# CVEs published 2026-08-24

309 CVEs were published on August 24, 2026: 45 critical, 166 high. Days are UTC.

- [CVE-2026-53532](https://cve.now/CVE-2026-53532.md): OpenEXR: Unhandled assert abort in HTJ2K decoder via crafted QCD marker (DoS) (CVSS 7.1, AcademySoftwareFoundation openexr)
- [CVE-2026-68516](https://cve.now/CVE-2026-68516.md): OpenEXR: HTJ2K SIZ image-offset gap stack buffer overflow (CVSS 6.5, AcademySoftwareFoundation openexr)
- [CVE-2026-78435](https://cve.now/CVE-2026-78435.md): Faveo Helpdesk Logo SettingsController.php unlink path traversal (CVSS 5.1, Faveo Helpdesk)
- [CVE-2026-78282](https://cve.now/CVE-2026-78282.md): WordPress Stripe Payments plugin \<= 2.1.2 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, mra13 Stripe Payments)
- [CVE-2026-78268](https://cve.now/CVE-2026-78268.md): WordPress Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads plugin \<= 1.2.0 - Sensitive Data Exposure vulnerability (CVSS 7.5, Extend Themes Lead Generation Contact Widget &amp; AI Chatb…)
- [CVE-2026-78267](https://cve.now/CVE-2026-78267.md): WordPress TranslatePress plugin \<= 3.3.2 - Privilege Escalation vulnerability (CVSS 9.8, Cozmoslabs TranslatePress)
- [CVE-2026-78266](https://cve.now/CVE-2026-78266.md): WordPress AutomatorWP plugin \<= 5.8.3 - Broken Access Control vulnerability (CVSS 6.5, Ruben Garcia AutomatorWP)
- [CVE-2026-78265](https://cve.now/CVE-2026-78265.md): WordPress The Events Calendar plugin \<= 6.17.2 - PHP Object Injection vulnerability (CVSS 9.8, Nexcess The Events Calendar)
- [CVE-2026-78264](https://cve.now/CVE-2026-78264.md): WordPress Toolset Blocks plugin \<= 1.6.26 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Site Building with Toolset Toolset Blocks)
- [CVE-2026-78263](https://cve.now/CVE-2026-78263.md): WordPress Event Tickets plugin \<= 5.29.2.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Nexcess Event Tickets)
- [CVE-2026-78262](https://cve.now/CVE-2026-78262.md): WordPress WP Project Manager plugin \<= 4.0.6 - PHP Object Injection vulnerability (CVSS 9.8, weDevs WP Project Manager)
- [CVE-2026-78259](https://cve.now/CVE-2026-78259.md): WordPress WPLegalPages plugin \<= 3.7.0 - Broken Authentication vulnerability (CVSS 7.3, WP Legal Pages WPLegalPages)
- [CVE-2026-32563](https://cve.now/CVE-2026-32563.md): WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin \<= 2.0.63 - PHP Object Injection vulnerability (CVSS 9.8, A CPT ACPT (Pro) - Custom Post Types Plugin for WordPress)
- [CVE-2026-32561](https://cve.now/CVE-2026-32561.md): WordPress Booking Hub plugin \<= 1.3.0 - Privilege Escalation vulnerability (CVSS 8.8, LiquidThemes Booking Hub)
- [CVE-2026-32560](https://cve.now/CVE-2026-32560.md): WordPress MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator plugin \<= 1.4 - Local File Inclusion vulnerability (CVSS 8.8, LiquidThemes MagicAI for WordPress - AI Text, Image, Chat,…)
- [CVE-2026-32559](https://cve.now/CVE-2026-32559.md): WordPress UltimateAI plugin \<= 3.1.0 - Arbitrary File Upload vulnerability (CVSS 9.9, tophive UltimateAI)
- [CVE-2026-32556](https://cve.now/CVE-2026-32556.md): WordPress Boost plugin \<= 2.0.4 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, PixelYourSite Professional Boost)
- [CVE-2026-32555](https://cve.now/CVE-2026-32555.md): WordPress Boost plugin \<= 2.0.4 - SQL Injection vulnerability (CVSS 9.3, PixelYourSite Professional Boost)
- [CVE-2026-32554](https://cve.now/CVE-2026-32554.md): WordPress WooBeWoo Product Filter Pro plugin \<= 3.1.8 - SQL Injection vulnerability (CVSS 9.3, WBW WooBeWoo Product Filter Pro)
- [CVE-2026-27364](https://cve.now/CVE-2026-27364.md): WordPress Style Kits plugin \<= 2.6.5 - Broken Access Control vulnerability (CVSS 6.5, AnalogWP Style Kits)
- [CVE-2026-78284](https://cve.now/CVE-2026-78284.md): WordPress MasterStudy LMS plugin \<= 3.7.42 - Arbitrary File Deletion vulnerability (CVSS 8.6, Stylemix MasterStudy LMS)
- [CVE-2026-78434](https://cve.now/CVE-2026-78434.md): Faveo Helpdesk post-ticket-reply Endpoint FormController.php post\_ticket\_reply missing authentication (CVSS 6.9, Faveo Helpdesk)
- [CVE-2026-77337](https://cve.now/CVE-2026-77337.md): CakePHP: Potential Authentication bypass with CookieAuthenticator (CVSS 9.1, cakephp authentication)
- [CVE-2026-17113](https://cve.now/CVE-2026-17113.md): Cri-o: cri-o: unvalidated image env var causes daemon crash (CVSS 6.0, cri-o · Red Hat OpenShift Container Platform)
- [CVE-2026-45404](https://cve.now/CVE-2026-45404.md): OpenTelemetry-Go: Unsynchronized baggage map can panic under concurrent access (CVSS 5.9, open-telemetry opentelemetry-go · go.opentelemetry.io/otel/…)
- [CVE-2026-77384](https://cve.now/CVE-2026-77384.md): libp2p: Circuit relay v2 server reservation refresh leaks abort listeners and allows remote resource exhaustion (CVSS 7.5, js-libp2p)
- [CVE-2026-19568](https://cve.now/CVE-2026-19568.md): SVG File Parsing Memory Corruption Vulnerability in Autodesk 3ds Max (CVSS 7.8, Autodesk 3ds Max)
- [CVE-2026-7455](https://cve.now/CVE-2026-7455.md): FLT File Parsing Out-of-Bounds Write Vulnerability in Autodesk 3ds Max (CVSS 7.8, Autodesk 3ds Max)
- [CVE-2026-16783](https://cve.now/CVE-2026-16783.md): ABC File Parsing Out-of-Bounds Write Vulnerability in Autodesk 3ds Max (CVSS 7.8, Autodesk 3ds Max)
- [CVE-2026-16782](https://cve.now/CVE-2026-16782.md): SVG File Parsing Out-of-Bounds Read Vulnerability in Autodesk 3ds Max (CVSS 5.3, Autodesk 3ds Max)
- [CVE-2026-16781](https://cve.now/CVE-2026-16781.md): SVG File Parsing Stack Exhaustion Vulnerability in Autodesk 3ds Max (CVSS 5.5, Autodesk 3ds Max)
- [CVE-2026-55468](https://cve.now/CVE-2026-55468.md): Wagtail: Improper restriction handling on Pages admin API (CVSS 4.3, wagtail)
- [CVE-2026-77634](https://cve.now/CVE-2026-77634.md): CakePHP: SmtpTransport vulnerable to CRLF header injection (CVSS 8.2, cakephp · cakephp/cakephp)
- [CVE-2026-5006](https://cve.now/CVE-2026-5006.md): Vault Vulnerable to Privilege Escalation via Slash Injection in Templated Policy Paths (CVSS 6.8, HashiCorp Vault)
- [CVE-2026-77635](https://cve.now/CVE-2026-77635.md): CakePHP: FunctionsBuilder::jsonValue() vulerable to SQL injection with PostgresDriver (CVSS 9.2, cakephp · cakephp/database +1)
- [CVE-2026-75554](https://cve.now/CVE-2026-75554.md): Explicit organization scopes survive token refresh after membership ends (CVSS 2.3, hexpm)
- [CVE-2026-75542](https://cve.now/CVE-2026-75542.md): OAuth token exchange grants repository scopes for organizations the principal cannot access (CVSS 8.3, hexpm)
- [CVE-2026-77567](https://cve.now/CVE-2026-77567.md): Filament: App-based MFA can be bypassed when recovery codes are enabled (CVSS 8.1, filamentphp filament · filament/filament)
- [CVE-2026-72714](https://cve.now/CVE-2026-72714.md): Rocq Prover through 9.2.0 Universe Checking State Desynchronised After Module Close (CVSS 6.8, rocq-prover rocq)
- [CVE-2026-72711](https://cve.now/CVE-2026-72711.md): Lean 4 before 4.32.2 Kernel Accepts Opaque Declaration With an Unbound Free Variable (CVSS 6.8, leanprover lean4)
- [CVE-2026-72705](https://cve.now/CVE-2026-72705.md): Rocq Prover before 9.2.0 Guard Checker Accepts Fixpoint Passed as a Higher-Order Argument (CVSS 6.8, rocq-prover rocq)
- [CVE-2026-72704](https://cve.now/CVE-2026-72704.md): Rocq Prover through 9.2.0 Guard Checker Trusts Corrupted Recursive Tree After Transport (CVSS 6.8, rocq-prover rocq)
- [CVE-2026-72703](https://cve.now/CVE-2026-72703.md): Rocq Prover 8.20 before 9.2.0 Guard Checker Accepts Non-Terminating Fixpoint via Unchecked Cross-Calls (CVSS 6.8, rocq-prover rocq)
- [CVE-2020-37268](https://cve.now/CVE-2020-37268.md): Coq and Rocq Prover Print Assumptions Omits Unsafe Universe Checking Inlined Through Parameter Inline (CVSS 6.8, rocq-prover rocq)
- [CVE-2026-75509](https://cve.now/CVE-2026-75509.md): joserfc claim-validation bypass via array-typed single-string claims (iss/sub/jti) (CVSS 6.5, authlib joserfc)
- [CVE-2026-76098](https://cve.now/CVE-2026-76098.md): Mistune has Denial of Service — RecursionError via Excessive Emphasis Markers in Markdown (CVSS 7.5, lepture mistune · mistune)
- [CVE-2026-76816](https://cve.now/CVE-2026-76816.md): Netty: MQTT Topic Name and Client ID Validation Bypass (CVSS 3.5, netty)
- [CVE-2026-78430](https://cve.now/CVE-2026-78430.md): sworddut mcp-ffmpeg-helper Tool handlers.ts handleToolCall os command injection (CVSS 4.8, sworddut mcp-ffmpeg-helper)
- [CVE-2026-63693](https://cve.now/CVE-2026-63693.md): Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. (CVSS 6.6, Dell Alienware Area 51m R2 · Dell Alienware Area-51 AAT… +12)
- [CVE-2026-78555](https://cve.now/CVE-2026-78555.md): RansomLook API Key Disclosure Through /admin/apikeys HTML Source (CVSS 9.4, ransomlook)
- [CVE-2026-78553](https://cve.now/CVE-2026-78553.md): Insecure Flask Secret-Key File Permissions Allow Local Administrator Session Forgery in RansomLook (CVSS 7.0, ransomlook)
- [CVE-2026-77310](https://cve.now/CVE-2026-77310.md): jackson-databind: Eager DNS resolution (SSRF) still present in InetAddress deserialization (Incomplete fix for CVE-2026-54514) (CVSS 5.3, com.fasterxml.jackson.core:jackson-databind · FasterXML… +1)
- [CVE-2026-77923](https://cve.now/CVE-2026-77923.md): Dolibarr 21.0.0 \< 24.0.0 Authorization Bypass via clonetasks Mass Action (CVSS 5.3, dolibarr)
- [CVE-2026-61419](https://cve.now/CVE-2026-61419.md): Dell ThinOS 10, versions prior to 2605\_10.2518, contain an Improper Access Control vulnerability. (CVSS 7.8, Dell ThinOS)
- [CVE-2026-78551](https://cve.now/CVE-2026-78551.md): RansomLook Login Endpoint Allows Timing-Based Username Enumeration and Unthrottled Authentication Attempts (CVSS 8.8, ransomlook)
- [CVE-2026-71511](https://cve.now/CVE-2026-71511.md): Dolibarr \< 24.0.0 Members REST API Sensitive Data Exposure via Member Endpoints (CVSS 7.1, dolibarr)
- [CVE-2026-71510](https://cve.now/CVE-2026-71510.md): Dolibarr \< 24.0.0 Users REST API SQL Injection via filter parameter (CVSS 7.1, dolibarr)
- [CVE-2026-71509](https://cve.now/CVE-2026-71509.md): Dolibarr \< 24.0.0 Expense Report REST API Improper Authorization via Update Endpoint (CVSS 7.1, dolibarr)
- [CVE-2026-71508](https://cve.now/CVE-2026-71508.md): Dolibarr \< 24.0.0 REST API Improper Authorization via User Update Endpoint (CVSS 7.1, dolibarr)
- [CVE-2026-71507](https://cve.now/CVE-2026-71507.md): Dolibarr \< 24.0.0 REST API Broken Object-Level Authorization via Bank Account Routes (CVSS 7.1, dolibarr)
- [CVE-2026-71506](https://cve.now/CVE-2026-71506.md): Dolibarr \< 24.0.0 Payments REST API Improper Authorization via Delete Endpoint (CVSS 7.2, dolibarr)
- [CVE-2026-71505](https://cve.now/CVE-2026-71505.md): Dolibarr \< 24.0.0 REST API Broken Object-Level Authorization via Third-Party Write Route (CVSS 7.1, dolibarr)
- [CVE-2026-40877](https://cve.now/CVE-2026-40877.md): Combodo iTop: PHP Object Injection Leading to Remote Code Execution on user preferences (CVSS 8.7, Combodo iTop)
- [CVE-2026-71504](https://cve.now/CVE-2026-71504.md): Dolibarr \< 24.0.0 Members REST API Improper Authorization via Password Reset (CVSS 8.6, dolibarr)
- [CVE-2026-71503](https://cve.now/CVE-2026-71503.md): Dolibarr \< 24.0.0 Reflected XSS via Extra Fields Administration Template (CVSS 5.1, dolibarr)
- [CVE-2026-30864](https://cve.now/CVE-2026-30864.md): Combodo iTop: Reflected XSS in dashboard revert (CVSS 8.9, Combodo iTop)
- [CVE-2026-39975](https://cve.now/CVE-2026-39975.md): Combodo iTop: Remote code execution using external auth variable value (CVSS 9.4, Combodo iTop)
- [CVE-2026-78417](https://cve.now/CVE-2026-78417.md): Insufficient verification of data authenticity in the IronVNC client in Devolutions Remote Desktop Manager 2026.2.17.0 and earlier, 2026.1.2 (CVSS 4.3, Devolutions Remote Desktop Manager)
- [CVE-2026-78541](https://cve.now/CVE-2026-78541.md): Command Injection in Parent Control of TP-Link Archer BE3600 v1 (CVSS 8.5, TP-Link Systems Archer BE3600)
- [CVE-2026-76835](https://cve.now/CVE-2026-76835.md): OAuth2 Proxy 7.15.2 through 7.15.4 Authentication Bypass via X-Forwarded-Uri Under the Default Trusted Proxy Set (CVSS 9.3, oauth2-proxy · github.com/oauth2-proxy/oauth2-proxy/v7 +1)
- [CVE-2026-76073](https://cve.now/CVE-2026-76073.md): Label Studio through 1.23.0 Cross-Organization Annotation Access via Unscoped AnnotationAPI Queryset (CVSS 8.7, HumanSignal label-studio)
- [CVE-2026-76072](https://cve.now/CVE-2026-76072.md): Continue CLI through 1.5.47 Incomplete Destructive Command Denylist in Headless and Auto Mode (CVSS 8.3, continuedev continue)
- [CVE-2026-76838](https://cve.now/CVE-2026-76838.md): Hi.Events before 1.11.1-beta Server-Side Request Forgery via Unvalidated Webhook Redirects (CVSS 8.4, HiEventsDev Hi.Events)
- [CVE-2026-76837](https://cve.now/CVE-2026-76837.md): Baserow before 2.3.0 Stored Cross-Site Scripting via Rich Text Mention Display Name (CVSS 5.3, Baserow)
- [CVE-2026-76836](https://cve.now/CVE-2026-76836.md): AzuraCast through 0.23.8 Liquidsoap Configuration Write via Profile Edit Serialization Group Bypass (CVSS 8.7, AzuraCast)
- [CVE-2026-16348](https://cve.now/CVE-2026-16348.md): Command Injection Vulnerability in VPN connection of Archer BE800 (CVSS 8.5, TP-Link Systems Archer BE800)
- [CVE-2026-9254](https://cve.now/CVE-2026-9254.md): Command Injection Vulnerability in Parent Control of Multiple TP-Link Archer Devices (CVSS 8.7, TP-Link Systems Archer BE800 · TP-Link Systems Archer BE… +1)
- [CVE-2026-34491](https://cve.now/CVE-2026-34491.md): Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson Controls Metasys 14 and Johnso (CVSS 6.1, Johnson Controls Metasys)
- [CVE-2026-78475](https://cve.now/CVE-2026-78475.md): Gimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loader (CVSS 6.1, GNOME GIMP · Red Hat Enterprise Linux)
- [CVE-2026-13213](https://cve.now/CVE-2026-13213.md): Bluetooth HAS: NULL-pointer dereference DoS when a bonded peer reconnects before bt\_has\_register (CVSS 5.3, zephyrproject zephyr)
- [CVE-2026-71943](https://cve.now/CVE-2026-71943.md): DrayTek VigorSwitch Multiple Models OS Command Injection via setDevNet (CVSS 8.6, DrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26)
- [CVE-2026-71942](https://cve.now/CVE-2026-71942.md): DrayTek VigorSwitch Multiple Models Buffer Overflow via mail\_mailalert (CVSS 8.6, DrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26)
- [CVE-2026-71941](https://cve.now/CVE-2026-71941.md): DrayTek VigorSwitch Multiple Models Buffer Overflow via diag\_logmail (CVSS 8.6, DrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26)
- [CVE-2026-71940](https://cve.now/CVE-2026-71940.md): DrayTek VigorSwitch Multiple Models Buffer Overflow via acl\_general\_setup Edit ACE (CVSS 8.6, DrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26)
- [CVE-2026-71939](https://cve.now/CVE-2026-71939.md): DrayTek VigorSwitch Multiple Models Buffer Overflow via acl\_general\_setup Add ACE (CVSS 8.6, DrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26)
- [CVE-2026-71938](https://cve.now/CVE-2026-71938.md): DrayTek VigorSwitch Multiple Models Buffer Overflow via switch\_lan\_gvrp (CVSS 8.6, DrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26)
- [CVE-2026-71937](https://cve.now/CVE-2026-71937.md): DrayTek VigorSwitch Multiple Models Buffer Overflow via poe\_schedule\_profile (CVSS 8.6, DrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26)
- [CVE-2026-71936](https://cve.now/CVE-2026-71936.md): DrayTek VigorSwitch Multiple Models Buffer Overflow via sysreboot (CVSS 8.6, DrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26)
- [CVE-2026-71935](https://cve.now/CVE-2026-71935.md): DrayTek VigorSwitch Multiple Models Buffer Overflow via webBackupAction (CVSS 8.6, DrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26)
- [CVE-2026-71934](https://cve.now/CVE-2026-71934.md): DrayTek VigorSwitch Multiple Models Buffer Overflow via pingtrace (CVSS 8.6, DrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26)
- [CVE-2026-71933](https://cve.now/CVE-2026-71933.md): DrayTek VigorSwitch Multiple Models Missing Authorization in Syslog Functions (CVSS 8.8, DrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26)
- [CVE-2026-71932](https://cve.now/CVE-2026-71932.md): DrayTek VigorSwitch Multiple Models Path Traversal via getSyslogFile (CVSS 6.9, DrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26)
- [CVE-2026-71931](https://cve.now/CVE-2026-71931.md): DrayTek VigorSwitch Multiple Models OS Command Injection via tftp\_upgrade (CVSS 8.6, DrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26)
- [CVE-2026-71930](https://cve.now/CVE-2026-71930.md): DrayTek VigorSwitch Multiple Models OS Command Injection via setTime (CVSS 8.6, DrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26)
- [CVE-2026-71929](https://cve.now/CVE-2026-71929.md): DrayTek VigorSwitch Multiple Models OS Command Injection via setDevProto (CVSS 8.6, DrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26)
- [CVE-2026-71928](https://cve.now/CVE-2026-71928.md): DrayTek VigorSwitch Multiple Models OS Command Injection via fdftDevice (CVSS 8.6, DrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26)
- [CVE-2026-71927](https://cve.now/CVE-2026-71927.md): DrayTek VigorSwitch Multiple Models OS Command Injection via rebDevice (CVSS 8.6, DrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26)
- [CVE-2026-71926](https://cve.now/CVE-2026-71926.md): DrayTek VigorSwitch Multiple Models OS Command Injection via setDevice (CVSS 8.6, DrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26)
- [CVE-2026-71925](https://cve.now/CVE-2026-71925.md): DrayTek VigorSwitch Multiple Models OS Command Injection via getDetail (CVSS 8.6, DrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26)
- [CVE-2026-71924](https://cve.now/CVE-2026-71924.md): DrayTek VigorSwitch Multiple Models OS Command Injection via getVid (CVSS 8.6, DrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26)
- [CVE-2026-71923](https://cve.now/CVE-2026-71923.md): DrayTek VigorSwitch Multiple Models OS Command Injection via auth\_set (CVSS 8.6, DrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26)
- [CVE-2026-71922](https://cve.now/CVE-2026-71922.md): DrayTek VigorSwitch Multiple Models Pre-Authentication NULL Pointer Dereference via setget.cgi (CVSS 8.7, DrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26)
- [CVE-2026-71921](https://cve.now/CVE-2026-71921.md): DrayTek VigorSwitch Multiple Models Pre-Authentication OS Command Injection via setget.cgi (CVSS 9.3, DrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26)
- [CVE-2026-71920](https://cve.now/CVE-2026-71920.md): DrayTek VigorSwitch Multiple Models NULL Pointer Dereference via formlogout (CVSS 6.9, DrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26)
- [CVE-2026-71919](https://cve.now/CVE-2026-71919.md): DrayTek VigorSwitch Multiple Models OS Command Injection via sysreboot (CVSS 8.6, DrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26)
- [CVE-2026-71918](https://cve.now/CVE-2026-71918.md): DrayTek VigorSwitch Multiple Models OS Command Injection via webBackupAction (CVSS 8.6, DrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26)
- [CVE-2026-71917](https://cve.now/CVE-2026-71917.md): DrayTek VigorSwitch Multiple Models OS Command Injection via pingtrace (CVSS 8.6, DrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26)
- [CVE-2026-71916](https://cve.now/CVE-2026-71916.md): DrayTek VigorSwitch Multiple Models OS Command Injection via commandTable (CVSS 8.6, DrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26)
- [CVE-2026-71915](https://cve.now/CVE-2026-71915.md): DrayTek VigorSwitch Multiple Models OS Command Injection via jsonstatus (CVSS 8.6, DrayTek VigorSwitch G2540xs · DrayTek VigorSwitch P2540… +26)
- [CVE-2026-71914](https://cve.now/CVE-2026-71914.md): DrayTek VigorAP Multiple Models Pre-Authentication OS Command Injection via dray\_apm (CVSS 9.3, DrayTek VigorAP)
- [CVE-2026-71913](https://cve.now/CVE-2026-71913.md): DrayTek VigorAP Multiple Models OS Command Injection via upload\_settings.cgi (CVSS 8.6, DrayTek VigorAP)
- [CVE-2026-71912](https://cve.now/CVE-2026-71912.md): DrayTek VigorAP Multiple Models Buffer Overflow via apautotest (CVSS 8.6, DrayTek VigorAP)
- [CVE-2026-71911](https://cve.now/CVE-2026-71911.md): DrayTek VigorAP Multiple Models Buffer Overflow via setLan (CVSS 8.6, DrayTek VigorAP)
- [CVE-2026-71910](https://cve.now/CVE-2026-71910.md): DrayTek VigorAP Multiple Models OS Command Injection via apautotest (CVSS 8.6, DrayTek VigorAP)
- [CVE-2026-71909](https://cve.now/CVE-2026-71909.md): DrayTek VigorAP Multiple Models OS Command Injection via InquierTime (CVSS 8.6, DrayTek VigorAP)
- [CVE-2026-71908](https://cve.now/CVE-2026-71908.md): DrayTek VigorAP Multiple Models OS Command Injection via mesh\_start\_speed\_test (CVSS 8.6, DrayTek VigorAP)
- [CVE-2026-71907](https://cve.now/CVE-2026-71907.md): DrayTek VigorAP Multiple Models OS Command Injection via setcamset (CVSS 8.6, DrayTek VigorAP)
- [CVE-2026-71906](https://cve.now/CVE-2026-71906.md): DrayTek VigorAP Multiple Models OS Command Injection via setLan (CVSS 8.6, DrayTek VigorAP)
- [CVE-2026-71905](https://cve.now/CVE-2026-71905.md): DrayTek VigorAP Multiple Models OS Command Injection via ExportSettings (CVSS 8.6, DrayTek VigorAP)
- [CVE-2026-71904](https://cve.now/CVE-2026-71904.md): DrayTek VigorAP Multiple Models OS Command Injection via tr069TestInform (CVSS 8.6, DrayTek VigorAP)
- [CVE-2026-75099](https://cve.now/CVE-2026-75099.md): Apache Allura: Unauthenticated REST disclosure (CVSS 5.3, Apache Software Foundation Apache Allura)
- [CVE-2025-36939](https://cve.now/CVE-2025-36939.md): Multiple vulnerabilities exist in OpenThread's handling of MLE packets. (CVSS 10.0, Google Nest)
- [CVE-2025-36940](https://cve.now/CVE-2025-36940.md): Use-After-Free vulnerability in a zircon kernel pager proxy (Fuchsia), which could lead to a Privilege Escalation from Userspace to Kernel ( (CVSS 8.8, Google Android)
- [CVE-2026-15469](https://cve.now/CVE-2026-15469.md): Hard-coded Mesh Group Private Key in TP-Link Deco XE75, XE5300, and WE10800 (CVSS 7.7, TP-Link Systems Deco XE75 v3 / XE5300 v3.6/ WE10800)
- [CVE-2026-78465](https://cve.now/CVE-2026-78465.md): Gimp: integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bit (CVSS 7.0, GNOME GIMP · Red Hat Enterprise Linux)
- [CVE-2026-78329](https://cve.now/CVE-2026-78329.md): Apache Camel: Camel-Undertow: the endpoint discarded the undertow-specific header filter strategy in favour of the base HTTP one, so the undertow filtering never ran on endpoint-configured routes (CVSS 9.8, Apache Software Foundation Apache Camel · org.apache.camel:…)
- [CVE-2026-71300](https://cve.now/CVE-2026-71300.md): Apache Camel: Camel-Atmosphere-Websocket: WebSocket dispatch header injection (CVSS 9.8, Apache Software Foundation Apache Camel · org.apache.camel:…)
- [CVE-2026-63621](https://cve.now/CVE-2026-63621.md): Apache Camel: Camel-Knative: CloudEvent extension fields received in structured content mode were mapped onto message headers without applying any header filter strategy (CVSS 5.3, Apache Software Foundation Apache Camel · org.apache.camel:…)
- [CVE-2026-66908](https://cve.now/CVE-2026-66908.md): Apache Camel: Camel-platform-http-main: when JWT authentication was configured with a keystore but no issuer or audience, the iss and aud claims were never validated, so any unexpired token signed by a trusted key was accepted (CVSS 7.5, Apache Software Foundation Apache Camel · org.apache.camel:…)
- [CVE-2026-66907](https://cve.now/CVE-2026-66907.md): Apache Camel: Camel-Google-Storage: the consumer appended the remote object name to the configured downloadFileName directory without constraining the result (CVSS 7.5, Apache Software Foundation Apache Camel · org.apache.camel:…)
- [CVE-2026-19685](https://cve.now/CVE-2026-19685.md): Networkmanager: networkmanager: 802-1x ca-path and phase2-ca-path bypass private\_user restriction, allowing wpa-enterprise server validation bypass (incomplete fix for cve-2025-9615) (CVSS 7.1, Red Hat Enterprise Linux · Red Hat Hardened Images +1)
- [CVE-2026-66906](https://cve.now/CVE-2026-66906.md): Apache Camel: Camel-Azure-Storage-Blob: the downloadBlobToFile operation built the local download target from the remote blob name without constraining it to the configured fileDir (CVSS 9.1, Apache Software Foundation Apache Camel · org.apache.camel:…)
- [CVE-2026-77915](https://cve.now/CVE-2026-77915.md): rConfig Core 8.0.0 \< 8.2.10 Unauthorized Admin Registration via web.php (CVSS 9.3, rconfig)
- [CVE-2026-60093](https://cve.now/CVE-2026-60093.md): Apache Camel: Camel-Azure-Storage-DataLake: the downloadToFile operation built the local download target from the remote path name without constraining it to the configured fileDir (CVSS 5.5, Apache Software Foundation Apache Camel · org.apache.camel:…)
- [CVE-2026-59230](https://cve.now/CVE-2026-59230.md): Apache Camel: Camel-Mail: the MimeMultipart data format copied MIME headers onto the Camel message without a header filter strategy when unmarshalling with headersInline enabled (CVSS 6.5, Apache Software Foundation Apache Camel · org.apache.camel:…)
- [CVE-2026-77914](https://cve.now/CVE-2026-77914.md): rConfig Core 8.0.0 \< 8.2.13 Core Path Traversal via Export Download Endpoint (CVSS 7.1, rconfig)
- [CVE-2026-18349](https://cve.now/CVE-2026-18349.md): SAMA5D44 Fault Injection Vulnerability (CVSS 7.3, Microchip SAMA5D4)
- [CVE-2026-12556](https://cve.now/CVE-2026-12556.md): HP Easy Start for macOS - Security Update (CVSS 7.7, HP Easy Start for macOS)
- [CVE-2026-12555](https://cve.now/CVE-2026-12555.md): HP Easy Start for macOS - Security Update (CVSS 7.7, HP Easy Start for macOS)
- [CVE-2026-12554](https://cve.now/CVE-2026-12554.md): HP Easy Start for macOS - Security Update (CVSS 8.5, HP Easy Start for macOS)
- [CVE-2026-13212](https://cve.now/CVE-2026-13212.md): Zephyr virtio driver calls an arbitrary function pointer from an out-of-range used-ring descriptor id (CVSS 8.8, zephyrproject zephyr)
- [CVE-2026-13343](https://cve.now/CVE-2026-13343.md): Uninitialised stack memory disclosure in the MIDI 2.0 UMP Stream responder (CVSS 5.3, zephyrproject zephyr)
- [CVE-2026-71366](https://cve.now/CVE-2026-71366.md): Awx: notification backends allow ssrf and credential leakage (CVSS 7.7, Red Hat Ansible Automation Platform 2.5 for RHEL · Red H… +1)
- [CVE-2026-76071](https://cve.now/CVE-2026-76071.md): Netis NC63 V3.0.0.3327 Stack Buffer Overflow via destHost Parameter (CVSS 9.3, Netis Systems NC63)
- [CVE-2026-76070](https://cve.now/CVE-2026-76070.md): Netis NC63 V3.0.0.3327 Stack Buffer Overflow via Login Password Parameter (CVSS 9.3, Netis Systems NC63)
- [CVE-2025-68825](https://cve.now/CVE-2025-68825.md): HCL Hive is affected by incorrect default permissions (CVSS 7.5, HCLSoftware HCL Hive)
- [CVE-2026-78416](https://cve.now/CVE-2026-78416.md): Authenticated RCE via \`condition.config\` JSON cleanse bypass (CVSS 8.7, craftcms cms)
- [CVE-2026-67204](https://cve.now/CVE-2026-67204.md): BookStack \< 26.05.4 Broken Access Control via Image Gallery API (CVSS 5.3, BookStackApp BookStack)
- [CVE-2026-71364](https://cve.now/CVE-2026-71364.md): Awx: project archive extraction allows path traversal file writes (CVSS 7.2, Red Hat Ansible Automation Platform 2.5 for RHEL · Red H… +1)
- [CVE-2026-21752](https://cve.now/CVE-2026-21752.md): HCL Hive is affected by a use of vulnerable third-party components (CVSS 7.5, HCLSoftware HCL Hive)
- [CVE-2026-19874](https://cve.now/CVE-2026-19874.md): Konami's Metal Gear Online 3 contains a heap-based buffer overflow (CVSS 9.1, Konami Metal Gear Online)
- [CVE-2026-65053](https://cve.now/CVE-2026-65053.md): Horde IMP before 7.2.0 Stored Cross-Site Scripting via AppleDouble Viewer Part Name (CVSS 5.1, horde imp)
- [CVE-2026-78414](https://cve.now/CVE-2026-78414.md): Cross-site scripting in Nx Witness VMS Web Administration allows session token exfiltration via a rogue peer site name (CVSS 8.0, Network Optix Nx Witness VMS)
- [CVE-2026-9728](https://cve.now/CVE-2026-9728.md): TOCTOU race in mbox\_send syscall verifier allows userspace to leak kernel memory (CVSS 6.4, zephyrproject zephyr)
- [CVE-2026-76055](https://cve.now/CVE-2026-76055.md): Improper Neutralization of Special Elements used in an OS Command in the package manager component of Black Duck blackduck-c-cpp before 3.0. (CVSS 7.5, Black Duck blackduck-c-cpp)
- [CVE-2026-39914](https://cve.now/CVE-2026-39914.md): TIM Flow \< 26.0.6 Unauthorized SQL Query Execution via Dashboard Export Endpoint (CVSS 7.1, TIM Solutions TIM Flow)
- [CVE-2026-76054](https://cve.now/CVE-2026-76054.md): Invocation of Process Using Visible Sensitive Information in Black Duck blackduck-c-cpp 1.0.17 through 3.0.6 allows an actor able to execute (CVSS 7.1, Black Duck blackduck-c-cpp)
- [CVE-2026-21755](https://cve.now/CVE-2026-21755.md): HCL Hive is affected by a missing rate limit (CVSS 5.3, HCLSoftware HCL Hive)
- [CVE-2026-39915](https://cve.now/CVE-2026-39915.md): TIM Flow \< 26.0.6 CRLF Injection via rt Parameter (CVSS 8.5, TIM Solutions TIM Flow)
- [CVE-2026-78391](https://cve.now/CVE-2026-78391.md): Stored Cross-Site Scripting via Untrusted Cryptocurrency Address Rendering in RansomLook (CVSS 8.8, ransomlook)
- [CVE-2026-78387](https://cve.now/CVE-2026-78387.md): RansomLook Missing Authorization in Web Configuration Editor Allows Application Configuration Modification (CVSS 9.4, ransomlook)
- [CVE-2026-67602](https://cve.now/CVE-2026-67602.md): phpIPAM \< 1.8.2 Authentication Bypass via REST API Object Cache (CVSS 9.3, phpipam)
- [CVE-2026-78386](https://cve.now/CVE-2026-78386.md): Unauthenticated Disclosure of Scraping Credentials and Bypass Configuration via RansomLook API (CVSS 8.7, ransomlook)
- [CVE-2026-17033](https://cve.now/CVE-2026-17033.md): CVE-2026-17033 CVE Record (CVSS 6.8, Grafana OSS)
- [CVE-2026-78385](https://cve.now/CVE-2026-78385.md): RansomLook Analysis PDF Generation Allows Server-Side Request Forgery and Arbitrary Local File Access (CVSS 8.2, ransomlook)
- [CVE-2026-78367](https://cve.now/CVE-2026-78367.md): Rpm: rpmbuild gettarspec() crafted tar member name → macro injection (CVSS 7.0, Red Hat Hardened Images · Red Hat Enterprise Linux)
- [CVE-2026-59568](https://cve.now/CVE-2026-59568.md): Remote Code Execution (CVSS 9.1, Zscaler Client Connector)
- [CVE-2025-68833](https://cve.now/CVE-2025-68833.md): HCL Hive is affected by use of a cryptographic primitive with a risky implementation (CVSS 5.3, HCLSoftware HCL Hive)
- [CVE-2026-59567](https://cve.now/CVE-2026-59567.md): Local privilege escalation (CVSS 8.8, Zscaler Client Connector)
- [CVE-2026-59566](https://cve.now/CVE-2026-59566.md): Local denial-of-service (CVSS 8.4, Zscaler Client Connector)
- [CVE-2026-59565](https://cve.now/CVE-2026-59565.md): Local and kernel denial-of-service (CVSS 8.8, Zscaler Client Connector)
- [CVE-2026-59564](https://cve.now/CVE-2026-59564.md): Authentication bypass between ZCC and client connector portal (CVSS 9.1, Zscaler Client Connector)
- [CVE-2026-78381](https://cve.now/CVE-2026-78381.md): RansomLook Arbitrary File Read via Path Traversal in Post screen Field (CVSS 8.2, ransomlook)
- [CVE-2026-78376](https://cve.now/CVE-2026-78376.md): Webkitgtk: use-after-free of jscvalue function parameters (CVSS 8.8, WebKit · WebKitGTK +2)
- [CVE-2026-78380](https://cve.now/CVE-2026-78380.md): Private Group and Market Posts Disclosed Through Public Notification Channels in RansomLook (CVSS 8.7, ransomlook)
- [CVE-2026-78378](https://cve.now/CVE-2026-78378.md): Redis Glob Pattern Injection Allows Unauthorized Enumeration of Private Ransomlook Data (CVSS 6.9, ransomlook)
- [CVE-2026-21751](https://cve.now/CVE-2026-21751.md): HCL Hive is affected by use of a cryptographic primitive with a risky implementation (CVSS 7.4, HCLSoftware HCL Hive)
- [CVE-2026-78250](https://cve.now/CVE-2026-78250.md): bytebot-ai bytebot Agent Execution Workflow infinite loop (CVSS 5.3, bytebot-ai bytebot)
- [CVE-2026-76847](https://cve.now/CVE-2026-76847.md): act 0.2.81 through 0.2.89 Missing Authorization in the Artifacts V4 Backend (CVSS 8.7, nektos act)
- [CVE-2026-76845](https://cve.now/CVE-2026-76845.md): adm-zip 0.5.9 through 0.6.0 Arbitrary File Overwrite via Symlink Following on Extraction (CVSS 6.8, cthackers adm-zip · adm-zip)
- [CVE-2026-76844](https://cve.now/CVE-2026-76844.md): zlib 1.2.11 through 1.3.2 Heap Buffer Overflow via Stale gzwrite Pointer After Failed Write (CVSS 8.3, zlib · webpack-dev-middleware)
- [CVE-2026-76843](https://cve.now/CVE-2026-76843.md): Flair 0.15.0 and 0.15.1 Deserialization of Untrusted Data via ClusteringModel.load (CVSS 8.4, flairNLP flair)
- [CVE-2026-76842](https://cve.now/CVE-2026-76842.md): Mercado Pago Node.js SDK through 3.4.0 Path Injection via Unencoded Identifiers in Payment Clients (CVSS 8.8, mercadopago)
- [CVE-2026-76841](https://cve.now/CVE-2026-76841.md): Xinference through 2.11.0 Remote Code Execution via Hardcoded trust\_remote\_code in Model Loaders (CVSS 8.7, xorbitsai inference)
- [CVE-2026-76840](https://cve.now/CVE-2026-76840.md): RustDesk through 1.4.9 Heap Buffer Overflow via Unvalidated CLIPRDR FileContentsResponse Length (CVSS 8.5, rustdesk)
- [CVE-2026-78372](https://cve.now/CVE-2026-78372.md): RansomLook Missing Authorization Allows Disclosure of Private Group and Ransom Note Data (CVSS 9.2, ransomlook)
- [CVE-2026-77995](https://cve.now/CVE-2026-77995.md): Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client \< 3.2.0, OAuth Single Sign-On – OIDC SSO \< 1.2.2, Login with Keycloak OAuth Single Sign-On (SSO) \< 1.2.2, Single Sign-On for Educational Institutes \< 1.2.2 (CVSS 10.0, miniorange.com miniOrange OAuth Client (free) extension… +2)
- [CVE-2026-78370](https://cve.now/CVE-2026-78370.md): RansomLook Unauthenticated Database Export Exposes Private Data (CVSS 9.2, ransomlook)
- [CVE-2026-78248](https://cve.now/CVE-2026-78248.md): SourceCodester Simple Online Food Ordering System ajax.php save\_settings sql injection (CVSS 6.9, SourceCodester Simple Online Food Ordering System)
- [CVE-2026-78369](https://cve.now/CVE-2026-78369.md): Missing Authentication Allows Unauthorized Creation of Crypto Groups in RansomLook (CVSS 8.8, ransomlook)
- [CVE-2026-21756](https://cve.now/CVE-2026-21756.md): HCL Hive is affected by a broken access control vulnerability (CVSS 7.2, HCLSoftware HCL Hive)
- [CVE-2026-78365](https://cve.now/CVE-2026-78365.md): IDOR and missing authorization in Prospero Flow CRM supplier API allows cross-tenant read and modification (CVSS 9.3, Roskus Prospero Flow CRM)
- [CVE-2026-78247](https://cve.now/CVE-2026-78247.md): SourceCodester Simple Online Food Ordering System ajax.php confirm\_order sql injection (CVSS 6.9, SourceCodester Simple Online Food Ordering System)
- [CVE-2026-21759](https://cve.now/CVE-2026-21759.md): HCL Hive is affected by an information exposure vulnerability (CVSS 4.3, HCLSoftware HCL Hive)
- [CVE-2026-66670](https://cve.now/CVE-2026-66670.md): WordPress Måne theme \<= 1.7 - Local File Inclusion vulnerability (CVSS 8.1, Elated-Themes Måne)
- [CVE-2026-66650](https://cve.now/CVE-2026-66650.md): WordPress FreightCo theme \<= 1.1.15 - PHP Object Injection vulnerability (CVSS 9.8, Theme-Rex FreightCo)
- [CVE-2026-66648](https://cve.now/CVE-2026-66648.md): WordPress Jawn theme \<= 1.4.2 - Privilege Escalation vulnerability (CVSS 9.8, MVPThemes Jawn)
- [CVE-2026-66610](https://cve.now/CVE-2026-66610.md): WordPress Urna theme \<= 2.6.2 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, thembay Urna)
- [CVE-2026-66587](https://cve.now/CVE-2026-66587.md): WordPress WP Cafe Pro plugin \< 3.0.15 - Local File Inclusion vulnerability (CVSS 9.8, WPCafe WP Cafe Pro)
- [CVE-2026-66585](https://cve.now/CVE-2026-66585.md): WordPress WP Cafe Pro plugin \< 3.0.15 - Sensitive Data Exposure vulnerability (CVSS 7.5, WPCafe WP Cafe Pro)
- [CVE-2026-32558](https://cve.now/CVE-2026-32558.md): WordPress Affiliate Pro - Affiliate Program for WooCommerce & WordPress plugin \<= 8.9.1 - Privilege Escalation vulnerability (CVSS 9.8, RedefiningTheWeb Affiliate Pro - Affiliate Program for WooC…)
- [CVE-2026-32551](https://cve.now/CVE-2026-32551.md): WordPress Woo Essential plugin \<= 4.3.0 - SQL Injection vulnerability (CVSS 9.3, DiviNext Woo Essential)
- [CVE-2026-32478](https://cve.now/CVE-2026-32478.md): WordPress WP Project Manager Pro plugin \<= 4.0.1 - SQL Injection vulnerability (CVSS 8.5, weDevs Pte. WP Project Manager Pro)
- [CVE-2026-32477](https://cve.now/CVE-2026-32477.md): WordPress ShopBuilder Pro – Elementor WooCommerce Builder Addons plugin \<= 2.2.0 - Arbitrary File Deletion vulnerability (CVSS 8.6, RadiusTheme ShopBuilder Pro – Elementor WooCommerce Builder…)
- [CVE-2026-32476](https://cve.now/CVE-2026-32476.md): WordPress Brave Conversion Engine (PRO) plugin \<= 0.8.6 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, AmpleByte Pvt Limited Brave Conversion Engine)
- [CVE-2026-32471](https://cve.now/CVE-2026-32471.md): WordPress ProLancer Element plugin \<= 1.4.8 - SQL Injection vulnerability (CVSS 8.5, ThemeBing ProLancer Element)
- [CVE-2026-28190](https://cve.now/CVE-2026-28190.md): WordPress ProLancer Element plugin \<= 1.4.8 - Broken Access Control vulnerability (CVSS 7.1, ThemeBing ProLancer Element)
- [CVE-2026-28171](https://cve.now/CVE-2026-28171.md): WordPress WooCommerce File Approval plugin \<= 10.7 - Arbitrary File Deletion vulnerability (CVSS 8.6, vanquish WooCommerce File Approval)
- [CVE-2026-28167](https://cve.now/CVE-2026-28167.md): WordPress Super Forms plugin \<= 6.3.316 - Arbitrary File Download vulnerability (CVSS 7.5, WebRehab Super Forms)
- [CVE-2026-28166](https://cve.now/CVE-2026-28166.md): WordPress Tourmaster plugin \<= 5.4.9 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, GoodLayers Tourmaster)
- [CVE-2026-28165](https://cve.now/CVE-2026-28165.md): WordPress Digits plugin \<= 9.2 - Privilege Escalation vulnerability (CVSS 9.8, UnitedOver Digits)
- [CVE-2026-28162](https://cve.now/CVE-2026-28162.md): WordPress Events Made Easy plugin \<= 3.2.5 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Franky Events Made Easy)
- [CVE-2026-28153](https://cve.now/CVE-2026-28153.md): WordPress Notification Master – Real-Time WordPress Notifications With Email, SMS, Webhooks & More plugin \<= 1.7.1 - Broken Access Control vulnerability (CVSS 7.5, Notification Master &#8211; Real-Time WordPress Notificatio…)
- [CVE-2026-28152](https://cve.now/CVE-2026-28152.md): WordPress Tonda Core plugin \< 2.6 - Local File Inclusion vulnerability (CVSS 8.1, Select-Themes Tonda Core)
- [CVE-2026-28151](https://cve.now/CVE-2026-28151.md): WordPress Tonda theme \< 2.6 - Local File Inclusion vulnerability (CVSS 8.1, Select-Themes Tonda)
- [CVE-2026-66671](https://cve.now/CVE-2026-66671.md): WordPress Verdure Core plugin \<= 1.2 - Local File Inclusion vulnerability (CVSS 8.1, Elated-Themes Verdure Core)
- [CVE-2026-78290](https://cve.now/CVE-2026-78290.md): WordPress Magazine Blocks plugin \<= 1.8.6 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, ThemeGrill Magazine Blocks)
- [CVE-2026-78280](https://cve.now/CVE-2026-78280.md): WordPress Hash Form plugin \<= 1.4.0 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, HashThemes Hash Form)
- [CVE-2026-78279](https://cve.now/CVE-2026-78279.md): WordPress Fluent Support Pro plugin \<= 2.3.1 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 5.4, WP ManageNinja Fluent Support Pro)
- [CVE-2026-78278](https://cve.now/CVE-2026-78278.md): WordPress Fluent Boards Pro plugin \<= 2.0.11 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.3, WP ManageNinja Fluent Boards Pro)
- [CVE-2026-78277](https://cve.now/CVE-2026-78277.md): WordPress FluentCRM Pro plugin \<= 3.1.12 - Server Side Request Forgery (SSRF) vulnerability (CVSS 4.9, WP ManageNinja FluentCRM Pro)
- [CVE-2026-78272](https://cve.now/CVE-2026-78272.md): WordPress Fluent Support Pro plugin \<= 2.3.1 - Broken Access Control vulnerability (CVSS 5.4, WP ManageNinja Fluent Support Pro)
- [CVE-2026-78270](https://cve.now/CVE-2026-78270.md): WordPress FluentCRM Pro plugin \<= 3.1.12 - SQL Injection vulnerability (CVSS 7.6, WP ManageNinja FluentCRM Pro)
- [CVE-2026-78269](https://cve.now/CVE-2026-78269.md): WordPress Shared Files plugin \<= 1.7.69 - Server Side Request Forgery (SSRF) vulnerability (CVSS 6.4, Tammersoft Shared Files)
- [CVE-2026-78258](https://cve.now/CVE-2026-78258.md): WordPress Booking and Rental Manager plugin \<= 2.7.5 - Broken Access Control vulnerability (CVSS 5.3, Magepeople Booking and Rental Manager)
- [CVE-2026-66623](https://cve.now/CVE-2026-66623.md): WordPress Social Media & Share Icons plugin \<= 2.9.9 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Inisev Social Media & Share Icons)
- [CVE-2026-66599](https://cve.now/CVE-2026-66599.md): WordPress WPComplete plugin \<= 2.9.5.6 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Liquid Web / StellarWP WPComplete)
- [CVE-2026-66584](https://cve.now/CVE-2026-66584.md): WordPress 12 Step Meeting List plugin \<= 3.19.16 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Code for Recovery 12 Step Meeting List)
- [CVE-2026-78291](https://cve.now/CVE-2026-78291.md): WordPress RepairBuddy plugin \<= 4.1223 - Broken Access Control vulnerability (CVSS 5.3, Webful Creations RepairBuddy)
- [CVE-2026-78246](https://cve.now/CVE-2026-78246.md): itsourcecode Online Clinic Management System Admin Login login.php sql injection (CVSS 6.9, itsourcecode Online Clinic Management System)
- [CVE-2025-63080](https://cve.now/CVE-2025-63080.md): Authenticated RCE in KAON PG5298 (CVSS 8.5, KAON PG5298A · KAON PG5298B)
- [CVE-2026-6017](https://cve.now/CVE-2026-6017.md): Missing Authentication for Critical Function in KAON PG5298 (CVSS 7.1, KAON PG5298A · KAON PG5298B)
- [CVE-2026-78323](https://cve.now/CVE-2026-78323.md): Jss: jss: jsstrustmanager does not verify nss trust flags on ca certificates (CVSS 6.5, Red Hat Certificate System · Red Hat Enterprise Linux)
- [CVE-2026-78337](https://cve.now/CVE-2026-78337.md): Unrestricted upload of file with dangerous type in Prospero Flow CRM allows stored cross-site scripting via SVG (CVSS 4.8, Roskus Prospero Flow CRM)
- [CVE-2026-78245](https://cve.now/CVE-2026-78245.md): itsourcecode Online Pharmacy System User Registration register.php move\_uploaded\_file unrestricted upload (CVSS 6.9, itsourcecode Online Pharmacy System)
- [CVE-2026-78244](https://cve.now/CVE-2026-78244.md): itsourcecode Real Estate Management System search.php sql injection (CVSS 6.9, itsourcecode Real Estate Management System)
- [CVE-2026-10618](https://cve.now/CVE-2026-10618.md): Hugo 0.93.0 through 0.165.0 Stored Cross-Site Scripting via Unescaped Code-Fence Attribute Values (CVSS 4.8, gohugoio hugo)
- [CVE-2026-10582](https://cve.now/CVE-2026-10582.md): Hugo 0.91.0 through 0.165.0 Server-Side Request Forgery via security.http.urls Lacking Destination Address Validation (CVSS 8.3, gohugoio hugo)
- [CVE-2026-59295](https://cve.now/CVE-2026-59295.md): Micrometer instrumentation of Apache HttpAsyncClient DoS vulnerability (CVSS 5.9, Spring Micrometer)
- [CVE-2026-76172](https://cve.now/CVE-2026-76172.md): fast-uri vulnerable to host confusion via percent-encoded scheme normalization (CVSS 7.5, fast-uri)
- [CVE-2026-75975](https://cve.now/CVE-2026-75975.md): fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization (CVSS 7.5, fast-uri)
- [CVE-2026-75899](https://cve.now/CVE-2026-75899.md): fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding (CVSS 7.5, fast-uri)
- [CVE-2026-78317](https://cve.now/CVE-2026-78317.md): DIAEnergie - SQL Injection (CVSS 8.8, deltaww DIAEnergie)
- [CVE-2026-78316](https://cve.now/CVE-2026-78316.md): DIAEnergie - SQL Injection (CVSS 8.8, deltaww DIAEnergie)
- [CVE-2026-78315](https://cve.now/CVE-2026-78315.md): DIAEnergie - SQL Injection (CVSS 8.8, deltaww DIAEnergie)
- [CVE-2026-78314](https://cve.now/CVE-2026-78314.md): DIAEnergie - SQL Injection (CVSS 8.8, deltaww DIAEnergie)
- [CVE-2026-75931](https://cve.now/CVE-2026-75931.md): fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references (CVSS 7.5, fast-uri)
- [CVE-2026-66897](https://cve.now/CVE-2026-66897.md): Instance template path traversal allows arbitrary host file write as root (CVSS 9.9, Canonical LXD)
- [CVE-2026-78321](https://cve.now/CVE-2026-78321.md): DJI Drone HTTP Media Server Denial of Service via Connection Pool Exhaustion (CVSS 6.0, DJI Neo · DJI Flip +4)
- [CVE-2026-78306](https://cve.now/CVE-2026-78306.md): DJI Drone Bluetooth Interface Unauthenticated DUML Command Execution (CVSS 8.5, DJI Neo · DJI Flip +4)
- [CVE-2026-77993](https://cve.now/CVE-2026-77993.md): Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK \< 3.6.5 (CVSS 5.3, joomlack.fr Page Builder CK extension for Joomla)
- [CVE-2026-77994](https://cve.now/CVE-2026-77994.md): Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK \< 3.6.5 (CVSS 9.3, joomlack.fr Page Builder CK extension for Joomla)
- [CVE-2026-78255](https://cve.now/CVE-2026-78255.md): DJI Drone HTTP Media Server Allows Unauthenticated Access to Stored Media (CVSS 8.7, DJI Neo · DJI Flip +4)
- [CVE-2026-78251](https://cve.now/CVE-2026-78251.md): DJI Drone FTP Service Allows Unrestricted Storage Consumption of the /blackbox Directory (CVSS 9.3, DJI Neo · DJI Flip +4)
- [CVE-2026-8173](https://cve.now/CVE-2026-8173.md): Information Disclosure via 'Copy learned MAC Addresses' Function (CVSS 5.3, Murrelektronik Xelity 4TX M GE · Murrelektronik Xelity 6… +8)
- [CVE-2026-78202](https://cve.now/CVE-2026-78202.md): itsourcecode Payroll System admin\_class.php save\_settings unrestricted upload (CVSS 6.9, itsourcecode Payroll System)
- [CVE-2026-78201](https://cve.now/CVE-2026-78201.md): itsourcecode Payroll System admin\_class.php login sql injection (CVSS 6.9, itsourcecode Payroll System)
- [CVE-2026-78200](https://cve.now/CVE-2026-78200.md): itsourcecode Library Management System editbooks.php sql injection (CVSS 5.3, itsourcecode Library Management System)
- [CVE-2026-78199](https://cve.now/CVE-2026-78199.md): SourceCodester Simple Online Food Ordering System view\_prod.php sql injection (CVSS 6.9, SourceCodester Simple Online Food Ordering System)
- [CVE-2026-78198](https://cve.now/CVE-2026-78198.md): SourceCodester Simple Online Food Ordering System ajax.php add\_to\_cart sql injection (CVSS 6.9, SourceCodester Simple Online Food Ordering System)
- [CVE-2026-78197](https://cve.now/CVE-2026-78197.md): SourceCodester Simple Online Food Ordering System ajax.php save\_user sql injection (CVSS 6.9, SourceCodester Simple Online Food Ordering System)
- [CVE-2026-59561](https://cve.now/CVE-2026-59561.md): Sakura Editor provided by Sakura Editor Development Community contains an OS command injection vulnerability. (CVSS 7.8, Sakura Editor Development Community Sakura Editor)
- [CVE-2026-78196](https://cve.now/CVE-2026-78196.md): achorein expo-share-intent Android File Copy Routine ExpoShareIntentModule.kt getDataColumn path traversal (CVSS 4.8, achorein expo-share-intent)
- [CVE-2026-78187](https://cve.now/CVE-2026-78187.md): Piwigo Public Authentication cross site scripting (CVSS 2.3, Piwigo)
- [CVE-2026-78186](https://cve.now/CVE-2026-78186.md): Open5GS HSS hss-cx-path.c assertion (CVSS 5.3, Open5GS)
- [CVE-2026-78185](https://cve.now/CVE-2026-78185.md): itsourcecode Sales and Inventory System cust\_edit.php sql injection (CVSS 5.3, itsourcecode Sales and Inventory System)
- [CVE-2026-78213](https://cve.now/CVE-2026-78213.md): Hepta Platforms｜Heptabase - Stored Cross-Site Scripting (CVSS 8.7, Hepta Platforms Heptabase)
- [CVE-2026-78182](https://cve.now/CVE-2026-78182.md): Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System plansImmediate PlanController.getImmediatePlans sql injection (CVSS 6.9, Shenzhen Gongji Technology XBROTHER Dynamic Environment Mon…)
- [CVE-2026-78212](https://cve.now/CVE-2026-78212.md): 4MOSAn Security Technology｜4MOSAn Management Center - Arbitrary File Read (CVSS 7.5, 4MOSAn Security Technology 4MOSAn Management Center)
- [CVE-2026-19852](https://cve.now/CVE-2026-19852.md): CyberTutor｜NewSiteServer (NSS) - Arbitrary File Upload (CVSS 6.1, CyberTutor NewSiteServer)
- [CVE-2026-78211](https://cve.now/CVE-2026-78211.md): 4MOSAn Security Technology｜4MOSAn GCB Doctor - OS Command Injection (CVSS 9.8, 4MOSAn Security Technology 4MOSAn GCB Doctor)
- [CVE-2026-19853](https://cve.now/CVE-2026-19853.md): CyberTutor｜NewSiteServer (NSS) - Missing Authentication (CVSS 5.3, CyberTutor NewSiteServer)
- [CVE-2026-78181](https://cve.now/CVE-2026-78181.md): ractivejs ractive Keypath Ractive#set prototype pollution (CVSS 6.9, ractivejs ractive)
- [CVE-2026-19200](https://cve.now/CVE-2026-19200.md): Velociraptor Analyst overwrites live built-in artifacts through verify() (CVSS 8.9, Rapid7 Velociraptor)
- [CVE-2026-78180](https://cve.now/CVE-2026-78180.md): alibaba-fusion next deepMerge index.tsx ConfigProvider.getContextProps prototype pollution (CVSS 6.9, alibaba-fusion next)
- [CVE-2026-78179](https://cve.now/CVE-2026-78179.md): rexrainbow phaser3-rex-notes BehaviorTree Blackboard Data SetValue.js SetValue prototype pollution (CVSS 5.3, rexrainbow phaser3-rex-notes)
- [CVE-2026-78178](https://cve.now/CVE-2026-78178.md): jQWidgets jqx-all.js jqxBaseFramework.extend prototype pollution (CVSS 6.9, jQWidgets)
- [CVE-2026-78177](https://cve.now/CVE-2026-78177.md): TanStack devtools-vite Development Devtools Event Bus package-manager.ts installPackage os command injection (CVSS 2.0, TanStack devtools-vite)
- [CVE-2026-78171](https://cve.now/CVE-2026-78171.md): itsourcecode Sales and Inventory System processlogin.php sql injection (CVSS 6.9, itsourcecode Sales and Inventory System)
- [CVE-2026-78170](https://cve.now/CVE-2026-78170.md): UTT HiPER 1200GW formConfigFastDirectionW strcpy buffer overflow (CVSS 8.7, UTT HiPER 1200GW)
- [CVE-2026-78169](https://cve.now/CVE-2026-78169.md): UTT HiPER 1250GW HTTP Request aspRemoteApConfTempSend strcpy stack-based overflow (CVSS 9.4, UTT HiPER 1250GW)
- [CVE-2026-78168](https://cve.now/CVE-2026-78168.md): EFM ipTIME T24000M Session Validation httpcon\_check\_session\_url improper authentication (CVSS 9.3, EFM ipTIME T24000M)
- [CVE-2026-78167](https://cve.now/CVE-2026-78167.md): EFM ipTIME T16000M Session Validation httpcon\_check\_session\_url improper authentication (CVSS 10.0, EFM ipTIME T16000M)
- [CVE-2026-78166](https://cve.now/CVE-2026-78166.md): provectus kafka-ui Groovy Code MessagesController.java executeSmartFilterTest code injection (CVSS 5.3, provectus kafka-ui)
- [CVE-2026-78161](https://cve.now/CVE-2026-78161.md): warmcat libwebsockets LECP CBOR Recording lecp.c report\_raw\_cbor out-of-bounds write (CVSS 6.9, warmcat libwebsockets)
- [CVE-2026-78209](https://cve.now/CVE-2026-78209.md): exceljs through 4.4.0 CSV Formula Injection via Unescaped Cell Values (CVSS 8.4, exceljs)
- [CVE-2026-78208](https://cve.now/CVE-2026-78208.md): exceljs through 4.4.0 Path Traversal via Unvalidated addImage filename (CVSS 8.7, exceljs)
- [CVE-2026-78207](https://cve.now/CVE-2026-78207.md): exceljs through 4.4.0 Prototype Pollution via deepMerge Reached From Note Serialization (CVSS 9.3, exceljs)
- [CVE-2026-78206](https://cve.now/CVE-2026-78206.md): exceljs through 4.4.0 Uncontrolled Resource Consumption via Unbounded xlsx Decompression (CVSS 8.7, exceljs)
- [CVE-2026-78205](https://cve.now/CVE-2026-78205.md): BentoML 1.4.19 through 1.4.39 Server-Side Request Forgery via Unfiltered RFC 6598 Shared Address Space (CVSS 6.9, BentoML)
- [CVE-2026-78204](https://cve.now/CVE-2026-78204.md): Ghostwriter through 7.2.6 Missing Authorization on Report Template Lint Endpoints (CVSS 5.3, GhostManager Ghostwriter)
- [CVE-2026-78203](https://cve.now/CVE-2026-78203.md): Ghostwriter before 7.1.2 Cross-Client Report Template Disclosure via Unauthorized Template Swap (CVSS 7.1, GhostManager Ghostwriter)
- [CVE-2026-78160](https://cve.now/CVE-2026-78160.md): Dolibarr ERP User Notes note.php authorization (CVSS 5.3, Dolibarr ERP)
- [CVE-2026-78158](https://cve.now/CVE-2026-78158.md): Open5GS AMF UEContextReleaseRequest Path improper authorization (CVSS 5.3, Open5GS)
- [CVE-2026-78157](https://cve.now/CVE-2026-78157.md): Open5GS Rx AA-Request pcrf-rx-path.c pcrf\_rx\_aar\_cb out-of-bounds (CVSS 5.3, Open5GS)
- [CVE-2022-30983](https://cve.now/CVE-2022-30983.md): A cross-site scripting (XSS) vulnerability in Support chatbot in Nopaperforms Niaa-Chatbot through 2022-05-17 allows remote attackers to inj (CVSS 6.1)
- [CVE-2025-26237](https://cve.now/CVE-2025-26237.md): D-Link DI-7001 MINI\_5G 19.10.31A1 contains a code execution vulnerability in the flag parameter of msp\_info, which can be exploited to run a (CVSS 8.1)
- [CVE-2025-26238](https://cve.now/CVE-2025-26238.md): In D-Link DI-8100G 17.12.20A1, the flag parameter in msp\_info can be exploited to execute arbitrary code. (CVSS 8.1)
- [CVE-2026-30512](https://cve.now/CVE-2026-30512.md): A local privilege escalation vulnerability exists in the Restricted Access (Kiosk) Mode implementation of Scheidt & Bachmann entervo HMI pri (CVSS 7.8)
- [CVE-2026-52490](https://cve.now/CVE-2026-52490.md): An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process\_command\_opts() fun (CVSS 9.8)
- [CVE-2026-52492](https://cve.now/CVE-2026-52492.md): An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster() function when computing strip buffer sizes can result in an undersized he (CVSS 7.8)
- [CVE-2026-56135](https://cve.now/CVE-2026-56135.md): In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function build\_inherited\_id() in libntfs-3g/security.c that allows (CVSS 7.4)
- [CVE-2026-56136](https://cve.now/CVE-2026-56136.md): In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfs\_ir\_nill() in libntfs-3g/index.c that allows an attacker to read possibly (CVSS 4.7)
- [CVE-2026-71832](https://cve.now/CVE-2026-71832.md): Aria2 version 1.37.0 and below is affected by a Divide By Zero issue in src/bittorrent\_helper.cc, which allows a remote malicious user to ca (CVSS 6.2)
- [CVE-2026-75368](https://cve.now/CVE-2026-75368.md): A stack overflow in the loadRawData function of SpaceDot AcubeSAT OBC software commit eaf90ec allows attackers to cause a Denial of Service (CVSS 7.5)
- [CVE-2026-75369](https://cve.now/CVE-2026-75369.md): An out-of-bounds read vulnerability in the CAN::Application::parsePerformFunctionMessage component of SpaceDot AcubeSAT OBC software commit (CVSS 7.1)
- [CVE-2026-75370](https://cve.now/CVE-2026-75370.md): An out-of-bounds read/write vulnerability in the MessageParser::parseECSSTCHeader component of SpaceDot AcubeSAT OBC software commit eaf90ec (CVSS 6.5)
- [CVE-2026-75371](https://cve.now/CVE-2026-75371.md): An integer handling flaw in the cobs\_decode function of SpaceDot AcubeSAT OBC software commit eaf90ec allows physically-proximate attackers (CVSS 7.5)
- [CVE-2026-75464](https://cve.now/CVE-2026-75464.md): OneNav 1.2.4 contains an authenticated arbitrary file deletion vulnerability via import\_link(). (CVSS 8.1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-08-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.