CVEs published September 2, 2026
322 CVEs were published on September 2, 2026: 22 critical, 117 high.
- Published
- 322
- Critical
- 22
- High
- 117
- Medium
- 166
- Low
- 17
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 173
Most affected products
- craftcms cms
- 13
- Jenkins Project Jenkins
- 13
- Elastic Kibana
- 8
- Cisco IOS XR Software
- 7
- MasterStudy LMS WordPress Plugin
- 6
- Rank Math SEO
- 6
- kimai
- 5
- Sonatype Nexus Repository
- 5
- DSpace · org.dspace:dspace-api
- 4
- nuclio · github.com/nuclio/nuclio
- 4
Critical 22
- CVE-2026-19117Delinea Secret Server FIDO2 credential registration authentication bypass vulnerabilityDelinea Secret Server
- CVE-2026-66786Submariner: submariner: ipsec.conf stanza injection via remote-supplied cablename and subnetsRed Hat Advanced Cluster Management for Kubernetes
- CVE-2026-53670PREVAIL: Non-singleton typeset in add() skips offset update, allowing OOB access to pass eBPF verificationvbpf prevail
- CVE-2026-53671PREVAIL: Context-write no-op in do_mem_store allows unsafe eBPF programs to pass verificationvbpf prevail
- CVE-2026-53649Joro: Unauthenticated Cross-Origin Plugin Upload Leads to RCEBishopFox joro · github.com/BishopFox/joro
- CVE-2026-20279Cisco IOS XR Software Security Hardening Release: September 2026Cisco IOS XR Software
- CVE-2026-20274Cisco IOS XR Software Security Hardening Release: September 2026Cisco IOS XR Software
- CVE-2026-20212Cisco Nexus 3000 and 9000 Series Switches Silicon One Hardware Abstraction Layer Remote Code Execution VulnerabilityCisco NX-OS Software
- CVE-2026-53611Looking Glass: Remote Code Execution via Unanchored Regular Expression in BGPASPath Input ValidationAS203038 looking-glass
- CVE-2026-82955In the current development version of Eclipse aeriOS, which has not yet had an official release, the KrakenD instance included in the API GaEclipse Foundation Eclipse aeriOS
- CVE-2025-9314Developer Tools <= 1.1.3 – Unauthenticated Arbitrary File UploadDeveloper Tools
- CVE-2026-77009WatchMan-Site7 3.1.1 - 4.2.0 - Subscriber+ RCE via Debug ConsoleWatchMan-Site7
- CVE-2026-4357Embed HTML5 Game <= 1.3 - Unauthenticated Arbitrary File UploadEmbed HTML5 Game
- CVE-2026-73475Commerce PayPal - Moderately critical - Access bypass - SA-CONTRIB-2026-095Drupal Commerce PayPal · drupal/commerce_paypal
- CVE-2026-81294WordPress Authorizer plugin <= 3.15.1 - Privilege Escalation vulnerabilityPaul Ryan Authorizer
- CVE-2026-81286WordPress WCFM Marketplace plugin <= 3.8.1 - SQL Injection vulnerabilityWC Lovers WCFM Marketplace
- CVE-2026-84795Craft CMS before 5.10.11 Authentication Bypass via Admin Flag Inheritancecraftcms cms
- CVE-2026-78657SigmaForms Pro <= 1.4.11 - Unauthenticated Arbitrary File Deletion via Path Traversal in File Upload Fieldbdthemes SigmaForms Pro – AI Generated Forms
- CVE-2026-9055Booking for Appointments and Events Calendar – Amelia (Premium) 8.0 - 9.6.2 - Unauthenticated Privilege Escalation to Administrator via 'externalId'melograno Booking for Appointments and Events Calendar – Am…
- CVE-2026-84699Team Password Manager before 14.184.308 Authentication Bypass in Password ResetTeam Password Manager
- CVE-2026-84696Phison PS3111-S11 Controller Firmware Missing Authentication on Vendor Unique CommandsPhison Electronics PS3111-S11 Controller Firmware
- CVE-2026-84695BookStack before 26.05.4 Stored XSS via Drawing Uploadbookstackapp bookstack
High 117
- CVE-2026-84394fast-uri vulnerable to host confusion via an unclosed bracket in the URI authorityfast-uri
- CVE-2026-84851Uncontrolled recursion in the Ion reader in Amazon Ion-C before 1.1.6Amazon ion-c
- CVE-2026-84292fast-uri vulnerable to authority injection via an unvalidated port in serializefast-uri
- CVE-2023-20577A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially res2nd Gen AMD EPYC™ Processors · 3rd Gen AMD EPYC™ Proces… +25
- CVE-2023-20576Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially resulting in denial of serAMD Ryzen™ 3000 Series Desktop Processors · AMD Ryzen™ 5… +9
- CVE-2026-56855Prevent DoS on deadlocked established channel in golang.org/x/crypto/sshgolang.org/x/crypto/ssh · golang.org/x/crypto
- CVE-2026-78662Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/sshgolang.org/x/crypto/ssh · golang.org/x/crypto
- CVE-2026-82524UnoPim File Upload RCE via TinyMCE Image Upload Endpointunopim
- CVE-2026-84452Windows ML CLI: CORS misconfig enables localhost RCEmicrosoft winml-cli · winml-cli
- CVE-2026-84382HTTPX2: Streaming response decompression does not bound peak memory (decompression amplification)pydantic httpx2 · httpx2
- CVE-2026-84381HTTPX2: Secure WebSocket traffic sent without TLS through SOCKS proxiespydantic httpx2 · pydantic httpcore2 +2
- CVE-2026-53706PREVAIL: ALU32 pointer arithmetic accepted without is64 gate — verifier emits false PASS for pointer-corrupting programsvbpf prevail
- CVE-2026-49249Boruta: Authenticated atom-exhaustion DoS in BorutaIdentityWeb.UserSettingsController.update/2malach-it boruta-server
- CVE-2026-49832DSpace: Remote Code Execution (RCE) possible in Velocity Templates used by LDNDSpace · org.dspace:dspace-api
- CVE-2026-77124Nexus Repository 3 - Script Execution Disable Setting Not EnforcedSonatype Nexus Repository
- CVE-2026-77125Nexus Repository 3 - Incorrect Authorization on Blobstore Group EndpointsSonatype Nexus Repository
- CVE-2026-84811agentverus-scanner Companion Code Analysis Bypass via Excluded Python Bytecodeagentverus-scanner
- CVE-2026-84810claude-skill-antivirus Analysis Bypass via Manifest-Only Local Directory Scanclaude-world claude-skill-antivirus
- CVE-2026-84809Tencent AI-Infra-Guard skill-scan Analysis Bypass via Excluded Python BytecodeTencent AI-Infra-Guard · Tencent aig-skill-scan
- CVE-2026-53635Open edX Platform: Insufficient Permission on set_course_mode_price()openedx-platform
- CVE-2026-52831Nuclio: Unsanitized cron trigger event headers/body injected into CronJob shell command leads to persistent RCEnuclio · github.com/nuclio/nuclio
- CVE-2026-79756Nuclio: Unauthenticated OS command injection via namespace header in list-all resource path on local platformnuclio
- CVE-2026-79755Nuclio: Unauthenticated OS command injection via function namespace in docker ps --filter label (local Docker platform)nuclio
- CVE-2026-79754Nuclio: Kaniko build tempDir command injectionnuclio
- CVE-2026-52833Nuclio: Unsanitized runtimeAttributes.repositories injected into Groovy build.gradle leads to build-time RCEnuclio · github.com/nuclio/nuclio
- CVE-2026-82404TOON: Prototype pollution when decoding untrusted TOON inputtoon-format toon · @toon-format/toon
- CVE-2026-45730Nuclio: Missing authorization on project write paths allows any authenticated user to modify or delete any projectnuclio · github.com/nuclio/nuclio
- CVE-2026-20281Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Software Denial of Service VulnerabilityCisco Session Initiation Protocol (SIP) Software
- CVE-2026-20278Cisco IOS XR Software Security Hardening Release: September 2026Cisco IOS XR Software
- CVE-2026-20280Cisco IOS XR Software Security Hardening Release: September 2026Cisco IOS XR Software
- CVE-2026-20275Cisco IOS XR Software Security Hardening Release: September 2026Cisco IOS XR Software
- CVE-2026-20276Cisco IOS XR Software Security Hardening Release: September 2026Cisco IOS XR Software
- CVE-2026-20277Cisco IOS XR Software Security Hardening Release: September 2026Cisco IOS XR Software
- CVE-2026-14199Session takeover via Auth Proxy cache key collisionGrafana Enterprise · Grafana OSS
- CVE-2026-84675OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers able to control build environment variable vJenkins Project Jenkins TICS Plugin
- CVE-2026-84673Jenkins Customizable Header Plugin 295.v2544b_ca_19b_97 and earlier allows overwriting the plugin's appearance configuration through StaplerJenkins Project Jenkins Customizable Header Plugin
- CVE-2026-84672Jenkins Microsoft Entra ID (previously Azure AD) Plugin 710.v0b_ff8e9cc2d2 and earlier grants Entra group permissions using both the group'sJenkins Project Jenkins Microsoft Entra ID (previously Azur…
- CVE-2026-78222NGINX ngx_http_js_module vulnerabilityF5 NGINX JavaScript
- CVE-2026-84671Jenkins File Parameter Plugin 425.v3fa_801681b_5e and earlier allows writing files to arbitrary locations on the Jenkins controller file sysJenkins Project Jenkins File Parameter Plugin
- CVE-2026-78689NGINX ngx_http_js_module vulnerablilityF5 NGINX JavaScript
- CVE-2026-77180NGINX Ingress Controller vulnerabilityF5 NGINX Ingress Controller
- CVE-2026-84670Jenkins Performance Plugin 1015.v09ca_52b_3370e and earlier does not restrict the classes that can be instantiated when deserializing cachedJenkins Project Jenkins Performance Plugin
- CVE-2026-66362NGF vulnerabilityF5 NGINX Gateway Fabric
- CVE-2026-18329NGINX ngx_http_js_module vulnerabilityF5 NGINX JavaScript
- CVE-2026-84669A path traversal vulnerability in Jenkins Allure Plugin 2.35.2 and earlier allows attackers with Item/Read permission on jobs that publish AJenkins Project Jenkins Allure Plugin
- CVE-2026-66842BIG-IP and BIG-IQ Configuration utility vulnerabilityF5 BIG-IP · F5 BIG-IQ
- CVE-2026-84668Jenkins SAML Plugin 4.618.v441a_27fa_46d2 and earlier allows overwriting the SAML identity provider metadata file through Stapler data bindiJenkins Project Jenkins SAML Plugin
- CVE-2026-84667Jenkins ThinBackup Plugin 2.1.4 and earlier allows overwriting the plugin's backup configuration through Stapler data binding, allowing attaJenkins Project Jenkins ThinBackup Plugin
- CVE-2026-84665Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based on SonarQube scannerJenkins Project Jenkins SonarQube Scanner Plugin
- CVE-2026-84652In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, Jenkins does not rotate the session when a user is authenticated via the "remember meJenkins Project Jenkins
- CVE-2026-84650In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, transient fields cannot be excluded from deserialization, allowing attackers able to Jenkins Project Jenkins
- CVE-2026-84649In Stapler 1839.ved17667b_a_eb_5 through 2107.v8dfcb_e8ed317 (both inclusive), except 2088.2093.vd7c3e58008a_6, included in Jenkins 2.447 thJenkins Project Jenkins
- CVE-2026-84648In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata (source, level, and timestaJenkins Project Jenkins
- CVE-2026-84647In Stapler 2107.v8dfcb_e8ed317 and earlier, except 2088.2093.vd7c3e58008a_6, included in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier,Jenkins Project Jenkins
- CVE-2026-84645In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, objects of types marked as storing their configuration in independent top-level confiJenkins Project Jenkins
- CVE-2026-18058The mobile Smart Connect dashboard UI was subject to manipulation by 3rd party apps.Motorola Smart Connect Application
- CVE-2026-84838Rpm: command injection in rpmuncompress via unescaped filenames passed to popen()Red Hat Hardened Images · Red Hat Enterprise Linux
- CVE-2026-84837Rpm: command injection in `rpmbuild -t*` (`gettarspec`) via unescaped tarball pathRed Hat Hardened Images · Red Hat Enterprise Linux
- CVE-2026-78409Util-linux: util-linux: x-mount.subdir detached-tree resolution can escape via intermediate symlinksRed Hat Hardened Images · Red Hat Enterprise Linux +1
- CVE-2026-78410Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirectionRed Hat Hardened Images · Red Hat Enterprise Linux +1
- CVE-2026-78408Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authorityRed Hat Hardened Images · Red Hat Enterprise Linux +1
- CVE-2024-7956Sensitive Data Exposure and Escalating Privileges Vulnerabilities in DataMosaix™ Private CloudRockwell Automation DataMosaix™ Private Cloud
- CVE-2026-78590Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Deletion of Privileged ResourcesElastic Kibana
- CVE-2026-78604Incorrect Permission Assignment for Critical Resource in Elastic Agent Leading to Local Privilege Escalation to SYSTEMElastic Agent
- CVE-2025-15485Auto x LINE <= 1.0.0 – Unauthenticated REST API Endpoints CallAuto x LINE
- CVE-2026-79991Authenticated SQL Injection via nested eager-loading criteriacraftcms cms
- CVE-2026-79990GQL entry mutation `siteId` bypasses schema site scope, enabling cross-site content read/write/deletecraftcms cms
- CVE-2026-79989Arbitrary user password reset leading to administrator account takeovercraftcms cms · craftcms/cms
- CVE-2026-76782Screenshot - Critical - Unsupported - SA-CONTRIB-2026-102Drupal Screenshot · drupal/screenshot
- CVE-2026-76759Screenshot - Critical - Unsupported - SA-CONTRIB-2026-102Drupal Screenshot · drupal/screenshot
- CVE-2026-84770WordPress Mang Board WP plugin <= 2.3.8 - Cross Site Request Forgery (CSRF) vulnerabilityKitae Park Mang Board WP
- CVE-2026-84764WordPress Simply Schedule Appointments plugin <= 1.6.12.23 - Cross Site Request Forgery (CSRF) vulnerabilityNSquared Simply Schedule Appointments
- CVE-2026-84759WordPress Activity Log plugin <= 2.13.1 - Cross Site Request Forgery (CSRF) vulnerabilityElementor Activity Log
- CVE-2026-81775WordPress Estatik plugin <= 4.3.4 - Cross Site Scripting (XSS) vulnerabilityEstatik
- CVE-2026-81774WordPress WooCommerce Product Attachment plugin <= 2.3.4 - Sensitive Data Exposure vulnerabilityDotstore WooCommerce Product Attachment
- CVE-2026-81772WordPress Ninja Forms - Layout & Styles plugin <= 3.0.31 - PHP Object Injection vulnerabilitySaturday Drive Ninja Forms - Layout & Styles
- CVE-2026-81771WordPress TrustedSite plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerabilityTrustedSite
- CVE-2026-81770WordPress Interactive Geo Maps plugin <= 1.6.30 - Reflected Cross Site Scripting (XSS) vulnerabilityMapGeo Interactive Geo Maps
- CVE-2026-81769WordPress Booking Hub plugin <= 1.3.1 - Privilege Escalation vulnerabilityLiquidThemes Booking Hub
- CVE-2026-81289WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.13.1 - Cross Site Scripting (XSS) vulnerabilityMP3 Audio Player for Music, Radio & Podcast by Sonaar
- CVE-2026-81288WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.5 - Cross Site Scripting (XSS) vulnerabilityWP Swings Upsell Order Bump Offer for WooCommerce
- CVE-2026-81283WordPress WP User Frontend plugin <= 4.3.10 - PHP Object Injection vulnerabilityweDevs WP User Frontend
- CVE-2026-84803SiYuan before v3.8.2 Stored XSS via incomplete asset blocklistsiyuan-note siyuan
- CVE-2026-84801Craft CMS 5.0.0-RC1 before 5.10.11 Authentication Bypass via administrateUserscraftcms cms
- CVE-2026-84800Craft CMS 5.0.0-RC1 before 5.10.11 File Overwrite via assets/replace-filecraftcms cms
- CVE-2026-84798Craft CMS before 5.10.11 Authorization Bypass via actionDeleteForSitecraftcms cms
- CVE-2026-84796Craft CMS 5.0.0-RC1 before 5.10.11 GraphQL Entry Mutation Site Scope Bypasscraftcms cms
- CVE-2026-84794Craft CMS 5.0.0 through 5.10.10 Authorization Bypass via assets/move-assetcraftcms cms
- CVE-2026-19219DialogHandler UploadPaths Tampering Vulnerability in Telerik UI for ASP.NET AJAXProgress Software Telerik UI for ASP.NET AJAX
- CVE-2026-18672RadImageEditor ClientState Unauthenticated Arbitrary File Read Vulnerability in Telerik UI for ASP.NET AJAXProgress Software Telerik UI for ASP.NET AJAX
- CVE-2026-82958In Eclipse Ditto versions [1.3.0, 3.9.6], the ImplicitThingCreationMessageMapper of the connectivity service builds a CreateThing command byEclipse Foundation Eclipse Ditto
- CVE-2026-75528Broken Link Checker <= 2.4.13 - Unauthenticated Stored Cross-Site Scripting via Comment Author URL / Link Logwpmudev Broken Link Checker
- CVE-2026-14828Zohocorp ManageEngine Password Manager Pro versions before 13235, PAM360 versions before 8561, and Access Manager Plus versions before 4405 Zohocorp ManageEngine Password Manager Pro · Zohocorp Ma… +1
- CVE-2026-82883WordPress Login With Ajax plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerabilityMarcus Login With Ajax
- CVE-2026-82183OAuth Single Sign On 6.25.0 - 7.0.0 - Unauthenticated Account Takeover via Unverified Steam OpenID AssertionOAuth Single Sign On
- CVE-2026-81807Simple Ajax Chat < 20260827 - Unauthenticated Stored XSS via Chat Message LinkificationSimple Ajax Chat
- CVE-2026-81737FAQ Builder AYS 1.6.3 - 1.8.4 - Unauthenticated Stored XSS via ays_get_user_informationFAQ Builder AYS
- CVE-2026-80467Advanced Custom Fields: Extended 0.9.2.2 - 0.9.2.6 - Unauthenticated Privilege Escalation via Front-End User Insert ActionAdvanced Custom Fields: Extended
- CVE-2026-77792RegistrationMagic < 6.0.9.9 - Unauthenticated Stored XSS via Rating FieldRegistrationMagic
- CVE-2026-19723Social Media Share Buttons & Social Sharing Icons < 3.0.1 - Reflected XSS via Pin It Share HandlerSocial Media Share Buttons & Social Sharing Icons
- CVE-2026-19453JetBackup 3.1.7.9 - 3.1.23.3 - Subscriber+ Privilege Escalation via Restore Admin User SelectionJetBackup
- CVE-2026-19116WP User Frontend < 4.3.11 - Subscriber+ PHP Object Injection via Frontend Post Edit FormUser Frontend
- CVE-2026-12865Photo Gallery by 10Web < 1.8.44 - Reflected XSS via title and paged ParametersPhoto Gallery by 10Web
- CVE-2026-12526Advanced Custom Fields: Extended < 0.9.2.7 - Unauthenticated Administrator Account Takeover via Front-End User Update ActionAdvanced Custom Fields: Extended
- CVE-2026-14357DevKit Pro <= 2.3.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Theme Installation / Remote Code Execution via 'qqfile' Parameterdplugins DevKit Pro
- CVE-2026-19754Baserow 2.2.0 through 2.3.3 - SQL injection in formula index() JSONB array extractionBaserow
- CVE-2026-14982WP File Download <= 6.3.4 - Authenticated (Subscriber+) Arbitrary File Deletion via 'remoteurl' ParameterJoomUnited WP File Download
- CVE-2026-14957FIPS mode assertion failure via malicious CERT payloadThe Libreswan Project libreswan
- CVE-2026-84715FeatherPanel before 1.3.7.10 Privilege Escalation via Subuser Permission UpdateMythicalLTD FeatherPanel
- CVE-2026-84485APITable through 1.13.0-beta.1 Missing Authentication on the Internal Organization Load or Search Endpointapitable
- CVE-2026-84484ION-DTN before 4.2.0 Out-of-Bounds Read via decodeSdnvnasa-jpl ION-DTN
- CVE-2026-84702facefusion before 3.7.0 Path Traversal via Job Identifierfacefusion
- CVE-2026-84700Pika Unauthenticated Replication Access via Internal Protobuf PortOpenAtomFoundation pikiwidb
- CVE-2026-84698PX4 Autopilot sd_bench Heap Buffer Overflow via Block SizePX4-Autopilot
- CVE-2026-84694Coolify before 4.2.0 Remote Code Execution via Environment Variable Keycoollabsio coolify
- CVE-2024-35585Oxford Nanopore MinKNOW before 24.06 relies on a client's source IP address for authentication.Oxford Nanopore MinKNOW
- CVE-2025-46418Westermo WeOS 5.x starting from 5.24 allows OS command injection via a media definition.Westermo WeOS
Medium, low and unrated 183
- CVE-2026-85084Out-of-bounds write in TizenFX MediaBufferBase indexer setter due to missing bounds checkSamsung Open Source TizenFX
- CVE-2026-84888RightNow-AI OpenFang tool_runner.rs shell_exec memory allocationRightNow-AI OpenFang
- CVE-2026-84887simular-ai Agent-S Model-generated GUI Action Execution Workflow grounding.py denial of servicesimular-ai Agent-S
- CVE-2026-84886simular-ai Agent-S OCR HTTP API ocr_server.py ImageData resource consumptionsimular-ai Agent-S
- CVE-2026-84885simular-ai Agent-S CodeAgent code_agent.py denial of servicesimular-ai Agent-S
- CVE-2026-84857sigoden aichat API Endpoint serve.rs memory allocationsigoden aichat
- CVE-2026-84856rowboatlabs rowboat Composio Webhook Endpoint route.ts req.json denial of servicerowboatlabs rowboat
- CVE-2026-75134SEOWriting WordPress Plugin 1.12.5 Stored XSS via iframe onloadSEOWriting
- CVE-2026-75137UpSignOn < 7.19.0 Sensitive Data Exposure in Process Memory after LockSepteo IT Solutions UpSignOn
- CVE-2026-75136UpSignOn < 7.19.0 Biometric Key Exposure via Windows PasswordVaultSepteo IT Solutions UpSignOn
- CVE-2026-75135UpSignOn < 7.19.0 Sensitive Key Retention in MemorySepteo IT Solutions UpSignOn
- CVE-2026-84852Reader Tools PDF Reader App File ActSplashNew.handleDeeplink path traversalReader Tools PDF Reader App
- CVE-2026-84841tsi-coop tsi-dpdp-cms client-side enforcement of server-side securitytsi-coop tsi-dpdp-cms
- CVE-2026-84840tsi-coop tsi-dpdp-cms Bootstrap Setup Endpoint InterceptingFilter.java missing authenticationtsi-coop tsi-dpdp-cms
- CVE-2026-84839tsi-coop tsi-dpdp-cms Admin Console/DPO Compliance Console web.xml missing authenticationtsi-coop tsi-dpdp-cms
- CVE-2026-84380HTTPX2: Conflicting Content-Length and Transfer-Encoding headers can be auto-generatedpydantic httpx2 · httpx2
- CVE-2026-84379HTTPX2: Multipart part header injection via unvalidated file Content-Type and custom headerspydantic httpx2 · httpx2
- CVE-2026-84378HTTPX2: Quadratic SSE line buffering can cause CPU denial of servicepydantic httpx2 · httpx2
- CVE-2026-82522libjxl < 0.12.0 Container Box Parser Integer Underflow via 32-bit Size Truncationlibjxl
- CVE-2026-55221Boruta: OAuth credentials exposed in Boruta business logsmalach-it boruta-server
- CVE-2026-84377LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parametersBerriAI litellm · litellm
- CVE-2026-49833DSpace: Path Traversal possible in LDN message generationDSpace · org.dspace:dspace-api
- CVE-2026-49831DSpace: Curation Task Reporter output path is not restricted to trusted directories (Path Traversal Vulnerability)DSpace · org.dspace:dspace-api
- CVE-2026-49830DSpace: ORE resource URI does not validate scheme for non-web resourcesDSpace · org.dspace:dspace-api
- CVE-2026-77121Nexus Repository 3 - Denial of Service via Unbounded Maven POM Metadata FieldsSonatype Nexus Repository
- CVE-2026-77122Nexus Repository 3 - Incorrect Authorization Allows Disclosure of Member Repository Metadata via Group Repository PermissionsSonatype Nexus Repository
- CVE-2026-77123Nexus Repository 3 - Webhook Secret Disclosure via Capability Read APISonatype Nexus Repository
- CVE-2026-84833ntegrals openbrowser Browser Agent Message Construction agent.ts resource consumptionntegrals openbrowser
- CVE-2026-55421Open edX Platform: SSRF in Studio Video Download Endpointopenedx-platform
- CVE-2026-53636Open edX LTI OAuth Replay Attackopenedx-platform
- CVE-2026-52832Nuclio: Unauthenticated path traversal in spec.handler allows arbitrary file write in Dashboard containernuclio · github.com/nuclio/nuclio
- CVE-2026-84376Astro: Authorization bypass from missing path-segment boundary check when stripping the configured basewithastro astro · astro
- CVE-2026-20355Cisco Secure Email S/MIME Ciphertext Decryption VulnerabiltyCisco Secure Email
- CVE-2026-20354Cisco Secure Email S/MIME Ciphertext Decryption VulnerabiltyCisco Secure Email
- CVE-2026-53600async-tar PAX extension-header desync enables tar entry/content smugglingdignifiedquire async-tar · async-tar
- CVE-2026-12704SAML assertion replay via skipped InResponseTo validationGrafana Enterprise
- CVE-2026-19475SQL Data Source Plugin: OOM DoS via $__timeGroup macroGrafana PostgreSQL Datasource · Grafana MySQL Datasource +2
- CVE-2026-84677Jenkins update-center2 3.18.3 and earlier does not escape plugin-provided values (plugin names, descriptions, and version metadata) on plugiJenkins Project Jenkins update-center2
- CVE-2026-84676Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier stores tokens unencrypted in job config.xml files on the Jenkins controller whJenkins Project Jenkins Parameterized Remote Trigger Plugin
- CVE-2026-84674Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow attackers with Overall/Read permission to enumerateJenkins Project Jenkins XebiaLabs XL Deploy Plugin
- CVE-2026-63020BIG-IP Configuration utility vulnerabilityF5 BIG-IP
- CVE-2026-84666Jenkins Job Configuration History Plugin 1367.vc8fa_b_15101dc and earlier allows overwriting the plugin's history recording configuration thJenkins Project Jenkins Job Configuration History Plugin
- CVE-2026-84664Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection configuration through Stapler data binding, allowinJenkins Project Jenkins GitLab Plugin
- CVE-2026-84663A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 798.v5cc688825312 and earlier allows attackerJenkins Project Jenkins Pipeline: Groovy Libraries Plugin
- CVE-2026-84662Jenkins LDAP Plugin 807.809.vd3a_4e5e4ec98 and earlier allows connecting to a specified URL through Stapler data binding, allowing attackersJenkins Project Jenkins LDAP Plugin
- CVE-2026-84661A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b_67ea_11b_152 and earlier causes downstream builds awaited by the `Jenkins Project Jenkins Pipeline: Build Step Plugin
- CVE-2026-84660A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b_67ea_11b_152 and earlier causes downstream builds triggered by theJenkins Project Jenkins Pipeline: Build Step Plugin
- CVE-2026-84659Jenkins Script Security Plugin 1412.v7737b_3405f86 and earlier does not enforce a permission check in the method that controls the "Force thJenkins Project Jenkins Script Security Plugin
- CVE-2026-84658Jenkins Script Security Plugin 1412.v7737b_3405f86 and earlier uses the `@DataBoundConstructor` annotation on a constructor that loads scripJenkins Project Jenkins Script Security Plugin
- CVE-2026-84657In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the build CLI command does not check the Item/Cancel permission when using the -s flaJenkins Project Jenkins
- CVE-2026-84656A missing permission check in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier allows attackers with Item/Read permission on at least one Jenkins Project Jenkins
- CVE-2026-84655Jenkins 2.579 and earlier, LTS 2.568.2 and earlier does not escape map keys when serializing objects as JSON and Python through its REST APIJenkins Project Jenkins
- CVE-2026-84654In Stapler 2107.v8dfcb_e8ed317 and earlier, except 2088.2093.vd7c3e58008a_6, included in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier,Jenkins Project Jenkins
- CVE-2026-84653Jenkins 2.421 through 2.579 (both inclusive), LTS 2.426.1 through 2.568.2 (both inclusive) does not correctly perform permission checks in tJenkins Project Jenkins
- CVE-2026-84651In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the REST API and CLI endpoints for updating agent configuration do not prevent a submJenkins Project Jenkins
- CVE-2026-84646In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allJenkins Project Jenkins
- CVE-2026-82293Incorrect Authorization in Kibana Leading to Unauthorized Resource ConsumptionElastic Kibana
- CVE-2026-78588Allocation of Resources Without Limits or Throttling in Filebeat Leading to Denial of ServiceElastic Filebeat
- CVE-2026-78587Incorrect Authorization in Fleet Server Leading to Denial of Service of Agent Upload OperationsElastic Fleet Server
- CVE-2026-78586Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of ServiceElastic Kibana
- CVE-2026-78584Observable Response Discrepancy in Kibana Leading to Cross-Space Information DisclosureElastic Kibana
- CVE-2026-78591Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Kibana Leading to Unauthorized Resource DeletionElastic Kibana
- CVE-2026-78599Stored Path Traversal in Kibana Leading to Unauthorized Deletion of Internal ResourcesElastic Kibana
- CVE-2026-78598Incorrect Authorization in Kibana Leading to Unauthorized Cross-Space Exposure of Machine Learning Job DataElastic Kibana
- CVE-2026-78594Improper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of ServiceElastic Apm Server
- CVE-2026-78602Improper Limitation of a Pathname to a Restricted Directory in Elastic Maps Server Leading to Unauthorized File DisclosureElastic Maps Server
- CVE-2026-78601Missing Authorization in Kibana Leading to Unauthorized Elasticsearch Index Data ExposureElastic Kibana
- CVE-2026-78600Incomplete Cleanup in Elastic Cloud on Kubernetes Leading to Unauthorized Cross-Namespace Credential RetentionElastic Eck Operator
- CVE-2026-78609Incorrect Authorization in Elastic Cloud on Kubernetes Leading to Unauthorized Modification of DataElastic Eck Operator
- CVE-2026-14255IFC File Parsing Uncontrolled Recursion in Certain Autodesk ProductsAutodesk Shared Components · Autodesk Revit
- CVE-2026-2811Ajaxify Comments < 3.2 - Unauthenticated HTTP Header InjectionAjaxify Comments
- CVE-2025-8945Wp Edit Password Protected < 1.3.5 - Protection Bypass via REST APIWp Edit Password Protected
- CVE-2025-15490Passster < 4.2.26 - Global Protection BypassPassster
- CVE-2025-15489Passster < 4.2.24 - Password Protection BypassPassster
- CVE-2025-15481Notification Bar for WordPress <= 1.1.8 – Unauthenticated Subscriber Data DisclosureNotification Bar for WordPress
- CVE-2024-3773LiveJournal Shortcode <= 1.1.1 - Contributor+ Stored XSS via ShortcodeLiveJournal Shortcode
- CVE-2023-3360Weaver Show Posts < 1.8.1 - Admin+ PHP Object InjectionWeaver Show Posts
- CVE-2026-83547Xpro Elementor Addons 1.6.0 - 1.7.3 - Contributor+ Stored XSS via Multiple WidgetsXpro Addons
- CVE-2026-83533WP Express Checkout < 2.4.9 - Unauthenticated Payment Bypass via wpec_process_paymentWP Express Checkout
- CVE-2026-82884All in One SEO < 5.0.0.1 - Contributor+ Stored XSS via ai-assistant BlockAll in One SEO
- CVE-2026-81571Brave Popup Builder < 0.8.8 - Unauthenticated Arbitrary Shortcode Execution via UTM ParameterBrave
- CVE-2026-8151Simple Membership MailChimp Integration < 1.9.8 - API Key Update via CSRFSimple Membership MailChimp Integration
- CVE-2026-78153Restrict User Access 2.6 - 2.8 - Unauthenticated Content Protection Bypass via REST API Route NormalizationRestrict User Access
- CVE-2026-77794RegistrationMagic 6.0.0.0 - 6.0.9.8 - Unauthenticated Payment Bypass via Zero QuantityRegistrationMagic
- CVE-2026-77793RegistrationMagic < 6.0.9.9 - Unauthenticated Payment Bypass via Omitted Price FieldRegistrationMagic
- CVE-2026-2688CM HIPAA Forms < 3.2.0 - Unauthenticated Authorization BypassHIPAA FORMS
- CVE-2026-19698GutenKit < 2.5.1 - Contributor+ Stored CSS InjectionGutenKit
- CVE-2026-17563WP User Frontend < 4.3.11 - Unauthenticated Post Creation via Subscription-Gated FormUser Frontend
- CVE-2026-14326Timetics <= 1.0.61 - Staff+ Cross-Staff Appointment Modification via IDORTimetics
- CVE-2026-10821Yoast SEO Premium < 27.6.1 - Author+ Arbitrary .htaccess Directive Injection to RCEYoast SEO Premium
- CVE-2025-15692Icegram Express < 5.8.6 - Admin+ Stored XSSIcegram Express
- CVE-2026-16647Disable Login Page - Moderately critical - Access bypass - SA-CONTRIB-2026-111Drupal Disable Login Page · drupal/disable_login
- CVE-2026-18986Entity Browser - Moderately critical - Cross site scripting - SA-CONTRIB-2026-094Drupal Entity Browser · drupal/entity_browser
- CVE-2026-73478Diff - Moderately critical - Access bypass - SA-CONTRIB-2026-096Drupal Diff · drupal/diff
- CVE-2026-73474Entity Share Websub - Moderately critical - Server-side request forgery (SSRF) - SA-CONTRIB-2026-097Drupal Entity Share Websub · drupal/entity_share_websub
- CVE-2026-73476External Authentication - Moderately critical - Access bypass - SA-CONTRIB-2026-098Drupal External Authentication · drupal/externalauth
- CVE-2026-73477Quick Tabs - Moderately critical - Access bypass - SA-CONTRIB-2026-099Drupal Quick Tabs · drupal/quicktabs
- CVE-2026-76757Gammu SMS Daemon - Critical - Unsupported - SA-CONTRIB-2026-100Drupal Gammu SMS Daemon · drupal/gammu_smsd
- CVE-2026-76756Gammu SMS Daemon - Critical - Unsupported - SA-CONTRIB-2026-100Drupal Gammu SMS Daemon · drupal/gammu_smsd
- CVE-2026-76755Gammu SMS Daemon - Critical - Unsupported - SA-CONTRIB-2026-100Drupal Gammu SMS Daemon · drupal/gammu_smsd
- CVE-2026-76758Link content parser - Critical - Unsupported - SA-CONTRIB-2026-101Drupal Link content parser · drupal/postlight_parser
- CVE-2026-81167Address Suggestion - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-103Drupal Address Suggestion · drupal/address_suggestion
- CVE-2026-81165Blazy - Less critical - Access bypass - SA-CONTRIB-2026-104Drupal Blazy · drupal/blazy
- CVE-2026-81168CAPTCHA Protected Page - Moderately critical - Cookie Forgery - SA-CONTRIB-2026-105Drupal CAPTCHA Protected Page · drupal/captcha_protected_pa…
- CVE-2026-81159Commerce CyberSource - Moderately critical - Insufficient input validation - SA-CONTRIB-2026-106Drupal Commerce CyberSource · drupal/commerce_cybersource
- CVE-2026-81161Content Moderation Notifications - Moderately critical - Access bypass - SA-CONTRIB-2026-107Drupal Content Moderation Notifications · drupal/content_mo…
- CVE-2026-81269Data field - Moderately critical - Information disclosure - SA-CONTRIB-2026-108Drupal Data field · drupal/datafield
- CVE-2026-81166Digital Signage Framework - Moderately critical - Access bypass - SA-CONTRIB-2026-109Drupal Digital Signage Framework · drupal/digital_signage_f…
- CVE-2026-81162DXPR Builder: The AI Visual Page Builder for Drupal - Moderately critical - Information Disclosure - SA-CONTRIB-2026-112DXPR Builder: The Best Editing (AI) Experience for Drupal ·…
- CVE-2026-81158Entity API - Moderately critical - Information disclosure - SA-CONTRIB-2026-113Drupal Entity API · drupal/entity
- CVE-2026-81164Entity PDF - Moderately critical - Access bypass - SA-CONTRIB-2026-114Drupal Entity PDF · drupal/entity_pdf
- CVE-2026-81205LDAP / Active Directory Integration - Moderately critical - Information Disclosure - SA-CONTRIB-2026-115Drupal LDAP / Active Directory Integration · drupal/ldap_au…
- CVE-2026-81201Monster Menus - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-116Drupal Monster Menus · drupal/monster_menus
- CVE-2026-81160Slick Carousel - Moderately critical - Cross Site Scripting - SA-CONTRIB-2026-117Drupal Slick Carousel · drupal/slick
- CVE-2026-84217WordPress Classified Listing plugin <= 6.1.3 - Broken Access Control vulnerabilityMamunur Rashid Classified Listing
- CVE-2026-84835WordPress Rentsyst plugin <= 2.1.5 - Broken Access Control vulnerabilityDimaFreund Rentsyst
- CVE-2026-66652WordPress Grand Tour theme <= 5.5.1 - Cross Site Request Forgery (CSRF) vulnerabilityThemeGoods Grand Tour
- CVE-2026-84780WordPress WP Go Maps plugin <= 10.1.08 - Denial of Service Attack vulnerabilityWPGMaps WP Go Maps
- CVE-2026-84775WordPress Really Simple SSL plugin <= 9.8.0 - Denial of Service Attack vulnerabilityReally Simple Plugins Really Simple SSL
- CVE-2026-84772WordPress Broken Link Checker plugin <= 2.4.14 - Server Side Request Forgery (SSRF) vulnerabilityWPMU DEV Broken Link Checker
- CVE-2026-84771WordPress PublishPress Permissions plugin <= 4.8.3 - Insecure Direct Object References (IDOR) vulnerabilityPublishPress Permissions
- CVE-2026-84760WordPress Ultimate Gift Cards For WooCommerce plugin <= 3.2.9 - Broken Access Control vulnerabilityWP Swings Ultimate Gift Cards For WooCommerce
- CVE-2026-83562WordPress WCFM Marketplace plugin <= 3.8.2 - Cross Site Scripting (XSS) vulnerabilityWC Lovers WCFM Marketplace
- CVE-2026-82223WordPress WP Event SOlution plugin <= 4.1.22 - Broken Access Control vulnerabilityArraytics WP Event SOlution
- CVE-2026-84781WordPress Gallery PhotoBlocks plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerabilityWP Chill Gallery PhotoBlocks
- CVE-2026-84808Kimai before 2.65.0 Authorization Bypass via API Timesheetkimai
- CVE-2026-84807Kimai before 2.65.0 Authentication Bypass via Team Creationkimai
- CVE-2026-84806Kimai before 2.63.0 Authorization Bypass via Team Access Endpointskimai
- CVE-2026-84805Kimai 2.61.0 before 2.63.0 Authentication Bypass via APIkimai
- CVE-2026-84804Kimai before 2.65.0 Authorization Bypass via Team Activity APIkimai
- CVE-2026-84802Craft CMS 5.7.0 before 5.10.12 Information Disclosure via AssetsControllercraftcms cms
- CVE-2026-84799Craft CMS before 5.11.0 PII Disclosure via GraphQL User Relationscraftcms cms
- CVE-2026-84797Craft CMS 5.0.0-RC1 before 5.10.11 Authorization Bypass via actionDuplicatecraftcms cms
- CVE-2026-84793Craft CMS 5.0.0-RC1 before 5.10.11 Stored XSS via site namecraftcms cms
- CVE-2026-84792Craft CMS before 5.10.11 Broken Access Control via element-indexescraftcms cms
- CVE-2026-32773Apache Spark: XSS Vulnerability in Spark Web 3.5.4Apache Software Foundation Apache Spark · pyspark +2
- CVE-2026-84175In Eclipse Ditto versions 3.0.0 to 3.9.6, the Things service fetches WoT (Web of Things) ThingModels over HTTP from URLs supplied by API useEclipse Foundation Eclipse Ditto
- CVE-2026-53683Freeipa: idm: idm/freeipa web ui - client-side open redirect in reset_password.htmlRed Hat Enterprise Linux
- CVE-2025-7963Easy Waveform Player <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode_easywaveformplayer Functiontymotey Easy Waveform Player
- CVE-2026-3850Divi <= 4.27.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Contact Form 'redirect_url' Shortcode ParameterElegant Themes Divi
- CVE-2026-82182WPvivid Backup & Migration < 0.9.133 - Admin+ SQLi via Upload Cleaner IsolationWPvivid — Backup, Migration & Staging
- CVE-2026-81583Theme My Login 7.0 - 7.1.15 - Subscriber+ Unauthorised Multisite Site Creation and Privilege EscalationTheme My Login
- CVE-2026-81432JetStyleManager < 1.3.9 - Skin Deletion and Modification via CSRFJetStyleManager for Gutenberg
- CVE-2026-81428WC Vendors < 2.7.2.1 - Vendor+ Cross-Vendor Product and Arbitrary Post Modification via IDORWC Vendors
- CVE-2026-81427WC Vendors < 2.7.2.1 - Vendor+ Cross-Vendor Order Shipment Status ChangeWC Vendors
- CVE-2026-81426WC Vendors < 2.7.2.1 - Order Shipment Status Change via CSRFWC Vendors
- CVE-2026-81199MasterStudy LMS < 3.7.46 - Unauthenticated Student Statistics Disclosure via student/stats REST RouteMasterStudy LMS WordPress Plugin
- CVE-2026-81198MasterStudy LMS < 3.7.46 - Instructor+ Cross-Course Curriculum Deletion and Tampering via IDORMasterStudy LMS WordPress Plugin
- CVE-2026-81197MasterStudy LMS < 3.7.46 - Unauthenticated Unpublished Course Title Disclosure via course-list REST RouteMasterStudy LMS WordPress Plugin
- CVE-2026-81196MasterStudy LMS < 3.7.46 - Instructor+ Quiz Answer Disclosure via IDORMasterStudy LMS WordPress Plugin
- CVE-2026-81195MasterStudy LMS < 3.7.46 - Unauthenticated Student Enrollment Disclosure via student-courses REST RouteMasterStudy LMS WordPress Plugin
- CVE-2026-81194MasterStudy LMS < 3.7.46 - Subscriber+ Cross-Instructor Order Data Disclosure via author_id ParameterMasterStudy LMS WordPress Plugin
- CVE-2026-79621CatalogX < 6.1.3 - Unauthenticated Email Content Injection via Shared TransientCatalogX
- CVE-2026-78151FormLayer < 1.0.9 - Unauthenticated Form Configuration Disclosure via Form Submission ResponseFormLayer
- CVE-2026-77788Rank Math SEO < 1.0.277 - Author+ Arbitrary Post and User Metadata Overwrite via updateSchemasRank Math SEO
- CVE-2026-77787Rank Math SEO < 1.0.277 - Author+ Term Metadata Update and Cross-Object Post Title Overwrite via updateMetaBulkRank Math SEO
- CVE-2026-77785Rank Math SEO < 1.0.277 - Author+ Non-Public Post Content Disclosure via Abilities APIRank Math SEO
- CVE-2026-77784Rank Math SEO < 1.0.277 - Author+ Robots and Pillar Content Meta Update on Non-Owned Objects via mark_page_asRank Math SEO
- CVE-2026-77783Rank Math SEO < 1.0.277 - Unauthenticated Non-Public Post Schema and Content DisclosureRank Math SEO
- CVE-2026-77782Rank Math SEO < 1.0.277.1 - Unauthenticated Password-Protected Post Content Disclosure via Post Metadata and llms.txtRank Math SEO
- CVE-2026-77764GamiPress < 7.9.9.6 - Subscriber+ Arbitrary User Points and Achievement Award via Watch-Video ListenersGamiPress
- CVE-2026-74927MultiVendorX 5.0.13 - 5.0.14 - Unauthenticated Vendor PII and Payout Data Disclosure via stores REST EndpointMultiVendorX
- CVE-2026-19719Social Media Share Buttons & Social Sharing Icons < 3.0.1 - Contributor+ Stored XSS via Post TitleSocial Media Share Buttons & Social Sharing Icons
- CVE-2026-19704Comments – wpDiscuz < 7.6.66 - Unauthenticated Comment Disclosure via SQLiComments
- CVE-2026-19251Ultimate Member < 2.13.0 - Unauthenticated Unapproved Comment Disclosure via Profile ActivityUltimate Member
- CVE-2026-16983Gutentor < 4.0.6 - Subscriber+ Password Protected Post Password Disclosure via REST APIGutentor
- CVE-2026-16966Solace Extra < 1.7.0 - Unauthenticated Draft/Private Site Builder Content Disclosure via get_elementor_contentSolace Extra
- CVE-2026-15232Appointment Booking Lite < 2.4.8 - Unauthenticated Arbitrary Reservation DeletionMotoPress Appointment Booking
- CVE-2026-14215Amelia < 2.4.9 - Unauthenticated Post-Booking Action TriggerBooking for Appointments and Events Calendar
- CVE-2025-15664BEAF < 4.7.19 - Author+ Stored XSS via Before LabelUltimate Before After Image Slider & Gallery
- CVE-2025-15663BEAF < 4.7.19 - Author+ Stored XSS via After LabelUltimate Before After Image Slider & Gallery
- CVE-2026-3851Divi <= 4.27.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Dynamic Content (Legacy JSON Format) ShortcodeElegant Themes Divi
- CVE-2026-84442MapQuest Get Directions App com.mapquest.android.ace ExpoShareIntentModule.kt getDataColumn path traversalMapQuest Get Directions App
- CVE-2026-84441Piwigo Image Derivative i.php path traversalPiwigo
- CVE-2026-84438OpenCart Autocomplete Workflow edit.php cross site scriptingOpenCart
- CVE-2026-82968Keycloak-services: keycloak-services: cross-session email verification proof not bound to upstream identity for social providersRed Hat Build of Keycloak · Red Hat Single Sign-On
- CVE-2026-84437OpenCart Autocomplete Workflow address.php cross site scriptingOpenCart
- CVE-2026-84431AirAsia MOVE App com.airasia.mobile com.airasia.core.utils.RealPathUtil.getRealPath path traversalAirAsia MOVE App
- CVE-2026-84430gouguoa edit_personal Endpoint Index.php update dynamically-determined object attributesgouguoa
- CVE-2026-84701NocoBase Rich Text Field Stored Cross-Site Scripting via APInocobase
- CVE-2026-84697Mailpit SSRF Deny List Bypass via Azure Metadata and IPv6 Prefixaxllent mailpit
- CVE-2026-84427zhayujie CowAgent Bash Tool bash.py denial of servicezhayujie CowAgent
- CVE-2026-84425zhayujie CowAgent Browser Tool browser_tool.py BrowserTool denial of servicezhayujie CowAgent