CVEs published September 29, 2026
611 CVEs were published on September 29, 2026: 97 critical, 251 high.
- Published
- 611
- Critical
- 97
- High
- 251
- Medium
- 229
- Low
- 34
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 383
Most affected products
- Google Chrome
- 140
- Mozilla Firefox · Mozilla Thunderbird
- 50
- Mozilla Thunderbird · Mozilla Firefox
- 26
- Wireshark Foundation Wireshark
- 19
- Hewlett Packard Enterprise (HPE) Instant ON
- 18
- Eclipse Foundation NetX Duo
- 17
- Joomla! Project Joomla! CMS · joomla
- 14
- OpenSSL
- 14
- WatchGuard Fireware OS
- 14
- Red Hat Enterprise Linux
- 10
Critical 97
- CVE-2026-102794Ziroom ZHOME A0101 ping command injectionZiroom ZHOME A0101
- CVE-2026-102793Ziroom ZHOME A0101 set_time_zone command injectionZiroom ZHOME A0101
- CVE-2026-86131Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code ExecutionWatchGuard Fireware OS
- CVE-2026-103041LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Embed Cache RPyC ServiceModelTC LightLLM
- CVE-2026-103040LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Router Profiler RPyC ServiceModelTC LightLLM
- CVE-2026-103044EasyTimeline should not serve image maps as application/xmlThe Wikimedia Foundation Mediawiki - EasyTimeline extension
- CVE-2026-102792Ziroom ZHOME A0101 set_syslog command injectionZiroom ZHOME A0101
- CVE-2026-72507Toptech TMS7 and TopHAT SQL InjectionToptech Systems TMS7 · Toptech Systems TopHAT
- CVE-2026-68068Toptech TMS7 and TopHAT SQL InjectionToptech Systems TMS7 · Toptech Systems TopHAT
- CVE-2026-68954Toptech TMS7 and TopHAT SQL InjectionToptech Systems TMS7 · Toptech Systems TopHAT
- CVE-2026-63713Toptech TMS7 and TopHAT SQL InjectionToptech Systems TMS7 · Toptech Systems TopHAT
- CVE-2026-72510Toptech TMS7 and TopHAT SQL InjectionToptech Systems TMS7 · Toptech Systems TopHAT
- CVE-2026-70356Toptech TMS7 and TopHAT Unrestricted Upload of File with Dangerous TypeToptech Systems TMS7 · Toptech Systems TopHAT
- CVE-2026-71379Toptech TMS7 and TopHAT Files or Directories Accessible to External PartiesToptech Systems TMS7 · Toptech Systems TopHAT
- CVE-2026-96587Use of Hard-coded Credentials in Viidure Dashcam Android ApplicationViidure Dashcam Android Application
- CVE-2026-53988Dockhand < 1.0.40 Unauthenticated Webhook Trigger via Git Webhook EndpointsFinsys dockhand
- CVE-2026-102308Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitraryGoogle Chrome
- CVE-2026-102309Use after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandboxGoogle Chrome
- CVE-2026-102304Use after free in Passwords in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox Google Chrome
- CVE-2026-102316Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitraryGoogle Chrome
- CVE-2026-102306Use after free in Bluetooth in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside Google Chrome
- CVE-2026-102331Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary coGoogle Chrome
- CVE-2026-100291Initialization of a resource with an insecure default in Anjvision YSSD-RTMP-H5Anjvision YSSD-RTMP-H5
- CVE-2026-76725Authentication Bypass in a Management Protocol of HPE Networking Instant ON APsHewlett Packard Enterprise (HPE) Instant ON
- CVE-2026-76724Unauthenticated Adjacent Command Injection Vulnerability in HPE Networking Instant ON APs Command Line Interface (CLI) Accessed by the PAPI ProtocolHewlett Packard Enterprise (HPE) Instant ON
- CVE-2026-76723Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking Instant ON APSHewlett Packard Enterprise (HPE) Instant ON
- CVE-2026-76722Uncontrolled Format String Vulnerabilities lead to Remote Code Execution or Denial-of-Service in HPE Networking Instant ON APsHewlett Packard Enterprise (HPE) Instant ON
- CVE-2026-76721Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in HPE Networking Instant ON APsHewlett Packard Enterprise (HPE) Instant ON
- CVE-2026-102829simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detectionsteveukx git-js · @simple-git/argv-parser
- CVE-2026-102828simple-git unsafe-operation guard does not block trailer command configurationsteveukx git-js · simple-git
- CVE-2026-84436IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
- CVE-2026-102710Attacker model / Preconditions: a loaded `TXM_MODULE_USER_MODE | TXM_MODULE_MEMORY_PROTECTION` module issuing kernel dispatch calls, on a buEclipse Foundation eclipse-threadx/threadx
- CVE-2026-95311Free of non-heap memory in Fonts in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentiaGoogle Chrome
- CVE-2026-95347Use after free in Updater in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the Google Chrome
- CVE-2026-95325Use after free in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the Google Chrome
- CVE-2026-95331Out of bounds write in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outsideGoogle Chrome
- CVE-2026-95299Use after free in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a Google Chrome
- CVE-2026-95318Buffer overflow in Video in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside theGoogle Chrome
- CVE-2026-95277Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the Google Chrome
- CVE-2026-95283Buffer overflow in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary codGoogle Chrome
- CVE-2026-95310Use after free in AdFilter in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox vGoogle Chrome
- CVE-2026-95356Use after free in WindowDialog in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentiallGoogle Chrome
- CVE-2026-95329Out of bounds write in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrarGoogle Chrome
- CVE-2026-95284Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside tGoogle Chrome
- CVE-2026-95349Buffer overflow in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary coGoogle Chrome
- CVE-2026-95313Use after free in Fullscreen in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outsideGoogle Chrome
- CVE-2026-95281Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside tGoogle Chrome
- CVE-2026-95339Use after free in ServiceWorker in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandGoogle Chrome
- CVE-2026-95357Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary Google Chrome
- CVE-2026-95350Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside tGoogle Chrome
- CVE-2026-102761NetX Duo's WebSocket client resets the unmasking cursor to the first `NX_PACKET` each time it advances through a chained packet, while the lEclipse Foundation NetX Duo
- CVE-2026-102425Joomla Extension - balbooa.com - Unauthenticated RCE via field shortcode injection in Balbooa Forms < 2.4.3.4balbooa.com Balbooa Forms extension for Joomla
- CVE-2026-100240TemplateSandbox does not check read permissions for the page being previewedWikimedia Foundation Mediawiki - TemplateSandbox Extension
- CVE-2023-54400Fumeng Cloud SQL Injection via AjaxMethod.ashx getEmpBynameFumasoft Fumeng Cloud
- CVE-2026-49243Webmin: Reflected XSS in the Configuration modulewebmin
- CVE-2026-22094Weak root password in EVbee DC 80EVbee DC
- CVE-2026-100829Mitigation bypass in the DOM: Security componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100828Mitigation bypass in the Bookmarks & History componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100819Sandbox escape due to incorrect boundary conditions in the XPCOM componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100818Sandbox escape due to use-after-free in the Widget: Gtk componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100811Sandbox escape due to use-after-free in the DOM: Core & HTML componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100810Other issue in the DevTools componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100804Sandbox escape due to use-after-free in the Preferences: Backend componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100800Sandbox escape due to use-after-free in the Disability Access APIs componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100794Sandbox escape due to incorrect boundary conditions in the Internationalization componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100788Invalid pointer in the JavaScript: WebAssembly componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100787Sandbox escape in the XUL componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100786Sandbox escape due to use-after-free in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100781Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100778Sandbox escape due to use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100775Sandbox escape in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100770Sandbox escape due to use-after-free in the DOM: Content Processes componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100763Incorrect boundary conditions in the Graphics: WebGPU componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100762Sandbox escape due to use-after-free in the DOM: Content Processes componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100760Sandbox escape in the Security: Process Sandboxing componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100758Sandbox escape in the DOM: Navigation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-82973Improper Neutralization of CRLF Sequences ('CRLF Injection') in docker-mailboxpsyb0t docker-mailbox
- CVE-2026-7192Multiple vulnerabilities in the T-CPE301K 4G Mini WiFi Router from Shenzhen Dbit Network EquipmentShenzhen Dbit Network Equipment T-CPE301K 4G Mini WiFi Rout…
- CVE-2026-85520Unauthenticated arbitrary file write leading to RCE in gmfeed PrestaShop moduleMyPresta Google Merchant Center Feed
- CVE-2026-15390Out-of-bounds write in Das U-BootDENX Software Engineering Das U-Boot
- CVE-2026-8066A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthenticatedHitachi Energy RTU500 series CMU firmware
- CVE-2026-8065An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticatHitachi Energy RTU500 series CMU firmware
- CVE-2026-96431Flowring Agentflow 4.0 - Unrestricted Upload of File with Dangerous TypeFlowring Technology Agentflow
- CVE-2026-91048Apache Karaf: Missing authorization on the jdbc:* shell command scope allows privilege escalation to remote code execution via jdbc:ds-createApache Software Foundation Apache Karaf
- CVE-2026-91012Apache Karaf: Path Traversal in Config Service Allows Manager-to-Admin Privilege EscalationApache Software Foundation Apache Karaf
- CVE-2026-96429Flowring Agentflow 4.0 - SQL InjectionFlowring Technology Agentflow
- CVE-2026-96428Flowring Agentflow 4.0 - SQL InjectionFlowring Technology Agentflow
- CVE-2026-84154Code Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026xDassault Systèmes GEOVIA Geospatial Data Manager
- CVE-2026-102240Netcore NAP930 Network Tools CGI network_tools eval os command injectionNetcore NAP930
- CVE-2026-101354FAST FAC1203R MmtAtePrase _tWlanTask stack-based overflowFAST FAC1203R
- CVE-2024-31026An issue in Greek Universities Network (GUnet) Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the chat i
- CVE-2026-39117An issue in AltumCode 66Uptime before v.54.0.0 and 66Uptime ping-servers plugin before v.2.0.0 allows a remote attacker to execute arbitrary
- CVE-2026-77177Open GenAI Stack (aka ogx-ai) 2026-06-11, as used in the Meta AI backend for WhatsApp and other products, allows code execution because prom
- CVE-2026-79536bytebase dbhub v1.2.0 was discovered to contain a SQL injection vulnerability in the /utils/sql-parser.ts component.
- CVE-2026-79537metatool-ai MetaMCP through 2.4.22 contains an insecure direct object reference (IDOR) in the MCP transport session dispatch.
- CVE-2026-79538metatool-ai MetaMCP up to and including 2.4.22 is vulnerable to Code Execution in the internal MCP inspector proxy endpoint GET /mcp-proxy/s
- CVE-2026-94952A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030.
High 251
- CVE-2026-86104Fireware OS Resource Exhaustion in Login Process Allows Denial of ServiceWatchGuard Fireware OS
- CVE-2026-18145Fireware OS Stack-based Buffer Overflow in spamd Allows Remote Code ExecutionWatchGuard Fireware OS
- CVE-2026-86101Fireware OS Authorization Bypass in SAML Login Allows Unauthorized SSLVPN AccessWatchGuard Fireware OS
- CVE-2026-13046Fireware OS Deserialization of Untrusted Data in samld Allows Remote Code ExecutionWatchGuard Fireware OS
- CVE-2026-13224Fireware OS Path Traversal in WebUI Management Agent Allows Arbitrary Local File ReadWatchGuard Fireware OS
- CVE-2026-86133Fireware OS Pre-Authentication Integer Underflow in iked Allows Remote Denial of ServiceWatchGuard Fireware OS
- CVE-2026-90441Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant BWatchGuard Fireware OS
- CVE-2026-18105Fireware OS Uncontrolled Resource Consumption in Diagnostic Tasks Allows Denial of ServiceWatchGuard Fireware OS
- CVE-2026-86136Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant AWatchGuard Fireware OS
- CVE-2026-86132Fireware OS Pre-Authentication Integer Underflow in iked Allows Denial of ServiceWatchGuard Fireware OS
- CVE-2026-86128Fireware OS NULL Pointer Dereference in NetFlow IPv6 Traffic Processing Allows Remote Denial of ServiceWatchGuard Fireware OS
- CVE-2026-81433Fireware OS Pre-Authentication Stack Buffer Overflow in fingerd Allows Remote Code ExecutionWatchGuard Fireware OS
- CVE-2026-103043anchorme through 3.0.8 Regular Expression Denial of Servicealexcorvi anchorme
- CVE-2026-103042LightLLM through 1.2.0 Unauthenticated Memory Exhaustion via NCCL Control Channel set_valueModelTC LightLLM
- CVE-2026-71302Toptech TMS7 and TopHAT Session FixationToptech Systems TMS7 · Toptech Systems TopHAT
- CVE-2026-74225U-Boot before 2026.10-rc5 Out-of-Bounds Write via DHCPv6u-boot
- CVE-2026-74222U-Boot before 2026.10-rc5 Use-After-Free in lwIP wget Receive Callbacku-boot
- CVE-2026-74221U-Boot before 2026.10-rc5 Buffer Overflow via NFS READLINKu-boot
- CVE-2026-74220U-Boot before 2026.10-rc5 Buffer Overflow via NFS READ Replyu-boot
- CVE-2026-71971U-Boot before 2026.10-rc3 Out-of-Bounds Write in IP Fragment Reassemblyu-boot
- CVE-2026-91191Lantronix G520 Series Cellular Gateway Improper Verification of Cryptographic SignatureLantronix G520 Series
- CVE-2026-84409Lantronix G520 Series Cellular Gateway Cross-site ScriptingLantronix G520 Series
- CVE-2026-102937virtualenv: Command injection via --prompt in activate.bat (batch activator)pypa virtualenv · virtualenv
- CVE-2026-93853Barman snapshot backup deletion trusts unverified backup catalog metadataEnterpriseDB Barman
- CVE-2026-102930virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before usepypa virtualenv · virtualenv
- CVE-2026-102925virtualenv bash and fish activation scripts execute commands embedded in pathspypa virtualenv · virtualenv
- CVE-2026-94204Incorrect Permission Assignment for Critical Resource in Viidure Dashcam Android ApplicationViidure Dashcam Android Application
- CVE-2026-102253iperf3 < 3.22 UDP Receive Worker Infinite Loop DoSesnet iperf3
- CVE-2026-102878mcp-chrome-bridge through 1.0.31 CORS Origin Bypasshangwin mcp-chrome-bridge
- CVE-2026-102876SurrealDB before 3.3.0 Cross-Tenant Access via Headerssurrealdb
- CVE-2026-102875VLC media player before 3.0.24 Path Traversal via skins2videolan vlc
- CVE-2026-100298Insufficiently Protected Credentials in Anjvision YSSD-RTMP-H5Anjvision YSSD-RTMP-H5
- CVE-2026-100296Improper Check for Unusual or Exceptional Conditions in Anjvision YSSD-RTMP-H5Anjvision YSSD-RTMP-H5
- CVE-2026-102327Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the rGoogle Chrome
- CVE-2026-102321Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crGoogle Chrome
- CVE-2026-102302Buffer overflow in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a cGoogle Chrome
- CVE-2026-102324Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer procesGoogle Chrome
- CVE-2026-102301Out of bounds write in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potGoogle Chrome
- CVE-2026-102328Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crGoogle Chrome
- CVE-2026-102326Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crGoogle Chrome
- CVE-2026-102323Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crGoogle Chrome
- CVE-2026-102299Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crGoogle Chrome
- CVE-2026-102317Improper privilege management in Mojo in Google Chrome on on Windows prior to 154.0.8037.92 allowed a local attacker to potentially execute Google Chrome
- CVE-2026-100294Use of Hard-coded Credentials in Anjvision YSSD-RTMP-H5Anjvision YSSD-RTMP-H5
- CVE-2026-100293Improper verification of cryptographic signature in Anjvision YSSD-RTMP-H5Anjvision YSSD-RTMP-H5
- CVE-2026-100292Improper neutralization of special elements used in an OS command ('OS command injection') in Anjvision YSSD-RTMP-H5Anjvision YSSD-RTMP-H5
- CVE-2026-96274Uncaught exception in Baicells Nova 430HBaicells Nova 430H eNodeB
- CVE-2026-76728Authenticated Server-Side Request Forgery Leading to Remote Code Execution in HPE Networking Instant ON APsHewlett Packard Enterprise (HPE) Instant ON
- CVE-2026-76727Authenticated Command Injection Vulnerabilities in HPE Networking Instant ONHewlett Packard Enterprise (HPE) Instant ON
- CVE-2026-76726Authentication Bypass Leading to Unauthorized Network Access in HPE Networking Instant ON API EndpointHewlett Packard Enterprise (HPE) Instant ON
- CVE-2026-61519Liberu CRM 0.9.1 < 10.0.0 Broken Access Control via TeamPolicy::addTeamMember()Liberu Software Liberu CRM
- CVE-2026-102831JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboardjupyterlab · notebook +2
- CVE-2026-102827simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291)steveukx git-js · simple-git
- CVE-2026-102826simple-git allows command execution through unblocked Git configuration includessteveukx git-js · simple-git
- CVE-2026-102823russh: Client-side channel-scoped Handler callbacks fire for channel IDs the client never openedEugeny russh · russh
- CVE-2026-84414IBM i is Affected By An Incorrect Permission Assignment Vulnerability in Network Authentication Service []IBM i
- CVE-2026-102730Mounting an attacker-controlled NAND flash image (`lx_nand_flash_open()`) triggers an unbounded out-of-bounds heap **write** in LevelX's NANEclipse Foundation eclipse-threadx/levelx
- CVE-2026-102639MobilityDB through 1.3.0 Out-of-bounds Read DoS via WKB DeserializationMobilityDB
- CVE-2026-84421DataStage on Cloud Pak for Data has several vulnerabilitiesIBM DataStage on Cloud Pak for Data
- CVE-2026-84422IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
- CVE-2026-102728Two client-side TLS/DTLS handshake parsers in NetX Secure read fields from a server-supplied message before validating that the message is lEclipse Foundation NetX Duo
- CVE-2026-84440IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
- CVE-2026-84842IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guardium Data Protection
- CVE-2026-102242Path Traversal via Symlink Following in allowedLocalRoots in MCP Toolbox for DatabasesGoogle MCP Toolbox for Databases
- CVE-2026-102718hey, `_nx_snmp_utility_object_id_get` in the NetX Duo SNMP addon does not validate the claimed OID data length against the actual buffer Eclipse Foundation NetX Duo
- CVE-2026-102716An unauthenticated client can drain the RTSP server's packet pool with a couple of dozen requests that carry a Session header the parser Eclipse Foundation eclipse-threadx/netxduo
- CVE-2026-102677Electron: Sandboxed preload code cache can be poisoned by a compromised rendererelectron
- CVE-2026-102715mDNS string-cache lookup matches on slot size, so a peer name aliases a shorter one and the response encoder writes past the packetEclipse Foundation eclipse-threadx/netxduo
- CVE-2026-102714`_nx_icmpv6_validate_options()` scans the option area with `while (length > 2)` (`common/src/nx_icmpv6_validate_options.c:79`).Eclipse Foundation NetX Duo
- CVE-2026-102713The TFTP server accepts a DATA datagram of any size.Eclipse Foundation NetX Duo
- CVE-2026-102712On the first DTLS ClientHello, the parser copies a device-claimed session_id length and validates the ciphersuite-list length against theEclipse Foundation NetX Duo
- CVE-2026-102709Improper validation of non-secure (NS) pointers in multiple TrustZone-M non-secure callable (NSC) entry functions allows an attacker executiEclipse Foundation ThreadX
- CVE-2026-102762The NetX Duo MQTT client leaks the packet carrying a malformed PUBLISH message.Eclipse Foundation NetX Duo
- CVE-2026-95380Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute Google Chrome
- CVE-2026-95326Incomplete cleanup in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass syGoogle Chrome
- CVE-2026-95319Use after free in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potGoogle Chrome
- CVE-2026-95334Incorrect reference resolution in WebProtect in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the rendeGoogle Chrome
- CVE-2026-95278Missing authorization in WakeLock in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer processGoogle Chrome
- CVE-2026-95285Missing authorization in WebView in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renGoogle Chrome
- CVE-2026-95333Use after free in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox viGoogle Chrome
- CVE-2026-95344Race condition in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass site isGoogle Chrome
- CVE-2026-95354Use after free in Verifier in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potGoogle Chrome
- CVE-2026-95341Improper input validation in Desktop in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer procGoogle Chrome
- CVE-2026-95353Use after free in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox viGoogle Chrome
- CVE-2026-95314Incorrect authorization in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process toGoogle Chrome
- CVE-2026-95276Improper input validation in Themes in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer proceGoogle Chrome
- CVE-2026-95345Use after free in Actor in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via aGoogle Chrome
- CVE-2026-95376Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57 allowed an adjacent attacker leveraging social engineeriGoogle Chrome
- CVE-2026-95369Inappropriate implementation in XML in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code Google Chrome
- CVE-2026-95362Cross-site request forgery in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to byGoogle Chrome
- CVE-2026-95381Improper input validation in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer proGoogle Chrome
- CVE-2026-95351Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to executGoogle Chrome
- CVE-2026-95306Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crGoogle Chrome
- CVE-2026-95304Out of bounds write in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox viaGoogle Chrome
- CVE-2026-95280Race condition in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crGoogle Chrome
- CVE-2026-95343Use after free in WebAudio in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox viGoogle Chrome
- CVE-2026-95365Type confusion in IndexedDB in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code inside tGoogle Chrome
- CVE-2026-95286Type confusion in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox viGoogle Chrome
- CVE-2026-95338Use after free in PDFium in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via Google Chrome
- CVE-2026-95335Use after free in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentiaGoogle Chrome
- CVE-2026-95348Use after free in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to poGoogle Chrome
- CVE-2026-95373Use after free in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to execute arbitrGoogle Chrome
- CVE-2026-95282Use after free in Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox viGoogle Chrome
- CVE-2026-95274Improper output encoding in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer procGoogle Chrome
- CVE-2026-95372Use after free in Chromecast in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to pGoogle Chrome
- CVE-2026-95298Use after free in Browser in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside theGoogle Chrome
- CVE-2026-95315Use after free in Aura in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside the saGoogle Chrome
- CVE-2026-95355Incorrect authorization in Navigation in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker who had compromised the reGoogle Chrome
- CVE-2026-95301Missing authorization in Extensions in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer proceGoogle Chrome
- CVE-2026-95322Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer Google Chrome
- CVE-2026-102760When NetX Secure is built with `NX_SECURE_KEY_CLEAR`, every TLS record sent on an active session is wiped after it has been handed to TCP.Eclipse Foundation NetX Duo
- CVE-2026-102758The `_nx_secure_x509_asn1_tlv_block_parse()` function parses ASN.1 TLV (tag-length-value) blocks out of DER-encoded data.Eclipse Foundation NetX Duo
- CVE-2026-102757An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing, in privileged mode,Eclipse Foundation ThreadX
- CVE-2026-102811Marmite through 0.4.2 Unauthenticated API Access via Development Serverrochacbruno marmite
- CVE-2026-102810Marmite through 0.4.2 Path Traversal via Development Serverrochacbruno marmite
- CVE-2026-102809PX4 Autopilot through 1.17.0 Stack Exhaustion via tests file2 CommandPX4-Autopilot
- CVE-2026-102808PX4 Autopilot through 1.17.0 NULL Pointer Dereference via sd_stressPX4-Autopilot
- CVE-2026-102560Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growthRed Hat Enterprise Linux
- CVE-2026-102559Libsoup: libsoup: heap buffer overflow during websocket client-frame maskingRed Hat Enterprise Linux
- CVE-2026-102558Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growthRed Hat Enterprise Linux
- CVE-2026-102555Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decodingRed Hat Enterprise Linux
- CVE-2026-102424Joomla Extension - balbooa.com - Unauthenticated path traversal exfiltrates local files through auto-reply attachments in Balbooa Forms < 2.4.3.4balbooa.com Balbooa Forms extension for Joomla
- CVE-2026-101127Joomla Extension - balbooa.com - Unauthenticated upload filename stored XSS in Balbooa Forms < 2.4.3.4balbooa.com Balbooa Forms extension for Joomla
- CVE-2026-102676Electron: <webview> can enable Node.js integration in Web Workers despite embedder restrictionselectron
- CVE-2026-102796Unauthenticated SQL injection in UserPageViewTracker via filterusers and ignoreusers parametersWikimedia Foundation Mediawiki - UserPageViewTracker Extens…
- CVE-2026-102675Electron: File and HTTP protocol handlers allow cross-origin reads without corsEnabledelectron
- CVE-2026-102674Electron: Windows opened from a sandboxed top-level document do not inherit its sandbox restrictionselectron
- CVE-2026-100244CentralAuth exposes locally suppressed block information via globaluserinfo API and Special:CentralAuth (incomplete fix for CVE-2025-62669)Wikimedia Foundation Mediawiki - CentralAuth Extension
- CVE-2026-102697Ollama 0.14.0 before 0.31.2 Experimental Agent Bash Approval Bypass via Prefix-Based Authorizationollama
- CVE-2026-90915Joomla! Core - [20260905] - Core - Arbitrary directory deletion via cache purge action in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3Joomla! Project Joomla! CMS · joomla
- CVE-2026-92226Joomla! Core - [20260913] - Core - Improper ACL checks for varous webservice edit tasks in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3Joomla! Project Joomla! CMS · joomla
- CVE-2026-92231Joomla! Core - [20260915] - Core - XSS filter bypass in InputFilter via HTML5 entity decode mismatch in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3Joomla! Project Joomla! CMS · Joomla! Project Joomla! Fr… +1
- CVE-2026-100242DataTransfer depends on phpspreadsheet version vulnerable to CVE-2026-59933 (XLS/OLE memory exhaustion)Wikimedia Foundation Mediawiki - DataTransfer Extension
- CVE-2026-92222Joomla! Core - [20260909] - Core - SSRF vectors in various core extensions in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3Joomla! Project Joomla! CMS · joomla
- CVE-2026-102673Electron drops inherited HTML sandbox restrictions for popups opened through OpenURLFromTabelectron
- CVE-2026-92227Joomla! Core - [20260914] - Core - MFA Authentication Bypass through rememberme cookies in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3Joomla! Project Joomla! CMS · joomla
- CVE-2026-92232Joomla! Core - [20260916] - Core - XSS filter bypass in InputFilter via whitespace characters in HTML data URIs in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3Joomla! Project Joomla! CMS · Joomla! Project Joomla! Fr… +1
- CVE-2026-100241Private change tags exposed to anonymous users via revision-tags-change eventsWikimedia Foundation Mediawiki - EventBus Extension
- CVE-2026-90913Joomla! Core - [20260903] - Core - Improper ACL checks for access level webservice endpoints in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3Joomla! Project Joomla! CMS · joomla
- CVE-2026-102557Libsoup: libsoup: heap buffer overflow during websocket message reassemblyRed Hat Enterprise Linux
- CVE-2026-102556Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusionRed Hat Enterprise Linux
- CVE-2026-102634SGLang through 0.5.20 Denial of Service via Duplicate bootstrap_roomsgl-project sglang
- CVE-2026-102633libexpat 2.7.2 through 2.8.5 Integer Overflow in expat_realloclibexpat
- CVE-2022-51019Akaunting before 2.1.31 OS Command Injection via app aliasakaunting
- CVE-2026-100288Cleartext storage of sensitive information in the database in Devolutions Server 2026.3.5.0 and earlier allows an attacker with read access Devolutions Server
- CVE-2026-92370Remote Session Access Control Bypass Leading to Remote Code ExecutionTeamViewer Full Client · TeamViewer Host
- CVE-2026-92371Local Privilege Escalation via Improper Link Resolution in Cloud Session RecordingTeamViewer Full Client · TeamViewer Host
- CVE-2026-92368Heap-Based Buffer Overflow in TeamViewer Session Recording Playback Leads to Remote Code ExecutionTeamViewer Full Client · TeamViewer Host
- CVE-2026-92369Time-of-check Time-of-use (TOCTOU) Race Condition in TeamViewer Windows Installer Rollback Mechanism Leads to Local Privilege EscalationTeamViewer Full Client · TeamViewer Host
- CVE-2026-19743Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) in TeamViewer Desktop ClientsTeamViewer Full Client · TeamViewer Host
- CVE-2026-97689urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memoryurllib3
- CVE-2026-84784QUIC: Unbounded RETIRE_CONNECTION_ID BacklogOpenSSL
- CVE-2026-84783Use-After-Free in X.509 Extension Cache Under Concurrent UseOpenSSL
- CVE-2026-84782DTLS Retransmits Handshake Messages From a Stale Buffer OffsetOpenSSL
- CVE-2026-72897Out-of-Bounds Access After SSL_set_SSL_CTX() During a HandshakeOpenSSL
- CVE-2026-54873QUIC STREAM Fragment Metadata DoSOpenSSL
- CVE-2026-97687urllib3: HTTPS proxy TLS configuration may be ignored or overriddenurllib3
- CVE-2026-102600Socket.IO: Prototype Pollution via Unsafe Client Session Lookupsocketio socket.io · @socket.io cluster-engine +1
- CVE-2026-100308GluonTS arbitrary command execution during model deserializationAWS gluonts
- CVE-2026-68911Nicotine+: Decompression of peer messages can exhaust available memorynicotine-plus
- CVE-2026-63209Integer Overflow or Wraparound and Out-of-bounds Write in compressklauspost compress · github.com/klauspost/compress
- CVE-2015-20122Seeyon A6 OA Unauthenticated SQL Injection via downloadAtt.jspYonyou A6 OA
- CVE-2026-86035Weblate: Mercurial argument injection via repository filenames allows authenticated command executionWeblateOrg weblate
- CVE-2026-102570ClipBucket v5 through 5.5.3-#197 SQL Injection via language_id ParameterMacWarrior clipbucket-v5
- CVE-2026-102569ClipBucket v5 through 5.5.3-#197 SQL Injection via videoid ParameterMacWarrior clipbucket-v5
- CVE-2026-102566CTranslate2 before 4.8.1 Heap Buffer Overflow via model.binOpenNMT CTranslate2
- CVE-2026-65102NVIDIA DeepStream contains a vulnerability where an attacker could cause an integer overflow by supplying crafted tensor dimensions in a YANVIDIA DeepStream
- CVE-2026-97395Apache Polaris: Allows authorized table writers to redirect server-side Iceberg FileIO requests to attacker-controlled endpoints using operation-scoped storage credentialsApache Software Foundation Apache Polaris
- CVE-2026-86450Sensitive Data Exposure in Parla Auto's DetaWix Mobile Web PortalParla Auto Automotive Trading Limited Company DetaWix Mobil…
- CVE-2026-102521lib0 `readFromDataView` out-of-bounds readdmonad lib0
- CVE-2026-102360lib0 `readUint8Array` performs an unbounded read past the end of the decoder’s view, disclosing adjacent process memorydmonad lib0
- CVE-2026-4034TIBCO Administrator Injection VulnerabilityTibco Administrator
- CVE-2026-82804Apache DolphinScheduler: Command Injection in the Alert Script PluginApache Software Foundation Apache DolphinScheduler
- CVE-2026-100832Use-after-free in the Graphics: Canvas2D componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100831Use-after-free in the DOM: UI Events & Focus Handling componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100830Mitigation bypass in the DOM: Navigation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100825Use-after-free in the JavaScript Engine: JIT componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100824Privilege escalation in the Places componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100820Privilege escalation in the Address Bar componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100816Site isolation issue in the DOM: Networking componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100815Use-after-free in the CSS Parsing and Computation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100814Incorrect boundary conditions in the JavaScript Engine: JIT componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100813Invalid pointer in the JavaScript Engine: JIT componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100809Same-origin policy bypass in the DevTools componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100808Mitigation bypass in the DOM: Service Workers componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100807Privilege escalation in the DOM: Service Workers componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100805Race condition, use-after-free in the Audio/Video componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100803Same-origin policy bypass in the WebExtensions componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100801Privilege escalation in the DLL Services componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100798Cryptography misuse in Storage: Quota Manager componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100797Privilege escalation due to use-after-free in the Graphics: WebRender componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100796Use-after-free in the JavaScript: WebAssembly componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100792JIT miscompilation in the JavaScript: WebAssembly componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100791Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100790Use-after-free in the XSLT componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100789Use-after-free in the Graphics: Canvas2D componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100785Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100784Use-after-free in the Layout: Text and Fonts componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100782Privilege escalation due to incorrect boundary conditions in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100780Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100779Use-after-free in the XSLT componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100777Use-after-free in the Graphics: Canvas2D componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100776Use-after-free in the JavaScript: WebAssembly componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100774Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100773Use-after-free in the Storage: IndexedDB componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100772Use-after-free in the DOM: Core & HTML componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100771Undefined behavior in the DOM: Streams componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100769Use-after-free in the JavaScript: WebAssembly componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100768Use-after-free in the Graphics: WebGPU componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100767Use-after-free in the Networking: Cache componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100765Use-after-free in the JavaScript: WebAssembly componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100764Privilege escalation due to incorrect boundary conditions in the Graphics: WebGPU componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100761Privilege escalation due to use-after-free in the Graphics: WebGPU componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100759Uninitialized memory in the Storage: Quota Manager componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100757Use-after-free in the Widget componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100756Incorrect boundary conditions in the Audio/Video: Playback componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-7193Multiple vulnerabilities in the T-CPE301K 4G Mini WiFi Router from Shenzhen Dbit Network EquipmentShenzhen Dbit Network Equipment T-CPE301K 4G Mini WiFi Rout…
- CVE-2026-102437Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in DeepSeek-Reasonixesengine DeepSeek-Reasonix
- CVE-2026-98164KVM: x86/mmu: Check write tracking in all address spacesLinux
- CVE-2026-73598Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical ResDell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-87748Privilege Escalation via Account Takeover in Interprobe's Qorela DCInterprobe Information Technologies Qorela DC
- CVE-2026-102497Apache XMLSchema: Denial of service through cyclic schema definitions in the schema walkerApache Software Foundation Apache XMLSchema
- CVE-2026-102496Apache XMLSchema: Denial of service through deeply nested schema structuresApache Software Foundation Apache XMLSchema
- CVE-2026-102495Apache XMLSchema: Denial of service through unbounded recursion when resolving schema imports and includesApache Software Foundation Apache XMLSchema
- CVE-2026-95520Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packagesRed Hat Enterprise Linux · Red Hat Hardened Images
- CVE-2026-95509Out-of-bounds read vulnerability in string formatting impacts Qt for MCUsQt for MCUs
- CVE-2026-19547Local Privilege Escalation in Ghostscript for WindowsArtifex Software Ghostscript
- CVE-2026-76719HPE OneView - Cross-site scripting vulnerabilityHewlett Packard Enterprise HPE OneView
- CVE-2026-76718HPE OneView - Cross-site scripting vulnerabilityHewlett Packard Enterprise HPE OneView
- CVE-2026-7395Asset Suite allows unauthenticated users to access HTTPPublishAdapterTestServlet that can be used for configuration file upload, leading to Hitachi Energy Asset Suite
- CVE-2026-84739Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabGitLab
- CVE-2026-95389Heap-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-95387Heap-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-96440Flowring Agentflow 4.0 - Improper Limitation of a Pathname to a Restricted Directory（Path Traversal）Flowring Technology Agentflow
- CVE-2026-92142Apache Karaf: Authorization bypass in JMX MBean lifecycle operationsApache Software Foundation Apache Karaf
- CVE-2026-96430Flowring Agentflow 4.0 - Exposed Dangerous Method or FunctionFlowring Technology Agentflow
- CVE-2026-101169In affected versions of Octopus Server, an authenticated user with permissions to edit an Environment or Project can set specifically crafteOctopus Deploy Octopus Server
- CVE-2026-86158Missing Authentication in the local .NET backend of Progress Telerik Fiddler EverywhereProgress Software Progress® Telerik® Fiddler® Everywhere
- CVE-2026-102422shell-quote `quote()` command injection via a line terminator in a token after a `{ comment }` tokenshell-quote
- CVE-2026-97024Flatpak: flatpak: arbitrary write in root context via path traversal in deploy directory files/etcRed Hat Enterprise Linux
- CVE-2026-102247FastAdmin Database Management database.php unnecessary privilegesFastAdmin
- CVE-2026-97685LimeSurvey Community Edition 7.3.0 - Cross-survey object authorization bypass in REST survey patch operationsLimeSurvey
- CVE-2026-101878Bitwarden Server 2025.6.0 < 2025.6.0 Authentication Bypass via SSO Identifier Truncationbitwarden server
- CVE-2026-101860RaspAP raspap-webgui sudo Configuration PluginInstaller.php addSudoers privileges managementraspap-webgui
- CVE-2026-96326HT Contact Form – Drag & Drop Form Builder for WordPress <= 2.10.2 Unauthenticated Stored Cross-Site Scripting via Rich Text Editor Fieldhtplugins HT Contact Form – Drag & Drop Form Builder for Wo…
- CVE-2026-102373GestSup before 3.2.62 Private Ticket Comment Disclosure via threadedit ParameterGestSup
- CVE-2026-67987crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains polynomial-time regular expression denial-of-service conditions i
- CVE-2026-67993basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f contains a login cross-site request forgery issue in the static credenti
- CVE-2026-79403An issue in Kilo Code before v7.4.1 allows a local attacker to execute arbitrary code via the permission/allow-everything endpoint
- CVE-2026-94953A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030.
- CVE-2026-94954A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030.
Medium, low and unrated 263
- CVE-2026-103051Stored i18n XSSs in CentralNoticeThe Wikimedia Foundation Mediawiki - CentralNotice extension
- CVE-2026-103050Stored i18n XSS in MassMessageThe Wikimedia Foundation Mediawiki - MassMessage extension
- CVE-2026-103049XSS in Cargo's Special:CargoQuery page due to unsanitized table headersThe Wikimedia Foundation Mediawiki - Cargo extension
- CVE-2026-86105Fireware OS Improper Authorization in Access Portal Reverse ProxyWatchGuard Fireware OS
- CVE-2026-103048Open Redirect in Special:BookThe Wikimedia Foundation Mediawiki - Collection extension
- CVE-2026-103047XSS through i18n message in CentralAuthThe Wikimedia Foundation Mediawiki - CentralAuth extension
- CVE-2026-103045XSS in Refreshed skinThe Wikimedia Foundation Mediawiki - Refreshed skin
- CVE-2026-103046WikifunctionsFragmentRenderer does unsafe string replacements on user-provided HTMLThe Wikimedia Foundation Mediawiki - WikiLambda Extension
- CVE-2026-102771Naichen ThinkCMF Email Template MailController.php templatePut special elements in template engineNaichen ThinkCMF
- CVE-2026-71189Toptech TMS7 and TopHAT Cross-site ScriptingToptech Systems TMS7 · Toptech Systems TopHAT
- CVE-2026-69662Toptech TMS7 and TopHAT Eval InjectionToptech Systems TMS7 · Toptech Systems TopHAT
- CVE-2026-102621Freedesktop Poppler SplashClip.cc clipToPath integer overflowFreedesktop Poppler
- CVE-2026-71974U-Boot before 2026.10-rc3 Out-of-Bounds Write via Android Bootmeth Partition Readu-boot
- CVE-2026-71973U-Boot before 2026.10-rc4 Integer Overflow in SquashFS Directory Table Allocationu-boot
- CVE-2026-71972U-Boot through 2026.10-rc5 Out-of-Bounds Write in BMP RLE8 Decoderu-boot
- CVE-2026-102938virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injectionpypa virtualenv · virtualenv
- CVE-2026-81842Library panel can be moved into a folder without library panel create permissionGrafana Enterprise · Grafana OSS
- CVE-2026-102904JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLsjupyterlab
- CVE-2026-81841Paused shared dashboard access tokens still expose data source configurationGrafana Enterprise · Grafana OSS
- CVE-2026-102620Freedesktop Poppler FoFiTrueType.cc cvtSfnts integer overflowFreedesktop Poppler
- CVE-2026-102879ClaraVerse through 0.3.1 SSRF Protection Bypassclaraverse-space ClaraVerse
- CVE-2026-102877Fider before 0.38.0 SSRF via DNS rebinding in webhook validationgetfider fider
- CVE-2026-100299Use of Weak Credentials in Anjvision YSSD-RTMP-H5Anjvision YSSD-RTMP-H5
- CVE-2026-100297Server-Side request forgery (SSRF) in Anjvision YSSD-RTMP-H5Anjvision YSSD-RTMP-H5
- CVE-2026-102305UI misrepresentation in SignIn in Google Chrome on on iOS prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafteGoogle Chrome
- CVE-2026-102314UI misrepresentation in TabStrip in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafted HTML pGoogle Chrome
- CVE-2026-102330Incorrect authorization in SiteIsolation in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer Google Chrome
- CVE-2026-102310Missing authorization in Payments in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer processGoogle Chrome
- CVE-2026-102320Missing authorization in CORS in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to Google Chrome
- CVE-2026-102315Uninitialized resource in Media in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker who had compromised the rendGoogle Chrome
- CVE-2026-102329Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin policy into a privilegeGoogle Chrome
- CVE-2026-102318Out of bounds read in WebGL in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a craftGoogle Chrome
- CVE-2026-102319Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to Google Chrome
- CVE-2026-102325Uninitialized resource in Skia in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HGoogle Chrome
- CVE-2026-102300Uninitialized resource in WebGPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a craftedGoogle Chrome
- CVE-2026-102311Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderGoogle Chrome
- CVE-2026-102303Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data viGoogle Chrome
- CVE-2026-102307Uninitialized resource in Dawn in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to read memory outside the saGoogle Chrome
- CVE-2026-102313Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sGoogle Chrome
- CVE-2026-102312UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to spoof address bar via a cGoogle Chrome
- CVE-2026-100295Active debug code in Anjvision YSSD-RTMP-H5Anjvision YSSD-RTMP-H5
- CVE-2026-53989Dockhand < 1.0.36 Open Redirect via OIDC Initiation EndpointFinsys dockhand
- CVE-2026-102252Path Traversal in VMDK Extractor in OSV-SCALIBRGoogle OSV-SCALIBR
- CVE-2026-76738Authenticated Buffer Overflow Vulnerability in the API Endpoint of HPE Networking Instant On Causes Denial-of-ServiceHewlett Packard Enterprise (HPE) Instant ON
- CVE-2026-76737Authenticated Local Path Traversal Vulnerability Leads to Denial-of-Service in HPE Networking Instant OnHewlett Packard Enterprise (HPE) Instant ON
- CVE-2026-76736Authenticated Local Buffer Overflow Vulnerability leads to Denial-of-Service in HPE Networking Instant OnHewlett Packard Enterprise (HPE) Instant ON
- CVE-2026-76735Authenticated Local Sensitive Information Disclosure in HPE Networking Instant OnHewlett Packard Enterprise (HPE) Instant ON
- CVE-2026-76734Unauthenticated Memory Corruption Vulnerability leads to Denial-of-Service in HPE Networking Instant OnHewlett Packard Enterprise (HPE) Instant ON
- CVE-2026-76733Authenticated Denial-of-Service Vulnerability in HPE Networking Instant On API EndpointHewlett Packard Enterprise (HPE) Instant ON
- CVE-2026-76732Authenticated Local Privilege Escalation Vulnerability in a Daemon of HPE Networking Instant ONHewlett Packard Enterprise (HPE) Instant ON
- CVE-2026-76731Authentication Bypass in the Captive Portal of HPE Networking Instant OnHewlett Packard Enterprise (HPE) Instant ON
- CVE-2026-76730Improper PAPI Packet handling leads to unauthorized access in HPE Networking Instant ON APsHewlett Packard Enterprise (HPE) Instant ON
- CVE-2026-76729Authenticated Format String Vulnerability allows Memory Corruption in HPE Networking Instant ON API EndpointHewlett Packard Enterprise (HPE) Instant ON
- CVE-2026-102830JupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package (jupyterlab.json)jupyterlab · jupyterlite-core
- CVE-2026-102616risesoft-y9 WorkFlow-Engine OAuth2 Resource Filter CustomHistoricProcessServiceImpl.java getByIdAndYear sql injectionrisesoft-y9 WorkFlow-Engine
- CVE-2026-102825Russh: Configured server auth-attempt cap is not enforced in the USERAUTH_REQUEST runtime pathEugeny russh · russh
- CVE-2026-102824Russh: Missing X25519 zero-point validation in hybrid ML-KEM key exchangeEugeny russh · russh
- CVE-2026-102822russh: negotiating a MAC-requiring block cipher (CTR/CBC) with mac=none causes a slice-index-out-of-range panicEugeny russh · russh
- CVE-2026-102821Russh: Unbounded memory exhaustion via CHANNEL_OPEN flood during a client-stalled rekeyEugeny russh · russh
- CVE-2026-102820pageant: Out-of-bounds read / oversized allocation in `pageant` MemoryMap::read via a malicious Pageant agent (Windows)Eugeny russh · rust pageant +1
- CVE-2026-102729`gx_binres_theme_load()` sizes its theme buffer for the theme it was asked for, and allocates it even when the resource holds no theme with Eclipse Foundation GUIX
- CVE-2026-102727FTP Passive Data Connection Not Bound to the Authenticated Control PeerEclipse Foundation NetX Duo
- CVE-2026-102726Unbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds ReadEclipse Foundation NetX Duo
- CVE-2026-102725Out-of-bounds Read from Unvalidated MSRP Attribute List LengthEclipse Foundation NetX Duo
- CVE-2026-102724NULL Pointer Dereference When Evicting the Sole MSRP AttributeEclipse Foundation NetX Duo
- CVE-2026-102723NULL Pointer Dereference on MSRP Attribute Table ExhaustionEclipse Foundation NetX Duo
- CVE-2026-102722In the IPv4 PASV path, the FTP Client accepts whatever address was sent in the server's `227` reply.Eclipse Foundation NetX Duo
- CVE-2026-102721A TFTP server that answers with a short ERROR packet makes the client read up to 64 bytes past the received datagram.Eclipse Foundation NetX Duo
- CVE-2026-102720A DHCP server, or anyone on the LAN who answers a DISCOVER first, can make the client read about a kilobyte past the end of the received Eclipse Foundation eclipse-threadx/netxduo
- CVE-2026-12345Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directoryPython Software Foundation CPython · libpython +2
- CVE-2026-102719Predictable DTLS HelloVerifyRequest Cookie in NetX SecureEclipse Foundation netxduo
- CVE-2026-102711Two issues in the ThreadX loadable-module loader, reached when a device loads an attacker-controlled module object via `_txm_module_manager_Eclipse Foundation `eclipse-threadx/threadx`
- CVE-2026-95305UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof Google Chrome
- CVE-2026-95364Improper input validation in Passwords in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted Google Chrome
- CVE-2026-95340Incorrect authorization in PictureInPicture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering Google Chrome
- CVE-2026-95328Confused deputy in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker leveraging social engineering to obGoogle Chrome
- CVE-2026-95316Unchecked return value in Performance in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially read memory via a locaGoogle Chrome
- CVE-2026-95296Missing authorization in Core in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to oGoogle Chrome
- CVE-2026-95342Missing authorization in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted HTMLGoogle Chrome
- CVE-2026-95288UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafteGoogle Chrome
- CVE-2026-95361Confused deputy in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web orGoogle Chrome
- CVE-2026-95309UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafteGoogle Chrome
- CVE-2026-95368Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potenGoogle Chrome
- CVE-2026-95385Inappropriate implementation in PlatformIntegration in Google Chrome on on Windows prior to 154.0.8037.57 allowed a remote attacker leveragiGoogle Chrome
- CVE-2026-95367Information leak in DataTransfer in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process Google Chrome
- CVE-2026-95279UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to spoof address bar via a cGoogle Chrome
- CVE-2026-95352Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypasGoogle Chrome
- CVE-2026-95292Incorrect authorization in Safebrowsing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictioGoogle Chrome
- CVE-2026-95308Integer overflow in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to poGoogle Chrome
- CVE-2026-95327Information leak in Networking in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to leak sensitive information via a craftedGoogle Chrome
- CVE-2026-95307UI misrepresentation in ExtensionsMenu in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spGoogle Chrome
- CVE-2026-95358Incorrect authorization in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to bypass system access resGoogle Chrome
- CVE-2026-95289Incorrect authorization in Scroll in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain Google Chrome
- CVE-2026-95312Information leak in Passwords in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to Google Chrome
- CVE-2026-95332Use of uninitialized variable in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to read memory outsideGoogle Chrome
- CVE-2026-95323UI misrepresentation in Chromium in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering tGoogle Chrome
- CVE-2026-95321UI misrepresentation in Payments in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a Google Chrome
- CVE-2026-95300Missing authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass Google Chrome
- CVE-2026-95374Incorrect authorization in Network in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a craftGoogle Chrome
- CVE-2026-95275Incorrect reference resolution in MediaStream in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy Google Chrome
- CVE-2026-95290Missing authorization in NFC in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bGoogle Chrome
- CVE-2026-95336Information leak in Transactions Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering toGoogle Chrome
- CVE-2026-95384Race condition in Transactions Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially leak sensitive infoGoogle Chrome
- CVE-2026-95363UI misrepresentation in FileSystem in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof Google Chrome
- CVE-2026-95371Missing authorization in Views in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer Google Chrome
- CVE-2026-95295Information leak in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a local attacker to leak sensitive information via physGoogle Chrome
- CVE-2026-95360Race condition in Editing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain sensitivGoogle Chrome
- CVE-2026-95303Incomplete cleanup in SmartCard in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass syGoogle Chrome
- CVE-2026-95370Inappropriate implementation in NFC in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions vGoogle Chrome
- CVE-2026-95330Improper state validation in Downloads in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictionGoogle Chrome
- CVE-2026-95317Incorrect authorization in MediaCapture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to oGoogle Chrome
- CVE-2026-95320Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer proceGoogle Chrome
- CVE-2026-95346UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via crafted networGoogle Chrome
- CVE-2026-95337UI misrepresentation in Messages in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker leveraging social engineeriGoogle Chrome
- CVE-2026-95294UI misrepresentation in Browser in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI Google Chrome
- CVE-2026-95359Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderGoogle Chrome
- CVE-2026-95302Incorrect authorization in WebAPKs in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to obtain cross-origin datGoogle Chrome
- CVE-2026-95375Incorrect authorization in BrowserTag in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer proGoogle Chrome
- CVE-2026-95297Missing authorization in Contextual Tasks in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via Google Chrome
- CVE-2026-95382Improper input validation in Auth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer processGoogle Chrome
- CVE-2026-95366Use of released resource in Core in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process Google Chrome
- CVE-2026-95287Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer proceGoogle Chrome
- CVE-2026-95293Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to read memory outside the sandbox via a craGoogle Chrome
- CVE-2026-95324Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to Google Chrome
- CVE-2026-95291UI misrepresentation in SecurityIndicators in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof address bar Google Chrome
- CVE-2026-102759NetX Secure TLS accepts an empty application-data record without verifying its message authentication code.Eclipse Foundation NetX Duo
- CVE-2026-102807OpenClaw before 2026.9.4 Authorization Bypass via MCP App Standalone TicketOpenClaw
- CVE-2026-102806OpenClaw before 2026.9.5 Sandbox Isolation Bypass via Media PipelinesOpenClaw
- CVE-2026-102623Kubevirt: kubevirt: virt-controller nil-pointer dereference via malformed ephemeral volumeRed Hat OpenShift Virtualization
- CVE-2026-101126Joomla Extension - balbooa.com - File meta data tampering in Balbooa Forms < 2.4.3.4balbooa.com Balbooa Forms extension for Joomla
- CVE-2026-101112Joomla Extension - balbooa.com - Unauthorized Deletion of Attachments in Balbooa Forms < 2.4.3.4balbooa.com Balbooa Forms extension for Joomla
- CVE-2026-100245Stored XSS on Wikibase Special:SetSiteLink via unescaped system messageWikimedia Foundation Mediawiki - Wikibase Extension
- CVE-2026-92224Joomla! Core - [20260911] - Core - XSS in link toolbar layout in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3Joomla! Project Joomla! CMS · joomla
- CVE-2026-90907Joomla! Core - [20260902] - Core - Unauthorized user account creation via profile.save controller in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3Joomla! Project Joomla! CMS · joomla
- CVE-2026-100243Stored XSS in WikiSEO author and image properties on action=infoWikimedia Foundation Mediawiki - WikiSEO Extension
- CVE-2026-90914Joomla! Core - [20260904] - Core - XSS in the generic media output layouts in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3Joomla! Project Joomla! CMS · joomla
- CVE-2026-90918Joomla! Core - [20260908] - Core - XSS in HTML Mail Templates in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3Joomla! Project Joomla! CMS · joomla
- CVE-2026-92223Joomla! Core - [20260910] - Core - Improper ACL checks for workflow stage changes in Joomla 5.0.0-5.4.8, 6.0.0-6.1.3Joomla! Project Joomla! CMS · joomla
- CVE-2026-90917Joomla! Core - [20260907] - Core - Improper ACL checks in outputs for tagged items in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3Joomla! Project Joomla! CMS · joomla
- CVE-2026-92225Joomla! Core - [20260912] - Core - XSS in module list in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3Joomla! Project Joomla! CMS · joomla
- CVE-2026-90916Joomla! Core - [20260906] - Core - Improper ACL checks in content history comparison view in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3Joomla! Project Joomla! CMS · joomla
- CVE-2026-90906Joomla! Core - [20260901] - XSS in HTMLHelper::link method in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3Joomla! Project Joomla! CMS · joomla
- CVE-2026-100238Flow colon-separator and flow-guidedtour-optin-welcome-description messages allow stored XSSWikimedia Foundation Mediawiki - Flow Extension
- CVE-2026-102635ImageMagick before 7.1.2-32 and 6.9.13-57 Uninitialized Heap Memory Disclosure in GIF DecoderImageMagick
- CVE-2026-97711Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script> in serialized function bodiesyahoo serialize-javascript · serialize-javascript
- CVE-2026-100289Missing authorization in the gateway network scan token API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileDevolutions Server
- CVE-2026-102630UnoPim 2.0.0 before 2.0.1 and 2.1.0 before 2.1.1 Cache Poisoning via X-Forwarded-Hostunopim
- CVE-2026-100287Missing authorization in the attachment history API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileged userDevolutions Server
- CVE-2026-100286Missing authorization in the data source settings API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated non-administrativDevolutions Server
- CVE-2026-77696Timing Side-Channel in SM2 Signature GenerationOpenSSL
- CVE-2026-75806Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoSOpenSSL
- CVE-2026-75805NULL Pointer Dereference in CMP Client Revocation Response HandlingOpenSSL
- CVE-2026-75804QUIC Connection-Level Flow Control is Not Enforced for StreamsOpenSSL
- CVE-2026-97688urllib3: Chunked Deflate streaming can enter an infinite loopurllib3
- CVE-2026-54875Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-VOpenSSL
- CVE-2026-54872Timing Side-Channel in Scalar Multiplication for Non-NIST EC CurvesOpenSSL
- CVE-2026-42772Potential CPU DoS via O(n^2) Fragment Reassembly in QUICOpenSSL
- CVE-2026-35191QUIC Unvalidated Amplification Credit may be Over AccountedOpenSSL
- CVE-2026-35189Excessive Memory Allocation in Relative CRLDP ProcessingOpenSSL
- CVE-2026-93332Improper access control in the partial connection API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileged usDevolutions Server
- CVE-2026-102601Flysystem: WhitespacePathNormalizer's control-character (CorruptedPathDetected) check is bypassed by malformed UTF-8 in the path, affecting every adapterthephpleague flysystem · league/flysystem
- CVE-2026-93330Improper rule enforcement in the PAM Active Directory provider in Devolutions Server 2026.3.5 allows a user with PAM edit permissions to bypDevolutions Server
- CVE-2026-102598Werkzeug safe_join() allows Windows special device namespallets werkzeug · werkzeug
- CVE-2026-102491mahonelau kykms SqlInjectionUtil QueryGenerator.java QueryGenerator.doMultiFieldsOrder sql injectionmahonelau kykms
- CVE-2026-22101Sensitive information leak through hidden menuEVbee DC-80
- CVE-2026-102568Pardus Parental Control before 0.7.0 Incorrect Authorization via PPCActivator.pypardus-parental-control
- CVE-2026-102567CTranslate2 before 4.8.1 Out-of-Bounds Read via Model DeserializationOpenNMT CTranslate2
- CVE-2025-33207NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access controlNVIDIA BlueField GA · NVIDIA BlueField LTS23 +5
- CVE-2026-102371wsl-pro-service: Ubuntu Pro token exposed via process command-line argumentsCanonical Ubuntu Pro for WSL
- CVE-2026-71897Apache DolphinScheduler: Allows unauthorized workflow operations through batch-copy and batch-move endpointsApache Software Foundation Apache DolphinScheduler
- CVE-2026-71898Apache DolphinScheduler: Improper Authorization Allows Project Read-Only Users to Execute Workflows and Tamper with Workflow DefinitionsApache Software Foundation Apache DolphinScheduler
- CVE-2026-71899Apache DolphinScheduler: Missing Authorization in query-dynamic-sub-workflows API Leads to Information DisclosureApache Software Foundation Apache DolphinScheduler
- CVE-2026-78214Apache DolphinScheduler: Actuator Endpoint Authentication Bypass via Percent-Encoded PathsApache Software Foundation Apache DolphinScheduler
- CVE-2026-81569Apache DolphinScheduler: Improper Authorization in Sub-Workflow Tasks Allows Unauthorized Workflow ExecutionApache Software Foundation Apache DolphinScheduler
- CVE-2026-76875PyPy pyexpat ExternalEntityParserCreate Use-After-FreePyPy
- CVE-2026-100826Denial-of-service in the Storage: StorageManager componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100823Spoofing issue in the Downloads component in Firefox for AndroidMozilla Firefox
- CVE-2026-100822Spoofing issue in the Networking: HTTP componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100821Site isolation issue in the Panning and Zooming componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100817Other issue in the JavaScript: WebAssembly componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100812Denial-of-service in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100806Uninitialized memory in the Graphics: WebGPU componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100802Uninitialized memory in the Graphics: WebGPU componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100799Uninitialized memory in the Graphics: WebGPU componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100795Denial-of-service in the Networking componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-96869Information disclosure in the Networking componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100793JIT miscompilation in the JavaScript Engine componentMozilla Thunderbird · Mozilla Firefox
- CVE-2026-100783Uninitialized memory in the Audio/Video componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-100766Information disclosure in the Networking: JAR componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-76114Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cleartext Transmission of Sensitive Information vDell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-73599Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an URL Redirection to Untrusted Site ('Open RedirecDell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-101271OAuth credentials not disabled when application is disabledpretix
- CVE-2026-101270HTML injectionpretix
- CVE-2026-101269Incorrect session validation for API-uploaded filespretix
- CVE-2026-101268Customer session fixationpretix
- CVE-2026-101267Revenue information leakpretix
- CVE-2026-73597Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cross-Site Request Forgery (CSRF) vulnerability.Dell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-101266Checkout validation bypasspretix
- CVE-2026-73596Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure DeDell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-102507Sliver 1.7.7 Denial of Service via PE Parser Slice Bounds in Operator RPCBishopFox sliver
- CVE-2026-66083Apache DolphinScheduler: Unauthorized Disclosure of Data Source Information via /datasources/unauth-datasourceApache Software Foundation Apache DolphinScheduler
- CVE-2026-41875Cross-Site Request Forgery in admin panel of Quick.CartOpenSolution Quick.Cart
- CVE-2026-73595Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Download of Code Without Dell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-73594Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate ValDell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-73593Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Active Debug Code vulnerability.Dell Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-76720HPE OneView - URL Redirect vulnerabilityHewlett Packard Enterprise HPE OneView
- CVE-2026-86843Apache Airflow Teradata provider: SQL injection via unvalidated Dag Params in the compute-cluster example DagApache Software Foundation Apache Airflow Teradata provider
- CVE-2026-81930Apache Airflow Snowflake provider: Unvalidated account field redirects SQL API bearer token off-domainApache Software Foundation Apache Airflow Snowflake provide…
- CVE-2026-81862Apache Airflow Teradata provider: Teradata transfer operators embed cloud storage credentials in SQL text, task logs and Teradata query logsApache Software Foundation Apache Airflow Teradata provider
- CVE-2026-81914Apache Airflow Google provider: Google Drive query injection via unescaped file and folder namesApache Software Foundation Apache Airflow Google provider ·…
- CVE-2026-11796Asset Suite allows unauthenticated users to access PropertiesReloadServlet, CacheFlushServlet, MetadataCacheFlushServlet and ResourceBundleRHitachi Energy Asset Suite
- CVE-2026-4523Missing Authorization in GitLabGitLab
- CVE-2026-8937Missing Authorization in GitLabGitLab
- CVE-2026-10518Incorrect Authorization in GitLabGitLab
- CVE-2026-8067An improper authorization vulnerability in the end-of-life versions of RTU500’s web application allows an authenticated user to trigger the Hitachi Energy RTU500 series CMU firmware
- CVE-2026-95391Use After Free in WiresharkWireshark Foundation Wireshark
- CVE-2026-95386Loop with Unreachable Exit Condition ('Infinite Loop') in WiresharkWireshark Foundation Wireshark
- CVE-2026-95390NULL Pointer Dereference in WiresharkWireshark Foundation Wireshark
- CVE-2026-95395Missing Release of Memory after Effective Lifetime in WiresharkWireshark Foundation Wireshark
- CVE-2026-95394Unchecked Input for Loop Condition in WiresharkWireshark Foundation Wireshark
- CVE-2026-95393Heap-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-95392Buffer Over-read in WiresharkWireshark Foundation Wireshark
- CVE-2026-95388Heap-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-96422Reachable Assertion in WiresharkWireshark Foundation Wireshark
- CVE-2026-96421Improperly Controlled Sequential Memory Allocation in WiresharkWireshark Foundation Wireshark
- CVE-2026-96417Heap-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-96418Loop with Unreachable Exit Condition ('Infinite Loop') in WiresharkWireshark Foundation Wireshark
- CVE-2026-96419Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in WiresharkWireshark Foundation Wireshark
- CVE-2026-96420Buffer Over-read in WiresharkWireshark Foundation Wireshark
- CVE-2026-96423Heap-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-96416Heap-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-96415Stack-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-102474Dash: dash: heap out-of-bounds write in conv_escape via undersized unicode escape reservationRed Hat Enterprise Linux
- CVE-2026-102473Dash: dash: super-polynomial backtracking in pmatch when libc fnmatch is disabledRed Hat Enterprise Linux
- CVE-2026-91085Apache Karaf: config:install missing ACL entry allows privilege escalation to adminApache Software Foundation Apache Karaf
- CVE-2026-86157Exposure of Privileged IPC Functionality in Progress Telerik Fiddler EverywhereProgress Software Progress® Telerik® Fiddler® Everywhere
- CVE-2026-102293realjerrytang tacomall api-admin Backend ApiMaApplication.java OrgStaffServiceImpl.add improper authorizationrealjerrytang tacomall
- CVE-2026-102292coolbeans1212 MateisHomePage-Website users.php cross site scriptingcoolbeans1212 MateisHomePage-Website
- CVE-2026-102290CodeCanyon Rocket LMS Student Profile Image Upload cross site scriptingCodeCanyon Rocket LMS
- CVE-2026-102264mwasikz robo-cafe-rms Edit Profile Feature update-account.php cross site scriptingmwasikz robo-cafe-rms
- CVE-2026-102263mwasikz robo-cafe-rms manage-food.php unrestricted uploadmwasikz robo-cafe-rms
- CVE-2026-102261owen2345 Camaleon CMS Media Crop media_controller.rb crop authorizationowen2345 Camaleon CMS
- CVE-2026-102249REBUILD file-editor-save authorizationREBUILD
- CVE-2026-97029Flatpak: flatpak: sandboxed app can signal unsandboxed processes in the same process groupRed Hat Enterprise Linux
- CVE-2026-102414pbkdf2 rehashes long passwords on every iteration, enabling denial of servicebrowserify pbkdf2 · pbkdf2
- CVE-2026-102248Rebuild Login Endpoint login improper authenticationRebuild
- CVE-2026-102245MODSetter SurfSense circleback Endpoint circleback_webhook_route.py missing authenticationMODSetter SurfSense
- CVE-2026-102244MODSetter SurfSense Document Export Feature editor_routes.py server-side request forgeryMODSetter SurfSense
- CVE-2026-102243MODSetter SurfSense MCP Connector Integration test command injectionMODSetter SurfSense
- CVE-2026-102241Netcore NAP930 Backup/Restore backup_common.sh hard-coded keyNetcore NAP930
- CVE-2026-101859RaspAP raspap-webgui OpenVPN Configuration del_ovpncfg.php escapeshellcmd os command injectionraspap-webgui
- CVE-2026-101858RaspAP raspap-webgui SSID Processing WiFiManager.php writeWpaSupplicant os command injectionraspap-webgui
- CVE-2026-101281Trusted Domain Project OpenDMARC SPF Macro opendmarc_spf.c opendmarc_sp2_find_mailfrom_domain improper authenticationTrusted Domain Project OpenDMARC
- CVE-2026-102374GestSup before 3.2.62 Stored XSS via Double-Decoded Email Subject in OAuth IMAP ConnectorGestSup
- CVE-2026-102372GestSup before 3.2.61 Stored XSS via Email Body in LOGIN IMAP ConnectorGestSup
- CVE-2026-101280Trusted Domain Project OpenDMARC Multi-Record Set opendmarc_policy_query_dmarc authentication spoofingTrusted Domain Project OpenDMARC
- CVE-2026-101279Trusted Domain Project OpenDMARC opendmarc_policy.c integer overflowTrusted Domain Project OpenDMARC
- CVE-2026-101278Trusted Domain Project OpenDMARC PSL Wildcard opendmarc_tld.c : opendmarc_get_tld origin validationTrusted Domain Project OpenDMARC
- CVE-2024-31027Cross Site Scripting vulnerability in Greek Universities Network (GUnet) Open eClass Platform v.3.15 allows a remote attacker to execute arb
- CVE-2026-79348KitchenAsty through 0.3.0 contains a broken object level authorization (IDOR) vulnerability in the reservations API.
- CVE-2026-79417Improper Access Control in ArgusMonitor.sys in Argotronic eGbR ArgusMonitor 7.4.02 and earlier allows local, low-privileged users to bypass
- CVE-2026-79534mark3labs mcp-filesystem-server v0.11.1 is vulnerable to Directory Traversal due to an improper link resolution in validatePath (filesystems
- CVE-2026-79535mbailey VoiceMode <= 8.10.1 is vulnerable to OS Command Injection.