CVEs published August 31, 2026
357 CVEs were published on August 31, 2026: 92 critical, 96 high.
- Published
- 357
- Critical
- 92
- High
- 96
- Medium
- 158
- Low
- 11
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 131
Most affected products
- ellite Wallos
- 13
- Apache Software Foundation Apache Wicket
- 9
- ash-project ash_admin
- 7
- nodemailer
- 7
- samanhappy mcphub
- 7
- ToolJet
- 7
- ash-project ash_ai
- 6
- itsourcecode Online Medicine Delivery System
- 6
- SeaCMS
- 6
- joomshaper.com Helix Ultimate extension for Joomla
- 5
Critical 92
- CVE-2026-83524RedPort Optimizer wXa-223 System Clock datetime.php exec command injectionRedPort Optimizer wXa-203 · RedPort Optimizer wXa-213 +1
- CVE-2026-82971QVidium Opera11 CGI Script net_tr.cgi command injectionQVidium Opera11
- CVE-2026-82954Dokploy Settings application.ts writeTraefikConfigInPath path traversalDokploy
- CVE-2026-81779WordPress Newspapers X theme 1.0.46-1.0.48 - Backdoor vulnerabilitySilk Themes Newspapers X
- CVE-2026-82226WordPress Tickera plugin <= 3.6.0.2 - PHP Object Injection vulnerabilityTickera
- CVE-2026-81780WordPress Hash Form plugin <= 1.4.2 - Arbitrary File Upload vulnerabilityhashthemes Hash Form
- CVE-2026-81763WordPress Throws SPAM Away plugin <= 3.8.2 - SQL Injection vulnerabilityウェブ屋のさとーさん Throws SPAM Away
- CVE-2026-81756WordPress Smart Marketing SMS and Newsletters Forms plugin <= 5.1.24 - SQL Injection vulnerabilityAutorius E-goi Smart Marketing SMS and Newsletters Forms
- CVE-2026-81293WordPress WP Data Access plugin <= 5.5.81 - SQL Injection vulnerabilityPassionate Programmer Peter WP Data Access
- CVE-2026-82908MSI Dragon Center MMIO Write Path NTIOLib_X64.sys MmioWritePath integer overflowMSI Dragon Center
- CVE-2026-53552Goploy: Cross-namespace IDOR and RCE via body-supplied row id in project and project_file handlerszhenorzz goploy · github.com/zhenorzz/goploy
- CVE-2026-79748MCPHub: Authenticated non-admin user achieves RCE via POST /api/servers (missing authorization on stdio command/args)samanhappy mcphub
- CVE-2026-82807ieungSoft Ultra RAMDisk Pro Kernel Driver URDSCSI.sys privileges managementieungSoft Ultra RAMDisk Pro
- CVE-2026-76133Ebyte NA111-M Use of a Broken or Risky Cryptographic AlgorithmEbyte NA111-M Firmware
- CVE-2026-73819Ebyte NA111-M Weak AuthenticationEbyte NA111-M Firmware
- CVE-2026-66047ProfilePress WordPress Plugin < 4.17.2 Unauthenticated Arbitrary Plugin Installation RCEProper Fraction ProfilePress
- CVE-2026-82970WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.4.1 - Arbitrary File Upload vulnerabilityWP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy C…
- CVE-2026-59111Command Injection vulnerability in eObčanka-IdentifikaceMinistry of the Interior (MVČR) eObčanka-Identifikace
- CVE-2026-82695Tenda AC18 Telnet telnet missing authenticationTenda AC18
- CVE-2026-82694Tenda AC1206 Web UI ate R7WebsSecurityHandler missing authenticationTenda AC1206
- CVE-2026-82693Tenda AC1206 Web UI telnet TendaTelnet missing authenticationTenda AC1206
- CVE-2026-82692D-Link DNS-340L/DNS-345 iscsi_mgr.cgi os command injectionD-Link DNS-340L · D-Link DNS-345
- CVE-2026-82691D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 CGI usb_device.cgi os command injectionD-Link DNS-320L · D-Link DNS-327L +2
- CVE-2026-82690D-Link DNS-327L/DNS-340L ve_mgr.cgi os command injectionD-Link DNS-327L · D-Link DNS-340L
- CVE-2026-82689D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 ISO Image isomount_mgr.cgi os command injectionD-Link DNS-320L · D-Link DNS-327L +2
- CVE-2026-82688D-Link DNS-340L/DNS-345 Virtual Volume virtual_vol.cgi os command injectionD-Link DNS-340L · D-Link DNS-345
- CVE-2026-82876Phison PS3111-S11 Controller Firmware Signature Verification BypassPhison Electronics PS3111-S11 Controller Firmware
- CVE-2026-49003Unauthenticated RCE Vulnerability in ZTE ZXDU68 S202 V5.0 ProductZTE ZXDU68 S202
- CVE-2026-82874ToolJet before v3.16.208 Cross-Tenant Authorization Bypass via tooljet-dbToolJet
- CVE-2026-82860@hulumi/policies before 1.3.2 Admin Policy Bypasshulumi policies · @hulumi/policies
- CVE-2026-82859hulumi before v1.3.2 SCP Template Tag-on-Create Bypasskerberosmansour hulumi
- CVE-2026-82858@hulumi/drift before 1.3.2 Unsafe Execute Plan Acceptancehulumi drift · @hulumi/drift
- CVE-2026-82857hulumi before v1.3.2 Privilege Escalation via IAM Policykerberosmansour hulumi
- CVE-2026-82856@hulumi/policies before 1.3.2 OIDC Trust Policy Bypasshulumi policies · @hulumi/policies
- CVE-2026-82855@hulumi/policies before 1.3.2 Evidence Validation Bypasshulumi policies · @hulumi/policies
- CVE-2026-82854Nodemailer before 8.0.4 SMTP Command Injection via envelope.sizenodemailer
- CVE-2026-19410Google Cloud Build Comment Control Bypass via Webhook SuppressionGoogle Cloud Build
- CVE-2026-82628Colorful iGameCenter IOCTL Dispatch WinRing0x64.sys sub_11504 privileges managementColorful iGameCenter
- CVE-2026-58574Dell PowerStore contains a Missing Authentication for Critical Function vulnerability.Dell PowerStore
- CVE-2026-82616TOTOLINK NR1800X cstecgi.cgi setUploadSetting stack-based overflowTOTOLINK NR1800X
- CVE-2026-38577Insecure hardcoded credentials in the Admin account of Tenda HG21 V4.0.0-260302 allows attackers to gain root access.
- CVE-2026-51152Server-side request forgery (SSRF) in the /har/test endpoint in QD 20220208 through 20250803.
- CVE-2026-51669Incorrect access control in the getPairCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain pairing
- CVE-2026-51670Incorrect access control in the getSlaveUpdate function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to query slave
- CVE-2026-51672Incorrect access control in the getRoamingCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain the r
- CVE-2026-51674Incorrect access control in the setScheduleCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to configure f
- CVE-2026-51675Incorrect access control in the setWanIeCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reconfigure up
- CVE-2026-51676Incorrect access control in the setAccessDeviceCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter a
- CVE-2026-51677Incorrect access control in the setUPnPCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change UPnP ser
- CVE-2026-51679Incorrect access control in the setPasswordCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change the
- CVE-2026-51680Incorrect access control in the setLedCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to modify LED behav
- CVE-2026-51681Incorrect access control in the setRemoteCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to expose WAN-si
- CVE-2026-51684Incorrect access control in the setStorageCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter the st
- CVE-2026-51686Incorrect access control in the setWiFiEasyCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reconfigure
- CVE-2026-51687Incorrect access control in the setWiFiEasyGuestCf function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to create
- CVE-2026-51689Incorrect access control in the setUpgradeFW function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to trigger firmw
- CVE-2026-51690Incorrect access control in the setWanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter upstream p
- CVE-2026-51691Incorrect access control in the setUploadSetting function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to manipulat
- CVE-2026-51692Incorrect access control in the setWiFiGuestCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to establish
- CVE-2026-51693Incorrect access control in the setVpnPassCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to weaken edge
- CVE-2026-51696Incorrect access control in the setPortForwardRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to expose
- CVE-2026-51697Incorrect access control in the setIptvCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter IPTV serv
- CVE-2026-51698Incorrect access control in the setUrlFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter br
- CVE-2026-51699Incorrect access control in the setDmzCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to expose an intern
- CVE-2026-51700Incorrect access control in the setWiFiAdvancedCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to degrade
- CVE-2026-51701Incorrect access control in the setMacFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change d
- CVE-2026-51705Incorrect access control in the setWiFiMeshName function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to rename mes
- CVE-2026-51708Incorrect access control in the setWiFiWpsCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change WPS a
- CVE-2026-51709Incorrect access control in the setWiFiBasicCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reconfigur
- CVE-2026-51710Incorrect access control in the setParentalRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter par
- CVE-2026-51711Incorrect access control in the setWiFiWpsStart function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to open a wir
- CVE-2026-51713Incorrect access control in the setManualDialCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to manipulat
- CVE-2026-51715Incorrect access control in the delMacFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove M
- CVE-2026-51717Incorrect access control in the setOpModeCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change the de
- CVE-2026-51718Incorrect access control in the delStaticDhcpRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove
- CVE-2026-51720Incorrect access control in the delIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remov
- CVE-2026-51721Incorrect access control in the setPairCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter the mesh
- CVE-2026-51722Incorrect access control in the setWiFiRepeaterCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to repoint
- CVE-2026-51723Incorrect access control in the UploadCustomModule function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to install
- CVE-2026-51724Incorrect access control in the delSmartQosCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove Smar
- CVE-2026-51725Incorrect access control in the NTPSyncWithHost function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change the
- CVE-2026-51726Incorrect access control in the delParentalRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove pa
- CVE-2026-51728Incorrect access control in the UploadFirmwareFile function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to upload
- CVE-2026-51729Incorrect access control in the delDevice function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to request deletion
- CVE-2026-51730Incorrect access control in the delWiFiAclRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove Wi-
- CVE-2026-51731Incorrect access control in the delVlanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove VLAN ent
- CVE-2026-51733Incorrect access control in the FirmwareUpgrade function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove Wi-
- CVE-2026-51734Incorrect access control in the informSlaveUpdate function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to trigger
- CVE-2026-51736Incorrect access control in the clearSyslog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to erase system l
- CVE-2026-51738Incorrect access control in the LoadDefSettings function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reset the
- CVE-2026-51740Incorrect access control in the killProcess function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to terminate crit
- CVE-2026-79408An OS command injection vulnerability in MetaGPT 0.8.1 allows an attacker to execute arbitrary commands via the path argument of RepoParser.
High 96
- CVE-2026-82397Tornado: Urlencoded body parsing omits max_num_fields, so one request can stall the event looptornadoweb tornado · tornado
- CVE-2026-77348Wallos incomplete fix for CVE-2026-33407: unauthenticated httpoxy SSRF still reachable via `endpoints/payments/search.php`ellite Wallos
- CVE-2026-82393pnpm: A tarball dependency's manifest `name` escapes node_modules → arbitrary file write/overwrite on installpnpm
- CVE-2026-82882Devtron through 2.2.0 Missing Authorization via webhook API token endpointdevtron-labs devtron
- CVE-2026-82392pnpm: Virtual store linker path traversal via unvalidated depPath name in lockfileToDepGraphpnpm
- CVE-2026-75594Kirby: Access to image files and limited access to JSON files outside of the site root via path traversal in the media handlinggetkirby kirby · getkirby/cms
- CVE-2026-61641Wallos: OIDC account takeover via email-based account linking without `email_verified` checkellite Wallos
- CVE-2026-61640Wallos: SSRF via OIDC Token/UserInfo URL Configurationellite Wallos
- CVE-2026-83596Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeatureWebKit · WebKitGTK +2
- CVE-2026-71415Kirby: File upload permissions are not checked during processing of chunk datagetkirby kirby · getkirby/cms
- CVE-2026-61639Wallos: Zip Slip path traversal in database restore writes files to webrootellite Wallos
- CVE-2026-61638Wallos: SSRF via Test Email Notification - unvalidated SMTP host/portellite Wallos
- CVE-2026-81892EasyAdmin custom-action dispatcher bypasses access_control on other routesEasyCorp EasyAdminBundle · easycorp/easyadmin-bundle
- CVE-2026-82346HP ImageDiags - Potential Escalation of PrivilegeHP ImageDiags
- CVE-2026-81891elFinder: ZIP extraction bypasses uploadDeny MIME filter allowing PHP file upload (RCE)Studio-42 elFinder · Studio-42/elFinder
- CVE-2026-54600Wallos: Unauthenticated database replacement via import endpoint on fresh installellite Wallos
- CVE-2026-82229WordPress WordPress Social Login and Register plugin <= 7.8.2 - Cross Site Scripting (XSS) vulnerabilityminiOrange WordPress Social Login and Register
- CVE-2026-82228WordPress SiteGround Security plugin <= 1.6.6 - 2FA Bypass vulnerabilitySiteGround Security
- CVE-2026-82225WordPress RegistrationMagic plugin <= 6.0.9.8 - Broken Authentication vulnerabilityMetagauss RegistrationMagic
- CVE-2026-82224WordPress SliceWP plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerabilityiova.mihai SliceWP
- CVE-2026-82221WordPress RegistrationMagic plugin <= 6.0.9.8 - Cross Site Scripting (XSS) vulnerabilityMetagauss RegistrationMagic
- CVE-2026-81768WordPress Super Store Finder plugin <= 7.10 - Cross Site Scripting (XSS) vulnerabilityhighwarden Super Store Finder
- CVE-2026-81765WordPress Tailored Tools plugin <= 3.0.2 - Cross Site Scripting (XSS) vulnerabilityTailored Media Tailored Tools
- CVE-2026-81764WordPress Email Essentials plugin <= 6.0.6 - Cross Site Scripting (XSS) vulnerabilityAcato Email Essentials
- CVE-2026-81298WordPress LeadConnector plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerabilityvarunvairavanlc LeadConnector
- CVE-2026-81297WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.12 - Privilege Escalation vulnerabilityWP Manage Ninja Fluent Forms Pro Add On Pack
- CVE-2026-81296WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.12 - Broken Access Control vulnerabilityWP Manage Ninja Fluent Forms Pro Add On Pack
- CVE-2026-81291WordPress Uncode theme <= 2.12.7 - Cross Site Scripting (XSS) vulnerabilityUncode
- CVE-2026-81290WordPress Email Subscribers & Newsletters plugin <= 5.9.33 - Cross Site Scripting (XSS) vulnerabilityIcegram Email Subscribers & Newsletters
- CVE-2026-81287WordPress Charitable plugin <= 1.8.12.1 - SQL Injection vulnerabilitySyed Balkhi Charitable
- CVE-2026-54599Wallos: OIDC state parameter never validated — login CSRF / account takeoverellite Wallos
- CVE-2026-54598Missing Authentication for Critical Function in wallosellite Wallos
- CVE-2026-81889elFinder: SSRF protection bypass via DNS rebinding in the `fsock_get_contents()` fallbackStudio-42 elFinder · studio-42/elfinder
- CVE-2026-13732Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elfRed Hat Enterprise Linux · Red Hat Cost Management On-Pr… +2
- CVE-2026-53507oasdiff actions resolve external $refs by default, enabling SSRF and disclosure of structured files on pull-request runsoasdiff-action
- CVE-2026-53553Goploy: Arbitrary File Read via Path Traversal in /deploy/fileDiff allows Remote Server Compromisezhenorzz goploy · github.com/zhenorzz/goploy
- CVE-2026-83497Unrestricted Java Deserialization in OpenSearch SQL Plugin Cursor PaginationOpenSearch · Amazon OpenSearch Service
- CVE-2026-72001Pangolin < 1.22.0 Authentication Bypass via Share-Link EndpointPangolin
- CVE-2026-79744MCPHub: Missing Authorization on `PUT /api/system-config` Lets Any Non-Admin Rewrite Global Security Configurationsamanhappy mcphub
- CVE-2026-79745MCPHub: Missing Authorization on Built-in Prompt & Resource CRUD (Unauthorized Tampering of Globally-Served Templates/Resources)samanhappy mcphub
- CVE-2026-79746MCPHub: Server-scoped bearer key gains access to an entire group via partial (any-overlap) server matchingsamanhappy mcphub
- CVE-2026-79747MCPHub vulnerable to SSRF: a non-admin user can make mcphub request arbitrary URLs and read the response (OpenAPI proxy + transport dial)samanhappy mcphub
- CVE-2026-79749MCPHub: SSRF Guard Bypass via IPv6 Transition Addresses in URL Validationsamanhappy mcphub
- CVE-2026-79750MCPHub authenticated horizontal IDOR: any non-admin user executes tools on other users' MCP servers (cross-tenant file read + SSRF)samanhappy mcphub
- CVE-2026-17615Resteasy-core: resteasy sourceprovider remote unauthenticated file readRed Hat Build of Apache Camel 3.33.3.SP1 · Red Hat build… +9
- CVE-2026-77966Ebyte NA111-M Missing AuthorizationEbyte NA111-M Firmware
- CVE-2026-75133Keep Backup Daily WordPress Plugin < 2.1.4 Sensitive Information Exposure via kbd_cron_processFahad Mahmood Keep Backup Daily
- CVE-2026-75132WAPT Server SQL Injection via /api/v3/hosts EndpointTranquil_IT WAPT
- CVE-2026-78422zbus_polkit: polkit authorization bypass via PID reuse due to incorrect D-Bus type for the subject UIDz-galaxy zbus_polkit · zbus_polkit
- CVE-2026-78078Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10joomshaper.com Helix Ultimate extension for Joomla
- CVE-2026-19702OS Command Injection in TÜBİTAK BİLGEM's Pardus Boot RepairTÜBİTAK BİLGEM Software Technologies Research Institute Par…
- CVE-2026-76763Io.smallrye/smallrye-graphql: smallrye graphql: unauthenticated denial of service via large exponent float literalsRed Hat build of Quarkus 3.27.5.SP1 · Red Hat build of Quar…
- CVE-2026-78077Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in MegaMenu Layout Container & Embed Inputs in Helix Ultimate < 2.2.10joomshaper.com Helix Ultimate extension for Joomla
- CVE-2026-78074Joomla Extension - miniorgange.com - Unauthenticated arbitrary extension deinstallation via various miniOrange extensionsminiorgange.com miniOrange Oauth Client (free) extensio… +21
- CVE-2026-19616Information Disclosure in TBC Technology's KitLogisticTBC Technology KitLogistic
- CVE-2026-82217In Eclipse Theia versions 1.73.0 up to but not including 1.75.0, the AI "Agent Mode" file-change tools (writeFileContent, suggestFileContentEclipse Foundation Eclipse Theia
- CVE-2026-5956SQLi in Ankara Hosting's Site Management PanelAnkara Hosting Site Management Panel
- CVE-2026-12894Io.quarkus:quarkus-qute: quarkus-qute:server-side template injection (ssti) vulnerability in reflectionvalueresolver of the quarkus qute template enginequarkus-qute · Red Hat Build of Apache Camel 3.33.3.SP1 +4
- CVE-2026-71257Apache Wicket: Configured file upload limits are not enforced when the multipart request has already been parsedApache Software Foundation Apache Wicket
- CVE-2026-82880YaCy Search Server through 1.941 XML External Entity Injection via Parsersyacy_search_server
- CVE-2026-82877ILIAS Arbitrary File Read via SOAP addFileILIAS-eLearning e.V. ILIAS
- CVE-2026-82680D-Link DSM-G600 Multipart load_file.cgi out-of-bounds writeD-Link DSM-G600
- CVE-2026-19873HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elementsHTML-FormFu
- CVE-2026-81624Undertow-core: undertow: websocketcontainer defaults for buffers and timeouts are infiniteRed Hat build of Apache Camel for Spring Boot · Red Hat… +3
- CVE-2026-82872ToolJet before v3.16.208 Cross-Workspace Authorization BypassToolJet
- CVE-2026-82871ToolJet before v3.16.208 Cross-Organization Data Read via Database RoutesToolJet
- CVE-2026-82870ToolJet before v3.16.208 Cross-Tenant Database ManipulationToolJet
- CVE-2026-82869ToolJet Database before v3.16.44 Privilege Escalation via join_tablesToolJet
- CVE-2026-82866@pdfme/common before 5.5.10 SSRF via Unvalidated URL Fetchpdfme common · @pdfme/common
- CVE-2026-82864pdfme pdf-lib before 5.5.10 Denial of Service via Decompression Bombpdfme pdf-lib · @pdfme/pdf-lib
- CVE-2026-82863@hulumi/baseline before 1.3.2 CloudTrail Selector Tampering Detectionhulumi baseline · @hulumi/baseline
- CVE-2026-82862Hulumi before v1.3.2 Helper Script Shadowing via Workspace Fileskerberosmansour hulumi
- CVE-2026-82861@hulumi/policies before 1.3.2 SecureBucket Parent Spoof Bypasshulumi policies · @hulumi/policies
- CVE-2026-82662Nodemailer before 8.0.8 TLS Certificate Validation Bypassnodemailer
- CVE-2026-82659nodemailer before 9.0.1 File Read and SSRF via raw optionnodemailer
- CVE-2026-40463An Insufficient Role-based Access Control Vulnerability in WaveSuiteNokia WaveSuite
- CVE-2026-82724Broken access control in AshPhoenix SubdomainHook via a nil tenant in handle_subdomainash-project ash_phoenix
- CVE-2026-82673Path traversal in AshAdmin file uploads via unsanitized client filenameash-project ash_admin
- CVE-2026-77850Stored XSS in AshAdmin relationship typeahead via unescaped label_field contentash-project ash_admin
- CVE-2026-82722AshAdmin LiveView events intern atoms from client input, exhausting the atom table (node DoS)ash-project ash_admin
- CVE-2026-75757AshAdmin cookie reader matches names by substring, enabling actor/session shadowing from a sibling subdomainash-project ash_admin
- CVE-2026-75760AshAi vectorize change leaks raw embedding-provider errors, including credentials, in a user-facing errorash-project ash_ai
- CVE-2026-82564Identity tool filter in AshAi accepts operator maps, allowing update or destroy of unidentified recordsash-project ash_ai
- CVE-2026-81315MCP DNS-rebinding origin check in AshAi is bypassed by a spoofed X-Forwarded-Proto headerash-project ash_ai
- CVE-2026-77956EEx template evaluation of prompt content in AshAi enables remote code executionash-project ash_ai
- CVE-2026-51668Incorrect access control in the setLanguageCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to modify lang
- CVE-2026-51671Incorrect access control in the getCloudDownloadStatus function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obt
- CVE-2026-51673Incorrect access control in the setNtpCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter time synch
- CVE-2026-51688Incorrect access control in the setWiFiSignalCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reduce wi
- CVE-2026-51694Incorrect access control in the setStaticDhcpRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to add or
- CVE-2026-51695Incorrect access control in the setDdnsCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter dynamic D
- CVE-2026-51716Incorrect access control in the delPortForwardRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to delete
- CVE-2026-51719Incorrect access control in the delUrlFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove U
- CVE-2026-51735Incorrect access control in the showSyslog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to retrieve recent
- CVE-2026-75458The teacher-end interface POST /api/teacher/user/delete/{id} in XueZhiSi Open Source Exam System <= 3.9.0 contains a vertical privilege esca
- CVE-2026-79407A path traversal vulnerability in the SPO extension of MetaGPT 0.8.1 allows an attacker to read arbitrary files via the FILE_NAME value used
Medium, low and unrated 169
- CVE-2026-82957hyperledger-firefly Webhook Subscription webhooks.go ValidateOptions server-side request forgeryhyperledger-firefly firefly
- CVE-2026-82398pypdf: Inefficient handling of non-whitespace inputs in read_until_whitespacepy-pdf pypdf · pypdf
- CVE-2026-82922ShopEx ECShop flow.php flow_update_cart sql injectionShopEx ECShop
- CVE-2026-82396Sulu: Stored XSS via media download inline-disposition overridesulu · sulu/sulu
- CVE-2026-77353Wallos: iCalendar Injection via CRLF in Subscription Name/Notes Exportellite Wallos
- CVE-2026-77352Wallos: Authenticated SSRF via per-user SMTP notification host (low-privilege user)ellite Wallos
- CVE-2026-82395Sulu: Media move/update authorization bypass (IDOR)sulu · sulu/sulu
- CVE-2026-82394Sulu: Fix authorization bypass when creating preview linkssulu · sulu/sulu
- CVE-2026-82921ShopEx ECShop pack.php check_img_type unrestricted uploadShopEx ECShop
- CVE-2026-77351Wallos: SSRF via Unvalidated User-Level SMTP Host in Email Notification Settingsellite Wallos
- CVE-2026-82919cu silicon edit Endpoint views.py create_app missing authenticationcu silicon
- CVE-2026-62993Smarty: SSRF via redirect bypass of trusted_uri using {fetch}smarty-php smarty · smarty/smarty
- CVE-2026-75592Kirby: Access to image files outside of the site root via path traversal in the media handlinggetkirby kirby · getkirby/cms
- CVE-2026-82914kishan0725 Hospital-Management-System search.php sql injectionkishan0725 Hospital-Management-System
- CVE-2026-81278WordPress Post SMTP plugin 4.0.0-beta.1 - Settings Change vulnerabilityWPExperts Post SMTP
- CVE-2026-81778WordPress Kalles Addons plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerabilityThe4 Kalles Addons
- CVE-2026-81762WordPress Booking and Rental Manager plugin <= 2.7.6 - Broken Access Control vulnerabilitymagepeopleteam Booking and Rental Manager
- CVE-2026-81758WordPress OwnerRez API plugin <= 1.2.6 - Broken Access Control vulnerabilityOwnerRez API
- CVE-2026-81280WordPress Print Barcode Labels for your WooCommerce products/orders plugin <= 4.0.0 - Sensitive Data Exposure vulnerabilityUKR Solution Print Barcode Labels for your WooCommerce prod…
- CVE-2026-82852WordPress MapSVG plugin <= 8.15.0 - Server Side Request Forgery (SSRF) vulnerabilityMapSVG
- CVE-2026-82909QuantumNous new-api Revoked API Token token session expirationQuantumNous new-api
- CVE-2026-81890elFinder: CSRF in netmount allows forced FTP mounts and server-side FTP connectionsStudio-42 elFinder · studio-42/elfinder
- CVE-2026-81888@hono/oauth-providers: OAuth state check fails open on omitted state, enabling login CSRF and forced account linkinghonojs @hono/oauth-providers · @hono/oauth-providers
- CVE-2026-50199Wallos: Cross-user Fixer/API Layer credential consumption in exchange-rate refreshellite Wallos
- CVE-2026-50198Wallos: Cross-user subscription cost inference via replacement_subscription_idellite Wallos
- CVE-2026-81887Livewire DOM-based cross-site scripting during client-side state handlinglivewire · livewire/livewire
- CVE-2026-54179backpack/crud: SingleBase64Image accepts any base64 payload behind a `data:image` prefix — SVG-with-script lands on the public diskLaravel-Backpack CRUD · backpack/crud
- CVE-2026-82906sdcb chats Signed File Download Endpoint FileController.cs DownloadPublic missing authenticationsdcb chats
- CVE-2026-82905sdcb chats fetch-tools Endpoint McpController.cs McpController server-side request forgerysdcb chats
- CVE-2026-81267Stalled popup navigation could allow address bar origin spoofing in Firefox for iOSMozilla Firefox for iOS
- CVE-2026-14697IPv6 Neighbor Solicitation packet leak causes TX pool exhaustion denial of servicezephyrproject zephyr
- CVE-2026-82835caoqianming django-vue-admin file access controlcaoqianming django-vue-admin
- CVE-2026-52730Xibo CMS Missing Authorization in Module::settingsForm due to PHP operator precedencexibosignage xibo-cms
- CVE-2026-82834Doccano Open Source Annotation Tools for Machine Learning Practitioners Bulk-Delete Endpoint category-types LabelList access controlDoccano Open Source Annotation Tools for Machine Learning P…
- CVE-2026-82833Doccano Open Source Annotation Tools for Machine Learning Practitioners Project Example Detail Endpoint examples ExampleDetail access controlDoccano Open Source Annotation Tools for Machine Learning P…
- CVE-2026-14696Ethernet bridge RX packet leak enables denial of service via RX buffer-pool exhaustionzephyrproject zephyr
- CVE-2026-53508oasdiff does not enforce --allow-external-refs=false on the git-revision load path (SSRF / local file read)oasdiff · github.com/oasdiff/oasdiff
- CVE-2026-82821FLVMeta AMF Object Parsing amf.c amf_object_get null pointer dereferenceFLVMeta
- CVE-2026-14368Off-by-one out-of-bounds NUL write in Zephyr LwM2M JSON string parserzephyrproject zephyr
- CVE-2026-82820FLVMeta AMF String Processing amf.c amf_string_new heap-based overflowFLVMeta
- CVE-2023-31308A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial of service due to out-of-bounds memory reaAMD Radeon™ PRO V620 Graphics Products
- CVE-2026-82818dibo-software diboot Tenant Resource Assignment resource access controldibo-software diboot
- CVE-2023-20511Release of an invalid pointer in the AMD kernel mode driver (KMD) could allow a privileged attacker to create a double free condition potentAMD Radeon™ Instinct™ MI25 Graphics Products · AMD Radeon™…
- CVE-2026-14367I3C IBI work-node free-list data race between ISR and workqueue threadzephyrproject zephyr
- CVE-2026-82817dibo-software diboot Tenant Administrator Management API admin access controldibo-software diboot
- CVE-2026-79743MCPHub: Path Traversal via Malicious MCPB Manifest Namesamanhappy mcphub · @samanhappy/mcphub
- CVE-2026-82816dibo-software diboot AI Session Endpoint ai-session authorizationdibo-software diboot
- CVE-2026-82815MegaEase EaseProbe Middleware server.go realIP access controlMegaEase EaseProbe
- CVE-2026-19953URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprepURI
- CVE-2026-82813BEN Group TubeBuddy for YouTube Extension tubebuddymaster1.js TBGlobal.GetToken data authenticityBEN Group TubeBuddy for YouTube Extension
- CVE-2026-82811Toggl OÜ Toggl Track Extension postMessage origin validationToggl OÜ Toggl Track Extension
- CVE-2026-14366SiWx91x WiFi driver double-unref / use-after-free of caller-owned TX net_pktzephyrproject zephyr
- CVE-2026-82810extension.vn 2FA Authenticator Extension Background Service Worker chrome.runtime.onMessageExternal.addListener information disclosureextension.vn 2FA Authenticator Extension
- CVE-2026-82809vidIQ Vision for YouTube Extension postMessage window.addEventListener information disclosurevidIQ Vision for YouTube Extension
- CVE-2026-82808Inbox Foundry ActiveInbox Extension Google OAuth Client Secret service-worker.production-esm.js hard-coded credentialsInbox Foundry ActiveInbox Extension
- CVE-2026-83492WordPress Kubio AI Website Builder - Denial Of ServiceExtend Themes Kubio AI Website Builder
- CVE-2026-21827HCL Connections is vulnerable to an information disclosure vulnerabilityHCLSoftware Connections
- CVE-2026-82805Typora Mermaid Rendering cross site scriptingTypora
- CVE-2026-82803armink struct2json JSON Deserialization s2jdef.h S2J_STRUCT_GET_string_ELEMENT null pointer dereferencearmink struct2json
- CVE-2026-77975Ebyte NA111-M Cleartext Storage of Sensitive InformationEbyte NE2-D11 Firmware
- CVE-2026-82802NASA earthdata-search granules Endpoint handler.js OpenSearchGranuleSearchLambda server-side request forgeryNASA earthdata-search
- CVE-2026-82801NASA earthdata-search scale Endpoint handler.js scaleImage server-side request forgeryNASA earthdata-search
- CVE-2026-82703Edimax BR-6214K asp_setPing Endpoint ping.asp system os command injectionEdimax BR-6214K
- CVE-2026-82702Edimax BR-6214K asp_WlanMP Endpoint wlanMP.asp system os command injectionEdimax BR-6214K
- CVE-2026-82701code-projects Online Shopping System Search Functionality action.php sql injectioncode-projects Online Shopping System
- CVE-2026-82700code-projects Online Shopping System Newsletter Subscription offersmail.php cross site scriptingcode-projects Online Shopping System
- CVE-2026-78075Joomla Extension - joomshaper.com - Broken Object-Level Authorization in Blog Image Deletion in Helix Ultimate < 2.2.10joomshaper.com Helix Ultimate extension for Joomla
- CVE-2026-78076Joomla Extension - joomshaper.com - Broken Access Control & Missing Authorization in MegaMenu Settings in Helix Ultimate < 2.2.10joomshaper.com Helix Ultimate extension for Joomla
- CVE-2026-78079Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10joomshaper.com Helix Ultimate extension for Joomla
- CVE-2026-82699sambitraj Student Management System Password aca.sql cleartext storagesambitraj Student Management System
- CVE-2026-82698sambitraj Student-Management-System aca.sql default passwordsambitraj Student-Management-System
- CVE-2026-76986Apache Wicket: XSS in AbstractSingleSelectChoice via getNullValidDisplayValueApache Software Foundation Apache Wicket
- CVE-2026-76985Apache Wicket: XSS in Palette via getAdditionalAttributesApache Software Foundation Apache Wicket
- CVE-2026-82697sambitraj Student-Management-System session_start cookie httponly flagsambitraj Student-Management-System
- CVE-2026-82696itsourcecode Sales and Inventory System inv_searchfrm.php sql injectionitsourcecode Sales and Inventory System
- CVE-2026-74010WordPress bbPress plugin <= 2.6.14 - Broken Access Control vulnerabilityJohn James Jacoby bbPress
- CVE-2026-76983Apache Wicket: XSS in AutoLabelTextResolver via FormComponent.setLabelApache Software Foundation Apache Wicket
- CVE-2026-76984Apache Wicket: XSS in MetaDataHeaderItem via addTagAttributeApache Software Foundation Apache Wicket
- CVE-2026-76982Apache Wicket: XSS in Button via its model objectApache Software Foundation Apache Wicket
- CVE-2026-75802Apache Wicket: XSS in AjaxEditableLabel and its subclasses via IChoiceRenderer and defaultNullLabelApache Software Foundation Apache Wicket
- CVE-2026-71378Apache Wicket: Cross-Site Request Forgery (CSRF) protection bypass in ResourceIsolationRequestCycleListenerApache Software Foundation Apache Wicket
- CVE-2026-70449Apache Wicket: Path traversal in resource style/variation/localeApache Software Foundation Apache Wicket
- CVE-2026-82797Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Serialized Data with Nested Payloads.Samsung Open Source rlottie
- CVE-2026-82881Aix-DB through 1.2.4 Stored Cross-Site Scripting via Markdownapconw Aix-DB
- CVE-2026-82879DataEase before 2.10.26 Access Control Bypass via Share Ticketsdataease
- CVE-2026-82878DataEase before 2.10.26 Missing Object-Level Authorization on Geographic, Linkage and Chart Endpointsdataease
- CVE-2026-82679diem-project diem Widget Editor dmWidgetContentBaseMediaForm.php unrestricted uploaddiem-project diem
- CVE-2026-82678diem-project diem Administrative Console actions.class.php executeCommand os command injectiondiem-project diem
- CVE-2026-82677valkey-io valkey Module Timer module.c moduleTimerHandler double freevalkey-io valkey
- CVE-2026-82671IObit Unlocker IRP_MJ_DEVICE_CONTROL IObitUnlocker.sys ZwTerminateProcess privileges managementIObit Unlocker
- CVE-2026-82670IObit Uninstaller IOCTL IUForceDelete.sys IRP_MJ_DEVICE_CONTROL privileges managementIObit Uninstaller
- CVE-2026-82669klaussilveira GitList XML Parsing CommandLine.php SimpleXMLElement denial of serviceklaussilveira GitList
- CVE-2026-82668klaussilveira GitList Git Command Line CommandLine.php getDefaultBranch os command injectionklaussilveira GitList
- CVE-2026-82875ToolJet before v3.16.208 Authorization Bypass via organizationIdToolJet
- CVE-2026-82873ToolJet through 3.0.0-ee-beta.2 Cross-workspace Schema Disclosure via ExportToolJet
- CVE-2026-82868@pdfme/schemas before 5.5.9 Cross-Site Scripting via SVGpdfme schemas · @pdfme/schemas
- CVE-2026-82867@pdfme/schemas before 5.5.9 Cross-Site Scripting via Selectpdfme schemas · @pdfme/schemas
- CVE-2026-82865pdfme schemas before 5.5.10 Cross-Site Scripting via i18n Labelpdfme schemas · @pdfme/schemas
- CVE-2026-82853Nodemailer before 8.0.5 SMTP Command Injection via CRLFnodemailer
- CVE-2026-82661Nodemailer CRLF Injection via List-* Header Commentsnodemailer
- CVE-2026-82660Nodemailer jsonTransport bypasses disableFileAccess and disableUrlAccessnodemailer
- CVE-2024-58379nodemailer before 6.9.9 ReDoS via attachDataUrls parameternodemailer
- CVE-2026-82667yaojingang GEOFlow GenericHttpEndpointResolver.php DistributionController.isValidHttpEndpoint server-side request forgeryyaojingang GEOFlow
- CVE-2026-82666yaojingang GEOFlow Superadmin Theme Editor SiteThemeEditorController.php preview code injectionyaojingang GEOFlow
- CVE-2026-82665yaojingang GEOFlow Image Library Cleanup ImageLibraryController.php unlink path traversalyaojingang GEOFlow
- CVE-2026-82664yaojingang GEOFlow JSON-LD Theme HomeController.php cross site scriptingyaojingang GEOFlow
- CVE-2026-82631valkey-io valkey Blocked-on-keys blocked.c handleClientsBlockedOnKey use after freevalkey-io valkey
- CVE-2026-82838Default webserver configuration with incorrect CSPpretix venueless
- CVE-2026-58301Apache Shiro: Server-side POST request may be steered to an alternate hostApache Software Foundation Apache Shiro
- CVE-2026-82630PowerJob Transport Endpoint TestController.java MuConnectionManager.getOrCreateConnection server-side request forgeryPowerJob
- CVE-2026-82629jeecgboot jeewx-boot doUpload Endpoint MyJwWebJwid3Controller.java MyJwWebJwid3Controller.doUpload unrestricted uploadjeecgboot jeewx-boot
- CVE-2026-82625code-projects Simple Inventory System User Registration register.php cross site scriptingcode-projects Simple Inventory System
- CVE-2026-40465An Open Re-direct Vulnerability in Nokia NSPNokia NSP
- CVE-2026-40464A Stored Cross-Site Scripting (XSS) Vulnerability in Nokia NSPNokia NSP
- CVE-2026-53620GROWI contains a vulnerability with an authorization bypass through user-controlled key in the bookmark folder APIs.GROWI
- CVE-2026-68951GROWI contains an incorrect authorization vulnerability.GROWI
- CVE-2026-82624code-projects Simple Inventory System Database Backup File inventorymanagement.sql information disclosurecode-projects Simple Inventory System
- CVE-2026-82623open62541 History Backend ua_history_data_backend_memory.c UA_DataValue_backend_copyRange use after freeopen62541
- CVE-2026-77013Icollect <= 1.0.0 - Unauthenticated User and Term Creation via Unrestricted Method Dispatch爱采集数据采集和发布插件
- CVE-2026-82622code-projects Employee Leave Managing System Employee Profile Update editaction.php cross site scriptingcode-projects Employee Leave Managing System
- CVE-2026-82621Soarkey StudentManagement/学生信息管理系统 Administrative Servlet AdminDao.java AdminDao.doGet authorizationSoarkey StudentManagement · Soarkey 学生信息管理系统
- CVE-2026-82620Soarkey StudentManagement/学生信息管理系统 CourseDao.java CourseDao.course_ranking sql injectionSoarkey StudentManagement · Soarkey 学生信息管理系统
- CVE-2026-82619Systerel S2OPC subscription_mgr.c use after freeSysterel S2OPC
- CVE-2026-82618Systerel S2OPC String Array Range Writing sopc_builtintypes.c set_range_matrix_on_string_array out-of-boundsSysterel S2OPC
- CVE-2026-82615itsourcecode Online Medicine Delivery System Password Recovery passwordrecover.php find_phone sql injectionitsourcecode Online Medicine Delivery System
- CVE-2026-82614itsourcecode Online Medicine Delivery System Product Category Filter index.php loadResultList sql injectionitsourcecode Online Medicine Delivery System
- CVE-2026-82613itsourcecode Online Medicine Delivery System Product Search index.php loadResultList sql injectionitsourcecode Online Medicine Delivery System
- CVE-2026-82612itsourcecode Online Medicine Delivery System Product Detail index.php loadResultList sql injectionitsourcecode Online Medicine Delivery System
- CVE-2026-82611itsourcecode Online Medicine Delivery System Customer Login login.php cusAuthentication sql injectionitsourcecode Online Medicine Delivery System
- CVE-2026-82610itsourcecode Online Medicine Delivery System Login login.php employeeAuthentication sql injectionitsourcecode Online Medicine Delivery System
- CVE-2026-82725AshPhoenix FilterForm allows filtering across non-public relationships, disclosing private related dataash-project ash_phoenix
- CVE-2026-82726AshPhoenix get_subdomain maps a crafted or differently-cased Host header to an arbitrary tenantash-project ash_phoenix
- CVE-2026-82727AshPhoenix Form.Auto leaks submitted params in an unknown _union_type error messageash-project ash_phoenix
- CVE-2026-82609itsourcecode Sales and Inventory System inv_edit.php sql injectionitsourcecode Sales and Inventory System
- CVE-2026-82608Kamailio AVP cxdx_avp.c get_4bytes out-of-boundsKamailio
- CVE-2026-81853AshAdmin composite primary key decoding accepts arbitrary fields, enabling a secret-attribute oracleash-project ash_admin
- CVE-2026-82607Cozmoslabs Profile Builder Plugin Avatar Simple Upload AJAX admin-ajax.php wppb_ajax_simple_avatar unrestricted uploadCozmoslabs Profile Builder Plugin
- CVE-2026-81852AshAdmin ships a hardcoded CSP nonce, allowing nonce-based CSP bypassash-project ash_admin
- CVE-2026-82681Query-parameter injection in AshAdmin row-action links via unencoded string primary keysash-project ash_admin
- CVE-2026-82605BareBones BBEdit Lasso Language Tokenizer infinite loopBareBones BBEdit
- CVE-2026-82604BareBones BBEdit Java Language recursionBareBones BBEdit
- CVE-2026-82603SeaCMS Comment Cache member.php del_pl path traversalSeaCMS
- CVE-2026-82602SeaCMS ass.php authorizationSeaCMS
- CVE-2026-82601SeaCMS err.php cross site scriptingSeaCMS
- CVE-2026-82580AshAi echoes raw tool exception messages into the conversation, disclosing internal detailsash-project ash_ai
- CVE-2026-82579AshAi tool loop never terminates when all tool calls are filtered out, enabling denial of serviceash-project ash_ai
- CVE-2026-82600SeaCMS zyapi.php sql injectionSeaCMS
- CVE-2026-82599SeaCMS Avatar Upload member.php unlink path traversalSeaCMS
- CVE-2026-82598SeaCMS Template search.php parseIf code injectionSeaCMS
- CVE-2026-82597TOTOLINK NR1800X cstecgi.cgi setUssd command injectionTOTOLINK NR1800X
- CVE-2026-82596LatencyUtils PauseDetector LatencyStats.java LatencyStats.recordDetectedPause memory corruptionLatencyUtils
- CVE-2025-63607TechStore 1.0 is vulnerable to Cross Site Scripting (XSS).
- CVE-2026-51153Stored Cross-Site Scripting (XSS) in TaskRunHandler.post() in web/handlers/task.py in QD 20220208 through 20250803.
- CVE-2026-51666Incorrect access control in the setWizardCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reconfigure W
- CVE-2026-51667Incorrect access control in the getWiFiIpMacTable function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain W
- CVE-2026-51678Incorrect access control in the setSyslogCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter logging
- CVE-2026-51683Incorrect access control in the setLanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter LAN networ
- CVE-2026-51702Incorrect access control in the setIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter
- CVE-2026-51703Incorrect access control in the setWiFiScheduleCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter w
- CVE-2026-51704Incorrect access control in the setWiFiMeshConfig function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter me
- CVE-2026-51706Incorrect access control in the setSmartQosCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to degrade tra
- CVE-2026-51712Incorrect access control in the setApWiFiSchCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter wire
- CVE-2026-51714Incorrect access control in the setRoamingCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter roamin
- CVE-2026-51727Incorrect access control in the SystemSettings function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to retrieve ad
- CVE-2026-51732Incorrect access control in the delWiFiScheduleCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove
- CVE-2026-51737Incorrect access control in the clearTracerouteLog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to erase t
- CVE-2026-51739Incorrect access control in the CloudSrvVersionCheck function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to trigg
- CVE-2026-75460XueZhiSi Open Source Exam System <= 3.9.0 has a privilege escalation vulnerability in the teacher-end interface POST /api/teacher/user/page/
- CVE-2026-79483FastGPT Community Edition 4.10.0 through 4.14.0 are vulnerable to a NoSQL injection in the POST /api/core/chat/getHistories endpoint.