CVEs published August 24, 2026
309 CVEs were published on August 24, 2026: 45 critical, 166 high.
- Published
- 309
- Critical
- 45
- High
- 166
- Medium
- 94
- Low
- 4
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 160
Most affected products
- DrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26
- 29
- ransomlook
- 13
- DrayTek VigorAP
- 11
- dolibarr
- 10
- Apache Software Foundation Apache Camel · org.apache.camel:…
- 8
- HCLSoftware HCL Hive
- 7
- Autodesk 3ds Max
- 5
- rocq-prover rocq
- 5
- SourceCodester Simple Online Food Ordering System
- 5
- Zscaler Client Connector
- 5
Critical 45
- CVE-2026-78267WordPress TranslatePress plugin <= 3.3.2 - Privilege Escalation vulnerabilityCozmoslabs TranslatePress
- CVE-2026-78265WordPress The Events Calendar plugin <= 6.17.2 - PHP Object Injection vulnerabilityNexcess The Events Calendar
- CVE-2026-78262WordPress WP Project Manager plugin <= 4.0.6 - PHP Object Injection vulnerabilityweDevs WP Project Manager
- CVE-2026-32563WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - PHP Object Injection vulnerabilityA CPT ACPT (Pro) - Custom Post Types Plugin for WordPress
- CVE-2026-32559WordPress UltimateAI plugin <= 3.1.0 - Arbitrary File Upload vulnerabilitytophive UltimateAI
- CVE-2026-32555WordPress Boost plugin <= 2.0.4 - SQL Injection vulnerabilityPixelYourSite Professional Boost
- CVE-2026-32554WordPress WooBeWoo Product Filter Pro plugin <= 3.1.8 - SQL Injection vulnerabilityWBW WooBeWoo Product Filter Pro
- CVE-2026-77337CakePHP: Potential Authentication bypass with CookieAuthenticatorcakephp authentication
- CVE-2026-77635CakePHP: FunctionsBuilder::jsonValue() vulerable to SQL injection with PostgresDrivercakephp · cakephp/database +1
- CVE-2026-78555RansomLook API Key Disclosure Through /admin/apikeys HTML Sourceransomlook
- CVE-2026-39975Combodo iTop: Remote code execution using external auth variable valueCombodo iTop
- CVE-2026-76835OAuth2 Proxy 7.15.2 through 7.15.4 Authentication Bypass via X-Forwarded-Uri Under the Default Trusted Proxy Setoauth2-proxy · github.com/oauth2-proxy/oauth2-proxy/v7 +1
- CVE-2026-71921DrayTek VigorSwitch Multiple Models Pre-Authentication OS Command Injection via setget.cgiDrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26
- CVE-2026-71914DrayTek VigorAP Multiple Models Pre-Authentication OS Command Injection via dray_apmDrayTek VigorAP
- CVE-2025-36939Multiple vulnerabilities exist in OpenThread's handling of MLE packets.Google Nest
- CVE-2026-78329Apache Camel: Camel-Undertow: the endpoint discarded the undertow-specific header filter strategy in favour of the base HTTP one, so the undertow filtering never ran on endpoint-configured routesApache Software Foundation Apache Camel · org.apache.camel:…
- CVE-2026-71300Apache Camel: Camel-Atmosphere-Websocket: WebSocket dispatch header injectionApache Software Foundation Apache Camel · org.apache.camel:…
- CVE-2026-66906Apache Camel: Camel-Azure-Storage-Blob: the downloadBlobToFile operation built the local download target from the remote blob name without constraining it to the configured fileDirApache Software Foundation Apache Camel · org.apache.camel:…
- CVE-2026-77915rConfig Core 8.0.0 < 8.2.10 Unauthorized Admin Registration via web.phprconfig
- CVE-2026-76071Netis NC63 V3.0.0.3327 Stack Buffer Overflow via destHost ParameterNetis Systems NC63
- CVE-2026-76070Netis NC63 V3.0.0.3327 Stack Buffer Overflow via Login Password ParameterNetis Systems NC63
- CVE-2026-19874Konami's Metal Gear Online 3 contains a heap-based buffer overflowKonami Metal Gear Online
- CVE-2026-78387RansomLook Missing Authorization in Web Configuration Editor Allows Application Configuration Modificationransomlook
- CVE-2026-67602phpIPAM < 1.8.2 Authentication Bypass via REST API Object Cachephpipam
- CVE-2026-59568Remote Code ExecutionZscaler Client Connector
- CVE-2026-59564Authentication bypass between ZCC and client connector portalZscaler Client Connector
- CVE-2026-78372RansomLook Missing Authorization Allows Disclosure of Private Group and Ransom Note Dataransomlook
- CVE-2026-77995Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0, OAuth Single Sign-On – OIDC SSO < 1.2.2, Login with Keycloak OAuth Single Sign-On (SSO) < 1.2.2, Single Sign-On for Educational Institutes < 1.2.2miniorange.com miniOrange OAuth Client (free) extension… +2
- CVE-2026-78370RansomLook Unauthenticated Database Export Exposes Private Dataransomlook
- CVE-2026-78365IDOR and missing authorization in Prospero Flow CRM supplier API allows cross-tenant read and modificationRoskus Prospero Flow CRM
- CVE-2026-66650WordPress FreightCo theme <= 1.1.15 - PHP Object Injection vulnerabilityTheme-Rex FreightCo
- CVE-2026-66648WordPress Jawn theme <= 1.4.2 - Privilege Escalation vulnerabilityMVPThemes Jawn
- CVE-2026-66587WordPress WP Cafe Pro plugin < 3.0.15 - Local File Inclusion vulnerabilityWPCafe WP Cafe Pro
- CVE-2026-32558WordPress Affiliate Pro - Affiliate Program for WooCommerce & WordPress plugin <= 8.9.1 - Privilege Escalation vulnerabilityRedefiningTheWeb Affiliate Pro - Affiliate Program for WooC…
- CVE-2026-32551WordPress Woo Essential plugin <= 4.3.0 - SQL Injection vulnerabilityDiviNext Woo Essential
- CVE-2026-28165WordPress Digits plugin <= 9.2 - Privilege Escalation vulnerabilityUnitedOver Digits
- CVE-2026-66897Instance template path traversal allows arbitrary host file write as rootCanonical LXD
- CVE-2026-77994Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5joomlack.fr Page Builder CK extension for Joomla
- CVE-2026-78251DJI Drone FTP Service Allows Unrestricted Storage Consumption of the /blackbox DirectoryDJI Neo · DJI Flip +4
- CVE-2026-782114MOSAn Security Technology｜4MOSAn GCB Doctor - OS Command Injection4MOSAn Security Technology 4MOSAn GCB Doctor
- CVE-2026-78169UTT HiPER 1250GW HTTP Request aspRemoteApConfTempSend strcpy stack-based overflowUTT HiPER 1250GW
- CVE-2026-78168EFM ipTIME T24000M Session Validation httpcon_check_session_url improper authenticationEFM ipTIME T24000M
- CVE-2026-78167EFM ipTIME T16000M Session Validation httpcon_check_session_url improper authenticationEFM ipTIME T16000M
- CVE-2026-78207exceljs through 4.4.0 Prototype Pollution via deepMerge Reached From Note Serializationexceljs
- CVE-2026-52490An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() fun
High 166
- CVE-2026-53532OpenEXR: Unhandled assert abort in HTJ2K decoder via crafted QCD marker (DoS)AcademySoftwareFoundation openexr
- CVE-2026-78282WordPress Stripe Payments plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerabilitymra13 Stripe Payments
- CVE-2026-78268WordPress Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads plugin <= 1.2.0 - Sensitive Data Exposure vulnerabilityExtend Themes Lead Generation Contact Widget & AI Chatb…
- CVE-2026-78264WordPress Toolset Blocks plugin <= 1.6.26 - Cross Site Scripting (XSS) vulnerabilitySite Building with Toolset Toolset Blocks
- CVE-2026-78263WordPress Event Tickets plugin <= 5.29.2.1 - Cross Site Scripting (XSS) vulnerabilityNexcess Event Tickets
- CVE-2026-78259WordPress WPLegalPages plugin <= 3.7.0 - Broken Authentication vulnerabilityWP Legal Pages WPLegalPages
- CVE-2026-32561WordPress Booking Hub plugin <= 1.3.0 - Privilege Escalation vulnerabilityLiquidThemes Booking Hub
- CVE-2026-32560WordPress MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator plugin <= 1.4 - Local File Inclusion vulnerabilityLiquidThemes MagicAI for WordPress - AI Text, Image, Chat,…
- CVE-2026-32556WordPress Boost plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerabilityPixelYourSite Professional Boost
- CVE-2026-78284WordPress MasterStudy LMS plugin <= 3.7.42 - Arbitrary File Deletion vulnerabilityStylemix MasterStudy LMS
- CVE-2026-77384libp2p: Circuit relay v2 server reservation refresh leaks abort listeners and allows remote resource exhaustionjs-libp2p
- CVE-2026-19568SVG File Parsing Memory Corruption Vulnerability in Autodesk 3ds MaxAutodesk 3ds Max
- CVE-2026-7455FLT File Parsing Out-of-Bounds Write Vulnerability in Autodesk 3ds MaxAutodesk 3ds Max
- CVE-2026-16783ABC File Parsing Out-of-Bounds Write Vulnerability in Autodesk 3ds MaxAutodesk 3ds Max
- CVE-2026-77634CakePHP: SmtpTransport vulnerable to CRLF header injectioncakephp · cakephp/cakephp
- CVE-2026-75542OAuth token exchange grants repository scopes for organizations the principal cannot accesshexpm
- CVE-2026-77567Filament: App-based MFA can be bypassed when recovery codes are enabledfilamentphp filament · filament/filament
- CVE-2026-76098Mistune has Denial of Service — RecursionError via Excessive Emphasis Markers in Markdownlepture mistune · mistune
- CVE-2026-78553Insecure Flask Secret-Key File Permissions Allow Local Administrator Session Forgery in RansomLookransomlook
- CVE-2026-61419Dell ThinOS 10, versions prior to 2605_10.2518, contain an Improper Access Control vulnerability.Dell ThinOS
- CVE-2026-78551RansomLook Login Endpoint Allows Timing-Based Username Enumeration and Unthrottled Authentication Attemptsransomlook
- CVE-2026-71511Dolibarr < 24.0.0 Members REST API Sensitive Data Exposure via Member Endpointsdolibarr
- CVE-2026-71510Dolibarr < 24.0.0 Users REST API SQL Injection via filter parameterdolibarr
- CVE-2026-71509Dolibarr < 24.0.0 Expense Report REST API Improper Authorization via Update Endpointdolibarr
- CVE-2026-71508Dolibarr < 24.0.0 REST API Improper Authorization via User Update Endpointdolibarr
- CVE-2026-71507Dolibarr < 24.0.0 REST API Broken Object-Level Authorization via Bank Account Routesdolibarr
- CVE-2026-71506Dolibarr < 24.0.0 Payments REST API Improper Authorization via Delete Endpointdolibarr
- CVE-2026-71505Dolibarr < 24.0.0 REST API Broken Object-Level Authorization via Third-Party Write Routedolibarr
- CVE-2026-40877Combodo iTop: PHP Object Injection Leading to Remote Code Execution on user preferencesCombodo iTop
- CVE-2026-71504Dolibarr < 24.0.0 Members REST API Improper Authorization via Password Resetdolibarr
- CVE-2026-30864Combodo iTop: Reflected XSS in dashboard revertCombodo iTop
- CVE-2026-78541Command Injection in Parent Control of TP-Link Archer BE3600 v1TP-Link Systems Archer BE3600
- CVE-2026-76073Label Studio through 1.23.0 Cross-Organization Annotation Access via Unscoped AnnotationAPI QuerysetHumanSignal label-studio
- CVE-2026-76072Continue CLI through 1.5.47 Incomplete Destructive Command Denylist in Headless and Auto Modecontinuedev continue
- CVE-2026-76838Hi.Events before 1.11.1-beta Server-Side Request Forgery via Unvalidated Webhook RedirectsHiEventsDev Hi.Events
- CVE-2026-76836AzuraCast through 0.23.8 Liquidsoap Configuration Write via Profile Edit Serialization Group BypassAzuraCast
- CVE-2026-16348Command Injection Vulnerability in VPN connection of Archer BE800TP-Link Systems Archer BE800
- CVE-2026-9254Command Injection Vulnerability in Parent Control of Multiple TP-Link Archer DevicesTP-Link Systems Archer BE800 · TP-Link Systems Archer BE… +1
- CVE-2026-71943DrayTek VigorSwitch Multiple Models OS Command Injection via setDevNetDrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26
- CVE-2026-71942DrayTek VigorSwitch Multiple Models Buffer Overflow via mail_mailalertDrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26
- CVE-2026-71941DrayTek VigorSwitch Multiple Models Buffer Overflow via diag_logmailDrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26
- CVE-2026-71940DrayTek VigorSwitch Multiple Models Buffer Overflow via acl_general_setup Edit ACEDrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26
- CVE-2026-71939DrayTek VigorSwitch Multiple Models Buffer Overflow via acl_general_setup Add ACEDrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26
- CVE-2026-71938DrayTek VigorSwitch Multiple Models Buffer Overflow via switch_lan_gvrpDrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26
- CVE-2026-71937DrayTek VigorSwitch Multiple Models Buffer Overflow via poe_schedule_profileDrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26
- CVE-2026-71936DrayTek VigorSwitch Multiple Models Buffer Overflow via sysrebootDrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26
- CVE-2026-71935DrayTek VigorSwitch Multiple Models Buffer Overflow via webBackupActionDrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26
- CVE-2026-71934DrayTek VigorSwitch Multiple Models Buffer Overflow via pingtraceDrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26
- CVE-2026-71933DrayTek VigorSwitch Multiple Models Missing Authorization in Syslog FunctionsDrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26
- CVE-2026-71931DrayTek VigorSwitch Multiple Models OS Command Injection via tftp_upgradeDrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26
- CVE-2026-71930DrayTek VigorSwitch Multiple Models OS Command Injection via setTimeDrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26
- CVE-2026-71929DrayTek VigorSwitch Multiple Models OS Command Injection via setDevProtoDrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26
- CVE-2026-71928DrayTek VigorSwitch Multiple Models OS Command Injection via fdftDeviceDrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26
- CVE-2026-71927DrayTek VigorSwitch Multiple Models OS Command Injection via rebDeviceDrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26
- CVE-2026-71926DrayTek VigorSwitch Multiple Models OS Command Injection via setDeviceDrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26
- CVE-2026-71925DrayTek VigorSwitch Multiple Models OS Command Injection via getDetailDrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26
- CVE-2026-71924DrayTek VigorSwitch Multiple Models OS Command Injection via getVidDrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26
- CVE-2026-71923DrayTek VigorSwitch Multiple Models OS Command Injection via auth_setDrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26
- CVE-2026-71922DrayTek VigorSwitch Multiple Models Pre-Authentication NULL Pointer Dereference via setget.cgiDrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26
- CVE-2026-71919DrayTek VigorSwitch Multiple Models OS Command Injection via sysrebootDrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26
- CVE-2026-71918DrayTek VigorSwitch Multiple Models OS Command Injection via webBackupActionDrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26
- CVE-2026-71917DrayTek VigorSwitch Multiple Models OS Command Injection via pingtraceDrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26
- CVE-2026-71916DrayTek VigorSwitch Multiple Models OS Command Injection via commandTableDrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26
- CVE-2026-71915DrayTek VigorSwitch Multiple Models OS Command Injection via jsonstatusDrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26
- CVE-2026-71913DrayTek VigorAP Multiple Models OS Command Injection via upload_settings.cgiDrayTek VigorAP
- CVE-2026-71912DrayTek VigorAP Multiple Models Buffer Overflow via apautotestDrayTek VigorAP
- CVE-2026-71911DrayTek VigorAP Multiple Models Buffer Overflow via setLanDrayTek VigorAP
- CVE-2026-71910DrayTek VigorAP Multiple Models OS Command Injection via apautotestDrayTek VigorAP
- CVE-2026-71909DrayTek VigorAP Multiple Models OS Command Injection via InquierTimeDrayTek VigorAP
- CVE-2026-71908DrayTek VigorAP Multiple Models OS Command Injection via mesh_start_speed_testDrayTek VigorAP
- CVE-2026-71907DrayTek VigorAP Multiple Models OS Command Injection via setcamsetDrayTek VigorAP
- CVE-2026-71906DrayTek VigorAP Multiple Models OS Command Injection via setLanDrayTek VigorAP
- CVE-2026-71905DrayTek VigorAP Multiple Models OS Command Injection via ExportSettingsDrayTek VigorAP
- CVE-2026-71904DrayTek VigorAP Multiple Models OS Command Injection via tr069TestInformDrayTek VigorAP
- CVE-2025-36940Use-After-Free vulnerability in a zircon kernel pager proxy (Fuchsia), which could lead to a Privilege Escalation from Userspace to Kernel (Google Android
- CVE-2026-15469Hard-coded Mesh Group Private Key in TP-Link Deco XE75, XE5300, and WE10800TP-Link Systems Deco XE75 v3 / XE5300 v3.6/ WE10800
- CVE-2026-78465Gimp: integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bitGNOME GIMP · Red Hat Enterprise Linux
- CVE-2026-66908Apache Camel: Camel-platform-http-main: when JWT authentication was configured with a keystore but no issuer or audience, the iss and aud claims were never validated, so any unexpired token signed by a trusted key was acceptedApache Software Foundation Apache Camel · org.apache.camel:…
- CVE-2026-66907Apache Camel: Camel-Google-Storage: the consumer appended the remote object name to the configured downloadFileName directory without constraining the resultApache Software Foundation Apache Camel · org.apache.camel:…
- CVE-2026-19685Networkmanager: networkmanager: 802-1x ca-path and phase2-ca-path bypass private_user restriction, allowing wpa-enterprise server validation bypass (incomplete fix for cve-2025-9615)Red Hat Enterprise Linux · Red Hat Hardened Images +1
- CVE-2026-77914rConfig Core 8.0.0 < 8.2.13 Core Path Traversal via Export Download Endpointrconfig
- CVE-2026-18349SAMA5D44 Fault Injection VulnerabilityMicrochip SAMA5D4
- CVE-2026-12556HP Easy Start for macOS - Security UpdateHP Easy Start for macOS
- CVE-2026-12555HP Easy Start for macOS - Security UpdateHP Easy Start for macOS
- CVE-2026-12554HP Easy Start for macOS - Security UpdateHP Easy Start for macOS
- CVE-2026-13212Zephyr virtio driver calls an arbitrary function pointer from an out-of-range used-ring descriptor idzephyrproject zephyr
- CVE-2026-71366Awx: notification backends allow ssrf and credential leakageRed Hat Ansible Automation Platform 2.5 for RHEL · Red H… +1
- CVE-2025-68825HCL Hive is affected by incorrect default permissionsHCLSoftware HCL Hive
- CVE-2026-78416Authenticated RCE via `condition.config` JSON cleanse bypasscraftcms cms
- CVE-2026-71364Awx: project archive extraction allows path traversal file writesRed Hat Ansible Automation Platform 2.5 for RHEL · Red H… +1
- CVE-2026-21752HCL Hive is affected by a use of vulnerable third-party componentsHCLSoftware HCL Hive
- CVE-2026-78414Cross-site scripting in Nx Witness VMS Web Administration allows session token exfiltration via a rogue peer site nameNetwork Optix Nx Witness VMS
- CVE-2026-76055Improper Neutralization of Special Elements used in an OS Command in the package manager component of Black Duck blackduck-c-cpp before 3.0.Black Duck blackduck-c-cpp
- CVE-2026-39914TIM Flow < 26.0.6 Unauthorized SQL Query Execution via Dashboard Export EndpointTIM Solutions TIM Flow
- CVE-2026-76054Invocation of Process Using Visible Sensitive Information in Black Duck blackduck-c-cpp 1.0.17 through 3.0.6 allows an actor able to executeBlack Duck blackduck-c-cpp
- CVE-2026-39915TIM Flow < 26.0.6 CRLF Injection via rt ParameterTIM Solutions TIM Flow
- CVE-2026-78391Stored Cross-Site Scripting via Untrusted Cryptocurrency Address Rendering in RansomLookransomlook
- CVE-2026-78386Unauthenticated Disclosure of Scraping Credentials and Bypass Configuration via RansomLook APIransomlook
- CVE-2026-78385RansomLook Analysis PDF Generation Allows Server-Side Request Forgery and Arbitrary Local File Accessransomlook
- CVE-2026-78367Rpm: rpmbuild gettarspec() crafted tar member name → macro injectionRed Hat Hardened Images · Red Hat Enterprise Linux
- CVE-2026-59567Local privilege escalationZscaler Client Connector
- CVE-2026-59566Local denial-of-serviceZscaler Client Connector
- CVE-2026-59565Local and kernel denial-of-serviceZscaler Client Connector
- CVE-2026-78381RansomLook Arbitrary File Read via Path Traversal in Post screen Fieldransomlook
- CVE-2026-78376Webkitgtk: use-after-free of jscvalue function parametersWebKit · WebKitGTK +2
- CVE-2026-78380Private Group and Market Posts Disclosed Through Public Notification Channels in RansomLookransomlook
- CVE-2026-21751HCL Hive is affected by use of a cryptographic primitive with a risky implementationHCLSoftware HCL Hive
- CVE-2026-76847act 0.2.81 through 0.2.89 Missing Authorization in the Artifacts V4 Backendnektos act
- CVE-2026-76844zlib 1.2.11 through 1.3.2 Heap Buffer Overflow via Stale gzwrite Pointer After Failed Writezlib · webpack-dev-middleware
- CVE-2026-76843Flair 0.15.0 and 0.15.1 Deserialization of Untrusted Data via ClusteringModel.loadflairNLP flair
- CVE-2026-76842Mercado Pago Node.js SDK through 3.4.0 Path Injection via Unencoded Identifiers in Payment Clientsmercadopago
- CVE-2026-76841Xinference through 2.11.0 Remote Code Execution via Hardcoded trust_remote_code in Model Loadersxorbitsai inference
- CVE-2026-76840RustDesk through 1.4.9 Heap Buffer Overflow via Unvalidated CLIPRDR FileContentsResponse Lengthrustdesk
- CVE-2026-78369Missing Authentication Allows Unauthorized Creation of Crypto Groups in RansomLookransomlook
- CVE-2026-21756HCL Hive is affected by a broken access control vulnerabilityHCLSoftware HCL Hive
- CVE-2026-66670WordPress Måne theme <= 1.7 - Local File Inclusion vulnerabilityElated-Themes Måne
- CVE-2026-66610WordPress Urna theme <= 2.6.2 - Cross Site Scripting (XSS) vulnerabilitythembay Urna
- CVE-2026-66585WordPress WP Cafe Pro plugin < 3.0.15 - Sensitive Data Exposure vulnerabilityWPCafe WP Cafe Pro
- CVE-2026-32478WordPress WP Project Manager Pro plugin <= 4.0.1 - SQL Injection vulnerabilityweDevs Pte. WP Project Manager Pro
- CVE-2026-32477WordPress ShopBuilder Pro – Elementor WooCommerce Builder Addons plugin <= 2.2.0 - Arbitrary File Deletion vulnerabilityRadiusTheme ShopBuilder Pro – Elementor WooCommerce Builder…
- CVE-2026-32476WordPress Brave Conversion Engine (PRO) plugin <= 0.8.6 - Cross Site Scripting (XSS) vulnerabilityAmpleByte Pvt Limited Brave Conversion Engine
- CVE-2026-32471WordPress ProLancer Element plugin <= 1.4.8 - SQL Injection vulnerabilityThemeBing ProLancer Element
- CVE-2026-28190WordPress ProLancer Element plugin <= 1.4.8 - Broken Access Control vulnerabilityThemeBing ProLancer Element
- CVE-2026-28171WordPress WooCommerce File Approval plugin <= 10.7 - Arbitrary File Deletion vulnerabilityvanquish WooCommerce File Approval
- CVE-2026-28167WordPress Super Forms plugin <= 6.3.316 - Arbitrary File Download vulnerabilityWebRehab Super Forms
- CVE-2026-28166WordPress Tourmaster plugin <= 5.4.9 - Cross Site Scripting (XSS) vulnerabilityGoodLayers Tourmaster
- CVE-2026-28162WordPress Events Made Easy plugin <= 3.2.5 - Cross Site Scripting (XSS) vulnerabilityFranky Events Made Easy
- CVE-2026-28153WordPress Notification Master – Real-Time WordPress Notifications With Email, SMS, Webhooks & More plugin <= 1.7.1 - Broken Access Control vulnerabilityNotification Master – Real-Time WordPress Notificatio…
- CVE-2026-28152WordPress Tonda Core plugin < 2.6 - Local File Inclusion vulnerabilitySelect-Themes Tonda Core
- CVE-2026-28151WordPress Tonda theme < 2.6 - Local File Inclusion vulnerabilitySelect-Themes Tonda
- CVE-2026-66671WordPress Verdure Core plugin <= 1.2 - Local File Inclusion vulnerabilityElated-Themes Verdure Core
- CVE-2026-78270WordPress FluentCRM Pro plugin <= 3.1.12 - SQL Injection vulnerabilityWP ManageNinja FluentCRM Pro
- CVE-2026-66623WordPress Social Media & Share Icons plugin <= 2.9.9 - Cross Site Scripting (XSS) vulnerabilityInisev Social Media & Share Icons
- CVE-2026-66599WordPress WPComplete plugin <= 2.9.5.6 - Cross Site Scripting (XSS) vulnerabilityLiquid Web / StellarWP WPComplete
- CVE-2026-66584WordPress 12 Step Meeting List plugin <= 3.19.16 - Cross Site Scripting (XSS) vulnerabilityCode for Recovery 12 Step Meeting List
- CVE-2025-63080Authenticated RCE in KAON PG5298KAON PG5298A · KAON PG5298B
- CVE-2026-6017Missing Authentication for Critical Function in KAON PG5298KAON PG5298A · KAON PG5298B
- CVE-2026-10582Hugo 0.91.0 through 0.165.0 Server-Side Request Forgery via security.http.urls Lacking Destination Address Validationgohugoio hugo
- CVE-2026-76172fast-uri vulnerable to host confusion via percent-encoded scheme normalizationfast-uri
- CVE-2026-75975fast-uri vulnerable to server-side request forgery via malformed IPv6 normalizationfast-uri
- CVE-2026-75899fast-uri vulnerable to server-side request forgery via repeated hostname percent-decodingfast-uri
- CVE-2026-78317DIAEnergie - SQL Injectiondeltaww DIAEnergie
- CVE-2026-78316DIAEnergie - SQL Injectiondeltaww DIAEnergie
- CVE-2026-78315DIAEnergie - SQL Injectiondeltaww DIAEnergie
- CVE-2026-78314DIAEnergie - SQL Injectiondeltaww DIAEnergie
- CVE-2026-75931fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative referencesfast-uri
- CVE-2026-78306DJI Drone Bluetooth Interface Unauthenticated DUML Command ExecutionDJI Neo · DJI Flip +4
- CVE-2026-78255DJI Drone HTTP Media Server Allows Unauthenticated Access to Stored MediaDJI Neo · DJI Flip +4
- CVE-2026-59561Sakura Editor provided by Sakura Editor Development Community contains an OS command injection vulnerability.Sakura Editor Development Community Sakura Editor
- CVE-2026-78213Hepta Platforms｜Heptabase - Stored Cross-Site ScriptingHepta Platforms Heptabase
- CVE-2026-782124MOSAn Security Technology｜4MOSAn Management Center - Arbitrary File Read4MOSAn Security Technology 4MOSAn Management Center
- CVE-2026-19200Velociraptor Analyst overwrites live built-in artifacts through verify()Rapid7 Velociraptor
- CVE-2026-78170UTT HiPER 1200GW formConfigFastDirectionW strcpy buffer overflowUTT HiPER 1200GW
- CVE-2026-78209exceljs through 4.4.0 CSV Formula Injection via Unescaped Cell Valuesexceljs
- CVE-2026-78208exceljs through 4.4.0 Path Traversal via Unvalidated addImage filenameexceljs
- CVE-2026-78206exceljs through 4.4.0 Uncontrolled Resource Consumption via Unbounded xlsx Decompressionexceljs
- CVE-2026-78203Ghostwriter before 7.1.2 Cross-Client Report Template Disclosure via Unauthorized Template SwapGhostManager Ghostwriter
- CVE-2025-26237D-Link DI-7001 MINI_5G 19.10.31A1 contains a code execution vulnerability in the flag parameter of msp_info, which can be exploited to run a
- CVE-2025-26238In D-Link DI-8100G 17.12.20A1, the flag parameter in msp_info can be exploited to execute arbitrary code.
- CVE-2026-30512A local privilege escalation vulnerability exists in the Restricted Access (Kiosk) Mode implementation of Scheidt & Bachmann entervo HMI pri
- CVE-2026-52492An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster() function when computing strip buffer sizes can result in an undersized he
- CVE-2026-56135In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function build_inherited_id() in libntfs-3g/security.c that allows
- CVE-2026-75368A stack overflow in the loadRawData function of SpaceDot AcubeSAT OBC software commit eaf90ec allows attackers to cause a Denial of Service
- CVE-2026-75369An out-of-bounds read vulnerability in the CAN::Application::parsePerformFunctionMessage component of SpaceDot AcubeSAT OBC software commit
- CVE-2026-75371An integer handling flaw in the cobs_decode function of SpaceDot AcubeSAT OBC software commit eaf90ec allows physically-proximate attackers
- CVE-2026-75464OneNav 1.2.4 contains an authenticated arbitrary file deletion vulnerability via import_link().
Medium, low and unrated 98
- CVE-2026-68516OpenEXR: HTJ2K SIZ image-offset gap stack buffer overflowAcademySoftwareFoundation openexr
- CVE-2026-78435Faveo Helpdesk Logo SettingsController.php unlink path traversalFaveo Helpdesk
- CVE-2026-78266WordPress AutomatorWP plugin <= 5.8.3 - Broken Access Control vulnerabilityRuben Garcia AutomatorWP
- CVE-2026-27364WordPress Style Kits plugin <= 2.6.5 - Broken Access Control vulnerabilityAnalogWP Style Kits
- CVE-2026-78434Faveo Helpdesk post-ticket-reply Endpoint FormController.php post_ticket_reply missing authenticationFaveo Helpdesk
- CVE-2026-17113Cri-o: cri-o: unvalidated image env var causes daemon crashcri-o · Red Hat OpenShift Container Platform
- CVE-2026-45404OpenTelemetry-Go: Unsynchronized baggage map can panic under concurrent accessopen-telemetry opentelemetry-go · go.opentelemetry.io/otel/…
- CVE-2026-16782SVG File Parsing Out-of-Bounds Read Vulnerability in Autodesk 3ds MaxAutodesk 3ds Max
- CVE-2026-16781SVG File Parsing Stack Exhaustion Vulnerability in Autodesk 3ds MaxAutodesk 3ds Max
- CVE-2026-55468Wagtail: Improper restriction handling on Pages admin APIwagtail
- CVE-2026-5006Vault Vulnerable to Privilege Escalation via Slash Injection in Templated Policy PathsHashiCorp Vault
- CVE-2026-75554Explicit organization scopes survive token refresh after membership endshexpm
- CVE-2026-72714Rocq Prover through 9.2.0 Universe Checking State Desynchronised After Module Closerocq-prover rocq
- CVE-2026-72711Lean 4 before 4.32.2 Kernel Accepts Opaque Declaration With an Unbound Free Variableleanprover lean4
- CVE-2026-72705Rocq Prover before 9.2.0 Guard Checker Accepts Fixpoint Passed as a Higher-Order Argumentrocq-prover rocq
- CVE-2026-72704Rocq Prover through 9.2.0 Guard Checker Trusts Corrupted Recursive Tree After Transportrocq-prover rocq
- CVE-2026-72703Rocq Prover 8.20 before 9.2.0 Guard Checker Accepts Non-Terminating Fixpoint via Unchecked Cross-Callsrocq-prover rocq
- CVE-2020-37268Coq and Rocq Prover Print Assumptions Omits Unsafe Universe Checking Inlined Through Parameter Inlinerocq-prover rocq
- CVE-2026-75509joserfc claim-validation bypass via array-typed single-string claims (iss/sub/jti)authlib joserfc
- CVE-2026-76816Netty: MQTT Topic Name and Client ID Validation Bypassnetty
- CVE-2026-78430sworddut mcp-ffmpeg-helper Tool handlers.ts handleToolCall os command injectionsworddut mcp-ffmpeg-helper
- CVE-2026-63693Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability.Dell Alienware Area 51m R2 · Dell Alienware Area-51 AAT… +12
- CVE-2026-77310jackson-databind: Eager DNS resolution (SSRF) still present in InetAddress deserialization (Incomplete fix for CVE-2026-54514)com.fasterxml.jackson.core:jackson-databind · FasterXML… +1
- CVE-2026-77923Dolibarr 21.0.0 < 24.0.0 Authorization Bypass via clonetasks Mass Actiondolibarr
- CVE-2026-71503Dolibarr < 24.0.0 Reflected XSS via Extra Fields Administration Templatedolibarr
- CVE-2026-78417Insufficient verification of data authenticity in the IronVNC client in Devolutions Remote Desktop Manager 2026.2.17.0 and earlier, 2026.1.2Devolutions Remote Desktop Manager
- CVE-2026-76837Baserow before 2.3.0 Stored Cross-Site Scripting via Rich Text Mention Display NameBaserow
- CVE-2026-34491Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson Controls Metasys 14 and JohnsoJohnson Controls Metasys
- CVE-2026-78475Gimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loaderGNOME GIMP · Red Hat Enterprise Linux
- CVE-2026-13213Bluetooth HAS: NULL-pointer dereference DoS when a bonded peer reconnects before bt_has_registerzephyrproject zephyr
- CVE-2026-71932DrayTek VigorSwitch Multiple Models Path Traversal via getSyslogFileDrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26
- CVE-2026-71920DrayTek VigorSwitch Multiple Models NULL Pointer Dereference via formlogoutDrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26
- CVE-2026-75099Apache Allura: Unauthenticated REST disclosureApache Software Foundation Apache Allura
- CVE-2026-63621Apache Camel: Camel-Knative: CloudEvent extension fields received in structured content mode were mapped onto message headers without applying any header filter strategyApache Software Foundation Apache Camel · org.apache.camel:…
- CVE-2026-60093Apache Camel: Camel-Azure-Storage-DataLake: the downloadToFile operation built the local download target from the remote path name without constraining it to the configured fileDirApache Software Foundation Apache Camel · org.apache.camel:…
- CVE-2026-59230Apache Camel: Camel-Mail: the MimeMultipart data format copied MIME headers onto the Camel message without a header filter strategy when unmarshalling with headersInline enabledApache Software Foundation Apache Camel · org.apache.camel:…
- CVE-2026-13343Uninitialised stack memory disclosure in the MIDI 2.0 UMP Stream responderzephyrproject zephyr
- CVE-2026-67204BookStack < 26.05.4 Broken Access Control via Image Gallery APIBookStackApp BookStack
- CVE-2026-65053Horde IMP before 7.2.0 Stored Cross-Site Scripting via AppleDouble Viewer Part Namehorde imp
- CVE-2026-9728TOCTOU race in mbox_send syscall verifier allows userspace to leak kernel memoryzephyrproject zephyr
- CVE-2026-21755HCL Hive is affected by a missing rate limitHCLSoftware HCL Hive
- CVE-2026-17033CVE-2026-17033 CVE RecordGrafana OSS
- CVE-2025-68833HCL Hive is affected by use of a cryptographic primitive with a risky implementationHCLSoftware HCL Hive
- CVE-2026-78378Redis Glob Pattern Injection Allows Unauthorized Enumeration of Private Ransomlook Dataransomlook
- CVE-2026-78250bytebot-ai bytebot Agent Execution Workflow infinite loopbytebot-ai bytebot
- CVE-2026-76845adm-zip 0.5.9 through 0.6.0 Arbitrary File Overwrite via Symlink Following on Extractioncthackers adm-zip · adm-zip
- CVE-2026-78248SourceCodester Simple Online Food Ordering System ajax.php save_settings sql injectionSourceCodester Simple Online Food Ordering System
- CVE-2026-78247SourceCodester Simple Online Food Ordering System ajax.php confirm_order sql injectionSourceCodester Simple Online Food Ordering System
- CVE-2026-21759HCL Hive is affected by an information exposure vulnerabilityHCLSoftware HCL Hive
- CVE-2026-78290WordPress Magazine Blocks plugin <= 1.8.6 - Cross Site Scripting (XSS) vulnerabilityThemeGrill Magazine Blocks
- CVE-2026-78280WordPress Hash Form plugin <= 1.4.0 - Cross Site Request Forgery (CSRF) vulnerabilityHashThemes Hash Form
- CVE-2026-78279WordPress Fluent Support Pro plugin <= 2.3.1 - Cross Site Request Forgery (CSRF) vulnerabilityWP ManageNinja Fluent Support Pro
- CVE-2026-78278WordPress Fluent Boards Pro plugin <= 2.0.11 - Insecure Direct Object References (IDOR) vulnerabilityWP ManageNinja Fluent Boards Pro
- CVE-2026-78277WordPress FluentCRM Pro plugin <= 3.1.12 - Server Side Request Forgery (SSRF) vulnerabilityWP ManageNinja FluentCRM Pro
- CVE-2026-78272WordPress Fluent Support Pro plugin <= 2.3.1 - Broken Access Control vulnerabilityWP ManageNinja Fluent Support Pro
- CVE-2026-78269WordPress Shared Files plugin <= 1.7.69 - Server Side Request Forgery (SSRF) vulnerabilityTammersoft Shared Files
- CVE-2026-78258WordPress Booking and Rental Manager plugin <= 2.7.5 - Broken Access Control vulnerabilityMagepeople Booking and Rental Manager
- CVE-2026-78291WordPress RepairBuddy plugin <= 4.1223 - Broken Access Control vulnerabilityWebful Creations RepairBuddy
- CVE-2026-78246itsourcecode Online Clinic Management System Admin Login login.php sql injectionitsourcecode Online Clinic Management System
- CVE-2026-78323Jss: jss: jsstrustmanager does not verify nss trust flags on ca certificatesRed Hat Certificate System · Red Hat Enterprise Linux
- CVE-2026-78337Unrestricted upload of file with dangerous type in Prospero Flow CRM allows stored cross-site scripting via SVGRoskus Prospero Flow CRM
- CVE-2026-78245itsourcecode Online Pharmacy System User Registration register.php move_uploaded_file unrestricted uploaditsourcecode Online Pharmacy System
- CVE-2026-78244itsourcecode Real Estate Management System search.php sql injectionitsourcecode Real Estate Management System
- CVE-2026-10618Hugo 0.93.0 through 0.165.0 Stored Cross-Site Scripting via Unescaped Code-Fence Attribute Valuesgohugoio hugo
- CVE-2026-59295Micrometer instrumentation of Apache HttpAsyncClient DoS vulnerabilitySpring Micrometer
- CVE-2026-78321DJI Drone HTTP Media Server Denial of Service via Connection Pool ExhaustionDJI Neo · DJI Flip +4
- CVE-2026-77993Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK < 3.6.5joomlack.fr Page Builder CK extension for Joomla
- CVE-2026-8173Information Disclosure via 'Copy learned MAC Addresses' FunctionMurrelektronik Xelity 4TX M GE · Murrelektronik Xelity 6… +8
- CVE-2026-78202itsourcecode Payroll System admin_class.php save_settings unrestricted uploaditsourcecode Payroll System
- CVE-2026-78201itsourcecode Payroll System admin_class.php login sql injectionitsourcecode Payroll System
- CVE-2026-78200itsourcecode Library Management System editbooks.php sql injectionitsourcecode Library Management System
- CVE-2026-78199SourceCodester Simple Online Food Ordering System view_prod.php sql injectionSourceCodester Simple Online Food Ordering System
- CVE-2026-78198SourceCodester Simple Online Food Ordering System ajax.php add_to_cart sql injectionSourceCodester Simple Online Food Ordering System
- CVE-2026-78197SourceCodester Simple Online Food Ordering System ajax.php save_user sql injectionSourceCodester Simple Online Food Ordering System
- CVE-2026-78196achorein expo-share-intent Android File Copy Routine ExpoShareIntentModule.kt getDataColumn path traversalachorein expo-share-intent
- CVE-2026-78187Piwigo Public Authentication cross site scriptingPiwigo
- CVE-2026-78186Open5GS HSS hss-cx-path.c assertionOpen5GS
- CVE-2026-78185itsourcecode Sales and Inventory System cust_edit.php sql injectionitsourcecode Sales and Inventory System
- CVE-2026-78182Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System plansImmediate PlanController.getImmediatePlans sql injectionShenzhen Gongji Technology XBROTHER Dynamic Environment Mon…
- CVE-2026-19852CyberTutor｜NewSiteServer (NSS) - Arbitrary File UploadCyberTutor NewSiteServer
- CVE-2026-19853CyberTutor｜NewSiteServer (NSS) - Missing AuthenticationCyberTutor NewSiteServer
- CVE-2026-78181ractivejs ractive Keypath Ractive#set prototype pollutionractivejs ractive
- CVE-2026-78180alibaba-fusion next deepMerge index.tsx ConfigProvider.getContextProps prototype pollutionalibaba-fusion next
- CVE-2026-78179rexrainbow phaser3-rex-notes BehaviorTree Blackboard Data SetValue.js SetValue prototype pollutionrexrainbow phaser3-rex-notes
- CVE-2026-78178jQWidgets jqx-all.js jqxBaseFramework.extend prototype pollutionjQWidgets
- CVE-2026-78177TanStack devtools-vite Development Devtools Event Bus package-manager.ts installPackage os command injectionTanStack devtools-vite
- CVE-2026-78171itsourcecode Sales and Inventory System processlogin.php sql injectionitsourcecode Sales and Inventory System
- CVE-2026-78166provectus kafka-ui Groovy Code MessagesController.java executeSmartFilterTest code injectionprovectus kafka-ui
- CVE-2026-78161warmcat libwebsockets LECP CBOR Recording lecp.c report_raw_cbor out-of-bounds writewarmcat libwebsockets
- CVE-2026-78205BentoML 1.4.19 through 1.4.39 Server-Side Request Forgery via Unfiltered RFC 6598 Shared Address SpaceBentoML
- CVE-2026-78204Ghostwriter through 7.2.6 Missing Authorization on Report Template Lint EndpointsGhostManager Ghostwriter
- CVE-2026-78160Dolibarr ERP User Notes note.php authorizationDolibarr ERP
- CVE-2026-78158Open5GS AMF UEContextReleaseRequest Path improper authorizationOpen5GS
- CVE-2026-78157Open5GS Rx AA-Request pcrf-rx-path.c pcrf_rx_aar_cb out-of-boundsOpen5GS
- CVE-2022-30983A cross-site scripting (XSS) vulnerability in Support chatbot in Nopaperforms Niaa-Chatbot through 2022-05-17 allows remote attackers to inj
- CVE-2026-56136In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfs_ir_nill() in libntfs-3g/index.c that allows an attacker to read possibly
- CVE-2026-71832Aria2 version 1.37.0 and below is affected by a Divide By Zero issue in src/bittorrent_helper.cc, which allows a remote malicious user to ca
- CVE-2026-75370An out-of-bounds read/write vulnerability in the MessageParser::parseECSSTCHeader component of SpaceDot AcubeSAT OBC software commit eaf90ec