CVEs published August 27, 2026
437 CVEs were published on August 27, 2026: 80 critical, 190 high.
- Published
- 437
- Critical
- 80
- High
- 190
- Medium
- 147
- Low
- 20
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 213
Most affected products
- jahlives openssl_encrypt · openssl-encrypt
- 30
- WatchGuard Dimension
- 16
- Spring Framework
- 14
- WatchGuard Fireware OS
- 12
- flowintel
- 11
- Spring Integration
- 10
- Ebyte NA111-M Firmware
- 9
- jahlives openssl_encrypt
- 6
- nltk
- 6
- Spring Cloud Function
- 6
Critical 80
- CVE-2026-78174WatchGuard Dimension Session Hijack via Exposed Session Tokens in Diagnostic LogsWatchGuard Dimension
- CVE-2026-61800Wazuh cluster worker file sync allows arbitrary file write under /var/ossec (incomplete fix for CVE-2026-30893)wazuh
- CVE-2026-19315Fireware OS Pre-Authentication Type Confusion in iked Allows Remote Code ExecutionWatchGuard Fireware OS
- CVE-2026-13086Fireware OS Stack-Based Buffer Overflow in Mobile Security epm EndpointWatchGuard Fireware OS
- CVE-2026-19313Fireware OS Pre-Authentication Heap Buffer Overflow in iked Allows Remote Code ExecutionWatchGuard Fireware OS
- CVE-2026-19318Fireware OS Pre-Authentication Stack Buffer Overflow in iked Allows Remote Code ExecutionWatchGuard Fireware OS
- CVE-2026-76943Xiiaozet LK100W Authentication Bypass Using an Alternate Path or ChannelXiiaozet LK100W
- CVE-2026-78239Xiiaozet LK100W Missing Authentication for Critical FunctionXiiaozet LK100W
- CVE-2026-69658Ebyte NA111-M Cleartext Transmission of Sensitive InformationEbyte NA111-M Firmware
- CVE-2026-76179Ebyte NA111-M Use of GET Request Method With Sensitive Query StringsEbyte NA111-M Firmware
- CVE-2026-71187Ebyte NA111-M Use of Client-Side AuthenticationEbyte NA111-M Firmware
- CVE-2026-73125Ebyte NA111-M Missing Authentication for Critical FunctionEbyte NA111-M Firmware
- CVE-2026-50152Ceph Monitor subscription handler improperly authorizes config-key store reads, exposing cluster secrets to read-only usersceph
- CVE-2026-68929FastGPT: Unauthenticated WeChat channel hijack and denial of service via shareId-only authorizationlabring FastGPT
- CVE-2026-53579Trilium: Note Import to RCE via Book NoteTriliumNext Trilium
- CVE-2026-53578Trilium: Note Import to RCE via Mind Elixir dangerouslySetInnerHtmlTriliumNext Trilium
- CVE-2026-74820Unauthenticated SQL Injection via Dynamic Schema ORDER BY ClauseServiceNow AI Platform
- CVE-2026-18886Unauthenticated Privilege Escalation via System Configuration Image Upload ProcessorServiceNow AI Platform
- CVE-2026-18885Unauthenticated Remote Code Execution in GraphQL Composite Data APIServiceNow AI Platform
- CVE-2026-6876Sandbox Escape in ServiceNow AI PlatformServiceNow AI Platform
- CVE-2026-59313Server Sent Event stream corruption in Spring MVC functional web frameworkSpring Framework
- CVE-2026-59283Spring Framework Safety Guard Bypass via SpEL Expression CompilationSpring Framework
- CVE-2026-48996Trilium: Malicious import with GeoMap marker title XSS leads to RCE on the desktop clientTriliumNext Trilium
- CVE-2026-19092Tutor LMS < 4.0.6 - Unauthenticated Arbitrary Zero-Argument Function Invocation via Template Variable ShadowingTutor LMS
- CVE-2026-81735UI-TARS-desktop @agent-infra MCP Servers Bind Every Interface Without Authentication, Exposing Arbitrary Command Executionbytedance UI-TARS-desktop
- CVE-2026-81719openssl_encrypt before 1.4.9 Remote Code Execution via Pluginjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81717openssl_encrypt before 1.4.9 Integrity Bypass via Added Filesjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81714openssl_encrypt before 1.4.9 Plugin Signing Trust Anchor Enrollment Bypassjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81707openssl_encrypt before 1.4.9 ANSI Escape Injection via Identity Emailjahlives openssl_encrypt
- CVE-2026-81706openssl_encrypt before 1.4.9 Key Substitution via Identity Shadowingjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81702openssl_encrypt before 1.4.9 Key Substitution via Identity Loadjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81701openssl_encrypt before 1.4.9 Arbitrary Code Execution via unsigned pluginjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81700openssl_encrypt before 1.4.9 GPG Signature Verification Bypassjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81698openssl_encrypt before 1.4.9 Shell Injection via info commandjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81696openssl_encrypt before 1.4.9 Terminal Injection via info Commandjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81695openssl_encrypt before 1.4.9 Terminal Injection via key_idjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81694openssl-encrypt before 1.4.9 Output Injection via Unsanitized Filenames in verify-usb Commandjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81685openssl_encrypt before 1.4.9 Text Injection via Recovery Slot Metadatajahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81681openssl_encrypt before 1.4.9 False Encryption via Cleartext Storagejahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81680openssl_encrypt before 1.4.9 Authentication Bypass via Recovery Slot Removaljahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81098Telnyx MCP Server through 6.83.0 Missing Authentication on Streamable HTTP Transportteam-telnyx telnyx-mcp
- CVE-2026-81096ToolUniverse through 1.2.6 Unauthenticated Remote Code Execution via python_code_executor Sandbox Escapemims-harvard ToolUniverse
- CVE-2026-81094mcp-router CLI before 0.6.3 Binds the MCP Aggregator to All Interfaces Without Requiring Authenticationmcp-router
- CVE-2026-16279Improper Authorization vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026xDassault Systèmes 3DSwymer
- CVE-2026-57499Liman: OS Command Injection in LogRotationController allows authenticated admin to execute arbitrary commands (RCE)limanmys core
- CVE-2026-81826Flowintel Fails to Invalidate Active Sessions After Password Changeflowintel
- CVE-2026-81675Multiple Vulnerabilities in TOOOLS' iSquadTOOOLS iSquad
- CVE-2026-81674Multiple Vulnerabilities in TOOOLS' iSquadTOOOLS iSquad
- CVE-2026-81673Multiple Vulnerabilities in TOOOLS' iSquadTOOOLS iSquad
- CVE-2026-81672Multiple Vulnerabilities in TOOOLS' iSquadTOOOLS iSquad
- CVE-2026-74233Zbtlink MQWrt infosrvd Command InjectionZbtlink WE1326 · Zbtlink WE2426-C +14
- CVE-2026-74232Zbtlink MQWrt yunmgrd Cloud C2 ImplantZbtlink L3_V2_8 · Zbtlink WE826-T2 +13
- CVE-2026-78292WordPress Hash Form plugin <= 1.4.1 - PHP Object Injection vulnerabilityhashthemes Hash Form
- CVE-2026-78288WordPress Beautiful Taxonomy Filters plugin <= 2.4.6 - SQL Injection vulnerabilityJonathan de Jong Beautiful Taxonomy Filters
- CVE-2026-78286WordPress Geo Controller plugin <= 8.9.8 - PHP Object Injection vulnerabilityINFINITUM FORM Geo Controller
- CVE-2026-78274WordPress Fluent Boards Pro plugin <= 2.0.11 - Arbitrary File Upload vulnerabilityWP Manage Ninja Fluent Boards Pro
- CVE-2026-78260WordPress Epayco plugin <= 8.4.6 - SQL Injection vulnerabilityEpayco
- CVE-2026-32566WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - Privilege Escalation vulnerabilityACPT (Pro) - Custom Post Types Plugin for WordPress
- CVE-2026-32479WordPress Visitor Traffic Real Time Statistics Pro plugin <= 11.17 - SQL Injection vulnerabilityCODEPRESS IT Solutions Visitor Traffic Real Time Statistics…
- CVE-2026-59354Spring Security OAuth2 Authorization Server: Insufficient validation of Dynamic Client Registration metadataVMware by Broadcom Spring Security
- CVE-2026-77016Workeera Remote Tech Job Board < 1.0.6 - Subscriber+ Arbitrary File Deletion via Candidate Profile Mass AssignmentWorkeera
- CVE-2026-77991Joomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager < 5.0.1joomlaeventmanager.net JEM - Joomla Event Manager extension…
- CVE-2026-47892Spring Framework Header Predicate Bypass in WebFlux Functional EndpointsSpring Framework · org.springframework:spring-webflux
- CVE-2026-47891Spring Framework maxInMemorySize Bypassed in Jaxb2DecoderSpring Framework
- CVE-2026-47890Spring Framework Server Sent Event stream corruption while rendering fragmentsSpring Framework · org.springframework:spring-webflux +1
- CVE-2026-47884Spring Framework Improper Path Limitation in XsltViewSpring Framework · org.springframework:spring-webmvc
- CVE-2026-59270Spring Security embedded UnboundID LDAP server exposes well-known administrative bind DN on all network interfacesSpring Security
- CVE-2026-26897An issue in EcoOnline EHS (com.airsweb.v10) application for Android, version 0.2.499 allows a remote attacker to obtain sensitive informatio
- CVE-2026-30612An issue in Time4 Popcorn for Windows <= 6.2.1.18 and Time4Popcorn for MacOS <= 6.2.1.17 and Time4Popcorn for Android <= 3.5.0.173 allows a
- CVE-2026-35868A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of LB-link Router AC2100_AZ3 V1.
- CVE-2026-35869A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of LB-link Router AC450M V4.0.0.
- CVE-2026-37003Agno up to and including 2.5.8 is vulnerable to Remote Code Execution (RCE) via prompt injection.
- CVE-2026-37004BerriAI litellm <=1.82.4 is vulnerable to Server-Side Template Injection (SSTI), which allows unauthenticated remote attackers to execute arlitellm
- CVE-2026-37006A vulnerability in the WebSocket endpoint of gpt-researcher v0.14.7 and before allows an unauthenticated remote attacker to achieve code exe
- CVE-2026-37007A vulnerability in FileWriterTool in crewai-tools <= 1.10.2rc1 allows a remote attacker to achieve code execution via malicious path travers
- CVE-2026-37065Veno File Manager Project 4.4.9 is vulnerable to Arbitrary File Deletion in /vfm-admin/index.php?section=translations&action=update&remove=.
- CVE-2026-37071Arbitrary File Rename Leading to Privilege Escalation in Actions::renameFile() function in Veno File Manager Project 4.4.9 allows an authent
- CVE-2026-37072Veno File Manager Project Veno File Manager Project 4.4.9 is vulnerable to Incorrect Access Control in admin-head-updates.php.
- CVE-2026-75337The static resource interface /api/static/{deployKey}/ of Yu AI Code Mother v4.3 is vulnerable to path traversal.
- CVE-2026-75357An issue in Bilibili Desktop v.1.17.9 allows a remote attacker to execute arbitrary code via the bili-inject.js and bili-bridge.js component
High 190
- CVE-2026-78612Dimension SQL Injection in Scheduled ReportWatchGuard Dimension
- CVE-2026-78613Dimension SQL Injection in Log ViewerWatchGuard Dimension
- CVE-2026-78610Dimension CSRF Vulnerability in Administrator Passphrase Change EndpointWatchGuard Dimension
- CVE-2026-13108Dimension Denial-of-ServiceWatchGuard Dimension
- CVE-2026-78614Dimension SQL Injection in Audit ReportWatchGuard Dimension
- CVE-2026-19314Fireware OS Integer Underflow in iked Allows Unauthenticated Denial of Service (DoS)WatchGuard Fireware OS
- CVE-2026-19317Fireware OS Pre-Authentication Out-of-Bounds Read in iked Allows Denial of Service (DoS)WatchGuard Fireware OS
- CVE-2026-78011Fireware OS Integer Underflow in Iked Allows Unauthenticated Denial of Service (DoS)WatchGuard Fireware OS
- CVE-2026-78010Fireware OS Stack-Based Buffer Overflow in iked Allows Unauthenticated Denial of ServiceWatchGuard Fireware OS
- CVE-2026-19316Fireware OS Pre-Authentication Double Free in iked Allows Denial of Service (DoS)WatchGuard Fireware OS
- CVE-2026-78009Fireware OS Out-of-Bounds Read in iked Allows Unauthenticated Denial of Service (DoS)WatchGuard Fireware OS
- CVE-2026-78008Fireware OS Authenticated Buffer Overflow in wgagentWatchGuard Fireware OS
- CVE-2026-61783Wazuh: RBAC permission-effect check in mask_sensitive_config allows low-privilege users to read cluster.keywazuh
- CVE-2026-82072Out of bounds read in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside the sandbox via Google Chrome
- CVE-2026-54085Wazuh: Missing input validation in multiple active response scripts allows argument injectionwazuh
- CVE-2026-54083Wazuh: Path traversal in ip-customblock active response allows arbitrary file creation and deletionwazuh
- CVE-2026-77358cpp-httplib: Use-after-free of TLS session in WebSocketClient::shutdown_and_close()yhirose cpp-httplib
- CVE-2026-5706Buffer overflow in Bluetooth Mesh SDK when handling extended advertisementsSilicon Labs BT Mesh SDK
- CVE-2026-44629Improper access control to the Synergis Softwire installation folder.Genetec Synergis Softwire
- CVE-2026-77977Ebyte NA111-M Missing Authentication for Critical FunctionEbyte NA111-M Firmware
- CVE-2026-78037Xiiaozet LK100W OS Command InjectionXiiaozet LK100W
- CVE-2026-76945Ebyte NE2-D11 Use of Client-Side AuthenticationEbyte NE2-D11 Firmware
- CVE-2026-75813Ebyte NE2-D11 Missing AuthorizationEbyte NE2-D11 Firmware
- CVE-2026-76940Ebyte NA111-M Improper Restriction of Excessive Authentication AttemptsEbyte NA111-M Firmware
- CVE-2026-75814Ebyte NA111-M Cross-Site Request ForgeryEbyte NA111-M Firmware
- CVE-2026-73809Ebyte NA111-M Cleartext Transmission of Sensitive InformationEbyte NA111-M Firmware
- CVE-2026-54330Ceph RGW SigV4 handler accepts unsigned x-amz-* headers on presigned requests, allowing privilege escalationceph
- CVE-2026-67560Stack-based Buffer Overflow in Bendix EC80 Brake ECUBendix EC80ESP+ J1708 · Bendix EC80ESP+ 6S/6M +8
- CVE-2026-39944Ceph: CephX AES Authentication errorceph
- CVE-2025-30156Ceph: AES-CBC misuse in CephX and RADOSGW enables authentication bypass and credential forgeryceph
- CVE-2026-18965Missing Authorization in PayRange APIPayRange API
- CVE-2026-76060OS Command Injection in PayRange APIZoneminder
- CVE-2026-18717Improper Certificate Validation in ASE 2000Applied Systems Engineering ASE2000
- CVE-2026-81730Dolibarr 9.0.0 through 23.0.4 Path Traversal via EmailCollector Attachment Filenamedolibarr
- CVE-2026-81729Dolibarr before 23.0.4 Incorrect Authorization on REST API Document Deletiondolibarr
- CVE-2026-81728Dolibarr before 24.0.0 SQL Injection via the CSV and XLSX Import Update Keysdolibarr
- CVE-2026-77438Trilium unauthenticated share-search discloses password-protected and hidden shared notesTriliumNext Trilium
- CVE-2026-53580Trilium arbitrary file read and denial of service via file:// URLs in the automatic image-download featureTriliumNext Trilium
- CVE-2026-81934Redis TLS pending-data list use-after-freeRedis
- CVE-2026-10036SpeechBrain < 1.1.1 Arbitrary Code Execution via CKPT.yaml Parsingspeechbrain
- CVE-2026-81529Connection-option injection via unescaped settings in the canonical MongoDB URL builderMongoDB C# Driver
- CVE-2026-81526Cross-database write redirection via unvalidated dotted database name in bulk write namespacesMongoDB Rust Driver
- CVE-2026-81525Cross-tenant database retargeting via dot/NUL injection in namespace strings in the PHP DriverMongoDB PHP Library · MongoDB PHP Extension +1
- CVE-2026-81522Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C++ DriverMongoDB C++ Driver
- CVE-2026-81521Cross-database write retargeting via unvalidated dotted database name in Client.BulkWrite in the MongoDB Go DriverMongoDB GO Driver
- CVE-2026-59324fluxTransform shared RequestMessageHolder causes cross-message header leakage under async fluxFunctionSpring Integration
- CVE-2026-59316Spring Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting (XSS)Spring Authorization Server
- CVE-2026-59307Deserialization allow-list silently bypassed: setBeanClassLoader replaces deserializer but mapper keeps stale referenceSpring Integration
- CVE-2026-59289Spring for GraphQL Denial of Service via pagination supportSpring for GraphQL
- CVE-2026-59288Spring for GraphQL Information Exposure in GraphiQL supportSpring for GraphQL
- CVE-2026-59286Spring for GraphQL loads Untrusted Resources in GraphiQL supportSpring for GraphQL
- CVE-2026-59285Spring for GraphQL Unsafe Deserialization in pagination supportSpring for GraphQL
- CVE-2026-59282Spring Framework Denial of Service via Unbounded List Growth in Data BindingSpring Framework
- CVE-2026-76640Unitree G1 EDU 1.5.2 BLE GATT RCE via WiFi Provisioning StackUnitree Robotics G1 EDU
- CVE-2026-76639Unitree G1 EDU 1.5.2 Unauthenticated RCE via DDS Bridge and Path TraversalUnitree Robotics G1 EDU
- CVE-2026-75889CVE-2026-75889 CVE RecordGrafana Alloy
- CVE-2026-54718Silverstripe Advanced Workflow: Remote code execution via advanced workflow email templatesilverstripe-advancedworkflow · symbiote/silverstripe-advan…
- CVE-2026-54721Silverstripe UserForms: Remote code execution via userforms email subjectsilverstripe-userforms · silverstripe/userforms
- CVE-2026-47727Trilium: RCE via `shareTemplate` relation missing `isDangerous` flag — Safe import bypass leading to EJS SSTI (Incomplete Fix of CVE-2026-45668)TriliumNext Trilium
- CVE-2026-75871Server-Side Request Forgery (SSRF) in GitLab AI GatewayGitLab AI Gateway
- CVE-2026-19889Server-Side Request Forgery (SSRF) in GitLab AI GatewayGitLab AI Gateway
- CVE-2026-5680Undertow-core: undertow: denial of service via websocket permessage-deflate processingRed Hat JBoss Enterprise Application Platform 8.1.8.GA ·… +8
- CVE-2026-78002Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() functionRed Hat Enterprise Linux · Red Hat Update Infrastructure
- CVE-2026-75159MongoDB BI Connector Improper Memory Handling During Failed Kerberos Authentication May Cause Process TerminationMongoDB BI Connector
- CVE-2026-34674Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)Adobe Substance 3D Sampler
- CVE-2026-79988Authenticated RCE through Twig sandbox escapecraftcms cms
- CVE-2026-81726NLTK through 3.10.3 Path Traversal via Model-Artifact APIsnltk
- CVE-2026-81722nltk PorterStemmer before 3.10.3 Quadratic-time DoSnltk
- CVE-2026-81721openssl_encrypt before 1.4.9 Denial of Service via KDFjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81718openssl_encrypt before 1.4.9 Weak Cryptographic Parametersjahlives openssl_encrypt
- CVE-2026-81716openssl_encrypt before 1.4.9 Plugin Sandbox Path Traversaljahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81715openssl_encrypt before 1.4.9 Credential Exposure via Debug Outputjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81705openssl-encrypt before 1.4.9 Password Cleartext Leak via Debugjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81704openssl_encrypt before 1.4.9 Weak Key Derivation via D-Busjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81703openssl_encrypt before 1.4.9 Authentication Bypass via Unencrypted PQC Keyjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81699openssl_encrypt before 1.4.9 Denial of Service via unbounded KDF costjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81697openssl_encrypt before 1.4.9 KDF Downgrade via CWD-relative Configurationjahlives openssl_encrypt
- CVE-2026-81693openssl_encrypt before 1.4.9 Denial of Service via QR total fieldjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81692openssl_encrypt before 1.4.9 Denial of Service via STREAMINFOjahlives openssl_encrypt
- CVE-2026-81691openssl_encrypt before 1.4.9 Credential Leakage via Unvalidated Server URLsjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81690verify-usb before 1.4.9 Symlink Directory Traversal Code Executionjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81689openssl_encrypt before 1.4.9 Weak Pepper Key Derivationjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81688openssl_encrypt before 1.4.9 Plaintext Confirmation Oracle via SHA-256jahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81687openssl_encrypt before 1.4.9 Denial of Service via KDFjahlives openssl_encrypt
- CVE-2026-81683openssl_encrypt before 1.4.9 Plaintext Private Key Storagejahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81682openssl_encrypt before 1.4.9 Insecure File Permissionsjahlives openssl_encrypt
- CVE-2026-81679OpenRemote before 1.28.0 Cross-Realm Information Disclosure via Notification APIopenremote
- CVE-2026-81335Baserow before 2.3.1 Unauthenticated Data Disclosure via Discarded Permission Check on Builder Data SourcesBaserow
- CVE-2026-81100Timescale tiger-gh-mcp-server DNS Rebinding via Disabled Host Header Allow-Listtimescale tiger-gh-mcp-server
- CVE-2026-81099Timescale tiger-slack DNS Rebinding via Disabled Host Header Allow-Listtimescale tiger-slack
- CVE-2026-81097rails-mcp-server 1.4.0 through 1.6.0 OS Command Execution via execute_ruby PTY Escapemaquina-app rails-mcp-server
- CVE-2026-81095Timescale pg-aiguide through 0.5.0 DNS Rebinding via Disabled Host Header Allow-Listtimescale pg-aiguide
- CVE-2026-81093Apify Actors MCP Server before 0.9.12 Server-Side Request Forgery via get-html-skeletonapify actors-mcp-server
- CVE-2026-81092mcp-go before 0.56.0 Missing Host Header Validation Enables DNS Rebindingmark3labs mcp-go
- CVE-2026-81091mcp-use Inspector Proxy Server-Side Request Forgery via Caller-Supplied Target URLmcp-use
- CVE-2026-80211FrontAccounting through 2.4.20 Use of Unsalted MD5 for Password StorageFrontAccounting
- CVE-2026-80210FrontAccounting through 2.4.20 Cross-Site Request Forgery on Financial Transaction FormsFrontAccounting
- CVE-2026-80208APITable through 1.13.0-beta.1 Missing Authentication on the Internal Account Closure Endpointsapitable
- CVE-2026-80212An issue was discovered in the resolv gem before 0.7.2 for Ruby.Ruby resolv
- CVE-2026-81818Flowintel Organization Administrator Can Reset Full Administrator Password and Escalate Privilegesflowintel
- CVE-2026-40526Volmarg Personal Management System Path Traversal via get-file EndpointVolmarg personal-management-system
- CVE-2026-81817Flowintel Missing Task-to-Case Authorization Allows Cross-Case Task Modificationflowintel
- CVE-2026-81677Multiple Vulnerabilities in TOOOLS' iSquadTOOOLS iSquad
- CVE-2026-81676Multiple Vulnerabilities in TOOOLS' iSquadTOOOLS iSquad
- CVE-2026-81743Flowintel Arbitrary Log File Path Allows Remote Code Execution via Template Injectionflowintel
- CVE-2026-66155A vulnerability has been identified in Element maps-ng V47 (All versions < V47.12.3), Element maps-ng V48 (All versions < V48.11.3), ElementSiemens Element maps-ng
- CVE-2026-81662Flowintel Alert Settings Configuration Allows Remote Code Execution via Arbitrary Configuration Keysflowintel
- CVE-2026-81659Flowintel Note PDF Export Allows Arbitrary Local File Read via Pandoc/XeLaTeX Processingflowintel
- CVE-2026-74848Apache APISIX: Cross-user response poisoning in serverless pluginsApache Software Foundation Apache APISIX
- CVE-2026-75005Apache APISIX: Unauthenticated CPU-exhaustion DoSApache Software Foundation Apache APISIX
- CVE-2026-75020Apache APISIX: ldap-auth plugin cross-subtree identity impersonationApache Software Foundation Apache APISIX
- CVE-2026-81625Stack buffer overflow in Greenbone OS and openvas-scannerGreenbone OS · greenbone openvas-scanner
- CVE-2026-81277WordPress Suggestion Engine for WooCommerce plugin <= 2.0.11 - SQL Injection vulnerabilityVillaTheme Suggestion Engine for WooCommerce
- CVE-2026-81273WordPress FluentBooking Pro plugin <= 2.2.4 - Cross Site Request Forgery (CSRF) vulnerabilityWP Manage Ninja FluentBooking Pro
- CVE-2026-81271WordPress GeoDirectory plugin <= 2.8.176 - Cross Site Request Forgery (CSRF) vulnerabilityPaolo GeoDirectory
- CVE-2026-80433WordPress SureFeedback Client Site plugin <= 1.2.12 - Sensitive Data Exposure vulnerabilityBrainstorm Force SureFeedback Client Site
- CVE-2026-78293WordPress WP w3all phpBB plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerabilityaxew3 WP w3all phpBB
- CVE-2026-78289WordPress CozyStay theme <= 1.10.0 - Cross Site Scripting (XSS) vulnerabilityLoftOcean CozyStay
- CVE-2026-78285WordPress Like Button Rating plugin <= 2.6.61 - SQL Injection vulnerabilityLikeBtn Like Button Rating
- CVE-2026-78283WordPress Music Player for WooCommerce plugin <= 1.8.9 - Cross Site Scripting (XSS) vulnerabilitycodepeople Music Player for WooCommerce
- CVE-2026-78281WordPress CP Media Player plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerabilitycodepeople CP Media Player
- CVE-2026-78276WordPress Fluent Boards Pro plugin <= 2.0.11 - PHP Object Injection vulnerabilityWP Manage Ninja Fluent Boards Pro
- CVE-2026-78271WordPress FluentCRM Pro plugin <= 3.1.12 - Privilege Escalation vulnerabilityWP Manage Ninja FluentCRM Pro
- CVE-2026-78261WordPress Realtyna Organic IDX plugin plugin <= 5.4.1 - Cross Site Scripting (XSS) vulnerabilityRealtyna Organic IDX plugin
- CVE-2026-78257WordPress Booking and Rental Manager plugin <= 2.7.5 - PHP Object Injection vulnerabilitymagepeopleteam Booking and Rental Manager
- CVE-2026-32564WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - SQL Injection vulnerabilityACPT (Pro) - Custom Post Types Plugin for WordPress
- CVE-2026-32550WordPress Kadence Shop Kit plugin <= 3.0.6 - SQL Injection vulnerabilityLiquid Web Kadence Shop Kit
- CVE-2026-27330WordPress Mobile App for WooCommerce plugin <= 0.4.62 - Broken Access Control vulnerabilityWeptile Mobile App for WooCommerce
- CVE-2026-81581User input in WibuKey is used (without proper sanitization) to compute the address of a pointer, which can be exploited to let the user point to any storage, to which Windows responds with a denial of service.wibu-systems-ag wibukey
- CVE-2026-81579An untrusted Pointer Dereference can be exploited to escalate privileges by an unprivileged user on Windowswibu-systems-ag wibukey
- CVE-2026-81576Improper Authentication of Session Handleswibu-systems-ag codemeter-runtime
- CVE-2026-81575Missing Sanity Checks for Buffer Lengthswibu-systems-ag codemeter-runtime
- CVE-2026-81574Format String Vulnerability in Loggerwibu-systems-ag codemeter-runtime
- CVE-2026-81573Improper Access Control in Local-Only Configuration Commandswibu-systems-ag codemeter-runtime
- CVE-2026-81572Local Privilege Escalation in CodeMeter Runtime on Windowswibu-systems-ag codemeter-runtime
- CVE-2026-7833312 Step Meeting List 3.17 - 3.19.16 - Unauthenticated Stored XSS via Geocode Event Log12 Step Meeting List
- CVE-2026-78137StoreGrowth: Smart Sales Booster for WooCommerce < 2.1.2 - Unauthenticated Arbitrary Price Manipulation via BOGO Add-to-CartStoreGrowth
- CVE-2026-77018Workeera Remote Tech Job Board < 1.0.6 - Subscriber+ Arbitrary File Upload via Candidate Profile Mass AssignmentWorkeera
- CVE-2026-77017Workeera Remote Tech Job Board < 1.0.6 - Subscriber+ Arbitrary File Read via Candidate Profile Mass AssignmentWorkeera
- CVE-2026-19715WP OAuth Server < 6.3.1 - Unauthenticated OAuth Token and User Data Disclosure via Debug Log FileWP OAuth Server
- CVE-2026-19223Smush < 4.3.2 - Admin+ Network-Wide RCE via Hub Connector on MultisiteSmush
- CVE-2026-13415CMP - Coming Soon & Maintenance < 4.1.18 - Editor+ Privilege Escalation via cmp_ajax_import_settingsCMP
- CVE-2026-47893Spring Framework Request Headers Included in Exception Reasons in HandshakeWebsocketServiceSpring Framework
- CVE-2026-47889Spring Framework sameSite Attribute Dropped in JettyCoreServerHttpResponseSpring Framework
- CVE-2026-47888Spring Framework Memory Leak via SETUP Frame in RSocketMessageHandlerSpring Framework
- CVE-2026-47886Spring Framework Denial of Service via Unbounded Exponentiation in SpEL ExpressionsSpring Framework
- CVE-2026-47885Spring Framework maxPartSize Ignored in PartEventHttpMessageReaderSpring Framework
- CVE-2026-47879Spring Cloud Gateway SSRF and native file access with gRPCSpring Cloud Gateway
- CVE-2026-47877Spring Security Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting (XSS)Spring Security
- CVE-2026-47849Spring Data REST allows mutation of identifier and version properties via JSON PatchSpring Data REST
- CVE-2026-26452ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 lcontains a vulnerability in the option parsing logic that causes a segmentation fault when p
- CVE-2026-26453ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a null pointer dereference vulnerability in the coap_server_handle_session() functio
- CVE-2026-26456A null pointer dereference vulnerability exists in the server-side session management logic of ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd
- CVE-2026-26457ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a null pointer dereference vulnerability in the coap_dump_msg() function when proces
- CVE-2026-26459ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a vulnerability in the option parsing logic that causes a segmentation fault when pr
- CVE-2026-26899An issue was discovered in luci-app-https-dns-proxy on OpenWrt PR #15 (< 2026-01-17).
- CVE-2026-30045An integer overflow in the /nnrf-disc/v1/nf-instances component of open5gs v2.7.6 allows attackers to cause a Denial of Service (DoS) via su
- CVE-2026-30046A reachable assertion vulnerability in the NUDM-UECM interface of Open5GS v2.7.6 allows attackers to cause a Denial of Service (DoS) via sup
- CVE-2026-30047A reachable assertion vulnerability in the /nsmf-pdusession/v1/sm-contexts component of Open5GS v2.7.6 allows attackers to cause a Denial of
- CVE-2026-30050An issue in the ModifyAMFEventSubscriptionProcedure function (processor/event_exposure.go) of free5gc v4.1.0 allows attackers to cause a Den
- CVE-2026-30051An issue in the CreateUEContextProcedure function (/v1/ue-contexts/{supi}) of free5gc v4.1.0 allows attackers to cause a Denial of Service (
- CVE-2026-30056A NULL pointer dereference in the AMF NGAP Dispatcher component of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via su
- CVE-2026-30057An issue in the CreateUEContext handler component of free5gc v4.1.0 allows attackers to cause a Denial of Service (DoS) via supplying a craf
- CVE-2026-30058Improper Input Validation in the HTTPModifySubscription handler of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a
- CVE-2026-30059An issue in the NAS decoder component of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted Registration Reque
- CVE-2026-30060An issue in free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) when parsing crafted SUCI data during UE registration.
- CVE-2026-30062An issue in the NGAP handler of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted NAS PDU.
- CVE-2026-30063An issue in the NF Discovery endpoint of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted snssais query.
- CVE-2026-30064Improper input validation in the buildFilter function (processor/processor.go) of free5gc v4.0.1 allows attackers to cause a Denial of Servi
- CVE-2026-30067An issue in the complexQueryFilterSubprocess function in the NRF Discovery service of free5gc v4.0.1 allows attackers to cause a Denial of S
- CVE-2026-30068Improper input validation in the HandleUpdate function (/sbi/parameter_provision.go) of free5gc v4.0.1 allows attackers to cause a Denial of
- CVE-2026-30069A NULL pointer dereference in the UDMC registration handler component of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS)
- CVE-2026-30070An issue in the HandleGetSharedData function of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.
- CVE-2026-30071An issue in the RechargePut function of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.
- CVE-2026-30072A NULL pointer dereference in the CDR processing path of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via supplying cr
- CVE-2026-30073An issue in the NssaiAvailabilitySubscriptionCreate component of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a cr
- CVE-2026-36102An issue in the inviteController.js component in Bluewave Labs Checkmate <=3.3.0 allows remote authenticated administrators to escalate priv
- CVE-2026-37012A vulnerability in pentestgpt/core/langfuse.py in PentestGPT 1.0.0 allows remote attackers to disclose sensitive user telemetry data via har
- CVE-2026-37068Arbitrary file write in /vfm-admin/index.php?section=translations&action=update in Veno File Manager Project 4.4.9 allows an authenticated u
- CVE-2026-37198An integer overflow in the SMF component of Open5GS v2.7.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted GTP p
- CVE-2026-38344A NULL pointer dereference in the get_min_buffer_size function (/libswscale/slice.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to caus
- CVE-2026-38346An integer overflow in the yuv2planeX_8_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial
- CVE-2026-38347A heap overflow in the ff_sws_alphablendaway function (libswscale/alphablend.c) of FFmpeg git-master commit 722a217 allows attackers to caus
- CVE-2026-38348An integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) v
- CVE-2026-38349An integer overflow in the hScale16To19_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial
- CVE-2026-38350An integer overflow in the target_sws_fuzzer() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Den
- CVE-2026-75339The storage endpoint /storage/upload of cjbi admin3 v3.0.0 are missing permission checks.
- CVE-2026-75417A SQL injection vulnerability was found in YzmCMS 7.5.
- CVE-2026-75418A path traversal vulnerability exists in the built-in preview/development web server of Lektor <3.3.14 on Windows.
- CVE-2026-75419go-wind-cms (GoWind) before 1.0.0 has a missing authorization vulnerability.
Medium, low and unrated 167
- CVE-2026-61802Wazuh discloses cleartext cluster key to low-privilege API users via GET /cluster/local/configwazuh
- CVE-2026-78616Dimension Stored XSS via Trusted CA Certificate ConfigurationWatchGuard Dimension
- CVE-2026-78498Dimension Server-Side Request Forgery via Email Server Test SettingsWatchGuard Dimension
- CVE-2026-78103Dimension Log Server Configuration Lock Bypass VulnerabilityWatchGuard Dimension
- CVE-2026-78615WatchGuard Dimension Reflected DOM-Based XSS in Report Detail PageWatchGuard Dimension
- CVE-2026-78495Dimension Server-Side Request Forgery via Remote Backup Connection TestWatchGuard Dimension
- CVE-2026-78617WatchGuard Dimension Web UI Authentication Brute-Force Due to Missing Rate LimitingWatchGuard Dimension
- CVE-2026-78047Dimension Stored XSS in Scheduled Report TaskWatchGuard Dimension
- CVE-2026-78499Dimension SSRF via FTP Server Test ConnectionWatchGuard Dimension
- CVE-2026-78618Dimension Business Logic Flaw Allows Chained Backend Object OperationsWatchGuard Dimension
- CVE-2026-78500Dimension Blind SSRF via Database Test Connection FeatureWatchGuard Dimension
- CVE-2026-54084Wazuh agent enrollment NULL pointer dereference via malformed manager responsewazuh
- CVE-2026-81851Fireware OS Heap-Based Buffer Overflow in iked Allows Denial of ServiceWatchGuard Fireware OS
- CVE-2026-81848cyberchitta scrapling-fetch-mcp _fetcher.py s_fetch_pattern server-side request forgerycyberchitta scrapling-fetch-mcp
- CVE-2026-17610RAIL 802.15.4 Mux missing ACK can lead to DoSSilicon Labs SiSDK
- CVE-2026-77341cpp-httplib: CRLF injection via unvalidated HTTP trailer headers in chunked response writingyhirose cpp-httplib
- CVE-2026-81847MAA-AI MaaMCP pipeline_tools.py load_pipeline path traversalMAA-AI MaaMCP
- CVE-2026-81845arben-adm mcp-sequential-thinking Import Session/Export Session server.py export_session path traversalarben-adm mcp-sequential-thinking
- CVE-2026-75548Ebyte NA111-M Improper Restriction of Rendered UI Layers or FramesEbyte NA111-M Firmware
- CVE-2026-81837RooCodeInc Roo-Code ApplyPatchTool ApplyPatchTool.ts path.resolve path traversalRooCodeInc Roo-Code
- CVE-2026-73839Ebyte NE2-D11 Insufficiently Protected CredentialsEbyte NE2-D11 Firmware
- CVE-2026-81836RooCodeInc Roo-Code OAuth Callback oauth.ts cleartext transmissionRooCodeInc Roo-Code
- CVE-2026-80179Jwcrypto: jwcrypto: denial of service via malformed jwe tokensRed Hat Ansible Automation Platform · Red Hat Enterprise… +2
- CVE-2026-68967Out-of-bounds Write in Bendix EC80 Brake ECUBendix EC80ESP+ J1708 · Bendix EC80ESP+ 6S/6M +8
- CVE-2026-71396Use of Hard-coded Credentials in Bendix EC80 Brake ECUBendix EC80ESP+ J1708 · Bendix EC80ESP+ 6S/6M +8
- CVE-2026-81835RooCodeInc Roo-Code MCP Integration Trust Model malicious_mcp_server.py fetch_instructions code injectionRooCodeInc Roo-Code
- CVE-2026-81731Frappe 15.11.0 through 16.32.0 Stored XSS via Workspace Link Descriptionfrappe
- CVE-2026-81838Zip Slip Arbitrary File Write in AWS diagram-as-code (awsdac)aws diagram-as-code
- CVE-2026-81834RooCodeInc Roo-Code README File ExecaTerminalProcess code injectionRooCodeInc Roo-Code
- CVE-2026-81833RooCodeInc Roo-Code CodeIndexManager helpers.ts optimizeQuery code injectionRooCodeInc Roo-Code
- CVE-2026-81931Unrestricted upload of file with dangerous type in Prospero Flow CRM product photo allows stored cross-site scriptingRoskus Prospero Flow CRM
- CVE-2026-18374Passing an effectively empty string to the `,ccs=` syntax extension of the mode argument in the `fopen` function in the GNU C Library versioThe GNU C Library glibc
- CVE-2026-81893Gdk-pixbuf: gdk-pixbuf: invalid write in jpeg icc profile parser on error recoveryRed Hat Enterprise Linux
- CVE-2026-34616DNG SDK | Out-of-bounds Read (CWE-125)Adobe DNG Software Development Kit
- CVE-2026-34620DNG SDK | Out-of-bounds Write (CWE-787)Adobe DNG Software Development Kit
- CVE-2026-81530KMS master key exposure via unredacted credential serialization in driver settings stringMongoDB C# Driver
- CVE-2026-81528NoSQL injection via array replacement bypassing update shape validation in driver write pathMongoDB C# Driver
- CVE-2026-81527NoSQL injection via unquoted constant GroupBy keys in LINQ pipeline translationMongoDB C# Driver
- CVE-2026-81524Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C DriverMongoDB C Driver
- CVE-2026-81523Cross-tenant database retargeting via dot/NUL injection in namespace strings in libmongocryptMongoDB libmongocrypt
- CVE-2026-59322EmbeddedHeadersJsonMessageMapper default gives wire peer full control of MessageHeadersSpring Integration
- CVE-2026-59321Shared JSR-223 ScriptEngine evaluated concurrently without THREADING checkSpring Integration
- CVE-2026-59320In Spring AMQP the link credit never replenished on listener exception pathSpring AMQP
- CVE-2026-59319RediSearch Tag Injection in RedisChatMemoryRepository Allows Cross-Conversation Data ExposureSpring AI
- CVE-2026-59317In Spring for Apache Kafka, missing header validation in DeadLetterPublishingRecovererFactory enables denial of service via a poison-pill loopSpring for Apache Kafka
- CVE-2026-59315Spring Cloud Config Monitor Denial of ServiceSpring Cloud Config
- CVE-2026-59314Spring Framework response splitting in ContentDispositionSpring Framework
- CVE-2026-59311Fixed predictable /tmp/ziptransformer work directory enables symlink pre-creationSpring Integration
- CVE-2026-59306Potential for deserialization of untrusted types in Spring Cloud StreamSpring Cloud Stream
- CVE-2026-59305Partition interceptor may be improperly added while sending messageSpring Cloud Stream
- CVE-2026-59304Improper caching of the original content type in Spring Cloud Stream AvroSpring Cloud Stream
- CVE-2026-59303Dynamic destination cache size is not properly bound in Spring Cloud StreamSpring Cloud Stream
- CVE-2026-59302Potential for logging sensitive data in Spring Cloud StreamSpring Cloud Stream
- CVE-2026-59301Potential for logging sensitive data in Spring Cloud Function AzureSpring Cloud Function
- CVE-2026-59300Potential for logging sensitive data in Spring Cloud Function AWSSpring Cloud Function
- CVE-2026-59299Composition lookup can potentially poison base function in Spring Cloud FunctionSpring Cloud Function
- CVE-2026-59298Potential for improper filtering of HTTP headers in Spring Cloud FunctionSpring Cloud Function
- CVE-2026-59297Spring Cloud Function can incorrectly determine if URI is secureSpring Cloud Function
- CVE-2026-59294Arbitrary File Write via Path Traversal in ResourceCacheServiceSpring AI
- CVE-2026-59293SMB minimum protocol dialect defaults to SMB1Spring Integration
- CVE-2026-59292World-readable metadata file in PropertiesPersistingMetadataStore (insecure temp-file permissions)Spring Integration
- CVE-2026-59291Potential arbitrary file read and SSRF vulnerability in Spring Cloud FunctionSpring Cloud Function
- CVE-2026-59287Spring for GraphQL WebSocket Client Denial of ServiceSpring for GraphQL
- CVE-2026-59284Spring Cloud Commons no allow list for writable env actuator endpointSpring Cloud Commons
- CVE-2026-59281Spring Framework Cross-site Scripting via EscapedErrorsSpring Framework
- CVE-2026-59277Spring Security InetAddressMatchers Incomplete Internal Network ClassificationSpring Security
- CVE-2026-59276Timing Attack via Non-Constant-Time Comparison of Sensitive ValuesSpring Security
- CVE-2026-4398Authorization Bypass Through User-Controlled Key in GitLabGitLab
- CVE-2026-65931LimeSurvey Community Edition 7.0.5 - Improper authorization in survey menu entry creation endpointLimeSurvey
- CVE-2026-54732libreoffice-convert: path traversal / arbitrary file writeelwerene libreoffice-convert · libreoffice-convert
- CVE-2026-55758CC: Tweaked: Incomplete fix for GHSA-5jh9-2h63-pw4q: RFC 8215 NAT64 prefix (64:ff9b:1::/96) bypasses SSRF protectionCC-Tweaked
- CVE-2026-54687n8n-nodes-sqlite3: Path traversal via user-controlled database file path (db_path parameter)DangerBlack n8n-node-sqlite3 · n8n-nodes-sqlite3
- CVE-2026-54713CakePHP Queue: Incomplete Comparison in getUniqueId vulnerable to collisionscakephp queue · cakephp/queue
- CVE-2026-25250EAZ EazyFix 12.9 allows a Security Feature Bypass related to a "Missing Cryptographic Step" associated with "Secure Boot disable."eazsolution EazyFix
- CVE-2026-66353Doggo vulnerable to cross-site scripting via unescaped date field valueswoylie doggo
- CVE-2026-59280Spring Framework Path Traversal via Backslash in SpringTemplateLoaderSpring Framework
- CVE-2026-59272Log4j2 AmqpAppender disables TLS hostname verification by defaultSpring AMQP
- CVE-2026-79720Reflected XSS in Netron versions <=9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perNetron
- CVE-2026-79719Reflected XSS in Netron versions <=9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perNetron
- CVE-2026-79718Reflected XSS in Netron versions <=9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perNetron
- CVE-2026-19854CVE-2026-19854 CVE RecordGrafana Clickhouse Datasource
- CVE-2026-75573MongoDB Connector for BI mongodrdl Logs TLS Private-Key Password When Duplicate Options Are SuppliedMongoDB BI Connector
- CVE-2026-71402wicked: out-of-bounds read in the DHCPv4 option parser due to payload length taken from the IP total lengthSUSE wicked
- CVE-2026-71401wicked: integer underflow of the UDP length in ni_capture_inspect_udp_header() leads to an out-of-bounds readSUSE wicked
- CVE-2026-81727NLTK before 3.10.3 Hardlink File Overwrite via downloadernltk
- CVE-2026-81725NLTK before 3.10.3 Regular Expression Denial of Service via Pl196xCorpusReadernltk
- CVE-2026-81724NLTK before 3.10.3 Denial of Service via Uncontrolled Recursionnltk
- CVE-2026-81723NLTK before 3.10.3 Quadratic CPU Exhaustion via XMLCorpusViewnltk
- CVE-2026-81720openssl_encrypt before 1.4.9 Denial of Service via Unbounded Argon2jahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81686openssl_encrypt before 1.4.9 D-Bus Properties Authorization Bypassjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81684openssl_encrypt before 1.4.9 Information Disclosure via Command Linejahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81678AVideo SSRF Guard Bypass via IPv6 Transition AddressesWWBN AVideo
- CVE-2026-81664OpenFaaS Gateway 0.27.11 through 0.27.13 Missing Authentication on the /system/telemetry Routeopenfaas faas
- CVE-2026-81334darknet through 6.0 Out-of-Bounds Read and Write via Unchecked Layer Index in .cfg Parserhank-ai darknet
- CVE-2026-81102Dropbox Dash MCP Server DNS Rebinding via Missing Host Header Validationdropbox mcp-server-dash
- CVE-2026-81101Airtable MCP CLI before 0.2.5 Credential Disclosure via Unvalidated Configured Endpointairtable-mcp-cli
- CVE-2026-80209Fonoster through 0.22.7 Incorrect Authorization in the Identity UpdateWorkspace Handlerfonoster
- CVE-2026-80207APITable through 1.13.0-beta.1 Missing Authentication on the Internal Notification Create Endpointapitable
- CVE-2026-64896T2000 open debug portJohnson Controls T2000
- CVE-2026-80213An issue was discovered in the resolv gem before 0.7.2 for Ruby.Ruby resolv
- CVE-2026-11754User Enumeration in Seres Software's syWEBSeres Software syWEB
- CVE-2026-11747Reflected XSS in Seres Software's syWEBSeres Software syWEB
- CVE-2026-81827Flowintel Login Email Validation Bypass Allows Log Injection via Crafted Email Inputflowintel
- CVE-2026-81820Flowintel HTML Injection in MISP Case History Timeline via Crafted Object Attributesflowintel
- CVE-2026-79653In Eclipse SW360 versions 19.0.0, 19.1.0, 19.2.0, 20.0.0, 20.1.0, if the system is configured to use file system storage with config key enaEclipse Foundation Eclipse SW360
- CVE-2026-56651Arbitrary File Overwrite via Symlink Following in dool projectscottchiefbaker dool
- CVE-2026-56652Formula Injection in dool projectscottchiefbaker dool
- CVE-2026-81819Flowintel Missing Authorization Allows Regular API Users to View Other Users’ Task Assignmentsflowintel
- CVE-2026-5738Reflected XSS in BilPark's DoXBASEBilPark Informatics Technologies Industry and Trade DoXBASE
- CVE-2025-62343HCL IntelliOps Event Management is affected by multiple security vulnerabilities.HCL Software HCL IEM
- CVE-2025-62342HCL IntelliOps Event Management is affected by multiple security vulnerabilities.HCL Software IEM
- CVE-2026-81814Flowintel Stored XSS in Calendar via Malicious Case Titleflowintel
- CVE-2026-81753Flowintel Stored XSS in Case Notes via Malicious Mermaid Diagram Contentflowintel
- CVE-2026-81562AlexGladkov claude-in-mobile client.ts execSync os command injectionAlexGladkov claude-in-mobile
- CVE-2026-81668Rubygem-katello: cross-tenant content view filter rule access and modification via unauthorized parent filter lookupRed Hat Satellite
- CVE-2026-5218HTML Injection in Softtr's E-Commerce PackSofttr Informatics Technology Trading Limited Company E-Com…
- CVE-2026-17562IDOR in Zirve Security's AdisyonProSummit Security Systems AdisyonPro
- CVE-2026-81560blackms aistack Static File server.ts path traversalblackms aistack
- CVE-2026-81658Foreman: cross-tenant disclosure of template revisions via unauthorized audit lookupRed Hat Satellite
- CVE-2026-81276WordPress Kali Forms plugin <= 2.4.23 - Broken Access Control vulnerabilityWP Chill Kali Forms
- CVE-2026-81274WordPress Ditty plugin <= 3.1.67 - Broken Access Control vulnerabilitymetaphorcreations Ditty
- CVE-2026-81272WordPress FluentPlayer Pro plugin <= 1.3.2 - Broken Access Control vulnerabilityWP Manage Ninja FluentPlayer Pro
- CVE-2026-78275WordPress Fluent Boards Pro plugin <= 2.0.11 - Arbitrary File Deletion vulnerabilityWP Manage Ninja Fluent Boards Pro
- CVE-2026-78273WordPress Fluent Boards Pro plugin <= 2.0.11 - Cross Site Scripting (XSS) vulnerabilityWP Manage Ninja Fluent Boards Pro
- CVE-2026-81279WordPress Push Notification for Post and BuddyPress plugin <= 3.20 - Broken Access Control vulnerabilityMurali Push Notification for Post and BuddyPress
- CVE-2026-59355Spring Authorization Server: Open Redirect via request_uri parameterVMware Spring Authorization Server
- CVE-2026-78139Notifima < 3.1.4 - Subscriber+ Stock Alert Unsubscription via IDORNotifima
- CVE-2026-78138Finale Lite < 2.21.0 - Subscriber+ Campaign Configuration Disclosure via wcct_quick_view_htmlFinale Lite
- CVE-2026-78125LearnPress – Sepay Payment < 4.0.3 - Unauthenticated Order Status DisclosureLearnPress
- CVE-2026-76549UpdraftPlus < 1.26.7 - Backup Restoration via CSRFUpdraftPlus: WP Backup & Migration Plugin
- CVE-2026-19454JetBackup 3.1.18.8 - 3.1.23.3 - Admin+ Multisite Network Backup DownloadJetBackup
- CVE-2026-19225Defender Security < 6.2.0 - Admin+ Network-Wide RCE via Hub Connector on MultisiteDefender Security
- CVE-2026-16569ShopApper <= 0.4.62 - Subscriber+ Arbitrary Product Stock UpdateMobile App for WooCommerce: ShopApper Mobile App Builder Se…
- CVE-2026-16568ShopApper <= 0.4.62 - Subscriber+ Customer Data Disclosure via IDORMobile App for WooCommerce: ShopApper Mobile App Builder Se…
- CVE-2026-16567Document Embedder < 2.3.1 - Unauthenticated Private Document Download via Token OracleDocument Embedder
- CVE-2026-13416CMP - Coming Soon & Maintenance < 4.1.18 - Editor+ Stored XSS via niteoCS_socialmediaCMP
- CVE-2026-13414CMP - Coming Soon & Maintenance < 4.1.18 - Unauthenticated Maintenance Mode Disable via cmp_disable_comingsoon_ajaxCMP
- CVE-2026-77034Joomla Extension - joomlaeventmanager.net - Unauthenticated article overwrite and force-publish in Joomla Event Manager < 5.0.1joomlaeventmanager.net JEM - Joomla Event Manager extension…
- CVE-2026-77990Joomla Extension - joomlaeventmanager.net - Attendee lists readable by any logged-in user in Joomla Event Manager < 5.0.1joomlaeventmanager.net JEM - Joomla Event Manager extension…
- CVE-2026-77035Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager < 5.0.1joomlaeventmanager.net JEM - Joomla Event Manager extension…
- CVE-2026-77989Joomla Extension - joomlaeventmanager.net - Reflected XSS via the PDF export link in Joomla Events Manager < 5.0.1joomlaeventmanager.net JEM - Joomla Event Manager extension…
- CVE-2026-47887Spring Framework Open Redirect in UrlFileNameViewControllerSpring Framework
- CVE-2026-47883Spring Framework Open Redirect in UrlHandlerFilterSpring Framework
- CVE-2026-59278In Spring for Apache Kafka, SSRF via DNS resolution triggered by untrusted java.net types in header mapper default trusted packagesSpring for Apache Kafka
- CVE-2026-59275Remote JVM termination: nested-array Java deserialization bypasses allowlist, triggers StackOverflowError, default JavaLangErrorHandler calls System.exit(99)Spring AMQP
- CVE-2026-59274Unbounded decompression in UnZipTransformer enables zip-bomb DoSSpring Integration
- CVE-2026-59271Admin password disclosed in BrokerNotAliveException messageSpring AMQP
- CVE-2026-47894Spring Cloud Config Server Native Environment Repository ExposureSpring Cloud Config
- CVE-2026-47881Denial of Service in Spring Batch FlatFileItemReader via Malformed Input FileSpring Batch
- CVE-2026-47880DefaultJmsHeaderMapper copies all JMS user properties into MessageHeaders without excluding framework-significant namesSpring Integration
- CVE-2026-47878Unsafe Java deserialization in DefaultExecutionContextSerializer without class allowlistSpring Batch
- CVE-2026-47875JobParameterDeserializer bypasses the trusted-type allowlistSpring Batch
- CVE-2026-47864Unsafe Java deserialization in SerializingHttpMessageConverter — remote code executionSpring Integration
- CVE-2026-16895Authentication Bypass in Metasploit JSON-RPC Service When DB Health Check FailsRapid7 Metasploit-framework
- CVE-2026-81491boxpositron with-context-mcp index.ts project_folder path traversalboxpositron with-context-mcp
- CVE-2026-19398An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local administrator to cause a system crash (BSASUS FA507NV · ASUS FA507NU
- CVE-2026-81486bsmi021 mcp-file-context-server Path Resolution index.ts read_context path traversalbsmi021 mcp-file-context-server
- CVE-2026-81485danielpopamd linkedin-ads-mcp Media Upload campaign-management.ts fs.readFileSync path traversaldanielpopamd linkedin-ads-mcp
- CVE-2026-37009A SQL injection vulnerability in NL2SQLTool in crewai-tools v1.10.2rc1 allows a remote attacker to execute arbitrary SQL commands via an uns
- CVE-2026-37064User enumeration in /vfm-admin/ajax/usr-check.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to enumerate the app
- CVE-2026-37066Path traversal leading to Arbitrary File Read in /vfm-admin/index.php and /vfm-admin/ajax/streamvid.php in Veno File Manager Project 4.4.9 a
- CVE-2026-37067Incorrect access control in /vfm-admin/admin-panel/view/save-cvs.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker t
- CVE-2026-37069Absolute Path Disclosure in /vfm-admin/assets/zipstream/grandt/relativepath/RelativePath.Example1.php in Veno File Manager Project 4.4.9 all
- CVE-2026-37070Incorrect access control in /vfm-admin/ajax/streamvid.php in Veno File Manager Project in 4.4.9 allows an authenticated attacker to read any
- CVE-2026-37073Incorrect access control in /vfm-admin/ajax/sendfiles.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to send emai
- CVE-2026-38343An integer overflow in the libavfilter/vf_scale.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (Do
- CVE-2026-38345A Division-by-Zero vulnerability in the ff_sws_init_single_context function (/libswscale/utils.c) of FFmpeg N-122528-gdd2976b9e1 allows atta