CVEs published September 3, 2026
345 CVEs were published on September 3, 2026: 45 critical, 165 high. 1 is now in CISA KEV.
- Published
- 345
- Critical
- 45
- High
- 165
- Medium
- 118
- Low
- 3
- Unrated
- 14
- Now in CISA KEV
- 1
- Fix available
- 180
Most affected products
- Linux
- 31
- moos-ivp
- 15
- Google Chrome
- 12
- themoos core-moos
- 12
- WWBN AVideo
- 11
- misp
- 9
- n8n-io n8n
- 9
- Elastic Kibana
- 7
- measX DASYLab
- 6
- Red Hat Enterprise Linux
- 6
Critical 45
- CVE-2026-67402An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the Messenger v3 HTTPS virtual hoWebPros ConfigServer Security & Firewall · ConfigServer Sec…
- CVE-2026-62916Microsoft Entra ID Elevation of Privilege VulnerabilityMicrosoft Entra
- CVE-2026-83711Microsoft Azure Active Directory B2C Elevation of Privilege VulnerabilityMicrosoft Entra
- CVE-2026-80098Copilot Studio Elevation of Privilege VulnerabilityMicrosoft Copilot Studio
- CVE-2026-70352Azure AI Language Elevation of Privilege VulnerabilityMicrosoft Azure AI Language Authoring
- CVE-2026-85440MOOS core-moos through 10.4.0 MOOSDB Pre-Authentication Heap Overflow via Negative Packet Lengththemoos core-moos
- CVE-2026-85438MOOS-IvP through 24.8.1 Out-of-Bounds Write via Unvalidated IvP Payload Countsmoos-ivp
- CVE-2026-85437MOOS-IvP through 24.8.1 Buffer Overflow in IvP Function String Decodersmoos-ivp
- CVE-2026-85435MOOS-IvP through 24.8.1 uFldNodeBroker Unauthenticated Shore Route Enrollmentmoos-ivp
- CVE-2026-85434MOOS-IvP through 24.8.1 uFldShoreBroker Bridge Route Injection via Unverified Node Pingmoos-ivp
- CVE-2026-85433MOOS essential-moos through 10.0.1 pShare Unauthorized Runtime Route Reconfigurationthemoos essential-moos
- CVE-2026-85428MOOS core-moos through 10.4.0 MOOSDB HTTP Server Unauthenticated Variable Writethemoos core-moos
- CVE-2026-85427MOOS essential-moos through 10.0.1 pAntler Remote Code Execution via Unauthenticated MISSION_FILEthemoos essential-moos
- CVE-2026-85426MOOS-IvP through 24.8.1 uMemWatch Command Injection via MOOS Client Namesmoos-ivp
- CVE-2026-85425MOOS-IvP through 24.8.1 iSay Command Injection via SAY_MOOSmoos-ivp
- CVE-2026-85424MOOS core-moos through 10.4.0 Missing Authentication for MOOSDB Publish, Subscribe and DB_CLEARthemoos core-moos
- CVE-2026-85224D-Link DNS-320 ShareCenter File Sharing file_sharing.cgi os command injectionD-Link DNS-320 ShareCenter
- CVE-2026-85223D-Link DNS-340L CGI dropbox.cgi os command injectionD-Link DNS-340L
- CVE-2026-85222D-Link DNS-340L Add-On Center addon_center.cgi os command injectionD-Link DNS-340L
- CVE-2026-85061MapLibre GL JS: XSS Sanitizer Bypass in DOM.sanitize() via Live NamedNodeMap Removal Skipmaplibre-gl-js · maplibre-gl
- CVE-2026-85047Improper input validation in Transactions Platform in Google Chrome on on iOS prior to 152.0.7977.82 allowed a remote attacker to potentiallGoogle Chrome
- CVE-2026-85042Use after free in DevTools in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code outside the sandbox vGoogle Chrome
- CVE-2026-85050Out of bounds write in WebGL in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code outsiGoogle Chrome
- CVE-2026-85043Incomplete cleanup in Network in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to bypass system access restrictions via craGoogle Chrome
- CVE-2026-85394python-jose through 3.5.0 Algorithm Confusion via DER-encoded Public Key as HMAC Secretmpdavis python-jose · python-jose
- CVE-2026-85391Peppermint through 0.5.5 Use of Hard-coded JWT Signing Secret in docker-compose.ymlPeppermint-Lab peppermint
- CVE-2026-82526R2R 3.6.6 SQL Injection via Vector Index Creation EndpointSciPhi-AI R2R
- CVE-2026-58400GeoNetwork vulnerable to Remote Code Execution via unsafe Saxon XSLT processor configuration in formattercore-geonetwork
- CVE-2026-84834WordPress JobSearch plugin <= 3.2.0 - PHP Object Injection vulnerabilityeyecix JobSearch
- CVE-2026-84814WordPress Bricksforge plugin <= 3.1.8.8 - Privilege Escalation vulnerabilityBricksforge. Bricksforge
- CVE-2026-84813WordPress GeoDirectory plugin <= 2.8.174 - SQL Injection vulnerabilityPaolo GeoDirectory
- CVE-2026-84768WordPress VikAppointments Services Booking Calendar plugin <= 1.2.20 - SQL Injection vulnerabilitye4jvikwp VikAppointments Services Booking Calendar
- CVE-2026-84753WordPress Mail Mint plugin <= 1.31.0 - PHP Object Injection vulnerabilityWPFunnels Mail Mint
- CVE-2026-84238WordPress YITH Request a Quote for WooCommerce Premium plugin < 4.46.0 - Broken Access Control vulnerabilityYITH Request a Quote for WooCommerce Premium
- CVE-2026-85183Taipy through 4.1.1 Cross-Site WebSocket Hijacking via Wildcard socket.io CORSAvaiga taipy
- CVE-2026-85181CAT through 3.1.0 Session Cookie Forgery via Unkeyed hashCode Checksumdianping cat
- CVE-2026-85216MISP LDAP and LinOTP Authentication Bypass via Empty or Invalid Credentialsmisp
- CVE-2026-85109Tenda HG10 Boa Web Server formLogin buffer overflowTenda HG10
- CVE-2026-82180In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 when the MQTT API is enabled with the certificate authentication policy, CertificateMqttFiEclipse Foundation Eclipse Arrowhead
- CVE-2026-78080Joomla Extension - feenders.de - Unauthenticated SQL injection in JooDatabase Lite < 5.1.0joodb.feenders.de JooDatabase Lite extension for Joomla
- CVE-2026-78069Joomla Extension - j2commerce.com - Missing authorization on Apps controller delegation chain in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6j2commerce.com J2Store extension for Joomla
- CVE-2026-85154WWBN AVideo Authentication Bypass via Non-Expiring video_id_hashWWBN AVideo
- CVE-2026-76178Multiple vulnerabilities in Ocsreports for OCS Inventory NGOCS Inventory NG Ocsreports
- CVE-2026-76174Multiple vulnerabilities in Ocsreports for OCS Inventory NGOCS Inventory NG Ocsreports
- CVE-2026-85031TOTOLINK CP450 cstecgi.cgi buffer overflowTOTOLINK CP450
High 165
- CVE-2026-67397Path traversal in Plesk 18.0.79.9 and earlier and 18.0.80 through 18.0.80.5 allows local users to execute arbitrary code as root.WebPros Plesk
- CVE-2026-67398Missing authorization vulnerability has been discovered in 2Checkout payment gateway of WHMCS from 8.13.0 before 8.13.7, from 9.0.0 before 9WebPros WHMCS
- CVE-2026-65818Power Automate Elevation of Privilege VulnerabilityMicrosoft Power Platform
- CVE-2026-69857Azure Cosmos DB Spoofing VulnerabilityMicrosoft Azure Cosmos DB
- CVE-2026-70178Microsoft Fabric Elevation of Privilege VulnerabilityMicrosoft Fabric
- CVE-2026-62906Microsoft Discovery Studio Information Disclosure VulnerabilityMicrosoft Discovery Studio
- CVE-2026-85455MOOS core-moos through 10.4.0 MOOSDB Out-of-Bounds Read via Short Packetthemoos core-moos
- CVE-2026-85452MOOS ui-moos through 50b9c6c uMS Buffer Overflow via Long MOOS Identifiersthemoos ui-moos
- CVE-2026-85451MOOS core-moos through 10.4.0 Remote Process Termination via Hard-Coded Multicast Passphrasethemoos core-moos
- CVE-2026-85450MOOS core-moos through 10.4.0 MOOSDB HTTP Server Resource Exhaustionthemoos core-moos
- CVE-2026-85449MOOS-IvP through 24.8.1 pMarineViewer Unbounded Memory Consumption via NODE_REPORTmoos-ivp
- CVE-2026-85448MOOS-IvP through 24.8.1 uFldShoreBroker Unbounded Community State Retentionmoos-ivp
- CVE-2026-85447MOOS-IvP through 24.8.1 pRealm Unbounded REALMCAST_REQ Subscription Denial of Servicemoos-ivp
- CVE-2026-85446MOOS-IvP through 24.8.1 uFldNodeComms Quadratic Processing Denial of Servicemoos-ivp
- CVE-2026-85445MOOS-IvP through 24.8.1 BHV_IPF Demultiplexer Memory Exhaustion via Packet Countmoos-ivp
- CVE-2026-85444MOOS-IvP through 24.8.1 Out-of-Bounds Read in isBraced, isQuoted and isChevronedmoos-ivp
- CVE-2026-85443MOOS core-moos through 10.4.0 MOOSDB Accept Loop Denial of Servicethemoos core-moos
- CVE-2026-85442MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Unbounded Packet Allocationthemoos core-moos
- CVE-2026-85441MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Negative Serialized String Lengththemoos core-moos
- CVE-2026-85439MOOS-IvP through 24.8.1 alogsplit Command Injection via Input Pathnamemoos-ivp
- CVE-2026-85436MOOS essential-moos through 10.0.1 pMOOSBridge Heap Corruption via Negative UDP Lengththemoos essential-moos
- CVE-2026-85432MOOS core-moos through 10.4.0 MOOSDB Message Source Spoofing via Wire Identitythemoos core-moos
- CVE-2026-85431MOOS essential-moos through 10.0.1 pMOOSBridge Unauthenticated UDP Packet Injectionthemoos essential-moos
- CVE-2026-85430MOOS essential-moos through 10.0.1 pShare Unauthenticated UDP Datagram Republishingthemoos essential-moos
- CVE-2026-85429MOOS-IvP through 24.8.1 uFldNodeComms Node Message Source Spoofingmoos-ivp
- CVE-2026-18167Stack-based buffer overflow in TP-Link Archer AX55 v4TP-Link Systems Archer AX55
- CVE-2026-64200Out Of Bounds Read in during string conversionwhen parsing a .DSB file in DASYLabmeasX DASYLab
- CVE-2026-64199Out Of Bounds Read outside the bounds of an allocated data structure when parsing a .DSB file in DASYLabmeasX DASYLab
- CVE-2026-64198Out Of Bounds Read in file handling when parsing a .DSB file in DASYLabmeasX DASYLab
- CVE-2026-64197Out Of Bounds Write when parsing a .DSB file in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated data structuremeasX DASYLab
- CVE-2026-64196Out Of Bounds Write when parsing a .DSB file in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated heapmeasX DASYLab
- CVE-2026-64195Out Of Bounds Write parsing a .DSB file in DASYLab due to lack of proper validation of user-supplied datameasX DASYLab
- CVE-2026-8862Vulnerabilities exists in IBM Netezza SoftwareIBM Netezza Software
- CVE-2026-82520parsedmarc < 11.0.1 Zip Bomb DoS via Compressed Email Attachmentsdomainaware parsedmarc
- CVE-2026-77465toml-node: Uncontrolled RecursionBinaryMuse toml-node · toml
- CVE-2026-63376toml-node: Prototype Pollution Leads to `Object.prototype` Corruption via `__proto__` Key-Path DesynchronizationBinaryMuse toml-node · toml
- CVE-2026-85051Type confusion in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandboxGoogle Chrome
- CVE-2026-85049Use after free in Skia in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a Google Chrome
- CVE-2026-85053Improper resource exposure in CacheStorage in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code insidGoogle Chrome
- CVE-2026-85045Race condition in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crGoogle Chrome
- CVE-2026-85048Use after free in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the renderer process to Google Chrome
- CVE-2026-85046Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crGoogle Chrome
- CVE-2026-82527R2R 3.6.6 SQL Injection via Retrieval Search Filter KeySciPhi-AI R2R
- CVE-2026-44506Medplum - Exposure of OAuth client secret via dynamic registration endpoint in self-hosted configurationsmedplum
- CVE-2026-53728Medplum - Improper Validation of Redirect URI in External Auth Callback allows Authorization Code Leakagemedplum · @medplum/core
- CVE-2026-85396rubyzip before 3.4.0 Path Traversal in Zip::Entry#extract via Sibling-Directory Prefixrubyzip
- CVE-2026-85395UnoPim before 2.1.3 Missing Authorization on Integration Management Routesunopim
- CVE-2026-85393node-forge through 1.4.0 RSA PKCS#1 v1.5 Signature Forgery via Nested DigestAlgorithm Paddingdigitalbazaar forge · node-forge
- CVE-2026-85390Checkmate through 3.11.0 Missing Authorization on Maintenance Window, Notification, and Check Deletion Routesbluewave-labs Checkmate
- CVE-2026-85389Worklenz before 3.0.0 Authorization Bypass on Task-Scoped Endpointsworklenz
- CVE-2026-85388Worklenz through 3.0.0 SQL Injection via the sort-field Query Parameterworklenz
- CVE-2026-33630c-ares : Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via ares_getaddrinfo() over TCPc-ares
- CVE-2026-82302Incorrect Authorization in Kibana Leading to Unauthorized Configuration ModificationElastic Kibana
- CVE-2026-78583Incorrect Authorization in Kibana Leading to Privilege EscalationElastic Kibana
- CVE-2026-15431HP Support Assistant – Potential Escalation of PrivilegeHP Support Assistant
- CVE-2026-85028Creation of Temporary File in Directory with Insecure Permissions in AWS FPGA Development Kitaws-fpga
- CVE-2026-83959Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)Adobe Substance 3D Sampler
- CVE-2026-63219Unauthenticated file upload via missing authorization on formatter upload endpointcore-geonetwork
- CVE-2026-85012OS command injection in the Amazon CodeCatalyst blueprints SDKAWS @amazon-codecatalyst/blueprints.blueprint
- CVE-2026-84848WordPress Quick Event Manager plugin <= 9.17 - Cross Site Scripting (XSS) vulnerabilitybrightvesseldev Quick Event Manager
- CVE-2026-84847WordPress Quick Event Manager plugin <= 9.17 - Broken Access Control vulnerabilitybrightvesseldev Quick Event Manager
- CVE-2026-84836WordPress WC Ukraine Shipping plugin <= 1.22.3 - Insecure Direct Object References (IDOR) vulnerabilitykirillbdev WC Ukraine Shipping
- CVE-2026-84812WordPress BP Better Messages plugin <= 2.15.27 - Cross Site Scripting (XSS) vulnerabilitywordplus BP Better Messages
- CVE-2026-84779WordPress Agentimus – AI SEO, llms.txt & MCP for AI Agents plugin <= 1.51.0 - Broken Access Control vulnerabilitySheikh Heera Agentimus – AI SEO, llms.txt & MCP for AI…
- CVE-2026-84778WordPress Migrate Guru – Site Migration & Cloning plugin <= 6.65 - Denial of Service Attack vulnerabilitymigrateguru Migrate Guru – Site Migration & Cloning
- CVE-2026-84777WordPress Really Simple SSL plugin <= 9.8.0 - 2FA Bypass vulnerabilityReally Simple Plugins Really Simple SSL
- CVE-2026-84776WordPress MalCare Security plugin <= 6.69 - Denial of Service Attack vulnerabilityMalCare Security
- CVE-2026-84773WordPress EWWW Image Optimizer plugin <= 8.7.6 - Cross Site Scripting (XSS) vulnerability作者: Shane Bishop EWWW Image Optimizer
- CVE-2026-84765WordPress Breadcrumb NavXT plugin <= 7.5.1 - Cross Site Scripting (XSS) vulnerabilityJohn Havlik Breadcrumb NavXT
- CVE-2026-84763WordPress RTMKit plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerabilityrometheme RTMKit
- CVE-2026-84761WordPress LiteSpeed Cache plugin <= 7.9 - Server Side Request Forgery (SSRF) vulnerabilityLiteSpeed Technologies LiteSpeed Cache
- CVE-2026-84757WordPress WP Compress plugin <= 7.21.28 - Settings Change vulnerabilityAresIT WP Compress
- CVE-2026-84756WordPress WCFM Membership plugin <= 2.11.11 - Privilege Escalation vulnerabilityWC Lovers WCFM Membership
- CVE-2026-84752WordPress RTMKit plugin <= 2.1.5 - PHP Object Injection vulnerabilityrometheme RTMKit
- CVE-2026-81776WordPress WP QuickLaTeX plugin <= 3.8.8 - Cross Site Scripting (XSS) vulnerabilityadvanpix WP QuickLaTeX
- CVE-2026-81773WordPress Ninja Forms File Uploads Extension plugin <= 3.3.26 - Cross Site Scripting (XSS) vulnerabilitySaturday Drive Ninja Forms File Uploads Extension
- CVE-2026-81300WordPress Calculation For Contact Form 7 plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilitysilverplugins217 Calculation For Contact Form
- CVE-2026-81295WordPress Under Construction plugin <= 5.82 - Cross Site Scripting (XSS) vulnerabilityUnderConstructionPage Under Construction
- CVE-2026-81292WordPress Simple Payment plugin <= 2.5.1 - Cross Site Scripting (XSS) vulnerabilityIdo Kobelkowsky Simple Payment
- CVE-2026-84736In the current development version of Eclipse aeriOS, for which no official release has yet been published, the Federator component disablesEclipse Foundation Eclipse aeriOS
- CVE-2026-85239MISP Event Template Definition Validation Bypass Allows Persistent Denial of Servicemisp
- CVE-2026-85238Session Fixation in MISP CustomAuth Authentication Allows Session Hijackingmisp
- CVE-2026-83961ColdFusion | Improper Authentication (CWE-287)Adobe ColdFusion
- CVE-2026-85237Missing Rate Limiting in Email OTP Verification Allows Brute-Force Authentication Bypassmisp
- CVE-2026-48486Signum Node: Integer overflow in SMART_FEES fee distribution allows arbitrary miner reward inflationsignum-network signum-node
- CVE-2026-71963Hermes Agent 0.18.2 - 0.21.0 RCE via git core.fsmonitor Config InjectionNousResearch hermes-agent
- CVE-2026-53924Gardens v2: Permissionless syncOutflow bypasses streaming proposal disputes1Hive gardens-v2
- CVE-2026-57445Gardens v2: Approve-side dispute resolution drains active streaming escrow reserve1Hive gardens-v2
- CVE-2026-55658Gardens v2: StreamingEscrow buffer drains to the proposal beneficiary on cancel via the permissionless claim()1Hive gardens-v2
- CVE-2026-85236MISP cullEmptyEvents CSRF Allows Irreversible Deletion of Events via GET Requestmisp
- CVE-2026-75035Rancher: ext.cattle.io/v1 Token store: cross-user token disclosure via label-selector scoping bypassSUSE Rancher
- CVE-2026-84964Heap corruption via OCSP request double free from crafted multi-URL certificate in TLS clientMongoDB C Driver
- CVE-2026-75034Rancher: SAML Assertion ReplaySUSE Rancher
- CVE-2026-84971Persistent client crash loop via undersized FLE2 insert-update ciphertext in decryption pathMongoDB libmongocrypt
- CVE-2026-75033Rancher: Cross-Cluster Secret Leakage via Namespace projectId Annotation SpoofingSUSE Rancher
- CVE-2026-71404Rancher: Ownership-less ClusterRole overwrite via attacker-controlled cr-name annotation on GlobalRoleSUSE Rancher
- CVE-2026-84989ntopng's Missing Authorization in REST API Allows Non-Admin Users to Delete and Rename Arbitrary Tagsntopng
- CVE-2026-85221MISP CurlClient TLS Peer Verification Disabled by Default Enables Man-in-the-Middle Attacksmisp
- CVE-2026-85214vhr Missing Authorization in PUT /hr/info Allows Arbitrary Profile Overwritelenve vhr
- CVE-2026-85213Kill Bill through 0.24.21 Missing Authorization on AdminResource Endpointskillbill
- CVE-2026-85212CRMEB through 6.0.0 Missing Authorization via Inert verifyAuth Role CheckCRMEB
- CVE-2026-85211Label Studio through 1.23.0 Cross-Organization Storage URI ResolutionHumanSignal label-studio
- CVE-2026-85182vhr Missing Authorization in PUT /hr/pass Allows Cross-Account Password Changelenve vhr
- CVE-2026-85180Ollama 0.30.0 through 0.33.2 SSRF via Cross-Host Tensor Blob Redirectollama
- CVE-2026-85179Label Studio through 1.23.0 SSRF via Unvalidated Webhook URLHumanSignal label-studio
- CVE-2026-85178Helicone Cross-Tenant Provider Key Disclosure via Missing Organization Filterhelicone
- CVE-2026-85176DbGate through 7.2.6 Arbitrary File Read and Write via file:// jsliddbgate
- CVE-2026-85199Eclipse aeriOS Self-orchestrator versions prior to 1.2.1 contain a path traversal vulnerability in the REST API.Eclipse Foundation Eclipse aeriOS
- CVE-2026-85110Tenda HG10 Boa Web Server formWlanSetup buffer overflowTenda HG10
- CVE-2026-80515In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 the management-authorization gate that protects every /…/mgmt/… REST endpoint decides whetEclipse Foundation Eclipse Arrowhead
- CVE-2026-6071Code Execution Vulnerability in Arena®Rockwell Automation Arena
- CVE-2025-12737Arbitrary Code Execution via Administrative Operations in Multiple WSO2 Products Allows Remote Code ExecutionWSO2 Open Banking AM · WSO2 Open Banking IAM +6
- CVE-2026-71221Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked height in savemetaRed Hat Enterprise Linux
- CVE-2026-71220Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked di_height in gfs2_editRed Hat Enterprise Linux
- CVE-2026-78065Joomla Extension - j2commerce.com - Guest checkout address disclosure to any authenticated user (IDOR) in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6j2commerce.com J2Store extension for Joomla
- CVE-2026-77999Joomla Extension - j2commerce.com - Unauthenticated PayPal callback forgery leading to order confirmation fraud in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6j2commerce.com J2Store extension for Joomla
- CVE-2026-78064Joomla Extension - j2commerce.com - Anonymous cart-record tampering via inherited FOF `save` task in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6j2commerce.com J2Store extension for Joomla
- CVE-2026-79679Use of Weak CredentialsB&R Industrial Automation mapp Services
- CVE-2026-80465A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.4), Mendix SAML (Mendix 11 compatible) (All vSiemens Mendix SAML
- CVE-2026-85175SiYuan before v3.8.2 TLS Private Key Disclosure via getFilesiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-85174SiYuan before v3.8.2 API Token Exposure via Log Filesiyuan-note siyuan
- CVE-2026-85171n8n before 1.123.73 Credential Exposure via Error Loggingn8n-io n8n
- CVE-2026-85170n8n before 1.123.73 Local File Read and SSRF via Gmail and Brevo nodesn8n-io n8n
- CVE-2026-85169n8n before 1.123.73 Remote Code Execution via $fromAI Prototype Leakn8n-io n8n
- CVE-2026-85168n8n before 1.123.73 Remote Code Execution via Git Noden8n-io n8n
- CVE-2026-85166n8n before 2.36.2 Credential Exfiltration via Workflow Tool Noden8n-io n8n
- CVE-2026-85165n8n before 2.36.2 Expression Sandbox Bypass via SpreadElementn8n-io n8n
- CVE-2026-85164WWBN AVideo Server-Side Request Forgery via set_api_userImagesWWBN AVideo
- CVE-2026-85163AVideo Server-Side Request Forgery via epg_link parameterWWBN AVideo
- CVE-2026-85162AVideo through c91b5975d CSRF via saveLive.phpWWBN AVideo
- CVE-2026-85160AVideo through c91b5975d CSRF and Path Traversal via stopLive.phpWWBN AVideo
- CVE-2026-85155WWBN AVideo SQL Injection via get.json.php APIName channelsWWBN AVideo
- CVE-2026-76642util-linux libmount Privilege Escalation via Failed Mount Helperutil-linux
- CVE-2026-85124@fastify/http-proxy vulnerable to prefix escape via backslash dot-segments@fastify/http-proxy
- CVE-2026-85150Gstreamer1-plugins-base: gstreamer: null/invalid-pointer dereference in gst_rtsp_message_parse_auth_credentials() when parsing a crafted digest authorization/www-authenticate headerRed Hat Enterprise Linux
- CVE-2026-76177Multiple vulnerabilities in Ocsreports for OCS Inventory NGOCS Inventory NG Ocsreports
- CVE-2026-76176Multiple vulnerabilities in Ocsreports for OCS Inventory NGOCS Inventory NG Ocsreports
- CVE-2026-76175Multiple vulnerabilities in Ocsreports for OCS Inventory NGOCS Inventory NG Ocsreports
- CVE-2026-84830OS command injection in privileged configuration handlingSEPPmail AG Secure Email Gateway
- CVE-2026-84832Unsafe deserialization in the REST interfaceSEPPmail AG SEPPmail Secure Email Gateway
- CVE-2026-84831Mandatory MFA bypass before enrollmentSEPPmail AG SEPPmail Secure Email Gateway
- CVE-2026-80754Input: synaptics-rmi4 - fix F55 transmitter electrode count typoLinux
- CVE-2026-80753ovpn: run deferred work on a module-owned workqueueLinux
- CVE-2026-80752Input: psxpad-spi - set driver data before useLinux
- CVE-2026-80751pmdomain: mediatek: mfg: initialize prev_o in mtk_mfg_attach_dev()Linux
- CVE-2026-80750pmdomain: mediatek: fix remaining %pOF after of_node_put()Linux
- CVE-2026-80749drm/connector/hdmi: Fix out of bounds memory readLinux
- CVE-2026-80748mmc: loongson2: Fix sg iteration in data reorder functionsLinux
- CVE-2026-80747drm/amdkfd: Add bounds check for CRAT subtype lengthLinux
- CVE-2026-80745regulator: fp9931: Fix VPOS/VNEG voltage selector tableLinux
- CVE-2026-80741drm/log: Fix out-of-bounds read on empty message lengthLinux
- CVE-2026-80738bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookieLinux
- CVE-2026-80737serial: amba-pl011: synchronize DMA teardownLinux
- CVE-2026-80736thunderbolt: Fix bandwidth group reservation indexingLinux
- CVE-2026-80735ovpn: ensure socket is owned by ovpn before deref sk_user_dataLinux
- CVE-2026-80734btrfs: initialize inode mapping flags for cached inodesLinux
- CVE-2026-80732ata: pata_sl82c105: fix bridge revision use-after-freeLinux
- CVE-2026-80731net: remove CAP_SYS_RAWIO zero-padding in dev_validate_headerLinux
- CVE-2026-73600Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow vulnerability in file-level restore agent.Dell PowerProtect Data Manager
- CVE-2026-9854A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their privileges to adminisHitachi Energy MicroSCADA SYS600
- CVE-2026-9853A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the application to read aHitachi Energy MicroSCADA SYS600
- CVE-2021-38489HDD Password Stored In PlaintextInsyde Software InsydeH2O
- CVE-2026-85093Cheshire Cat AI Memory Collection Endpoint Information Disclosurecheshire-cat-ai core
- CVE-2026-85091zlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacatezlib
- CVE-2026-85089FreeRDP before 3.31.0 Information Disclosure via uninitialized heap memoryFreeRDP
Medium, low and unrated 135
- CVE-2026-49509Out-of-bounds read vulnerability in Samsung Opensource rLottie allows Overread Buffers.Samsung Opensource rLottie
- CVE-2026-85378light0011 cms Chapter Controller ChapterController.class.php _initialize authorizationlight0011 cms
- CVE-2026-85456MOOS-IvP through 24.8.1 alog Splitting Path Traversal on Windowsmoos-ivp
- CVE-2026-85454MOOS core-moos through 10.4.0 Off-by-One Buffer Overflow in Serial Telegram Handlingthemoos core-moos
- CVE-2026-85453MOOS core-moos through 10.4.0 MOOSDB HTTP Pages Stored Cross-Site Scriptingthemoos core-moos
- CVE-2026-85241SpecterOps BloodHound Graph Write Endpoint v2.go NewV2API improper authorizationSpecterOps BloodHound
- CVE-2026-18330Hardcoded Shared RSA-1024 Private Key in Web Login in TP-Link RE305 and Archer C7TP-Link Systems RE305 · TP-Link Systems Archer C7
- CVE-2026-85225code-projects Doctor Appointment System patient_login.php sql injectioncode-projects Doctor Appointment System
- CVE-2026-84185Jwcrypto: jwcrypto: general json jws kid binding bypass during jwkset verificationRed Hat Ansible Automation Platform · Red Hat Enterprise… +2
- CVE-2026-9744Vulnerabilities exists in IBM Netezza SoftwareIBM Netezza Software
- CVE-2026-9736Vulnerabilities exists in IBM Netezza SoftwareIBM Netezza Software
- CVE-2026-9036Vulnerabilities exists in IBM Netezza SoftwareIBM Netezza Software
- CVE-2026-9745Vulnerabilities exists in IBM Netezza SoftwareIBM Netezza Software
- CVE-2026-82521parsedmarc 9.0.6 < 11.0.1 Path Traversal via Forensic Report Subjectdomainaware parsedmarc
- CVE-2026-85063node-csv: Prototype replacement still reachable via columns pathadaltas node-csv · csv-parse
- CVE-2026-85062Colord: Slow rejection of oversized malformed color stringsomgovich colord · colord
- CVE-2026-85458Divide-by-zero in Xpdf 4.06 due to zero-height Type 3 glyphXpdf
- CVE-2026-71429stream-json: pick/ignore/filter/replace filters are O(depth²) on nested input — small crafted JSON blocks the event loop for seconds→minutes (DoS)uhop stream-json · stream-json
- CVE-2026-85208itsourcecode Online Medicine Delivery System Order Management Controller controller.php doInsert unrestricted uploaditsourcecode Online Medicine Delivery System
- CVE-2026-19795Qiskit SDK is vulnerable when deserializing QPY Files and may overflow the available stack space.IBM Qiskit SDK
- CVE-2026-85044Use of released resource in Mobile in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker leveraging social engineeGoogle Chrome
- CVE-2026-85052Out of bounds read in CrashReporting in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the renderer procGoogle Chrome
- CVE-2026-85207itsourcecode Online Medicine Delivery System index.php cross site scriptingitsourcecode Online Medicine Delivery System
- CVE-2026-85205itsourcecode Online Medicine Delivery System Wishlist controller.php addwishlist sql injectionitsourcecode Online Medicine Delivery System
- CVE-2026-85392Peppermint through 0.5.5 Authorization Bypass on the User Logout EndpointPeppermint-Lab peppermint
- CVE-2026-82299Incorrect Authorization in Kibana Leading to Information DisclosureElastic Kibana
- CVE-2026-82298Incorrect Authorization in Kibana Leading to Denial of ServiceElastic Kibana
- CVE-2026-78596Missing Authorization in Kibana Leading to Unauthorized Cross-Space Write OperationsElastic Kibana
- CVE-2026-78595Missing Authorization in Kibana Fleet Plugin Leading to Cross-Space Agent Data DisclosureElastic Kibana
- CVE-2026-78593Improper Control of Generation of Code in Kibana Leading to Privilege EscalationElastic Kibana
- CVE-2026-49456Waku: Open Redirect via `unstable_redirect` Helperwakujs waku · waku
- CVE-2026-49455Waku: Cross-Origin CSRF on RSC Server Action Dispatchwakujs waku · waku
- CVE-2026-82024LearnPress WordPress Plugin < 4.4.6 Stored XSS via Quiz Question Answer TitlesThimPress LearnPress
- CVE-2026-82023LearnPress WordPress Plugin < 4.4.6 Broken Object-Level Authorization via Quiz Answer InsertThimPress LearnPress
- CVE-2026-85187itsourcecode Online Medicine Delivery System Order Status Update controller.php pupdate sql injectionitsourcecode Online Medicine Delivery System
- CVE-2026-84968Heap out-of-bounds read via corrupt nested BSON in field path error messageMongoDB PHP Driver
- CVE-2026-85186itsourcecode Online Medicine Delivery System Customer Controller controller.php doupdateimage unrestricted uploaditsourcecode Online Medicine Delivery System
- CVE-2026-85304WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.17 - Broken Access Control vulnerabilityUnlimited Elements For Elementor
- CVE-2026-85309WordPress Ultimate Maps by Supsystic plugin <= 1.5.3 - Broken Access Control vulnerabilityUltimate Maps by Supsystic
- CVE-2026-85308WordPress SureForms plugin <= 2.12.5 - Insecure Direct Object References (IDOR) vulnerabilityBrainstorm Force SureForms
- CVE-2026-85307WordPress KP Agent Ready plugin < 1.2.08 - Sensitive Data Exposure vulnerabilityKevin Pirnie KP Agent Ready
- CVE-2026-75602OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download toolOpenListTeam OpenList · github.com/OpenListTeam/OpenList +2
- CVE-2026-85306WordPress MountDev AI MCP Connector for WordPress plugin <= 1.6.5 - Broken Access Control vulnerabilityCascadia Web Services MountDev AI MCP Connector for WordPre…
- CVE-2026-85305WordPress SEOPress plugin <= 10.1 - Server Side Request Forgery (SSRF) vulnerabilitySEOPress
- CVE-2026-85303WordPress Booking and Rental Manager plugin <= 2.7.7 - Cross Site Scripting (XSS) vulnerabilityMagepeople Booking and Rental Manager
- CVE-2026-85302WordPress WPKoi Templates for Elementor plugin <= 3.7.2 - Cross Site Scripting (XSS) vulnerabilityWPKoi WordPress Themes WPKoi Templates for Elementor
- CVE-2026-84774WordPress WP Statistics plugin <= 14.16.11 - Cross Site Scripting (XSS) vulnerabilityVeronaLabs WP Statistics
- CVE-2026-84769WordPress Business Directory plugin <= 6.4.26 - Insecure Direct Object References (IDOR) vulnerabilityStrategy11 Team Business Directory
- CVE-2026-84767WordPress BookIt plugin <= 2.6.0.3 - Bypass Vulnerability vulnerabilityNexcess BookIt
- CVE-2026-84766WordPress FluentBooking Pro plugin <= 2.2.1 - Bypass Vulnerability vulnerabilityWP Manage Ninja FluentBooking Pro
- CVE-2026-84762WordPress WP EasyPay plugin <= 4.5.3 - Bypass Vulnerability vulnerabilitySaad Iqbal WP EasyPay
- CVE-2026-84758WordPress Business Directory plugin <= 6.4.26 - Broken Access Control vulnerabilityStrategy11 Team Business Directory
- CVE-2026-84755WordPress Mail Mint plugin <= 1.31.0 - Broken Access Control vulnerabilityWPFunnels Mail Mint
- CVE-2026-84754WordPress WPFunnels plugin <= 3.12.13 - Broken Access Control vulnerabilityWPFunnels
- CVE-2026-84215WordPress Timetics plugin <= 1.0.61 - Broken Access Control vulnerabilityArraytics Timetics
- CVE-2026-81282WordPress Product Variations Swatches for WooCommerce plugin <= 1.1.18 - Cross Site Scripting (XSS) vulnerabilityVillaTheme Product Variations Swatches for WooCommerce
- CVE-2026-81281WordPress Graphene theme <= 2.9.4 - Cross Site Scripting (XSS) vulnerabilitysilverks Graphene
- CVE-2026-84849WordPress Pre-Orders for WooCommerce plugin <= 2.3 - Bypass Vulnerability vulnerabilitybrightvesseldev Pre-Orders for WooCommerce
- CVE-2026-85242Server-Side Request Forgery via Favicon Redirect to Local Network Resources in PlaywrightCaptureLookyloo PlaywrightCapture
- CVE-2026-85138SeaCMS WeChat index.php addslashes sql injectionSeaCMS
- CVE-2026-53720pymonocypher: Potential heap buffer overflow on nb_blocks in argon2i_32 when provided buffer is too smalljetperch pymonocypher · pymonocypher
- CVE-2026-50554Note Mark: Unauthenticated disclosure of soft-deleted note metadata via deleted=true on public books in note-markenchant97 note-mark · github.com/enchant97/note-mark/backend
- CVE-2026-84967Arbitrary command execution via shell-expanded connection string in Launch MongoDB Shell terminalMongoDB for VS Code
- CVE-2026-82525Exterro FTK Imager < 8.3 XXE via Report.xml XSLT ProcessingExterro FTK Imager
- CVE-2026-75036Fleet: DNS exfiltration via Sprig getHostByName in fleet.yaml Helm template preprocessingSUSE Fleet
- CVE-2026-85137SeaCMS Locoy Collector seacms_locoy_news.php parseIf code injectionSeaCMS
- CVE-2026-84962Authenticated KMS request forgery via CRLF injection in GCP key identifier stringsMongoDB libmongocrypt
- CVE-2026-84963Silent field truncation via unchecked int cast of huge JSON string values in JSON-to-BSON parserMongoDB C Driver
- CVE-2026-84965Heap write primitive via size round-up wrap during JSON parsing on 32-bit buildsMongoDB C Driver
- CVE-2026-84966BSON element injection via NUL-embedded document keys in builder appendMongoDB C++ Driver
- CVE-2026-84969Heap overflow via truncated base64 encoding of binary fields in length-limited JSON outputMongoDB C Driver
- CVE-2026-84970Heap over-read or silent misparse via 32-bit truncation of JSON length in BSON JSON parserMongoDB C++ Driver
- CVE-2026-85230MISP Dashboard Button Widget Allows Persistent JavaScript URL Injectionmisp
- CVE-2026-71403Rancher: Identity-field mutation in /v3/users allows account hijack via principal rebindSUSE Rancher
- CVE-2026-85227Reflected Cross-Site Scripting in MISP Event Filtering via taggedAttributes and galaxyAttachedAttributes Parametersmisp
- CVE-2026-85226MISP OnDemand Correlation Engine Missing Access Control Allows Disclosure of Restricted Correlationsmisp
- CVE-2026-56128pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_schedule_edit.phpNetgate pfSense Plus · Netgate pfSense CE
- CVE-2026-63694Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements used in a Command ('ComDell SmartFabric OS10
- CVE-2026-56127pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_rules_edit.phpNetgate pfSense Plus · Netgate pfSense CE
- CVE-2026-56126pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via status_monitoring.phpNetgate pfSense Plus · Netgate pfSense CE
- CVE-2026-35160Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements used in an OS Command (Dell SmartFabric OS10 Software
- CVE-2026-85210Oppia through 3.5.2 Missing Authorization on AdminRoleHandler GEToppia
- CVE-2026-85177CRMEB through 6.0.0 Unauthorized Message Modification via edit_messageCRMEB
- CVE-2026-85135ILIAS MediaPool ZipAdapter.php uploadMultipleSubtitleFileObject unrestricted uploadILIAS
- CVE-2026-84815WordPress Enfold theme <= 8.0 - Cross Site Scripting (XSS) vulnerabilityKriesi Enfold
- CVE-2026-82918XG VisionTerminal, XG-X VisionTerminal, LJ Series Terminal-Software and WI Series Terminal-Software provided by Keyence Corporation improperKeyence XG-X VisionTerminal · Keyence XG VisionTerminal +2
- CVE-2026-85107NousResearch hermes-agent Electron Main Process main.ts resourceBufferFromUrl allocation of resourcesNousResearch hermes-agent
- CVE-2026-3416Predictable Pseudorandom Number Generation via Webhook HMAC Secret Generation in Multiple WSO2 Products Allows Forged Event PayloadsWSO2 API Manager · WSO2 API Control Plane
- CVE-2026-71224Gfs2-utils: gfs2-utils: stack overflow via alloca(i_height) in metadata walkRed Hat Enterprise Linux
- CVE-2026-71222Gfs2-utils: gfs2-utils: heap out-of-bounds read via unchecked ea_num_ptrs in extended attribute processingRed Hat Enterprise Linux
- CVE-2026-71219Gfs2-utils: gfs2-utils: stack overflow via alloca(1<<di_depth) in hash table traversalRed Hat Enterprise Linux
- CVE-2026-78000Joomla Extension - j2commerce.com - Open redirect in cart controller in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5j2commerce.com J2Store extension for Joomla
- CVE-2026-85106NousResearch hermes-agent Link Title Fetch index.tsx fetchLinkTitle server-side request forgeryNousResearch hermes-agent
- CVE-2026-85173n8n before 2.36.2 Missing Authorization via Insights APIn8n-io n8n
- CVE-2026-85172n8n before 2.34.1 SSRF via Request Helper URI Validation Bypassn8n-io n8n
- CVE-2026-85167n8n before 2.36.2 Query Injection via Elasticsearch Firestore Nodesn8n-io n8n
- CVE-2026-85161AVideo removePoster.php Cross-Site Request Forgery File DeletionWWBN AVideo
- CVE-2026-85159AVideo Reflected XSS via cancelUri in userLogin.phpWWBN AVideo
- CVE-2026-85158AVideo Reflected XSS via videoEmbeded.php link parameterWWBN AVideo
- CVE-2026-85157WWBN AVideo Broken Access Control via feed/index.php program_idWWBN AVideo
- CVE-2026-85156WWBN AVideo Broken Access Control via Channel PageWWBN AVideo
- CVE-2026-85105NousResearch hermes-agent Session Management s71.py _sess_nowait authorizationNousResearch hermes-agent
- CVE-2026-15933Cleartext Storage of Sensitive Credentials in OptimiDoc Server (On-Premise)OptimiDoc Server
- CVE-2026-851002FastLabs agent-squad Streaming Agent Response Workflow orchestrator.ts AgentSquad.routeRequest resource consumption2FastLabs agent-squad
- CVE-2026-80253An improper physical access control issue exists in ShizenBox2 (dev-conf).Shizen Connect ShizenBox2
- CVE-2026-80254Authorization bypass through user-controlled key issue exists in ShizenBox2 (edge-app).Shizen Connect ShizenBox2
- CVE-2026-3852Divi <= 4.27.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Media Follow 'skype_url' Shortcode ParameterElegant Themes Divi
- CVE-2026-80757selinux: reject a class permission count below its inherited commonLinux
- CVE-2026-80756selinux: do not cancel a policy conversion that never startedLinux
- CVE-2026-80755selinux: reject a permission value exceeding the class permission countLinux
- CVE-2026-80746clk: qcom: dispcc-eliza: Fix disp_cc_mdss_mdp_clk_src RCG stall on Eliza EVKLinux
- CVE-2026-80744netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort pathLinux
- CVE-2026-80743ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlersLinux
- CVE-2026-80742af_packet: Don't send zero-byte data in tpacket_snd().Linux
- CVE-2026-80740drm/log: Fix infinite loop when scale is too large for displayLinux
- CVE-2026-80739net/mlx5e: TC, Check if flow is PEER before acquiring devcom lockLinux
- CVE-2026-80733net: remove WARN_ON_ONCE() from sk_mc_loop()Linux
- CVE-2026-80730ring-buffer: Fix crash passing ERR_PTR to kthread_stop()Linux
- CVE-2026-80729mm/huge_memory: initialise workingset state before folio splitLinux
- CVE-2026-80728Revert "drm/amdgpu: fix aperture mapping leak"Linux
- CVE-2026-80727x86/mce: Set up the polling timer before CMCI discoveryLinux
- CVE-2026-68860Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Reliance on Data/Memory Layout vulnerability.Dell PowerProtect Data Manager
- CVE-2026-74769Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain an Incorrect Authorization vulnerability in the REST API.Dell PowerProtect Data Manager
- CVE-2026-74768Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Server-Side Request Forgery (SSRF) vulnerability in the REST API.Dell PowerProtect Data Manager
- CVE-2026-17539RTU500 has a vulnerability, where high-load scenarios, such as sending GI requests at short intervals, may cause a NULL pointer dereference Hitachi Energy RTU500 series CMU firmware
- CVE-2026-9852A CSV injection vulnerability exists in SYS600.Hitachi Energy MicroSCADA SYS600
- CVE-2026-2573GutenKit <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'postBodyCss'ataurr GutenKit – Page Builder Blocks, Patterns, and Templa…
- CVE-2026-85040ZhongBangKeJi CRMEB Custom Scheduled Task Feature save eval os command injectionZhongBangKeJi CRMEB
- CVE-2021-43614VariableEditSmm: Error checking of UEFI variables could cause buffer overflow, leading to code executionInsyde Software InsydeH2O
- CVE-2021-43613SysPasswordDxe: Password hashes are exposed in runtime UEFI variables, leading to escalation of privilegeInsyde Software InsydeH2O
- CVE-2026-85030HKUDS AI-Trader selfRegister API Endpoint routes_agent.py logic errorHKUDS AI-Trader
- CVE-2026-85092LiME through 1.12.0 Arbitrary File Overwrite via Symlink Followingjtsylve LiME
- CVE-2026-85090FreeRDP before 3.31.0 Heap Out-of-Bounds Read via AVC444FreeRDP
- CVE-2026-85022langgenius dify WebApp Sign-In mail-and-password-auth.tsx router.replace cross site scriptinglanggenius dify
- CVE-2026-85021langgenius dify Splash Layout splash.tsx router.replace cross site scriptinglanggenius dify