# CVEs published 2026-09-30

636 CVEs were published on September 30, 2026: 67 critical, 302 high. 3 are now in CISA KEV. Days are UTC.

- [CVE-2026-103530](https://cve.now/CVE-2026-103530.md): decolua 9Router Search Endpoint ssrfGuard.js fetch server-side request forgery (CVSS 6.9, decolua 9Router)
- [CVE-2026-103592](https://cve.now/CVE-2026-103592.md): simple-php-router through 5.4.1.7 IP restriction bypass via forwarding headers (CVSS 6.9, pecee simple-router)
- [CVE-2026-103591](https://cve.now/CVE-2026-103591.md): DeepWiki-Open through commit d92819a Unauthenticated Arbitrary File Read via /codemap/file (CVSS 8.7, AsyncFuncAI deepwiki-open)
- [CVE-2026-103590](https://cve.now/CVE-2026-103590.md): QloApps through 1.7.0 Reflected XSS via Length of Stay Fields (CVSS 5.1, Webkul QloApps)
- [CVE-2026-103589](https://cve.now/CVE-2026-103589.md): QloApps through 1.7.0 Reflected XSS via Room Type Editor (CVSS 5.1, Webkul QloApps)
- [CVE-2026-103588](https://cve.now/CVE-2026-103588.md): QloApps through 1.7.0 Reflected XSS via exceptions field (CVSS 5.1, Webkul QloApps)
- [CVE-2026-103587](https://cve.now/CVE-2026-103587.md): QloApps through 1.7.0 Reflected XSS via Book Now Search Parameters (CVSS 5.1, Webkul QloApps)
- [CVE-2026-103585](https://cve.now/CVE-2026-103585.md): attacker-controlled javascript license URL via XSS (CVSS 1.2, The Wikimedia Foundation MediaWiki MediaSearch extension)
- [CVE-2026-103584](https://cve.now/CVE-2026-103584.md): attacker-controlled javascript license URL via XSS (CVSS 1.1, The Wikimedia Foundation MediaWiki CommonsMetadata extension)
- [CVE-2026-47096](https://cve.now/CVE-2026-47096.md): AJA HELO Plus \< 2.1.7 Stored XSS via System Name Parameter (CVSS 5.3, AJA Video Systems HELO Plus)
- [CVE-2026-101283](https://cve.now/CVE-2026-101283.md): iperf3 3.20–3.21 (esnet/iperf) has a pre-auth heap buffer overflow in decrypt\_rsa\_message(): a 256-byte RSA buffer is BIO\_read with the atta (CVSS 9.2, esnet iperf3)
- [CVE-2026-103001](https://cve.now/CVE-2026-103001.md): PyJWT.decode() reintroduces options-dict mutation, enabling silent claim-verification bypass on dict reuse (CVSS 6.5, jpadilla pyjwt · pyjwt)
- [CVE-2026-101276](https://cve.now/CVE-2026-101276.md): iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per-test watchdog server\_timer\_proc() frees s (CVSS 9.2, esnet iperf3)
- [CVE-2026-92172](https://cve.now/CVE-2026-92172.md): Prior to v66.0.0.733.524 of Meta Horizon OS, OVRMediaService could be induced to send a privileged PendingIntent including a com.oculus.hori (CVSS 8.8, Meta Platforms Meta Horizon OS)
- [CVE-2026-92173](https://cve.now/CVE-2026-92173.md): Prior to v74.0.0.878.1682 of Meta Horizon OS, MediaSyncJobReceiver could be induced to send a privileged PendingIntent including a com.oculu (CVSS 9.1, Meta Platforms Meta Horizon OS)
- [CVE-2023-54403](https://cve.now/CVE-2023-54403.md): Yonyou U8 CRM Arbitrary File Read via getemaildata.php (CVSS 8.7, Yonyou U8 CRM)
- [CVE-2026-102105](https://cve.now/CVE-2026-102105.md): Kiteworks Email Protection Gateway server-side request forgery (CVSS 9.1, Kiteworks Email Protection Gateway)
- [CVE-2026-102106](https://cve.now/CVE-2026-102106.md): Kiteworks Email Protection Gateway improper authentication (CVSS 9.1, Kiteworks Email Protection Gateway)
- [CVE-2026-102107](https://cve.now/CVE-2026-102107.md): Kiteworks Core user impersonation in a file-request feature (CVSS 4.6, Kiteworks Core)
- [CVE-2024-58387](https://cve.now/CVE-2024-58387.md): Inspur HCM Cloud Arbitrary File Read via file/download Endpoint (CVSS 8.7, Inspur Haiyue HCM Cloud)
- [CVE-2026-102108](https://cve.now/CVE-2026-102108.md): Kiteworks Email Protection Gateway deserialization of untrusted data (CVSS 7.2, Kiteworks Email Protection Gateway)
- [CVE-2026-102109](https://cve.now/CVE-2026-102109.md): Kiteworks Secure Data Forms SQL injection (CVSS 7.1, Kiteworks Secure Data Forms)
- [CVE-2023-54402](https://cve.now/CVE-2023-54402.md): iDocView SSRF via /doc/upload Endpoint Hardcoded Token (CVSS 8.7, iDocView)
- [CVE-2026-102110](https://cve.now/CVE-2026-102110.md): Missing authentication on a Kiteworks appliance setup function (CVSS 5.9, Kiteworks Core)
- [CVE-2026-102111](https://cve.now/CVE-2026-102111.md): Kiteworks Core Improper Validation of Specified Quantity in Input (CVSS 4.9, Kiteworks Core)
- [CVE-2026-102112](https://cve.now/CVE-2026-102112.md): Kiteworks Core Local Privilege Escalation (CVSS 7.8, Kiteworks Core)
- [CVE-2026-102113](https://cve.now/CVE-2026-102113.md): Kiteworks Core Local Privilege Escalation (CVSS 7.8, Kiteworks Core)
- [CVE-2026-102114](https://cve.now/CVE-2026-102114.md): Kiteworks Core OS Command Injection (CVSS 7.2, Kiteworks Core)
- [CVE-2026-102115](https://cve.now/CVE-2026-102115.md): Kiteworks Core Authentication Bypass in the Password Reset Workflow (CVSS 9.8, Kiteworks Core)
- [CVE-2026-102116](https://cve.now/CVE-2026-102116.md): Kiteworks Email Protection Gateway Path Traversal (CVSS 7.2, Kiteworks Email Protection Gateway)
- [CVE-2026-102117](https://cve.now/CVE-2026-102117.md): Kiteworks Core Remote Code Execution (CVSS 7.2, Kiteworks Core)
- [CVE-2026-102118](https://cve.now/CVE-2026-102118.md): Kiteworks Core before version 9.5.0 is vulnerable to Local Privilege Escalation (CVSS 7.8, Kiteworks Core)
- [CVE-2026-102119](https://cve.now/CVE-2026-102119.md): Kiteworks Email Protection Gateway Path Traversal (CVSS 7.2, Kiteworks Email Protection Gateway)
- [CVE-2026-102120](https://cve.now/CVE-2026-102120.md): Kiteworks Core OS Command Injection (CVSS 8.8, Kiteworks Core)
- [CVE-2026-102121](https://cve.now/CVE-2026-102121.md): Kiteworks Secure Data Forms Exposure of Sensitive Information to an Unauthorized Actor (CVSS 8.6, Kiteworks Secure Data Forms)
- [CVE-2026-102104](https://cve.now/CVE-2026-102104.md): Kiteworks Email Protection Gateway server-side request forgery (CVSS 9.1, Kiteworks Email Protection Gateway)
- [CVE-2026-102122](https://cve.now/CVE-2026-102122.md): Kiteworks Core Incorrect Authorization (CVSS 4.3, Kiteworks Core)
- [CVE-2026-102123](https://cve.now/CVE-2026-102123.md): Kiteworks Core Path Traversal (CVSS 7.4, Kiteworks Core)
- [CVE-2026-102103](https://cve.now/CVE-2026-102103.md): Kiteworks Email Protection Gateway server-side request forgery (CVSS 9.1, Kiteworks Email Protection Gateway)
- [CVE-2026-102124](https://cve.now/CVE-2026-102124.md): Kiteworks Core Missing Authentication for Critical Function (CVSS 6.5, Kiteworks Core)
- [CVE-2026-102125](https://cve.now/CVE-2026-102125.md): Kiteworks Core Sandbox Escape (CVSS 8.8, Kiteworks Core)
- [CVE-2026-102126](https://cve.now/CVE-2026-102126.md): Kiteworks Core Stored Cross-site Scripting (XSS) (CVSS 8.1, Kiteworks Core)
- [CVE-2026-102127](https://cve.now/CVE-2026-102127.md): Kiteworks Email Protection Gateway Improper Restriction of XML External Entity Reference (CVSS 7.0, Kiteworks Email Protection Gateway)
- [CVE-2026-102128](https://cve.now/CVE-2026-102128.md): Kiteworks Email Protection Gateway Improper Authentication (CVSS 7.5, Kiteworks Email Protection Gateway)
- [CVE-2026-102129](https://cve.now/CVE-2026-102129.md): Kiteworks Core Incorrect Privilege Assignment (CVSS 7.2, Kiteworks Core)
- [CVE-2026-102130](https://cve.now/CVE-2026-102130.md): Kiteworks Email Protection Gateway Remote Code Execution (CVSS 7.2, Kiteworks Email Protection Gateway)
- [CVE-2026-102131](https://cve.now/CVE-2026-102131.md): Kiteworks Email Protection Gateway Improper Handling of Case Sensitivity (CVSS 7.2, Kiteworks Email Protection Gateway)
- [CVE-2026-102132](https://cve.now/CVE-2026-102132.md): Kiteworks Core Privilege Escalation through Improper Access Control (CVSS 7.2, Kiteworks Core)
- [CVE-2026-102133](https://cve.now/CVE-2026-102133.md): Kiteworks Core Arbitrary File Write through Command Injection (CVSS 6.6, Kiteworks Core)
- [CVE-2026-103000](https://cve.now/CVE-2026-103000.md): pypdf: Possible large memory usage when retrieving alphabetical page labels (CVSS 8.7, py-pdf pypdf · pypdf)
- [CVE-2026-102102](https://cve.now/CVE-2026-102102.md): Kiteworks Email Protection Gateway server-side request forgery (CVSS 9.1, Kiteworks Email Protection Gateway)
- [CVE-2026-102134](https://cve.now/CVE-2026-102134.md): Kiteworks Core Unprotected Alternate Channel (CVSS 5.4, Kiteworks Core)
- [CVE-2026-102135](https://cve.now/CVE-2026-102135.md): Kiteworks Email Protection Gateway Deserialization of Untrusted Data (CVSS 6.6, Kiteworks Email Protection Gateway)
- [CVE-2026-102136](https://cve.now/CVE-2026-102136.md): Kiteworks Core Command Execution through Configuration Injection (CVSS 6.3, Kiteworks Core)
- [CVE-2026-102137](https://cve.now/CVE-2026-102137.md): Kiteworks Core Unrestricted Upload of File with Dangerous Type (CVSS 4.1, Kiteworks Core)
- [CVE-2026-102138](https://cve.now/CVE-2026-102138.md): Kiteworks Core Server-Side Request Forgery (SSRF) (CVSS 3.3, Kiteworks Core)
- [CVE-2026-102101](https://cve.now/CVE-2026-102101.md): Kiteworks Core deserialization of untrusted data (CVSS 8.1, Kiteworks Core)
- [CVE-2026-102139](https://cve.now/CVE-2026-102139.md): Kiteworks Email Protection Gateway Incorrect Authorization (CVSS 6.5, Kiteworks Email Protection Gateway)
- [CVE-2026-102140](https://cve.now/CVE-2026-102140.md): Kiteworks Core Insufficient Verification of Data Authenticity (CVSS 4.9, Kiteworks Core)
- [CVE-2026-102141](https://cve.now/CVE-2026-102141.md): Kiteworks Core Privilege Escalation through External Control of File Name or Path (CVSS 6.7, Kiteworks Core)
- [CVE-2026-102999](https://cve.now/CVE-2026-102999.md): pypdf: Possible long runtimes with large amount of embedded files (CVSS 8.7, py-pdf pypdf · pypdf)
- [CVE-2026-102142](https://cve.now/CVE-2026-102142.md): Kiteworks Core Remote Code Execution through Server-Side Template Injection (CVSS 7.2, Kiteworks Core)
- [CVE-2026-102143](https://cve.now/CVE-2026-102143.md): Kiteworks Email Protection Gateway Unrestricted Upload of File with Dangerous Type (CVSS 7.5, Kiteworks Email Protection Gateway)
- [CVE-2026-102100](https://cve.now/CVE-2026-102100.md): Kiteworks Core stored XSS (CVSS 8.7, Kiteworks Core)
- [CVE-2026-102144](https://cve.now/CVE-2026-102144.md): Kiteworks Email Protection Gateway Uncontrolled Resource Consumption (CVSS 5.3, Kiteworks Email Protection Gateway)
- [CVE-2026-102150](https://cve.now/CVE-2026-102150.md): Kiteworks Secure Data Forms Missing Authentication for Critical Function (CVSS 7.2, Kiteworks Secure Data Forms)
- [CVE-2026-102149](https://cve.now/CVE-2026-102149.md): Kiteworks Email Protection Gateway Improper Access Control (CVSS 9.4, Kiteworks Email Protection Gateway)
- [CVE-2026-102998](https://cve.now/CVE-2026-102998.md): pypdf: Possible long runtimes when generating appearance streams (CVSS 8.7, py-pdf pypdf · pypdf)
- [CVE-2026-102147](https://cve.now/CVE-2026-102147.md): Kiteworks Core Administrative Account Takeover through Stored Cross-site Scripting (XSS) (CVSS 9.3, Kiteworks Core)
- [CVE-2026-102146](https://cve.now/CVE-2026-102146.md): Kiteworks Email Protection Gateway Arbitrary File Write through Server-Side Template Injection (CVSS 6.5, Kiteworks Email Protection Gateway)
- [CVE-2026-102145](https://cve.now/CVE-2026-102145.md): Kiteworks Core Server-Side Request Forgery through CRLF Injection (CVSS 6.6, Kiteworks Core)
- [CVE-2026-102097](https://cve.now/CVE-2026-102097.md): Kiteworks Email Protection Gateway remote code execution (CVSS 7.2, Kiteworks Email Protection Gateway)
- [CVE-2026-102096](https://cve.now/CVE-2026-102096.md): Kiteworks Core OS command injection (CVSS 7.2, Kiteworks Core)
- [CVE-2026-102099](https://cve.now/CVE-2026-102099.md): Kiteworks Core arbitrary file write (CVSS 7.2, Kiteworks Core)
- [CVE-2026-102095](https://cve.now/CVE-2026-102095.md): Kiteworks Email Protection Gateway server-side request forgery (CVSS 9.1, Kiteworks Email Protection Gateway)
- [CVE-2026-102094](https://cve.now/CVE-2026-102094.md): Kiteworks Email Protection Gateway unsafe reflection (CVSS 7.2, Kiteworks Email Protection Gateway)
- [CVE-2026-102093](https://cve.now/CVE-2026-102093.md): Kiteworks Core improper privilege management (CVSS 7.2, Kiteworks Core)
- [CVE-2026-102092](https://cve.now/CVE-2026-102092.md): Kiteworks Core stored XSS (CVSS 8.7, Kiteworks Core)
- [CVE-2026-102997](https://cve.now/CVE-2026-102997.md): pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up) (CVSS 8.7, py-pdf pypdf · pypdf)
- [CVE-2026-102091](https://cve.now/CVE-2026-102091.md): Kiteworks Secure Data Forms server-side request forgery (CVSS 7.5, Kiteworks Secure Data Forms)
- [CVE-2026-102090](https://cve.now/CVE-2026-102090.md): Kiteworks Core content injection (CVSS 4.3, Kiteworks Core)
- [CVE-2026-102098](https://cve.now/CVE-2026-102098.md): Kiteworks Core SQL Injection (CVSS 7.2, Kiteworks Core)
- [CVE-2026-102089](https://cve.now/CVE-2026-102089.md): Kiteworks Email Protection Gateway path traversal (CVSS 7.2, Kiteworks Email Protection Gateway)
- [CVE-2026-102996](https://cve.now/CVE-2026-102996.md): pypdf: Possible large memory usage when parsing font data (CVSS 8.7, py-pdf pypdf · pypdf)
- [CVE-2026-102995](https://cve.now/CVE-2026-102995.md): pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2) (CVSS 8.7, py-pdf pypdf · pypdf)
- [CVE-2026-102994](https://cve.now/CVE-2026-102994.md): pypdf: Possible long runtimes/large memory usage when parsing indirect objects (CVSS 8.7, py-pdf pypdf · pypdf)
- [CVE-2026-102993](https://cve.now/CVE-2026-102993.md): pypdf: Possible large memory usage when retrieving Roman page labels (CVSS 8.7, py-pdf pypdf · pypdf)
- [CVE-2026-102992](https://cve.now/CVE-2026-102992.md): piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / env (CVSS 9.2, piscinajs piscina · piscina)
- [CVE-2026-102991](https://cve.now/CVE-2026-102991.md): Mako: Path traversal via drive-letter URI on Windows in TemplateLookup (CVSS 6.5, sqlalchemy mako · mako)
- [CVE-2026-103548](https://cve.now/CVE-2026-103548.md): Improperly Stored Credentials (CVSS 5.3, Itron MV-90 xi)
- [CVE-2026-103387](https://cve.now/CVE-2026-103387.md): garycourt uri-js Mailto Header mailto.ts URI.parse uncaught exception (CVSS 5.3, garycourt uri-js)
- [CVE-2026-102990](https://cve.now/CVE-2026-102990.md): basic-ftp: Quadratic-time CPU denial of service in Client.list() Unix directory-listing parser (RE\_LINE backtracking) (CVSS 8.2, patrickjuchli basic-ftp · basic-ftp)
- [CVE-2026-103547](https://cve.now/CVE-2026-103547.md): In ldapd in OpenBSD 7.8 before errata 057 and 7.9 before errata 021, delegated BSD authentication results are correlated only by the LDAP ch (CVSS 9.2, OpenBSD)
- [CVE-2026-101885](https://cve.now/CVE-2026-101885.md): ZeroClaw before 0.8.5 Path Traversal via Plugin Manifest wasm\_path (CVSS 8.5, zeroclaw-labs ZeroClaw)
- [CVE-2026-101884](https://cve.now/CVE-2026-101884.md): OpenClaw Windows Node before 2026.7.1 Remote Code Execution via Environment Override (CVSS 7.7, OpenClaw Windows Node)
- [CVE-2026-101883](https://cve.now/CVE-2026-101883.md): OpenClaw Windows Node through 2026.9.4 SSRF via canvas.present (CVSS 5.3, OpenClaw Windows Node)
- [CVE-2026-101882](https://cve.now/CVE-2026-101882.md): OpenClaw Windows Node before 2026.7.1 Remote Code Execution via system.execApprovals.set (CVSS 8.7, OpenClaw Windows Node)
- [CVE-2026-101881](https://cve.now/CVE-2026-101881.md): OpenClaw Windows Node before 2026.7.1 Denial of Service (CVSS 7.1, OpenClaw Windows Node)
- [CVE-2026-101880](https://cve.now/CVE-2026-101880.md): OpenClaw Windows Node before 2026.7.1 Authorization Bypass (CVSS 8.7, OpenClaw Windows Node)
- [CVE-2026-101879](https://cve.now/CVE-2026-101879.md): OpenClaw Windows Node before 2026.7.1-3 Missing Authorization (CVSS 7.1, OpenClaw Windows Node)
- [CVE-2026-103399](https://cve.now/CVE-2026-103399.md): Libsoup: soupserver: http/1 request smuggling via undrained expect: 100-continue body (CVSS 5.3, Red Hat Enterprise Linux)
- [CVE-2026-102392](https://cve.now/CVE-2026-102392.md): WordPress Extra Product Options For WooCommerce | Custom Product Addons and Fields plugin \<= 3.3.8 - PHP Object Injection vulnerability (CVSS 7.2, ThemeHigh Extra Product Options For WooCommerce | Custom Pr…)
- [CVE-2026-102391](https://cve.now/CVE-2026-102391.md): WordPress JetFormBuilder plugin \<= 3.6.5.4 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, jetmonsters JetFormBuilder)
- [CVE-2026-102377](https://cve.now/CVE-2026-102377.md): WordPress Photo Gallery by 10Web plugin \<= 1.8.46 - PHP Object Injection vulnerability (CVSS 8.8, Photo Gallery by 10Web)
- [CVE-2026-102376](https://cve.now/CVE-2026-102376.md): WordPress Branda plugin \<= 3.4.32 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, WPMU DEV Branda)
- [CVE-2026-102375](https://cve.now/CVE-2026-102375.md): WordPress Optimole plugin \<= 4.2.14 - Broken Access Control vulnerability (CVSS 6.5, Optimole)
- [CVE-2026-100512](https://cve.now/CVE-2026-100512.md): WordPress Nested Pages plugin \<= 3.3.2 - PHP Object Injection vulnerability (CVSS 9.8, Hook & Filter Nested Pages)
- [CVE-2026-100510](https://cve.now/CVE-2026-100510.md): WordPress Post and Page Builder by BoldGrid plugin \<= 1.27.14 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Post and Page Builder by BoldGrid)
- [CVE-2026-97291](https://cve.now/CVE-2026-97291.md): WordPress Schema & Structured Data for WP & AMP plugin \<= 1.66 - PHP Object Injection vulnerability (CVSS 8.8, Magazine3 Schema & Structured Data for WP & AMP)
- [CVE-2026-97290](https://cve.now/CVE-2026-97290.md): WordPress Photonic Gallery & Lightbox for Flickr, SmugMug & Others plugin \<= 3.36 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Sayontan Sinha Photonic Gallery & Lightbox for Flickr, Smug…)
- [CVE-2026-97265](https://cve.now/CVE-2026-97265.md): WordPress JetEngine plugin \<= 3.8.15.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Crocoblock. Jetimpex JetEngine)
- [CVE-2026-97256](https://cve.now/CVE-2026-97256.md): WordPress Page Builder by SiteOrigin plugin \<= 2.36.0 - PHP Object Injection vulnerability (CVSS 7.2, Greg – SiteOrigin Page Builder by SiteOrigin)
- [CVE-2026-94171](https://cve.now/CVE-2026-94171.md): WordPress CURCY plugin 2.2.18 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, VillaTheme CURCY)
- [CVE-2026-102397](https://cve.now/CVE-2026-102397.md): WordPress Ultimate Maps by Supsystic plugin \<= 1.5.5 - Broken Access Control vulnerability (CVSS 6.5, Ultimate Maps by Supsystic)
- [CVE-2026-103440](https://cve.now/CVE-2026-103440.md): pagetriagelist discloses suppressed reviewer usernames (CVSS 1.2, The Wikimedia Foundation MediaWiki PageTriage extension)
- [CVE-2026-103439](https://cve.now/CVE-2026-103439.md): Various rawParams() and escaped() updates to prevent XSS in Wikibase extension (CVSS 0.3, The Wikimedia Foundation MediaWiki Wikbase extension)
- [CVE-2026-103438](https://cve.now/CVE-2026-103438.md): Various rawParams() and escaped() updates to prevent XSS in Wikistories extension (CVSS 0.3, The Wikimedia Foundation MediaWiki Wikistories extension)
- [CVE-2026-55224](https://cve.now/CVE-2026-55224.md): MineAdmin: Path Traversal via Unsanitized identifier in Plugin Install/Uninstall (CVSS 8.7, MineAdmin · mineadmin/mineadmin)
- [CVE-2026-55094](https://cve.now/CVE-2026-55094.md): Taskcluster: Unauthenticated remote code execution in \`web-server\` via GraphQL \`filter\` argument (sift \`$where\`) (CVSS 8.7, taskcluster)
- [CVE-2026-103476](https://cve.now/CVE-2026-103476.md): yii2-starter-kit through 4.2.0 Unauthorized File Download via attachment-download (CVSS 6.9, yii2-starter-kit)
- [CVE-2026-103475](https://cve.now/CVE-2026-103475.md): yii2-starter-kit through 4.2.0 Debug and Gii Module Exposure (CVSS 9.3, yii2-starter-kit)
- [CVE-2026-103474](https://cve.now/CVE-2026-103474.md): yii2-starter-kit through 4.2.0 Unrestricted File Upload RCE (CVSS 8.7, yii2-starter-kit)
- [CVE-2026-103473](https://cve.now/CVE-2026-103473.md): Deno 2.7.0 through 2.9.7 Command Injection via node:child\_process (CVSS 9.2, denoland deno)
- [CVE-2026-103472](https://cve.now/CVE-2026-103472.md): restbed through 5.0.0 WebSocket Memory Exhaustion via Unbounded Frame Buffering (CVSS 8.7, Corvusoft restbed)
- [CVE-2026-103471](https://cve.now/CVE-2026-103471.md): restbed through 5.0.0 Denial of Service via Unbounded Header Buffering (CVSS 8.7, Corvusoft restbed)
- [CVE-2026-103437](https://cve.now/CVE-2026-103437.md): ReadingLists imported metadata permits JavaScript URL XSS (CVSS 1.1, The Wikimedia Foundation MediaWiki ReadingLists extension)
- [CVE-2026-103500](https://cve.now/CVE-2026-103500.md): Heap buffer overflow opening large email (CVSS 6.3, Mozilla Thunderbird)
- [CVE-2026-103446](https://cve.now/CVE-2026-103446.md): WikiLambda exposes anonymous execution of unsaved Abstract Wikipedia fragments (CVSS 7.4, The Wikimedia Foundation MediaWiki WikiLambda extension)
- [CVE-2026-53605](https://cve.now/CVE-2026-53605.md): Reachy Mini Wireless: Local Privilege Escalation via Unrestricted sudo systemctl Grant (CVSS 7.8, pollen-robotics reachy-mini-os)
- [CVE-2026-55107](https://cve.now/CVE-2026-55107.md): Kobako Vulnerable to Sandbox Escape: guest eval reaches host RCE via method\_missing → public\_send (any bound Service) (CVSS 10.0, elct9620 kobako · kobako)
- [CVE-2026-103445](https://cve.now/CVE-2026-103445.md): Stored XSS through PageForms #autoedit redirect links (CVSS 1.2, The Wikimedia Foundation MediaWiki Page\_Forms extension)
- [CVE-2026-87004](https://cve.now/CVE-2026-87004.md): Tugtainer: OIDC id\_token claims accepted without signature/audience/expiry verification (CVSS 8.1, Quenary tugtainer)
- [CVE-2026-62308](https://cve.now/CVE-2026-62308.md): Tugtainer: Authenticated SSRF via arbitrary notification URLs in test\_notification endpoint (CVSS 9.1, Quenary tugtainer)
- [CVE-2026-55494](https://cve.now/CVE-2026-55494.md): Tugtainer: Unauthenticated access to Tugtainer Agent Docker management APIs when AGENT\_SECRET is unset (CVSS 9.8, Quenary tugtainer)
- [CVE-2026-55181](https://cve.now/CVE-2026-55181.md): Tugtainer: OIDC login remains accessible when OIDC\_ENABLED is false (CVSS 9.4, Quenary tugtainer)
- [CVE-2026-103241](https://cve.now/CVE-2026-103241.md): vllm-project vLLM Gemma4UnifiedParser gemma4.rs denial of service (CVSS 6.9, vllm-project vLLM · vllm)
- [CVE-2026-55176](https://cve.now/CVE-2026-55176.md): Soft Machine: Cross-tenant workspace API auth bypass via shared \`CONTAINER\_SHARED\_SECRET\` bearer token (CVSS 9.0, Soft-Machine-io security)
- [CVE-2026-103233](https://cve.now/CVE-2026-103233.md): AdithyaYelloju Restaurant-Management-System Admin Area admin authorization (CVSS 5.3, AdithyaYelloju Restaurant-Management-System)
- [CVE-2026-46711](https://cve.now/CVE-2026-46711.md): Soft Machine: Unauthenticated workspace API exposes arbitrary file read & directory exfiltration to any peer on the Fly private network (CVSS 8.3, Soft-Machine-io security)
- [CVE-2026-75969](https://cve.now/CVE-2026-75969.md): PTZOptics Missing Authentication in Firmware Upload (CVSS 9.1, PTZOptics Move 4K · PTZOptics Link 4K +14)
- [CVE-2026-55177](https://cve.now/CVE-2026-55177.md): CloudTAK: Authenticated full-read SSRF in /api/esri\* routes — user-controlled URL fetched with no IP-classification guard (CVSS 7.6, dfpc-coe CloudTAK · @tak-ps/cloudtak)
- [CVE-2026-103444](https://cve.now/CVE-2026-103444.md): Stored XSS through system messages in WikiForum (CVSS 1.1, The Wikimedia Foundation MediaWiki WikiForum extension)
- [CVE-2026-102490](https://cve.now/CVE-2026-102490.md): Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM package (CVSS 8.5, KEV, Zammad)
- [CVE-2026-102489](https://cve.now/CVE-2026-102489.md): Undisclosed RCE in Zammad v6.3 and higher (CVSS 8.7, KEV, Zammad)
- [CVE-2026-103443](https://cve.now/CVE-2026-103443.md): API permits session-seeded javascript URL XSS (CVSS 1.1, The Wikimedia Foundation MediaWiki Collection (Book) extens…)
- [CVE-2026-19553](https://cve.now/CVE-2026-19553.md): SSLContext.wrap\_bio() missing validation of server\_hostname parameter (CVSS 7.6, Python Software Foundation CPython · libpython +2)
- [CVE-2026-19445](https://cve.now/CVE-2026-19445.md): Use-after-free of a server-side SSLContext when sni\_callback switches contexts (CVSS 9.2, Python Software Foundation CPython · libpython +2)
- [CVE-2026-103232](https://cve.now/CVE-2026-103232.md): AdithyaYelloju Restaurant-Management-System table\_booking.php mysqli\_query sql injection (CVSS 6.9, AdithyaYelloju Restaurant-Management-System)
- [CVE-2026-103442](https://cve.now/CVE-2026-103442.md): MergeAccount PHP object injection via session-key substitution (CVSS 7.2, The Wikimedia Foundation MediaWiki CentralAuth extension)
- [CVE-2026-103231](https://cve.now/CVE-2026-103231.md): AdithyaYelloju Restaurant-Management-System Order Cancellation cancel.php mysqli\_query sql injection (CVSS 6.9, AdithyaYelloju Restaurant-Management-System)
- [CVE-2026-103441](https://cve.now/CVE-2026-103441.md): Unauthenticated arbitrary file deletion through Wikibase serialized entity parsing (CVSS 7.2, The Wikimedia Foundation MediaWiki Wikibase extension)
- [CVE-2026-47539](https://cve.now/CVE-2026-47539.md): NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an incorrect numer (CVSS 6.7, NVIDIA Virtual GPU Manager)
- [CVE-2026-47496](https://cve.now/CVE-2026-47496.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where a guest VM user may cause an out (CVSS 7.3, NVIDIA Virtual GPU Manager)
- [CVE-2026-47574](https://cve.now/CVE-2026-47574.md): NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability where an attacker could cause incorrect resource transfer between spheres (CVSS 7.8, NVIDIA Virtual GPU Manager)
- [CVE-2026-47544](https://cve.now/CVE-2026-47544.md): NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds r (CVSS 7.8, NVIDIA Virtual GPU Manager)
- [CVE-2026-47541](https://cve.now/CVE-2026-47541.md): NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds w (CVSS 7.8, NVIDIA Virtual GPU Manager)
- [CVE-2026-47536](https://cve.now/CVE-2026-47536.md): NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds r (CVSS 7.8, NVIDIA Virtual GPU Manager)
- [CVE-2026-47535](https://cve.now/CVE-2026-47535.md): NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the firmware where an attacker could cause an out-of-bounds read. (CVSS 7.8, NVIDIA Virtual GPU Manager)
- [CVE-2026-47521](https://cve.now/CVE-2026-47521.md): NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds r (CVSS 7.8, NVIDIA Virtual GPU Manager)
- [CVE-2026-47520](https://cve.now/CVE-2026-47520.md): NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds r (CVSS 7.8, NVIDIA Guest driver · NVIDIA Virtual GPU Manager)
- [CVE-2026-47519](https://cve.now/CVE-2026-47519.md): NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds r (CVSS 7.8, NVIDIA Guest driver · NVIDIA Virtual GPU Manager)
- [CVE-2026-47503](https://cve.now/CVE-2026-47503.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a guest VM user may cause an ou (CVSS 7.8, NVIDIA Virtual GPU Manager)
- [CVE-2026-47499](https://cve.now/CVE-2026-47499.md): NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer where a guest could cause an out-of- (CVSS 7.8, NVIDIA Virtual GPU Manager)
- [CVE-2026-47498](https://cve.now/CVE-2026-47498.md): NVIDIA vGPU Manager contains a vulnerability in the GPU System Processor (GSP) plugin where a guest VM user may cause an out-of-bounds write (CVSS 7.8, NVIDIA Virtual GPU Manager)
- [CVE-2026-47497](https://cve.now/CVE-2026-47497.md): NVIDIA Virtual GPU Manager contains a vulnerability in the GPU System Processor (GSP) tracing component where a guest VM user may cause impr (CVSS 7.8, NVIDIA Virtual GPU Manager)
- [CVE-2026-47495](https://cve.now/CVE-2026-47495.md): NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer where a user could cause an out-of-b (CVSS 7.8, NVIDIA Virtual GPU Manager)
- [CVE-2026-47493](https://cve.now/CVE-2026-47493.md): NVIDIA vGPU software for Windows and Linux contains a vulnerability in the GPU kernel driver where a guest may access privileged host GPU re (CVSS 7.8, NVIDIA Virtual GPU Manager)
- [CVE-2026-47562](https://cve.now/CVE-2026-47562.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could inject crafted text into the kernel (CVSS 4.4, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +3)
- [CVE-2026-47531](https://cve.now/CVE-2026-47531.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause a null point (CVSS 4.4, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-47526](https://cve.now/CVE-2026-47526.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause a null pointer derefe (CVSS 4.4, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-47604](https://cve.now/CVE-2026-47604.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another pro (CVSS 5.5, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +3)
- [CVE-2026-47603](https://cve.now/CVE-2026-47603.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another pro (CVSS 5.5, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +3)
- [CVE-2026-47584](https://cve.now/CVE-2026-47584.md): NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker with local access could cause a NULL p (CVSS 5.5, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-47581](https://cve.now/CVE-2026-47581.md): NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where a user could cause improper locking. (CVSS 5.5, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-47568](https://cve.now/CVE-2026-47568.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could cause uncontrolled kernel log gener (CVSS 5.5, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +3)
- [CVE-2026-47567](https://cve.now/CVE-2026-47567.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a user could cause uncontrolled resource consum (CVSS 5.5, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +3)
- [CVE-2026-47566](https://cve.now/CVE-2026-47566.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause a memory leak i (CVSS 5.5, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +3)
- [CVE-2026-47557](https://cve.now/CVE-2026-47557.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause a NULL pointer (CVSS 5.5, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +3)
- [CVE-2026-47555](https://cve.now/CVE-2026-47555.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where a user could cause uninitialized ker (CVSS 5.5, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +3)
- [CVE-2026-47549](https://cve.now/CVE-2026-47549.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel module where an unprivileged local user could cause a NULL pointe (CVSS 5.5, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +3)
- [CVE-2026-47534](https://cve.now/CVE-2026-47534.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause a divide by (CVSS 5.5, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-47517](https://cve.now/CVE-2026-47517.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode driver where a local user may cause a null pointer dereferen (CVSS 5.5, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +3)
- [CVE-2026-47506](https://cve.now/CVE-2026-47506.md): NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel-mode color transform path where excessive kernel stack use occu (CVSS 5.5, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-47492](https://cve.now/CVE-2026-47492.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an attacker can cause improper acce (CVSS 5.5, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +3)
- [CVE-2026-47518](https://cve.now/CVE-2026-47518.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in a secure microcontroller component, where incorrect permission a (CVSS 6.0, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-47586](https://cve.now/CVE-2026-47586.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel module where an attacker could cause a use-after-free (CVSS 6.4, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-47565](https://cve.now/CVE-2026-47565.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a privileged user could trigger a race condition (CVSS 6.4, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-47547](https://cve.now/CVE-2026-47547.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause improper input valida (CVSS 6.7, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-47546](https://cve.now/CVE-2026-47546.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause improper input valida (CVSS 6.7, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-47543](https://cve.now/CVE-2026-47543.md): VIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause improper inpu (CVSS 6.7, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-103470](https://cve.now/CVE-2026-103470.md): In Internet2 Grouper before 7.5.1 (in some configurations), a user who is allowed to create or edit rules in the User Interface can escalate (CVSS 9.3, Internet2 Grouper)
- [CVE-2026-47542](https://cve.now/CVE-2026-47542.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause improper inp (CVSS 6.7, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-47538](https://cve.now/CVE-2026-47538.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause an out-of-bounds writ (CVSS 6.7, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-47537](https://cve.now/CVE-2026-47537.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds write. (CVSS 6.7, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-47533](https://cve.now/CVE-2026-47533.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an improper (CVSS 6.7, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-47532](https://cve.now/CVE-2026-47532.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bo (CVSS 6.7, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-47529](https://cve.now/CVE-2026-47529.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds write. (CVSS 6.7, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-47527](https://cve.now/CVE-2026-47527.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause an out-of-bounds read (CVSS 6.7, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-47525](https://cve.now/CVE-2026-47525.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an improper (CVSS 6.7, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-47524](https://cve.now/CVE-2026-47524.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bo (CVSS 6.7, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-47522](https://cve.now/CVE-2026-47522.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause improper inp (CVSS 6.7, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-47515](https://cve.now/CVE-2026-47515.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an out-of-bounds (CVSS 6.7, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-47509](https://cve.now/CVE-2026-47509.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an out-of-bounds (CVSS 6.7, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-47598](https://cve.now/CVE-2026-47598.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module event delivery path where an unprivileged loca (CVSS 7.0, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +3)
- [CVE-2026-47596](https://cve.now/CVE-2026-47596.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can write to read-only memo (CVSS 7.0, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-47582](https://cve.now/CVE-2026-47582.md): NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker could cause an out-of-bounds write. (CVSS 7.0, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +3)
- [CVE-2026-47602](https://cve.now/CVE-2026-47602.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user can cause the driver t (CVSS 7.1, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-47576](https://cve.now/CVE-2026-47576.md): NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module through which an attacker might initiate an out-of-bound (CVSS 7.7, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-47554](https://cve.now/CVE-2026-47554.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where improper verification of cryptographic signature (CVSS 7.1, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-47580](https://cve.now/CVE-2026-47580.md): NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker could cause a missing authorization is (CVSS 7.3, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-47601](https://cve.now/CVE-2026-47601.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source kernel module DMA-BUF import path where an unpri (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-47600](https://cve.now/CVE-2026-47600.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an error-handling path could operate (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-47599](https://cve.now/CVE-2026-47599.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module where an unprivileged local user could cause i (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-47597](https://cve.now/CVE-2026-47597.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source kernel module Resource Server where an unprivile (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-47595](https://cve.now/CVE-2026-47595.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can write to read-only memo (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-47594](https://cve.now/CVE-2026-47594.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user may cause a use-after-free condition by (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +3)
- [CVE-2026-47593](https://cve.now/CVE-2026-47593.md): NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an unprivileged user can cause an out-of-bound (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-47592](https://cve.now/CVE-2026-47592.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause an (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +3)
- [CVE-2026-47591](https://cve.now/CVE-2026-47591.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could bypass read-only memo (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-47590](https://cve.now/CVE-2026-47590.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user may cause a use-after-free condition by (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-47589](https://cve.now/CVE-2026-47589.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user may cause a use-after-free condition by (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-47588](https://cve.now/CVE-2026-47588.md): NVIDIA GPU Display Driver for Linux contains a vulnerability where an unprivileged user could cause a use-after-free condition by issuing a (CVSS 7.8, NVIDIA RTX, Quadro, NVS · NVIDIA GeForce +2)
- [CVE-2026-47587](https://cve.now/CVE-2026-47587.md): NVIDIA GPU Display Driver for Linux contains a vulnerability where an unprivileged user could cause a use-after-free. (CVSS 7.8, NVIDIA RTX, Quadro, NVS · NVIDIA GeForce +1)
- [CVE-2026-47585](https://cve.now/CVE-2026-47585.md): NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker could cause an integer underflow. (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-47583](https://cve.now/CVE-2026-47583.md): NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker could cause type confusion. (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-47579](https://cve.now/CVE-2026-47579.md): The NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode driver through which a user might trigger a use-after- (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-47578](https://cve.now/CVE-2026-47578.md): NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an attacker could cause an incorrect buffer si (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-47577](https://cve.now/CVE-2026-47577.md): NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker could cause an incorrect comparison. (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-47575](https://cve.now/CVE-2026-47575.md): NVIDIA GPU Display Driver for Windows contains a vulnerability in the display driver DIAG escape handler where a local unprivileged attacker (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-47573](https://cve.now/CVE-2026-47573.md): NVIDIA NVAPI for Windows contains a vulnerability where an attacker could cause an out-of-bounds write. (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-47572](https://cve.now/CVE-2026-47572.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could cause type confusion. (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-47571](https://cve.now/CVE-2026-47571.md): NVIDIA GPU Display Driver for Windows contains a vulnerability in kernel-mode escape handling where an attacker with local access could bypa (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +3)
- [CVE-2026-47570](https://cve.now/CVE-2026-47570.md): NVIDIA GPU Display Driver for Windows contains a vulnerability in the CUDA driver where an attacker could cause a library to be loaded from (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-47569](https://cve.now/CVE-2026-47569.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could cause a type confusion via a handle (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +3)
- [CVE-2026-47563](https://cve.now/CVE-2026-47563.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could cause a NULL pointer dereference. (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +3)
- [CVE-2026-47561](https://cve.now/CVE-2026-47561.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where the size of an ioctl input buffer is not validat (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +3)
- [CVE-2026-47560](https://cve.now/CVE-2026-47560.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause a use-after-fre (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-47559](https://cve.now/CVE-2026-47559.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could access memory belongin (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-47558](https://cve.now/CVE-2026-47558.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause a double-free o (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-47556](https://cve.now/CVE-2026-47556.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause an (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-47553](https://cve.now/CVE-2026-47553.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause an (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-47552](https://cve.now/CVE-2026-47552.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could bypass an authorizati (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +3)
- [CVE-2026-47551](https://cve.now/CVE-2026-47551.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where a user could cause a use-after-free. (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +3)
- [CVE-2026-47550](https://cve.now/CVE-2026-47550.md): NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an unprivileged local user can supply an untru (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-47548](https://cve.now/CVE-2026-47548.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bo (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-47545](https://cve.now/CVE-2026-47545.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bo (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-47540](https://cve.now/CVE-2026-47540.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an integer u (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-47530](https://cve.now/CVE-2026-47530.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bo (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-47528](https://cve.now/CVE-2026-47528.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause an access of an unini (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-47523](https://cve.now/CVE-2026-47523.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bo (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-47516](https://cve.now/CVE-2026-47516.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user could cause a use-after-free. (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-47514](https://cve.now/CVE-2026-47514.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause exposure of kern (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-47513](https://cve.now/CVE-2026-47513.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an out-of-bounds (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-47512](https://cve.now/CVE-2026-47512.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an out-of-bounds (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-47511](https://cve.now/CVE-2026-47511.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an out-of-bounds (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-47510](https://cve.now/CVE-2026-47510.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an integer overf (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-47508](https://cve.now/CVE-2026-47508.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an incorrect con (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-47507](https://cve.now/CVE-2026-47507.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an out-of-bounds (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-47505](https://cve.now/CVE-2026-47505.md): NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an attacker could cause a use-after-free. (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +3)
- [CVE-2026-47504](https://cve.now/CVE-2026-47504.md): NVIDIA Linux GPU Display Driver contains a vulnerability in the NGX updater where an outdated embedded cryptographic library is susceptible (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-47502](https://cve.now/CVE-2026-47502.md): NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer, where a guest user could cause an i (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-47501](https://cve.now/CVE-2026-47501.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could cause an out-of-bounds write by sup (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +3)
- [CVE-2026-47500](https://cve.now/CVE-2026-47500.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where improper cleanup of reference counts (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +3)
- [CVE-2026-47494](https://cve.now/CVE-2026-47494.md): NVIDIA GPU Display Driver for Linux contains a vulnerability where a user might be able to cause a format string issue. (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2026-47491](https://cve.now/CVE-2026-47491.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can cause improper release (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2026-47489](https://cve.now/CVE-2026-47489.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be pre (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +3)
- [CVE-2026-55174](https://cve.now/CVE-2026-55174.md): UltrafastSecp256k1: ECDSA adaptor verification accepts non-adaptable pre-signatures due to missing DLEQ binding (CVSS 5.9, shrec UltrafastSecp256k1)
- [CVE-2026-103436](https://cve.now/CVE-2026-103436.md): apcupsd through 3.14.14 discloses uninitialized stack memory in getupsvar() in src/cgi/upsfetch.c (used by upsstats.cgi, multimon.cgi, and u (CVSS 3.7, apcupsd)
- [CVE-2026-103432](https://cve.now/CVE-2026-103432.md): apcupsd through 3.14.14 has an sscanf stack-based buffer overflow in getupsvar() in src/cgi/upsfetch.c (used by upsstats.cgi, multimon.cgi, (CVSS 8.1, apcupsd)
- [CVE-2026-103230](https://cve.now/CVE-2026-103230.md): AdithyaYelloju Restaurant-Management-System Order Placement ord.php mysqli\_query sql injection (CVSS 6.9, AdithyaYelloju Restaurant-Management-System)
- [CVE-2026-80490](https://cve.now/CVE-2026-80490.md): Algorithm::AhoCorasick::XS versions through 0.04 for Perl read the haystack string length before the scalar is stringified (no CVSS, Algorithm-AhoCorasick-XS)
- [CVE-2026-100280](https://cve.now/CVE-2026-100280.md): In JetBrains YouTrack before 2026.2.19197 creating a project from an unreadable custom template was possible (CVSS 3.1, JetBrains YouTrack)
- [CVE-2026-100279](https://cve.now/CVE-2026-100279.md): In JetBrains YouTrack before 2026.2.19197 changing an integration URL exposed its stored credentials (CVSS 6.5, JetBrains YouTrack)
- [CVE-2026-100278](https://cve.now/CVE-2026-100278.md): In JetBrains YouTrack before 2026.2.19197 users with restricted permission could edit and hide other users' comments (CVSS 4.9, JetBrains YouTrack)
- [CVE-2026-100277](https://cve.now/CVE-2026-100277.md): In JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a notification signature (CVSS 8.9, JetBrains YouTrack)
- [CVE-2026-100276](https://cve.now/CVE-2026-100276.md): In JetBrains YouTrack before 2026.2.19197 guest users could remove a workflow action's visibility restriction and run the action (CVSS 5.9, JetBrains YouTrack)
- [CVE-2026-100275](https://cve.now/CVE-2026-100275.md): In JetBrains YouTrack before 2026.2.19197 stored XSS in the workflow error notification toast was possible (CVSS 6.9, JetBrains YouTrack)
- [CVE-2026-100274](https://cve.now/CVE-2026-100274.md): In JetBrains YouTrack before 2026.2.19197 project Admin could trigger DoS via a notification template (CVSS 6.5, JetBrains YouTrack)
- [CVE-2026-100273](https://cve.now/CVE-2026-100273.md): In JetBrains YouTrack before 2026.2.19197 authorisation bypass in the scripts debugger allowed arbitrary code execution (CVSS 8.2, JetBrains YouTrack)
- [CVE-2026-100272](https://cve.now/CVE-2026-100272.md): In JetBrains YouTrack before 2026.2.19197 missing authorisation in the notification template preview allowed Project Administrators to read (CVSS 4.9, JetBrains YouTrack)
- [CVE-2026-100271](https://cve.now/CVE-2026-100271.md): In JetBrains YouTrack before 2026.2.19197 missing authorisation on several endpoints allowed authenticated users to access information from (CVSS 2.7, JetBrains YouTrack)
- [CVE-2026-100270](https://cve.now/CVE-2026-100270.md): In JetBrains YouTrack before 2026.2.19197 low-level Admin Read permission users could disclose integration credentials via import configurat (CVSS 3.3, JetBrains YouTrack)
- [CVE-2026-100269](https://cve.now/CVE-2026-100269.md): In JetBrains YouTrack before 2026.2.19197 helpdesk project's Authorized Reporters list could be bypassed (CVSS 4.3, JetBrains YouTrack)
- [CVE-2026-100268](https://cve.now/CVE-2026-100268.md): In JetBrains YouTrack before 2026.2.19197 project administrators could read comments from other projects via notification templates (CVSS 7.7, JetBrains YouTrack)
- [CVE-2026-100267](https://cve.now/CVE-2026-100267.md): In JetBrains YouTrack before 2026.2.19197 reDoS attack was possible via mailbox regex mail-rule filters (CVSS 5.9, JetBrains YouTrack)
- [CVE-2026-100266](https://cve.now/CVE-2026-100266.md): In JetBrains Hub before 2026.2.52366 missing authorisation allowed authenticated users to send arbitrary emails from the server's trusted ad (CVSS 7.7, JetBrains Hub)
- [CVE-2026-100265](https://cve.now/CVE-2026-100265.md): In JetBrains Rider before 2026.2.1 aI Assistant could auto-update third-party skills without user confirmation (CVSS 4.8, JetBrains Rider)
- [CVE-2026-100264](https://cve.now/CVE-2026-100264.md): In JetBrains YouTrack before 2026.2.18991 stored SMTP server credentials could be disclosed by changing the server host (CVSS 2.7, JetBrains YouTrack)
- [CVE-2026-100263](https://cve.now/CVE-2026-100263.md): In JetBrains YouTrack before 2026.2.18991 stored HTML injection via the User-Agent header was possible (CVSS 4.7, JetBrains YouTrack)
- [CVE-2026-100262](https://cve.now/CVE-2026-100262.md): In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed users with read-only project access to overwrite project notificatio (CVSS 7.6, JetBrains YouTrack)
- [CVE-2026-100261](https://cve.now/CVE-2026-100261.md): In JetBrains YouTrack before 2026.2.18991 changing article visibility settings was possible without update permission (CVSS 5.4, JetBrains YouTrack)
- [CVE-2026-100260](https://cve.now/CVE-2026-100260.md): In JetBrains YouTrack before 2026.2.18991 mailbox integration allowed authentication after a password reset (CVSS 5.3, JetBrains YouTrack)
- [CVE-2026-100259](https://cve.now/CVE-2026-100259.md): In JetBrains YouTrack before 2026.2.18991 improper access control on Gantt chart allowed edits by users with view-only access (CVSS 4.3, JetBrains YouTrack)
- [CVE-2026-100258](https://cve.now/CVE-2026-100258.md): In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed read-only users to read project settings (CVSS 4.3, JetBrains YouTrack)
- [CVE-2026-100257](https://cve.now/CVE-2026-100257.md): In JetBrains YouTrack before 2026.2.18991 sSRF via stored XHTML injection was possible during PDF export (CVSS 4.3, JetBrains YouTrack)
- [CVE-2026-100256](https://cve.now/CVE-2026-100256.md): In JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search script constraints was possible in untrusted projects (CVSS 7.8, JetBrains IntelliJ IDEA)
- [CVE-2026-100255](https://cve.now/CVE-2026-100255.md): In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 administrator account takeover was possible via password reset (CVSS 8.1, JetBrains TeamCity)
- [CVE-2026-100254](https://cve.now/CVE-2026-100254.md): In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 authenticated users could execute commands on Windows servers via CRLF injection (CVSS 8.8, JetBrains TeamCity)
- [CVE-2026-100253](https://cve.now/CVE-2026-100253.md): In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the versioned settings (CVSS 8.8, JetBrains TeamCity)
- [CVE-2026-103229](https://cve.now/CVE-2026-103229.md): AdithyaYelloju Restaurant-Management-System Unauthenticated Action Script delete1.php mysqli\_query sql injection (CVSS 6.9, AdithyaYelloju Restaurant-Management-System)
- [CVE-2026-102427](https://cve.now/CVE-2026-102427.md): Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK \< 8.3.16 (CVSS 10.0, ordasoft.com OrdaSoft Joomla CCK)
- [CVE-2026-94545](https://cve.now/CVE-2026-94545.md): Satori-generated SVG has improper escaping (CVSS 5.3, vercel satori · vercel next +1)
- [CVE-2026-103398](https://cve.now/CVE-2026-103398.md): OpenSave through 2.4.0 Arbitrary File Read and Write via Peer-Controlled Save Path (CVSS 8.6, Liquid-co OpenSave)
- [CVE-2026-103397](https://cve.now/CVE-2026-103397.md): OpenSave before 2.4.0-beta.1 Authentication Bypass via Spoofed Relay Sender (CVSS 6.3, Liquid-co OpenSave)
- [CVE-2026-103396](https://cve.now/CVE-2026-103396.md): bbs-go through 4.4.6 Incorrect Authorization via /api/admin/user/synccount (CVSS 5.3, mlogclub bbs-go)
- [CVE-2026-103395](https://cve.now/CVE-2026-103395.md): LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Visual-Only RPyC Service (CVSS 9.3, ModelTC LightLLM)
- [CVE-2026-103270](https://cve.now/CVE-2026-103270.md): LightLLM through 1.2.0 Missing Authentication on RL Control Routes (CVSS 8.7, ModelTC LightLLM)
- [CVE-2026-103243](https://cve.now/CVE-2026-103243.md): LightLLM through 1.2.0 Server-Side Request Forgery via multimodal endpoints (CVSS 6.9, ModelTC LightLLM)
- [CVE-2026-76570](https://cve.now/CVE-2026-76570.md): Joomla Extension - joomcode.com - Unauthenticated SQL injection in read and write queries in JCTables \< 1.21.1 (CVSS 10.0, joomcode.com JCTables extension for Joomla)
- [CVE-2026-102984](https://cve.now/CVE-2026-102984.md): Astro: Malformed port in the Host header can crash the Node adapter (CVSS 8.2, withastro astro · @astrojs/node)
- [CVE-2026-102983](https://cve.now/CVE-2026-102983.md): Astro: Netlify Image CDN allowlist bypass enables SSRF (CVSS 6.3, withastro astro · @astrojs netlify +1)
- [CVE-2026-102717](https://cve.now/CVE-2026-102717.md): MQTT WebSocket setter ABI mismatch may disclose memory or cause a crash (CVSS 7.5, Eclipse Foundation NetX Duo)
- [CVE-2026-47097](https://cve.now/CVE-2026-47097.md): AJA HELO Plus \< 2.1.7 Hardcoded AES Passphrase for Diagnostics Export Bundle (CVSS 8.7, AJA Video Systems HELO Plus)
- [CVE-2026-103227](https://cve.now/CVE-2026-103227.md): GPAC DASH Client dash\_client.c gf\_dash\_resolve\_url buffer overflow (CVSS 5.3, GPAC)
- [CVE-2026-103389](https://cve.now/CVE-2026-103389.md): MISP Stored Cross-Site Scripting via Unvalidated Galaxy Icon Field in Correlation Graph (CVSS 6.2, MISP)
- [CVE-2026-103388](https://cve.now/CVE-2026-103388.md): MISP Stored Cross-Site Scripting via JavaScript URL in Galaxy Cluster Source Field (CVSS 6.2, MISP)
- [CVE-2026-18782](https://cve.now/CVE-2026-18782.md): SQL Injection in Trex Digital Manufacturing's Trex MES (CVSS 9.8, Trex Digital Smart Manufacturing Systems Trex MES)
- [CVE-2026-103226](https://cve.now/CVE-2026-103226.md): Artifex Ghostscript Pdfwrite gdevpsfx.c type1\_callsubr stack-based overflow (CVSS 5.3, Artifex Ghostscript)
- [CVE-2026-18783](https://cve.now/CVE-2026-18783.md): Missing Server-Side Authentication on REST API Endpoint in Trex Digital Manufacturing's Trex MES (CVSS 8.8, Trex Digital Smart Manufacturing Systems Trex MES)
- [CVE-2026-97259](https://cve.now/CVE-2026-97259.md): WordPress Pay with Vipps for WooCommerce plugin \<= 6.2.4 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.3, WP Hosting AS Pay with Vipps for WooCommerce)
- [CVE-2026-101295](https://cve.now/CVE-2026-101295.md): Oc-mirror: oc-mirror: path traversal / arbitrary file write in operator catalog image extraction (CVSS 7.3, Assisted Installer for Red Hat OpenShift Container Platform…)
- [CVE-2026-62084](https://cve.now/CVE-2026-62084.md): WordPress User Submitted Posts plugin \<= 20260810 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Jeff Starr User Submitted Posts)
- [CVE-2026-62097](https://cve.now/CVE-2026-62097.md): WordPress Business Directory plugin \<= 6.4.27 - SQL Injection vulnerability (CVSS 7.6, WPTasty Business Directory)
- [CVE-2026-103222](https://cve.now/CVE-2026-103222.md): Blosc C-Blosc2 blosclz Decompression blosclz.c blosclz\_decompress integer overflow (CVSS 6.3, C-Blosc2)
- [CVE-2026-93903](https://cve.now/CVE-2026-93903.md): LiteSpeed Web Server (LSWS) before 6.3.7 build 1 mishandles internal redirect URL validation in a certain "corner case." (CVSS 9.4, litespeedtech LiteSpeed Web Server)
- [CVE-2026-103118](https://cve.now/CVE-2026-103118.md): GraphicsMagick WPG File wpg.c ExtractPostscript recursion (CVSS 5.3, GraphicsMagick)
- [CVE-2026-82307](https://cve.now/CVE-2026-82307.md): Multiple Vulnerabilities in Dolusoft Software's SOPLOG (CVSS 9.8, Dolusoft Software Technologies SOPLOG)
- [CVE-2026-93547](https://cve.now/CVE-2026-93547.md): Missing Authorization Check in Vaadin Spreadsheet Allows Cell Comments to Be Written to Protected Sheets and Locked Cells (CVSS 5.3, vaadin · vaadin-spreadsheet-flow +1)
- [CVE-2026-91860](https://cve.now/CVE-2026-91860.md): Prototype Pollution in Vaadin Charts and Component Base via Unfiltered Deep Merge (CVSS 6.3, vaadin · vaadin-core +3)
- [CVE-2026-76504](https://cve.now/CVE-2026-76504.md): Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability (CVSS 9.8, KEV, Cisco Catalyst SD-WAN Manager)
- [CVE-2026-103117](https://cve.now/CVE-2026-103117.md): OS4ED openSIS-Classic Save Data DatabaseInc.php db\_properties sql injection (CVSS 5.1, OS4ED openSIS-Classic)
- [CVE-2026-86778](https://cve.now/CVE-2026-86778.md): Username Enumeration in Maksisoft Technology's Maksisoft Gym (CVSS 5.3, Maksisoft Technology, IT, and Software Industry and Trade M…)
- [CVE-2026-103116](https://cve.now/CVE-2026-103116.md): OS4ED openSIS-Classic Student List Search Endpoint GetStuListFnc.php DBQuery sql injection (CVSS 5.3, OS4ED openSIS-Classic)
- [CVE-2026-102399](https://cve.now/CVE-2026-102399.md): WordPress Photo Gallery by Supsystic plugin \<= 1.21.0 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 5.4, Photo Gallery by Supsystic)
- [CVE-2026-102398](https://cve.now/CVE-2026-102398.md): WordPress Popup by Supsystic plugin \<= 1.13.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Popup by Supsystic)
- [CVE-2026-102396](https://cve.now/CVE-2026-102396.md): WordPress Ultimate Maps by Supsystic plugin \<= 1.5.5 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Ultimate Maps by Supsystic)
- [CVE-2026-102395](https://cve.now/CVE-2026-102395.md): WordPress Easy Google Maps plugin \<= 1.14.6 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, supsystic Easy Google Maps)
- [CVE-2026-102386](https://cve.now/CVE-2026-102386.md): WordPress WP Photo Album Plus plugin \<= 9.3.02.003 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Jacob N. Breetvelt WP Photo Album Plus)
- [CVE-2026-102385](https://cve.now/CVE-2026-102385.md): WordPress Ninja Forms plugin \<= 3.15.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Kevin Stover Ninja Forms)
- [CVE-2026-102384](https://cve.now/CVE-2026-102384.md): WordPress Supreme Modules Lite plugin \<= 2.5.63 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, Supreme Modules Lite)
- [CVE-2026-100513](https://cve.now/CVE-2026-100513.md): WordPress CF7 Views &#8211; Complete Entry Management for Contact Form 7 plugin \<= 3.2.5 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Aman CF7 Views &#8211; Complete Entry Management for Contac…)
- [CVE-2026-100508](https://cve.now/CVE-2026-100508.md): WordPress Two Factor plugin \<= 0.16.0 - Denial of Service Attack vulnerability (CVSS 5.3, WordPress.org Two Factor)
- [CVE-2026-100507](https://cve.now/CVE-2026-100507.md): WordPress If-So Dynamic Content Personalization plugin \<= 1.10.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, If-So Dynamic Content Personalization)
- [CVE-2026-97302](https://cve.now/CVE-2026-97302.md): WordPress MPG plugin \<= 4.2.3 - Sensitive Data Exposure vulnerability (CVSS 5.3, Themeisle MPG)
- [CVE-2026-97301](https://cve.now/CVE-2026-97301.md): WordPress Cool Formkit Lite plugin \<= 2.7.8 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Cool Plugins Cool Formkit Lite)
- [CVE-2026-97299](https://cve.now/CVE-2026-97299.md): WordPress Razorpay Payment Links for WooCommerce plugin \<= 2.1.5 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 5.4, KnitPay Razorpay Payment Links for WooCommerce)
- [CVE-2026-97298](https://cve.now/CVE-2026-97298.md): WordPress King Addons for Elementor plugin \<= 51.1.86 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, KingAddons King Addons for Elementor)
- [CVE-2026-97293](https://cve.now/CVE-2026-97293.md): WordPress Media LIbrary Assistant plugin \<= 3.41 - SQL Injection vulnerability (CVSS 8.5, David Lingren Media LIbrary Assistant)
- [CVE-2026-97292](https://cve.now/CVE-2026-97292.md): WordPress YITH WooCommerce Tab Manager plugin \<= 2.15.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, YITHEMES YITH WooCommerce Tab Manager)
- [CVE-2026-97289](https://cve.now/CVE-2026-97289.md): WordPress Quiz And Survey Master plugin \<= 11.2.6 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, ExpressTech Quiz And Survey Master)
- [CVE-2026-97288](https://cve.now/CVE-2026-97288.md): WordPress OAuth Server plugin \<= 4.5.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Jayson T Cote OAuth Server)
- [CVE-2026-97287](https://cve.now/CVE-2026-97287.md): WordPress Event Tickets plugin \<= 5.29.5 - SQL Injection vulnerability (CVSS 8.5, Liquid Web / StellarWP Event Tickets)
- [CVE-2026-97286](https://cve.now/CVE-2026-97286.md): WordPress Strong Testimonials plugin \<= 3.3.11 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, WP Chill Strong Testimonials)
- [CVE-2026-97285](https://cve.now/CVE-2026-97285.md): WordPress The Events Calendar plugin \<= 6.17.5 - Broken Access Control vulnerability (CVSS 5.4, Nexcess The Events Calendar)
- [CVE-2026-97282](https://cve.now/CVE-2026-97282.md): WordPress Review Schema plugin \<= 3.1.0 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.3, RadiusTheme Review Schema)
- [CVE-2026-97279](https://cve.now/CVE-2026-97279.md): WordPress Polylang plugin \<= 3.8.9 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Chouby Polylang)
- [CVE-2026-97274](https://cve.now/CVE-2026-97274.md): WordPress OAuth Single Sign On – SSO (OAuth Client) plugin \<= 7.1.2 - Bypass vulnerability vulnerability (CVSS 9.8, miniOrange OAuth Single Sign On – SSO)
- [CVE-2026-97272](https://cve.now/CVE-2026-97272.md): WordPress Premmerce Permalink Manager for WooCommerce plugin \<= 2.3.13 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Premmerce Permalink Manager for WooCommerce)
- [CVE-2026-97271](https://cve.now/CVE-2026-97271.md): WordPress WPFunnels plugin \<= 3.13.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, WPFunnels)
- [CVE-2026-97270](https://cve.now/CVE-2026-97270.md): WordPress CMB2 plugin \<= 2.13.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Justin Sternberg CMB2)
- [CVE-2026-97267](https://cve.now/CVE-2026-97267.md): WordPress Prevent files / folders access plugin \<= 2.6.7 - Broken Access Control vulnerability (CVSS 4.3, miniOrange Prevent files / folders access)
- [CVE-2026-97266](https://cve.now/CVE-2026-97266.md): WordPress Virtue/Ascend/Pinnacle Toolkit plugin \<= 4.9.12.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Nexcess Virtue/Ascend/Pinnacle Toolkit)
- [CVE-2026-97262](https://cve.now/CVE-2026-97262.md): WordPress Visual Composer Website Builder plugin \<= 45.16.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Visual Composer Website Builder)
- [CVE-2026-97261](https://cve.now/CVE-2026-97261.md): WordPress Notivo plugin \<= 1.4.2 - Sensitive Data Exposure vulnerability (CVSS 5.3, VillaTheme Notivo)
- [CVE-2026-97253](https://cve.now/CVE-2026-97253.md): WordPress LayerSlider plugin \<= 8.4.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Kreatura LayerSlider)
- [CVE-2026-97250](https://cve.now/CVE-2026-97250.md): WordPress Geo Mashup plugin \<= 1.13.21 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Dylan Kuhn Geo Mashup)
- [CVE-2026-97249](https://cve.now/CVE-2026-97249.md): WordPress Paid Member Subscriptions plugin \<= 3.0.9 - Bypass Vulnerability vulnerability (CVSS 5.3, Cozmoslabs Paid Member Subscriptions)
- [CVE-2026-97248](https://cve.now/CVE-2026-97248.md): WordPress Booking Activities plugin \<= 1.18.7.1 - PHP Object Injection vulnerability (CVSS 9.8, Booking Activities Team Booking Activities)
- [CVE-2026-97247](https://cve.now/CVE-2026-97247.md): WordPress Blocksy Companion plugin \<= 2.1.55 - Broken Access Control vulnerability (CVSS 6.5, Creative Themes Blocksy Companion)
- [CVE-2026-97246](https://cve.now/CVE-2026-97246.md): WordPress ShortPixel Image Optimizer plugin \<= 6.5.5 - PHP Object Injection vulnerability (CVSS 4.9, ShortPixel Image Optimizer)
- [CVE-2026-97245](https://cve.now/CVE-2026-97245.md): WordPress SureCart plugin \<= 4.7.2 - Privilege Escalation vulnerability (CVSS 7.2, SureCart)
- [CVE-2026-97244](https://cve.now/CVE-2026-97244.md): WordPress Creator LMS plugin \<= 1.2.19 - Path Traversal vulnerability (CVSS 7.5, WPFunnels Creator LMS)
- [CVE-2026-97243](https://cve.now/CVE-2026-97243.md): WordPress AllAble Connector plugin \<= 0.13.4 - Broken Access Control vulnerability (CVSS 5.4, flexyma AllAble Connector)
- [CVE-2026-97242](https://cve.now/CVE-2026-97242.md): WordPress WEBO MCP plugin \<= 3.0.18 - Arbitrary File Deletion vulnerability (CVSS 6.8, phuongwebo WEBO MCP)
- [CVE-2026-97241](https://cve.now/CVE-2026-97241.md): WordPress BackupEase plugin \<= 2.2.2 - Sensitive Data Exposure vulnerability (CVSS 7.5, PrecisionWP BackupEase)
- [CVE-2026-97240](https://cve.now/CVE-2026-97240.md): WordPress StifLi Backup Tools plugin \<= 2.2.7 - Sensitive Data Exposure vulnerability (CVSS 7.5, Esteban StifLi Backup Tools)
- [CVE-2026-97239](https://cve.now/CVE-2026-97239.md): WordPress MCP Content Manager Lite plugin \<= 1.1.0 - Broken Access Control vulnerability (CVSS 6.5, Jose Conti MCP Content Manager Lite)
- [CVE-2026-97238](https://cve.now/CVE-2026-97238.md): WordPress JetEngine plugin \<= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability (CVSS 5.5, Crocoblock. Jetimpex JetEngine)
- [CVE-2026-97237](https://cve.now/CVE-2026-97237.md): WordPress JetEngine plugin \<= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Crocoblock JetEngine)
- [CVE-2026-97236](https://cve.now/CVE-2026-97236.md): WordPress ThemeREX Addons plugin \< 2.45.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, ThemeREX Addons)
- [CVE-2026-97235](https://cve.now/CVE-2026-97235.md): WordPress ThemeREX Addons plugin \< 2.45.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, ThemeREX Addons)
- [CVE-2026-97197](https://cve.now/CVE-2026-97197.md): WordPress WordPress Backup & Migration plugin \<= 1.6.0 - Broken Access Control vulnerability (CVSS 7.5, WebToffee WordPress Backup & Migration)
- [CVE-2026-97079](https://cve.now/CVE-2026-97079.md): WordPress Webba Booking plugin \<= 6.5.0 - Insecure Direct Object References (IDOR) vulnerability (CVSS 4.3, Webba Appointment Booking Webba Booking)
- [CVE-2026-97078](https://cve.now/CVE-2026-97078.md): WordPress Client Invoicing by Sprout Invoices plugin \<= 20.8.17 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.3, BoldGrid Client Invoicing by Sprout Invoices)
- [CVE-2026-97077](https://cve.now/CVE-2026-97077.md): WordPress Ad Inserter plugin \<= 2.8.18 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Spacetime Ad Inserter)
- [CVE-2026-97074](https://cve.now/CVE-2026-97074.md): WordPress Newsletters, Email Marketing, SMS and Popups by Omnisend plugin \<= 1.9.0 - Insecure Direct Object References (IDOR) vulnerability (CVSS 4.3, Newsletters, Email Marketing, SMS and Popups by Omnisend)
- [CVE-2026-97067](https://cve.now/CVE-2026-97067.md): WordPress EWWW Image Optimizer plugin \<= 8.7.7 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Shane Bishop EWWW Image Optimizer)
- [CVE-2026-97066](https://cve.now/CVE-2026-97066.md): WordPress GiveWP plugin \<= 4.16.9 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.3, Nexcess GiveWP)
- [CVE-2026-97065](https://cve.now/CVE-2026-97065.md): WordPress Happyforms plugin \<= 1.26.15 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Happyforms)
- [CVE-2026-96838](https://cve.now/CVE-2026-96838.md): WordPress Blacklist Manager &#8211; WooCommerce Anti-Fraud, Blacklist &amp; Checkout Verification plugin \<= 2.3.1 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8, YoOhw Studio Blacklist Manager &#8211; WooCommerce Anti-Fra…)
- [CVE-2026-96837](https://cve.now/CVE-2026-96837.md): WordPress CartFlows plugin \<= 3.2.0 - Remote Code Execution (RCE) vulnerability (CVSS 8.8, Brainstorm Force CartFlows)
- [CVE-2026-96836](https://cve.now/CVE-2026-96836.md): WordPress Parsi Date plugin \<= 6.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Morteza Geransayeh Parsi Date)
- [CVE-2026-96835](https://cve.now/CVE-2026-96835.md): WordPress King Addons for Elementor plugin \<= 51.1.85 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, KingAddons.com King Addons for Elementor)
- [CVE-2026-96834](https://cve.now/CVE-2026-96834.md): WordPress GiveWP plugin \<= 4.16.9 - Sensitive Data Exposure vulnerability (CVSS 6.5, Nexcess GiveWP)
- [CVE-2026-96833](https://cve.now/CVE-2026-96833.md): WordPress Ultimate Addons for Contact Form 7 plugin \<= 3.5.51 - PHP Object Injection vulnerability (CVSS 7.2, Themefic Ultimate Addons for Contact Form)
- [CVE-2026-96832](https://cve.now/CVE-2026-96832.md): WordPress Content Egg plugin \<= 6.3.1 - PHP Object Injection vulnerability (CVSS 7.2, keywordrush Content Egg)
- [CVE-2026-96831](https://cve.now/CVE-2026-96831.md): WordPress Themify Builder plugin \<= 7.8.1 - PHP Object Injection vulnerability (CVSS 8.8, themifyme Themify Builder)
- [CVE-2026-96830](https://cve.now/CVE-2026-96830.md): WordPress GiveWP plugin \<= 4.16.9 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Nexcess GiveWP)
- [CVE-2026-96829](https://cve.now/CVE-2026-96829.md): WordPress The Plus Addons for Elementor Page Builder Lite plugin \<= 6.5.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, POSIMYTH The Plus Addons for Elementor Page Builder Lite)
- [CVE-2026-96828](https://cve.now/CVE-2026-96828.md): WordPress Category Discount Woocommerce plugin \<= 5.18 - SQL Injection vulnerability (CVSS 7.6, Vidish Category Discount Woocommerce)
- [CVE-2026-96827](https://cve.now/CVE-2026-96827.md): WordPress Admin Notices Manager plugin \<= 1.6.0 - SQL Injection vulnerability (CVSS 7.6, Melapress Admin Notices Manager)
- [CVE-2026-96825](https://cve.now/CVE-2026-96825.md): WordPress All In One WP Security & Firewall plugin \<= 5.4.8 - Bypass Vulnerability vulnerability (CVSS 4.2, David Anderson / Team Updraft All In One WP Security & Fire…)
- [CVE-2026-96824](https://cve.now/CVE-2026-96824.md): WordPress Template Kit – Import plugin \<= 1.0.16 - Arbitrary File Deletion vulnerability (CVSS 6.8, envato Template Kit – Import)
- [CVE-2026-96823](https://cve.now/CVE-2026-96823.md): WordPress Customer Reviews for WooCommerce plugin \<= 5.120.0 - Arbitrary Content Deletion vulnerability (CVSS 7.5, CusRev Customer Reviews for WooCommerce)
- [CVE-2026-96822](https://cve.now/CVE-2026-96822.md): WordPress Books Gallery plugin \<= 4.8.3 - SQL Injection vulnerability (CVSS 9.3, Hossni Mubarak Books Gallery)
- [CVE-2026-96821](https://cve.now/CVE-2026-96821.md): WordPress FluentBoards plugin \<= 2.0.12 - Privilege Escalation vulnerability (CVSS 6.3, Mahmudul Hasan Arif FluentBoards)
- [CVE-2026-96820](https://cve.now/CVE-2026-96820.md): WordPress Awesome Support plugin \<= 6.3.9 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, awesomesupport Awesome Support)
- [CVE-2026-96819](https://cve.now/CVE-2026-96819.md): WordPress oik plugin \<= 4.15.4 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, bobbingwide oik)
- [CVE-2026-96818](https://cve.now/CVE-2026-96818.md): WordPress WP Express Checkout (Accept PayPal Payments) plugin \<= 2.4.9 - Broken Access Control vulnerability (CVSS 7.5, mra13 / Team Tips and Tricks HQ WP Express Checkout)
- [CVE-2026-96817](https://cve.now/CVE-2026-96817.md): WordPress MakeCommerce for WooCommerce plugin \<= 4.1.0 - Broken Access Control vulnerability (CVSS 8.2, MakeCommerce.net MakeCommerce for WooCommerce)
- [CVE-2026-96816](https://cve.now/CVE-2026-96816.md): WordPress Trusted Shops Easy Integration for WooCommerce plugin \<= 2.0.6 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, vendidero Trusted Shops Easy Integration for WooCommerce)
- [CVE-2026-96815](https://cve.now/CVE-2026-96815.md): WordPress Vitepos plugin \<= 3.5.0 - Privilege Escalation vulnerability (CVSS 7.2, appsbd Vitepos)
- [CVE-2026-96814](https://cve.now/CVE-2026-96814.md): WordPress WooCommerce Product Table Lite plugin \<= 5.6.7 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, WP Titan Labs WooCommerce Product Table Lite)
- [CVE-2026-96450](https://cve.now/CVE-2026-96450.md): WordPress pixfort Core plugin \< 4.3.3 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4, pixfort Core)
- [CVE-2026-96352](https://cve.now/CVE-2026-96352.md): WordPress YITH WooCommerce Ajax Search plugin \<= 2.28.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, YITHEMES YITH WooCommerce Ajax Search)
- [CVE-2026-96351](https://cve.now/CVE-2026-96351.md): WordPress Classified Listing plugin \<= 6.1.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, RadiusTheme Classified Listing)
- [CVE-2026-96350](https://cve.now/CVE-2026-96350.md): WordPress Estatik plugin \<= 4.3.5 - Privilege Escalation vulnerability (CVSS 9.8, Estatik)
- [CVE-2026-96349](https://cve.now/CVE-2026-96349.md): WordPress SiteSkite plugin \<= 2.1.8 - Remote Code Execution (RCE) vulnerability (CVSS 10.0, SiteSkite)
- [CVE-2026-96348](https://cve.now/CVE-2026-96348.md): WordPress Bookly plugin \<= 28.2 - Broken Access Control vulnerability (CVSS 7.5, Bookly)
- [CVE-2026-96347](https://cve.now/CVE-2026-96347.md): WordPress Bookly plugin \<= 28.2 - Insecure Direct Object References (IDOR) vulnerability (CVSS 6.5, Bookly)
- [CVE-2026-96346](https://cve.now/CVE-2026-96346.md): WordPress WP ERP plugin \<= 1.17.9 - SQL Injection vulnerability (CVSS 7.6, weDevs WP ERP)
- [CVE-2026-96345](https://cve.now/CVE-2026-96345.md): WordPress Estatik plugin \<= 4.3.5 - SQL Injection vulnerability (CVSS 7.6, Estatik)
- [CVE-2026-96344](https://cve.now/CVE-2026-96344.md): WordPress eCommerce Product Catalog plugin \<= 3.6.0 - PHP Object Injection vulnerability (CVSS 7.2, impleCode eCommerce Product Catalog)
- [CVE-2026-96343](https://cve.now/CVE-2026-96343.md): WordPress WP ERP plugin \<= 1.17.9 - PHP Object Injection vulnerability (CVSS 7.2, weDevs WP ERP)
- [CVE-2026-96338](https://cve.now/CVE-2026-96338.md): WordPress Profile Builder plugin \<= 4.0.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Cozmoslabs Profile Builder)
- [CVE-2026-95587](https://cve.now/CVE-2026-95587.md): WordPress Hostinger Migrator plugin \<= 1.0 - Broken Access Control vulnerability (CVSS 7.5, Hostinger Migrator)
- [CVE-2026-95531](https://cve.now/CVE-2026-95531.md): WordPress Conversational Forms for ChatBot plugin \<= 1.5.0 - PHP Object Injection vulnerability (CVSS 8.8, QuantumCloud Conversational Forms for ChatBot)
- [CVE-2026-94683](https://cve.now/CVE-2026-94683.md): WordPress DesignSetGo plugin \<= 2.8.0 - PHP Object Injection vulnerability (CVSS 8.8, Justin Nealey DesignSetGo)
- [CVE-2026-94681](https://cve.now/CVE-2026-94681.md): WordPress WP Store Locator plugin \< 3.0.0 - Denial of Service Attack vulnerability (CVSS 5.9, Tijmen Smit WP Store Locator)
- [CVE-2026-94678](https://cve.now/CVE-2026-94678.md): WordPress Go Live Update Urls plugin \<= 7.0.8 - PHP Object Injection vulnerability (CVSS 8.8, Mat Lipe Go Live Update Urls)
- [CVE-2026-94677](https://cve.now/CVE-2026-94677.md): WordPress Kadence WooCommerce Email Designer plugin \<= 1.5.19.1 - PHP Object Injection vulnerability (CVSS 7.2, Nexcess Kadence WooCommerce Email Designer)
- [CVE-2026-94674](https://cve.now/CVE-2026-94674.md): WordPress Pixel Manager for WooCommerce plugin \<= 1.69.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, SweetCode Pixel Manager for WooCommerce)
- [CVE-2026-94673](https://cve.now/CVE-2026-94673.md): WordPress Simply Schedule Appointments plugin \<= 1.6.12.31 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.3, NSquared Simply Schedule Appointments)
- [CVE-2026-94672](https://cve.now/CVE-2026-94672.md): WordPress Safe SVG plugin \<= 2.5.0 - Insecure Direct Object References (IDOR) vulnerability (CVSS 4.3, 10up Safe SVG)
- [CVE-2026-94499](https://cve.now/CVE-2026-94499.md): WordPress FormGent plugin \<= 1.12.2 - Broken Access Control vulnerability (CVSS 7.1, wpWax FormGent)
- [CVE-2026-94389](https://cve.now/CVE-2026-94389.md): WordPress AcyMailing SMTP Newsletter plugin \<= 11.0.5 - Remote Code Execution (RCE) vulnerability (CVSS 9.0, AcyMailing Newsletter Team AcyMailing SMTP Newsletter)
- [CVE-2026-94178](https://cve.now/CVE-2026-94178.md): WordPress Import and export users and customers plugin \<= 2.5.2 - Privilege Escalation vulnerability (CVSS 7.5, Javier Carazo Import and export users and customers)
- [CVE-2026-94177](https://cve.now/CVE-2026-94177.md): WordPress GamiPress plugin \<= 8.0.2 - SQL Injection vulnerability (CVSS 8.5, Ruben Garcia GamiPress)
- [CVE-2026-94173](https://cve.now/CVE-2026-94173.md): WordPress Business Directory plugin \<= 6.4.27 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.4, Strategy11 Team Business Directory)
- [CVE-2026-94123](https://cve.now/CVE-2026-94123.md): WordPress NextGEN Gallery plugin \<= 4.5.0 - Arbitrary File Download vulnerability (CVSS 7.5, Syed Balkhi NextGEN Gallery)
- [CVE-2026-94122](https://cve.now/CVE-2026-94122.md): WordPress Responsive Slider Gallery plugin \<= 1.5.5 - PHP Object Injection vulnerability (CVSS 7.2, A WP Life Responsive Slider Gallery)
- [CVE-2026-94121](https://cve.now/CVE-2026-94121.md): WordPress 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin \<= 2.33.6 - PHP Object Injection vulnerability (CVSS 8.8, 10Web Booster – Website speed optimization, Cache & Page Sp…)
- [CVE-2026-94120](https://cve.now/CVE-2026-94120.md): WordPress GravityExport Lite for Gravity Forms plugin \<= 2.7.2 - Broken Access Control vulnerability (CVSS 7.5, GravityKit GravityExport Lite for Gravity Forms)
- [CVE-2026-94115](https://cve.now/CVE-2026-94115.md): WordPress Easy Pricing Tables plugin \<= 4.1.2 - SQL Injection vulnerability (CVSS 8.5, Fatcatapps Easy Pricing Tables)
- [CVE-2026-94082](https://cve.now/CVE-2026-94082.md): WordPress Quiz Cat plugin \<= 3.1.1 - SQL Injection vulnerability (CVSS 7.6, Fatcatapps Quiz Cat)
- [CVE-2026-94081](https://cve.now/CVE-2026-94081.md): WordPress WordPress Persistent Login plugin \<= 3.1.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, lukeseager WordPress Persistent Login)
- [CVE-2026-94078](https://cve.now/CVE-2026-94078.md): WordPress Site Reviews plugin \<= 8.3.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Gemini Labs Site Reviews)
- [CVE-2026-94077](https://cve.now/CVE-2026-94077.md): WordPress Safe SVG plugin \<= 2.5.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, 10up Safe SVG)
- [CVE-2026-94076](https://cve.now/CVE-2026-94076.md): WordPress SEO Plugin by Squirrly SEO plugin \<= 14.2.5 - PHP Object Injection vulnerability (CVSS 8.8, SEO Squirrly SEO Plugin by Squirrly SEO)
- [CVE-2026-94074](https://cve.now/CVE-2026-94074.md): WordPress Simply Schedule Appointments plugin \<= 1.6.12.29 - Broken Access Control vulnerability (CVSS 6.5, NSquared Simply Schedule Appointments)
- [CVE-2026-93771](https://cve.now/CVE-2026-93771.md): WordPress Cost of Goods for WooCommerce plugin \<= 3.5.2 - PHP Object Injection vulnerability (CVSS 7.2, WPFactory Cost of Goods for WooCommerce)
- [CVE-2026-93770](https://cve.now/CVE-2026-93770.md): WordPress WP Statistics plugin \<= 14.16.13 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, VeronaLabs WP Statistics)
- [CVE-2026-93651](https://cve.now/CVE-2026-93651.md): WordPress Minimum and Maximum Quantity for WooCommerce plugin \<= 2.1.2 - PHP Object Injection vulnerability (CVSS 7.2, Dotstore Minimum and Maximum Quantity for WooCommerce)
- [CVE-2026-93624](https://cve.now/CVE-2026-93624.md): WordPress Music Player for WooCommerce plugin \<= 1.9.1 - PHP Object Injection vulnerability (CVSS 7.2, codepeople Music Player for WooCommerce)
- [CVE-2026-93621](https://cve.now/CVE-2026-93621.md): WordPress WP Data Access plugin \<= 5.5.84 - SQL Injection vulnerability (CVSS 8.2, Passionate Programmer Peter WP Data Access)
- [CVE-2026-93514](https://cve.now/CVE-2026-93514.md): WordPress Notification for Telegram plugin \<= 3.5.2 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, rainafarai Notification for Telegram)
- [CVE-2026-93512](https://cve.now/CVE-2026-93512.md): WordPress JW Player for WordPress plugin \<= 2.3.11 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, ilGhera JW Player for WordPress)
- [CVE-2026-62085](https://cve.now/CVE-2026-62085.md): WordPress WP Activity Log plugin \<= 5.6.6 - SQL Injection vulnerability (CVSS 7.6, Melapress WP Activity Log)
- [CVE-2026-62083](https://cve.now/CVE-2026-62083.md): WordPress Creator LMS plugin \<= 1.2.19 - Other vulnerability Type vulnerability (CVSS 5.4, WPFunnels Creator LMS)
- [CVE-2026-62081](https://cve.now/CVE-2026-62081.md): WordPress Flexible PDF Coupons plugin \<= 1.14.11 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.4, wpdesk Flexible PDF Coupons)
- [CVE-2026-62080](https://cve.now/CVE-2026-62080.md): WordPress Happy Addons for Elementor plugin \<= 3.23.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Leevio Happy Addons for Elementor)
- [CVE-2026-62079](https://cve.now/CVE-2026-62079.md): WordPress Qi Addons For Elementor plugin \<= 1.11 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Qode Qi Addons For Elementor)
- [CVE-2026-62078](https://cve.now/CVE-2026-62078.md): WordPress Premium Addons for Elementor plugin \<= 4.11.105 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Leap13 Premium Addons for Elementor)
- [CVE-2026-27371](https://cve.now/CVE-2026-27371.md): WordPress WPFunnels plugin \<= 3.13.1 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, WPFunnels)
- [CVE-2026-27085](https://cve.now/CVE-2026-27085.md): WordPress Astra WordPress theme theme \<= 4.13.12 - Content Injection vulnerability (CVSS 2.7, Brainstorm Force Astra WordPress Theme)
- [CVE-2026-95616](https://cve.now/CVE-2026-95616.md): Apache WSS4J: Unauthenticated denial of service via integer overflow in DER parsing of X.509 certificate extensions (CVSS 7.5, Apache Software Foundation Apache WSS4J)
- [CVE-2026-103321](https://cve.now/CVE-2026-103321.md): MISP Stored Cross-Site Scripting (XSS) via Unvalidated Event Graph Preview Image (CVSS 8.3, MISP)
- [CVE-2026-103115](https://cve.now/CVE-2026-103115.md): OS4ED openSIS-Classic Student Search CustomFieldsFnc.php sql injection (CVSS 5.3, OS4ED openSIS-Classic)
- [CVE-2026-92899](https://cve.now/CVE-2026-92899.md): Apache WSS4J: UsernameToken replay protection bypassed by re-encoding the Nonce (CVSS 4.8, Apache Software Foundation Apache WSS4J)
- [CVE-2026-74865](https://cve.now/CVE-2026-74865.md): Authentication Bypass in sogo\_yhn (CVSS 9.2, YunoHost-Apps sogo\_yhn)
- [CVE-2026-74864](https://cve.now/CVE-2026-74864.md): Authentication Bypass in sogo\_yhn (CVSS 9.3, YunoHost-Apps sogo\_yhn)
- [CVE-2026-92121](https://cve.now/CVE-2026-92121.md): Apache WSS4J: WS-SecurityPolicy signature checks skipped in the streaming code after an STR-Transform reference (CVSS 7.5, Apache Software Foundation Apache WSS4J)
- [CVE-2026-89238](https://cve.now/CVE-2026-89238.md): Apache WSS4J: WSS4J EncryptedHeader child confusion causing wrong protected-header selection (CVSS 9.1, Apache Software Foundation Apache WSS4J)
- [CVE-2026-88920](https://cve.now/CVE-2026-88920.md): Apache WSS4J: SAML Sender-Vouches Authentication Bypass (CVSS 9.8, Apache Software Foundation Apache WSS4J)
- [CVE-2026-87830](https://cve.now/CVE-2026-87830.md): Apache WSS4J: Streaming WS-SecurityPolicy validation may skip element-protection checks. (CVSS 9.1, Apache Software Foundation Apache WSS4J)
- [CVE-2026-85532](https://cve.now/CVE-2026-85532.md): Apache WSS4J: Insufficient Validation of Derived-Key Parameters (CVSS 7.5, Apache Software Foundation Apache WSS4J)
- [CVE-2026-103242](https://cve.now/CVE-2026-103242.md): Rpm: heap-based buffer overflow write in hex2binv() via a mistyped rpmtag\_filesignatures header tag (CVSS 7.1, Red Hat Enterprise Linux · Red Hat Hardened Images)
- [CVE-2026-62146](https://cve.now/CVE-2026-62146.md): Cri-o: cri-o: sandbox state poisoning via pod annotations may expose runtime socket (CVSS 7.8, Red Hat OpenShift Container Platform)
- [CVE-2026-10726](https://cve.now/CVE-2026-10726.md): Cato Windows SDP Client arbitrary file disclosure due to improper TLS certificate validation (CVSS 6.8, Cato Networks SDP Client)
- [CVE-2026-10739](https://cve.now/CVE-2026-10739.md): Cato Networks SDP Client for Windows is vulnerable to Local Privilege Escalation (CVSS 8.5, Cato Networks SDP Client)
- [CVE-2026-103012](https://cve.now/CVE-2026-103012.md): Claude Code selected an API key stored by Claude Code, for example from an earlier \`/login\` or written directly to its configuration, ahead (CVSS 2.0, @anthropic-ai/claude-code)
- [CVE-2026-103114](https://cve.now/CVE-2026-103114.md): OS4ED openSIS-Classic Assignment Management Endpoint Assignments.php DBQuery\_assignment sql injection (CVSS 5.3, OS4ED openSIS-Classic)
- [CVE-2026-76992](https://cve.now/CVE-2026-76992.md): Uncontrolled Memory Allocation in CODESYS Gateway Client (CVSS 8.7, CODESYS Development System · CODESYS Gateway +6)
- [CVE-2026-13720](https://cve.now/CVE-2026-13720.md): Editor can forge file-provisioning provenance on dashboards via the dashboard API (CVSS 5.4, Grafana OSS · Grafana Enterprise)
- [CVE-2026-13719](https://cve.now/CVE-2026-13719.md): Alert rules in restricted folders disclosed via the alert rules list API (CVSS 4.3, Grafana Enterprise · Grafana OSS)
- [CVE-2026-96342](https://cve.now/CVE-2026-96342.md): WordPress WPMobile.App plugin \<= 11.83 - Sensitive Data Exposure vulnerability (CVSS 6.9, Amauri.IO WPMobile.App)
- [CVE-2026-103113](https://cve.now/CVE-2026-103113.md): OS4ED openSIS-Classic General Information Tab Student.php save action sql injection (CVSS 5.1, OS4ED openSIS-Classic)
- [CVE-2026-103239](https://cve.now/CVE-2026-103239.md): MISP Tag Collection Save Allows Privilege Escalation via Sibling Model Injection (CVSS 8.6, MISP)
- [CVE-2026-103237](https://cve.now/CVE-2026-103237.md): MISP: Nested Model Alias Key Bypasses Sanitization to Modify Cross-Tenant Rows (CVSS 8.3, MISP)
- [CVE-2026-77185](https://cve.now/CVE-2026-77185.md): Apache MINA SSHD: Asynchronous authentication can bypass signature verification (CVSS 9.1, Apache Software Foundation Apache MINA SSHD)
- [CVE-2026-93994](https://cve.now/CVE-2026-93994.md): Apache MINA SSHD: Repeated-publickey policy bypass on server (CVSS 8.1, Apache Software Foundation Apache MINA SSHD)
- [CVE-2026-94053](https://cve.now/CVE-2026-94053.md): Apache MINA SSHD: LDAP injection in sshd-ldap (CVSS 9.1, Apache Software Foundation Apache MINA SSHD)
- [CVE-2026-10764](https://cve.now/CVE-2026-10764.md): Information disclosure in BVMS 4.5 up to 12.3 (CVSS 8.7, IQSIGHT BVMS)
- [CVE-2026-93995](https://cve.now/CVE-2026-93995.md): Apache MINA SSHD: Remote execution of JGit "archive -o=file.zip" can write file on the server (CVSS 6.5, Apache Software Foundation Apache MINA SSHD)
- [CVE-2026-93996](https://cve.now/CVE-2026-93996.md): Apache MINA SSHD: Memory exhaustion DoS via unbounded SCP command line read (CVSS 6.5, Apache Software Foundation Apache MINA SSHD)
- [CVE-2026-94002](https://cve.now/CVE-2026-94002.md): Apache MINA SSHD: Memory exhaustion in SFTP client via unsolicited SFTP replies (CVSS 7.5, Apache Software Foundation Apache MINA SSHD)
- [CVE-2026-94029](https://cve.now/CVE-2026-94029.md): Apache MINA SSHD: Memory exhaustion in SFTP v6 check-file-name/check-file-handle extension (CVSS 6.5, Apache Software Foundation Apache MINA SSHD)
- [CVE-2026-94052](https://cve.now/CVE-2026-94052.md): Apache MINA SSHD: LDAP password authentication ineffective (CVSS 9.1, Apache Software Foundation Apache MINA SSHD)
- [CVE-2026-79625](https://cve.now/CVE-2026-79625.md): Improper Synchronization in Monitoring in CODESYS Control Runtime (CVSS 7.2, CODESYS Control RTE · CODESYS Control Win +15)
- [CVE-2026-103235](https://cve.now/CVE-2026-103235.md): MISP Event Delegation Mass Assignment Allows Retargeting Delegation to Arbitrary Events (CVSS 8.7, MISP)
- [CVE-2026-102588](https://cve.now/CVE-2026-102588.md): Moodle: csrf in xml grade import (CVSS 6.5, moodle)
- [CVE-2026-102587](https://cve.now/CVE-2026-102587.md): Moodle: user list filters bypass profile field visibility (CVSS 2.7, moodle)
- [CVE-2026-102586](https://cve.now/CVE-2026-102586.md): Moodle: xss via password reset link due to insufficient username escaping (CVSS 4.3, moodle)
- [CVE-2026-102585](https://cve.now/CVE-2026-102585.md): Moodle: group validation missing when enrolling user to course (CVSS 4.3, moodle)
- [CVE-2026-102584](https://cve.now/CVE-2026-102584.md): Moodle: missing capability check allows unauthorised grade penalty recalculation (CVSS 4.3, moodle)
- [CVE-2026-102583](https://cve.now/CVE-2026-102583.md): Moodle: incorrect capability check in ai generate image web service (CVSS 2.7, moodle)
- [CVE-2026-102582](https://cve.now/CVE-2026-102582.md): Moodle: manual enrolment page accessible when plugin disabled (CVSS 2.2, moodle)
- [CVE-2026-102581](https://cve.now/CVE-2026-102581.md): Moodle: xss in forum post templates due to insufficient escaping (CVSS 4.6, moodle)
- [CVE-2026-102580](https://cve.now/CVE-2026-102580.md): Moodle: arbitrary class instantiation via report builder audience classname (CVSS 2.2, moodle)
- [CVE-2026-102579](https://cve.now/CVE-2026-102579.md): Moodle: user profile information disclosure via grade web service (CVSS 4.3, moodle)
- [CVE-2026-102578](https://cve.now/CVE-2026-102578.md): Moodle: sql injection in question bank web service (CVSS 5.5, moodle)
- [CVE-2026-102577](https://cve.now/CVE-2026-102577.md): Moodle: ssrf risk in url downloader via ipv4-mapped ipv6 address bypass (CVSS 4.3, moodle)
- [CVE-2026-102459](https://cve.now/CVE-2026-102459.md): DigiWin｜EasyFlow .NET - Reflected Cross-site Scripting (CVSS 5.1, DigiWin EasyFlow .NET)
- [CVE-2026-102458](https://cve.now/CVE-2026-102458.md): DigiWin｜EasyFlow .NET - Missing Authentication (CVSS 9.3, DigiWin EasyFlow .NET)
- [CVE-2026-102457](https://cve.now/CVE-2026-102457.md): DigiWin｜EasyFlow .NET - Arbitrary File Read (CVSS 7.1, DigiWin EasyFlow .NET)
- [CVE-2026-102456](https://cve.now/CVE-2026-102456.md): DigiWin｜EasyFlow .NET - SQL Injection (CVSS 7.1, DigiWin EasyFlow .NET)
- [CVE-2026-102455](https://cve.now/CVE-2026-102455.md): DigiWin｜EasyFlow .NET - Insecure Deserialization (CVSS 9.3, DigiWin EasyFlow .NET)
- [CVE-2026-92712](https://cve.now/CVE-2026-92712.md): ReactPress \<= 3.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'permalink' Parameter (CVSS 6.4, rockiger ReactPress – Create React App for WordPress)
- [CVE-2026-75098](https://cve.now/CVE-2026-75098.md): Product Designer App \<= 1.1.3 - Unauthenticated Arbitrary File Read via 'svg' Parameter in pdapp-render-design (CVSS 7.5, productdesignerapp Product Designer App)
- [CVE-2025-14564](https://cve.now/CVE-2025-14564.md): Viable URL Media Uploader \<= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload (CVSS 6.4, ahsangadit Viable URL Media Uploader)
- [CVE-2026-93908](https://cve.now/CVE-2026-93908.md): Real Estate Manager \<= 7.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'before\_price\_text' Parameter (CVSS 6.4, rameez\_iqbal Real Estate Manager – Property Listing and Age…)
- [CVE-2026-97347](https://cve.now/CVE-2026-97347.md): Post Views Stats Counter \<= 1.1.7 - Unauthenticated Stored Cross-Site Scripting via User-Agent Header (CVSS 7.2, kazukiyanamoto Post Views Stats Counter)
- [CVE-2026-102454](https://cve.now/CVE-2026-102454.md): DigiWin｜EasyFlow .NET - Arbitrary File Upload (CVSS 8.6, DigiWin EasyFlow .NET)
- [CVE-2026-102511](https://cve.now/CVE-2026-102511.md): Apache PLC4X, Apache PLC4X, Apache PLC4X, Apache PLC4X: ADS discovery accepts spoofed responses and derives the connection target from them (CVSS 8.5, Apache Software Foundation Apache PLC4X)
- [CVE-2026-102510](https://cve.now/CVE-2026-102510.md): Apache PLC4X: Go binding: unbounded allocation and framing failures on wire-controlled lengths (CVSS 8.7, Apache Software Foundation Apache PLC4X)
- [CVE-2026-102509](https://cve.now/CVE-2026-102509.md): Apache PLC4X, Apache PLC4X: Pre-authentication resource exhaustion in the OPC UA driver and the Java SPI parser (CVSS 8.7, Apache Software Foundation Apache PLC4X)
- [CVE-2026-92873](https://cve.now/CVE-2026-92873.md): Pgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attacker to promote an arb (CVSS 7.3, Pgpool Global Development Group Pgpool-II)
- [CVE-2026-92872](https://cve.now/CVE-2026-92872.md): Pgpool-II inserts sensitive information into log file, which may allow an authenticated attacker to obtain the cluster information. (CVSS 4.3, Pgpool Global Development Group Pgpool-II)
- [CVE-2026-92871](https://cve.now/CVE-2026-92871.md): A NULL pointer dereference vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal termination of t (CVSS 7.5, Pgpool Global Development Group Pgpool-II)
- [CVE-2026-102508](https://cve.now/CVE-2026-102508.md): Apache PLC4X: OPC UA secure channel: integrity bypass, unverifiable server certificate, and silent downgrade (CVSS 9.2, Apache Software Foundation Apache PLC4X)
- [CVE-2026-93462](https://cve.now/CVE-2026-93462.md): A missing authentication for critical function vulnerability exists in baserCMS. (CVSS 5.3, baserCMS User Community baserCMS)
- [CVE-2026-6173](https://cve.now/CVE-2026-6173.md): Bold Page Builder \<= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'background\_image' Parameter (CVSS 6.4, boldthemes Bold Page Builder)
- [CVE-2026-16596](https://cve.now/CVE-2026-16596.md): WP Directory Kit \<= 1.5.4 - Authenticated (Custom+) SQL Injection via 'data\_fields\_list' Parameter (CVSS 6.5, wpdirectorykit WP Directory Kit)
- [CVE-2026-6170](https://cve.now/CVE-2026-6170.md): Bold Page Builder \<= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt\_bb\_css\_image\_grid 'images' Shortcode Attribute (CVSS 6.4, boldthemes Bold Page Builder)
- [CVE-2026-6806](https://cve.now/CVE-2026-6806.md): Motors \<= 1.4.109 - Unauthenticated Blind SQL Injection via 'stm\_lat'/'stm\_lng' Parameters (CVSS 7.5, stylemix Motors – Car Dealership & Classified Listings Plug…)
- [CVE-2026-6171](https://cve.now/CVE-2026-6171.md): Bold Page Builder \<= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'target' Shortcode Attribute (CVSS 6.4, boldthemes Bold Page Builder)
- [CVE-2026-14876](https://cve.now/CVE-2026-14876.md): Smart Slider 3 \<= 3.5.1.38 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-href' Attribute in Custom HTML Block (CVSS 6.4, nextendweb Smart Slider)
- [CVE-2026-11895](https://cve.now/CVE-2026-11895.md): HT Mega Addons for Elementor \<= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data Table 'display\_options' Setting (CVSS 6.4, devitemsllc HT Mega Addons for Elementor – Elementor Widget…)
- [CVE-2026-88037](https://cve.now/CVE-2026-88037.md): Bold Page Builder \<= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt\_bb\_service title (CVSS 6.4, boldthemes Bold Page Builder)
- [CVE-2026-6172](https://cve.now/CVE-2026-6172.md): Bold Page Builder \<= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'caption' Parameter (CVSS 6.4, boldthemes Bold Page Builder)
- [CVE-2026-93464](https://cve.now/CVE-2026-93464.md): A stored cross-site scripting vulnerability via custom content descriptions exists in baserCMS. (CVSS 5.4, baserCMS User Community baserCMS)
- [CVE-2026-93460](https://cve.now/CVE-2026-93460.md): A stored cross-site scripting vulnerability via appended strings in email form fields exists in baserCMS. (CVSS 5.4, baserCMS User Community baserCMS)
- [CVE-2026-93463](https://cve.now/CVE-2026-93463.md): A cross-site scripting vulnerability via script validation bypass exists in baserCMS. (CVSS 5.4, baserCMS User Community baserCMS)
- [CVE-2026-92870](https://cve.now/CVE-2026-92870.md): A stack-based buffer overflow vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal process termi (CVSS 7.5, Pgpool Global Development Group Pgpool-II)
- [CVE-2026-92869](https://cve.now/CVE-2026-92869.md): An out-of-bounds write vulnerability exists in Pgpool-II, which may allow an authenticated attacker to cause abnormal process termination. (CVSS 6.5, Pgpool Global Development Group Pgpool-II)
- [CVE-2026-92868](https://cve.now/CVE-2026-92868.md): An improper certificate validation vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to bypass client certifica (CVSS 6.5, Pgpool Global Development Group Pgpool-II)
- [CVE-2026-92867](https://cve.now/CVE-2026-92867.md): An out-of-bounds write vulnerability exists in Pgpool-II , which may allow an authenticated attacker to cause abnormal process termination o (CVSS 8.8, Pgpool Global Development Group Pgpool-II)
- [CVE-2026-97150](https://cve.now/CVE-2026-97150.md): When converting baserCMS4-style addons to baserCMS5-style ones, BcAddonMigrator includes "config.php" from the addon, which means the PHP c (CVSS 7.2, baserCMS Users Community BcAddonMigrator)
- [CVE-2026-97196](https://cve.now/CVE-2026-97196.md): WordPress GiveWP plugin \<= 4.16.9 - Broken Authentication vulnerability (CVSS 9.1, Liquid Web / StellarWP GiveWP)
- [CVE-2026-89294](https://cve.now/CVE-2026-89294.md): Simply Schedule Appointments \<= 1.6.12.27 - Authenticated (Subscriber+) Local File Inclusion via 'ssa\_locale' Parameter (CVSS 7.5, croixhaug Simply Schedule Appointments)
- [CVE-2026-97316](https://cve.now/CVE-2026-97316.md): Broken Link Notifier 1.3.1 - 2.0.0 - Unauthenticated SSRF via Redirect Bypass (CVSS 5.8, Broken Link Notifier)
- [CVE-2026-96886](https://cve.now/CVE-2026-96886.md): Course Booking System \< 7.0.9 - Unauthenticated Attendee PII Disclosure via CSV Export (CVSS 5.3, Course Booking System)
- [CVE-2026-94297](https://cve.now/CVE-2026-94297.md): Media Library Organizer 2.0.4 - 2.1.3 - Contributor+ Arbitrary Taxonomy Term Creation (CVSS 2.7, Media Library Organizer)
- [CVE-2026-94274](https://cve.now/CVE-2026-94274.md): YayReviews 1.0.4 - 1.4.0 - Unauthenticated Sensitive Data Disclosure via REST API (CVSS 5.3, YayReviews)
- [CVE-2026-93580](https://cve.now/CVE-2026-93580.md): InPost for WooCommerce 1.7.5 - 1.9.7 - Unauthenticated Order Status Forgery via Shipment Webhook (CVSS 5.3, InPost PL)
- [CVE-2026-92994](https://cve.now/CVE-2026-92994.md): Verge3D \< 4.13.1 - Unauthenticated Stored XSS via File Storage API (CVSS 8.8, Verge3D Publishing and E-Commerce)
- [CVE-2026-92424](https://cve.now/CVE-2026-92424.md): Content Egg \< 11.9.0 - Contributor+ Stored XSS via Import Queue (CVSS 6.8, Content Egg)
- [CVE-2026-91832](https://cve.now/CVE-2026-91832.md): WP Mobile Menu 2.7.4 - 2.8.8 - Stored XSS via CSRF (CVSS 7.1, WP Mobile Menu)
- [CVE-2026-91072](https://cve.now/CVE-2026-91072.md): EWWW Image Optimizer \< 8.8.0 - Admin+ WebP File Rename and Deletion via Unrestricted Path in WebP Migration Handler (CVSS 4.4, EWWW Image Optimizer)
- [CVE-2026-91051](https://cve.now/CVE-2026-91051.md): EWWW Image Optimizer 8.6.0 - 8.7.7 - Author+ PHP Object Injection via 'eio\_page\_settings' Post Meta (CVSS 6.6, EWWW Image Optimizer)
- [CVE-2026-90953](https://cve.now/CVE-2026-90953.md): Image Optimizer by Elementor \< 1.7.7 - Subscriber+ Attachment Metadata and Site Statistics Disclosure via Discarded REST Permission Callbacks (CVSS 4.3, Image Optimizer)
- [CVE-2026-89193](https://cve.now/CVE-2026-89193.md): Robin Image Optimizer 2.0.0 - 2.0.7 - Unauthenticated Stored XSS via WebP URL Delivery HTML Parser (CVSS 7.5, Robin Image Optimizer)
- [CVE-2026-89190](https://cve.now/CVE-2026-89190.md): Robin Image Optimizer \< 2.0.8 - Subscriber+ Plugin Settings Disclosure via fy\_ajax (CVSS 4.3, Robin Image Optimizer)
- [CVE-2026-88797](https://cve.now/CVE-2026-88797.md): Vayu X \< 1.0.6 - Subscriber+ Arbitrary WordPress.org Plugin Installation and Activation (CVSS 7.1, Vayu X)
- [CVE-2026-88791](https://cve.now/CVE-2026-88791.md): Safe Redirect Manager \< 2.3.0 - Open Redirect via Wildcard Redirect Rules (CVSS 3.4, Safe Redirect Manager)
- [CVE-2026-87777](https://cve.now/CVE-2026-87777.md): Hostinger Reach 1.0.6 - 1.8.2 - Contributor+ Stored XSS via formId Elementor Widget Attribute (CVSS 6.8, Hostinger Reach)
- [CVE-2026-86789](https://cve.now/CVE-2026-86789.md): Connections Business Directory \<= 10.4.67 - Unauthenticated Non-Public Directory Entry Disclosure via cn-api/v1 REST Routes (CVSS 5.3, Connections Business Directory)
- [CVE-2026-85576](https://cve.now/CVE-2026-85576.md): All in One Files Upload for WooCommerce \< 2.0.17 - Subscriber+ Arbitrary Plugin Settings Update (CVSS 4.3, All in One Files Upload)
- [CVE-2026-85573](https://cve.now/CVE-2026-85573.md): All in One Files Upload for WooCommerce 2.0.3 - 2.0.16 - Unauthenticated Stored XSS via SVG Upload (CVSS 8.8, All in One Files Upload)
- [CVE-2026-85415](https://cve.now/CVE-2026-85415.md): Audio Player Block 1.1.0 - 1.6.2 - Contributor+ Stored XSS via Audio Download URL (CVSS 6.8, Audio Player Block)
- [CVE-2026-85001](https://cve.now/CVE-2026-85001.md): EmbedPress 4.4.9 - 4.6.6 - Contributor+ Stored XSS via Elementor Widget showTitle Attribute (CVSS 6.8, EmbedPress)
- [CVE-2026-83560](https://cve.now/CVE-2026-83560.md): New User Approve 3.1.0 - 3.2.9 - Unauthenticated PII Disclosure via Zapier API Key Bypass (CVSS 5.3, New User Approve)
- [CVE-2026-82127](https://cve.now/CVE-2026-82127.md): Schema & Structured Data for WP & AMP \< 1.67 - Editor+ Stored XSS via Taxonomy Term Fields (CVSS 3.5, Schema & Structured Data for WP & AMP)
- [CVE-2026-80333](https://cve.now/CVE-2026-80333.md): Solace Extra \< 1.7.2 - Unauthenticated Non-Published Post Content Disclosure via Preview Routes (CVSS 5.3, Solace Extra)
- [CVE-2026-75873](https://cve.now/CVE-2026-75873.md): Zella Theme \< 2.6.3 - Unauthenticated Arbitrary File Upload (CVSS 9.8, Zella Theme)
- [CVE-2026-75824](https://cve.now/CVE-2026-75824.md): WP User Frontend 2.5.8 - 4.3.11 - Unauthenticated Account Creation with Registration Disabled (CVSS 5.3, User Frontend)
- [CVE-2026-75823](https://cve.now/CVE-2026-75823.md): WP User Frontend 3.5.29 - 4.3.11 - Unauthenticated Privilege Escalation via Registration Role Encryption (CVSS 7.4, User Frontend)
- [CVE-2026-100143](https://cve.now/CVE-2026-100143.md): FluentCart \< 1.6.5 - Unauthenticated Guest Customer Account Takeover via Checkout Email (CVSS 6.5, FluentCart A New Era of eCommerce)
- [CVE-2026-102913](https://cve.now/CVE-2026-102913.md): SourceCodester Car Driving School Management System Master.php save\_enrollment sql injection (CVSS 6.9, SourceCodester Car Driving School Management System)
- [CVE-2026-103111](https://cve.now/CVE-2026-103111.md): PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with ar (CVSS 7.6, PCRE2)
- [CVE-2026-102912](https://cve.now/CVE-2026-102912.md): SourceCodester Online Leave Management System page reports sql injection (CVSS 5.1, SourceCodester Online Leave Management System)
- [CVE-2026-102911](https://cve.now/CVE-2026-102911.md): zosmaai pi-llm-wiki wiki\_capture\_source MCP tool index.ts os command injection (CVSS 9.4, zosmaai pi-llm-wiki)
- [CVE-2026-86134](https://cve.now/CVE-2026-86134.md): Fireware OS Pre-Authentication NULL Pointer Dereference Allows Remote Denial of Service (CVSS 8.7, WatchGuard Fireware OS)
- [CVE-2026-102910](https://cve.now/CVE-2026-102910.md): SourceCodester Online Reviewer Management System exam-delete.php sql injection (CVSS 6.9, SourceCodester Online Reviewer Management System)
- [CVE-2026-103110](https://cve.now/CVE-2026-103110.md): Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation that allows a remote attacker to execute code (CVSS 9.8, Pexip Infinity)
- [CVE-2026-102909](https://cve.now/CVE-2026-102909.md): SourceCodester Online Reviewer Management System btn\_functions.php sql injection (CVSS 6.9, SourceCodester Online Reviewer Management System)
- [CVE-2026-103109](https://cve.now/CVE-2026-103109.md): Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation that allows a rem (CVSS 7.7, Pexip Infinity)
- [CVE-2026-103108](https://cve.now/CVE-2026-103108.md): Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation in the media implementation that allows a re (CVSS 7.5, Pexip Infinity)
- [CVE-2026-103106](https://cve.now/CVE-2026-103106.md): Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation within an internal Pexip Infinity service th (CVSS 7.8, Pexip Infinity)
- [CVE-2026-102908](https://cve.now/CVE-2026-102908.md): SourceCodester Online Reviewer Management System questions-view.php sql injection (CVSS 6.9, SourceCodester Online Reviewer Management System)
- [CVE-2026-103105](https://cve.now/CVE-2026-103105.md): Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper access control on a product-internal API which allows an attac (CVSS 8.8, Pexip Infinity)
- [CVE-2026-103104](https://cve.now/CVE-2026-103104.md): Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation which allows a re (CVSS 7.5, Pexip Infinity)
- [CVE-2026-102906](https://cve.now/CVE-2026-102906.md): 0xshariq github-mcp-server Git Remove MCP Tool github.ts child\_process.exec os command injection (CVSS 5.3, 0xshariq github-mcp-server)
- [CVE-2026-103102](https://cve.now/CVE-2026-103102.md): Pexip Infinity before 41.0 is affected by improper input validation in the signaling implementation which allows a remote attacker to trigge (CVSS 8.6, Pexip Infinity)
- [CVE-2026-96649](https://cve.now/CVE-2026-96649.md): Frontend Post Submission Manager Lite \<= 1.3.4 - Unauthenticated Stored DOM-Based Cross-Site Scripting via post\_content Parameter (data-label DOM Sink) (CVSS 7.2, wpshuffle Frontend Post Submission Manager Lite – Guest Pos…)
- [CVE-2026-103101](https://cve.now/CVE-2026-103101.md): Pexip Infinity 30.0 through 40.x before 41.0 is affected by improper input validation in the web server that allows a malicious attacker to (CVSS 8.6, Pexip Infinity)
- [CVE-2026-103100](https://cve.now/CVE-2026-103100.md): Pexip Infinity before 40.1 is affected by improper input validation in the signaling implementation that allows a malicious attacker to trig (CVSS 7.5, Pexip Infinity)
- [CVE-2026-102874](https://cve.now/CVE-2026-102874.md): HKUDS AnyTool Execute Endpoint main.py subprocess.run os command injection (CVSS 6.9, HKUDS AnyTool)
- [CVE-2026-103099](https://cve.now/CVE-2026-103099.md): Pexip Infinity before 41.1 is affected by improper input validation in the media implementation that allows a remote attacker to trigger a s (CVSS 7.5, Pexip Infinity)
- [CVE-2026-86556](https://cve.now/CVE-2026-86556.md): An information disclosure vulnerability in ZTE U30 Air product (CVSS 5.3, ZTE U30 Air)
- [CVE-2026-102847](https://cve.now/CVE-2026-102847.md): gedelumbung HospitalManagement Guest Book buku\_tamu.php kirim cross site scripting (CVSS 5.3, gedelumbung HospitalManagement)
- [CVE-2026-81310](https://cve.now/CVE-2026-81310.md): Image Scanner Driver for Linux contains a link following vulnerability. (CVSS 6.6, PFU Limited Image Scanner Driver for Linux)
- [CVE-2026-78229](https://cve.now/CVE-2026-78229.md): Image Scanner Driver for Linux contains an OS command injection vulnerability. (CVSS 6.7, PFU Limited Image Scanner Driver for Linux)
- [CVE-2026-102846](https://cve.now/CVE-2026-102846.md): gedelumbung HospitalManagement Configuration sistem.php simpan improper authorization (CVSS 5.1, gedelumbung HospitalManagement)
- [CVE-2026-102845](https://cve.now/CVE-2026-102845.md): gedelumbung HospitalManagement HTTP Response index.php error\_reporting information disclosure (CVSS 6.9, gedelumbung HospitalManagement)
- [CVE-2026-102844](https://cve.now/CVE-2026-102844.md): gedelumbung HospitalManagement laporan\_data\_pasien.php detail authorization (CVSS 5.1, gedelumbung HospitalManagement)
- [CVE-2026-102843](https://cve.now/CVE-2026-102843.md): gedelumbung HospitalManagement Endpoint data\_galeri.php hapus path traversal (CVSS 5.1, gedelumbung HospitalManagement)
- [CVE-2026-103088](https://cve.now/CVE-2026-103088.md): Handlebars.java before 4.5.5 allows directory traversal. (CVSS 7.5, jknack handlebars.java)
- [CVE-2026-103087](https://cve.now/CVE-2026-103087.md): Uncontrolled recursion in the Gosub browser engine (gosub-engine) through 0.1.0 and main before commit 46868b3 allows a remote attacker to c (CVSS 7.1, gosub-io gosub-engine)
- [CVE-2026-102842](https://cve.now/CVE-2026-102842.md): gedelumbung HospitalManagement KCFinder File Manager app\_user\_login\_model.php cekUserLogin unrestricted upload (CVSS 5.3, gedelumbung HospitalManagement)
- [CVE-2026-51936](https://cve.now/CVE-2026-51936.md): Zetetic SQLCipher before 4.15.0 allows SQL injection. (CVSS 2.1, Zetetic SQLCipher)
- [CVE-2026-103057](https://cve.now/CVE-2026-103057.md): AiSOC 5.1.0 before 12.0.0 Missing Authentication on Realtime Service Internal Endpoints (CVSS 5.3, beenuar AiSOC)
- [CVE-2026-103056](https://cve.now/CVE-2026-103056.md): AiSOC 7.2.0 before 12.0.0 Command Injection via CrowdStrike RTR (CVSS 9.4, beenuar AiSOC)
- [CVE-2026-103055](https://cve.now/CVE-2026-103055.md): AiSOC 7.5.0 before 12.0.0 Authentication Bypass via Hard-coded JWT Secret (CVSS 8.7, beenuar AiSOC)
- [CVE-2026-103054](https://cve.now/CVE-2026-103054.md): AiSOC 10.0.0 before 12.0.0 Unauthorized Tenant Access via MSSP (CVSS 7.1, beenuar AiSOC)
- [CVE-2026-103053](https://cve.now/CVE-2026-103053.md): AiSOC 9.0.0 before 12.0.0 Missing Authentication on Actions Service Response-Action API (CVSS 5.3, beenuar AiSOC)
- [CVE-2026-102805](https://cve.now/CVE-2026-102805.md): Nothings stb Image Encoding stb\_image\_write.h stbi\_write\_tga\_core integer overflow (CVSS 6.9, Nothings stb)
- [CVE-2026-102804](https://cve.now/CVE-2026-102804.md): Nothings stb stb\_hexwave.h hexwave\_init integer overflow (CVSS 6.9, Nothings stb)
- [CVE-2026-51568](https://cve.now/CVE-2026-51568.md): modelscope Agentscope v1.0.18-v1.0.0 is vulnerable to Path Traversal in write\_text\_file. (CVSS 8.1)
- [CVE-2026-51570](https://cve.now/CVE-2026-51570.md): modelscope Agentscope v1.0.0-v1.0.8 is vulnerable to Path Traversal in insert\_text\_file. (CVSS 8.1)
- [CVE-2026-51852](https://cve.now/CVE-2026-51852.md): agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file\_browser.py:FileBrowser.save\_file\_b64. (CVSS 7.5)
- [CVE-2026-51853](https://cve.now/CVE-2026-51853.md): agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file\_browser.py:FileBrowser.\_\_init\_\_. (CVSS 7.5)
- [CVE-2026-51856](https://cve.now/CVE-2026-51856.md): In agentscope 1.0.18, 1.0.19, and 1.0.19 when the RealtimeAgent session exposes execute\_python\_code as an available tool, a remote WebSocket (CVSS 9.8)
- [CVE-2026-51857](https://cve.now/CVE-2026-51857.md): In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, CodeExecutionToolkit can run model-produced Python code through SubprocessInterpreter w (CVSS 9.8)
- [CVE-2026-51858](https://cve.now/CVE-2026-51858.md): In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, TerminalToolkit.shell\_exec allows prompt-driven shell command execution without an appr (CVSS 9.8)
- [CVE-2026-51859](https://cve.now/CVE-2026-51859.md): bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to directory traversal in save\_download\_file (src/backend/bisheng/core/cache/utils.py:29 (CVSS 9.1)
- [CVE-2026-51860](https://cve.now/CVE-2026-51860.md): bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Directory Traversal in src/backend/bisheng/linsight/domain/task\_exec.py. (CVSS 7.5)
- [CVE-2026-51861](https://cve.now/CVE-2026-51861.md): bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Code Injection in src/backend/bisheng/api/v1/validate.py. (CVSS 9.8)
- [CVE-2026-51862](https://cve.now/CVE-2026-51862.md): DB-GPT 0.8.0 contains directory traversal in skill\_upload (packages/dbgpt-app/src/dbgpt\_app/openapi/api\_v1/agentic\_data\_api.py:40). (CVSS 9.1)
- [CVE-2026-51864](https://cve.now/CVE-2026-51864.md): DB-GPT v0.7.5 and v0.8.0 contains directory traversal in python\_file\_upload (packages/dbgpt-app/src/dbgpt\_app/openapi/api\_v1/python\_upload\_a (CVSS 9.1)
- [CVE-2026-51866](https://cve.now/CVE-2026-51866.md): In DB-GPT 0.7.5 and 0.8.0, a skill uploaded through the real /api/v1/skills/upload route can later be executed through the real /api/v1/chat (CVSS 9.8)
- [CVE-2026-51867](https://cve.now/CVE-2026-51867.md): agentgpt v.1.0.0 is vulnerable to Incorrect Access Control in next/src/server/api/routers/agentRouter.ts. (CVSS 9.8)
- [CVE-2026-51869](https://cve.now/CVE-2026-51869.md): DB-GPT v0.8.0 sandbox API silently falls back to LocalRuntime and executes code on host. (CVSS 9.8)
- [CVE-2026-51870](https://cve.now/CVE-2026-51870.md): DeepTutor v1.4.0 is vulnerable to command execution in /tutorbot/agent/tools/shell.py:ExecTool.execute. (CVSS 9.8)
- [CVE-2026-51871](https://cve.now/CVE-2026-51871.md): Devika v1.0 is vulnerable to Code Injection in the Runner.execute function in src/agents/runner/runner.py which allows an attacker to achiev (CVSS 9.8)
- [CVE-2026-51872](https://cve.now/CVE-2026-51872.md): Devika v1.0 is vulnerable to Code Injection via the Runner.run\_code function in src/agents/runner/runner.py. (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-09-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.