CVEs published September 10, 2026
384 CVEs were published on September 10, 2026: 63 critical, 174 high.
- Published
- 384
- Critical
- 63
- High
- 174
- Medium
- 140
- Low
- 7
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 214
Most affected products
- IBM DataStage on Cloud Pak for Data
- 18
- IBM Langflow OSS
- 18
- GeoVision GV-LPC2011/LPC2211
- 17
- OISF suricata
- 15
- WWBN AVideo
- 12
- renovatebot renovate · mend renovate-ce +4
- 10
- rclone · github.com/rclone/rclone
- 9
- tesseract-ocr tesseract
- 8
- Apache Software Foundation Apache Artemis · Apache Software…
- 7
- Dell ThinOS
- 7
Critical 63
- CVE-2026-19646Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration AgentIBM Common Licensing
- CVE-2026-78573IBM ContextForge MCP Gateway is affected by use of default credentialsIBM ContextForge MCP Gateway
- CVE-2026-79724Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guardsIBM Langflow OSS
- CVE-2026-80424DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareIBM DataStage on Cloud Pak for Data
- CVE-2026-81204Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guardsIBM Langflow OSS
- CVE-2026-82100DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareIBM DataStage on Cloud Pak for Data
- CVE-2026-82107DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareIBM DataStage on Cloud Pak for Data
- CVE-2026-45764Suricata http2: protocol-change type confusion can lead to denial of serviceOISF suricata
- CVE-2026-75940A vulnerability was reported in Lenovo Health Android Application, distributed exclusively in the Chinese market, that could allow an attackLenovo Health Application
- CVE-2026-85025Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guardsIBM Langflow OSS
- CVE-2026-89094Forgejo before 16.0.4 allows remote code execution via a crafted template repository because template expansion on files in .forgejo/templatForgejo
- CVE-2026-89086In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proOCaml jose
- CVE-2026-88062OmniRoute ACP Custom-Agent Remote Code Execution (RCE)diegosouzapw OmniRoute · omniroute
- CVE-2026-89049Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager AgentAWS Amazon SSM Agent
- CVE-2026-89043passport-saml-encrypted through 0.1.13 XML Signature Wrapping via Assertion Prependingkrakenjs passport-saml-encrypted
- CVE-2026-89042passport-saml-encrypted through 0.1.13 Authentication Bypass via Missing Signature Verificationkrakenjs passport-saml-encrypted
- CVE-2026-85228Integer overflow in tensor buffer validation in Deep Java LibraryAmazon Deep Java Library
- CVE-2026-65639OS command injection in the advanced-rule parser of ConfigServer Security & Firewall allows a remote attacker who controls a configured alloWebPros ConfigServer Security & Firewall · ConfigServer Sec…
- CVE-2026-68487Path traversal in Plesk's Backup Manager causes arbitrary file write as root by an authenticated customer.WebPros Plesk
- CVE-2026-65638Improper escaping of a request URL in ConfigServer Security & Firewall allows an unauthenticated remote attacker to execute arbitrary commaWebPros ConfigServer Security & Firewall · ConfigServer Sec…
- CVE-2026-68488A Time-of-check Time-of-use (TOCTOU) race condition leading to insecure symlink following in Plesk causes local privilege escalation to rootWebPros Plesk
- CVE-2026-88044rclone: RC per-server auth-proxy bypassrclone · github.com/rclone/rclone
- CVE-2026-88018rclone serve s3: --auth-proxy without --auth-key authenticates nobody - full SigV4 signature bypassrclone · github.com/rclone/rclone
- CVE-2026-81046Dell ThinOS 10, versions prior to 2605_10.2616, contain a Protection Mechanism Failure vulnerability.Dell ThinOS
- CVE-2026-81468Dell ThinOS 10, versions prior to 2605_10.Dell ThinOS
- CVE-2026-81467Dell ThinOS 10, versions prior to 2605_10.Dell ThinOS
- CVE-2026-81048Dell ThinOS 10, versions prior to 2605_10.2616, contain an Improper Neutralization of Special Elements used in a Command ('Command InjectionDell ThinOS
- CVE-2026-88899knowns before 0.31.0 External Control of Agent Working Directory via x-opencode-directory Headerknowns-dev knowns
- CVE-2026-88007Traefik HTTP/3 Backend NTLM Connection Reusetraefik · github.com/traefik/traefik +2
- CVE-2026-81800WordPress Verified Reviews (Avis Vérifiés) plugin <= 2.4.6 - SQL Injection vulnerabilityPar avisverifies Verified Reviews
- CVE-2026-88887Renovate before 44.11.2 Credential Exfiltration via Link Headerrenovatebot renovate · mend renovate-ce +4
- CVE-2026-88882Renovate before 44.11.2 Credential Exfiltration via Link Headerrenovatebot renovate · mend renovate-ce +4
- CVE-2026-88881Renovate before 44.11.3 Credential Exfiltration via Link Headerrenovatebot renovate · mend renovate-ce +4
- CVE-2026-88880Renovate before 44.11.3 Credential Exfiltration via Link Headerrenovatebot renovate · mend renovate-ce +4
- CVE-2026-88877Traefik v3.7.0 Authentication Bypass via from-to-www-redirecttraefik
- CVE-2026-88869AVideo AD_Server Stored XSS via log.php label parameterWWBN AVideo
- CVE-2026-88868AVideo LiveLinks Stored XSS via title and description fieldsWWBN AVideo
- CVE-2026-88867WWBN AVideo Stored XSS via Category Name and Icon ClassWWBN AVideo
- CVE-2026-88866WWBN AVideo LoginControl Stored XSS via User-Agent HeaderWWBN AVideo
- CVE-2026-88864Capgo SSO Provider Authentication Bypass via PostgREST Direct WriteCap-go capgo.app
- CVE-2026-88860Capgo Authorization Bypass via Stale Channel Permission OverridesCap-go capgo.app
- CVE-2026-9163SQLi in GIS Informatics' GisLab Laboratory Management SystemGIS Informatics GisLab Laboratory Management System
- CVE-2026-78082Joomla Extension - joomshaper.com - Unauthenticated SQL Injection in Property Search and Map Filtering in SP Property < 4.1.4joomshaper.com SP Property extension for Joomla
- CVE-2026-8323Open Redirect in Armiya Information Technologies' Access Control SystemArmiya Information Technologies Ltd. Access Control System
- CVE-2026-88285GV-LPC2011/LPC2211 - Unauthenticated PTZ Control ServiceGeoVision GV-LPC2011/LPC2211
- CVE-2026-88278GV-LPCLPC2011/2211 - ONVIF WS-Security PasswordDigest ReplayGeoVision GV-LPCLPC2011/2211
- CVE-2026-44950fs_read_glyphs() heap buffer overflow via cumulative glyph data overflow in libXfont2Container suse/kiosk/tigervnc-x11vnc:1.14-63.8 · Contai… +71
- CVE-2026-59679fs_read_glyphs() heap OOB read/write via encoding array index mismatch in libXfont2Container suse/kiosk/tigervnc-x11vnc:1.14-63.8 · Contai… +71
- CVE-2026-7188SQLi in Armiya Information Technologies' Access Control SystemArmiya Information Technologies Ltd. Access Control System
- CVE-2026-80351Apache Camel K: Camel K Tenant repositories reach Maven execution inside operator podApache Software Foundation Apache Camel K
- CVE-2026-80352Apache Camel K: Camel K Master trait serviceAccountName YAML injection lets CR author apply arbitrary objectsApache Software Foundation Apache Camel K
- CVE-2026-78361zipMoney(Zip Co) Payments Plugin for WooCommerce < 2.4.0 - Unauthenticated Arbitrary Option DeletionzipMoney(Zip Co) Payments Plugin for WooCommerce
- CVE-2026-77770miniOrange 2FA (Free & Pro) - Unauthenticated Arbitrary Option Deletion via Out-of-Band Email Link ValidatorminiOrange 2FA
- CVE-2026-84939Apache FreeMarker, Apache FreeMarker: A malformed locale may be exploitable for path traversal attacksApache Software Foundation Apache FreeMarker · org.freemark…
- CVE-2026-49364Apache Artemis, Apache Artemis, Apache ActiveMQ Artemis, Apache ActiveMQ Artemis: Pre-Authentication Cluster Credential Exposure to Discovered PeersApache Software Foundation Apache Artemis · Apache Software…
- CVE-2026-57967Apache Artemis, Apache ActiveMQ Artemis: Missing authentication on CORE protocol session reattachmentApache Software Foundation Apache Artemis · Apache Software…
- CVE-2026-67593Apache Artemis, Apache Artemis, Apache ActiveMQ Artemis, Apache ActiveMQ Artemis: Pre-authentication Openwire protocol handling can result in queue deletionApache Software Foundation Apache Artemis · Apache Software…
- CVE-2026-19583Velociraptor Required Permissions bypass by using client monitoring queriesRapid7 Velociraptor
- CVE-2026-18351Drag and Drop File Upload for Elementor Forms <= 1.6.0 - Unauthenticated Arbitrary File Upload via 'type' Parameteraddonsorg Drag and Drop File Upload for Elementor Forms
- CVE-2026-38626Garlic-Hub v1.0.1 is vulnerable to SQL Injection in src/Modules/Items/Repositories/ItemsRepository.php.
- CVE-2026-52098An issue in Flowise 3.1.2 allows a remote attacker to execute arbitrary code via the /api/v1/prediction/<flowId> endpoint
- CVE-2026-68006An issue in Puma v.5.0.0 and before v.8.0.3 allows an attacker to execute arbitrary code via the ext/puma_http11/http11_parser.rl file
- CVE-2026-71640An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows unsafe vehicle motion via
High 174
- CVE-2026-77807AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 11.0.4 - Unauthenticated Arbitrary File Read via 'user[name]' Parameteracyba AcyMailing – An Ultimate Newsletter Plugin and Market…
- CVE-2026-17176OS Command Injection Vulnerability in Deco DevicesTP-Link Systems Deco BE11000 · TP-Link Systems Deco M9 Plus
- CVE-2026-16174Netskope Endpoint DLP Driver Integer Overflow Leading to Kernel Pool OverflowNetskope Endpoint DLP
- CVE-2026-2310IBM webMethods Integration Server is vulnerable to an XML external entity injection (XXE) attack when processing XML dataIBM webMethods Integration Server
- CVE-2026-75624IBM App Connect Enterprise is vulnerable to privilege escalation and Denial of ServiceIBM App Connect Enterprise
- CVE-2026-75777Multiple vulnerabilities in IBM Aspera Enterprise WebappsIBM Aspera Enterprise WebApps
- CVE-2026-76059Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guardsIBM Langflow OSS
- CVE-2026-78569Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guardsIBM Langflow OSS
- CVE-2026-78571Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guardsIBM Langflow OSS
- CVE-2026-45770Suricata lua: excessive flow variable registration can bypass sandboxOISF suricata
- CVE-2026-78575Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guardsIBM Langflow OSS
- CVE-2026-79742Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guardsIBM Langflow OSS
- CVE-2026-80378DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareIBM DataStage on Cloud Pak for Data
- CVE-2026-80380DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareIBM DataStage on Cloud Pak for Data
- CVE-2026-45769ikev2: unbounded client transform storage can lead to resource exhaustionOISF suricata
- CVE-2026-80434DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareIBM DataStage on Cloud Pak for Data
- CVE-2026-45768Suricata ldap: unbounded responses per transaction can lead to resource exhaustionOISF suricata
- CVE-2026-80436DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareIBM DataStage on Cloud Pak for Data
- CVE-2026-81207DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareIBM DataStage on Cloud Pak for Data
- CVE-2026-81210DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareIBM DataStage on Cloud Pak for Data
- CVE-2026-81211Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guardsIBM Langflow OSS
- CVE-2026-81941Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guardsIBM Langflow OSS
- CVE-2026-81213Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetchesIBM Langflow OSS
- CVE-2026-81265Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetchesIBM Langflow OSS
- CVE-2026-81268Langflow is vulnerable to authentication bypass and insufficient session expirationIBM Langflow OSS
- CVE-2026-81540DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareIBM DataStage on Cloud Pak for Data
- CVE-2026-81550DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareIBM DataStage on Cloud Pak for Data
- CVE-2026-81551DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareIBM DataStage on Cloud Pak for Data
- CVE-2026-81554DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareIBM DataStage on Cloud Pak for Data
- CVE-2026-81940Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guardsIBM Langflow OSS
- CVE-2026-82092DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareIBM DataStage on Cloud Pak for Data
- CVE-2026-82095DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareIBM DataStage on Cloud Pak for Data
- CVE-2026-82097DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareIBM DataStage on Cloud Pak for Data
- CVE-2026-45766Suricata nfs: unbounded stateful structures can lead to resource exhaustionOISF suricata
- CVE-2026-82098DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareIBM DataStage on Cloud Pak for Data
- CVE-2026-82099DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareIBM DataStage on Cloud Pak for Data
- CVE-2026-45765Suricata dnp3: unbounded reassembly can lead to resource exhaustionOISF suricata
- CVE-2026-84889A path traversal vulnerability in file handling components could allow an authenticated attacker to write files to arbitrary locations on the server filesystemIBM Langflow OSS
- CVE-2026-86093IBM® Db2® federated server could allow an attacker with the ability to control or impersonate a DRDA server endpoint to execute arbitrary commands under certain conditionsIBM Db2
- CVE-2026-87958IBM® Db2® is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user under certain conditionsIBM Db2
- CVE-2026-45762Suricata defrag: missing address-family check can lead to remote crashOISF suricata
- CVE-2026-45759Suricata http1: quadratic Content-Disposition processing can lead to denial of serviceOISF suricata
- CVE-2026-11813A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a local authenticated usLenovo FileZ Client · Lenovo FileZ Enterprise
- CVE-2026-18994A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distributed exclusively in theLenovo File Manager Application
- CVE-2026-19136A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, distributed exclusively in the Chinese markeLenovo Tianxi AI Agent PC Application
- CVE-2026-63427An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrarLenovo Software Fix
- CVE-2026-89011isomorphic-git < 1.42.0 Prototype Pollution via getRemoteInfoisomorphic-git
- CVE-2026-89087The cstruct package before 6.3.0 for OCaml mishandles indexes.OCaml cstruct
- CVE-2026-89054OpenNMS missing authorization on /api/v2 PATCH endpoints allows unauthenticated configuration changesThe OpenNMS Group Horizon
- CVE-2026-88060Angular: SSR XSS via Unescaped <template> Content Across DocumentFragment Boundaries in Fallback Raw-Content Elementsangular · @angular/platform-server
- CVE-2026-87993Consul-template vulnerable to an information disclosure issue in error handlingHashiCorp Tooling
- CVE-2026-88021Consul vulnerable to an authorization bypass in the Connect service meshHashiCorp Consul
- CVE-2026-88058Angular: SSR XSS via Unescaped Processing Instruction (<?...?>) Nodes in Fallback Raw-Content Elementsangular · @angular/platform-server
- CVE-2026-87090Consul vulnerable to an authorization bypass in the catalog node-write pathHashiCorp Consul
- CVE-2026-88056Angular: SSRF and Cross-Origin Credential Disclosure via URL Resolution Discrepancy in SSRangular · @angular/platform-server
- CVE-2026-88032Application denial of service via cancellation race in reactive client-side encryption in MongoDB Java DriverMongoDB Java Driver · org.mongodb:mongodb-crypt Maven pa… +1
- CVE-2026-88028Unauthorized document disclosure via query-operator injection in polymorphic relation identifiers in MongoDB integration for LaravelLaravel MongoDB
- CVE-2026-88027Mass deletion and overwrite of embedded documents via query-operator injection in embedded record keys in MongoDB integration for LaravelLaravel MongoDB
- CVE-2026-88026Regular expression injection via unescaped characters in LINQ query translation in MongoDB C# DriverMongoDB C# Driver
- CVE-2026-89046zstd-jni 1.5.5-6 through 1.5.7-13 Out-of-Bounds Read via Negative Offsetluben zstd-jni
- CVE-2026-88053Tesseract: Heap out-of-bounds write in Classify::ReadIntTemplates via unvalidated counts in crafted .traineddatatesseract-ocr tesseract
- CVE-2026-88052Tesseract: Heap out-of-bounds write in UNICHARSET::load_via_fgets via count/insert desynchronizationtesseract-ocr tesseract
- CVE-2026-88022Unauthorized document disclosure and deletion via query-operator injection in explicit equality filters in MongoDB integration for LaravelLaravel MongoDB
- CVE-2026-88051Tesseract: Heap out-of-bounds write in GenericVector<T>::read due to independent reserved/size_used_ fieldstesseract-ocr tesseract
- CVE-2026-15419CP210x Driver Memory Corruption results in Arbitrary Code ExecutionSilicon Labs silabser.sys driver
- CVE-2026-73699FileRun < 2026.3.0 PHP Object Injection via Perms::getPerms()FileRun
- CVE-2026-73698FileRun < 2026.3.0 Authenticated SQL Injection via Groups Add ActionFileRun
- CVE-2026-73694FileRun < 2026.3.0 OS Command Injection via escapeshellcmd() No-Op RedefinitionFileRun
- CVE-2026-73693FileRun < 2026.3.0 OS Command Injection via PhotoProofSheet HandlerFileRun
- CVE-2026-88049Tesseract: Heap out-of-bounds write in LSTM::Forward via na_/gate-matrix dimension mismatchtesseract-ocr tesseract
- CVE-2026-88048Tesseract: Heap out-of-bounds write/read in FullyConnected::Forward via layer/weight-matrix dimension mismatchtesseract-ocr tesseract
- CVE-2026-88047Tesseract: ReadNormProtos stack buffer overflowtesseract-ocr tesseract
- CVE-2026-88045rclone: S3 multipart declared-length memory exhaustionrclone · github.com/rclone/rclone
- CVE-2026-79987Low-privilege RCE through element-search eager loadingcraftcms cms
- CVE-2026-88017rclone: FTP cross-session auth-proxy backend confusionrclone · github.com/rclone/rclone
- CVE-2026-88016rclone: Directory metadata (chmod/chown/chtimes) applied through a planted symlink in rclone local --links escapes the destinationrclone · github.com/rclone/rclone
- CVE-2026-88959Anchor CMS through 0.12.7 Privilege Escalation via Missing Authorization on Admin User-Management Endpointsanchorcms Anchor CMS
- CVE-2026-4130Storage of Sensitive Information in Cleartext in NI SystemLinkNI SystemLink
- CVE-2026-4129Improper Access Controls in NI SystemLinkNI SystemLink
- CVE-2026-88939knowns through 0.33.0 Authorization Bypass via project.set Bootstrap Exemptionknowns-dev knowns
- CVE-2026-88938knowns through 0.33.0 Path Traversal via code.find MCP toolknowns-dev knowns
- CVE-2026-88937knowns through 0.33.0 Path Traversal via Template Engineknowns-dev knowns
- CVE-2026-88009Traefik: Rootless HTTP/1 request-target routes as "/" but is forwarded verbatim, bypassing path-scoped routing, middleware guards and access loggingtraefik · github.com/traefik/traefik/v3 +2
- CVE-2026-88008Traefik: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') and Incorrect Authorizationtraefik · github.com/traefik/traefik/v3 +2
- CVE-2026-88898AppFlowy-Cloud 0.7.2 through 0.9.64 Missing Workspace Authorization on Bulk Publish EndpointAppFlowy-IO AppFlowy-Cloud
- CVE-2026-88897Flextype CMS through 1.0.0-alpha.3 API Token Exposure via Query Stringflextype
- CVE-2026-88004Traefik entrypoint header-name sanitization bypassed via request trailerstraefik · github.com/traefik/traefik +2
- CVE-2026-88924Gvfs: gvfs-admin socket ownership race permits local rootGNOME gvfs · Red Hat Enterprise Linux
- CVE-2026-84821WordPress WP Fast Total Search plugin <= 1.82.284 - Broken Access Control vulnerabilityEpsiloncool WP Fast Total Search
- CVE-2026-84819WordPress WPAdverts plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerabilityGreg Winiarski WPAdverts
- CVE-2026-84816WordPress WPCS plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerabilityRealMag777 WPCS
- CVE-2026-81805WordPress SiteSkite plugin <= 2.1.5 - Privilege Escalation vulnerabilitySiteSkite
- CVE-2026-81804WordPress ZHBackup – Backup, Restore & Migration plugin <= 2.4.2 - Sensitive Data Exposure vulnerabilityZain Hassan ZHBackup – Backup, Restore & Migration
- CVE-2026-81803WordPress RepairBuddy plugin <= 4.1224 - Remote Code Execution (RCE) vulnerabilityAteeq Rafeeq RepairBuddy
- CVE-2026-81801WordPress WP-Stateless plugin <= 4.4.1 - Settings Change vulnerabilityUDX Usability Dynamics WP-Stateless
- CVE-2026-81799WordPress Return Refund and Exchange For WooCommerce plugin <= 4.6.4 - Broken Access Control vulnerabilityWP Swings Return Refund and Exchange For WooCommerce
- CVE-2026-81796WordPress WP Travel plugin <= 12.0.3 - Broken Authentication vulnerabilityWEN Solutions WP Travel
- CVE-2026-81795WordPress Page Visits Counter – Lite plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerabilityDenis Botić Page Visits Counter – Lite
- CVE-2026-81794WordPress Shirt Product Designer for WooCommerce plugin 1.0.4 - Broken Access Control vulnerabilitymlfactory Shirt Product Designer for WooCommerce
- CVE-2026-81789WordPress Advanced Product Fields Extended for WooCommerce plugin <= 3.1.6 - Arbitrary File Deletion vulnerabilityStudio Wombat Advanced Product Fields Extended for WooComme…
- CVE-2026-81786WordPress Thank You Page Customizer for WooCommerce plugin <= 1.2.2 - Broken Access Control vulnerabilityVillaTheme Thank You Page Customizer for WooCommerce
- CVE-2026-81784WordPress Wise Chat plugin <= 3.4.2 - PHP Object Injection vulnerabilityMarcin Wise Chat
- CVE-2026-81783WordPress MailMunch – Grow your Email List plugin <= 3.2.5 - Broken Authentication vulnerabilityMailMunch – Grow your Email List
- CVE-2026-45747Suricata lua/tls: null dereference in TlsGetCertInfoOISF suricata
- CVE-2026-46387Suricata http2: decompression bomb can cause denial of service in SuricataOISF suricata
- CVE-2026-75584ION-DTN < 4.2.1-a.1 Denial of Service via canonicalizePayloadBlock() Assertionnasa-jpl ION-DTN
- CVE-2026-64838ICEcoder through 8.1 Path Traversal via oldFileName ParameterICEcoder
- CVE-2026-64837ICEcoder through 8.1 OS Command Injection via lib/properties.phpICEcoder
- CVE-2026-64836ICEcoder through 8.1 Path Traversal via Ineffective File::check() ConfinementICEcoder
- CVE-2026-6285Improper Authentication in Ankaref's LIBRID/LIBREFAnkaref Innovation and Technology LIBRID/LIBREF
- CVE-2026-85217Man-in-the-Middle (MITM) Vulnerability in Autodesk Fusion DesktopAutodesk Fusion
- CVE-2026-88895CyberPanel before 3.0.5 Authentication Bypass via APIusmannasir cyberpanel
- CVE-2026-88893OpenPanel through 2.3.0 Unauthenticated Share Lookup Information DisclosureOpenpanel-dev openpanel
- CVE-2026-88891OpenPanel through 2.3.0 Read-Only Access Level Enforcement Bypass via MutationsOpenpanel-dev openpanel
- CVE-2026-88890OpenPanel through 2.3.0 SQL Injection via unvalidated profile filter column identifierOpenpanel-dev openpanel
- CVE-2026-88889Renovate before 44.14.7 Command Injection via distributionTyperenovatebot renovate · mend renovate-ce +4
- CVE-2026-88888Renovate before 44.14.7 Command Injection via Mix organizationrenovatebot renovate · mend renovate-ce +4
- CVE-2026-88886Renovate before 44.14.7 Command Injection via gradle-wrapperrenovatebot renovate · mend renovate-ce +4
- CVE-2026-88885Renovate before 44.14.7 Command Injection via depNamerenovatebot renovate · mend renovate-ce +4
- CVE-2026-88883Renovate before 44.14.4 TLS Private Key Log Sanitisationrenovatebot renovate · mend renovate-ce +4
- CVE-2026-88876AVideo PlayerSkins seo.php Missing Authorization Password-Protected VODWWBN AVideo
- CVE-2026-88874AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 Authentication BypassWWBN AVideo
- CVE-2026-88873WWBN AVideo Cross-Site Request Forgery via logArchive.json.phpWWBN AVideo
- CVE-2026-88872AVideo CustomizeUser setPassword.json.php CSRFWWBN AVideo
- CVE-2026-88870WWBN AVideo LoginControl PGP Key CSRF via GET RequestWWBN AVideo
- CVE-2026-88865AVideo Missing Authorization via getRestream.json.phpWWBN AVideo
- CVE-2026-88863capgo.app through 12.207.1 Privilege Escalation via invite_new_user_to_orgCap-go capgo.app
- CVE-2026-88862Capgo API Key Manager Authentication Bypass via x-limited-key-idCap-go capgo.app
- CVE-2026-88861Capgo AAL1 Session MFA Bypass via Direct RBAC AuthorizationCap-go capgo.app
- CVE-2026-88915MISP Event Template Instantiation Bypasses Sharing Group and Tagging AuthorizationMISP
- CVE-2026-85545There is an Vulnerability in some HikCentral Access Control versions.Hikvision HikCentral Access Control
- CVE-2026-9166LFI in GIS Informatics' GisLab Laboratory Management SystemGIS Informatics GisLab Laboratory Management System
- CVE-2026-87962t-digest 3.1 through 3.3 Denial of Service via Unvalidated Length Fields in MergingDigest.fromBytestdunning t-digest
- CVE-2026-87961ESP32-audioI2S 3.4.4 through 4.0.0 Heap-based Out-of-Bounds Read via Shadowed Length Parameter in read_ID3_Headerschreibfaul1 ESP32-audioI2S
- CVE-2026-78302Joomla Extension - joomshaper.com - Unauthenticated Cross-Site Scripting (XSS) via Unescaped Output in Views and Admin Lists in SP Property < 4.1.4joomshaper.com SP Property extension for Joomla
- CVE-2026-78083Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Property Booking and Agent Contact Endpoints in SP Property < 4.1.4joomshaper.com SP Property extension for Joomla
- CVE-2026-87803An authorization bypass vulnerability exists in the Countly Server DBViewer due to flawed sub-pipeline detection in the aggregation stage sacountly-server
- CVE-2026-42807A heap-based buffer overflow vulnerability in the PC bridge protocol decoder of BoschSensortec COINES_SDK (versions 2.10 through 2.12.2) allBosch Sensortec COINES_SDK
- CVE-2026-42805A stack-based buffer overflow vulnerability exists in the Bosch Sensortec BHI385 SensorAPI (C library) within the debug message parser functBosch Sensortec BHI385 SensorAPI
- CVE-2026-42804A stack-based buffer overflow vulnerability exists in the Bosch Sensortec BHI360 SensorAPI(C-Library) in versions up to and including commitBosch Sensortec BHI360_SensorAPI
- CVE-2026-13745Arbitrary Code Execution in Gemini CLI via Untrusted Local .env Files Overriding GEMINI_CLI_HOMEGoogle Cloud Gemini CLI
- CVE-2026-88290GV-LPC2011/LPC2211 - Unauthenticated VLSVR Slowloris and Memory Resource ExhaustionGeoVision GV-LPC2011/LPC2211
- CVE-2026-88289GV-LPC2011/LPC2211 - Multiple Pre-Authentication Stack Buffer Overflows in VLSVR Request HandlersGeoVision GV-LPC2011/LPC2211
- CVE-2026-88287GV-LPC2011/LPC2211 -ONVIF Discovery Probe Scopes Stack-Frame Overflow Denial of ServiceGeoVision GV-LPC2011/LPC2211
- CVE-2026-84042Crun: crun: rootful krun with passt executes container payload as host rootRed Hat Enterprise Linux · Red Hat Hardened Images +1
- CVE-2026-88286GV-LPC2011/LPC2211 - PTZ Connection-State Accept-Loop Denial of ServiceGeoVision GV-LPC2011/LPC2211
- CVE-2026-88282GV-LPCLPC2011/2211 - Stored FTP-Username Command InjectionGeoVision GV-LPCLPC2011/2211
- CVE-2026-88277GV-LPCLPC2011/2211 - ONVIF Subscribe Address Command InjectionGeoVision GV-LPCLPC2011/2211
- CVE-2026-88276GV-LPCLPC2011/2211 - Wireless WEP Key1-Key4 Command InjectionGeoVision GV-LPCLPC2011/2211
- CVE-2026-88275GV-LPC2011/LPC2211 - Wireless WPA-PSK Command InjectionGeoVision GV-LPC2011/LPC2211
- CVE-2026-88274GV-LPC2011/LPC2211 - Wireless SSID Command InjectionGeoVision GV-LPC2011/LPC2211
- CVE-2026-88273GV-LPC2011/LPC2211 - PPPoE Username Shell-Configuration Command InjectionGeoVision GV-LPC2011/LPC2211
- CVE-2026-88272GV-LPC2011/LPC2211 - Stored Administrator-Username Command InjectionGeoVision GV-LPC2011/LPC2211
- CVE-2026-88271GV-LPC2011/LPC2211 - SSVR Guest Configuration Overwrite and Administrative Credential TakeoverGeoVision GV-LPC2011/LPC2211
- CVE-2026-80354Apache Camel K: Camel K Builder trait mavenProfiles ValueSources resolve tenant-named secrets in operator namespaceApache Software Foundation Apache Camel K
- CVE-2026-82925Site Reviews 7.2.2 - 8.2.2 - Unauthenticated PHP Object Injection via Form SignatureSite Reviews
- CVE-2026-81431Registration Form for WooCommerce 1.1.0 - 1.1.2 - Contributor+ Privilege Escalation via Unvalidated tgwcfb_idRegistration Form for WooCommerce
- CVE-2026-77771miniOrange 2FA (Free & Pro) - 2FA Bypass via Session-Scoped OTP LockoutminiOrange 2FA
- CVE-2026-19439Ultimate Gift Cards for WooCommerce 3.0.3 - 3.2.9 - Unauthenticated Gift Card Code and Customer PII Disclosure via wps_uwgc_report_detailsUltimate Gift Cards for WooCommerce
- CVE-2026-19436Ultimate Gift Cards For WooCommerce < 3.2.10 - Unauthenticated Gift Card Value Inflation via Discounted PurchaseUltimate Gift Cards for WooCommerce
- CVE-2026-0310PAN-OS: Buffer Overflow Vulnerability via XML ProcessingPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-82079Potential Leakage of Nintendo Switch System Information Through a Proximity-Based Remote AttackNintendo Switch
- CVE-2026-49362Apache Artemis, Apache ActiveMQ Artemis: Missing Authentication in CORE Protocol Handler Allows Unauthorized Queue CreationApache Software Foundation Apache Artemis · Apache Software…
- CVE-2026-49363Apache Artemis, Apache ActiveMQ Artemis: Pre-Authentication Information Disclosure in CORE Protocol Topology SubscriptionApache Software Foundation Apache Artemis · Apache Software…
- CVE-2026-15019Direct Download for WooCommerce <= 1.19 - Unauthenticated Arbitrary File Read via 'file_id' Path Segmentkamalyon Direct Download for WooCommerce
- CVE-2026-76562Sidebar Manager Light <= 1.18 - Unauthenticated Stored Cross-Site Scripting via 'sbm_description' Parameterotwthemes Sidebar Manager Light
- CVE-2026-14873Bulk Password Reset <= 1.3.3 - Authenticated (Subscriber+) Arbitrary Password Resetrubenw Bulk Password Reset
- CVE-2026-19584Velociraptor VQL injection during notebook restore from backupRapid7 Velociraptor
- CVE-2025-57231Path Traversal in avatar attachments in Docmost v0.21.0 allows an unauthenticated malicious actor to disclose local files via a POST Request
- CVE-2026-71643An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a den
- CVE-2026-71645An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial
- CVE-2026-71647An issue in EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of servic
- CVE-2026-79591A heap-buffer-overflow and use-after-free vulnerability exists in the xls_getCSS() function of libxls 1.6.3 due to insufficient validation o
- CVE-2026-79592An out-of-bounds read vulnerability exists in the xls_dumpSummary() function of libxls 1.6.3 due to insufficient validation of file-controll
Medium, low and unrated 147
- CVE-2026-84941Omada Controller XML External Entity (XXE) Injection in SAML IdP Metadata Parsing Leading to Arbitrary Local File ReadTP-Link Systems Omada Software Controller · TP-Link Syst… +4
- CVE-2026-81906[UNREVIEWED] OAuth Callback Login Bypasses Deactivated-Account ChecksConcrete CMS
- CVE-2026-81905Concrete CMS below 9.5.3 does not enforce validation-hash type on redemption, allowing a hash issued for one purpose to be redeemed for another.Concrete CMS
- CVE-2026-18121Concrete CMS 9.5.2 and below is vulnerable to an authorization bypass (IDOR) in the Calendar block's frontend event dialog (/ccm/calendar/view_event/{bID}/{occurrence_id}).Concrete CMS
- CVE-2026-16172Netskope Endpoint DLP Service Out-of-Bounds Read Leading to Process CrashNetskope Endpoint DLP
- CVE-2026-49838GoBGP confederation validation panics on empty AS_PATH attributeosrg gobgp · github.com/osrg/gobgp/v4
- CVE-2026-49837GoBGP: BGP OPEN capability parser may read capability values outside declared CapLen boundariesosrg gobgp · github.com/osrg/gobgp/v4
- CVE-2026-54054Transmute has full-read SSRF in URL file import (POST /api/files/url) — no host/IP validation, follows redirectstransmute-app transmute
- CVE-2026-49836psd-tools: arbitrary file write via smart-object filenamepsd-tools
- CVE-2026-79723Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetchesIBM Langflow OSS
- CVE-2026-79725Langflow is vulnerable to unauthorized file system access due to path traversal and missing storage path validationIBM Langflow OSS
- CVE-2026-45767Suricata datasets: save to absolute filename can be bypassed when combined with load commandOISF suricata
- CVE-2026-86087IBM® Db2® could allow an authenticated user to send a specially crafted request to write arbitrary files on the systemIBM Db2
- CVE-2026-45761Suricata detect: case-insensitive frame handling can cause heap buffer overflow during rule loadOISF suricata
- CVE-2026-9667IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilitiesIBM WebSphere Application Server
- CVE-2026-9176IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilitiesIBM WebSphere Application Server
- CVE-2026-9225Langflow is vulnerable to unauthorized file system access due to path traversal and missing storage path validationIBM Langflow OSS
- CVE-2026-9327IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilitiesIBM WebSphere Application Server
- CVE-2026-3096Reverse Tabnabbing via New Tab Navigation in Multiple WSO2 Products Allows Phishing and Credential TheftWSO2 API Control Plane · WSO2 API Manager
- CVE-2026-45752Suricata detect/transform: use-after-free in decompress transformsOISF suricata
- CVE-2026-89089OpenNMS SQL injection in shipped Asset Management JasperReports via the DATE_FORMAT parameter (ROLE_USER)The OpenNMS Group Meridian · The OpenNMS Group Horizon
- CVE-2026-45751Suricata detect/transform: use-after-free in dotprefix transformOISF suricata
- CVE-2026-76652Authenticated Directory Traversal Vulnerability in File Upload Functionality in TP-Link TL-MR6400 and Archer MR600TP-Link Systems TL-MR6400 · TP-Link Systems Archer MR600
- CVE-2026-76653Missing Authentication in VPN Configuration Management in TP-Link TL-MR6400 and Archer MR600TP-Link Systems TL-MR6400 · TP-Link Systems Archer MR600
- CVE-2026-19596OpenNMS XML collector XXE allows arbitrary file read from the OpenNMS hostThe OpenNMS Group Meridian · The OpenNMS Group Horizon
- CVE-2026-84432Concrete CMS 9 through 9.5.2 is vulnerable to CSRFin the Boards custom slot dialog controllerConcrete CMS
- CVE-2026-88061career-ops: Local dashboard API accepted cross-origin and non-loopback requests, allowing unauthenticated command executionsantifer career-ops
- CVE-2026-88059Angular: Information Leak via `HttpTransferCache` Bypass When Using `withRequestsMadeViaParent`angular · @angular/common
- CVE-2026-87107Consul vulnerable to an authorization bypass in the catalog deregistration pathHashiCorp Consul
- CVE-2026-87106Consul vulnerable to a denial of service in the native RPC listenerHashiCorp Consul
- CVE-2026-88057Angular: Sanitization bypass via directive host bindings on concrete host elements in @angular/core and @angular/compilerangular · @angular/core +1
- CVE-2026-9336IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilitiesIBM WebSphere Application Server
- CVE-2026-9338IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilitiesIBM WebSphere Application Server
- CVE-2026-68527Concrete CMS 8.3.0 through 9.5.2 is vulnerable to an authorization bypass through user-controlled key (cross-calendar IDOR) in the Calendar event edit dialogConcrete CMS
- CVE-2026-88036GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C DriverMongoDB C Driver
- CVE-2026-88035Heap buffer overflow via wrapped size check during SASL username canonicalization in MongoDB C DriverMongoDB C Driver
- CVE-2026-88034GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C++ DriverMongoDB C++ Driver
- CVE-2026-88033GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Java DriverMongoDB Java Driver
- CVE-2026-88031GridFS data deletion via query-operator injection in file IDs in the MongoDB Go DriverMongoDB Go Driver
- CVE-2026-88030GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Ruby DriverMongoDB Ruby Driver
- CVE-2026-88029GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Python DriverMongoDB Python Driver · pymongo
- CVE-2026-88055AnythingLLM: Stored XSS Due to Unescaped Server-Side HTML Concatenation in MetaGeneratorMintplex-Labs anything-llm
- CVE-2026-88025GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C# DriverMongoDB C# Driver
- CVE-2026-88024GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Rust DriverMongoDB Rust Driver
- CVE-2026-88023GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB PHP LibraryMongoDB PHP Library · mongodb/mongodb
- CVE-2026-88054Tesseract: Denial of service via empty-stack dereference in Plumbing/Series at model loadtesseract-ocr tesseract
- CVE-2026-89045zstd-jni 1.4.8-4 through 1.5.7-13 Denial of Service via Negative Lengthluben zstd-jni
- CVE-2026-89044Netty 4.1.133.Final through 4.1.137.Final and 4.2.13.Final through 4.2.17.Final HTTP Request Smuggling via Transfer-Encodingnetty
- CVE-2026-15418CP210x Memory LeakageSilicon Labs silabser.sys driver
- CVE-2026-15417CP210x Denial of ServiceSilicon Labs silabser.sys driver
- CVE-2026-88050Tesseract: Out-of-bounds write in UnicharCompress via unvalidated recoder code valuestesseract-ocr tesseract
- CVE-2026-88046rclone: source object names can escape the configured root on uploadrclone · github.com/rclone/rclone
- CVE-2026-88015rclone local: crafted Range request against a translated symlink panics (DoS)rclone · github.com/rclone/rclone
- CVE-2026-88014rclone archive/zip: Zip Slip via unsanitized zip entry names lets a malicious archive escape its own namespacerclone · github.com/rclone/rclone
- CVE-2026-87913Missing S3 bucket ownership verification in the AWS Security Agent MCP serverAWS Security Agent MCP server
- CVE-2026-87912Missing S3 bucket ownership verification in the AWS Security Agent plugin for aws-agents-for-devsecopsAWS Security Agent plugin
- CVE-2026-88013rclone: http backend forwards custom/auth headers to a different host on redirectrclone · github.com/rclone/rclone
- CVE-2026-81049Dell ThinOS 10, versions prior to 2605_10.2616, contain a Missing Support for Integrity Check vulnerability.Dell ThinOS
- CVE-2026-81051Dell ThinOS 10, versions prior to 2605_10.2616, contain a Security Version Number Mutable to Older Versions vulnerability.Dell ThinOS
- CVE-2026-88012Traefik: respondingTimeouts.readTimeout is not applied to HTTP/3, leaving slow-body uploads unboundedtraefik · github.com/traefik/traefik +2
- CVE-2026-81052Dell ThinOS 10, versions prior to 2605_10.2616, contain a Download of Code Without Integrity Check vulnerability.Dell ThinOS
- CVE-2026-88011Traefik: ForwardAuth identity spoofing via dot-form header aliastraefik · github.com/traefik/traefik +2
- CVE-2026-88940knowns through 0.33.0 Arbitrary Directory Enumeration via workspace browse endpointknowns-dev knowns
- CVE-2026-88006Open WebUI: Users denied by the OAuth role policy can still sign in via token exchangeopen-webui
- CVE-2026-88005Open WebUI: Users denied by the OAuth domain allowlist or role policy can still sign in via token exchangeopen-webui
- CVE-2026-15461Type confusion in Zephyr HL78xx GNSS NMEA driver causes wild-pointer write from GNSS inputzephyrproject zephyr
- CVE-2026-81793WordPress Salon booking system plugin <= 10.31.9 - Broken Access Control vulnerabilityDimitri Grassi Salon booking system
- CVE-2026-81791WordPress EventON plugin <= 2.5.7 - Cross Site Scripting (XSS) vulnerabilityAshan Perera EventON
- CVE-2026-81788WordPress IMPress for IDX Broker plugin <= 3.3.0 - Broken Access Control vulnerabilityIMPress for IDX Broker
- CVE-2026-81787WordPress IMPress for IDX Broker plugin <= 3.3.0 - Broken Authentication vulnerabilityIMPress for IDX Broker
- CVE-2026-81785WordPress BuddyForms plugin <= 2.9.0 - Broken Access Control vulnerabilityThemekraft BuddyForms
- CVE-2026-81782WordPress WP Docs plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerabilityFahad Mahmood WP Docs
- CVE-2026-81275WordPress Youzify plugin <= 1.3.7 - Arbitrary File Download vulnerabilityYouzify
- CVE-2026-78536WordPress Robokassa payment gateway for Woocommerce plugin <= 1.8.9 - Broken Access Control vulnerabilityRobokassa payment gateway for Woocommerce
- CVE-2026-66674WordPress Simple Cloudflare Turnstile plugin <= 1.42.1 - Captcha Bypass vulnerabilityElliot Sowers/ RelyWP Simple Cloudflare Turnstile
- CVE-2026-66632WordPress Simple Cloudflare Turnstile plugin <= 1.42.1 - Content Injection vulnerabilityElliot Sowers/ RelyWP Simple Cloudflare Turnstile
- CVE-2026-85310WordPress Groundhogg plugin <= 4.7.1 - Path Traversal vulnerabilityAdrian Tobey Groundhogg
- CVE-2026-88790proma-ai Proma File Preview Service file-preview-service.ts resolveTargetPath path traversalproma-ai Proma
- CVE-2026-12682Stored XSS in Ankaref's LIBRID/LIBREFAnkaref Innovation and Technology LIBRID/LIBREF
- CVE-2026-88921MISP: Unescaped HTML Injection in PDF Report Element RenderingMISP
- CVE-2026-45763Suricata lua: sandbox allocation limit not enforced for new allocationsOISF suricata
- CVE-2026-12683Stored XSS Yönetim panel in Ankaref's LIBRID/LIBREFAnkaref Innovation and Technology LIBRID/LIBREF
- CVE-2026-88896EspoCRM before 10.0.4 SSRF via IPv6 Transition Address Bypassespocrm
- CVE-2026-88894Snipe-IT before 8.7.2 Authorization Bypass via Predefined Kit Checkoutgrokability snipe-it
- CVE-2026-88892OpenPanel through 2.3.0 SSRF via Unguarded Importer File URL FetchOpenpanel-dev openpanel
- CVE-2026-88884Renovate before 44.3.1 Authentication Bypass via Digest Updatesrenovatebot renovate · mend renovate-ce +4
- CVE-2026-88879Traefik before v2.11.56 Identity Spoofing via Header Aliastraefik · github.com/traefik/traefik/v2 +2
- CVE-2026-88878Traefik v2.8.2 through v3.6 HTTP/3 Timeout Bypasstraefik · github.com/traefik/traefik/v2 +2
- CVE-2026-88875AVideo Incomplete API Sanitization Information DisclosureWWBN AVideo
- CVE-2026-88871WWBN AVideo CustomizeUser setSubscribers CSRF via GETWWBN AVideo
- CVE-2026-85543Some Wi-Fi series camera products have insufficient permission validation on certain interfaces, allowing authenticated low-privileged usersHikvision Wi-Fi series camera
- CVE-2026-85544Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction withHikvision DS-KV9503 · Hikvision DS-KV6113 +11
- CVE-2026-88038cookies vulnerable to Set-Cookie attribute injection via unvalidated domain and path optionscookies
- CVE-2026-9161User Enumeration in DernekPlus' Website TemplateDernekPlus Website Template
- CVE-2026-17038Use of Hard-coded Credentials in drEryk GabinetdrEryk Gabinet
- CVE-2026-88859Evolution: evolution: javascript execution via spoofed vcard control bypasses mail script-markup restrictionRed Hat Enterprise Linux
- CVE-2026-84828Pcs: pcs: non-root haclient users can read arbitrary files via pcs host auth --tokenRed Hat Enterprise Linux · Red Hat OpenShift Container P… +1
- CVE-2026-78085Joomla Extension - joomshaper.com - Path Traversal in Gallery Image Management in SP Property < 4.1.4joomshaper.com SP Property extension for Joomla
- CVE-2026-78374Joomla Extension - joomlart.com - Open mail relay via contact AJAX endpoint in T4 Page Builder extension < 2.3.0joomlart.com T4 Page Builder extension for Joomla
- CVE-2026-78084Joomla Extension - joomshaper.com - Missing Access Control in Gallery Image Management in SP Property < 4.1.4joomshaper.com SP Property extension for Joomla
- CVE-2026-78303Joomla Extension - joomshaper.com - Unvalidated Email Destination & Form Manipulation in Booking Requests in SP Property < 4.1.4joomshaper.com SP Property extension for Joomla
- CVE-2026-15889Aruba HiSpeed Cache <= 3.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Contentarubadev Aruba HiSpeed Cache
- CVE-2026-5399Redux Framework <= 4.5.13.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Slider Field Valuedavidanderson Redux Framework
- CVE-2026-42808An issue was discovered in Bosch Sensortec COINES_SDK versions 2.0 through 2.11.Bosch Sensortec COINES_SDK
- CVE-2026-42806An out-of-bounds read vulnerability was discovered in the Bosch BME690 SensorAPI (C-driver) in version v1.0.3 and prior, specifically withinBosch Sensortec BME690 SensorAPI
- CVE-2026-88265Crun: crun: /dev/null symlink follow during stdio reopen allows host bind-mount write and chownRed Hat Hardened Images · Red Hat Enterprise Linux +1
- CVE-2026-88264Crun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfscontainers crun · Red Hat Hardened Images +2
- CVE-2026-88288GV-LPC2011/LPC2211 - Arbitrary File Read Through BKDownloadLink.cgi Symlink CreationGeoVision GV-LPC2011/LPC2211
- CVE-2026-88284GV-LPC2011/LPC2211 - ONVIF SetUser Repeated-Element Stack-Frame Overflow Denial of ServiceGeoVision GV-LPC2011/LPC2211 -
- CVE-2026-88283GV-LPC2011/LPC2211 - ONVIF CreateUsers Repeated-Element Stack-Frame Overflow Denial of ServiceGeoVision GV-LPC2011/LPC2211
- CVE-2026-88281GV-LPC2011/LPC2211 - ONVIF DeleteUsers Repeated-Element Stack Overflow Denial of ServiceGeoVision GV-LPC2011/LPC2211
- CVE-2026-88280GV-LPC2011/LPC2211 - ONVIF SetUser Stack-Frame Overflow Denial of ServiceGeoVision GV-LPC2011/LPC2211
- CVE-2026-88279GV-LPC2011/LPC2211 - ONVIF CreateUsers Username/Password Stack-Frame Overflow Denial of ServiceGeoVision GV-LPC2011/LPC2211
- CVE-2026-88270GV-LPC2011/LPC2211 - SSVR Guest Firmware-Mode Pre-Validation Service Teardown Denial of ServiceGeoVision GV-LPC2011/LPC2211
- CVE-2026-88269GV-LPC2011/LPC2211 - SSVR Guest Configuration and Credential DisclosureGeoVision GV-LPC2011/LPC2211
- CVE-2026-88268GV-LPC2011/LPC2211 - SSVR Fragment-Reassembly Stack Overflow Denial of ServiceGeoVision GV-LPCLPC2011/2211
- CVE-2026-88770Keycloak-services: keycloak-services: device authorization grant issues tokens to brute-force-locked accountsRed Hat Build of Keycloak · Red Hat Single Sign-On
- CVE-2026-88763Skupper-router: skupper-router: unbounded recursion in amqp field parser leads to denial of serviceRed Hat Service Interconnect 2 for RHEL
- CVE-2026-82582An authorization bypass vulnerability exists in SHIRASAGI through a user-controlled key, which may allow an unauthorized attacker to retrievSHIRASAGI Project SHIRASAGI
- CVE-2026-81635A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an attacker to execute an arbitrary script in the web browser of aSHIRASAGI Project SHIRASAGI
- CVE-2026-0302Checkov by Prisma Cloud: OS Command Injection VulnerabilityPalo Alto Networks Checkov by Prisma Cloud
- CVE-2026-0303Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration FilePalo Alto Networks Checkov by Prisma Cloud
- CVE-2026-0304Cortex XDR Broker VM: Privilege Escalation VulnerabilityPalo Alto Networks Cortex XDR Broker VM
- CVE-2026-19840Notiqoo < 1.4.14 - Contributor+ Arbitrary Option Update via Multiple AJAX ActionsNotiqoo
- CVE-2026-0305Prisma Access Agent: Information Disclosure Vulnerability on LinuxPalo Alto Networks Prisma Access Agent
- CVE-2026-0306Prisma Access Agent: EndPoint DLP Bypass Vulnerability on WindowsPalo Alto Networks Prisma Access Agent
- CVE-2026-0307GlobalProtect App: Local Privilege Escalation VulnerabilitiesPalo Alto Networks GlobalProtect App
- CVE-2026-0308PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web InterfacePalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0309PAN-OS: Authenticated Command Injection in CLI with Luna HSM ConfigurationPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-85645Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.46 - Reflected Cross-Site ScriptingForm Maker by 10Web – Mobile-Friendly Drag & Drop Contact F…
- CVE-2026-57822Apache Artemis, Apache ActiveMQ Artemis: Message-based management parameter deserialization may lead to denial of serviceApache Software Foundation Apache Artemis · Apache Software…
- CVE-2026-75880Apache Artemis, Apache ActiveMQ Artemis: Message selector wildcard handling could lead to denial of serviceApache Software Foundation Apache Artemis · Apache Software…
- CVE-2026-4657Easy Google Fonts <= 2.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via control_selectors Meta Fieldsunny_johal Easy Google Fonts
- CVE-2026-15820Builderall for WordPress <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Photo Module 'attributes' SettingBuilderall for WordPress
- CVE-2026-18594Advanced Contact form 7 DB <= 2.1.3 - Missing Authorization to Authenticated (Custom+) Unauthorized Data Import via 'import_cf7_id'vsourz1td Advanced Contact form 7 DB
- CVE-2026-18386WP BackItUp Community Edition <= 2.1.0 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'backup_file' Parametercssimmon WP BackItUp Community Edition
- CVE-2026-15823Builderall for WordPress <= 3.0.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Modification via 'ba_cheetah_data[post_id]' ParameterBuilderall for WordPress
- CVE-2026-15796Builderall for WordPress <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'bg_video_service_url' SettingBuilderall for WordPress
- CVE-2026-87870Ninja Forms - Scheduled Exports <= 3.0.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via REST API ParametersSaturday Drive Ninja Forms - Scheduled Exports
- CVE-2026-84063BurgerEditor 3.2.0 through 3.4.0 contains an issue with unrestricted upload of file with dangerous type.D-ZERO CO. BurgerEditor
- CVE-2026-84062BurgerEditor 3.0.0 through 3.4.0 contains an issue with authorization bypass through user-controlled key.D-ZERO CO. BurgerEditor
- CVE-2026-87933DaveGamble cJSON cJSON_Utils.c cJSONUtils_MergePatch use after freeDaveGamble cJSON
- CVE-2022-26962Italtel NFV 11.1.2-20210318 allows Multiple Stored XSS under NP_BCCAS-RMCTRL-01/IMCSCIWebGui/configuration.jsp?opration=list&object=announce
- CVE-2026-36392FairSketch Rise CRM Version 3.9.6 is vulnerable to Cross Site Scripting (XSS).
- CVE-2026-52097An issue in AppFlowy 0.11.8 allows a remote attacker to execute arbitrary code via the afLaunchUri, _afLaunchLocalUri (url_launcher.dart), O
- CVE-2026-71642An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a den
- CVE-2026-79590A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0.