CVEs published September 23, 2026
472 CVEs were published on September 23, 2026: 43 critical, 190 high. 4 are now in CISA KEV.
- Published
- 472
- Critical
- 43
- High
- 190
- Medium
- 210
- Low
- 28
- Unrated
- 1
- Now in CISA KEV
- 4
- Fix available
- 257
Most affected products
- Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- 30
- rabbitmq-server · rabbitmq
- 25
- Red Hat Ansible Automation Platform 2.5 for RHEL · Red H… +1
- 18
- IBM Financial Transaction Manager (FTM) for RedHat OpenShift
- 13
- Apache Software Foundation Apache Tomcat
- 12
- IBM Concert
- 9
- Dell Secure Connect Gateway (SCG) Policy Manager
- 8
- moquette-io moquette · io.moquette:moquette-broker
- 8
- GitLab
- 7
- IBM DataStage on Cloud Pak for Data
- 7
Critical 43
- CVE-2026-89078Double Free in GitLabGitLab
- CVE-2026-93577Integer Overflow or Wraparound in GitLabGitLab
- CVE-2026-93352Laravel-Mediable 7.0.0 < 7.0.2 RCE via .pht File Uploadplank laravel-mediable
- CVE-2026-6928Multiple Vulnerabilities in IBM Concert SoftwareIBM Concert
- CVE-2026-67231RabbitMQ: Trust-store whitelist by Issuer+Serial onlyrabbitmq-server · rabbitmq
- CVE-2026-6730Multiple Vulnerabilities in IBM Concert SoftwareIBM Concert
- CVE-2026-6721Multiple Vulnerabilities in IBM Concert SoftwareIBM Concert
- CVE-2026-67404RabbitMQ: OAuth2 silent verify_none fallback for JWKS fetchrabbitmq-server · rabbitmq
- CVE-2026-87899Execution with unnecessary privileges in cPanel allows remote authenticated users to execute arbitrary code with root privileges.WebPros cPanel
- CVE-2026-87900Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary files and execute aWebPros WP Toolkit for cPanel
- CVE-2026-87898OS command injection in Plesk allows remote authenticated users to execute arbitrary code with root privileges.WebPros Plesk extension "Site Import"
- CVE-2026-84719Automation-controller: automation-controller: workflowjobtemplate /copy/ deep-copy sanitizer omits instance_groups authorization (instancegroup use_role bypass to control-plane)Red Hat Ansible Automation Platform 2.4 for RHEL · Red H… +2
- CVE-2026-75884Awx: awx: privilege escalation to openshift namespace via pod_spec_override injection in container groupsRed Hat Ansible Automation Platform 2.4 for RHEL · Red H… +2
- CVE-2026-96770s2s-proxy accepts untrusted client certificatesTemporal Technologies s2s-proxy
- CVE-2026-77602OpenC3 COSMOS: Authenticated remote code execution via the user-writable config overlay (table definitions, cmd/tlm definitions, and script suites)OpenC3 cosmos · openc3
- CVE-2026-84502Automation-controller: automation-controller-container: automation-controller: project scm_url argument injection into `git ls-remote --upload-pack` yields rce on the controller-task control-plane podRed Hat Ansible Automation Platform 2.4 for RHEL · Red H… +2
- CVE-2026-84474Automation-controller: automation-controller-container: automation-controller: view_jobtemplate to execute privilege escalation via host_config_key exposure and x-forwarded-for spoofing of provisioning-callback host matchRed Hat Ansible Automation Platform 2.4 for RHEL · Red H… +2
- CVE-2026-95601WordPress Product Filter by WBW plugin <= 3.1.7 - SQL Injection vulnerabilityWBW Plugins Product Filter by WBW
- CVE-2026-63132OpenBao's Recovery Mode Vulnerable To Token Leakage via Timing Attackopenbao · github.com/openbao/openbao
- CVE-2026-86934An authorization bypass vulnerability in the FileMaker Server Web Publishing Engine allowed requests containing an extended privilege headerClaris FileMaker Server
- CVE-2026-86930An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially crafted image file to a containeClaris FileMaker Server
- CVE-2026-95848Moquette fails open when configured authentication or authorization classes cannot loadmoquette-io moquette · io.moquette:moquette-broker
- CVE-2026-85724Moquette pattern ACL wildcard injection allows cross-tenant authorization bypassmoquette-io moquette · io.moquette:moquette-broker
- CVE-2026-96759orval before 8.29.0 Code Injection via operationIdorval-labs orval
- CVE-2026-96758orval @orval/core before 8.28.0 Code Injection via Form-Dataorval-labs orval
- CVE-2026-96757orval before 8.29.0 Code Injection via unescaped OpenAPI media-typeorval-labs orval
- CVE-2026-96756orval before 8.30.0 Code Injection via Factory Generationorval-labs orval
- CVE-2026-96755orval @orval/effect 8.14.0 through 8.28.1 Code Injectionorval-labs orval
- CVE-2026-96754orval @orval/hono before 8.29.0 Code Injection via OpenAPI Pathorval-labs orval
- CVE-2026-18872IBM Financial Transaction Manager (FTM) is Impacted by Multiple VulnerabilitiesIBM Financial Transaction Manager (FTM) for RedHat OpenShift
- CVE-2026-59167SunEditor: Critical XSS vulnerability - sanitizer bypassJiHong88 suneditor · suneditor
- CVE-2026-96560LightLLM through 1.2.0 Unauthenticated Remote Code Execution via NCCL PD RPyC Control ChannelModelTC LightLLM
- CVE-2026-86708Sensitive data exposureZohocorp ManageEngine Applications Manager
- CVE-2026-19599Remote Code Execution vulnerabilityZohocorp ManageEngine OpManager
- CVE-2026-86246Apache Tomcat Native: Insecure OpenSSL options enabledApache Software Foundation Apache Tomcat Native
- CVE-2026-86350Apache Tomcat: Regression in fix for CVE-2026-41293 can trigger request header mix-upApache Software Foundation Apache Tomcat
- CVE-2026-86248Apache Tomcat: Fix for CVE-2026-34500 was incomplete. OCSP checks sometimes soft-fail with FFM even when soft-fail is disabledApache Software Foundation Apache Tomcat
- CVE-2026-76183Apache Tomcat: Bypass of security constraints for WebSocket endpointsApache Software Foundation Apache Tomcat
- CVE-2026-82331Apache BuildStream: tar source extraction escapeApache Software Foundation Apache BuildStream
- CVE-2026-82843WP OAuth Server < 6.4.0 - Subscriber+ Cross-User Account Takeover via OIDC ID Token SubstitutionWP OAuth Server
- CVE-2026-75799YAHMAN Add-ons < 0.9.31 - Unauthenticated Arbitrary File Upload via Blog Card CacheYAHMAN Add-ons
- CVE-2026-96257Fast FAC1203R Gigabit Edition Device Discovery Service copy_msg_element stack-based overflowFast FAC1203R Gigabit Edition
- CVE-2025-63564SQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to execute arbitrary code via crafted HTTP re
High 190
- CVE-2026-82370Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP serviceBrocade SANnav
- CVE-2026-92470Missing Authorization in GitLabGitLab
- CVE-2026-70125Microsoft Office Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-81537DataStage on Cloud Pak for Data has several vulnerabilitiesIBM DataStage on Cloud Pak for Data
- CVE-2026-81536DataStage on Cloud Pak for Data has several vulnerabilitiesIBM DataStage on Cloud Pak for Data
- CVE-2026-81208DataStage on Cloud Pak for Data has several vulnerabilitiesIBM DataStage on Cloud Pak for Data
- CVE-2026-80423DataStage on Cloud Pak for Data has several vulnerabilitiesIBM DataStage on Cloud Pak for Data
- CVE-2026-86583Import and export users and customers <= 2.4.17 - Authenticated (Subscriber+) Privilege Escalation via CSV Escape-Character Mismatch in Export/Import Round Trip via display_name and nickname Profile Fieldscarazo Import and export users and customers
- CVE-2026-19125EthPress <= 2.3.5 - Unauthenticated Authentication Bypasslynn999 EthPress – Web3 Login
- CVE-2026-75887Openshift/console: openshift/console: unauthenticated path traversal in i18n locale handlerRed Hat OpenShift Container Platform
- CVE-2026-80425DataStage on Cloud Pak for Data has several vulnerabilitiesIBM DataStage on Cloud Pak for Data
- CVE-2026-80412DataStage on Cloud Pak for Data has several vulnerabilitiesIBM DataStage on Cloud Pak for Data
- CVE-2026-80379DataStage on Cloud Pak for Data has several vulnerabilitiesIBM DataStage on Cloud Pak for Data
- CVE-2026-6935Multiple Vulnerabilities in IBM Concert SoftwareIBM Concert
- CVE-2026-6794Multiple Vulnerabilities in IBM Concert SoftwareIBM Concert
- CVE-2026-75886Openshift/console: openshift/console: unauthenticated reverse proxy to in-cluster catalogd service with session token forwardingRed Hat OpenShift Container Platform
- CVE-2026-82369Insufficient input sanitization of shell metacharacters in Brocade SANnav before 3.0.1aBrocade SANnav
- CVE-2026-67232RabbitMQ: Web-MQTT decompression bombrabbitmq-server · rabbitmq
- CVE-2026-67235RabbitMQ: AMQP 0-9-1 body assembly never validates accumulated sizerabbitmq-server · rabbitmq
- CVE-2026-66077RabbitMQ: Stored XSS via TLS peer-certificate DN in management UIrabbitmq-server · rabbitmq
- CVE-2026-66079RabbitMQ: Pre-auth AMQP 1.0 array32 zero-width element DoSrabbitmq-server · rabbitmq
- CVE-2026-66070RabbitMQ: CORS * reflects Origin with Allow-Credentialsrabbitmq-server · rabbitmq
- CVE-2026-67238RabbitMQ: Atom-table exhaustion via reply-to queue name decodingrabbitmq-server · rabbitmq
- CVE-2026-68492An untrusted search path vulnerability in Plesk from 18.0.34 before 18.0.80.8 and 18.0.81 before 18.0.81.1 allows remote authenticated usersWebPros Plesk
- CVE-2026-68490Incorrect permission assignment allows local users to obtain sensitive CalDAV/CardDAV information belonging to other accounts.WebPros cPanel
- CVE-2026-96889Librsvg: use-after-free when xml includes have duplicated entitiesRed Hat Enterprise Linux · librsvg
- CVE-2026-85475Automation-controller: automation-controller-container: automation-controller: rsyslog configuration injection via log_aggregator_* settings leads to remote code execution in the control-plane rsyslog componentRed Hat Ansible Automation Platform
- CVE-2026-84714Automation-controller: automation-controller: incomplete sanitize_jinja() regex allows jinja template injection into ad-hoc module_args, machine-credential fields, and host names, reaching ansible-core templating in the execution environmentRed Hat Ansible Automation Platform 2.5 for RHEL · Red H… +1
- CVE-2026-84706Automation-controller: automation-controller-container: automation-controller: credential type env-injector deny-list omits process-hijacking variables (bash_env/ld_preload) allowing code execution in the execution environmentRed Hat Ansible Automation Platform 2.5 for RHEL · Red H… +1
- CVE-2026-96826WordPress W4 Post List plugin <= 3.0.6 - SQL Injection vulnerabilityShazzad Hossain Khan W4 Post List
- CVE-2026-82405Klever-Go Account takeover: `kleverUpdateAccountPermission` authorizes on attacker-controlled `RecipientAddr` instead of the authenticated callerklever-io klever-go · github.com/klever-io/klever-go
- CVE-2026-82409Klever-Go: Elasticsearch bulk / painless injection via on-chain account name -> explorer/indexer data forgeryklever-io klever-go · github.com/klever-io/klever-go
- CVE-2026-82407Klever-Go: Validator registration accepts an unvalidated BLS public key → consensus liveness DoSklever-io klever-go · github.com/klever-io/klever-go
- CVE-2026-86065Klever-Go: Unauthenticated WebSocket /subscribe: no read-size limit, no connection cap, permissive origin -> remote node memory/goroutine exhaustion (DoS)klever-io klever-go · github.com/klever-io/klever-go
- CVE-2026-86064Klever-Go: /log controls global node loggingklever-io klever-go · github.com/klever-io/klever-go
- CVE-2026-82406Klever-Go: Zombie-order theft: `Buy` missing `IsClaimed` guard in native marketplaceklever-io klever-go · github.com/klever-io/klever-go
- CVE-2026-84691Automation-controller: automation-controller-container: automation-controller: format string injection in the api 4xx error log setting discloses django secret_key and database credentials to an administratorRed Hat Ansible Automation Platform 2.5 for RHEL · Red H… +1
- CVE-2026-84683Automation-controller: automation-controller-container: automation-controller: stored cross-site scripting in the job stdout html view via ansi osc 8 hyperlink sequences (javascript: anchor) enabling session takeoverRed Hat Ansible Automation Platform 2.5 for RHEL · Red H… +1
- CVE-2026-94183Address bar spoofing risk in affected Android versions of Arc SearchThe Browser Company of New York Arc Search
- CVE-2026-94181Address Bar Spoof Risk; Missing Fullscreen Notification via Select ElementThe Browser Company of New York Arc
- CVE-2026-77394OpenC3 COSMOS: Stored, cross-user XSS via Telemetry screen BUTTON widgetOpenC3 cosmos · @openc3/vue-common
- CVE-2026-77601OpenC3 COSMOS: Authenticated OS command injection via the `pypi_url` settingOpenC3 cosmos · openc3
- CVE-2026-84499Automation-controller: automation-controller-container: automation-controller: write-only survey password recovered in plaintext via schedule/workflowjobtemplatenode survey min/max validation error messageRed Hat Ansible Automation Platform 2.5 for RHEL · Red H… +1
- CVE-2026-61695Wire Swift runtime: negative LENGTH_DELIMITED length in skipGroup() crashes any protobuf-decoding servicesquare wire · github.com/square/wire
- CVE-2026-90903Joomla Extension - joomshaper.com - Missing CSRF Token Verification across Administrator AJAX API Endpoints in Easy Store extension 1.0.0-3.0.0joomshaper.com Easy Store extension for Joomla
- CVE-2026-90901Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Media Image Deletion in Easy Store extension 1.0.0-3.0.0joomshaper.com Easy Store extension for Joomla
- CVE-2026-90905Joomla Extension - joomshaper.com - Missing CSRF and Access Control on Site Configuration Update in Easy Store extension 1.0.0-3.0.0joomshaper.com Easy Store extension for Joomla
- CVE-2026-59990Jawn: Uncontrolled nesting depth in JSON parsertypelevel jawn · org.typelevel:jawn-parser_2.12 +2
- CVE-2026-82368Insecure access controls on internal service ports in Brocade SANnav versions before 3.0.1a allow local, non-administrative host users to coBrocade SANnav
- CVE-2026-90902Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Coupon Bulk Update in Easy Store extension 1.0.0-3.0.0joomshaper.com Easy Store extension for Joomla
- CVE-2026-61814Jawn: Quadratic parsing effort in AsyncParsertypelevel jawn · org.typelevel jawn-parser_2.12 +5
- CVE-2026-90904Joomla Extension - joomshaper.com - Broken Access Control (ACL Bypass) in ApiController Record Editing in Easy Store extension 1.0.0-3.0.0joomshaper.com Easy Store extension for Joomla
- CVE-2026-90899Joomla Extension - joomshaper.com - Unauthenticated PII Exposure via IDOR in Guest Checkout in Easy Store extension 1.0.0-3.0.0joomshaper.com Easy Store extension for Joomla
- CVE-2026-84486Automation-controller: automation-controller-container: automation-controller: unauthenticated debug scheduler-trigger endpoints (allowany, routed without debug guard) allow advisory-lock starvation of job dispatch (dos)Red Hat Ansible Automation Platform 2.6 for RHEL · Red Hat…
- CVE-2026-76087Formie: Unauthenticated users can overwrite incomplete submissions via submit actionverbb formie · verbb/formie
- CVE-2026-76086Formie: Integration form-settings action allows SSRF and exfiltration of stored integration credentialsverbb formie · verbb/formie
- CVE-2026-76089Formie: Missing authorization on sent notification resend modal exposes submission PIIverbb formie · verbb/formie
- CVE-2026-82356Imprivata EAM: Unrotatable X.509 RSA Key Pair in ProductionImprivata Enterprise Access Management
- CVE-2026-76648Automation-controller: automation-controller-container: aap controller: copyapiview.post() missing read authorization check enables job template secret recoveryRed Hat Ansible Automation Platform
- CVE-2026-77423JLine: ReDoS in Built-in Less Viewer Searchjline3
- CVE-2026-95604WordPress Loops & Logic plugin <= 4.2.4 - Broken Access Control vulnerabilityTangible Loops & Logic
- CVE-2026-95603WordPress Reycob Product Import Export plugin <= 2.3.0 - PHP Object Injection vulnerabilityVictor Rodriguez Reycob Product Import Export
- CVE-2026-95593WordPress Ultimeter plugin <= 3.0.8 - SQL Injection vulnerabilityBen Roberts Ultimeter
- CVE-2026-95590WordPress Tainacan plugin <= 1.2.0 - SQL Injection vulnerabilityTainacan
- CVE-2026-95529WordPress Calculated Fields Form plugin <= 5.5.1.1 - Cross Site Scripting (XSS) vulnerabilitycodepeople Calculated Fields Form
- CVE-2026-95528WordPress Core Web Vitals & PageSpeed Booster plugin <= 1.0.31 - Cross Site Scripting (XSS) vulnerabilityMohammed Kaludi Core Web Vitals & PageSpeed Booster
- CVE-2026-95522WordPress Easy Digital Downloads plugin <= 3.7.0 - SQL Injection vulnerabilitySyed Balkhi Easy Digital Downloads
- CVE-2026-95515WordPress Ninja Forms plugin <= 3.15.3 - Cross Site Scripting (XSS) vulnerabilityKevin Stover Ninja Forms
- CVE-2026-95513WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.6.0 - Broken Access Control vulnerabilityOnline Booking & Scheduling Calendar for WordPress by vcita
- CVE-2026-94487WordPress PublishPress Capabilities plugin <= 2.50.1 - Cross Site Request Forgery (CSRF) vulnerabilityPublishPress Capabilities
- CVE-2026-94179WordPress Razorpay Payment Button plugin <= 2.4.9 - Cross Site Scripting (XSS) vulnerabilityRazorpay Payment Button
- CVE-2026-94176WordPress Mang Board WP plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerabilityKitae Park Mang Board WP
- CVE-2026-94174WordPress Email Log plugin <= 2.63 - SQL Injection vulnerabilityWebFactory Email Log
- CVE-2026-94124WordPress WP EasyCart plugin <= 5.9.4 - SQL Injection vulnerabilitylevelfourdevelopment WP EasyCart
- CVE-2026-93774WordPress WP Photo Album Plus plugin <= 9.3.02.002 - Cross Site Scripting (XSS) vulnerabilityJacob N. Breetvelt WP Photo Album Plus
- CVE-2026-93773WordPress Mollie Forms plugin <= 2.11.0 - SQL Injection vulnerabilityNick van Wobbie Mollie Forms
- CVE-2026-93622WordPress WPS Limit Login plugin <= 1.5.9.3 - Cross Site Scripting (XSS) vulnerabilityNicolasKulka WPS Limit Login
- CVE-2026-93527WordPress Live Copy Paste for Elementor plugin <= 1.5.10 - SQL Injection vulnerabilitybdthemes Live Copy Paste for Elementor
- CVE-2026-93526WordPress Event Tickets plugin <= 5.29.4 - Cross Site Scripting (XSS) vulnerabilityNexcess Event Tickets
- CVE-2026-77422JLine: ReDoS in Built-in grep Command Amplified by Automatic `.*` Wrappingjline3 · org.jline:jline-builtins
- CVE-2026-75131NetworkManager-l2tp Privilege Escalation via pppd Username Injectionnm-l2tp NetworkManager-l2tp
- CVE-2026-96541Gnome-remote-desktop: gnome-remote-desktop: unauthenticated rdp sockets lack a handshake deadlineRed Hat Enterprise Linux
- CVE-2026-92730LimeSurvey Community Edition 7.0.14 - Reflected XSS in participant CSV import result via invalid attribute column nameLimeSurvey
- CVE-2026-86938A DLL hijacking vulnerability in the FileMaker Pro installer for Windows allowed a local user to execute arbitrary code with elevated adminiClaris FileMaker Pro
- CVE-2026-86926A heap buffer overflow vulnerability in the FileMaker Server database engine block parsing routine allowed a maliciously crafted .fmp12 dataClaris FileMaker Server
- CVE-2026-91775LimeSurvey Community Edition 7.0.14 - Reflected XSS through unescaped LSS survey-import warningsLimeSurvey
- CVE-2026-88832Busybox: busybox: romfs volume id parsing performs unbounded memcpy into fixed-size label buffer, causing heap overflowRed Hat Hardened Images
- CVE-2026-88830Busybox: busybox: tls montgomery reduction allocates bytes instead of digits, causing a pre-auth heap buffer overflowRed Hat Hardened Images
- CVE-2026-96808In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data from unprivileged callers, validFlatpak
- CVE-2026-96804CVE-2026-96804MLflow
- CVE-2026-93349Frictionless OS Command Injection via explore Console Commandfrictionlessdata frictionless-py
- CVE-2026-95847Moquette client IDs can cause cross-session H2 durable-queue corruptionmoquette-io moquette · io.moquette:moquette-broker
- CVE-2026-95846Moquette publishes Last-Will messages without enforcing write authorizationmoquette-io moquette · io.moquette:moquette-broker
- CVE-2026-95845Moquette unbounded per-session message queues allow memory exhaustionmoquette-io moquette · io.moquette:moquette-broker
- CVE-2026-95844Moquette deeply nested MQTT topics can cause stack exhaustionmoquette-io moquette · io.moquette:moquette-broker
- CVE-2026-95843Moquette malformed shared subscriptions can crash command processingmoquette-io moquette · io.moquette:moquette-broker
- CVE-2026-95842Moquette uncaught MQTT command exceptions can terminate shared session event loopsmoquette-io moquette · io.moquette:moquette-broker
- CVE-2026-96775MLflow dspy bypasses pickle deserialization controlMLflow
- CVE-2026-96656Plex Media Server arbitrary file writePlex Media Server
- CVE-2026-19888NULL pointer dereference in SCRAM client-final-message parsing in PgBouncerPgBouncer
- CVE-2026-6668Integer overflow causes an infinite loop in packet buffer growth in PgBouncerPgBouncer
- CVE-2026-93769HumHub 1.18.5 - Stored XSS in Profile Field Category title via HForm#renderForm leading to System Administrator account takeoverHumhub
- CVE-2026-19179IBM Financial Transaction Manager (FTM) is Impacted by Multiple VulnerabilitiesIBM Financial Transaction Manager (FTM) for RedHat OpenShift
- CVE-2026-18875IBM Financial Transaction Manager (FTM) is Impacted by Multiple VulnerabilitiesIBM Financial Transaction Manager (FTM) for RedHat OpenShift
- CVE-2026-18490IBM Financial Transaction Manager (FTM) is Impacted by Multiple VulnerabilitiesIBM Financial Transaction Manager (FTM) for RedHat OpenShift
- CVE-2026-18185IBM Financial Transaction Manager (FTM) is Impacted by Multiple VulnerabilitiesIBM Financial Transaction Manager (FTM) for RedHat OpenShift
- CVE-2026-18184IBM Financial Transaction Manager (FTM) is Impacted by Multiple VulnerabilitiesIBM Financial Transaction Manager (FTM) for RedHat OpenShift
- CVE-2026-18181IBM Financial Transaction Manager (FTM) is Impacted by Multiple VulnerabilitiesIBM Financial Transaction Manager (FTM) for RedHat OpenShift
- CVE-2026-96673Photoview through 2.4.0 SQL Injection via album download routePhotoview
- CVE-2026-96275Flatpak: flatpak: arbitrary write access as root via extra-data extractionRed Hat Enterprise Linux
- CVE-2026-96600Isotope eCommerce through 2.9.10 SQL Injection via Backend Callbacksisotope-core
- CVE-2026-96599Isotope eCommerce through 2.9.10 Weak Order Identifier Generationisotope-core
- CVE-2026-55610InvoiceShelf has cross-company user read/update IDOR that enables cross-tenant account takeoverInvoiceShelf
- CVE-2026-73591Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Sensitive Information in Source CodDell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-73588Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnDell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-96609Robur Albatross 1.0.0 through 2.x before 2.7.2 does not limit use of the ring buffer, leading to an albatross-console loop with no recognizeRobur Albatross
- CVE-2026-18177IBM Financial Transaction Manager (FTM) is Impacted by Multiple VulnerabilitiesIBM Financial Transaction Manager (FTM) for RedHat OpenShift
- CVE-2026-86678Broken Authentication vulnerabilityZohocorp ManageEngine Applications Manager
- CVE-2026-86677Broken Authentication vulnerabilityZohocorp ManageEngine Applications Manager
- CVE-2026-86679Broken Access Control vulnerabilityZohocorp ManageEngine Applications Manager
- CVE-2026-12974Security Policy Bypass in Forcepoint Security Engine (NGFW)Forcepoint Security Engine
- CVE-2026-86683Broken Authentication VulnerabilityZohocorp ManageEngine Applications Manager
- CVE-2026-96512Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorizationRed Hat Enterprise Linux · Red Hat Hardened Images +2
- CVE-2026-86681Broken Access Control vulnerabilityZohocorp ManageEngine Applications Manager
- CVE-2026-95676AuthPoint Gateway Improper Authentication in LDAP Sync Allows First-Factor Authentication BypassWatchGuard AuthPoint Authentication Gateway
- CVE-2026-75825Authentication Bypass vulnerabilityZohocorp ManageEngine OpManager
- CVE-2026-86247Apache Tomcat Native: Client certificate requirements can be down-gradedApache Software Foundation Apache Tomcat Native
- CVE-2026-76978Command Injection vulnerabilityZohocorp ManageEngine OpManager · ZohoCorp ManageEngine Fir…
- CVE-2026-86243Apache Tomcat Native: DoS via TLS handshakeApache Software Foundation Apache Tomcat Native
- CVE-2026-76979XML Injection vulnerabilityZohocorp ManageEngine OpManager · ZohoCorp ManageEngine Fir…
- CVE-2026-76980Data Exposure vulnerabilityZohocorp ManageEngine OpManager · Zohocorp ManageEngine Fir…
- CVE-2026-84787Privilege Escalation vulnerabilityZohocorp ManageEngine OpManager · Zohocorp ManageEngine Fir…
- CVE-2026-84789Broken Access Control vulnerabilityZohocorp ManageEngine OpManager · Zohocorp ManageEngine Fir…
- CVE-2026-84791Broken Access Control vulnerabilityZohocorp ManageEngine OpManager · Zohocorp ManageEngine Fir…
- CVE-2026-15358Path Traversal VulnerabilityZohocorp ManageEngine OpManager · Zohocorp ManageEngine Net…
- CVE-2026-87022Apache Tomcat: WebSocket message smuggling with per-message-deflateApache Software Foundation Apache Tomcat
- CVE-2026-14913SQL Injection vulnerabilityZohocorp ManageEngine OpManager · Zohocorp ManageEngine Fir…
- CVE-2026-79677Apache Tomcat: WebSocket DoS due to lost asynchronous write timeoutApache Software Foundation Apache Tomcat
- CVE-2026-78437Apache Tomcat: HTTP/2 DoS via malformed requestApache Software Foundation Apache Tomcat
- CVE-2026-78383Apache Tomcat: AJP DoS via missing request bodyApache Software Foundation Apache Tomcat
- CVE-2026-77791Apache Tomcat: DoS via busy wait during WebSocket closeApache Software Foundation Apache Tomcat
- CVE-2026-12370Remote Code Execution VulnerabilityZohocorp ManageEngine OpManager · Zohocorp ManageEngine… +1
- CVE-2026-77762Apache Tomcat: Stale HPACK emitter injects trailers into recycled pooled RequestApache Software Foundation Apache Tomcat
- CVE-2026-75973Apache Tomcat: Cross-context authentication mix-up with Jakarta Authentication configuredApache Software Foundation Apache Tomcat
- CVE-2026-5695Multiple vulnerabilities in the Microweber administration panelMicroweber Administration panel
- CVE-2026-96442Emacs: emacs: arbitrary code execution in flymake modeGNU Emacs · Red Hat Enterprise Linux
- CVE-2026-96455Reachy Mini daemon allows unauthenticated remote code execution through the app installation endpointPollen Robotics Reachy Mini
- CVE-2026-96454Pake grants unrestricted IPC access to every HTTPS origin loaded in generated applicationstw93 Pake
- CVE-2026-94243Apache Sling Security Bundle: RefererFilter accepts weaker-than-origin evidenceApache Software Foundation Apache Sling Security Bundle
- CVE-2026-95627Tauri framework v2 Dialog plugin auto-expands the filesystem scope with attacker-controlled recursiontauri-plugin-dialog
- CVE-2026-95626Tauri framework v2 CSP nonce protection bypass via data and blob URI schemes allows an XSS to RCE chainstauri
- CVE-2026-31377Apache Doris: Improper Authentication Allows Unauthorized Access to FE Meta ServiceApache Software Foundation Apache Doris
- CVE-2026-42801Deference after null check in as_rrcASR Crane，Falcon
- CVE-2026-93368Rename wp-login.php to anything you want <= 2.0.1 - Unauthenticated SQL Injection via 'log' (Username) Parametertravispluse Rename wp-login.php to anything you want
- CVE-2026-15027Changing｜CGServiSign - OS Command InjectionChanging CGServiSign
- CVE-2026-91790Foxit PDF Editor/Reader Doc Object Use-After-Free Information Disclosure VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-91791Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-91792Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-91793Foxit PDF Editor/Reader Doc Object Use-After-Free Information Disclosure VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-91794Foxit PDF Editor/Reader DeviceN Colorspace Out-Of-Bounds Write Remote Code Execution VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-91795Foxit PDF Editor/Reader FileOpen Uninitialized Variable Remote Code Execution VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-91797Foxit PDF Editor/Reader Portfolio Directory Traversal Remote Code Execution VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-91799Foxit Editor/Reader Array resetForm Use-After-Free VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-91805Use-after-free Vulnerability in Foxit PDF Editor/Reader Page-tree HandlingFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-91800Foxit PDF Editor installer local privilege escalationFoxit Software Foxit PDF Editor
- CVE-2026-91801Foxit PDF Editor/Reader RichMedia Annotation Directory Traversal Remote Code Execution VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-91802Foxit PDF Editor/Reader — Heap Buffer Overflow in WebP Image Decoding via Bitmap Stride ConfusionFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-91804Foxit PDF Editor/Reader Out-of-bounds Write Vulnerability While RenderingFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-91806Foxit PDF Editor/Reader Doc Object Use-After-Free Information Disclosure VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-91798Foxit PDF Editor/Reader Updater Privilege EscalationFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-91803Security Vulnerability Report – Foxit PDF Editor/Reader Updater DLL Search Path HijackingFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-91811Foxit PDF Editor/Reader PRC Stream Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-91812Foxit PDF Editor/Reader FoxitUpdater Improper Certificate Validation Local Privilege Escalation VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-91813Foxit PDF Editor/Reader FoxitUpdater Race Condition Local Privilege Escalation VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-91815Foxit PDF Editor/Reader JPEG2000 Parsing Memory Corruption Remote Code Execution VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-91816Foxit PDF Editor/Reader AcroForm Use-After-Free Remote Code Execution VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-91818Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-91789Foxit PDF Editor/Reader U3D File Parsing Integer Overflow Remote Code Execution VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-91809Foxit PDF Editor/Reader Annotation Use-After-Free Information Disclosure VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-93508WC Fields Factory < 4.1.11 - Subscriber+ Arbitrary Post Meta Manipulation via AJAXWC Fields Factory
- CVE-2026-86608WP Recipe Maker 9.8.0 - 10.8.1 - Unauthenticated DoS via Unbounded User Meta InsertionWP Recipe Maker
- CVE-2026-14321Divi Dash < 1.0.7 - Unauthenticated Denial of Service via IP Address Spoofingdivi-dash
- CVE-2022-4997JetFormBuilder Stripe Gateway < 1.1.0 - Unauthenticated Blind SQLi via Payment Tokenjet-form-builder-stripe-gateway
- CVE-2026-19438Mint Workbench I Path traversal VulnerabilityABB Mint Workbench I
- CVE-2026-91777jackson-databind: quadratic forward-reference completion in Collection and Map deserializersFasterXML jackson-databind · com.fasterxml.jackson.core:… +1
- CVE-2026-91776jackson-databind: unbounded growth of the type id cache in TypeDeserializerBase retains every unknown raw type IDFasterXML jackson-databind · com.fasterxml.jackson.core:… +1
- CVE-2026-89425jackson-core: UTF8DataInputJsonParser._reportInvalidToken() does not honor maxErrorTokenLength, allowing unbounded StringBuilder growthFasterXML jackson-core · com.fasterxml.jackson.core:jack… +1
- CVE-2026-96272ClipBucket v5 before 5.5.3-#182 SQL Injection via search_result.phpMacWarrior clipbucket-v5
- CVE-2026-96271Photoview through 2.4.0 Authorization Bypass via shareAlbumphotoview
- CVE-2026-79310webpy web.py 0.76 is vulnerable to server-side template injection (SSTI).
Medium, low and unrated 239
- CVE-2026-96762kvcache-ai mooncake RPC Path UnmountSegment authorizationkvcache-ai mooncake
- CVE-2026-96751pmTicket Project-Management-Software add_project.php setSync sql injectionpmTicket Project-Management-Software
- CVE-2026-96739SEMCMS KindEditor Upload upload_json.php cross site scriptingSEMCMS
- CVE-2026-92530Use of Less Trusted Source in GitLabGitLab
- CVE-2026-92529Incorrect Authorization in GitLabGitLab
- CVE-2026-92874Incorrect Authorization in GitLabGitLab
- CVE-2026-92628Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in GitLabGitLab
- CVE-2026-96680ByteDance Coze Scraper Extension External Message index.js chrome.runtime.onMessageExternal.addListener authorizationByteDance Coze Scraper Extension
- CVE-2026-96678weiqingwen spring-boot-forum Avatar Upload NewUserFormValidator.java validate path traversalweiqingwen spring-boot-forum
- CVE-2026-96676Fast FAC1900R uhttpd get_alias_name stack-based overflowFast FAC1900R
- CVE-2026-96606LB-Link BL-CPE600EU Configuration Backup Mifi_config.bin information disclosureLB-Link BL-CPE600EU
- CVE-2026-59980hpack: Unbounded variable integer decoding can cause run-away computation on malformed inputpython-hyper hpack · hpack
- CVE-2026-96604SoftNews Media Group DataLife Engine Search search.php strip_data sql injectionSoftNews Media Group DataLife Engine
- CVE-2026-96603Abdurrab5 online-makeup-store Admin functions.php confirm_user authorizationAbdurrab5 online-makeup-store
- CVE-2026-96602Abdurrab5 online-makeup-store Customer Login customerSignin.php sql injectionAbdurrab5 online-makeup-store
- CVE-2026-96601Abdurrab5 online-makeup-store Admin Login index.php sql injectionAbdurrab5 online-makeup-store
- CVE-2026-6925Multiple Vulnerabilities in IBM Concert SoftwareIBM Concert
- CVE-2026-67221RabbitMQ: AMQP 1.0 shovel status exposes plaintext URI passwordsrabbitmq-server · rabbitmq
- CVE-2026-67218RabbitMQ: Super-stream HTTP creation skips configure-permission checkrabbitmq-server · rabbitmq
- CVE-2026-66074RabbitMQ: ReDoS via management API ?name= filterrabbitmq-server · rabbitmq
- CVE-2026-6718Multiple Vulnerabilities in IBM Concert SoftwareIBM Concert
- CVE-2026-67405RabbitMQ: CSWSH on Web-STOMP / Web-MQTT (no Origin validation)rabbitmq-server · rabbitmq
- CVE-2026-66075RabbitMQ: Monitoring-tag user can restart federation linksrabbitmq-server · rabbitmq
- CVE-2026-67219RabbitMQ: Consistent-hash exchange unbounded weightrabbitmq-server · rabbitmq
- CVE-2026-67228RabbitMQ: Atom exhaustion: to_atom on runtime-parameter componentrabbitmq-server · rabbitmq
- CVE-2026-66068RabbitMQ: Shovel DEBUG log of full state exposes decrypted URIsrabbitmq-server · rabbitmq
- CVE-2026-67229RabbitMQ: Admin-only atom exhaustion: atomize_keys on vhost metadatarabbitmq-server · rabbitmq
- CVE-2026-66080RabbitMQ: Super-stream partitions unbounded allocationrabbitmq-server · rabbitmq
- CVE-2026-67240RabbitMQ: ReDoS via AMQP 1.0 SQL filter LIKE wildcardrabbitmq-server · rabbitmq
- CVE-2026-96556Neethuharii CafeManagement AddCashierCode.php addcashier improper authorizationNeethuharii CafeManagement
- CVE-2026-66072RabbitMQ: Atom table exhaustion via stream `chunk_selector`rabbitmq-server · rabbitmq
- CVE-2026-66067RabbitMQ: Stream protocol skips per vhost per user connection limitsrabbitmq-server · rabbitmq
- CVE-2026-66069RabbitMQ: Monitoring-tag DELETE of auth-attempt metricsrabbitmq-server · rabbitmq
- CVE-2026-67220RabbitMQ: JMS topic exchange erl_scan atom exhaustionrabbitmq-server · rabbitmq
- CVE-2026-67224RabbitMQ: Admin path-traversal write via trace namerabbitmq-server · rabbitmq
- CVE-2026-96552sfturing hosp_order User Password MD5.java MD5.getMD5 hash without saltsfturing hosp_order
- CVE-2026-66076RabbitMQ: Cross-vhost quorum-queue status and stream tracking disclosurerabbitmq-server · rabbitmq
- CVE-2026-96551sfturing hosp_order CommonUserController.java cross-site request forgerysfturing hosp_order
- CVE-2026-84724Automation-controller: automation-controller: systemjob extra_vars.days argument injection into uncontainerized control-plane awx-manage processRed Hat Ansible Automation Platform 2.5 for RHEL · Red H… +1
- CVE-2026-84721Automation-controller: automation-controller: email notification backend allows ssrf via user-controlled smtp host/port (internal port-scan oracle, smtp password exfil)Red Hat Ansible Automation Platform
- CVE-2026-84720Automation-controller: automation-controller: workflowjobnode.ancestor_artifacts lacks prevent_search, exposing no_log set_stats artifacts via orm-traversal count-oracleRed Hat Ansible Automation Platform 2.5 for RHEL · Red H… +1
- CVE-2026-84718Automation-controller: automation-controller: client ip spoofing in audit/access logs via unrestricted x-forwarded-for trustRed Hat Ansible Automation Platform 2.5 for RHEL · Red H… +1
- CVE-2026-84717Automation-controller: automation-controller: unauthenticated 200-vs-403 oracle in bitbucket data center webhook receiver enumerates webhook-enabled job templatesRed Hat Ansible Automation Platform 2.5 for RHEL · Red H… +1
- CVE-2026-84716Automation-controller: automation-controller: instance install_bundle issues 10-year, non-revocable receptor mesh-ca certificates for caller-chosen (and case-variant impersonating) hostnamesRed Hat Ansible Automation Platform 2.5 for RHEL · Red H… +1
- CVE-2026-84713Automation-controller: automation-controller: notification.recipients/subject/error lack prevent_search, allowing zero-privilege cross-tenant recovery of notification recipient secrets via filter oracleRed Hat Ansible Automation Platform
- CVE-2026-84712Automation-controller: automation-controller: unauthenticated /api/v2/ping/ discloses automation-mesh instance topology and instance-group membershipRed Hat Ansible Automation Platform 2.5 for RHEL · Red H… +1
- CVE-2026-96550sfturing hosp_order MailUtil.java getProperties cleartext transmissionsfturing hosp_order
- CVE-2026-96549sfturing hosp_order CommonUserServiceImpl.java cleartext storagesfturing hosp_order
- CVE-2026-93421Mesop: Unauthenticated ANSI Escape Sequence Injection in CSP Reporting Endpointmesop-dev mesop · mesop
- CVE-2026-96872WikiLambda public function execution bypasses the unsaved-code permission through nested Z825 compositionsThe Wikimedia Foundation Mediawiki - WikiLambda Extension
- CVE-2026-90900Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Storefront Product Review Submission in Easy Store extension 1.0.0-3.0.0joomshaper.com Easy Store extension for Joomla
- CVE-2026-96548sfturing hosp_order jdbc.properties hard-coded credentialssfturing hosp_order
- CVE-2026-96546Gimp: gimp: one-byte out-of-bounds heap read in the uncompressed dds loaderRed Hat Enterprise Linux
- CVE-2026-71465Automation-controller: automation-controller-container: automation-controller: ad-hoc command limit field allows cli argument injection into ansible executableRed Hat Ansible Automation Platform 2.5 for RHEL · Red H… +1
- CVE-2026-71464Automation-controller: automation-controller-container: automation-controller: schedule and workflowjobtemplatenode scm_branch prompt bypasses leading-dash git-argument guardRed Hat Ansible Automation Platform 2.5 for RHEL · Red H… +1
- CVE-2026-71463Automation-controller: automation-controller-container: automation-controller: notification template jinja whitelist bypass via conditional gating leaks tracebacksRed Hat Ansible Automation Platform 2.5 for RHEL · Red H… +1
- CVE-2026-96545Gimp: gimp: out-of-bounds heap read in the 4bpp tim image loaderRed Hat Enterprise Linux
- CVE-2026-71462Automation-controller: automation-controller-container: automation-controller: custom_venv_path setting provides filesystem path-existence oracle on control podRed Hat Ansible Automation Platform 2.5 for RHEL · Red H… +1
- CVE-2026-71461Automation-controller: automation-controller-container: automation-controller: verbose internal exception disclosure via hostlist bare-exception handlerRed Hat Ansible Automation Platform
- CVE-2026-71460Automation-controller: automation-controller-container: automation-controller: any authenticated user reads red hat subscription/license details via /config/Red Hat Ansible Automation Platform 2.5 for RHEL · Red H… +1
- CVE-2026-92692Sulu: JCR-SQL2 injection via `categories` query parameter (unauthenticated)sulu · sulu/sulu
- CVE-2026-95602WordPress YITH WooCommerce Request A Quote plugin < 4.46.1 - Insecure Direct Object References (IDOR) vulnerabilityYITH WooCommerce Request A Quote
- CVE-2026-95600WordPress TrustedLogin Connector plugin <= 2.0.3 - Sensitive Data Exposure vulnerabilityTrustedLogin Connector
- CVE-2026-95592WordPress Team plugin <= 6.0.0 - Insecure Direct Object References (IDOR) vulnerabilityOleh RadiusTheme Team
- CVE-2026-95586WordPress Ultimate Addons for Contact Form 7 plugin <= 3.5.50 - Cross Site Scripting (XSS) vulnerabilityThemefic Ultimate Addons for Contact Form
- CVE-2026-95530WordPress PixelYourSite – Your smart PIXEL (TAG) Manager plugin <= 11.4.1 - Cross Site Scripting (XSS) vulnerabilityPixelYourSite – Your smart PIXEL (TAG) Manager
- CVE-2026-95527WordPress Conekta Payment Gateway plugin <= 6.2.4 - Broken Access Control vulnerabilityConekta Group Conekta Payment Gateway
- CVE-2026-95525WordPress WP User Frontend plugin <= 4.3.11 - Arbitrary File Deletion vulnerabilityweDevs WP User Frontend
- CVE-2026-95524WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerabilityweDevs WP User Frontend
- CVE-2026-95523WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerabilityweDevs WP User Frontend
- CVE-2026-95514WordPress Netgsm plugin <= 2.10.0 - Bypass Vulnerability vulnerabilityNetgsm
- CVE-2026-94682WordPress Podcast Importer SecondLine plugin <= 1.5.6 - Cross Site Scripting (XSS) vulnerabilitySecondLineThemes Podcast Importer SecondLine
- CVE-2026-94680WordPress The Post Grid plugin <= 7.9.5 - Cross Site Scripting (XSS) vulnerabilityRadiusTheme The Post Grid
- CVE-2026-94679WordPress Fluent Support plugin <= 2.3.2 - Broken Access Control vulnerabilityWPManageNinja Fluent Support
- CVE-2026-94671WordPress The Post Grid plugin <= 7.9.5 - Cross Site Scripting (XSS) vulnerabilityRadiusTheme The Post Grid
- CVE-2026-94500WordPress ElementsKit Elementor addons Lite plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerabilityRoxnor ElementsKit Elementor addons Lite
- CVE-2026-94498WordPress AppMySite plugin <= 3.15.4 - Broken Access Control vulnerabilityAppMySite
- CVE-2026-94461WordPress Ditty plugin <= 3.1.69 - Cross Site Scripting (XSS) vulnerabilitymetaphorcreations Ditty
- CVE-2026-94457WordPress Captcha Code plugin <= 3.32 - Bypass Vulnerability vulnerabilityWebFactory Captcha Code
- CVE-2026-94391WordPress Ultimate FAQ plugin <= 2.4.14 - Cross Site Scripting (XSS) vulnerabilityRustaurius Ultimate FAQ
- CVE-2026-94168WordPress Premium Addons for Elementor plugin <= 4.11.105 - Cross Site Scripting (XSS) vulnerabilityLeap13 Premium Addons for Elementor
- CVE-2026-94118WordPress Premium Blocks – Gutenberg Blocks for WordPress plugin <= 2.3.17 - Cross Site Scripting (XSS) vulnerabilityLeap13 Premium Blocks – Gutenberg Blocks for WordPress
- CVE-2026-94080WordPress MarketKing plugin <= 2.1.70 - Broken Access Control vulnerabilityWebWizards MarketKing
- CVE-2026-94079WordPress WP User Manager plugin <= 2.9.19 - Broken Access Control vulnerabilityWP User Manager
- CVE-2026-93772WordPress wpForo Forum plugin <= 3.1.5 - Cross Site Scripting (XSS) vulnerabilityTomdever wpForo Forum
- CVE-2026-93623WordPress AI Engine plugin <= 3.7.8 - Insecure Direct Object References (IDOR) vulnerabilityJordy Meow AI Engine
- CVE-2026-93620WordPress PayPlus Payment Gateway plugin <= 8.2.5 - Broken Access Control vulnerabilityPayPlus Tech Team PayPlus Payment Gateway
- CVE-2026-93618WordPress JetTricks plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerabilityCrocoblock. Jetimpex JetTricks
- CVE-2026-93529WordPress WSP MCP - AI Agents Connector plugin <= 2.7.0 - Broken Access Control vulnerabilityBilal Naseer WSP MCP – AI Agents Connector
- CVE-2026-93513WordPress SiteSkite plugin <= 2.1.7 - Insecure Direct Object References (IDOR) vulnerabilitySiteSkite
- CVE-2026-77420JLine: ReDoS via `HISTORY_IGNORE` Configuration Variablejline3 · org.jline:jline-reader
- CVE-2026-71459Automation-controller: automation-controller-container: automation-controller: jobjobeventschildrensummary rbac bypass exposes cross-tenant job event tree structureRed Hat Ansible Automation Platform 2.5 for RHEL · Red H… +1
- CVE-2026-71458Automation-controller: automation-controller-container: automation-controller: named-url 404 body oracle enables cross-tenant resource name enumerationRed Hat Ansible Automation Platform 2.5 for RHEL · Red H… +1
- CVE-2026-77421JLine: ReDoS in Nano Editor Regex Search Modejline3 · org.jline:jline-builtins
- CVE-2026-63131OpenBao LIST ACL bypass: a trailing-slash LIST request skips a more-specific deny rule (unported Vault v2.0.3 fix)openbao · github.com/openbao/openbao
- CVE-2026-77285OpenBao Agent Writes Secrets to Stdoutopenbao · github.com/openbao/openbao
- CVE-2026-55632GoCD is vulnerable to authorization bypass via pipeline structure APIgocd
- CVE-2026-52744GoCD is vulnerable to authorization bypass via fetch artifact autosuggestion APIgocd
- CVE-2026-92700Caddy: fileHidden() case-sensitive pattern bypass — exposes "hidden" files via case variationcaddyserver caddy · github.com/caddyserver/caddy/v2
- CVE-2026-92284Caddy: Unbounded body buffer via {http.request.body} placeholder — memory exhaustion DoScaddyserver caddy · github.com/caddyserver/caddy/v2
- CVE-2026-88840Busybox: busybox: tls ssl_server reads one byte out of bounds when parsing truncated clienthelloRed Hat Hardened Images
- CVE-2026-88839Busybox: busybox: passwd/group parser writes heap pointers out of bounds due to stale tokenize() endpointRed Hat Hardened Images
- CVE-2026-88837Busybox: busybox: httpd misidentifies yescrypt password hashes as plaintext, inverting authenticationRed Hat Hardened Images
- CVE-2026-88835Busybox: busybox: dpkg read_package_field() steps past nul terminator, causing out-of-bounds read on malformed .deb packagesRed Hat Hardened Images
- CVE-2026-88831Busybox: busybox: httpd silently fails open when ip deny rules contain invalid cidr prefix lengthsRed Hat Hardened Images
- CVE-2026-86867Cinnamon's kotaemon contains improper authorization checks in multi‑user chat handlersCinnamon AI Kotaemon
- CVE-2026-96807In Flatpak before 1.18.1, a malicious sandboxed app can replace ~/.var/app/$appid/.ld.so with a symlink, causing regenerate_ld_cache to writFlatpak
- CVE-2026-96514Neethuharii CafeManagement Login CafePortalLogin.php sql injectionNeethuharii CafeManagement
- CVE-2026-96513Neethuharii CafeManagement AddProductCode.php unrestricted uploadNeethuharii CafeManagement
- CVE-2026-96655Plex Media Server arbitrary-host SSRFPlex Media Server
- CVE-2026-96654Plex Media Server URL injectionPlex Media Server
- CVE-2026-96652Plex Media Server SSRFPlex Media Server
- CVE-2026-96651Plex Media Server path traversalPlex Media Server
- CVE-2026-6669Unbounded SCRAM iteration count causes CPU exhaustion in PgBouncerPgBouncer
- CVE-2026-6327Multiple Vulnerabilities in IBM Concert SoftwareIBM Concert
- CVE-2026-4921IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
- CVE-2026-3626Multiple Vulnerabilities in IBM Concert SoftwareIBM Concert
- CVE-2026-19267IBM Financial Transaction Manager (FTM) is Impacted by Multiple VulnerabilitiesIBM Financial Transaction Manager (FTM) for RedHat OpenShift
- CVE-2026-19087IBM Financial Transaction Manager (FTM) is Impacted by Multiple VulnerabilitiesIBM Financial Transaction Manager (FTM) for RedHat OpenShift
- CVE-2026-18505IBM Financial Transaction Manager (FTM) is Impacted by Multiple VulnerabilitiesIBM Financial Transaction Manager (FTM) for RedHat OpenShift
- CVE-2026-18180IBM Financial Transaction Manager (FTM) is Impacted by Multiple VulnerabilitiesIBM Financial Transaction Manager (FTM) for RedHat OpenShift
- CVE-2026-96675alsa-lib through 1.2.16.1 Denial of Service via pcm_multiALSA Project alsa-lib
- CVE-2026-96674alsa-lib through 1.2.16.1 Integer Overflow via Topology FileALSA Project alsa-lib
- CVE-2026-96672Frappe ERPNext before 16.34.1 Unauthorized Method InvocationFrappe ERPNext
- CVE-2026-96276Flatpak: flatpak: arbitrary write in host context via flatpak build-initRed Hat Enterprise Linux
- CVE-2026-92419IDOR in WEBCON BPSWEBCON BPS
- CVE-2026-92164Streamlink: HTTPSession follows HTTP redirects into file:// URLs, reading local filesstreamlink
- CVE-2026-73589Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Weak Encoding for PassworDell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-73858Solspace Freeform: Limited Twig template injection via submitted field valuessolspace craft-freeform · solspace/craft-freeform
- CVE-2026-73587Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability.Dell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-96611FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c.FFmpeg
- CVE-2026-88974WPGraphQL: Contributor can publish and modify posts without the required capabilities via updatePostwp-graphql · wp-graphql/wp-graphql
- CVE-2026-73586Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Insufficient Session Expiration vulnerability.Dell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-63000REDAXO: Missing CSRF Protection on Package Update Action Allows Forced Addon Updatesredaxo core · redaxo/source
- CVE-2026-62998REDAXO: Unwhitelisted ORDER BY Column in rex_list Allows Authenticated Column Enumerationredaxo core · redaxo/source
- CVE-2026-63002REDAXO: Stored XSS in Mediapool Sync Page via Unescaped Filesystem Filenamesredaxo core · redaxo/source
- CVE-2026-71178Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use of Non-Canonical URL Paths for AuthorizationDell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-63001REDAXO: Stored XSS via Unescaped Media Manager Type Name in `mediaIsInUse()`redaxo core · redaxo/source
- CVE-2026-71177Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Rendered UI Layers or FrDell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-61834scim-patch: Mutation of Inherited Built-in Method Objectsthomaspoignant scim-patch · scim-patch
- CVE-2026-61413Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Privilege Management vulnerability.Dell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-18179IBM Financial Transaction Manager (FTM) is Impacted by Multiple VulnerabilitiesIBM Financial Transaction Manager (FTM) for RedHat OpenShift
- CVE-2026-84091SUMIT Payment Gateway for WooCommerce < 4.0.0 - Unauthenticated Payment Confirmation Forgery via bit IPNSUMIT Payment Gateway for WooCommerce
- CVE-2026-77112SSRF Leading to JWT Token Disclosure in Global IT Informatics' WeollGlobal IT Informatics Technology Services Weoll
- RUSTSEC-2026-0394Build environment compiled into the library and readable at runtimerustpython-vm
- CVE-2026-80444Unauthenticated Open Redirect Vulnerability in Abis Technology's AVESİSAbis Technology Ltd. AVESİS
- CVE-2026-78253Denial-of-service (stack-exhaustion) vulnerability in QXmlStreamReader::readElementText() impacts Qtqt
- CVE-2026-77756Apache Tomcat: Transfer-Encoding honored for HTTP/1.0 requestsApache Software Foundation Apache Tomcat
- CVE-2026-96445Keycloak-services: keycloak-services: conditional otp skip-header policy evaluated against untrusted proxy headersRed Hat Build of Keycloak · Red Hat Single Sign-On
- CVE-2026-73581Apache Tomcat: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystoreApache Software Foundation Apache Tomcat
- CVE-2026-96446Keycloak-services: keycloak-services: par single-use bypass via prompt=none silent authentication pathRed Hat Build of Keycloak · Red Hat Single Sign-On
- CVE-2026-5696Multiple vulnerabilities in the Microweber administration panelMicroweber Administration panel
- CVE-2026-90950Paid Member Subscriptions < 3.1.0 - Unauthenticated reCAPTCHA Bypass via Registration FormPaid Membership Subscriptions
- CVE-2026-87978Paymob for WooCommerce < 4.1.14 - Unauthenticated Payment Bypass via Unverified Subscription Transaction CallbackPaymob for WooCommerce
- CVE-2026-87848MPCX Lightbox 1.2.2 - 1.2.5 - Unauthenticated Non-Public Post Content DisclosureMPCX Lightbox
- CVE-2026-87071Forminator Forms < 1.57.2.1 - Unauthenticated Post Meta Injection on Submitted PostsForminator Forms
- CVE-2026-87070Forminator Forms < 1.57.2.1 - Unauthenticated Poll Vote Limit Bypass via IP SpoofingForminator Forms
- CVE-2026-86612Ninja Tables < 5.2.17 - Unauthenticated Arbitrary Shortcode Execution via Fluent Forms Data SourceNinja Tables
- CVE-2026-86604GTranslate < 5.0.1 - Unauthenticated Arbitrary Shortcode Execution via Email TranslationGTranslate
- CVE-2026-86601WP Recipe Maker < 10.8.2 - Unauthenticated Arbitrary Shortcode Execution via Comment ContentWP Recipe Maker
- CVE-2026-96456Reachy Mini Bluetooth PIN authentication can be bypassed by racing an authenticated devicePollen Robotics Reachy Mini
- CVE-2026-79616Out-of-bounds read vulnerability in Context2D.path and PathSvg.path properties impacts Qt Quickqt
- CVE-2026-94251Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resourceApache Software Foundation Apache Sling Security Bundle
- CVE-2026-91928Apache Sling XSS: Sanitizer bypass, uncontrolled resource consumption and failure pf protection mechanismsApache Software Foundation Apache Sling XSS
- CVE-2026-96443Apache Doris: JDBC driver URL validation bypass leads to remote code executionApache Software Foundation Apache Doris
- CVE-2026-91852Apache Sling XSS: CWE-79 multiple raw-string break-outs and ReDOS in XSSImplApache Software Foundation Apache Sling XSS
- CVE-2026-91999Apache Sling XSS: Improper escaping in the XSS Webconsole pluginApache Software Foundation Apache Sling XSS
- CVE-2026-92001Apache Sling XSS: Missing parser resource limitsApache Software Foundation Apache Sling XSS
- CVE-2026-73192Apache Sling XSS: XSS possible through XSSAPI.getValidHref()Apache Software Foundation Apache Sling XSS
- CVE-2026-95625Tauri framework v2 missing updater signature version number validation can be exploited into forced downgradetauri-plugin-updater
- CVE-2026-91788Foxit PDF Editor/Reader Missing Authorization Information Disclosure VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-91796Foxit PDF Editor/Reader importIcon NTLM Response Information Disclosure VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-91807Foxit PDF Editor/Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-91808Foxit PDF Editor/Reader JPEG File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-91810Foxit PDF Editor/Reader Doc Object Out-Of-Bounds Read Information Disclosure VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-91814Security vulnerability: Foxit PDF Editor/Reader Fails to Detect Modifications to Signed Documents Displaying Newly Added ContentFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-91817Foxit PDF Editor/Reader AcroForm Out-of-Bounds Read Remote Code Execution VulnerabilityFoxit Software Foxit PDF Editor · Foxit Software Foxit PDF…
- CVE-2026-92378uniFLOW Online Legacy UI Previous login session retained when entering Reduced Function LoginNT-ware uniFLOW Online
- CVE-2026-50228Electron DevTools Arbitrary Code Execution Vulnerability in NitroSenseAcer NitroSense
- CVE-2026-50227MQTT WebSocket Command Execution Vulnerability in NitroSenseAcer NitroSense
- CVE-2026-6831Advanced Contact form 7 DB <= 2.1.1 - Missing Authorization to Authenticated (Contributor+) Information Disclosure via 'acf7db' Shortcodevsourz1td Advanced Contact form 7 DB
- CVE-2026-5924Getwid <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Google Maps 'customStyle'jetmonsters Getwid – Gutenberg Blocks
- CVE-2026-93528NP Quote Request for WooCommerce < 2.4.16 - Unauthenticated Order Data Disclosure via Quote Request PageNP Quote Request for WooCommerce
- CVE-2026-93511Premium Packages < 7.2.1 - Unauthenticated PayPal Webhook Signature Verification BypassPremium Packages
- CVE-2026-93510Points and Rewards for WooCommerce < 2.10.4 - Subscriber+ Arbitrary Points and Wallet Balance Manipulation via assign_claim_pointsPoints and Rewards for WooCommerce
- CVE-2026-93507WC Fields Factory < 4.1.11 - Contributor+ Arbitrary Post Cloning and Private Content DisclosureWC Fields Factory
- CVE-2026-91077Event Booking Manager for WooCommerce 5.3.6 - 5.7.2 - Contributor+ Unpublished Event Disclosure via mpwem_load_event_listEvent Booking Manager for WooCommerce
- CVE-2026-91073Subscribe Forms 1.4.1 - 1.6.2 - Author+ Stored XSS via Attention Effect Form SettingSubscribe Forms
- CVE-2026-91025Booking Manager < 2.1.21 - Subscriber+ Arbitrary User Plugin Meta Modification via IDORBooking Manager
- CVE-2026-91024Booking Manager < 2.1.21 - Author+ SQLi via ICS Import Feed UID (sync_gid)Booking Manager
- CVE-2026-90985WPC Smart Compare for WooCommerce < 6.6.1 - Unauthenticated Password-Protected Product Description Disclosure via woosc_loadWPC Smart Compare for WooCommerce
- CVE-2026-90951Paid Member Subscriptions < 3.1.0 - Unauthenticated In-Flight Checkout State Deletion via pms_process_paymentPaid Membership Subscriptions
- CVE-2026-89331FluentBoards 1.95 - 2.0.15 - Unauthenticated Board Member Email Address Disclosure via Public Board EndpointsFluentBoards
- CVE-2026-88997JSM Show Post Metadata < 4.9.1 - Contributor+ Stored XSS via Custom Field Meta KeyJSM Show Post Metadata
- CVE-2026-88929Sale Booster 7.0.0 - 7.5.1 - Unauthenticated Non-Public Product DisclosureProduct Badge, Label, Countdown Timer for WooCommerce
- CVE-2026-87981Paymob for WooCommerce < 4.1.14 - Contributor+ Payment Gateway Configuration Deletion and Modification via Multiple AJAX ActionsPaymob for WooCommerce
- CVE-2026-87979Paymob for WooCommerce < 4.1.14 - Unauthenticated Saved Card Token Write to Any User via WebhookPaymob for WooCommerce
- CVE-2026-87074Forminator Forms < 1.57.2.1 - Unauthenticated Arbitrary Recipient Email Sending with Attacker-Controlled LinkForminator Forms
- CVE-2026-87069Forminator Forms < 1.57.2.1 - Subscriber+ Form Stripe Field Migration via migrate_stripeForminator Forms
- CVE-2026-86842Real3D Flipbook Lite < 5.4 - Author+ Content Deletion and Stored XSS via Global Settings OverwriteReal3D Flipbook
- CVE-2026-86783PostX < 5.0.41 - Unauthenticated Custom Field Key Disclosure via REST APIPost Grid Gutenberg Blocks
- CVE-2026-86603WP Recipe Maker < 10.8.2 - Subscriber+ Non-Public List Title Disclosure via wprm_search_listsWP Recipe Maker
- CVE-2026-86602WP Recipe Maker 10.3.0 - 10.8.1 - Subscriber+ Draft and Private Recipe Content Disclosure via wprm_shortcode_previewWP Recipe Maker
- CVE-2026-85006Happy Addons for Elementor < 3.50.0 - Contributor+ Stored XSS via Creative Button WidgetHappyAddons for Elementor
- CVE-2026-84743The Events Calendar 6.15.16.1 - 6.17.4.1 - Contributor+ Event/Venue/Organizer Update, Trash and Ownership Takeover via by-slug REST RoutesThe Events Calendar
- CVE-2026-84742The Events Calendar 6.15.0 - 6.17.4.1 - Contributor+ Content Publication via TEC V1 REST APIThe Events Calendar
- CVE-2026-84741The Events Calendar 4.5 - 6.17.4.1 - Unauthenticated Non-Public Venue and Organizer Disclosure via REST APIThe Events Calendar
- CVE-2026-84168Easy Hide Login < 1.7 - Login Page Protection Bypass / Hidden URL DisclosureEasy Hide Login
- CVE-2026-84150Directorist < 8.9.5 - Subscriber+ Cross-User Favorites Read and Write via REST Favorites EndpointDirectorist: AI-Powered Business Directory, Listings & Clas…
- CVE-2026-84098Directorist 3.1.0 - 8.9.4 - Subscriber+ Arbitrary Listing Deletion via remove_listingDirectorist: AI-Powered Business Directory, Listings & Clas…
- CVE-2026-84046Directorist < 8.9.5 - Subscriber+ SSRF via Avatar URLDirectorist: AI-Powered Business Directory, Listings & Clas…
- CVE-2026-84027Directorist 8.9.1 - 8.9.4 - Subscriber+ Paid Order and Payment Record Forgery via REST Orders EndpointDirectorist: AI-Powered Business Directory, Listings & Clas…
- CVE-2026-84026Directorist 8.1 - 8.9.4 - Unauthenticated Sensitive Data Disclosure via REST Users EndpointDirectorist: AI-Powered Business Directory, Listings & Clas…
- CVE-2026-83555Email Subscribers by Icegram Express < 5.9.35 - Unauthenticated Subscription Status Change via Missing Token VerificationEmail Subscribers & Newsletters
- CVE-2026-81339MasterStudy LMS < 3.7.50 - Subscriber+ Quiz Attempt Grade Disclosure via IDORMasterStudy LMS WordPress Plugin
- CVE-2026-81338MasterStudy LMS < 3.7.50 - Subscriber+ Stored HTML Injection via Course DiscussionsMasterStudy LMS WordPress Plugin
- CVE-2026-80342Payment Plugins for PayPal WooCommerce < 2.0.27 - Unauthenticated Payment Hijacking via Unvalidated PayPal Order IDPayment Plugins for PayPal WooCommerce
- CVE-2026-77766Directorist 8.5 - 8.9.4 - Subscriber+ Order and Financial Record Disclosure via REST Orders EndpointDirectorist: AI-Powered Business Directory, Listings & Clas…
- CVE-2026-77765Better Payment < 2.3.4 - Unauthenticated Payment Amount ManipulationBetter Payment
- CVE-2026-18365Zportals < 6.4.2 - Subscriber+ User Email Disclosurezportals
- CVE-2026-18364Zportals < 6.4.2 - Subscriber+ Arbitrary Plugin Settings Updatezportals
- CVE-2026-16264Newsletters < 4.18.1 - Unauthenticated Subscriber Record Overwrite and PII Disclosure via IDORNewsletters
- CVE-2025-15696Real3D Flipbook Lite < 5.4 - Author+ Stored XSSReal3D Flipbook
- CVE-2026-86785Social Commerce for WooCommerce <= 2.5.4 - Unauthenticated Plugin Option and Product Sync Status UpdateSocial Commerce for WooCommerce
- CVE-2026-96258onSite internet GmbH Auktion NG Auktionssoftware Public Password Reset Endpoint forgotpasswd.html cross site scriptingonSite internet Auktion NG Auktionssoftware
- CVE-2026-95958JusticeRage Manalyze PE Parser pe.cpp _parse_relocations integer underflowJusticeRage Manalyze
- CVE-2026-95957SourceCodester Smart Attendance System with QR Code Scanner Self-Registration student_signup.php prepend cross site scriptingSourceCodester Smart Attendance System with QR Code Scanner
- CVE-2026-95930iFlytek astron-agent debugToolV2 API endpoint UrlCheckTool.checkUrl server-side request forgeryiFlytek astron-agent
- CVE-2026-95929iFlytek astron-agent getBotList API endpoint ChatBotMarketMapper.xml sql injectioniFlytek astron-agent
- CVE-2026-95928recommenders-team recommenders Dict Loading mind_iterator.py pickle.load deserializationrecommenders-team recommenders
- CVE-2026-95927SourceCodester Online Reviewer Management System exam-delete.php sql injectionSourceCodester Online Reviewer Management System
- CVE-2026-95926SourceCodester Online Reviewer Management System btn_functions.php update sql injectionSourceCodester Online Reviewer Management System
- CVE-2026-95925SourceCodester Online Reviewer Management System btn_functions.php update sql injectionSourceCodester Online Reviewer Management System
- CVE-2026-95924SourceCodester Online Reviewer Management System btn_functions.php add sql injectionSourceCodester Online Reviewer Management System
- CVE-2026-95897Dask Loader core.py from_npy_stack deserializationDask
- CVE-2026-96273Ghidra before 12.1.4 Denial of Service via Unreleased Lock in OptionsDBNationalSecurityAgency ghidra
- CVE-2026-95868AdithyaYelloju Restaurant-Management-System Search Form display_menu.php mysqli_query sql injectionAdithyaYelloju Restaurant-Management-System
- CVE-2026-79304CyberPanel 1.9.1 contains a path traversal vulnerability in the readFileContents method of the /filemanager/controller endpoint.
- CVE-2026-79306CyberPanel v1.9.1 contains a path traversal vulnerability in the compress method exposed through the /filemanager/controller endpoint.