77118.md): Out-of-bounds write in GraphicsMagick PCD decoder (CVSS 8.4, GraphicsMagick Group GraphicsMagick · Debian graphicsmag… +1)
- [CVE-2026-28164](https://cve.now/CVE-2026-28164.md): WordPress Easy Elementor Addons plugin \<= 2.3.7 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 9.6, HashThemes Easy Elementor Addons)
- [CVE-2026-18482](https://cve.now/CVE-2026-18482.md): CVE-2026-18482 (CVSS 9.8, Klarso neo-mjs)
- [CVE-2026-28163](https://cve.now/CVE-2026-28163.md): WordPress New User Approve plugin \<= 3.2.8 - Broken Access Control vulnerability (CVSS 5.3, myCred New User Approve)
- [CVE-2026-74011](https://cve.now/CVE-2026-74011.md): WordPress InfiniteWP Client plugin \<= 1.13.9 - SQL Injection vulnerability (CVSS 7.6, revmakx InfiniteWP Client)
- [CVE-2026-21784](https://cve.now/CVE-2026-21784.md): HCL IntelliOps Event Management is affected by multiple security vulnerabilities. (CVSS 4.8, HCL Software IEM)
- [CVE-2025-62299](https://cve.now/CVE-2025-62299.md): HCL IntelliOps Event Management is affected by multiple security vulnerabilities. (CVSS 6.6, HCL Software IEM)
- [CVE-2026-76987](https://cve.now/CVE-2026-76987.md): liftoff-sr CIPster Generic Attribute Logic ciptypes.h SetAttrData memory corruption (CVSS 6.9, liftoff-sr CIPster)
- [CVE-2025-62300](https://cve.now/CVE-2025-62300.md): HCL IntelliOps Event Management is affected by multiple security vulnerabilities. (CVSS 5.9, HCL Software IEM)
- [CVE-2026-7485](https://cve.now/CVE-2026-7485.md): Frozen BI aggregations leak host and service names to unauthorized users (CVSS 2.3, Checkmk)
- [CVE-2025-62306](https://cve.now/CVE-2025-62306.md): HCL IntelliOps Event Management is affected by multiple security vulnerabilities. (CVSS 5.0, HCL Software IEM)
- [CVE-2025-62307](https://cve.now/CVE-2025-62307.md): HCL IntelliOps Event Management is affected by multiple security vulnerabilities. (CVSS 5.4, HCL Software IEM)
- [CVE-2026-74020](https://cve.now/CVE-2026-74020.md): WordPress Koji theme \<= 2.2.1 - Broken Access Control vulnerability (CVSS 7.5, Anders Norén Koji)
- [CVE-2026-74019](https://cve.now/CVE-2026-74019.md): WordPress EPROLO Dropshipping plugin \<= 2.4.2 - Broken Access Control vulnerability (CVSS 7.1, paulepro2019 EPROLO Dropshipping)
- [CVE-2026-74018](https://cve.now/CVE-2026-74018.md): WordPress Warehouse Cargo theme \<= 2.6.9 - Arbitrary File Upload vulnerability (CVSS 9.9, themagnifico52 Warehouse Cargo)
- [CVE-2026-74016](https://cve.now/CVE-2026-74016.md): WordPress Smart Cleaning theme \<= 4.8.6 - Arbitrary File Upload vulnerability (CVSS 9.9, themagnifico52 Smart Cleaning)
- [CVE-2026-74014](https://cve.now/CVE-2026-74014.md): WordPress IT Residence theme \<= 3.2.1 - Arbitrary File Upload vulnerability (CVSS 9.9, indithemes IT Residence)
- [CVE-2026-74013](https://cve.now/CVE-2026-74013.md): WordPress eShipper Commerce plugin \<= 2.16.13 - SQL Injection vulnerability (CVSS 8.5, WordPress.com eShipper Commerce)
- [CVE-2026-74001](https://cve.now/CVE-2026-74001.md): WordPress User Registration & Membership Pro plugin \<= 5.4.5 - Account Takeover vulnerability (CVSS 9.8, WPEverest User Registration & Membership Pro)
- [CVE-2026-73998](https://cve.now/CVE-2026-73998.md): WordPress WP w3all phpBB plugin \<= 3.0.5 - SQL Injection vulnerability (CVSS 8.5, axew3 WP w3all phpBB)
- [CVE-2026-73993](https://cve.now/CVE-2026-73993.md): WordPress FundEngine plugin \<= 1.7.9 - PHP Object Injection vulnerability (CVSS 9.8, Roxnor FundEngine)
- [CVE-2026-73992](https://cve.now/CVE-2026-73992.md): WordPress Query Wrangler plugin \<= 1.5.57 - Remote Code Execution (RCE) vulnerability (CVSS 9.9, Jonathan Daggerhart Query Wrangler)
- [CVE-2026-73402](https://cve.now/CVE-2026-73402.md): WordPress WP BASE Booking plugin \<= 6.3.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Hakan Ozevin WP BASE Booking)
- [CVE-2026-68566](https://cve.now/CVE-2026-68566.md): WordPress BookingPress Appointment Booking Pro plugin \<= 6.0.2 - SQL Injection vulnerability (CVSS 9.3, Repute Infosystems BookingPress Appointment Booking Pro)
- [CVE-2026-68564](https://cve.now/CVE-2026-68564.md): WordPress NotificationX Pro plugin \<= 3.1.4 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, NotificationX Pro)
- [CVE-2026-66682](https://cve.now/CVE-2026-66682.md): WordPress Abandoned Cart Pro for WooCommerce plugin \<= 10.4.0 - Privilege Escalation vulnerability (CVSS 9.8, Tyche Softwares. Abandoned Cart Pro for WooCommerce)
- [CVE-2026-66680](https://cve.now/CVE-2026-66680.md): WordPress Locatoraid Store Locator plugin \<= 3.9.72 - SQL Injection vulnerability (CVSS 9.3, plainware Locatoraid Store Locator)
- [CVE-2026-66677](https://cve.now/CVE-2026-66677.md): WordPress Leyka plugin \<= 3.32.3 - Broken Authentication vulnerability (CVSS 7.6, VaultDweller Leyka)
- [CVE-2026-66673](https://cve.now/CVE-2026-66673.md): WordPress Flatastic theme \<= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Monkeysan Flatastic)
- [CVE-2026-66672](https://cve.now/CVE-2026-66672.md): WordPress Flatastic theme \<= 2.0 - PHP Object Injection vulnerability (CVSS 9.8, Monkeysan Flatastic)
- [CVE-2026-66649](https://cve.now/CVE-2026-66649.md): WordPress Directory Pro plugin \<= 2.5.8 - SQL Injection vulnerability (CVSS 9.3, e-plugins Directory Pro)
- [CVE-2026-66647](https://cve.now/CVE-2026-66647.md): WordPress Homlisti theme \<= 3.1.2 - Broken Access Control vulnerability (CVSS 6.5, RadiusTheme Homlisti)
- [CVE-2026-66616](https://cve.now/CVE-2026-66616.md): WordPress Form Maker by 10Web plugin \<= 1.15.49 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Form Maker by 10Web)
- [CVE-2026-66615](https://cve.now/CVE-2026-66615.md): WordPress Podlove Podcast Publisher plugin \<= 4.5.4 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Eric Teubert Podlove Podcast Publisher)
- [CVE-2026-66614](https://cve.now/CVE-2026-66614.md): WordPress SEO Plugin by Squirrly SEO plugin \<= 14.2.2 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, SEO Squirrly SEO Plugin by Squirrly SEO)
- [CVE-2026-66612](https://cve.now/CVE-2026-66612.md): WordPress Aora theme \<= 1.3.19 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, thembay Aora)
- [CVE-2026-66611](https://cve.now/CVE-2026-66611.md): WordPress Paymob for WooCommerce plugin \<= 4.1.10 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Paymob for WooCommerce)
- [CVE-2026-66609](https://cve.now/CVE-2026-66609.md): WordPress TheGem (Elementor) theme \<= 5.12.3 - SQL Injection vulnerability (CVSS 9.3, CodexThemes TheGem)
- [CVE-2026-66607](https://cve.now/CVE-2026-66607.md): WordPress Advance Product Search plugin \<= 1.4.8 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, ThemeHunk Advance Product Search)
- [CVE-2026-66606](https://cve.now/CVE-2026-66606.md): WordPress SmartSMTP plugin \<= 1.2.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, ThemeGrill SmartSMTP)
- [CVE-2026-66605](https://cve.now/CVE-2026-66605.md): WordPress Swatchly – WooCommerce Variation Swatches for Products plugin \<= 1.4.13 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, HasThemes Swatchly – WooCommerce Variation Swatches for Pro…)
- [CVE-2026-66604](https://cve.now/CVE-2026-66604.md): WordPress GeoDirectory plugin \<= 2.8.173 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Paolo GeoDirectory)
- [CVE-2026-66601](https://cve.now/CVE-2026-66601.md): WordPress Media LIbrary Assistant plugin \<= 3.39 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, David Lingren Media LIbrary Assistant)
- [CVE-2026-66600](https://cve.now/CVE-2026-66600.md): WordPress Media LIbrary Assistant plugin \<= 3.39 - Arbitrary File Upload vulnerability (CVSS 9.1, David Lingren Media LIbrary Assistant)
- [CVE-2026-66598](https://cve.now/CVE-2026-66598.md): WordPress B2BKing Premium plugin \<= 5.6.07 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Kingtech LLC. B2BKing Premium)
- [CVE-2026-66597](https://cve.now/CVE-2026-66597.md): WordPress wpDataTables plugin \<= 6.5.1.4 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Melograno Venture Studio wpDataTables)
- [CVE-2026-66595](https://cve.now/CVE-2026-66595.md): WordPress WP Data Access plugin \<= 5.5.80 - Broken Access Control vulnerability (CVSS 5.9, Passionate Programmer Peter WP Data Access)
- [CVE-2026-66594](https://cve.now/CVE-2026-66594.md): WordPress WordPress Persistent Login plugin \<= 3.1.0 - SQL Injection vulnerability (CVSS 8.5, lukeseager WordPress Persistent Login)
- [CVE-2026-66593](https://cve.now/CVE-2026-66593.md): WordPress Security & Malware scan by CleanTalk plugin \<= 2.184 - SQL Injection vulnerability (CVSS 9.3, Security & Malware scan by CleanTalk)
- [CVE-2026-66592](https://cve.now/CVE-2026-66592.md): WordPress rtMedia for WordPress, BuddyPress and bbPress plugin \<= 4.7.11 - SQL Injection vulnerability (CVSS 9.3, rtCamp rtMedia for WordPress, BuddyPress and bbPress)
- [CVE-2026-66590](https://cve.now/CVE-2026-66590.md): WordPress Tagembed plugin \<= 7.4 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Tagembed)
- [CVE-2026-66586](https://cve.now/CVE-2026-66586.md): WordPress WP Cafe Pro plugin \< 3.0.15 - Local File Inclusion vulnerability (CVSS 6.6, Themewinter WP Cafe Pro)
- [CVE-2026-66583](https://cve.now/CVE-2026-66583.md): WordPress Forminator plugin \<= 1.57.0 - PHP Object Injection vulnerability (CVSS 9.8, WPMU DEV Forminator)
- [CVE-2026-66582](https://cve.now/CVE-2026-66582.md): WordPress TranslatePress plugin \<= 3.3.2 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Cozmoslabs TranslatePress)
- [CVE-2026-66581](https://cve.now/CVE-2026-66581.md): WordPress JetEngine plugin \<= 3.8.14.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Crocoblock. Jetimpex JetEngine)
- [CVE-2026-28150](https://cve.now/CVE-2026-28150.md): WordPress Golo Framework plugin \< 1.7.5 - Local File Inclusion vulnerability (CVSS 8.1, uxper Golo Framework)
- [CVE-2025-53999](https://cve.now/CVE-2025-53999.md): WordPress Altair theme \<= 5.2.2 - Broken Access Control vulnerability (CVSS 6.5, ThemeGoods Altair)
- [CVE-2025-15689](https://cve.now/CVE-2025-15689.md): WordPress Capella theme \<= 2.5.5 - Privilege Escalation vulnerability (CVSS 9.8, ThemeGoods Capella)
- [CVE-2025-15688](https://cve.now/CVE-2025-15688.md): WordPress Capella theme \<= 2.5.5 - SQL Injection vulnerability (CVSS 9.3, ThemeGoods Capella)
- [CVE-2025-15637](https://cve.now/CVE-2025-15637.md): WordPress Shuffle theme \<= 1.8 - Local File Inclusion vulnerability (CVSS 8.1, Edge Themes Shuffle)
- [CVE-2026-74021](https://cve.now/CVE-2026-74021.md): WordPress Chaplin theme \<= 2.6.8 - Broken Access Control vulnerability (CVSS 7.5, Anders Norén Chaplin)
- [CVE-2026-77085](https://cve.now/CVE-2026-77085.md): n8n before 2.34.1 SSRF Protection Bypass via SearXNG Tool (CVSS 6.3, n8n-io n8n)
- [CVE-2026-77084](https://cve.now/CVE-2026-77084.md): n8n before 1.123.69 Remote Code Execution via Git Node Configuration Values (CVSS 7.7, n8n-io n8n)
- [CVE-2026-77083](https://cve.now/CVE-2026-77083.md): n8n before 1.123.69 Code Node Sandbox Escape via Function.prototype Pollution (CVSS 6.0, n8n-io n8n)
- [CVE-2026-77082](https://cve.now/CVE-2026-77082.md): n8n before 1.123.69 ReDoS via Filter and Switch Node (CVSS 5.3, n8n-io n8n)
- [CVE-2026-77081](https://cve.now/CVE-2026-77081.md): n8n before 1.123.69 Allowed-Domains Bypass via GraphQL Node (CVSS 5.1, n8n-io n8n)
- [CVE-2026-77080](https://cve.now/CVE-2026-77080.md): n8n before 1.123.69 Arbitrary File Read and Write via Snowflake (CVSS 8.7, n8n-io n8n)
- [CVE-2026-77079](https://cve.now/CVE-2026-77079.md): n8n before 2.34.1 Authorization Bypass via Custom Role Deletion (CVSS 7.4, n8n-io n8n)
- [CVE-2026-77077](https://cve.now/CVE-2026-77077.md): n8n before 1.123.69 Remote Code Execution via EventEmitter Prototype Pollution (CVSS 7.2, n8n-io n8n)
- [CVE-2026-77076](https://cve.now/CVE-2026-77076.md): n8n before 1.123.69 Credential Leak via GraphQL Node Error (CVSS 7.1, n8n-io n8n)
- [CVE-2026-77075](https://cve.now/CVE-2026-77075.md): n8n before 1.123.69 Expression Injection via Resource Locator (CVSS 8.4, n8n-io n8n)
- [CVE-2026-77074](https://cve.now/CVE-2026-77074.md): n8n before 1.123.69 SSRF via Edit Image Node (CVSS 6.0, n8n-io n8n)
- [CVE-2026-77073](https://cve.now/CVE-2026-77073.md): n8n before 2.34.1 Cross-Project Credential Access via MCP (CVSS 5.3, n8n-io n8n)
- [CVE-2026-77072](https://cve.now/CVE-2026-77072.md): n8n before 1.123.69 Stored XSS via Form Completion Page (CVSS 8.4, n8n-io n8n)
- [CVE-2026-77071](https://cve.now/CVE-2026-77071.md): n8n before 1.123.69 PostgREST Filter Injection via Supabase (CVSS 7.1, n8n-io n8n)
- [CVE-2026-77070](https://cve.now/CVE-2026-77070.md): n8n before 1.123.69 NoSQL Injection via MongoDB Node (CVSS 7.1, n8n-io n8n)
- [CVE-2026-77069](https://cve.now/CVE-2026-77069.md): n8n before 1.123.69 SSRF Protection Bypass via OAuth2 (CVSS 2.3, n8n-io n8n)
- [CVE-2026-77068](https://cve.now/CVE-2026-77068.md): n8n before 2.34.1 Remote Code Execution via Path Traversal (CVSS 8.7, n8n-io n8n)
- [CVE-2026-77067](https://cve.now/CVE-2026-77067.md): Omnivore Stored Server-Side Request Forgery via the setWebhook Mutation (CVSS 5.3, omnivore-app omnivore)
- [CVE-2026-77066](https://cve.now/CVE-2026-77066.md): Omnivore Server-Side Request Forgery via the scanFeeds GraphQL Query (CVSS 5.3, omnivore-app omnivore)
- [CVE-2026-73199](https://cve.now/CVE-2026-73199.md): Ipa: freeipa: null pointer dereference in \`ipa-enrollment\` extended operation (\`join\_oid\`) via missing request value (CVSS 6.5, Red Hat Enterprise Linux)
- [CVE-2026-11861](https://cve.now/CVE-2026-11861.md): Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships (CVSS 9.6, Red Hat Enterprise Linux)
- [CVE-2026-73198](https://cve.now/CVE-2026-73198.md): Ipa: freeipa: unauthenticated dos in \`/ipa/i18n\_messages\` via unbounded request body read (CVSS 7.5, Red Hat Enterprise Linux)
- [CVE-2026-13097](https://cve.now/CVE-2026-13097.md): Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore (CVSS 8.7, Red Hat Enterprise Linux)
- [CVE-2026-77026](https://cve.now/CVE-2026-77026.md): Joomla Extension - tassos.gr - Client-controlled validation bypass in Convert Forms extension \< 5.2.5 (CVSS 6.9, tassos.gr Convert Forms extension for Joomla)
- [CVE-2026-73196](https://cve.now/CVE-2026-73196.md): Ipa: freeipa: authenticated dos in \`otptoken-add\` via unbounded otp key decoding/re-encoding (CVSS 4.3, Red Hat Enterprise Linux)
- [CVE-2026-73197](https://cve.now/CVE-2026-73197.md): Ipa: freeipa: unauthenticated dos in \`/ipa/migration/migration.py\` via unbounded request body read (CVSS 7.5, Red Hat Enterprise Linux)
- [CVE-2026-18917](https://cve.now/CVE-2026-18917.md): Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflow (CVSS 7.8, Red Hat Enterprise Linux)
- [CVE-2026-76610](https://cve.now/CVE-2026-76610.md): Joomla Extension - yootheme.com - Unauthenticated tag modifications in Zoo \< 4.1.65 (CVSS 6.9, yootheme.com Zoo extension for Joomla)
- [CVE-2026-77014](https://cve.now/CVE-2026-77014.md): Libsoup: libsoup: integer truncation in sort\_ranges() comparator causes silent omission of http range responses (CVSS 5.3, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-14953](https://cve.now/CVE-2026-14953.md): Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is Missing Authorization due to improper enforcement of role-based access control (CVSS 5.3, Frauscher Sensortechnik FDS)
- [CVE-2026-14952](https://cve.now/CVE-2026-14952.md): Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is offering files with sensitive information for download without requiring authentication (CVSS 8.7, Frauscher Sensortechnik FDS)
- [CVE-2026-14951](https://cve.now/CVE-2026-14951.md): Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Cross-Site Request Forgery due to missing CSFR protection headers (CVSS 8.6, Frauscher Sensortechnik FDS)
- [CVE-2026-14950](https://cve.now/CVE-2026-14950.md): Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Insufficient Session Expiration due to flawed session expiration logic (CVSS 9.2, Frauscher Sensortechnik FDS)
- [CVE-2026-14949](https://cve.now/CVE-2026-14949.md): Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Incorrect Authorization due to improper enforcement of role-based access control (CVSS 8.5, Frauscher Sensortechnik FDS)
- [CVE-2026-14948](https://cve.now/CVE-2026-14948.md): Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Insertion of Sensitive Information into Log File via error log archives (CVSS 8.7, Frauscher Sensortechnik FDS)
- [CVE-2026-14947](https://cve.now/CVE-2026-14947.md): Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Remote Code Execution via malicious ZIP file (CVSS 8.6, Frauscher Sensortechnik FDS)
- [CVE-2026-14946](https://cve.now/CVE-2026-14946.md): Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Remote Code Execution via malicious configuration file. (CVSS 8.6, Frauscher Sensortechnik FDS)
- [CVE-2026-75948](https://cve.now/CVE-2026-75948.md): Joomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12 (CVSS 8.6, icagenda.com iCagenda extension for Joomla)
- [CVE-2026-76564](https://cve.now/CVE-2026-76564.md): Joomla Extension - phoca.cz - Stored XSS via User-Agent header in Admin Order View in Phoca Cart 5.0.0-6.1.7 (CVSS 8.6, phoca.cz Phoca Cart extension for Joomla)
- [CVE-2026-76569](https://cve.now/CVE-2026-76569.md): Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4 (CVSS 5.3, phoca.cz Phoca Download extension for Joomla)
- [CVE-2026-76565](https://cve.now/CVE-2026-76565.md): Joomla Extension - phoca.cz - Reflected XSS via price\_from & price\_to filter parameters in Phoca Cart 5.0.0-6.1.7 (CVSS 5.3, phoca.cz Phoca Cart extension for Joomla)
- [CVE-2025-14601](https://cve.now/CVE-2025-14601.md): vsDesk Task Scheduler OS Command Injection (CVSS 8.6, vsDesk)
- [CVE-2026-14163](https://cve.now/CVE-2026-14163.md): In affected versions of Octopus Server under certain circumstances it is possible for sensitive variables to be printed in the deployment va (CVSS 7.1, Octopus Deploy Octopus Server)
- [CVE-2025-14602](https://cve.now/CVE-2025-14602.md): Weak File Name Generation in vsDesk (CVSS 5.3, vsDesk)
- [CVE-2026-71368](https://cve.now/CVE-2026-71368.md): F-RevoCRM contains a cross-site scripting vulnerability. (CVSS 6.1, Thinkingreed F-RevoCRM)
- [CVE-2026-75860](https://cve.now/CVE-2026-75860.md): JSON Options \<= 0.0.4 - Unauthenticated Arbitrary Options Update (CVSS 9.8, JSON Options)
- [CVE-2026-74992](https://cve.now/CVE-2026-74992.md): Kirki \< 6.2.3 - Editor+ Stored XSS via Font Zip Upload (CVSS 6.8, Kirki)
- [CVE-2026-19699](https://cve.now/CVE-2026-19699.md): GutenKit 2.4.12 - 2.4.15 - Contributor+ Mailchimp Audience Data Disclosure (CVSS 2.7, GutenKit)
- [CVE-2026-19697](https://cve.now/CVE-2026-19697.md): GutenKit \< 2.5.0 - Author+ Stored XSS via SVG Upload (CVSS 6.8, GutenKit)
- [CVE-2026-19615](https://cve.now/CVE-2026-19615.md): Admin and Site Enhancements \< 9.0.1 - Author+ Stored XSS via SVG Upload over XML-RPC (CVSS 6.8, Admin and Site Enhancements)
- [CVE-2026-15049](https://cve.now/CVE-2026-15049.md): Depicter \< 4.8.0 - Editor+ Arbitrary File Upload via ZIP Import (CVSS 7.2, Depicter — Popup & Slider Builder)
- [CVE-2026-13405](https://cve.now/CVE-2026-13405.md): Royal Elementor Addons \< 1.7.1066 - Admin+ Remote Code Execution via Widget Builder (CVSS 6.6, Royal Addons for Elementor)
- [CVE-2026-17153](https://cve.now/CVE-2026-17153.md): AI Agent by SiteGround \<= 1.2.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary Media Upload via /generate-content REST Endpoint (CVSS 5.3, AI Agent by SiteGround)
- [CVE-2026-75963](https://cve.now/CVE-2026-75963.md): Events Made Easy \<= 3.2.5 - Authenticated (Contributor+) Local File Inclusion via 'wp\_page\_template' Event Property (CVSS 7.5, liedekef Events Made Easy)
- [CVE-2026-73542](https://cve.now/CVE-2026-73542.md): Multiple SEIKO EPSON printers and scanners contain revoked root certificates. (CVSS 3.7, Multiple SEIKO EPSON printers and scanners)
- [CVE-2026-76957](https://cve.now/CVE-2026-76957.md): libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. (CVSS 4.9, libexpat project libexpat)
- [CVE-2026-76956](https://cve.now/CVE-2026-76956.md): In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in bein (CVSS 5.9, libexpat project libexpat)
- [CVE-2026-76800](https://cve.now/CVE-2026-76800.md): DeDeCMS select\_media\_post.php unrestricted upload (CVSS 5.3, DeDeCMS)
- [CVE-2026-76799](https://cve.now/CVE-2026-76799.md): code-projects Login Registration System SQL Database Backup login\_registration\_system.sql file access (CVSS 6.9, code-projects Login Registration System)
- [CVE-2026-76795](https://cve.now/CVE-2026-76795.md): AeternaLabsHQ PullMD REST API Endpoint api server-side request forgery (CVSS 6.9, AeternaLabsHQ PullMD)
- [CVE-2026-75628](https://cve.now/CVE-2026-75628.md): Punk::OAuth2 versions before 0.03 for Perl allow an attacker-chosen off-site redirect after login because same\_origin\_path accepts a backslash or tab in the return parameter (CVSS 5.7, Punk-OAuth2)
- [CVE-2026-76785](https://cve.now/CVE-2026-76785.md): amirsanni Mini-Inventory-and-Sales-Management-System Transaction.php getAll sql injection (CVSS 5.3, amirsanni Mini-Inventory-and-Sales-Management-System)
- [CVE-2026-76783](https://cve.now/CVE-2026-76783.md): DeDeCMS advancedsearch.php sql injection (CVSS 6.9, DeDeCMS)
- [CVE-2026-76764](https://cve.now/CVE-2026-76764.md): code-projects Employee Management System Admin Login Endpoint aprocess.php sql injection (CVSS 6.9, code-projects Employee Management System)
- [CVE-2025-52182](https://cve.now/CVE-2025-52182.md): The Library Corporation LS2 Admin v5.7 to v5.8.0 was discovered to contain an information disclosure vulnerability. (CVSS 7.5)
- [CVE-2026-52021](https://cve.now/CVE-2026-52021.md): An issue in code100xDevs 100xdevs CMS v.1.0 (2026-04-30) allows a remote attacker to obtain sensitive information via the src/middleware.ts, (CVSS 7.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-08-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.