CVEs published September 1, 2026
477 CVEs were published on September 1, 2026: 71 critical, 214 high. 2 are now in CISA KEV.
- Published
- 477
- Critical
- 71
- High
- 214
- Medium
- 166
- Low
- 26
- Unrated
- 0
- Now in CISA KEV
- 2
- Fix available
- 157
Most affected products
- Hewlett Packard Enterprise (HPE) Fabric Composer
- 52
- Hewlett Packard Enterprise (HPE) AOS-CX
- 34
- NVIDIA Megatron Bridge
- 30
- Google Chrome
- 26
- Mozilla Firefox · Mozilla Thunderbird
- 26
- ash-project ash
- 16
- Erlang OTP
- 16
- Elastic Kibana
- 15
- xmldom · @xmldom xmldom +1
- 15
- Dell PowerStore
- 13
Critical 71
- CVE-2026-84325Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering toGoogle Chrome
- CVE-2026-84333Use after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside theGoogle Chrome
- CVE-2026-84324Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via Google Chrome
- CVE-2026-84354Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to exeGoogle Chrome
- CVE-2026-84352Use after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside thGoogle Chrome
- CVE-2026-84353Use after free in Shared Tab Groups in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social engineGoogle Chrome
- CVE-2026-84480WWBN AVideo Password Recovery Token Expiration BypassWWBN AVideo
- CVE-2026-84479WWBN AVideo Authentication Bypass via User-Agent HeaderWWBN AVideo
- CVE-2023-54391Proxmox VE 7.0-8.0 Authentication Bypass via tfa-challenge ParameterProxmox Server Solutions Proxmox Virtual Environment
- CVE-2026-84639Uninitialized memory in MIME parsingMozilla Thunderbird
- CVE-2026-83548A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path.SonicWall SMA1000
- CVE-2026-84637Calendar invitation attachments could launch local executablesMozilla Thunderbird
- CVE-2026-75604Next.js: Unauthenticated Remote Code Execution on windows-hosted serversvercel next.js · next
- CVE-2026-84372Predis: Redis command injection and denial of service via CRLF smuggling in pipelined commands on aggregate connectionspredis · predis/predis
- CVE-2026-73749Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CXHewlett Packard Enterprise (HPE) AOS-CX
- CVE-2026-76658Unauthenticated Remote Code Execution in HPE Networking Fabric Composer SSH DaemonHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-76657Authentication Bypass in HPE Networking Fabric Composer API allows Administrative AccessHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73701Unauthenticated Remote Code Execution in HPE Networking Fabric ComposerHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73700Authenticated Stored Cross-Site Scripting Vulnerability (XSS) in HPE Networking Fabric Composer Web-Based Management InterfaceHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-19766Authentication Bypass leads to Administrative control of adjacent network hosts in HPE Networking Fabric ComposerHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-19593OpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and working-tree status when a user opened a workspace.OpenAI Codex Desktop
- CVE-2026-79687Dell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability.Dell PowerStore
- CVE-2026-18931Hardcoded Credentials in TMT Machine's Talassoft Industrial Management SoftwareTMT Machine Industry and Trade Ltd. Talassoft Industrial Ma…
- CVE-2026-78012Stack-based Buffer Overflow in Pyramid Solutions NetStaX EtherNet/IP StackPyramid Solutions EtherNet/IP Adapter DLL Kit · Pyramid… +2
- CVE-2026-18210SQL Injection in TRtek Technological Products's StoreTRtek Technological Products Computer Software Hardware Ind…
- CVE-2026-9621RSLinx Classic® - Multiple VulnerabilitiesRockwell Automation RSLinx Classic®
- CVE-2026-18808Unauthenticated Remote Code Execution via Code Injection in Klemsan's KIOKlemsan Electrical Electronics KIO
- CVE-2026-84149Information Disclosure Vulnerability in Manacle Technologies ERP SystemManacle Technologies Multi-tenant ERP System
- CVE-2026-18765SQL Injection in Teracity Sotware's Teracity E-OSB PlatformTeracity Software Technologies E-OSB
- CVE-2026-84148Insecure Direct Object Reference Vulnerability in Manacle Technologies ERP SystemManacle Technologies Multi-tenant ERP System
- CVE-2026-84147Remote Code Execution Vulnerability in Manacle Technologies ERP SystemManacle Technologies Multi-tenant ERP System
- CVE-2026-84143Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15Mozilla Firefox · Mozilla Thunderbird
- CVE-2026-84142Internally found bugs fixed in Thunderbird 155Mozilla Firefox · Mozilla Thunderbird
- CVE-2026-84141Integer overflow in the Graphics: ImageLib componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-84140Site isolation issue in the DOM: Navigation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-84139Clickjacking issue in the DOM: Events componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-84137Spoofing issue in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-84136Other issue in the DOM: Navigation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-84135Other issue in Firefox Focus for AndroidMozilla Firefox
- CVE-2026-84134Other issue in the Profile Backup componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-84133Site isolation issue in the DOM: Push Subscriptions componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-84129Site isolation issue in the DOM: Navigation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-84121Sandbox escape due to use-after-free in the DOM: Security componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-84119Sandbox escape due to use-after-free in the DOM: Navigation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-84200Kyverno before v1.13.0 Policy Bypass via Multiple Exceptionskyverno · github.com/kyverno/kyverno
- CVE-2026-84189LibreNMS before 26.7.0 Stored XSS via Oxidized APIlibrenms · librenms/librenms
- CVE-2023-54356Kyverno before 1.9.5 Sweet32 Medium Strength Cipher Suiteskyverno · github.com/kyverno/kyverno
- CVE-2026-18550Nokri - Job Board WordPress Theme <= 1.6.6 - Unauthenticated Privilege Escalation via 'token' Parameterscriptsbundle Nokri – Job Board WordPress Theme
- CVE-2026-4813Code injection in the Lutece CoreLutece Core
- CVE-2026-78319TOCTOU Vulnerability in file exchangeSauter modu680-AS · Sauter modu660-AS +3
- CVE-2026-83772Cobham SATCOM VSAT7090 Maritime Satellite Router JSON Parsing mail-report.sh c_set_reports_decode command injectionCobham SATCOM VSAT7090 Maritime Satellite Router
- CVE-2026-75865WPLP Cookie Consent <= 4.4.1 - Unauthenticated Arbitrary File Upload via 'upload-logo' REST Endpointwplegalpages WPLP Cookie Consent – Cookie Banner & Consent…
- CVE-2026-67394A critical local privilege escalation via OS command injection vulnerability has been discovered in Plesk for Linux, affecting all versions WebPros Plesk
- CVE-2026-51741Incorrect access control in the clearDiagnosisLog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to erase di
- CVE-2026-51743Incorrect access control in the guest_wifi_sync function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to disable gu
- CVE-2026-51744Incorrect access control in the recv_mesh_info_sync function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to force
- CVE-2026-51747Incorrect access control in the keepAlive function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to emit indirect me
- CVE-2026-51750Incorrect access control in the updatePriChannel function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to rescan an
- CVE-2026-51751Incorrect access control in the delSlaveDevice function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove a sp
- CVE-2026-51754Incorrect access control in the updateSlaveIpList function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to overwrit
- CVE-2026-51757Incorrect access control in the meshSlaveUpdate function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to start a fi
- CVE-2026-51760Incorrect access control in the informSyncUpgfw function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to mass-trigg
- CVE-2026-51762Incorrect access control in the meshInfoKick function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to kick or clean
- CVE-2026-51763Incorrect access control in the freeStaClient function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to forcibly dis
- CVE-2026-51764Incorrect access control in the recvSlaveCloudCheckStatus function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to
- CVE-2026-51765Incorrect access control in the recvIndirectMeshInfo function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to inser
- CVE-2026-51767Incorrect access control in the recvClearPairCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reset pai
- CVE-2026-51769Incorrect access control in the remoteCloudUpdateCheck function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to res
- CVE-2026-51770Incorrect access control in the sendToMasterQosConfig function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to forw
- CVE-2026-51934Buffer Overflow vulnerability in Shenzhen Jixiang Tengda Technology Co., Ltd.
- CVE-2026-52111An issue in fast-note-sync-service <=2.13.7 allows a remote attacker to escalate privileges via the admin configuration endpoint exposes aut
High 214
- CVE-2026-84350Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrGoogle Chrome
- CVE-2026-84335Incorrect authorization in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer proceGoogle Chrome
- CVE-2026-84334Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.75 allowed a local attacker to execute arbitrary coGoogle Chrome
- CVE-2026-84347Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via Google Chrome
- CVE-2026-84351Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer procGoogle Chrome
- CVE-2026-84326Uninitialized resource in V8 in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox Google Chrome
- CVE-2026-84349Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execGoogle Chrome
- CVE-2026-81928Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sig_data when re-encoding a message with a misplaced TSIG recordNet-DNS
- CVE-2026-84482WWBN AVideo Cross-Site Request Forgery via get_domain() validationWWBN AVideo
- CVE-2026-84476WWBN AVideo Authentication Bypass via X-Real-IP HeaderWWBN AVideo
- CVE-2026-84208AVideo User_Location Plugin Unauthenticated SQL InjectionWWBN AVideo
- CVE-2026-76851Server-Side Request Forgery vulnerability in GitHub Enterprise Server allowed remote code execution via network access from pre-receive hooks to internal servicesGitHub Enterprise Server
- CVE-2026-19118Race condition vulnerability was identified in GitHub Enterprise Server that allowed remote code executionGitHub Enterprise Server
- CVE-2026-18730Server-side request forgery vulnerability in GitHub Enterprise Server Manage API leaked a replayable gateway-agent bearer tokenGitHub Enterprise Server
- CVE-2026-84375js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sourcesnodeca js-yaml · js-yaml
- CVE-2026-84642Allowed UNC hostnames for attachments interpreted as a regular expressionMozilla Thunderbird
- CVE-2026-84641Information disclosure due to malicious IMAP server responseMozilla Thunderbird
- CVE-2026-84640One byte overflow read in mail parserMozilla Thunderbird
- CVE-2026-83549Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identiSonicWall SMA1000
- CVE-2026-84374Laravel Excel writes exports outside the configured filesystem disk when given a caller-controlled pathSpartnerNL Laravel-Excel · maatwebsite/excel
- CVE-2026-84370SVGO: removeScripts allows executable links through namespace and control-character bypassessvgo
- CVE-2026-71981Cypht < 2.12.2 PHP Object Injection RCE via back_query Parametercypht-org cypht
- CVE-2026-84366Scrapy: S3DownloadHandler sends signed S3 requests over plaintext HTTP by defaultscrapy
- CVE-2026-73782Unauthenticated Format String Vulnerability leads to Remote Code Execution in AOS-CXHewlett Packard Enterprise (HPE) AOS-CX
- CVE-2026-73781Authenticated Stored Cross-Site Scripting Vulnerability (XSS) in AOS-CX Web-Based Management InterfaceHewlett Packard Enterprise (HPE) AOS-CX
- CVE-2026-73780Lack of Cross-Site Request Forgery (CSRF) Protections for Certificate-Authenticated Sessions in AOS-CXHewlett Packard Enterprise (HPE) AOS-CX
- CVE-2026-73779Authentication Bypass Vulnerabilities Leading to Information Disclosure, Unauthorized Modification, and Service Disruption in AOS-CXHewlett Packard Enterprise (HPE) AOS-CX
- CVE-2026-73778Credential Manager Vulnerability Allows Unauthorized Administrative AccessHewlett Packard Enterprise (HPE) AOS-CX
- CVE-2026-73777Authorization Bypass Vulnerabilities Leading to Privilege Escalation in AOS-CX API EndpointHewlett Packard Enterprise (HPE) AOS-CX
- CVE-2026-73776Authenticated Signature Verification Bypass Leading to Arbitrary Code Execution in AOS-CXHewlett Packard Enterprise (HPE) AOS-CX
- CVE-2026-73775Authenticated Sensitive Information Disclosure Vulnerabilities in AOS-CXHewlett Packard Enterprise (HPE) AOS-CX
- CVE-2026-73774Unauthenticated Buffer Overflow Vulnerability leads to Sensitive Information Disclosure in AOS-CXHewlett Packard Enterprise (HPE) AOS-CX
- CVE-2026-73773Unauthenticated Denial-of-Service (DoS) Vulnerability in AOS-CXHewlett Packard Enterprise (HPE) AOS-CX
- CVE-2026-73771Improper Authentication Handling in AOS-CX Management Interface and APIHewlett Packard Enterprise (HPE) AOS-CX
- CVE-2026-73770Authenticated Arbitrary File Write Vulnerability Leading to Remote Code Execution in AOS-CXHewlett Packard Enterprise (HPE) AOS-CX
- CVE-2026-73768Local Privilege Escalation in AOS-CX Command Line InterfaceHewlett Packard Enterprise (HPE) AOS-CX
- CVE-2026-73767Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line InterfaceHewlett Packard Enterprise (HPE) AOS-CX
- CVE-2026-73766Authenticated Command Injection Vulnerabilities in the API Endpoint of AOS-CXHewlett Packard Enterprise (HPE) AOS-CX
- CVE-2026-73765Authenticated Path Traversal Vulnerabilities Lead to Remote Code Execution in AOS-CXHewlett Packard Enterprise (HPE) AOS-CX
- CVE-2026-73764Authentication Bypass Vulnerabilities Leading to Unauthorized Modification and Service Disruption in AOS-CXHewlett Packard Enterprise (HPE) AOS-CX
- CVE-2026-73763Unauthenticated Remote Command Execution in Management ComponentHewlett Packard Enterprise (HPE) AOS-CX
- CVE-2026-73753Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line InterfaceHewlett Packard Enterprise (HPE) AOS-CX
- CVE-2026-73752Unauthenticated Arbitrary File Write Vulnerability Leads to Remote Code Execution in AOS-CXHewlett Packard Enterprise (HPE) AOS-CX
- CVE-2026-73751Authenticated Remote Command Injection in AOS-CX Web-based Management InterfaceHewlett Packard Enterprise (HPE) AOS-CX
- CVE-2026-73750Authenticated Buffer Overflow Vulnerabilities in AOS-CX API Endpoint Leads to Possible Code ExecutionHewlett Packard Enterprise (HPE) AOS-CX
- CVE-2026-84361Composer: Perforce source URL permits P4PORT `rsh:` command executioncomposer · composer/composer
- CVE-2026-73725Local Privilege Escalation leads to Arbitrary Code Execution in HPE Networking Fabric ComposerHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73724Authenticated Privilege Escalation via Broken Access Control in HPE Networking Fabric ComposerHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73723Authenticated Privilege Escalation Leading to Unauthorized State Changes in HPE Networking Fabric Composer Web-Based Management InterfaceHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73722Authenticated Command Injection Vulnerabilities in HPE Networking Fabric Composer Web-Based Management InterfaceHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73721Authenticated SQL Injection Vulnerabilities in HPE Networking Fabric ComposerHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73720Authenticated Insecure File Handling allows Remote Code Execution in HPE Networking Fabric Composer APIHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73719Authenticated Arbitrary File Write Vulnerability leads to Remote Code Execution in HPE Networking Fabric ComposerHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73718Unauthenticated Information Disclosure in Web Interface allows Sensitive Data Exposure in HPE Networking Fabric ComposerHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73717Unauthenticated Command Injection Vulnerability in HPE Networking Fabric Composer Web-Based Management InterfaceHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73716Unauthenticated Remote Code Execution in HPE Networking Fabric ComposerHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73715Unauthenticated Denial-of-Service (DoS) Vulnerability in the API of HPE Networking Fabric ComposerHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73714Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer APIHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73713Local Privilege Escalation Vulnerabilities in HPE Networking Fabric ComposerHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73712Unauthenticated Remote Code Execution in HPE Networking Fabric Composer APIHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73711Unauthenticated Privilege Escalation allows Administrative Access in HPE Networking Fabric Composer APIHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73710Unauthenticated Denial of Service Vulnerabilities in API Endpoint of HPE Networking Fabric ComposerHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73709Unauthenticated Remote Code Execution during HPE Networking Fabric Composer Installation ProcessHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73708Fault in Business Logic allows Authenticated Sensitive Information Disclosure in HPE Networking Fabric ComposerHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73707Authenticated Privilege Escalation via Broken Access Control in HPE Networking Fabric Composer APIHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73706Authentication Bypass in the API of HPE Networking Fabric Composer allows Data Exposure and Unauthorized ChangesHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73705Authenticated Arbitrary File Write leads to Remote Code Execution in HPE Networking Fabric ComposerHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73704Authenticated Command Injection Leading to Administrative Access in HPE Networking Fabric Composer APIHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73703Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in HPE Networking Fabric Composer Web-Based Management InterfaceHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-45221Konga < 2.1.0 Privilege Escalation via Hardcoded OpenSSL PathEASYBYTE Software Konga
- CVE-2026-73702Authenticated Privilege Escalation Vulnerability in the API of HPE Networking Fabric ComposerHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-78592Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Deletion of Privileged ResourcesElastic Kibana
- CVE-2026-72649Deserialization of Untrusted Data in Elasticsearch Leading to Remote Code ExecutionElasticsearch
- CVE-2026-63137Incorrect Authorization in Kibana Leading to Privilege EscalationElastic Kibana
- CVE-2026-84304gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentationgrpc-go · google.golang.org/grpc
- CVE-2026-83551Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK @step/@remote pipeline pathAWS sagemaker-python-sdk
- CVE-2024-7953DataEdgePlatform DataMosaix™ Private CloudRockwell Automation DataEdgePlatform DataMosaix™ Private Cl…
- CVE-2024-7952DataEdgePlatform DataMosaix™ Private CloudRockwell Automation DataEdgePlatform DataMosaix™ Private Cl…
- CVE-2026-19592OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repository metadata withoOpenAI Codex CLI · OpenAI Codex Desktop
- CVE-2026-19591OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe becOpenAI Codex CLI · OpenAI Codex Desktop
- CVE-2026-19590OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations trusted the repositoOpenAI Codex Desktop
- CVE-2026-58566Dell PowerStore, an Incorrect Authorization vulnerability.Dell PowerStore
- CVE-2026-61769NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.NVIDIA Megatron Bridge
- CVE-2026-61777NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.NVIDIA Megatron Bridge
- CVE-2026-61778NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.NVIDIA Megatron Bridge
- CVE-2026-61779NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.NVIDIA Megatron Bridge
- CVE-2026-61770NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.NVIDIA Megatron Bridge
- CVE-2026-61771NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.NVIDIA Megatron Bridge
- CVE-2026-61772NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.NVIDIA Megatron Bridge
- CVE-2026-61773NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.NVIDIA Megatron Bridge
- CVE-2026-61774NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.NVIDIA Megatron Bridge
- CVE-2026-61775NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.NVIDIA Megatron Bridge
- CVE-2026-61776NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.NVIDIA Megatron Bridge
- CVE-2026-61766NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.NVIDIA Megatron Bridge
- CVE-2026-61767NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.NVIDIA Megatron Bridge
- CVE-2026-61768NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.NVIDIA Megatron Bridge
- CVE-2026-61760NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.NVIDIA Megatron Bridge
- CVE-2026-61761NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.NVIDIA Megatron Bridge
- CVE-2026-61762NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.NVIDIA Megatron Bridge
- CVE-2026-61763NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.NVIDIA Megatron Bridge
- CVE-2026-61764NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.NVIDIA Megatron Bridge
- CVE-2026-61765NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.NVIDIA Megatron Bridge
- CVE-2026-61759NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.NVIDIA Megatron Bridge
- CVE-2026-61750NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.NVIDIA Megatron Bridge
- CVE-2026-61751NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.NVIDIA Megatron Bridge
- CVE-2026-61752NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.NVIDIA Megatron Bridge
- CVE-2026-61753NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.NVIDIA Megatron Bridge
- CVE-2026-61754NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.NVIDIA Megatron Bridge
- CVE-2026-61758NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.NVIDIA Megatron Bridge
- CVE-2026-61755NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.NVIDIA Megatron Bridge
- CVE-2026-61756NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.NVIDIA Megatron Bridge
- CVE-2026-61757NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.NVIDIA Megatron Bridge
- CVE-2026-58567Dell PowerStore contains an OS Command Injection vulnerability.Dell PowerStore
- CVE-2026-49329Openshift/oauth-server: openshift/oauth-server: quadratic-time dos via accept-language header underscore bypass on unauthenticated login endpointsRed Hat OpenShift Container Platform
- CVE-2026-10195FS Poster <= 8.0.1 - Authenticated (Subscriber+) Remote Code Execution via FFmpeg Path Settingfs-code FS Poster - WordPress Social media Auto Poster & Sc…
- CVE-2026-79682Dell PowerStore contains a Command Injection vulnerability.Dell PowerStore
- CVE-2026-84205GROWI through 8.0.2 Authorization Bypass Through User-Controlled Key on apiv3 Revision Retrievalgrowilabs growi
- CVE-2026-84204GROWI through 8.0.2 Missing Authorization on apiv3 Attachment Retrievalgrowilabs growi
- CVE-2026-84203Memos 0.26.0 through 0.30.0 Insufficient Session Expiration on Password Changeusememos memos
- CVE-2026-84202ModelScope through 1.40.0 Unsafe YAML Deserialization in Model Config Loadingmodelscope
- CVE-2026-84268Gvfs: sftp: heap-based buffer overflow in read_reply()GNOME gvfs · Red Hat Enterprise Linux
- CVE-2026-18630SQL Injection in TMT Machine's Talassoft Industrial Management SoftwareTMT Machine Industry and Trade Ltd. Talassoft Industrial Ma…
- CVE-2026-18780CSRF in TMT Machine's Talassoft Industrial Management SoftwareTMT Machine Industry and Trade Ltd. Talassoft Industrial Ma…
- CVE-2026-18771Missing Authentication for Critical Function in TMT Machine's Talassoft Industrial Management SoftwareTMT Machine Industry and Trade Ltd. Talassoft Industrial Ma…
- CVE-2026-69664httpd parks a request worker indefinitely on a malformed chunk size sent after the headersErlang OTP
- CVE-2026-84233Rpm: command execution via macro expansion in `rpmuncompress -x` for crafted `.gem` filenamesRed Hat Hardened Images · Red Hat Enterprise Linux
- CVE-2026-83619xmldom: End-tag Whitespace-Trim Regex ReDoS — quadratic backtracking in the 0.8.x end-tag parserxmldom · @xmldom xmldom +1
- CVE-2026-66835httpd mod_auth directory protection bypassed by a doubled slash in the request pathErlang OTP
- CVE-2026-83618xmldom: requireWellFormed DocType publicId/systemId validation is bypassable via an embedded line terminatorxmldom · @xmldom xmldom +1
- CVE-2026-73270httpd mod_auth directory protection bypassed by request path casing on case-insensitive filesystemsErlang OTP
- CVE-2026-75538A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated PeerErlang OTP
- CVE-2026-83617xmldom: requireWellFormed element/attribute name validation is bypassable via an embedded line terminatorxmldom · @xmldom xmldom +1
- CVE-2026-83616xmldom: Processing Instruction Target Injection Bypasses requireWellFormedxmldom · @xmldom xmldom +1
- CVE-2026-74835inets,httpd: Memory Exhaustion via Unenforced max_body_size During Chunked Body ReceptionErlang OTP
- CVE-2026-83615xmldom: Quadratic-memory consumptionxmldom · @xmldom xmldom +1
- CVE-2026-73812inets, httpd: HTTP Request Smuggling via Transfer-Encoding and Content-LengthErlang OTP
- CVE-2026-83614xmldom: Quadratic-time parsing via the malformed-input recovery path — `parseElementStartPart` re-scan and `normalize()` adjacent-text mergexmldom · @xmldom xmldom +1
- CVE-2026-73276inets, httpd: HTTP Request Smuggling via Whitespace-Before-Colon Header Dropping iErlang OTP
- CVE-2026-66357inets,httpd:HTTP Request Smuggling via obs-fold Header ContinuationErlang OTP
- CVE-2026-83613xmldom: Quadratic-time attribute deduplicationxmldom · @xmldom xmldom +1
- CVE-2026-58569Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability.Dell PowerStore
- CVE-2026-55951httpc memory exhaustion via unbounded response header accumulationErlang OTP
- CVE-2026-83612xmldom: HTML raw-text closing-tag case mismatch causes output amplificationxmldom · @xmldom xmldom +1
- CVE-2026-71380httpd applies no timeout while receiving a request body, parking a worker on a stalled clientErlang OTP
- CVE-2026-70399httpd does not enforce the documented default max_clients connection limitErlang OTP
- CVE-2026-83609xmldom: Creation-time XML Name/QName validation is bypassable via an embedded line terminator, allowing injection on the default serialization pathxmldom · @xmldom xmldom +1
- CVE-2026-83608xmldom: DocType `name` Injection Bypasses requireWellFormedxmldom · @xmldom xmldom +1
- CVE-2026-83607xmldom: Element name injection via createElement() bypasses requireWellFormedxmldom · @xmldom xmldom +1
- CVE-2026-83606xmldom PI grammar regex ReDoS: quadratic backtracking on unterminated processing instructionsxmldom · @xmldom xmldom +1
- CVE-2026-83605xmldom: Attribute name injection via setAttribute() bypasses requireWellFormedxmldom · @xmldom xmldom +1
- CVE-2026-79686Dell PowerStore contains a Protection Mechanism Failure vulnerability.Dell PowerStore
- CVE-2024-14047Improper Link Resolution Before File Access ('Link Following') in Winlogbeat Leading to Arbitrary File Write and Denial of ServiceElastic Security
- CVE-2026-58571Dell PowerStore contains an OS Command Injection vulnerability.Dell PowerStore
- CVE-2026-9634Redundancy Module Configuration Tool - Multiple VulnerabilitiesRockwell Automation Redundancy Module Configuration Tool
- CVE-2026-9633Redundancy Module Configuration Tool - Multiple VulnerabilitiesRockwell Automation Redundancy Module Configuration Tool
- CVE-2025-12768FactoryTalk® Historian Machine Edition - Out-of-Bounds Write VulnerabilityRockwell Automation FactoryTalk® Historian Machine Edition
- CVE-2026-80047Hugging Face Transformers library writes remote code to disk prior to consent checkHugging Face Transformers · transformers
- CVE-2026-79684Dell PowerStore contains a Protection Mechanism Failure vulnerability.Dell PowerStore
- CVE-2026-9625RSLinx Classic® - Multiple VulnerabilitiesRockwell Automation RSLinx Classic®
- CVE-2026-9624RSLinx Classic® - Multiple VulnerabilitiesRockwell Automation RSLinx Classic®
- CVE-2026-9622RSLinx Classic® - Multiple VulnerabilitiesRockwell Automation RSLinx Classic®
- CVE-2026-12663ControlFLASH ® – Improper Access ControlRockwell Automation ControlFLASH ®
- CVE-2026-19513Gravity Forms <= 3.0.2 - Unauthenticated Arbitrary File Upload via State/Chunk Hash ConfusionGravity Forms
- CVE-2026-9637CompactLogix® 5380 / ControlLogix® 5580 - Multiple VulnerabilitiesRockwell Automation CompactLogix® 5380 / ControlLogix®
- CVE-2026-13336CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause exeSchneider Electric NetBotz 5 - 750/755
- CVE-2026-58572Dell PowerStore contains a Code Injection vulnerability.Dell PowerStore
- CVE-2026-84218Org.jolokia/jolokia-core: incomplete jndi denylist in jolokia jsr-160 proxy (bypass of cve-2018-1000130 fix)Red Hat AMQ Broker · Red Hat build of Apache Camel 4 for… +4
- CVE-2024-10085CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause denial of service of the OPC UA communicSchneider Electric EcoStruxure™ OPC UA Server Expert · Schn…
- CVE-2026-16675Rockwell Automation FactoryTalk® Activation Manager - Privilege EscalationRockwell Automation FactoryTalk® Activation Manager
- CVE-2026-84235Rockwell Automation 1756-ENBT Denial of Service VulnerabilityRockwell Automation 1756-ENBT Module
- CVE-2026-79683Dell PowerStore contains a Protection Mechanism Failure vulnerability.Dell PowerStore
- CVE-2026-19472Rockwell Automation ArmorStart® LT Denial Of ServiceRockwell Automation ArmorStart® LT
- CVE-2026-58575Dell PowerStore contains an Authentication Bypass by Spoofing vulnerability.Dell PowerStore
- CVE-2026-84144Internally found bugs fixed in Thunderbird 155 and Thunderbird ESR 153.2Mozilla Firefox · Mozilla Thunderbird
- CVE-2026-84138Denial-of-service in the PDF Viewer componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-84132Information disclosure in the Networking: HTTP componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-84130Information disclosure in the Graphics: WebGPU componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-84128Privilege escalation in the WebDriver BiDi componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-84123Privilege escalation due to use-after-free in the Graphics: WebGPU componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-84117Privilege escalation in Firefox for AndroidMozilla Firefox
- CVE-2026-84145Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15Mozilla Firefox · Mozilla Thunderbird
- CVE-2026-84131Privilege escalation due to invalid pointer in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-76111Dell PowerStore contains an Incorrect Authorization vulnerability.Dell PowerStore
- CVE-2026-84196Kyverno before 1.18.0 Server-Side Request Forgery via apiCallkyverno · github.com/kyverno/kyverno
- CVE-2026-84195Kyverno before 1.16.4 Credential Leak via apiCallkyverno · github.com/kyverno/kyverno
- CVE-2026-84194LibreNMS 23.10.0 before 26.4.0 OS Command Injection via Hostnamelibrenms
- CVE-2026-84192LibreNMS before 26.3.1 Stored XSS via SNMP/Syslog Datalibrenms · librenms/librenms
- CVE-2026-84190LibreNMS before 26.5.0 Remote Code Execution via AboutControllerlibrenms · librenms/librenms
- CVE-2026-84187AVideo on_publish.php Missing Authentication Check via RTMP CallbackWWBN AVideo
- CVE-2026-83595AVideo Cross-Site Request Forgery via plugin/API/set.json.phpWWBN AVideo
- CVE-2026-84165Lack of authorisation in OpenNebula by OpenNebula SystemsOpenNebula Systems OpenNebula
- CVE-2026-25706yast2-samba-client: OS command injection via attacker-controlled Organizational Unit (Active Directory-supplied)SUSE yast2-samba-client
- CVE-2026-59681yast2-auth-client: OS command injection via unsanitized Organizational Unit / dnsHostName in AD joinSUSE yast2-auth-client
- CVE-2026-19914Welcart e-Commerce <= 2.12.1 - Unauthenticated Stored Cross-Site Scripting via 'custom_order' Parameteruscnanbu Welcart e-Commerce
- CVE-2026-59680yast2-users: OS command injection via LDAP-supplied shadowLastChange/shadowExpire attributeSUSE yast2-users
- CVE-2026-19573Affiliate Super Assistent <= 1.10.2 - Unauthenticated Stored Cross-Site Scripting via ‘doCommentShortcode’ functionworschtebrot Affiliate Super Assistent
- CVE-2026-19952Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Arbitrary File Deletion via Path Traversal via custom_directory_name Merge Tagshabti Frontend Admin by DynamiApps
- CVE-2026-19806Support Genix <= 1.4.52 - Authenticated (Subscriber+) Authentication Bypass to Administrator Account Takeover via 'p' Parameter Forged Guest Tokendevitemsllc Support Genix – Helpdesk, AI Chatbot, Knowledge…
- CVE-2026-75921Master Addons for Elementor <= 3.1.9 - Incorrect Authorization to Authenticated (Editor+) Arbitrary File Upload via upload_template_kit AJAX ZIP Extractionpixarlabs Master Addons for Elementor – Elementor Addons, W…
- CVE-2026-19796Listdom: AI-powered Business Directory with Classifieds Ads Listings <= 5.8.1 - Unauthenticated Stored Cross-Site Scripting via 'lsd[displ][style]' Parameterwebilia Listdom: AI-powered Business Directory with Classif…
- CVE-2026-74837Unbounded atom creation from client-supplied RPC field names in AshTypescript field formatterash-project ash_typescript
- CVE-2026-82730Authorization-redacted field values disclosed through AshTypescript result normalizationash-project ash_typescript
- CVE-2026-77856Unbounded atom creation from typed struct field names in AshTypescript field selectorash-project ash_typescript
- CVE-2026-65643Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root.WebPros cPanel
- CVE-2026-51766Incorrect access control in the setDevReboot function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reboot the lo
- CVE-2026-51768Incorrect access control in the setElinkQosConfig function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to modify p
- CVE-2026-51788An issue in cleverange_auth v.0.1.10 allows a remote attacker to cause a denial of service via the account_verification function and the acc
- CVE-2026-51956A Broken Object Level Authorization vulnerability exists in Grashjs Atlas CMMS prior to v1.6.0.
- CVE-2026-51974An eval() injection vulnerability in the get_list function in modules/meta_parser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remo
- CVE-2026-52022An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the IMS P-CSCF registration handling compo
- CVE-2026-52023An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the ims_registrar_pcscf module, specifical
- CVE-2026-52130llama.cpp b5693 and before is vulnerable to Uncontrolled Recursion in common/json-schema-to-grammar.cpp, resulting in a denial of service.
- CVE-2026-52131llama.cpp b5693 and before has a Reachable Assertion via the gguf_reader::read function.
- CVE-2026-52132llama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote attackers to cause a denial of service (std::bad_all
Medium, low and unrated 192
- CVE-2026-84331Incorrect authorization in Actor in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process Google Chrome
- CVE-2026-84356UI misrepresentation in FullScreen in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTMLGoogle Chrome
- CVE-2026-84329Confused deputy in CredentialProvider in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised thGoogle Chrome
- CVE-2026-84327Incorrect authorization in Autofill in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social engineGoogle Chrome
- CVE-2026-84348Information leak in MediaCapture in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to potentially leak sensitive informationGoogle Chrome
- CVE-2026-84330UI misrepresentation in FullScreen in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via Google Chrome
- CVE-2026-84332Incorrect authorization in SiteSettings in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to bypass system access restrictioGoogle Chrome
- CVE-2026-84358Improper privilege management in Downloads in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the rendereGoogle Chrome
- CVE-2026-84355Incorrect authorization in Navigation in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer proGoogle Chrome
- CVE-2026-84323Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer proceGoogle Chrome
- CVE-2026-84328Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer proceGoogle Chrome
- CVE-2026-84357Improper input validation in Omnibox in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypaGoogle Chrome
- CVE-2026-84359Information leak in Skia in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak Google Chrome
- CVE-2026-84423Casdoor upload-resource API resource.go missing authenticationCasdoor
- CVE-2026-84483WWBN AVideo Unauthenticated Password Hash Oracle via encryptPass.json.phpWWBN AVideo
- CVE-2026-84481WWBN AVideo through 30.0 Information Disclosure via MobileManagerWWBN AVideo
- CVE-2026-84478WWBN AVideo Unauthenticated Arbitrary Log File DeletionWWBN AVideo
- CVE-2026-84477AVideo Stored XSS via Live Schedule Title DescriptionWWBN AVideo
- CVE-2026-84289NousResearch hermes-agent MCP Tool mcp_tool.py list_tools memory allocationNousResearch hermes-agent
- CVE-2026-84373Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mockvitest-dev vitest · @vitest mocker +2
- CVE-2026-84288NousResearch hermes-agent ACP Prompt Workflow session.py HermesACPAgent.prompt denial of serviceNousResearch hermes-agent
- CVE-2026-84287NousResearch hermes-agent Session Chat api_server.py denial of serviceNousResearch hermes-agent
- CVE-2026-84470Automation-controller: automation-controller-container: automation-controller/awx: bulk job launch checks instance_groups at read level instead of use level, allowing execution-placement authorization bypassRed Hat Ansible Automation Platform 2.5 for RHEL · Red H… +1
- CVE-2026-84371ApostropheCMS: Stored XSS via SVG SMIL URI-list scheme-policy bypassapostrophecms apostrophe · sanitize-html
- CVE-2026-73524Cypht < 2.12.2 XSS via FROM Email Header in Contacts Modulecypht-org cypht
- CVE-2026-84369SVGO: removeScripts incompletely sanitizes executable HTML in SVG foreignObject elementssvgo
- CVE-2026-84368joi: Prototype pollution via a `__proto__` language key in custom messageshapijs joi · joi +1
- CVE-2026-84367joi: object().rename() with a template target can set the validated object's prototypehapijs joi · joi
- CVE-2026-73783Authenticated Stack Overflow Vulnerabilities lead to Denial-of-Service in AOS-CXHewlett Packard Enterprise (HPE) AOS-CX
- CVE-2026-73772Unauthenticated Buffer Overflow Vulnerabilities lead to Denial-of-Service in AOS-CXHewlett Packard Enterprise (HPE) AOS-CX
- CVE-2026-73762Authorization Bypass in the API Endpoint of AOS-CX Leads to Unauthorized AccessHewlett Packard Enterprise (HPE) AOS-CX
- CVE-2026-73761Unauthenticated Out-of-Bounds Read Vulnerability leads to Information Disclosure in AOS-CXHewlett Packard Enterprise (HPE) AOS-CX
- CVE-2026-73760Authenticated Path Traversal Vulnerability Leads to Remote Unauthorized Access to Files in AOS-CXHewlett Packard Enterprise (HPE) AOS-CX
- CVE-2026-73759Unauthenticated Denial-of-Service Vulnerabilities in AOS-CXHewlett Packard Enterprise (HPE) AOS-CX
- CVE-2026-73758Authenticated Privilege Escalation Vulnerability via Broken Access Control in AOS-CXHewlett Packard Enterprise (HPE) AOS-CX
- CVE-2026-73757Authenticated Server-Side Request Forgery (SSRF) Leading to Information Disclosure in AOS-CXHewlett Packard Enterprise (HPE) AOS-CX
- CVE-2026-73756Unauthenticated Sensitive Information Disclosure via Man-in-the-Middle in AOS-CX via API EndpointHewlett Packard Enterprise (HPE) AOS-CX
- CVE-2026-73755Privilege Escalation via Unauthorized Access to Sensitive Session InformationHewlett Packard Enterprise (HPE) AOS-CX
- CVE-2026-73754Authenticated Denial-of-Service Vulnerabilities in the Command Line Interface of AOS-CXHewlett Packard Enterprise (HPE) AOS-CX
- CVE-2026-84365Hono: Incomplete fix for CVE-2026-39408: `toSSG()` still writes files outside the output directoryhonojs hono · hono
- CVE-2026-84364Hono: Unbounded dot-notation nesting in `parseBody()` can cause memory exhaustionhonojs hono · hono
- CVE-2026-84363Hono: Query parser reads parameters after the URL fragment, causing cache-key and proxy interpretation differentialshonojs hono · hono
- CVE-2026-63435Mail: Email address spoofing via malformed RFC 2047 encoded-wordsmikel mail · mail
- CVE-2026-84311pypdf: Possible long runtimes/large memory usage when extracting XForm objectspy-pdf pypdf · pypdf
- CVE-2026-84310pypdf: Possible long runtimes/large memory usage when retrieving outlinespy-pdf pypdf · pypdf
- CVE-2026-84309pypdf: Possible infinite loop for TreeObject.insert_childpy-pdf pypdf · pypdf
- CVE-2026-73748Authenticated Sensitive Information Disclosure in HPE Networking Fabric ComposerHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73747Local Privilege Escalation Vulnerability in HPE Networking Fabric ComposerHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73746Authenticated Denial of Service Vulnerability in HPE Networking Fabric Composer APIHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73744Authenticated Denial of Service Vulnerability in HPE Networking Fabric Composer Web-Based Management InterfaceHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73743Unauthenticated Information Disclosure Leading to Data Exposure in HPE Networking Fabric ComposerHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73742Improper Client Address Validation allows Request Attribution Spoofing in Fabric Composer API EndpointHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73741Authenticated Limited File Read allows Data Exposure in HPE Networking Fabric Composer APIHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73740Local Privilege Escalation in HPE Networking Fabric ComposerHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73739Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer APIHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73738Authenticated Sensitive Information Disclosure in HPE Networking Fabric ComposerHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73737Unauthenticated Path Traversal in HPE Networking Fabric Composer API Endpoint Allows Unauthorized File ModificationHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73736Unauthenticated Limited Information Disclosure leads to Data Exposure in HPE Networking Fabric ComposerHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73735Authenticated Access Control Vulnerabilities allow Information Disclosure in HPE Networking Fabric Composer APIHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73734Unauthenticated Open Redirect allows URL Manipulation in HPE Networking Fabric Composer Web InterfaceHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73733Authentication Bypasses in API allow Continued Authenticated Access in HPE Networking Fabric ComposerHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73732Local Authenticated Sensitive Information Disclosure in HPE Networking Fabric ComposerHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73731Unauthenticated Reflected Cross-Site Scripting (XSS) Vulnerability in HPE Networking Fabric Composer Web-Based Management InterfaceHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73730Authenticated Privilege Escalation via Broken Access Control in HPE Networking Fabric Composer APIHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73729Authenticated Sensitive Information Disclosure in HPE Networking Fabric ComposerHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73728Authenticated Denial of Service Vulnerabilities in HPE Networking Fabric Composer APIHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73727Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer APIHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73726Authentication Bypass in HPE Networking Fabric Composer allows Unauthorized Administrative AccessHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-73745Unauthenticated Limited Information Disclosure allows Data Exposure in the API of HPE Networking Fabric ComposerHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-84308phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recoveryphpseclib · phpseclib/phpseclib
- CVE-2026-63138Improper Neutralization of Special Elements in Data Query Logic in Kibana Leading to Information DisclosureElastic Kibana
- CVE-2026-78597Missing Authorization in Kibana Entity Store Leading to Unauthorized API Key CreationElastic Kibana
- CVE-2026-78606Incorrect Authorization in Kibana Leading to Unauthorized Disclosure, Modification, and Deletion of DataElastic Kibana
- CVE-2026-78603Missing Authorization in Kibana Leading to Unauthorized Disclosure of Fleet Deployment MetadataElastic Kibana
- CVE-2026-78607Missing Authorization in Elasticsearch Leading to Information DisclosureElasticsearch
- CVE-2026-78608Missing Authorization in Kibana Leading to Information DisclosureElastic Kibana
- CVE-2026-78605Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in Elasticsearch Leading to Information DisclosureElasticsearch
- CVE-2026-72654Execution with Unnecessary Privileges in Kibana Leading to Information DisclosureElastic Kibana
- CVE-2026-72633Incorrect Authorization in Kibana Leading to Unauthorized Disabling of Privilege MonitoringElastic Kibana
- CVE-2026-72641Incorrect Authorization in Kibana Leading to Unauthorized Modification of DataElastic Kibana
- CVE-2026-72628Improper Handling of Highly Compressed Data in Kibana Leading to Denial of ServiceElastic Kibana
- CVE-2026-72644Uncaught Exception in Kibana Leading to Denial of ServiceElastic Kibana
- CVE-2026-72682Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of ServiceElastic Kibana
- CVE-2026-72652Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of ServiceElastic Kibana
- CVE-2026-56143Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of ServiceElasticsearch
- CVE-2026-33465Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of ServiceElastic Kibana
- CVE-2026-84307Filament: Password validity disclosure for accounts denied panel access on login pagefilamentphp filament · filament/filament
- CVE-2026-84306Filament: Multi-factor authentication (app) codes can still be used after a newer code has been usedfilamentphp filament · filament/filament
- CVE-2026-81846runZero MCP 'Findings summaries' Data LeakrunZero Platform
- CVE-2026-84305sqlparse: Reindentation of tuple lists causes near-cap quadratic CPU consumptionandialbrecht sqlparse · sqlparse
- CVE-2026-84303gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasiongrpc-go · google.golang.org/grpc
- CVE-2026-8712Wyoming < 1.10.2 SSRF via uri Query ParameterOHF-Voice wyoming
- CVE-2026-84270Gvfs: mtp: out-of-bounds read in do_read()GNOME gvfs · Red Hat Enterprise Linux
- CVE-2026-84269Gvfs: afp: heap-based buffer overflow in dsi read pathGNOME gvfs · Red Hat Enterprise Linux
- CVE-2026-84267Gvfs: sftp: uninitialized heap disclosure in read_string()GNOME gvfs · Red Hat Enterprise Linux
- CVE-2026-84207Heym before 0.0.98 SSRF via WebSocket endpointsheymrun heym
- CVE-2026-84206Snipe-IT before 8.7.0 Authorization Bypass via Bulk Restoregrokability snipe-it
- CVE-2026-84232Pulpcore: python-pulpcore: stored cross-site scripting via inline rendering of uploaded html/svg contentRed Hat Ansible Automation Platform · Red Hat Satellite +2
- CVE-2026-84201appium-mcp-server through 0.1.61 Path Traversal in write_file and write_files_batchargneshu appium-mcp-server
- CVE-2026-84153Xinhu Rainrock RockOA index.php toaddval sql injectionXinhu Rainrock RockOA
- CVE-2026-84115Cleo Harmony JWT Refresh Token connections privileges managementCleo Harmony
- CVE-2026-83557jackson-databind omits java.lang.Comparable from DefaultBaseTypeLimitingValidator's unsafe base typesFasterXML jackson-databind · tools.jackson.core:jackson-… +1
- CVE-2026-70409eldap does not bound the port component of a referral URL before integer conversionErlang OTP
- CVE-2026-70405snmp BER INTEGER decoder applies no size limit to attacker-supplied integer fieldsErlang OTP
- CVE-2026-74994inets, httpd: Authentication Bypass via Directory Namespace Collapse in httpd mod_authErlang OTP
- CVE-2026-84114Cleo Harmony SAML Authentication LocalUserUtil.getNativeUserByAssertions improper authenticationCleo Harmony
- CVE-2026-59696uri_string does not bound the port component of a URI before integer conversionErlang OTP
- CVE-2026-83611xmldom: Parser silently accepts a not-well-formed end tag whose name is followed by a line break and trailing contentxmldom · @xmldom xmldom +1
- CVE-2026-71562httpc does not bound server-supplied numeric header values before integer conversionErlang OTP
- CVE-2026-83610xmldom: XML fragment injection via invalid EntityReference.nodeName during requireWellFormed serializationxmldom · @xmldom xmldom +1
- CVE-2026-84111Chanjet CRM jxf_dump_table.php sql injectionChanjet CRM
- CVE-2026-79685Dell PowerStore contains an Argument Injection vulnerability.Dell PowerStore
- CVE-2026-84110Releasit Releasit COD Form & Upsells OTP Validation client-side enforcement of server-side securityReleasit COD Form & Upsells
- CVE-2026-84109Xinhu Rainrock RockOA webmainAction.php getOrder sql injectionXinhu Rainrock RockOA
- CVE-2026-12661FactoryTalk® Historian Machine Edition - Out-of-Bounds Write VulnerabilityRockwell Automation FactoryTalk® Historian Machine Edition
- CVE-2026-13348CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to gain unauthorized acSchneider Electric PowerChute™ Serial Shutdown
- CVE-2026-13337CWE-564: SQL Injection: Hibernate vulnerability exists that could allow the injection of a malicious HQL query in the NetBotz database when Schneider Electric NetBotz 5 - 750/755
- CVE-2026-19471Rockwell Automation ArmorStart® LT Stored Cross-site scriptingRockwell Automation ArmorStart® LT
- CVE-2026-53682Pki-core: dogtag-pki: unauthenticated dogtag ca rest api exposes security domain hostsRed Hat Certificate System · Red Hat Enterprise Linux
- CVE-2026-7877WP Recipe Maker Premium <= 10.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wprm-call-to-action' ShortcodeBootstrapped Ventures WP Recipe Maker Premium
- CVE-2026-84127Information disclosure in the WebExtensions component in Firefox for AndroidMozilla Firefox
- CVE-2026-84126Incorrect boundary conditions in the Layout: Grid componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-84125Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-84124Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-84122Use-after-free in the Audio/Video componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-84118Use-after-free in the JavaScript: GC componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-84120Use-after-free in the Audio/Video componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-84061zhongyu09 OpenChatBI generate_sql.py _validate_sql_safety sql injectionzhongyu09 OpenChatBI
- CVE-2026-11873Pki-core: dogtag-pki: empty request to dogtag /ca/rest/certrequests causes http 500, java exception, and stacktrace disclosureRed Hat Certificate System · Red Hat Enterprise Linux
- CVE-2026-84199Kyverno before 1.16.2 SSRF via APICall Featurekyverno · github.com/kyverno/kyverno
- CVE-2026-84193LibreNMS through 26.2.0 Stored Cross-Site Scripting via SNMPlibrenms
- CVE-2026-84191LibreNMS before 26.5.0 Stored XSS via SNMP VRF fieldslibrenms
- CVE-2026-84188librenms before 26.7.0 Stored XSS via graph_descr settingslibrenms · librenms/librenms
- CVE-2025-15613Kyverno before v1.13.4 SSRF via Service Callkyverno · github.com/kyverno/kyverno
- CVE-2026-77194Simple Membership <= 4.8.1 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Multisite Identity Bindingwpinsider-1 Simple Membership
- CVE-2026-10420Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation.Samsung Open Source mTower
- CVE-2026-84059ICP DAS UA-2200/UA-5200 CGI ArmAngstromInstructionSet command injectionICP DAS UA-2200 · ICP DAS UA-5200
- CVE-2026-82927Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation.Samsung Open Source mTower
- CVE-2026-82926NULL pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation.Samsung Open Source mTower
- CVE-2026-15101WPBakery Page Builder <= 8.7.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'data' ParameterWPBakery Page Builder
- CVE-2026-16788Live Composer <= 2.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via dslc_module_projects_output Shortcodelivecomposer Live Composer – Free WordPress Website Builder
- CVE-2026-16786Live Composer <= 2.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via dslc_module_testimonials_output Shortcodelivecomposer Live Composer – Free WordPress Website Builder
- CVE-2026-13611KiviCare – Clinic & Patient Management System (EHR) < 4.5.5 - Unauthenticated Patient Data DisclosureKiviCare
- CVE-2026-78363MW WP Form < 5.1.5 - Unauthenticated Arbitrary Shortcode Execution via Completion Message Merge TagsMW WP Form
- CVE-2026-74916WP Fastest Cache 0.8.7.7 - 1.5.0 - Unauthenticated Cache Poisoning via Unkeyed Tracking ParametersWP Fastest Cache
- CVE-2026-18488Blocksy Companion <= 2.1.51 - Authenticated (Author+) Stored Cross-Site Scripting via 'tagName' Block Attribute (blocksy/dynamic-data)creativethemeshq Blocksy Companion
- CVE-2026-75980BetterDocs <= 4.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading 'id' Attribute in Post Contentwpdevteam BetterDocs – AI Documentation, Knowledge Base, MC…
- CVE-2026-75964User Profile Builder <= 4.0.0 - Unauthenticated Stored Cross-Site Scripting via 'email' Parametercozmoslabs User Profile Builder – Beautiful User Registrati…
- CVE-2026-77189Charitable <= 1.8.12.1 - Authenticated (Contributor+) SQL Injection via 'order' Shortcode Attributesmub Charitable – Donation & Fundraising Platform
- CVE-2026-83744invoiceninja Invoice Ninja invoices Endpoint Purify.php isHostSafe server-side request forgeryinvoiceninja Invoice Ninja
- CVE-2026-83743invoiceninja Invoice Ninja Vendor Portal Profile Update profile authorizationinvoiceninja Invoice Ninja
- CVE-2026-19948Cozy Blocks <= 2.2.17 - Missing Authorization to Unauthenticated Unpublished Product Information Disclosure via 'wishlistData' Parametercozythemes Cozy Blocks – Page Builder for Gutenberg Editor…
- CVE-2026-77823LearnPress <= 4.4.4 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameterthimpress LearnPress – WordPress LMS Plugin for Create and…
- CVE-2026-12747Frontend Admin by DynamiApps <= 3.29.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag' Shortcode Attributeshabti Frontend Admin by DynamiApps
- CVE-2026-13203Live Composer <= 2.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_id' Shortcode Attributelivecomposer Live Composer – Free WordPress Website Builder
- CVE-2026-16787Live Composer <= 2.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'dslc_custom_field' Shortcodelivecomposer Live Composer – Free WordPress Website Builder
- CVE-2026-76006Photo Gallery by Ays <= 6.8.2 - Authenticated (Administrator+) SQL Injection via 's' Parameterays-pro Photo Gallery by Ays – Responsive Image Gallery
- CVE-2026-75965User Profile Builder <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'date' Shortcode Attributecozmoslabs User Profile Builder – Beautiful User Registrati…
- CVE-2026-18752Persistent Login <= 3.1.0 - Authenticated (Subscriber+) SQL Injection via 'wppl_device_id' Cookielukeseager Persistent Login
- CVE-2026-17589Shopping Cart & eCommerce Store <= 5.9.2 - Authenticated (Administrator+) SQL Injection via 'product_order' Parameterlevelfourstorefront Shopping Cart & eCommerce Store
- CVE-2026-82747Ash.Policy.Authorizer returns records denied by a runtime read policy to any actorash-project ash
- CVE-2026-82749Ash relationship parent(...) filter degrades to an IS NULL match when the parent field is unresolved, leaking scoped recordsash-project ash
- CVE-2026-82748Ash.Actions.Aggregate authorizes an aggregate under one action but computes it under anotherash-project ash
- CVE-2026-82746Ash.update_many/4 atomic path skips resource policy authorization, allowing updates to forbidden recordsash-project ash
- CVE-2026-82745ETS and Mnesia data layers overwrite an existing record on create instead of enforcing primary-key uniquenessash-project ash
- CVE-2026-82744Ash.Reactor change step fails open, skipping a change when its where guard raisesash-project ash
- CVE-2026-82743Ash.Actions.Read.AsyncLimiter busy-spins a scheduler while awaiting slow async readsash-project ash
- CVE-2026-82742Ash.Filter.Runtime materializes a combinatorial cross-product over to-many relationships, exhausting memoryash-project ash
- CVE-2026-82741Ash.Type.Union with :map_with_tag does not force the tag on dump, enabling tag confusionash-project ash
- CVE-2026-82740Ash.Type ignores outer array constraints on nested {:array, {:array, type}} inputsash-project ash
- CVE-2026-82739Ash.Resource.Validation.Confirm leaks a confirmed field's stored value in the atomic mismatch errorash-project ash
- CVE-2026-82738Ash.Type.UUIDv7 accepts non-v7 UUIDs that then fail to load, causing persistent denial of serviceash-project ash
- CVE-2026-82737Ash.Vector wraps the 16-bit dimension header for vectors over 65,535 elements, corrupting data and crashing readsash-project ash
- CVE-2026-82736Ash.Type.CiString validates length and match constraints before case folding, allowing constraint bypassash-project ash
- CVE-2026-82735Match regex runs on over-length input in Ash.Type.String, enabling regex denial of serviceash-project ash
- CVE-2026-19032jackson-databind resolves attacker-controlled URI schemes when deserializing java.nio.file.PathFasterXML jackson-databind · tools.jackson.core:jackson-… +1
- CVE-2026-82734Non-finite Infinity/NaN decimal values bypass bounds constraints in Ash.Type.Decimalash-project ash
- CVE-2026-82731Unescaped path parameters in AshTypescript generated TypeScript client allow request redirectionash-project ash_typescript
- CVE-2026-82733Route handler return value echoed into AshTypescript error responseash-project ash_typescript
- CVE-2026-82732Declared argument constraints not enforced on AshTypescript typed controller routesash-project ash_typescript
- CVE-2026-77950RPC error handler fails open in AshTypescript, disclosing unredacted errorsash-project ash_typescript
- CVE-2026-48932A flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based forwarding proxies that rebuild outbound headers from nodejs node
- CVE-2026-67395A path traversal vulnerability exists in Sage Employee Self Service’s custom logo functionality due to improper validation of file path paraSage Employee Self Service
- CVE-2026-18743Popt-devel: popt-static: short realloc in poptconfigfiletostringrpm-software-management popt · Red Hat Hardened Images +2
- CVE-2026-19820Backblaze Client for Windows Improper Link Resolution VulnerabilityBackblaze Client
- CVE-2026-51742Incorrect access control in the discoverWan function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to trigger WAN di
- CVE-2026-51745Incorrect access control in the updatePriStaList function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to refresh t
- CVE-2026-51748Incorrect access control in the sendStaticInfoToMaster function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to upd
- CVE-2026-51752Incorrect access control in the staticInfoSend function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to trigger sta
- CVE-2026-51756Incorrect access control in the meshSlaveUpgfw function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to start firmw
- CVE-2026-51761Incorrect access control in the updateLanIp function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to refresh the LA
- CVE-2026-52295FFmpeg before 9.0 has an out-of-bounds read because the copied extradata lacked required padding before GetBitContext-based access in libavfFFmpeg