# CVEs published 2026-09-01

477 CVEs were published on September 1, 2026: 71 critical, 214 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2026-84331](https://cve.now/CVE-2026-84331.md): Incorrect authorization in Actor in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process (CVSS 3.1, Google Chrome)
- [CVE-2026-84350](https://cve.now/CVE-2026-84350.md): Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitr (CVSS 8.8, Google Chrome)
- [CVE-2026-84356](https://cve.now/CVE-2026-84356.md): UI misrepresentation in FullScreen in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML (CVSS 4.3, Google Chrome)
- [CVE-2026-84329](https://cve.now/CVE-2026-84329.md): Confused deputy in CredentialProvider in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised th (CVSS 5.3, Google Chrome)
- [CVE-2026-84327](https://cve.now/CVE-2026-84327.md): Incorrect authorization in Autofill in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social engine (CVSS 6.5, Google Chrome)
- [CVE-2026-84335](https://cve.now/CVE-2026-84335.md): Incorrect authorization in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer proce (CVSS 8.3, Google Chrome)
- [CVE-2026-84348](https://cve.now/CVE-2026-84348.md): Information leak in MediaCapture in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to potentially leak sensitive information (CVSS 6.5, Google Chrome)
- [CVE-2026-84334](https://cve.now/CVE-2026-84334.md): Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.75 allowed a local attacker to execute arbitrary co (CVSS 8.1, Google Chrome)
- [CVE-2026-84330](https://cve.now/CVE-2026-84330.md): UI misrepresentation in FullScreen in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via (CVSS 5.4, Google Chrome)
- [CVE-2026-84332](https://cve.now/CVE-2026-84332.md): Incorrect authorization in SiteSettings in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to bypass system access restrictio (CVSS 6.5, Google Chrome)
- [CVE-2026-84358](https://cve.now/CVE-2026-84358.md): Improper privilege management in Downloads in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the rendere (CVSS 4.2, Google Chrome)
- [CVE-2026-84355](https://cve.now/CVE-2026-84355.md): Incorrect authorization in Navigation in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer pro (CVSS 3.1, Google Chrome)
- [CVE-2026-84323](https://cve.now/CVE-2026-84323.md): Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer proce (CVSS 5.3, Google Chrome)
- [CVE-2026-84347](https://cve.now/CVE-2026-84347.md): Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome)
- [CVE-2026-84328](https://cve.now/CVE-2026-84328.md): Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer proce (CVSS 3.1, Google Chrome)
- [CVE-2026-84325](https://cve.now/CVE-2026-84325.md): Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to (CVSS 9.8, Google Chrome)
- [CVE-2026-84351](https://cve.now/CVE-2026-84351.md): Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer proc (CVSS 8.3, Google Chrome)
- [CVE-2026-84333](https://cve.now/CVE-2026-84333.md): Use after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the (CVSS 9.6, Google Chrome)
- [CVE-2026-84326](https://cve.now/CVE-2026-84326.md): Uninitialized resource in V8 in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome)
- [CVE-2026-84349](https://cve.now/CVE-2026-84349.md): Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to exec (CVSS 8.3, Google Chrome)
- [CVE-2026-84324](https://cve.now/CVE-2026-84324.md): Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via (CVSS 9.0, Google Chrome)
- [CVE-2026-84357](https://cve.now/CVE-2026-84357.md): Improper input validation in Omnibox in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypa (CVSS 6.5, Google Chrome)
- [CVE-2026-84359](https://cve.now/CVE-2026-84359.md): Information leak in Skia in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak (CVSS 3.1, Google Chrome)
- [CVE-2026-84354](https://cve.now/CVE-2026-84354.md): Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to exe (CVSS 9.6, Google Chrome)
- [CVE-2026-84352](https://cve.now/CVE-2026-84352.md): Use after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside th (CVSS 9.6, Google Chrome)
- [CVE-2026-84353](https://cve.now/CVE-2026-84353.md): Use after free in Shared Tab Groups in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social engine (CVSS 9.6, Google Chrome)
- [CVE-2026-81928](https://cve.now/CVE-2026-81928.md): Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sig\_data when re-encoding a message with a misplaced TSIG record (CVSS 7.5, Net-DNS)
- [CVE-2026-84423](https://cve.now/CVE-2026-84423.md): Casdoor upload-resource API resource.go missing authentication (CVSS 6.9, Casdoor)
- [CVE-2026-84483](https://cve.now/CVE-2026-84483.md): WWBN AVideo Unauthenticated Password Hash Oracle via encryptPass.json.php (CVSS 6.9, WWBN AVideo)
- [CVE-2026-84482](https://cve.now/CVE-2026-84482.md): WWBN AVideo Cross-Site Request Forgery via get\_domain() validation (CVSS 8.7, WWBN AVideo)
- [CVE-2026-84481](https://cve.now/CVE-2026-84481.md): WWBN AVideo through 30.0 Information Disclosure via MobileManager (CVSS 6.9, WWBN AVideo)
- [CVE-2026-84480](https://cve.now/CVE-2026-84480.md): WWBN AVideo Password Recovery Token Expiration Bypass (CVSS 9.3, WWBN AVideo)
- [CVE-2026-84479](https://cve.now/CVE-2026-84479.md): WWBN AVideo Authentication Bypass via User-Agent Header (CVSS 9.3, WWBN AVideo)
- [CVE-2026-84478](https://cve.now/CVE-2026-84478.md): WWBN AVideo Unauthenticated Arbitrary Log File Deletion (CVSS 6.9, WWBN AVideo)
- [CVE-2026-84477](https://cve.now/CVE-2026-84477.md): AVideo Stored XSS via Live Schedule Title Description (CVSS 5.1, WWBN AVideo)
- [CVE-2026-84476](https://cve.now/CVE-2026-84476.md): WWBN AVideo Authentication Bypass via X-Real-IP Header (CVSS 8.7, WWBN AVideo)
- [CVE-2026-84208](https://cve.now/CVE-2026-84208.md): AVideo User\_Location Plugin Unauthenticated SQL Injection (CVSS 8.7, WWBN AVideo)
- [CVE-2023-54391](https://cve.now/CVE-2023-54391.md): Proxmox VE 7.0-8.0 Authentication Bypass via tfa-challenge Parameter (CVSS 9.3, Proxmox Server Solutions Proxmox Virtual Environment)
- [CVE-2026-76851](https://cve.now/CVE-2026-76851.md): Server-Side Request Forgery vulnerability in GitHub Enterprise Server allowed remote code execution via network access from pre-receive hooks to internal services (CVSS 7.7, GitHub Enterprise Server)
- [CVE-2026-19118](https://cve.now/CVE-2026-19118.md): Race condition vulnerability was identified in GitHub Enterprise Server that allowed remote code execution (CVSS 7.7, GitHub Enterprise Server)
- [CVE-2026-18730](https://cve.now/CVE-2026-18730.md): Server-side request forgery vulnerability in GitHub Enterprise Server Manage API leaked a replayable gateway-agent bearer token (CVSS 8.2, GitHub Enterprise Server)
- [CVE-2026-84289](https://cve.now/CVE-2026-84289.md): NousResearch hermes-agent MCP Tool mcp\_tool.py list\_tools memory allocation (CVSS 5.3, NousResearch hermes-agent)
- [CVE-2026-84375](https://cve.now/CVE-2026-84375.md): js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources (CVSS 7.5, nodeca js-yaml · js-yaml)
- [CVE-2026-84642](https://cve.now/CVE-2026-84642.md): Allowed UNC hostnames for attachments interpreted as a regular expression (CVSS 7.5, Mozilla Thunderbird)
- [CVE-2026-84641](https://cve.now/CVE-2026-84641.md): Information disclosure due to malicious IMAP server response (CVSS 7.5, Mozilla Thunderbird)
- [CVE-2026-84640](https://cve.now/CVE-2026-84640.md): One byte overflow read in mail parser (CVSS 7.5, Mozilla Thunderbird)
- [CVE-2026-84639](https://cve.now/CVE-2026-84639.md): Uninitialized memory in MIME parsing (CVSS 9.1, Mozilla Thunderbird)
- [CVE-2026-83549](https://cve.now/CVE-2026-83549.md): Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identi (CVSS 7.8, KEV, SonicWall SMA1000)
- [CVE-2026-84374](https://cve.now/CVE-2026-84374.md): Laravel Excel writes exports outside the configured filesystem disk when given a caller-controlled path (CVSS 7.5, SpartnerNL Laravel-Excel · maatwebsite/excel)
- [CVE-2026-84373](https://cve.now/CVE-2026-84373.md): Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock (CVSS 5.9, vitest-dev vitest · @vitest mocker +2)
- [CVE-2026-83548](https://cve.now/CVE-2026-83548.md): A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. (CVSS 10.0, KEV, SonicWall SMA1000)
- [CVE-2026-84637](https://cve.now/CVE-2026-84637.md): Calendar invitation attachments could launch local executables (CVSS 9.8, Mozilla Thunderbird)
- [CVE-2026-75604](https://cve.now/CVE-2026-75604.md): Next.js: Unauthenticated Remote Code Execution on windows-hosted servers (CVSS 9.0, vercel next.js · next)
- [CVE-2026-84372](https://cve.now/CVE-2026-84372.md): Predis: Redis command injection and denial of service via CRLF smuggling in pipelined commands on aggregate connections (CVSS 9.8, predis · predis/predis)
- [CVE-2026-84288](https://cve.now/CVE-2026-84288.md): NousResearch hermes-agent ACP Prompt Workflow session.py HermesACPAgent.prompt denial of service (CVSS 5.3, NousResearch hermes-agent)
- [CVE-2026-84287](https://cve.now/CVE-2026-84287.md): NousResearch hermes-agent Session Chat api\_server.py denial of service (CVSS 5.3, NousResearch hermes-agent)
- [CVE-2026-84470](https://cve.now/CVE-2026-84470.md): Automation-controller: automation-controller-container: automation-controller/awx: bulk job launch checks instance\_groups at read level instead of use level, allowing execution-placement authorization bypass (CVSS 6.4, Red Hat Ansible Automation Platform 2.5 for RHEL · Red H… +1)
- [CVE-2026-84371](https://cve.now/CVE-2026-84371.md): ApostropheCMS: Stored XSS via SVG SMIL URI-list scheme-policy bypass (CVSS 5.4, apostrophecms apostrophe · sanitize-html)
- [CVE-2026-84370](https://cve.now/CVE-2026-84370.md): SVGO: removeScripts allows executable links through namespace and control-character bypasses (CVSS 8.2, svgo)
- [CVE-2026-73524](https://cve.now/CVE-2026-73524.md): Cypht \< 2.12.2 XSS via FROM Email Header in Contacts Module (CVSS 5.1, cypht-org cypht)
- [CVE-2026-84369](https://cve.now/CVE-2026-84369.md): SVGO: removeScripts incompletely sanitizes executable HTML in SVG foreignObject elements (CVSS 6.1, svgo)
- [CVE-2026-71981](https://cve.now/CVE-2026-71981.md): Cypht \< 2.12.2 PHP Object Injection RCE via back\_query Parameter (CVSS 8.7, cypht-org cypht)
- [CVE-2026-84368](https://cve.now/CVE-2026-84368.md): joi: Prototype pollution via a \`\_\_proto\_\_\` language key in custom messages (CVSS 3.7, hapijs joi · joi +1)
- [CVE-2026-84367](https://cve.now/CVE-2026-84367.md): joi: object().rename() with a template target can set the validated object's prototype (CVSS 3.7, hapijs joi · joi)
- [CVE-2026-84366](https://cve.now/CVE-2026-84366.md): Scrapy: S3DownloadHandler sends signed S3 requests over plaintext HTTP by default (CVSS 7.4, scrapy)
- [CVE-2026-73783](https://cve.now/CVE-2026-73783.md): Authenticated Stack Overflow Vulnerabilities lead to Denial-of-Service in AOS-CX (CVSS 4.9, Hewlett Packard Enterprise (HPE) AOS-CX)
- [CVE-2026-73782](https://cve.now/CVE-2026-73782.md): Unauthenticated Format String Vulnerability leads to Remote Code Execution in AOS-CX (CVSS 8.8, Hewlett Packard Enterprise (HPE) AOS-CX)
- [CVE-2026-73781](https://cve.now/CVE-2026-73781.md): Authenticated Stored Cross-Site Scripting Vulnerability (XSS) in AOS-CX Web-Based Management Interface (CVSS 8.4, Hewlett Packard Enterprise (HPE) AOS-CX)
- [CVE-2026-73780](https://cve.now/CVE-2026-73780.md): Lack of Cross-Site Request Forgery (CSRF) Protections for Certificate-Authenticated Sessions in AOS-CX (CVSS 8.3, Hewlett Packard Enterprise (HPE) AOS-CX)
- [CVE-2026-73779](https://cve.now/CVE-2026-73779.md): Authentication Bypass Vulnerabilities Leading to Information Disclosure, Unauthorized Modification, and Service Disruption in AOS-CX (CVSS 8.2, Hewlett Packard Enterprise (HPE) AOS-CX)
- [CVE-2026-73778](https://cve.now/CVE-2026-73778.md): Credential Manager Vulnerability Allows Unauthorized Administrative Access (CVSS 8.1, Hewlett Packard Enterprise (HPE) AOS-CX)
- [CVE-2026-73777](https://cve.now/CVE-2026-73777.md): Authorization Bypass Vulnerabilities Leading to Privilege Escalation in AOS-CX API Endpoint (CVSS 8.1, Hewlett Packard Enterprise (HPE) AOS-CX)
- [CVE-2026-73776](https://cve.now/CVE-2026-73776.md): Authenticated Signature Verification Bypass Leading to Arbitrary Code Execution in AOS-CX (CVSS 7.9, Hewlett Packard Enterprise (HPE) AOS-CX)
- [CVE-2026-73775](https://cve.now/CVE-2026-73775.md): Authenticated Sensitive Information Disclosure Vulnerabilities in AOS-CX (CVSS 7.7, Hewlett Packard Enterprise (HPE) AOS-CX)
- [CVE-2026-73774](https://cve.now/CVE-2026-73774.md): Unauthenticated Buffer Overflow Vulnerability leads to Sensitive Information Disclosure in AOS-CX (CVSS 7.6, Hewlett Packard Enterprise (HPE) AOS-CX)
- [CVE-2026-73773](https://cve.now/CVE-2026-73773.md): Unauthenticated Denial-of-Service (DoS) Vulnerability in AOS-CX (CVSS 7.5, Hewlett Packard Enterprise (HPE) AOS-CX)
- [CVE-2026-73772](https://cve.now/CVE-2026-73772.md): Unauthenticated Buffer Overflow Vulnerabilities lead to Denial-of-Service in AOS-CX (CVSS 6.5, Hewlett Packard Enterprise (HPE) AOS-CX)
- [CVE-2026-73771](https://cve.now/CVE-2026-73771.md): Improper Authentication Handling in AOS-CX Management Interface and API (CVSS 7.5, Hewlett Packard Enterprise (HPE) AOS-CX)
- [CVE-2026-73770](https://cve.now/CVE-2026-73770.md): Authenticated Arbitrary File Write Vulnerability Leading to Remote Code Execution in AOS-CX (CVSS 7.3, Hewlett Packard Enterprise (HPE) AOS-CX)
- [CVE-2026-73768](https://cve.now/CVE-2026-73768.md): Local Privilege Escalation in AOS-CX Command Line Interface (CVSS 7.3, Hewlett Packard Enterprise (HPE) AOS-CX)
- [CVE-2026-73767](https://cve.now/CVE-2026-73767.md): Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface (CVSS 7.2, Hewlett Packard Enterprise (HPE) AOS-CX)
- [CVE-2026-73766](https://cve.now/CVE-2026-73766.md): Authenticated Command Injection Vulnerabilities in the API Endpoint of AOS-CX (CVSS 7.2, Hewlett Packard Enterprise (HPE) AOS-CX)
- [CVE-2026-73765](https://cve.now/CVE-2026-73765.md): Authenticated Path Traversal Vulnerabilities Lead to Remote Code Execution in AOS-CX (CVSS 7.2, Hewlett Packard Enterprise (HPE) AOS-CX)
- [CVE-2026-73764](https://cve.now/CVE-2026-73764.md): Authentication Bypass Vulnerabilities Leading to Unauthorized Modification and Service Disruption in AOS-CX (CVSS 7.1, Hewlett Packard Enterprise (HPE) AOS-CX)
- [CVE-2026-73763](https://cve.now/CVE-2026-73763.md): Unauthenticated Remote Command Execution in Management Component (CVSS 7.1, Hewlett Packard Enterprise (HPE) AOS-CX)
- [CVE-2026-73762](https://cve.now/CVE-2026-73762.md): Authorization Bypass in the API Endpoint of AOS-CX Leads to Unauthorized Access (CVSS 6.6, Hewlett Packard Enterprise (HPE) AOS-CX)
- [CVE-2026-73761](https://cve.now/CVE-2026-73761.md): Unauthenticated Out-of-Bounds Read Vulnerability leads to Information Disclosure in AOS-CX (CVSS 6.5, Hewlett Packard Enterprise (HPE) AOS-CX)
- [CVE-2026-73760](https://cve.now/CVE-2026-73760.md): Authenticated Path Traversal Vulnerability Leads to Remote Unauthorized Access to Files in AOS-CX (CVSS 6.5, Hewlett Packard Enterprise (HPE) AOS-CX)
- [CVE-2026-73759](https://cve.now/CVE-2026-73759.md): Unauthenticated Denial-of-Service Vulnerabilities in AOS-CX (CVSS 6.5, Hewlett Packard Enterprise (HPE) AOS-CX)
- [CVE-2026-73758](https://cve.now/CVE-2026-73758.md): Authenticated Privilege Escalation Vulnerability via Broken Access Control in AOS-CX (CVSS 6.5, Hewlett Packard Enterprise (HPE) AOS-CX)
- [CVE-2026-73757](https://cve.now/CVE-2026-73757.md): Authenticated Server-Side Request Forgery (SSRF) Leading to Information Disclosure in AOS-CX (CVSS 6.4, Hewlett Packard Enterprise (HPE) AOS-CX)
- [CVE-2026-73756](https://cve.now/CVE-2026-73756.md): Unauthenticated Sensitive Information Disclosure via Man-in-the-Middle in AOS-CX via API Endpoint (CVSS 5.9, Hewlett Packard Enterprise (HPE) AOS-CX)
- [CVE-2026-73755](https://cve.now/CVE-2026-73755.md): Privilege Escalation via Unauthorized Access to Sensitive Session Information (CVSS 5.7, Hewlett Packard Enterprise (HPE) AOS-CX)
- [CVE-2026-73754](https://cve.now/CVE-2026-73754.md): Authenticated Denial-of-Service Vulnerabilities in the Command Line Interface of AOS-CX (CVSS 5.3, Hewlett Packard Enterprise (HPE) AOS-CX)
- [CVE-2026-73753](https://cve.now/CVE-2026-73753.md): Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface (CVSS 8.8, Hewlett Packard Enterprise (HPE) AOS-CX)
- [CVE-2026-73752](https://cve.now/CVE-2026-73752.md): Unauthenticated Arbitrary File Write Vulnerability Leads to Remote Code Execution in AOS-CX (CVSS 8.8, Hewlett Packard Enterprise (HPE) AOS-CX)
- [CVE-2026-73751](https://cve.now/CVE-2026-73751.md): Authenticated Remote Command Injection in AOS-CX Web-based Management Interface (CVSS 8.8, Hewlett Packard Enterprise (HPE) AOS-CX)
- [CVE-2026-73750](https://cve.now/CVE-2026-73750.md): Authenticated Buffer Overflow Vulnerabilities in AOS-CX API Endpoint Leads to Possible Code Execution (CVSS 8.8, Hewlett Packard Enterprise (HPE) AOS-CX)
- [CVE-2026-73749](https://cve.now/CVE-2026-73749.md): Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX (CVSS 9.8, Hewlett Packard Enterprise (HPE) AOS-CX)
- [CVE-2026-84365](https://cve.now/CVE-2026-84365.md): Hono: Incomplete fix for CVE-2026-39408: \`toSSG()\` still writes files outside the output directory (CVSS 6.5, honojs hono · hono)
- [CVE-2026-84364](https://cve.now/CVE-2026-84364.md): Hono: Unbounded dot-notation nesting in \`parseBody()\` can cause memory exhaustion (CVSS 5.3, honojs hono · hono)
- [CVE-2026-84363](https://cve.now/CVE-2026-84363.md): Hono: Query parser reads parameters after the URL fragment, causing cache-key and proxy interpretation differentials (CVSS 5.9, honojs hono · hono)
- [CVE-2026-63435](https://cve.now/CVE-2026-63435.md): Mail: Email address spoofing via malformed RFC 2047 encoded-words (CVSS 5.3, mikel mail · mail)
- [CVE-2026-84361](https://cve.now/CVE-2026-84361.md): Composer: Perforce source URL permits P4PORT \`rsh:\` command execution (CVSS 7.7, composer · composer/composer)
- [CVE-2026-84311](https://cve.now/CVE-2026-84311.md): pypdf: Possible long runtimes/large memory usage when extracting XForm objects (CVSS 4.8, py-pdf pypdf · pypdf)
- [CVE-2026-84310](https://cve.now/CVE-2026-84310.md): pypdf: Possible long runtimes/large memory usage when retrieving outlines (CVSS 4.8, py-pdf pypdf · pypdf)
- [CVE-2026-84309](https://cve.now/CVE-2026-84309.md): pypdf: Possible infinite loop for TreeObject.insert\_child (CVSS 6.9, py-pdf pypdf · pypdf)
- [CVE-2026-76658](https://cve.now/CVE-2026-76658.md): Unauthenticated Remote Code Execution in HPE Networking Fabric Composer SSH Daemon (CVSS 10.0, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-76657](https://cve.now/CVE-2026-76657.md): Authentication Bypass in HPE Networking Fabric Composer API allows Administrative Access (CVSS 10.0, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73748](https://cve.now/CVE-2026-73748.md): Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer (CVSS 2.2, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73747](https://cve.now/CVE-2026-73747.md): Local Privilege Escalation Vulnerability in HPE Networking Fabric Composer (CVSS 2.5, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73746](https://cve.now/CVE-2026-73746.md): Authenticated Denial of Service Vulnerability in HPE Networking Fabric Composer API (CVSS 3.1, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73744](https://cve.now/CVE-2026-73744.md): Authenticated Denial of Service Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface (CVSS 3.5, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73743](https://cve.now/CVE-2026-73743.md): Unauthenticated Information Disclosure Leading to Data Exposure in HPE Networking Fabric Composer (CVSS 3.7, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73742](https://cve.now/CVE-2026-73742.md): Improper Client Address Validation allows Request Attribution Spoofing in Fabric Composer API Endpoint (CVSS 4.3, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73741](https://cve.now/CVE-2026-73741.md): Authenticated Limited File Read allows Data Exposure in HPE Networking Fabric Composer API (CVSS 4.3, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73740](https://cve.now/CVE-2026-73740.md): Local Privilege Escalation in HPE Networking Fabric Composer (CVSS 4.4, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73739](https://cve.now/CVE-2026-73739.md): Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer API (CVSS 4.4, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73738](https://cve.now/CVE-2026-73738.md): Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer (CVSS 4.7, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73737](https://cve.now/CVE-2026-73737.md): Unauthenticated Path Traversal in HPE Networking Fabric Composer API Endpoint Allows Unauthorized File Modification (CVSS 4.8, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73736](https://cve.now/CVE-2026-73736.md): Unauthenticated Limited Information Disclosure leads to Data Exposure in HPE Networking Fabric Composer (CVSS 5.3, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73735](https://cve.now/CVE-2026-73735.md): Authenticated Access Control Vulnerabilities allow Information Disclosure in HPE Networking Fabric Composer API (CVSS 5.4, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73734](https://cve.now/CVE-2026-73734.md): Unauthenticated Open Redirect allows URL Manipulation in HPE Networking Fabric Composer Web Interface (CVSS 5.4, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73733](https://cve.now/CVE-2026-73733.md): Authentication Bypasses in API allow Continued Authenticated Access in HPE Networking Fabric Composer (CVSS 5.4, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73732](https://cve.now/CVE-2026-73732.md): Local Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer (CVSS 5.6, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73731](https://cve.now/CVE-2026-73731.md): Unauthenticated Reflected Cross-Site Scripting (XSS) Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface (CVSS 6.1, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73730](https://cve.now/CVE-2026-73730.md): Authenticated Privilege Escalation via Broken Access Control in HPE Networking Fabric Composer API (CVSS 6.5, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73729](https://cve.now/CVE-2026-73729.md): Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer (CVSS 6.5, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73728](https://cve.now/CVE-2026-73728.md): Authenticated Denial of Service Vulnerabilities in HPE Networking Fabric Composer API (CVSS 6.5, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73727](https://cve.now/CVE-2026-73727.md): Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer API (CVSS 6.5, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73726](https://cve.now/CVE-2026-73726.md): Authentication Bypass in HPE Networking Fabric Composer allows Unauthorized Administrative Access (CVSS 6.8, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73725](https://cve.now/CVE-2026-73725.md): Local Privilege Escalation leads to Arbitrary Code Execution in HPE Networking Fabric Composer (CVSS 7.0, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73724](https://cve.now/CVE-2026-73724.md): Authenticated Privilege Escalation via Broken Access Control in HPE Networking Fabric Composer (CVSS 7.1, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73723](https://cve.now/CVE-2026-73723.md): Authenticated Privilege Escalation Leading to Unauthorized State Changes in HPE Networking Fabric Composer Web-Based Management Interface (CVSS 7.1, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73722](https://cve.now/CVE-2026-73722.md): Authenticated Command Injection Vulnerabilities in HPE Networking Fabric Composer Web-Based Management Interface (CVSS 7.2, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73721](https://cve.now/CVE-2026-73721.md): Authenticated SQL Injection Vulnerabilities in HPE Networking Fabric Composer (CVSS 7.2, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73720](https://cve.now/CVE-2026-73720.md): Authenticated Insecure File Handling allows Remote Code Execution in HPE Networking Fabric Composer API (CVSS 7.2, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73719](https://cve.now/CVE-2026-73719.md): Authenticated Arbitrary File Write Vulnerability leads to Remote Code Execution in HPE Networking Fabric Composer (CVSS 7.2, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73718](https://cve.now/CVE-2026-73718.md): Unauthenticated Information Disclosure in Web Interface allows Sensitive Data Exposure in HPE Networking Fabric Composer (CVSS 7.4, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73717](https://cve.now/CVE-2026-73717.md): Unauthenticated Command Injection Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface (CVSS 7.5, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73716](https://cve.now/CVE-2026-73716.md): Unauthenticated Remote Code Execution in HPE Networking Fabric Composer (CVSS 7.5, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73715](https://cve.now/CVE-2026-73715.md): Unauthenticated Denial-of-Service (DoS) Vulnerability in the API of HPE Networking Fabric Composer (CVSS 7.5, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73714](https://cve.now/CVE-2026-73714.md): Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer API (CVSS 7.6, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73713](https://cve.now/CVE-2026-73713.md): Local Privilege Escalation Vulnerabilities in HPE Networking Fabric Composer (CVSS 7.8, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73712](https://cve.now/CVE-2026-73712.md): Unauthenticated Remote Code Execution in HPE Networking Fabric Composer API (CVSS 8.1, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73711](https://cve.now/CVE-2026-73711.md): Unauthenticated Privilege Escalation allows Administrative Access in HPE Networking Fabric Composer API (CVSS 8.1, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73710](https://cve.now/CVE-2026-73710.md): Unauthenticated Denial of Service Vulnerabilities in API Endpoint of HPE Networking Fabric Composer (CVSS 8.2, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73709](https://cve.now/CVE-2026-73709.md): Unauthenticated Remote Code Execution during HPE Networking Fabric Composer Installation Process (CVSS 8.3, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73708](https://cve.now/CVE-2026-73708.md): Fault in Business Logic allows Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer (CVSS 8.3, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73707](https://cve.now/CVE-2026-73707.md): Authenticated Privilege Escalation via Broken Access Control in HPE Networking Fabric Composer API (CVSS 8.5, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73706](https://cve.now/CVE-2026-73706.md): Authentication Bypass in the API of HPE Networking Fabric Composer allows Data Exposure and Unauthorized Changes (CVSS 8.6, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73705](https://cve.now/CVE-2026-73705.md): Authenticated Arbitrary File Write leads to Remote Code Execution in HPE Networking Fabric Composer (CVSS 8.8, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73704](https://cve.now/CVE-2026-73704.md): Authenticated Command Injection Leading to Administrative Access in HPE Networking Fabric Composer API (CVSS 8.8, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73703](https://cve.now/CVE-2026-73703.md): Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface (CVSS 8.8, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73745](https://cve.now/CVE-2026-73745.md): Unauthenticated Limited Information Disclosure allows Data Exposure in the API of HPE Networking Fabric Composer (CVSS 3.1, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-45221](https://cve.now/CVE-2026-45221.md): Konga \< 2.1.0 Privilege Escalation via Hardcoded OpenSSL Path (CVSS 8.5, EASYBYTE Software Konga)
- [CVE-2026-73702](https://cve.now/CVE-2026-73702.md): Authenticated Privilege Escalation Vulnerability in the API of HPE Networking Fabric Composer (CVSS 8.8, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73701](https://cve.now/CVE-2026-73701.md): Unauthenticated Remote Code Execution in HPE Networking Fabric Composer (CVSS 9.0, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-73700](https://cve.now/CVE-2026-73700.md): Authenticated Stored Cross-Site Scripting Vulnerability (XSS) in HPE Networking Fabric Composer Web-Based Management Interface (CVSS 9.0, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-19766](https://cve.now/CVE-2026-19766.md): Authentication Bypass leads to Administrative control of adjacent network hosts in HPE Networking Fabric Composer (CVSS 9.6, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-84308](https://cve.now/CVE-2026-84308.md): phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery (CVSS 6.3, phpseclib · phpseclib/phpseclib)
- [CVE-2026-63138](https://cve.now/CVE-2026-63138.md): Improper Neutralization of Special Elements in Data Query Logic in Kibana Leading to Information Disclosure (CVSS 6.5, Elastic Kibana)
- [CVE-2026-78597](https://cve.now/CVE-2026-78597.md): Missing Authorization in Kibana Entity Store Leading to Unauthorized API Key Creation (CVSS 4.3, Elastic Kibana)
- [CVE-2026-78592](https://cve.now/CVE-2026-78592.md): Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Deletion of Privileged Resources (CVSS 7.3, Elastic Kibana)
- [CVE-2026-78606](https://cve.now/CVE-2026-78606.md): Incorrect Authorization in Kibana Leading to Unauthorized Disclosure, Modification, and Deletion of Data (CVSS 4.2, Elastic Kibana)
- [CVE-2026-78603](https://cve.now/CVE-2026-78603.md): Missing Authorization in Kibana Leading to Unauthorized Disclosure of Fleet Deployment Metadata (CVSS 4.3, Elastic Kibana)
- [CVE-2026-78607](https://cve.now/CVE-2026-78607.md): Missing Authorization in Elasticsearch Leading to Information Disclosure (CVSS 5.4, Elasticsearch)
- [CVE-2026-78608](https://cve.now/CVE-2026-78608.md): Missing Authorization in Kibana Leading to Information Disclosure (CVSS 6.5, Elastic Kibana)
- [CVE-2026-78605](https://cve.now/CVE-2026-78605.md): Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in Elasticsearch Leading to Information Disclosure (CVSS 5.9, Elasticsearch)
- [CVE-2026-72654](https://cve.now/CVE-2026-72654.md): Execution with Unnecessary Privileges in Kibana Leading to Information Disclosure (CVSS 6.5, Elastic Kibana)
- [CVE-2026-72633](https://cve.now/CVE-2026-72633.md): Incorrect Authorization in Kibana Leading to Unauthorized Disabling of Privilege Monitoring (CVSS 4.3, Elastic Kibana)
- [CVE-2026-72641](https://cve.now/CVE-2026-72641.md): Incorrect Authorization in Kibana Leading to Unauthorized Modification of Data (CVSS 5.4, Elastic Kibana)
- [CVE-2026-72628](https://cve.now/CVE-2026-72628.md): Improper Handling of Highly Compressed Data in Kibana Leading to Denial of Service (CVSS 6.5, Elastic Kibana)
- [CVE-2026-72644](https://cve.now/CVE-2026-72644.md): Uncaught Exception in Kibana Leading to Denial of Service (CVSS 6.5, Elastic Kibana)
- [CVE-2026-72649](https://cve.now/CVE-2026-72649.md): Deserialization of Untrusted Data in Elasticsearch Leading to Remote Code Execution (CVSS 8.8, Elasticsearch)
- [CVE-2026-72682](https://cve.now/CVE-2026-72682.md): Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service (CVSS 6.5, Elastic Kibana)
- [CVE-2026-63137](https://cve.now/CVE-2026-63137.md): Incorrect Authorization in Kibana Leading to Privilege Escalation (CVSS 8.3, Elastic Kibana)
- [CVE-2026-72652](https://cve.now/CVE-2026-72652.md): Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service (CVSS 6.5, Elastic Kibana)
- [CVE-2026-56143](https://cve.now/CVE-2026-56143.md): Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service (CVSS 4.9, Elasticsearch)
- [CVE-2026-33465](https://cve.now/CVE-2026-33465.md): Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service (CVSS 6.5, Elastic Kibana)
- [CVE-2026-84307](https://cve.now/CVE-2026-84307.md): Filament: Password validity disclosure for accounts denied panel access on login page (CVSS 3.7, filamentphp filament · filament/filament)
- [CVE-2026-84306](https://cve.now/CVE-2026-84306.md): Filament: Multi-factor authentication (app) codes can still be used after a newer code has been used (CVSS 6.5, filamentphp filament · filament/filament)
- [CVE-2026-81846](https://cve.now/CVE-2026-81846.md): runZero MCP 'Findings summaries' Data Leak (CVSS 3.5, runZero Platform)
- [CVE-2026-84305](https://cve.now/CVE-2026-84305.md): sqlparse: Reindentation of tuple lists causes near-cap quadratic CPU consumption (CVSS 5.1, andialbrecht sqlparse · sqlparse)
- [CVE-2026-84304](https://cve.now/CVE-2026-84304.md): gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation (CVSS 8.7, grpc-go · google.golang.org/grpc)
- [CVE-2026-84303](https://cve.now/CVE-2026-84303.md): gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion (CVSS 6.3, grpc-go · google.golang.org/grpc)
- [CVE-2026-83551](https://cve.now/CVE-2026-83551.md): Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK @step/@remote pipeline path (CVSS 7.2, AWS sagemaker-python-sdk)
- [CVE-2026-8712](https://cve.now/CVE-2026-8712.md): Wyoming \< 1.10.2 SSRF via uri Query Parameter (CVSS 6.9, OHF-Voice wyoming)
- [CVE-2024-7953](https://cve.now/CVE-2024-7953.md): DataEdgePlatform DataMosaix™ Private Cloud (CVSS 8.7, Rockwell Automation DataEdgePlatform DataMosaix™ Private Cl…)
- [CVE-2024-7952](https://cve.now/CVE-2024-7952.md): DataEdgePlatform DataMosaix™ Private Cloud (CVSS 8.7, Rockwell Automation DataEdgePlatform DataMosaix™ Private Cl…)
- [CVE-2026-19592](https://cve.now/CVE-2026-19592.md): OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repository metadata witho (CVSS 7.3, OpenAI Codex CLI · OpenAI Codex Desktop)
- [CVE-2026-19593](https://cve.now/CVE-2026-19593.md): OpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and working-tree status when a user opened a workspace. (CVSS 9.8, OpenAI Codex Desktop)
- [CVE-2026-19591](https://cve.now/CVE-2026-19591.md): OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe bec (CVSS 8.8, OpenAI Codex CLI · OpenAI Codex Desktop)
- [CVE-2026-19590](https://cve.now/CVE-2026-19590.md): OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations trusted the reposito (CVSS 7.3, OpenAI Codex Desktop)
- [CVE-2026-58566](https://cve.now/CVE-2026-58566.md): Dell PowerStore, an Incorrect Authorization vulnerability. (CVSS 8.8, Dell PowerStore)
- [CVE-2026-61769](https://cve.now/CVE-2026-61769.md): NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. (CVSS 7.8, NVIDIA Megatron Bridge)
- [CVE-2026-61777](https://cve.now/CVE-2026-61777.md): NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. (CVSS 7.8, NVIDIA Megatron Bridge)
- [CVE-2026-61778](https://cve.now/CVE-2026-61778.md): NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. (CVSS 7.8, NVIDIA Megatron Bridge)
- [CVE-2026-61779](https://cve.now/CVE-2026-61779.md): NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. (CVSS 7.8, NVIDIA Megatron Bridge)
- [CVE-2026-61770](https://cve.now/CVE-2026-61770.md): NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. (CVSS 7.8, NVIDIA Megatron Bridge)
- [CVE-2026-61771](https://cve.now/CVE-2026-61771.md): NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. (CVSS 7.8, NVIDIA Megatron Bridge)
- [CVE-2026-61772](https://cve.now/CVE-2026-61772.md): NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. (CVSS 7.8, NVIDIA Megatron Bridge)
- [CVE-2026-61773](https://cve.now/CVE-2026-61773.md): NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. (CVSS 7.8, NVIDIA Megatron Bridge)
- [CVE-2026-61774](https://cve.now/CVE-2026-61774.md): NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. (CVSS 7.8, NVIDIA Megatron Bridge)
- [CVE-2026-61775](https://cve.now/CVE-2026-61775.md): NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. (CVSS 7.8, NVIDIA Megatron Bridge)
- [CVE-2026-61776](https://cve.now/CVE-2026-61776.md): NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. (CVSS 7.8, NVIDIA Megatron Bridge)
- [CVE-2026-61766](https://cve.now/CVE-2026-61766.md): NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. (CVSS 7.8, NVIDIA Megatron Bridge)
- [CVE-2026-61767](https://cve.now/CVE-2026-61767.md): NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. (CVSS 7.8, NVIDIA Megatron Bridge)
- [CVE-2026-61768](https://cve.now/CVE-2026-61768.md): NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. (CVSS 7.8, NVIDIA Megatron Bridge)
- [CVE-2026-61760](https://cve.now/CVE-2026-61760.md): NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. (CVSS 7.8, NVIDIA Megatron Bridge)
- [CVE-2026-61761](https://cve.now/CVE-2026-61761.md): NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. (CVSS 7.8, NVIDIA Megatron Bridge)
- [CVE-2026-61762](https://cve.now/CVE-2026-61762.md): NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. (CVSS 7.8, NVIDIA Megatron Bridge)
- [CVE-2026-61763](https://cve.now/CVE-2026-61763.md): NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. (CVSS 7.8, NVIDIA Megatron Bridge)
- [CVE-2026-61764](https://cve.now/CVE-2026-61764.md): NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. (CVSS 7.8, NVIDIA Megatron Bridge)
- [CVE-2026-61765](https://cve.now/CVE-2026-61765.md): NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. (CVSS 7.8, NVIDIA Megatron Bridge)
- [CVE-2026-61759](https://cve.now/CVE-2026-61759.md): NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. (CVSS 7.8, NVIDIA Megatron Bridge)
- [CVE-2026-61750](https://cve.now/CVE-2026-61750.md): NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. (CVSS 7.8, NVIDIA Megatron Bridge)
- [CVE-2026-61751](https://cve.now/CVE-2026-61751.md): NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. (CVSS 7.8, NVIDIA Megatron Bridge)
- [CVE-2026-61752](https://cve.now/CVE-2026-61752.md): NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. (CVSS 7.8, NVIDIA Megatron Bridge)
- [CVE-2026-61753](https://cve.now/CVE-2026-61753.md): NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. (CVSS 7.8, NVIDIA Megatron Bridge)
- [CVE-2026-61754](https://cve.now/CVE-2026-61754.md): NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. (CVSS 7.8, NVIDIA Megatron Bridge)
- [CVE-2026-61758](https://cve.now/CVE-2026-61758.md): NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. (CVSS 7.8, NVIDIA Megatron Bridge)
- [CVE-2026-61755](https://cve.now/CVE-2026-61755.md): NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. (CVSS 7.8, NVIDIA Megatron Bridge)
- [CVE-2026-61756](https://cve.now/CVE-2026-61756.md): NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. (CVSS 7.8, NVIDIA Megatron Bridge)
- [CVE-2026-61757](https://cve.now/CVE-2026-61757.md): NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. (CVSS 7.8, NVIDIA Megatron Bridge)
- [CVE-2026-79687](https://cve.now/CVE-2026-79687.md): Dell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability. (CVSS 9.0, Dell PowerStore)
- [CVE-2026-58567](https://cve.now/CVE-2026-58567.md): Dell PowerStore contains an OS Command Injection vulnerability. (CVSS 8.8, Dell PowerStore)
- [CVE-2026-49329](https://cve.now/CVE-2026-49329.md): Openshift/oauth-server: openshift/oauth-server: quadratic-time dos via accept-language header underscore bypass on unauthenticated login endpoints (CVSS 7.5, Red Hat OpenShift Container Platform)
- [CVE-2026-10195](https://cve.now/CVE-2026-10195.md): FS Poster \<= 8.0.1 - Authenticated (Subscriber+) Remote Code Execution via FFmpeg Path Setting (CVSS 8.8, fs-code FS Poster - WordPress Social media Auto Poster & Sc…)
- [CVE-2026-79682](https://cve.now/CVE-2026-79682.md): Dell PowerStore contains a Command Injection vulnerability. (CVSS 8.8, Dell PowerStore)
- [CVE-2026-84270](https://cve.now/CVE-2026-84270.md): Gvfs: mtp: out-of-bounds read in do\_read() (CVSS 4.3, GNOME gvfs · Red Hat Enterprise Linux)
- [CVE-2026-84269](https://cve.now/CVE-2026-84269.md): Gvfs: afp: heap-based buffer overflow in dsi read path (CVSS 6.5, GNOME gvfs · Red Hat Enterprise Linux)
- [CVE-2026-84267](https://cve.now/CVE-2026-84267.md): Gvfs: sftp: uninitialized heap disclosure in read\_string() (CVSS 4.3, GNOME gvfs · Red Hat Enterprise Linux)
- [CVE-2026-84207](https://cve.now/CVE-2026-84207.md): Heym before 0.0.98 SSRF via WebSocket endpoints (CVSS 5.3, heymrun heym)
- [CVE-2026-84206](https://cve.now/CVE-2026-84206.md): Snipe-IT before 8.7.0 Authorization Bypass via Bulk Restore (CVSS 5.3, grokability snipe-it)
- [CVE-2026-84232](https://cve.now/CVE-2026-84232.md): Pulpcore: python-pulpcore: stored cross-site scripting via inline rendering of uploaded html/svg content (CVSS 5.4, Red Hat Ansible Automation Platform · Red Hat Satellite +2)
- [CVE-2026-84205](https://cve.now/CVE-2026-84205.md): GROWI through 8.0.2 Authorization Bypass Through User-Controlled Key on apiv3 Revision Retrieval (CVSS 7.1, growilabs growi)
- [CVE-2026-84204](https://cve.now/CVE-2026-84204.md): GROWI through 8.0.2 Missing Authorization on apiv3 Attachment Retrieval (CVSS 7.1, growilabs growi)
- [CVE-2026-84203](https://cve.now/CVE-2026-84203.md): Memos 0.26.0 through 0.30.0 Insufficient Session Expiration on Password Change (CVSS 8.6, usememos memos)
- [CVE-2026-84202](https://cve.now/CVE-2026-84202.md): ModelScope through 1.40.0 Unsafe YAML Deserialization in Model Config Loading (CVSS 8.7, modelscope)
- [CVE-2026-84201](https://cve.now/CVE-2026-84201.md): appium-mcp-server through 0.1.61 Path Traversal in write\_file and write\_files\_batch (CVSS 6.9, argneshu appium-mcp-server)
- [CVE-2026-84268](https://cve.now/CVE-2026-84268.md): Gvfs: sftp: heap-based buffer overflow in read\_reply() (CVSS 8.8, GNOME gvfs · Red Hat Enterprise Linux)
- [CVE-2026-84153](https://cve.now/CVE-2026-84153.md): Xinhu Rainrock RockOA index.php toaddval sql injection (CVSS 5.3, Xinhu Rainrock RockOA)
- [CVE-2026-18931](https://cve.now/CVE-2026-18931.md): Hardcoded Credentials in TMT Machine's Talassoft Industrial Management Software (CVSS 9.1, TMT Machine Industry and Trade Ltd. Talassoft Industrial Ma…)
- [CVE-2026-18630](https://cve.now/CVE-2026-18630.md): SQL Injection in TMT Machine's Talassoft Industrial Management Software (CVSS 8.8, TMT Machine Industry and Trade Ltd. Talassoft Industrial Ma…)
- [CVE-2026-18780](https://cve.now/CVE-2026-18780.md): CSRF in TMT Machine's Talassoft Industrial Management Software (CVSS 7.1, TMT Machine Industry and Trade Ltd. Talassoft Industrial Ma…)
- [CVE-2026-78012](https://cve.now/CVE-2026-78012.md): Stack-based Buffer Overflow in Pyramid Solutions NetStaX EtherNet/IP Stack (CVSS 9.8, Pyramid Solutions EtherNet/IP Adapter DLL Kit · Pyramid… +2)
- [CVE-2026-84115](https://cve.now/CVE-2026-84115.md): Cleo Harmony JWT Refresh Token connections privileges management (CVSS 6.9, Cleo Harmony)
- [CVE-2026-18771](https://cve.now/CVE-2026-18771.md): Missing Authentication for Critical Function in TMT Machine's Talassoft Industrial Management Software (CVSS 7.5, TMT Machine Industry and Trade Ltd. Talassoft Industrial Ma…)
- [CVE-2026-69664](https://cve.now/CVE-2026-69664.md): httpd parks a request worker indefinitely on a malformed chunk size sent after the headers (CVSS 8.7, Erlang OTP)
- [CVE-2026-83557](https://cve.now/CVE-2026-83557.md): jackson-databind omits java.lang.Comparable from DefaultBaseTypeLimitingValidator's unsafe base types (CVSS 5.6, FasterXML jackson-databind · tools.jackson.core:jackson-… +1)
- [CVE-2026-84233](https://cve.now/CVE-2026-84233.md): Rpm: command execution via macro expansion in \`rpmuncompress -x\` for crafted \`.gem\` filenames (CVSS 7.0, Red Hat Hardened Images · Red Hat Enterprise Linux)
- [CVE-2026-83619](https://cve.now/CVE-2026-83619.md): xmldom: End-tag Whitespace-Trim Regex ReDoS — quadratic backtracking in the 0.8.x end-tag parser (CVSS 8.7, xmldom · @xmldom xmldom +1)
- [CVE-2026-70409](https://cve.now/CVE-2026-70409.md): eldap does not bound the port component of a referral URL before integer conversion (CVSS 6.3, Erlang OTP)
- [CVE-2026-70405](https://cve.now/CVE-2026-70405.md): snmp BER INTEGER decoder applies no size limit to attacker-supplied integer fields (CVSS 6.3, Erlang OTP)
- [CVE-2026-66835](https://cve.now/CVE-2026-66835.md): httpd mod\_auth directory protection bypassed by a doubled slash in the request path (CVSS 8.2, Erlang OTP)
- [CVE-2026-83618](https://cve.now/CVE-2026-83618.md): xmldom: requireWellFormed DocType publicId/systemId validation is bypassable via an embedded line terminator (CVSS 8.7, xmldom · @xmldom xmldom +1)
- [CVE-2026-73270](https://cve.now/CVE-2026-73270.md): httpd mod\_auth directory protection bypassed by request path casing on case-insensitive filesystems (CVSS 8.2, Erlang OTP)
- [CVE-2026-75538](https://cve.now/CVE-2026-75538.md): A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated Peer (CVSS 8.2, Erlang OTP)
- [CVE-2026-83617](https://cve.now/CVE-2026-83617.md): xmldom: requireWellFormed element/attribute name validation is bypassable via an embedded line terminator (CVSS 8.7, xmldom · @xmldom xmldom +1)
- [CVE-2026-74994](https://cve.now/CVE-2026-74994.md): inets, httpd: Authentication Bypass via Directory Namespace Collapse in httpd mod\_auth (CVSS 6.0, Erlang OTP)
- [CVE-2026-83616](https://cve.now/CVE-2026-83616.md): xmldom: Processing Instruction Target Injection Bypasses requireWellFormed (CVSS 8.7, xmldom · @xmldom xmldom +1)
- [CVE-2026-74835](https://cve.now/CVE-2026-74835.md): inets,httpd: Memory Exhaustion via Unenforced max\_body\_size During Chunked Body Reception (CVSS 8.7, Erlang OTP)
- [CVE-2026-84114](https://cve.now/CVE-2026-84114.md): Cleo Harmony SAML Authentication LocalUserUtil.getNativeUserByAssertions improper authentication (CVSS 5.3, Cleo Harmony)
- [CVE-2026-83615](https://cve.now/CVE-2026-83615.md): xmldom: Quadratic-memory consumption (CVSS 8.7, xmldom · @xmldom xmldom +1)
- [CVE-2026-73812](https://cve.now/CVE-2026-73812.md): inets, httpd: HTTP Request Smuggling via Transfer-Encoding and Content-Length (CVSS 8.3, Erlang OTP)
- [CVE-2026-83614](https://cve.now/CVE-2026-83614.md): xmldom: Quadratic-time parsing via the malformed-input recovery path — \`parseElementStartPart\` re-scan and \`normalize()\` adjacent-text merge (CVSS 8.7, xmldom · @xmldom xmldom +1)
- [CVE-2026-73276](https://cve.now/CVE-2026-73276.md): inets, httpd: HTTP Request Smuggling via Whitespace-Before-Colon Header Dropping i (CVSS 8.3, Erlang OTP)
- [CVE-2026-66357](https://cve.now/CVE-2026-66357.md): inets,httpd:HTTP Request Smuggling via obs-fold Header Continuation (CVSS 8.3, Erlang OTP)
- [CVE-2026-83613](https://cve.now/CVE-2026-83613.md): xmldom: Quadratic-time attribute deduplication (CVSS 8.7, xmldom · @xmldom xmldom +1)
- [CVE-2026-58569](https://cve.now/CVE-2026-58569.md): Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. (CVSS 8.8, Dell PowerStore)
- [CVE-2026-59696](https://cve.now/CVE-2026-59696.md): uri\_string does not bound the port component of a URI before integer conversion (CVSS 6.9, Erlang OTP)
- [CVE-2026-55951](https://cve.now/CVE-2026-55951.md): httpc memory exhaustion via unbounded response header accumulation (CVSS 8.2, Erlang OTP)
- [CVE-2026-83612](https://cve.now/CVE-2026-83612.md): xmldom: HTML raw-text closing-tag case mismatch causes output amplification (CVSS 8.7, xmldom · @xmldom xmldom +1)
- [CVE-2026-71380](https://cve.now/CVE-2026-71380.md): httpd applies no timeout while receiving a request body, parking a worker on a stalled client (CVSS 8.7, Erlang OTP)
- [CVE-2026-83611](https://cve.now/CVE-2026-83611.md): xmldom: Parser silently accepts a not-well-formed end tag whose name is followed by a line break and trailing content (CVSS 6.9, xmldom · @xmldom xmldom +1)
- [CVE-2026-71562](https://cve.now/CVE-2026-71562.md): httpc does not bound server-supplied numeric header values before integer conversion (CVSS 6.3, Erlang OTP)
- [CVE-2026-70399](https://cve.now/CVE-2026-70399.md): httpd does not enforce the documented default max\_clients connection limit (CVSS 8.7, Erlang OTP)
- [CVE-2026-83610](https://cve.now/CVE-2026-83610.md): xmldom: XML fragment injection via invalid EntityReference.nodeName during requireWellFormed serialization (CVSS 6.3, xmldom · @xmldom xmldom +1)
- [CVE-2026-84111](https://cve.now/CVE-2026-84111.md): Chanjet CRM jxf\_dump\_table.php sql injection (CVSS 6.9, Chanjet CRM)
- [CVE-2026-83609](https://cve.now/CVE-2026-83609.md): xmldom: Creation-time XML Name/QName validation is bypassable via an embedded line terminator, allowing injection on the default serialization path (CVSS 8.7, xmldom · @xmldom xmldom +1)
- [CVE-2026-83608](https://cve.now/CVE-2026-83608.md): xmldom: DocType \`name\` Injection Bypasses requireWellFormed (CVSS 8.7, xmldom · @xmldom xmldom +1)
- [CVE-2026-79685](https://cve.now/CVE-2026-79685.md): Dell PowerStore contains an Argument Injection vulnerability. (CVSS 6.5, Dell PowerStore)
- [CVE-2026-83607](https://cve.now/CVE-2026-83607.md): xmldom: Element name injection via createElement() bypasses requireWellFormed (CVSS 8.7, xmldom · @xmldom xmldom +1)
- [CVE-2026-83606](https://cve.now/CVE-2026-83606.md): xmldom PI grammar regex ReDoS: quadratic backtracking on unterminated processing instructions (CVSS 8.7, xmldom · @xmldom xmldom +1)
- [CVE-2026-83605](https://cve.now/CVE-2026-83605.md): xmldom: Attribute name injection via setAttribute() bypasses requireWellFormed (CVSS 8.7, xmldom · @xmldom xmldom +1)
- [CVE-2026-84110](https://cve.now/CVE-2026-84110.md): Releasit Releasit COD Form & Upsells OTP Validation client-side enforcement of server-side security (CVSS 6.9, Releasit COD Form & Upsells)
- [CVE-2026-79686](https://cve.now/CVE-2026-79686.md): Dell PowerStore contains a Protection Mechanism Failure vulnerability. (CVSS 8.8, Dell PowerStore)
- [CVE-2024-14047](https://cve.now/CVE-2024-14047.md): Improper Link Resolution Before File Access ('Link Following') in Winlogbeat Leading to Arbitrary File Write and Denial of Service (CVSS 7.2, Elastic Security)
- [CVE-2026-58571](https://cve.now/CVE-2026-58571.md): Dell PowerStore contains an OS Command Injection vulnerability. (CVSS 8.8, Dell PowerStore)
- [CVE-2026-9634](https://cve.now/CVE-2026-9634.md): Redundancy Module Configuration Tool - Multiple Vulnerabilities (CVSS 7.0, Rockwell Automation Redundancy Module Configuration Tool)
- [CVE-2026-9633](https://cve.now/CVE-2026-9633.md): Redundancy Module Configuration Tool - Multiple Vulnerabilities (CVSS 7.0, Rockwell Automation Redundancy Module Configuration Tool)
- [CVE-2026-84109](https://cve.now/CVE-2026-84109.md): Xinhu Rainrock RockOA webmainAction.php getOrder sql injection (CVSS 5.3, Xinhu Rainrock RockOA)
- [CVE-2026-12661](https://cve.now/CVE-2026-12661.md): FactoryTalk® Historian Machine Edition - Out-of-Bounds Write Vulnerability (CVSS 4.8, Rockwell Automation FactoryTalk® Historian Machine Edition)
- [CVE-2025-12768](https://cve.now/CVE-2025-12768.md): FactoryTalk® Historian Machine Edition - Out-of-Bounds Write Vulnerability (CVSS 8.6, Rockwell Automation FactoryTalk® Historian Machine Edition)
- [CVE-2026-80047](https://cve.now/CVE-2026-80047.md): Hugging Face Transformers library writes remote code to disk prior to consent check (CVSS 7.8, Hugging Face Transformers · transformers)
- [CVE-2026-79684](https://cve.now/CVE-2026-79684.md): Dell PowerStore contains a Protection Mechanism Failure vulnerability. (CVSS 8.8, Dell PowerStore)
- [CVE-2026-18210](https://cve.now/CVE-2026-18210.md): SQL Injection in TRtek Technological Products's Store (CVSS 9.8, TRtek Technological Products Computer Software Hardware Ind…)
- [CVE-2026-9625](https://cve.now/CVE-2026-9625.md): RSLinx Classic® - Multiple Vulnerabilities (CVSS 8.7, Rockwell Automation RSLinx Classic®)
- [CVE-2026-9624](https://cve.now/CVE-2026-9624.md): RSLinx Classic® - Multiple Vulnerabilities (CVSS 8.7, Rockwell Automation RSLinx Classic®)
- [CVE-2026-9622](https://cve.now/CVE-2026-9622.md): RSLinx Classic® - Multiple Vulnerabilities (CVSS 8.7, Rockwell Automation RSLinx Classic®)
- [CVE-2026-9621](https://cve.now/CVE-2026-9621.md): RSLinx Classic® - Multiple Vulnerabilities (CVSS 9.2, Rockwell Automation RSLinx Classic®)
- [CVE-2026-13348](https://cve.now/CVE-2026-13348.md): CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to gain unauthorized ac (CVSS 6.9, Schneider Electric PowerChute™ Serial Shutdown)
- [CVE-2026-12663](https://cve.now/CVE-2026-12663.md): ControlFLASH ® – Improper Access Control (CVSS 7.0, Rockwell Automation ControlFLASH ®)
- [CVE-2026-19513](https://cve.now/CVE-2026-19513.md): Gravity Forms \<= 3.0.2 - Unauthenticated Arbitrary File Upload via State/Chunk Hash Confusion (CVSS 8.1, Gravity Forms)
- [CVE-2026-13337](https://cve.now/CVE-2026-13337.md): CWE-564: SQL Injection: Hibernate vulnerability exists that could allow the injection of a malicious HQL query in the NetBotz database when (CVSS 5.1, Schneider Electric NetBotz 5 - 750/755)
- [CVE-2026-9637](https://cve.now/CVE-2026-9637.md): CompactLogix® 5380 / ControlLogix® 5580 - Multiple Vulnerabilities (CVSS 8.7, Rockwell Automation CompactLogix® 5380 / ControlLogix®)
- [CVE-2026-13336](https://cve.now/CVE-2026-13336.md): CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause exe (CVSS 7.3, Schneider Electric NetBotz 5 - 750/755)
- [CVE-2026-58572](https://cve.now/CVE-2026-58572.md): Dell PowerStore contains a Code Injection vulnerability. (CVSS 8.8, Dell PowerStore)
- [CVE-2026-18808](https://cve.now/CVE-2026-18808.md): Unauthenticated Remote Code Execution via Code Injection in Klemsan's KIO (CVSS 9.8, Klemsan Electrical Electronics KIO)
- [CVE-2026-84218](https://cve.now/CVE-2026-84218.md): Org.jolokia/jolokia-core: incomplete jndi denylist in jolokia jsr-160 proxy (bypass of cve-2018-1000130 fix) (CVSS 8.1, Red Hat AMQ Broker · Red Hat build of Apache Camel 4 for… +4)
- [CVE-2024-10085](https://cve.now/CVE-2024-10085.md): CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause denial of service of the OPC UA communic (CVSS 8.2, Schneider Electric EcoStruxure™ OPC UA Server Expert · Schn…)
- [CVE-2026-16675](https://cve.now/CVE-2026-16675.md): Rockwell Automation FactoryTalk® Activation Manager - Privilege Escalation (CVSS 8.5, Rockwell Automation FactoryTalk® Activation Manager)
- [CVE-2026-84235](https://cve.now/CVE-2026-84235.md): Rockwell Automation 1756-ENBT Denial of Service Vulnerability (CVSS 8.7, Rockwell Automation 1756-ENBT Module)
- [CVE-2026-79683](https://cve.now/CVE-2026-79683.md): Dell PowerStore contains a Protection Mechanism Failure vulnerability. (CVSS 8.8, Dell PowerStore)
- [CVE-2026-19472](https://cve.now/CVE-2026-19472.md): Rockwell Automation ArmorStart® LT Denial Of Service (CVSS 8.7, Rockwell Automation ArmorStart® LT)
- [CVE-2026-19471](https://cve.now/CVE-2026-19471.md): Rockwell Automation ArmorStart® LT Stored Cross-site scripting (CVSS 6.9, Rockwell Automation ArmorStart® LT)
- [CVE-2026-58575](https://cve.now/CVE-2026-58575.md): Dell PowerStore contains an Authentication Bypass by Spoofing vulnerability. (CVSS 8.8, Dell PowerStore)
- [CVE-2026-84149](https://cve.now/CVE-2026-84149.md): Information Disclosure Vulnerability in Manacle Technologies ERP System (CVSS 9.2, Manacle Technologies Multi-tenant ERP System)
- [CVE-2026-18765](https://cve.now/CVE-2026-18765.md): SQL Injection in Teracity Sotware's Teracity E-OSB Platform (CVSS 9.8, Teracity Software Technologies E-OSB)
- [CVE-2026-84148](https://cve.now/CVE-2026-84148.md): Insecure Direct Object Reference Vulnerability in Manacle Technologies ERP System (CVSS 9.2, Manacle Technologies Multi-tenant ERP System)
- [CVE-2026-53682](https://cve.now/CVE-2026-53682.md): Pki-core: dogtag-pki: unauthenticated dogtag ca rest api exposes security domain hosts (CVSS 5.3, Red Hat Certificate System · Red Hat Enterprise Linux)
- [CVE-2026-84147](https://cve.now/CVE-2026-84147.md): Remote Code Execution Vulnerability in Manacle Technologies ERP System (CVSS 10.0, Manacle Technologies Multi-tenant ERP System)
- [CVE-2026-7877](https://cve.now/CVE-2026-7877.md): WP Recipe Maker Premium \<= 10.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wprm-call-to-action' Shortcode (CVSS 6.4, Bootstrapped Ventures WP Recipe Maker Premium)
- [CVE-2026-84144](https://cve.now/CVE-2026-84144.md): Internally found bugs fixed in Thunderbird 155 and Thunderbird ESR 153.2 (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-84143](https://cve.now/CVE-2026-84143.md): Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15 (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-84142](https://cve.now/CVE-2026-84142.md): Internally found bugs fixed in Thunderbird 155 (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-84141](https://cve.now/CVE-2026-84141.md): Integer overflow in the Graphics: ImageLib component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-84140](https://cve.now/CVE-2026-84140.md): Site isolation issue in the DOM: Navigation component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-84139](https://cve.now/CVE-2026-84139.md): Clickjacking issue in the DOM: Events component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-84138](https://cve.now/CVE-2026-84138.md): Denial-of-service in the PDF Viewer component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-84137](https://cve.now/CVE-2026-84137.md): Spoofing issue in the DOM: Core & HTML component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-84136](https://cve.now/CVE-2026-84136.md): Other issue in the DOM: Navigation component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-84135](https://cve.now/CVE-2026-84135.md): Other issue in Firefox Focus for Android (CVSS 9.8, Mozilla Firefox)
- [CVE-2026-84134](https://cve.now/CVE-2026-84134.md): Other issue in the Profile Backup component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-84133](https://cve.now/CVE-2026-84133.md): Site isolation issue in the DOM: Push Subscriptions component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-84132](https://cve.now/CVE-2026-84132.md): Information disclosure in the Networking: HTTP component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-84130](https://cve.now/CVE-2026-84130.md): Information disclosure in the Graphics: WebGPU component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-84129](https://cve.now/CVE-2026-84129.md): Site isolation issue in the DOM: Navigation component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-84128](https://cve.now/CVE-2026-84128.md): Privilege escalation in the WebDriver BiDi component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-84127](https://cve.now/CVE-2026-84127.md): Information disclosure in the WebExtensions component in Firefox for Android (CVSS 4.3, Mozilla Firefox)
- [CVE-2026-84126](https://cve.now/CVE-2026-84126.md): Incorrect boundary conditions in the Layout: Grid component (CVSS 4.3, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-84125](https://cve.now/CVE-2026-84125.md): Use-after-free in the DOM: Core & HTML component (CVSS 5.4, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-84124](https://cve.now/CVE-2026-84124.md): Use-after-free in the DOM: Core & HTML component (CVSS 5.4, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-84123](https://cve.now/CVE-2026-84123.md): Privilege escalation due to use-after-free in the Graphics: WebGPU component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-84122](https://cve.now/CVE-2026-84122.md): Use-after-free in the Audio/Video component (CVSS 5.4, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-84118](https://cve.now/CVE-2026-84118.md): Use-after-free in the JavaScript: GC component (CVSS 5.4, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-84117](https://cve.now/CVE-2026-84117.md): Privilege escalation in Firefox for Android (CVSS 8.8, Mozilla Firefox)
- [CVE-2026-84145](https://cve.now/CVE-2026-84145.md): Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15 (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-84131](https://cve.now/CVE-2026-84131.md): Privilege escalation due to invalid pointer in the Graphics component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-84121](https://cve.now/CVE-2026-84121.md): Sandbox escape due to use-after-free in the DOM: Security component (CVSS 9.6, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-84120](https://cve.now/CVE-2026-84120.md): Use-after-free in the Audio/Video component (CVSS 5.4, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-84119](https://cve.now/CVE-2026-84119.md): Sandbox escape due to use-after-free in the DOM: Navigation component (CVSS 9.6, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-84061](https://cve.now/CVE-2026-84061.md): zhongyu09 OpenChatBI generate\_sql.py \_validate\_sql\_safety sql injection (CVSS 5.3, zhongyu09 OpenChatBI)
- [CVE-2026-11873](https://cve.now/CVE-2026-11873.md): Pki-core: dogtag-pki: empty request to dogtag /ca/rest/certrequests causes http 500, java exception, and stacktrace disclosure (CVSS 6.5, Red Hat Certificate System · Red Hat Enterprise Linux)
- [CVE-2026-76111](https://cve.now/CVE-2026-76111.md): Dell PowerStore contains an Incorrect Authorization vulnerability. (CVSS 8.8, Dell PowerStore)
- [CVE-2026-84200](https://cve.now/CVE-2026-84200.md): Kyverno before v1.13.0 Policy Bypass via Multiple Exceptions (CVSS 9.4, kyverno · github.com/kyverno/kyverno)
- [CVE-2026-84199](https://cve.now/CVE-2026-84199.md): Kyverno before 1.16.2 SSRF via APICall Feature (CVSS 6.9, kyverno · github.com/kyverno/kyverno)
- [CVE-2026-84196](https://cve.now/CVE-2026-84196.md): Kyverno before 1.18.0 Server-Side Request Forgery via apiCall (CVSS 8.3, kyverno · github.com/kyverno/kyverno)
- [CVE-2026-84195](https://cve.now/CVE-2026-84195.md): Kyverno before 1.16.4 Credential Leak via apiCall (CVSS 8.3, kyverno · github.com/kyverno/kyverno)
- [CVE-2026-84194](https://cve.now/CVE-2026-84194.md): LibreNMS 23.10.0 before 26.4.0 OS Command Injection via Hostname (CVSS 8.6, librenms)
- [CVE-2026-84193](https://cve.now/CVE-2026-84193.md): LibreNMS through 26.2.0 Stored Cross-Site Scripting via SNMP (CVSS 5.8, librenms)
- [CVE-2026-84192](https://cve.now/CVE-2026-84192.md): LibreNMS before 26.3.1 Stored XSS via SNMP/Syslog Data (CVSS 7.1, librenms · librenms/librenms)
- [CVE-2026-84191](https://cve.now/CVE-2026-84191.md): LibreNMS before 26.5.0 Stored XSS via SNMP VRF fields (CVSS 5.3, librenms)
- [CVE-2026-84190](https://cve.now/CVE-2026-84190.md): LibreNMS before 26.5.0 Remote Code Execution via AboutController (CVSS 8.7, librenms · librenms/librenms)
- [CVE-2026-84189](https://cve.now/CVE-2026-84189.md): LibreNMS before 26.7.0 Stored XSS via Oxidized API (CVSS 9.2, librenms · librenms/librenms)
- [CVE-2026-84188](https://cve.now/CVE-2026-84188.md): librenms before 26.7.0 Stored XSS via graph\_descr settings (CVSS 4.8, librenms · librenms/librenms)
- [CVE-2026-84187](https://cve.now/CVE-2026-84187.md): AVideo on\_publish.php Missing Authentication Check via RTMP Callback (CVSS 8.8, WWBN AVideo)
- [CVE-2026-83595](https://cve.now/CVE-2026-83595.md): AVideo Cross-Site Request Forgery via plugin/API/set.json.php (CVSS 7.2, WWBN AVideo)
- [CVE-2025-15613](https://cve.now/CVE-2025-15613.md): Kyverno before v1.13.4 SSRF via Service Call (CVSS 6.9, kyverno · github.com/kyverno/kyverno)
- [CVE-2023-54356](https://cve.now/CVE-2023-54356.md): Kyverno before 1.9.5 Sweet32 Medium Strength Cipher Suites (CVSS 9.3, kyverno · github.com/kyverno/kyverno)
- [CVE-2026-77194](https://cve.now/CVE-2026-77194.md): Simple Membership \<= 4.8.1 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Multisite Identity Binding (CVSS 5.3, wpinsider-1 Simple Membership)
- [CVE-2026-18550](https://cve.now/CVE-2026-18550.md): Nokri - Job Board WordPress Theme \<= 1.6.6 - Unauthenticated Privilege Escalation via 'token' Parameter (CVSS 9.8, scriptsbundle Nokri – Job Board WordPress Theme)
- [CVE-2026-10420](https://cve.now/CVE-2026-10420.md): Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. (CVSS 5.5, Samsung Open Source mTower)
- [CVE-2026-4813](https://cve.now/CVE-2026-4813.md): Code injection in the Lutece Core (CVSS 9.4, Lutece Core)
- [CVE-2026-84165](https://cve.now/CVE-2026-84165.md): Lack of authorisation in OpenNebula by OpenNebula Systems (CVSS 8.7, OpenNebula Systems OpenNebula)
- [CVE-2026-84059](https://cve.now/CVE-2026-84059.md): ICP DAS UA-2200/UA-5200 CGI ArmAngstromInstructionSet command injection (CVSS 5.3, ICP DAS UA-2200 · ICP DAS UA-5200)
- [CVE-2026-82927](https://cve.now/CVE-2026-82927.md): Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. (CVSS 5.5, Samsung Open Source mTower)
- [CVE-2026-82926](https://cve.now/CVE-2026-82926.md): NULL pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. (CVSS 5.5, Samsung Open Source mTower)
- [CVE-2026-25706](https://cve.now/CVE-2026-25706.md): yast2-samba-client: OS command injection via attacker-controlled Organizational Unit (Active Directory-supplied) (CVSS 7.5, SUSE yast2-samba-client)
- [CVE-2026-59681](https://cve.now/CVE-2026-59681.md): yast2-auth-client: OS command injection via unsanitized Organizational Unit / dnsHostName in AD join (CVSS 8.8, SUSE yast2-auth-client)
- [CVE-2026-15101](https://cve.now/CVE-2026-15101.md): WPBakery Page Builder \<= 8.7.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'data' Parameter (CVSS 6.4, WPBakery Page Builder)
- [CVE-2026-16788](https://cve.now/CVE-2026-16788.md): Live Composer \<= 2.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via dslc\_module\_projects\_output Shortcode (CVSS 6.4, livecomposer Live Composer – Free WordPress Website Builder)
- [CVE-2026-16786](https://cve.now/CVE-2026-16786.md): Live Composer \<= 2.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via dslc\_module\_testimonials\_output Shortcode (CVSS 6.4, livecomposer Live Composer – Free WordPress Website Builder)
- [CVE-2026-19914](https://cve.now/CVE-2026-19914.md): Welcart e-Commerce \<= 2.12.1 - Unauthenticated Stored Cross-Site Scripting via 'custom\_order' Parameter (CVSS 7.2, uscnanbu Welcart e-Commerce)
- [CVE-2026-59680](https://cve.now/CVE-2026-59680.md): yast2-users: OS command injection via LDAP-supplied shadowLastChange/shadowExpire attribute (CVSS 8.0, SUSE yast2-users)
- [CVE-2026-13611](https://cve.now/CVE-2026-13611.md): KiviCare – Clinic & Patient Management System (EHR) \< 4.5.5 - Unauthenticated Patient Data Disclosure (CVSS 5.3, KiviCare)
- [CVE-2026-78363](https://cve.now/CVE-2026-78363.md): MW WP Form \< 5.1.5 - Unauthenticated Arbitrary Shortcode Execution via Completion Message Merge Tags (CVSS 4.8, MW WP Form)
- [CVE-2026-74916](https://cve.now/CVE-2026-74916.md): WP Fastest Cache 0.8.7.7 - 1.5.0 - Unauthenticated Cache Poisoning via Unkeyed Tracking Parameters (CVSS 6.5, WP Fastest Cache)
- [CVE-2026-78319](https://cve.now/CVE-2026-78319.md): TOCTOU Vulnerability in file exchange (CVSS 9.3, Sauter modu680-AS · Sauter modu660-AS +3)
- [CVE-2026-18488](https://cve.now/CVE-2026-18488.md): Blocksy Companion \<= 2.1.51 - Authenticated (Author+) Stored Cross-Site Scripting via 'tagName' Block Attribute (blocksy/dynamic-data) (CVSS 6.4, creativethemeshq Blocksy Companion)
- [CVE-2026-75980](https://cve.now/CVE-2026-75980.md): BetterDocs \<= 4.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading 'id' Attribute in Post Content (CVSS 6.4, wpdevteam BetterDocs – AI Documentation, Knowledge Base, MC…)
- [CVE-2026-75964](https://cve.now/CVE-2026-75964.md): User Profile Builder \<= 4.0.0 - Unauthenticated Stored Cross-Site Scripting via 'email' Parameter (CVSS 6.1, cozmoslabs User Profile Builder – Beautiful User Registrati…)
- [CVE-2026-83772](https://cve.now/CVE-2026-83772.md): Cobham SATCOM VSAT7090 Maritime Satellite Router JSON Parsing mail-report.sh c\_set\_reports\_decode command injection (CVSS 9.4, Cobham SATCOM VSAT7090 Maritime Satellite Router)
- [CVE-2026-77189](https://cve.now/CVE-2026-77189.md): Charitable \<= 1.8.12.1 - Authenticated (Contributor+) SQL Injection via 'order' Shortcode Attribute (CVSS 6.5, smub Charitable – Donation & Fundraising Platform)
- [CVE-2026-83744](https://cve.now/CVE-2026-83744.md): invoiceninja Invoice Ninja invoices Endpoint Purify.php isHostSafe server-side request forgery (CVSS 5.3, invoiceninja Invoice Ninja)
- [CVE-2026-83743](https://cve.now/CVE-2026-83743.md): invoiceninja Invoice Ninja Vendor Portal Profile Update profile authorization (CVSS 5.3, invoiceninja Invoice Ninja)
- [CVE-2026-19948](https://cve.now/CVE-2026-19948.md): Cozy Blocks \<= 2.2.17 - Missing Authorization to Unauthenticated Unpublished Product Information Disclosure via 'wishlistData' Parameter (CVSS 5.3, cozythemes Cozy Blocks – Page Builder for Gutenberg Editor…)
- [CVE-2026-77823](https://cve.now/CVE-2026-77823.md): LearnPress \<= 4.4.4 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter (CVSS 4.9, thimpress LearnPress – WordPress LMS Plugin for Create and…)
- [CVE-2026-12747](https://cve.now/CVE-2026-12747.md): Frontend Admin by DynamiApps \<= 3.29.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag' Shortcode Attribute (CVSS 6.4, shabti Frontend Admin by DynamiApps)
- [CVE-2026-19573](https://cve.now/CVE-2026-19573.md): Affiliate Super Assistent \<= 1.10.2 - Unauthenticated Stored Cross-Site Scripting via ‘doCommentShortcode’ function (CVSS 7.2, worschtebrot Affiliate Super Assistent)
- [CVE-2026-13203](https://cve.now/CVE-2026-13203.md): Live Composer \<= 2.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom\_id' Shortcode Attribute (CVSS 6.4, livecomposer Live Composer – Free WordPress Website Builder)
- [CVE-2026-16787](https://cve.now/CVE-2026-16787.md): Live Composer \<= 2.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'dslc\_custom\_field' Shortcode (CVSS 6.4, livecomposer Live Composer – Free WordPress Website Builder)
- [CVE-2026-76006](https://cve.now/CVE-2026-76006.md): Photo Gallery by Ays \<= 6.8.2 - Authenticated (Administrator+) SQL Injection via 's' Parameter (CVSS 4.9, ays-pro Photo Gallery by Ays – Responsive Image Gallery)
- [CVE-2026-19952](https://cve.now/CVE-2026-19952.md): Frontend Admin by DynamiApps \<= 3.29.12 - Unauthenticated Arbitrary File Deletion via Path Traversal via custom\_directory\_name Merge Tag (CVSS 7.5, shabti Frontend Admin by DynamiApps)
- [CVE-2026-75965](https://cve.now/CVE-2026-75965.md): User Profile Builder \<= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'date' Shortcode Attribute (CVSS 6.4, cozmoslabs User Profile Builder – Beautiful User Registrati…)
- [CVE-2026-18752](https://cve.now/CVE-2026-18752.md): Persistent Login \<= 3.1.0 - Authenticated (Subscriber+) SQL Injection via 'wppl\_device\_id' Cookie (CVSS 6.5, lukeseager Persistent Login)
- [CVE-2026-17589](https://cve.now/CVE-2026-17589.md): Shopping Cart & eCommerce Store \<= 5.9.2 - Authenticated (Administrator+) SQL Injection via 'product\_order' Parameter (CVSS 4.9, levelfourstorefront Shopping Cart & eCommerce Store)
- [CVE-2026-19806](https://cve.now/CVE-2026-19806.md): Support Genix \<= 1.4.52 - Authenticated (Subscriber+) Authentication Bypass to Administrator Account Takeover via 'p' Parameter Forged Guest Token (CVSS 8.8, devitemsllc Support Genix – Helpdesk, AI Chatbot, Knowledge…)
- [CVE-2026-75921](https://cve.now/CVE-2026-75921.md): Master Addons for Elementor \<= 3.1.9 - Incorrect Authorization to Authenticated (Editor+) Arbitrary File Upload via upload\_template\_kit AJAX ZIP Extraction (CVSS 7.2, pixarlabs Master Addons for Elementor – Elementor Addons, W…)
- [CVE-2026-19796](https://cve.now/CVE-2026-19796.md): Listdom: AI-powered Business Directory with Classifieds Ads Listings \<= 5.8.1 - Unauthenticated Stored Cross-Site Scripting via 'lsd\[displ\]\[style\]' Parameter (CVSS 7.2, webilia Listdom: AI-powered Business Directory with Classif…)
- [CVE-2026-82747](https://cve.now/CVE-2026-82747.md): Ash.Policy.Authorizer returns records denied by a runtime read policy to any actor (CVSS 5.9, ash-project ash)
- [CVE-2026-82749](https://cve.now/CVE-2026-82749.md): Ash relationship parent(...) filter degrades to an IS NULL match when the parent field is unresolved, leaking scoped records (CVSS 5.9, ash-project ash)
- [CVE-2026-82748](https://cve.now/CVE-2026-82748.md): Ash.Actions.Aggregate authorizes an aggregate under one action but computes it under another (CVSS 2.1, ash-project ash)
- [CVE-2026-82746](https://cve.now/CVE-2026-82746.md): Ash.update\_many/4 atomic path skips resource policy authorization, allowing updates to forbidden records (CVSS 5.9, ash-project ash)
- [CVE-2026-82745](https://cve.now/CVE-2026-82745.md): ETS and Mnesia data layers overwrite an existing record on create instead of enforcing primary-key uniqueness (CVSS 5.9, ash-project ash)
- [CVE-2026-82744](https://cve.now/CVE-2026-82744.md): Ash.Reactor change step fails open, skipping a change when its where guard raises (CVSS 2.1, ash-project ash)
- [CVE-2026-82743](https://cve.now/CVE-2026-82743.md): Ash.Actions.Read.AsyncLimiter busy-spins a scheduler while awaiting slow async reads (CVSS 2.1, ash-project ash)
- [CVE-2026-82742](https://cve.now/CVE-2026-82742.md): Ash.Filter.Runtime materializes a combinatorial cross-product over to-many relationships, exhausting memory (CVSS 5.9, ash-project ash)
- [CVE-2026-82741](https://cve.now/CVE-2026-82741.md): Ash.Type.Union with :map\_with\_tag does not force the tag on dump, enabling tag confusion (CVSS 2.1, ash-project ash)
- [CVE-2026-82740](https://cve.now/CVE-2026-82740.md): Ash.Type ignores outer array constraints on nested {:array, {:array, type}} inputs (CVSS 2.1, ash-project ash)
- [CVE-2026-82739](https://cve.now/CVE-2026-82739.md): Ash.Resource.Validation.Confirm leaks a confirmed field's stored value in the atomic mismatch error (CVSS 2.1, ash-project ash)
- [CVE-2026-82738](https://cve.now/CVE-2026-82738.md): Ash.Type.UUIDv7 accepts non-v7 UUIDs that then fail to load, causing persistent denial of service (CVSS 5.9, ash-project ash)
- [CVE-2026-82737](https://cve.now/CVE-2026-82737.md): Ash.Vector wraps the 16-bit dimension header for vectors over 65,535 elements, corrupting data and crashing reads (CVSS 5.9, ash-project ash)
- [CVE-2026-82736](https://cve.now/CVE-2026-82736.md): Ash.Type.CiString validates length and match constraints before case folding, allowing constraint bypass (CVSS 2.1, ash-project ash)
- [CVE-2026-82735](https://cve.now/CVE-2026-82735.md): Match regex runs on over-length input in Ash.Type.String, enabling regex denial of service (CVSS 5.9, ash-project ash)
- [CVE-2026-19032](https://cve.now/CVE-2026-19032.md): jackson-databind resolves attacker-controlled URI schemes when deserializing java.nio.file.Path (CVSS 5.3, FasterXML jackson-databind · tools.jackson.core:jackson-… +1)
- [CVE-2026-82734](https://cve.now/CVE-2026-82734.md): Non-finite Infinity/NaN decimal values bypass bounds constraints in Ash.Type.Decimal (CVSS 2.1, ash-project ash)
- [CVE-2026-75865](https://cve.now/CVE-2026-75865.md): WPLP Cookie Consent \<= 4.4.1 - Unauthenticated Arbitrary File Upload via 'upload-logo' REST Endpoint (CVSS 9.8, wplegalpages WPLP Cookie Consent – Cookie Banner & Consent…)
- [CVE-2026-82731](https://cve.now/CVE-2026-82731.md): Unescaped path parameters in AshTypescript generated TypeScript client allow request redirection (CVSS 2.3, ash-project ash\_typescript)
- [CVE-2026-74837](https://cve.now/CVE-2026-74837.md): Unbounded atom creation from client-supplied RPC field names in AshTypescript field formatter (CVSS 8.7, ash-project ash\_typescript)
- [CVE-2026-82733](https://cve.now/CVE-2026-82733.md): Route handler return value echoed into AshTypescript error response (CVSS 6.3, ash-project ash\_typescript)
- [CVE-2026-82732](https://cve.now/CVE-2026-82732.md): Declared argument constraints not enforced on AshTypescript typed controller routes (CVSS 6.3, ash-project ash\_typescript)
- [CVE-2026-82730](https://cve.now/CVE-2026-82730.md): Authorization-redacted field values disclosed through AshTypescript result normalization (CVSS 8.2, ash-project ash\_typescript)
- [CVE-2026-77950](https://cve.now/CVE-2026-77950.md): RPC error handler fails open in AshTypescript, disclosing unredacted errors (CVSS 6.3, ash-project ash\_typescript)
- [CVE-2026-77856](https://cve.now/CVE-2026-77856.md): Unbounded atom creation from typed struct field names in AshTypescript field selector (CVSS 8.2, ash-project ash\_typescript)
- [CVE-2026-48932](https://cve.now/CVE-2026-48932.md): A flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based forwarding proxies that rebuild outbound headers from (CVSS 3.7, nodejs node)
- [CVE-2026-65643](https://cve.now/CVE-2026-65643.md): Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root. (CVSS 8.7, WebPros cPanel)
- [CVE-2026-67394](https://cve.now/CVE-2026-67394.md): A critical local privilege escalation via OS command injection vulnerability has been discovered in Plesk for Linux, affecting all versions (CVSS 9.0, WebPros Plesk)
- [CVE-2026-67395](https://cve.now/CVE-2026-67395.md): A path traversal vulnerability exists in Sage Employee Self Service’s custom logo functionality due to improper validation of file path para (CVSS 5.9, Sage Employee Self Service)
- [CVE-2026-18743](https://cve.now/CVE-2026-18743.md): Popt-devel: popt-static: short realloc in poptconfigfiletostring (CVSS 2.5, rpm-software-management popt · Red Hat Hardened Images +2)
- [CVE-2026-19820](https://cve.now/CVE-2026-19820.md): Backblaze Client for Windows Improper Link Resolution Vulnerability (CVSS 5.8, Backblaze Client)
- [CVE-2026-51741](https://cve.now/CVE-2026-51741.md): Incorrect access control in the clearDiagnosisLog function of TOTOLINK T6 4.1.5cu.748\_B20211015 allows unauthenticated attackers to erase di (CVSS 9.8)
- [CVE-2026-51742](https://cve.now/CVE-2026-51742.md): Incorrect access control in the discoverWan function of TOTOLINK T6 4.1.5cu.748\_B20211015 allows unauthenticated attackers to trigger WAN di (CVSS 5.9)
- [CVE-2026-51743](https://cve.now/CVE-2026-51743.md): Incorrect access control in the guest\_wifi\_sync function of TOTOLINK T6 4.1.5cu.748\_B20211015 allows unauthenticated attackers to disable gu (CVSS 9.1)
- [CVE-2026-51744](https://cve.now/CVE-2026-51744.md): Incorrect access control in the recv\_mesh\_info\_sync function of TOTOLINK T6 4.1.5cu.748\_B20211015 allows unauthenticated attackers to force (CVSS 9.8)
- [CVE-2026-51745](https://cve.now/CVE-2026-51745.md): Incorrect access control in the updatePriStaList function of TOTOLINK T6 4.1.5cu.748\_B20211015 allows unauthenticated attackers to refresh t (CVSS 5.3)
- [CVE-2026-51747](https://cve.now/CVE-2026-51747.md): Incorrect access control in the keepAlive function of TOTOLINK T6 4.1.5cu.748\_B20211015 allows unauthenticated attackers to emit indirect me (CVSS 9.8)
- [CVE-2026-51748](https://cve.now/CVE-2026-51748.md): Incorrect access control in the sendStaticInfoToMaster function of TOTOLINK T6 4.1.5cu.748\_B20211015 allows unauthenticated attackers to upd (CVSS 5.9)
- [CVE-2026-51750](https://cve.now/CVE-2026-51750.md): Incorrect access control in the updatePriChannel function of TOTOLINK T6 4.1.5cu.748\_B20211015 allows unauthenticated attackers to rescan an (CVSS 9.8)
- [CVE-2026-51751](https://cve.now/CVE-2026-51751.md): Incorrect access control in the delSlaveDevice function of TOTOLINK T6 4.1.5cu.748\_B20211015 allows unauthenticated attackers to remove a sp (CVSS 9.8)
- [CVE-2026-51752](https://cve.now/CVE-2026-51752.md): Incorrect access control in the staticInfoSend function of TOTOLINK T6 4.1.5cu.748\_B20211015 allows unauthenticated attackers to trigger sta (CVSS 5.3)
- [CVE-2026-51754](https://cve.now/CVE-2026-51754.md): Incorrect access control in the updateSlaveIpList function of TOTOLINK T6 4.1.5cu.748\_B20211015 allows unauthenticated attackers to overwrit (CVSS 9.8)
- [CVE-2026-51756](https://cve.now/CVE-2026-51756.md): Incorrect access control in the meshSlaveUpgfw function of TOTOLINK T6 4.1.5cu.748\_B20211015 allows unauthenticated attackers to start firmw (CVSS 5.9)
- [CVE-2026-51757](https://cve.now/CVE-2026-51757.md): Incorrect access control in the meshSlaveUpdate function of TOTOLINK T6 4.1.5cu.748\_B20211015 allows unauthenticated attackers to start a fi (CVSS 9.8)
- [CVE-2026-51760](https://cve.now/CVE-2026-51760.md): Incorrect access control in the informSyncUpgfw function of TOTOLINK T6 4.1.5cu.748\_B20211015 allows unauthenticated attackers to mass-trigg (CVSS 9.8)
- [CVE-2026-51761](https://cve.now/CVE-2026-51761.md): Incorrect access control in the updateLanIp function of TOTOLINK T6 4.1.5cu.748\_B20211015 allows unauthenticated attackers to refresh the LA (CVSS 5.3)
- [CVE-2026-51762](https://cve.now/CVE-2026-51762.md): Incorrect access control in the meshInfoKick function of TOTOLINK T6 4.1.5cu.748\_B20211015 allows unauthenticated attackers to kick or clean (CVSS 9.8)
- [CVE-2026-51763](https://cve.now/CVE-2026-51763.md): Incorrect access control in the freeStaClient function of TOTOLINK T6 4.1.5cu.748\_B20211015 allows unauthenticated attackers to forcibly dis (CVSS 9.8)
- [CVE-2026-51764](https://cve.now/CVE-2026-51764.md): Incorrect access control in the recvSlaveCloudCheckStatus function of TOTOLINK T6 4.1.5cu.748\_B20211015 allows unauthenticated attackers to (CVSS 9.8)
- [CVE-2026-51765](https://cve.now/CVE-2026-51765.md): Incorrect access control in the recvIndirectMeshInfo function of TOTOLINK T6 4.1.5cu.748\_B20211015 allows unauthenticated attackers to inser (CVSS 9.8)
- [CVE-2026-51766](https://cve.now/CVE-2026-51766.md): Incorrect access control in the setDevReboot function of TOTOLINK T6 4.1.5cu.748\_B20211015 allows unauthenticated attackers to reboot the lo (CVSS 7.5)
- [CVE-2026-51767](https://cve.now/CVE-2026-51767.md): Incorrect access control in the recvClearPairCfg function of TOTOLINK T6 4.1.5cu.748\_B20211015 allows unauthenticated attackers to reset pai (CVSS 9.8)
- [CVE-2026-51768](https://cve.now/CVE-2026-51768.md): Incorrect access control in the setElinkQosConfig function of TOTOLINK T6 4.1.5cu.748\_B20211015 allows unauthenticated attackers to modify p (CVSS 7.5)
- [CVE-2026-51769](https://cve.now/CVE-2026-51769.md): Incorrect access control in the remoteCloudUpdateCheck function of TOTOLINK T6 4.1.5cu.748\_B20211015 allows unauthenticated attackers to res (CVSS 9.8)
- [CVE-2026-51770](https://cve.now/CVE-2026-51770.md): Incorrect access control in the sendToMasterQosConfig function of TOTOLINK T6 4.1.5cu.748\_B20211015 allows unauthenticated attackers to forw (CVSS 9.8)
- [CVE-2026-51788](https://cve.now/CVE-2026-51788.md): An issue in cleverange\_auth v.0.1.10 allows a remote attacker to cause a denial of service via the account\_verification function and the acc (CVSS 7.5)
- [CVE-2026-51934](https://cve.now/CVE-2026-51934.md): Buffer Overflow vulnerability in Shenzhen Jixiang Tengda Technology Co., Ltd. (CVSS 9.8)
- [CVE-2026-51956](https://cve.now/CVE-2026-51956.md): A Broken Object Level Authorization vulnerability exists in Grashjs Atlas CMMS prior to v1.6.0. (CVSS 8.1)
- [CVE-2026-51974](https://cve.now/CVE-2026-51974.md): An eval() injection vulnerability in the get\_list function in modules/meta\_parser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remo (CVSS 8.8)
- [CVE-2026-52022](https://cve.now/CVE-2026-52022.md): An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the IMS P-CSCF registration handling compo (CVSS 7.5)
- [CVE-2026-52023](https://cve.now/CVE-2026-52023.md): An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the ims\_registrar\_pcscf module, specifical (CVSS 7.5)
- [CVE-2026-52111](https://cve.now/CVE-2026-52111.md): An issue in fast-note-sync-service \<=2.13.7 allows a remote attacker to escalate privileges via the admin configuration endpoint exposes aut (CVSS 9.8)
- [CVE-2026-52130](https://cve.now/CVE-2026-52130.md): llama.cpp b5693 and before is vulnerable to Uncontrolled Recursion in common/json-schema-to-grammar.cpp, resulting in a denial of service. (CVSS 7.5)
- [CVE-2026-52131](https://cve.now/CVE-2026-52131.md): llama.cpp b5693 and before has a Reachable Assertion via the gguf\_reader::read function. (CVSS 7.5)
- [CVE-2026-52132](https://cve.now/CVE-2026-52132.md): llama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote attackers to cause a denial of service (std::bad\_all (CVSS 7.5)
- [CVE-2026-52295](https://cve.now/CVE-2026-52295.md): FFmpeg before 9.0 has an out-of-bounds read because the copied extradata lacked required padding before GetBitContext-based access in libavf (CVSS 2.9, FFmpeg)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-09-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.