CVEs published October 1, 2026
395 CVEs were published on October 1, 2026: 52 critical, 169 high. 1 is now in CISA KEV.
- Published
- 395
- Critical
- 52
- High
- 169
- Medium
- 159
- Low
- 15
- Unrated
- 0
- Now in CISA KEV
- 1
- Fix available
- 174
Most affected products
- TryGhost Ghost · ghost
- 26
- Apache Software Foundation Apache HTTP Server
- 20
- n8n-io n8n
- 16
- JetBrains YouTrack
- 10
- Red Hat Satellite 6.16 for RHEL · Red Hat Satellite 6.17… +3
- 9
- HCL Software HCL BigFix Service Management
- 8
- Pandora FMS
- 8
- Apache Software Foundation Apache APISIX
- 7
- GetSimpleCMS-CE
- 7
- Johnson Controls EasyIO FS32
- 7
Critical 52
- CVE-2026-86345389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication resultRed Hat Directory Server · Red Hat Enterprise Linux
- CVE-2026-103764Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transportkvcache-ai Mooncake
- CVE-2026-18397SConnect: Native Host Unauthenticated Remote Code Execution VulnerabilityThales SConnect
- CVE-2026-71449: Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive Data.Johnson Controls EasyIO FS32
- CVE-2026-55395Hardcoded Passwords in Teledyne FLIR Robots running Aware2Teledyne FLIR Aware2
- CVE-2026-55393Local File Inclusion in Teledyne FLIR Robots running Aware2Teledyne FLIR Aware2
- CVE-2026-14984Cleartext HTTP for Control Traffic in Teledyne FLIR Robots running Aware2Teledyne FLIR Aware2
- CVE-2026-102628Cadmos LTI exposure of sensitive information via debug modeEummena Cadmos LTI
- CVE-2026-102667Joyland AI WebView command injectionJoyland.ai
- CVE-2026-56662GetSimple CMS: Missing CSRF protection in UpdateCE allows forging a privileged server-side update requestGetSimpleCMS-CE
- CVE-2026-56660GetSimple CMS: CSRF, SSRF, and Unrestricted Zip ExtractionGetSimpleCMS-CE
- CVE-2026-53953GetSimple CMS: Predictable Password Reset Password Allows Administrator Account TakeoverGetSimpleCMS-CE
- CVE-2026-104286An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FFortinet FortiMail
- CVE-2026-104056CVE-2026-104056Authlib
- CVE-2026-55083DHIS2: Unsafe Java Deserialization - Remote Code Execution (RCE)dhis2-core
- CVE-2026-103922Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy pathionic-team capacitor · @capacitor android +6
- CVE-2026-96659Foreman: excessive permissions for viewer role on previewRed Hat Satellite 6.16 for RHEL · Red Hat Satellite 6.17… +2
- CVE-2026-59797Apache HTTP Server: mod_ssl SSLRequire allows .htaccess ap_expr file-functionApache Software Foundation Apache HTTP Server
- CVE-2026-13043WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory AccessWatchGuard Endpoint Security
- CVE-2026-57941Apache HTTP Server: mod_http2 use-after-free / wild write via shared session->bbtmp re-entrancyApache Software Foundation Apache HTTP Server
- CVE-2026-56154Apache HTTP Server: mod_rewrite use-after-free via %{LA-U:HTTP:...}Apache Software Foundation Apache HTTP Server
- CVE-2026-94620Classroom 50 vulnerable to arbitrary file overwrite on the teacher's machine via symlink in a student repo (gh teacher download)foundation50 classroom50
- CVE-2026-12627Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerabilityFortra's Core Privileged Access Manager
- CVE-2026-79898Fortra BoKS Manager crlserver command injection vulnerabilityFortra BoKS Manager
- CVE-2026-62071WordPress WordPress File Upload plugin <= 5.1.10 - SQL Injection vulnerabilitynickboss WordPress File Upload
- CVE-2026-103752WordPress Authorizer plugin <= 3.15.3 - Privilege Escalation vulnerabilityPaul Ryan Authorizer
- CVE-2026-79901Predictable Active Directory service-account passwords in BoKS ManagerFortra BoKS Manager boks-server
- CVE-2026-103264Fleet before 4.87.0 Authentication Bypass via Device Identifiersfleetdm fleet
- CVE-2026-103244ground-station before 0.8.0 Authentication Bypass via setup.restoresgoudelis ground-station
- CVE-2026-103655MISP TOTP Code Replay Allows Duplicate Authentication Within Validity PeriodMISP
- CVE-2026-15989Super Forms <= 6.3.316 - Unauthenticated Privilege Escalation via 'role' ParameterWebRehab Super Forms – Drag & Drop Form Builder
- CVE-2026-75957Ultimate Multisite <= 2.15.0 - Unauthenticated Authentication Bypass via 'checkout_form' Parametersuperdav42 Ultimate Multisite – WordPress Multisite SaaS &…
- CVE-2025-41753Path traversal in dynamically created BACnet File ObjectsWAGO 0751-9x01 · WAGO 0750-811x-xxxx-xxxx +9
- CVE-2026-101148BackupSheep <= 1.8 - Unauthenticated Arbitrary File Deletion and Backup Exfiltration via Empty Integration KeyBackupSheep WordPress Backup Plugin
- CVE-2026-82824Path traversal may allow arbitrary files to be viewed, created, modified, or deletedHitachi Industrial Equipment Systems Hitachi Coding Softwar…
- CVE-2026-82825Missing proper authentication for critical APIs may allow sensitive information to be obtained or modified, or unauthorized operations to be performedHitachi Industrial Equipment Systems Hitachi Coding Softwar…
- CVE-2026-82827A hard-coded JWT signing secret key may allow administrative functions to be abused using fraudulently generated Bearer tokensHitachi Industrial Equipment Systems Hitachi Coding Softwar…
- CVE-2026-82829Hidden accounts or hard-coded credentials may permit unauthorized access without the legitimate authentication processHitachi Industrial Equipment Systems Hitachi Coding Softwar…
- CVE-2026-76142Genians, Inc. Genian NAC/ZTNA Improper Access Control on the Internal InterfaceGenians Genian NAC 5.0.75 LTS Release · Genians Genian N… +4
- CVE-2026-92966Appointment Booking Plugin <= 5.7.0 - Unauthenticated Arbitrary Shortcode Execution via First/Last Name FieldAppointment Booking Plugin – LatePoint | Calendar & Schedul…
- CVE-2026-14157Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands viaASUS Router
- CVE-2026-51875In Devika v1.0, the Feature Agent save_code_to_project function contains a path traversal vulnerability that allows attackers to write files
- CVE-2026-51876DeepTutor 1.4.0 contains an authorization bypass vulnerability in the book confirmation flow.
- CVE-2026-51879deeptutor 1.4.0 contains an authorization bypass through a user-controlled object identifier in TutorBotManager.write_bot_file.
- CVE-2026-51880deeptutor 1.4.0 contains a path traversal issue in EditFileTool.execute.
- CVE-2026-51881deeptutor 1.4.0 contains code injection in ExecTool.execute.
- CVE-2026-51882The OpenAI-compatible file upload endpoint `/v1/files` in Langchain-Chatchat 0.3.0 is vulnerable to path traversal.
- CVE-2026-51883The knowledge base creation and document upload interfaces in Langchain-Chatchat 0.3.0;0.3.1 is vulnerable to path traversal.
- CVE-2026-51884The /knowledge_base/upload_temp_docs temporary document upload endpoint in Langchain Chatchat 0.3.1 is vulnerable to path traversal.
- CVE-2026-51886langflow-ai langflow v1.9.3 is affected by: Code Injection.langflow
- CVE-2026-51893infiniflow ragflow 0.24.0 is vulnerable to Incorrect Access Control via trace_mindmap.
- CVE-2026-51897RAGFlow 0.24.0 contains improper access control in get_dataset (api/apps/evaluation_app).
High 169
- CVE-2026-103766ClipBucket v5 through 5.5.3-#197 SQL Injection via ads_manager.php delete ParameterMacWarrior clipbucket-v5
- CVE-2026-103765Mooncake through 0.3.13.post1 Missing Authentication in HTTP Metadata Serverkvcache-ai Mooncake
- CVE-2026-103761Mooncake transfer engine through 0.3.13.post1 Memory Exhaustion via Unbounded Notify Queuekvcache-ai Mooncake
- CVE-2026-103760Mooncake transfer engine through 0.3.13.post1 Denial of Service via P2P Handshake Daemon Response Writekvcache-ai Mooncake
- CVE-2025-71427Office-PowerPoint-MCP-Server through 2.0.7 Path Traversal via save_presentation and manage_imageGongRzhe Office-PowerPoint-MCP-Server
- CVE-2026-86344389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-pdu connection requeueRed Hat Directory Server · Red Hat Enterprise Linux
- CVE-2026-64893- Cleartext Transmission of Sensitive Information vulnerability in Johnson Controls EasyIO NEO allows - Man In the Middle Attack.Johnson Controls EasyIO NEO
- CVE-2026-104356PictShare < 3.7.1 Predictable Delete Code via rand()HaschekSolutions pictshare
- CVE-2026-34494- On-Chip Debug Interface vulnerability in Johnson Controls Neo Series MVP2 allows Collect Data from Common Resource Locations.Johnson Controls Neo Series MVP2
- CVE-2026-34493- On-Chip Debug Interface vulnerability in Johnson Controls EasyIO FS32 allows Collect Data from Common Resource Locations.Johnson Controls EasyIO FS32
- CVE-2026-104051PictShare < 3.7.1 Sensitive Information Disclosure via info APIHaschekSolutions pictshare
- CVE-2026-71452- OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows OS Command Injection.Johnson Controls EasyIO FS32
- CVE-2026-104020Uncontrolled recursion in the Ion reader in Amazon Ion PythonAmazon ion-python
- CVE-2026-96780figlet is vulnerable to denial of service via unbounded loop when whitespaceBreak is used with a small widthpatorjk figlet.js · figlet
- CVE-2026-102514Out-of-bounds write in PeaZip PEA extractor allows code execution via a crafted .pea archivePeaZip
- CVE-2026-55396Unencrypted UDP Control Traffic in Teledyne FLIR Robots running Aware2Teledyne FLIR Aware2
- CVE-2026-14983Missing Authentication in Teledyne FLIR Robots running Aware2Teledyne FLIR Aware2
- CVE-2026-53964Document Merge Service vulnerable to RCE via SSTI (xlsx tempaltes)adfinis document-merge-service · document-merge-service
- CVE-2026-103484pgvector buffer overflow in IVFFlat index buildpgvector
- CVE-2026-54049Sakai Conversations has a Stored XSS Issuesakaiproject sakai · org.sakaiproject.conversations:saka… +2
- CVE-2026-71542GetSimple CMS: Stored Cross-Site Scripting (XSS) via the "title" parameter in admin/components.phpGetSimpleCMS-CE
- CVE-2026-71426GetSimple CMS: Authenticated Stored Local File Inclusion (LFI) via page "template" fieldGetSimpleCMS-CE
- CVE-2026-70650GetSimple CMS: Authenticated Stored XSS in backup viewer (backup-edit.php) via output decoding of page meta fields and contentGetSimpleCMS-CE
- CVE-2026-56661GetSimple CMS: Server-Side Request Forgery in the UpdateCE update endpointGetSimpleCMS-CE
- CVE-2026-84682TDDPv2 setProductVer Command Injection in Archer AX90TP-Link Systems Archer AX90
- CVE-2026-55232Vvveb: Server-side request forgery in Vvveb via IPv6 bypass of validateUrl() in editor oEmbed proxygivanz Vvveb
- CVE-2026-55230Vvveb: Stored XSS in Vvveb via sanitizeHTML() filter bypass using a quoted greater-than charactergivanz Vvveb
- CVE-2026-55231Vvveb: Path traversal in Vvveb via sanitizeFileName() bypass enables arbitrary file read and delete through backup toolsgivanz Vvveb
- CVE-2026-15911Confluent Kafka Python Improper TLS Certificate Validationconfluent-kafka
- CVE-2026-104059Lektor 3.3.14 CSRF via Admin API Endpointslektor
- CVE-2026-8618Pre-Authentication Stack-based Buffer Overflow Remote Code Execution in TDDPv2 Subtype 0x91 on Deco M9 PlusTP-Link Systems Deco M9 Plus
- CVE-2026-104057Podgrab Unauthenticated DoS via Concurrent Map Access in WebSocket Handlerakhilrex podgrab
- CVE-2026-102369Unauthenticated Remote Code Execution via MacTool Command Injection in TP-Link Tapo C120 & C200TP-Link Systems Tapo C200 · TP-Link Systems Tapo C120
- CVE-2026-78578Unauthenticated do Method Onboarding Connect Allows Wi‑Fi Reconfiguration Denial of Service Vulnerability in TP-Link Tapo C120 & C200TP-Link Systems Tapo C200 · TP-Link Systems Tapo C120
- CVE-2026-9032Unauthenticated Onboarding Connect NULL Pointer Dereference Denial of Service Vulnerability in TP-Link Tapo C120 & C200TP-Link Systems Tapo C200 · TP-Link Systems Tapo C120
- CVE-2026-68496jackson-dataformats-binary: Smile parser does not enforce StreamReadConstraints.maxNameLength, enabling memory-exhaustion denial of serviceFasterXML jackson-dataformats-binary
- CVE-2026-68495jackson-dataformats-binary: CBOR parser does not enforce StreamReadConstraints.maxNameLength, enabling memory-exhaustion denial of serviceFasterXML jackson-dataformats-binary
- CVE-2026-104018VxWorks 7 improper privilege managementWind River Systems VxWorks
- CVE-2026-97662Argument injection in the diff scan operation in AWS security-agent-mcp-server allows arbitrary host file creation, overwrite, and truncation outside the intended workspaceAWS security-agent-mcp-server
- CVE-2026-102294Authenticated OS Command Injection in TL-WR841N IPv6 WAN ConfigurationTP-Link System TL-WR841N
- CVE-2026-73976djehuty: Unauthenticated SPARQL injection in the search API (`order`, `operator`, `key`)4TUResearchData djehuty
- CVE-2026-73975djehuty: Authenticated SPARQL injection in session editing allows writing arbitrary RDF triples4TUResearchData djehuty
- CVE-2026-103921GraphQL Tools: TLS Certificate Validation Disabled in Legacy GraphQL WebSocket Executorardatan graphql-tools · @graphql-tools executor-legacy-ws +1
- GHSA-9CQF-HHRQ-7V45SiYuan: getAttributeViewSearchTarget returns database row content to anonymous readers with no publish-access check, reopening the class…github.com/siyuan-note/siyuan/kernel
- CVE-2026-96658Foreman: foreman: arbitrary code execution via safemode sandbox bypassRed Hat Satellite 6.16 for RHEL · Red Hat Satellite 6.17… +2
- CVE-2026-12544Foreman: ssti and insecure deserialization in foreman-rake configurationRed Hat Satellite 6.16 for RHEL · Red Hat Satellite 6.17… +3
- CVE-2026-12541Foreman: command injection in foreman-rake database tasksRed Hat Satellite 6.16 for RHEL · Red Hat Satellite 6.17… +3
- CVE-2026-12540Foreman: command injection in foreman-rake errors:fetch_log via request_id parameterRed Hat Satellite 6.16 for RHEL · Red Hat Satellite 6.17… +3
- CVE-2026-12423Foreman: unauthenticated information disclosure via provisioning token validation flawRed Hat Satellite 6.16 for RHEL · Red Hat Satellite 6.17… +3
- CVE-2026-12405Rubygem-foreman_remote_execution: command injection in job invocations via effective_user parameterRed Hat Satellite 6.16 for RHEL · Red Hat Satellite 6.17… +3
- CVE-2026-101889Prime Mover < 2.2.1 Path Traversal via wprime-config.jsonCodexonics Prime Mover
- CVE-2026-63686Apache HTTP Server: mod_xml2enc crash on charset conversion failureApache Software Foundation Apache HTTP Server
- CVE-2026-101888Prime Mover < 2.2.1 Zip Slip Path Traversal File WriteCodexonics Prime Mover
- CVE-2026-93546Apache HTTP Server: mod_dav_fs namespace overflowApache Software Foundation Apache HTTP Server
- CVE-2026-73637Apache HTTP Server: mod_auth_digest DoS attackApache Software Foundation Apache HTTP Server
- CVE-2026-73636Apache HTTP Server: mod_auth_digest one-time-nonce replay attackApache Software Foundation Apache HTTP Server
- CVE-2026-63718Apache HTTP Server: mod_proxy_uwsgi Transfer-Encoding response smugglingApache Software Foundation Apache HTTP Server
- CVE-2026-14316Heap buffer overflow in boks_sshd revoked-key error handlingFortra Core Privileged Access Manager
- CVE-2026-63292Apache HTTP Server: mod_vhost_alias stack overflowApache Software Foundation Apache HTTP Server
- CVE-2026-63045Apache HTTP Server: mod_proxy_ftp PASV address handlingApache Software Foundation Apache HTTP Server
- CVE-2026-59685Apache HTTP Server: Out-of-Bounds Write in ap_directory_walk() Canonical-Name Rewrite on CASE_BLIND_FILESYSTEMApache Software Foundation Apache HTTP Server
- CVE-2026-56449Apache HTTP Server: mod_proxy_html: crash in dump_contentApache Software Foundation Apache HTTP Server
- CVE-2026-56153Apache HTTP Server: mod_charset_lite: Heap overflow in finish_partial_charApache Software Foundation Apache HTTP Server
- CVE-2026-48005Apache HTTP Server: mod_auth_digest reauthentication attackApache Software Foundation Apache HTTP Server
- CVE-2026-47360Apache HTTP Server: mod_session: Session cookie not removed during internal redirectApache Software Foundation Apache HTTP Server
- CVE-2026-101322In Eclipse BaSyx AAS Web UI versions v2-241220 through releases before v2-260924, the shared request handler attached the selected infrastruEclipse Foundation Eclipse BaSyx AAS Web UI
- CVE-2026-46729Apache HTTP Server: mod_heartmonitor denial of serviceApache Software Foundation Apache HTTP Server
- CVE-2026-79896Fortra BoKS Manager boks_portmux TLS ClientHello out-of-bounds read vulnerabilityFortra BoKS Manager
- CVE-2026-67105HCL BigFix Service Management is affected by multiple security vulnerabilities.HCL Software HCL BigFix Service Management
- CVE-2026-56589HCL BigFix Service Management is affected by multiple security vulnerabilities.HCL Software HCL BigFix Service Management
- CVE-2026-79899Fortra BoKS Manager bccgethostcert insecure temporary file vulnerabilityFortra BoKS Manager
- CVE-2026-103068WordPress ByteCoreStack – MCP Connector for AI Tools plugin <= 1.2.2 - Privilege Escalation vulnerabilityByteCore Stack ByteCoreStack – MCP Connector for AI T…
- CVE-2026-102378WordPress Parallax Section block plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerabilitybPlugins Parallax Section block
- CVE-2026-100517WordPress Photo Reviews for WooCommerce plugin <= 1.2.30 - Insecure Direct Object References (IDOR) vulnerabilityVillaTheme Photo Reviews for WooCommerce
- CVE-2026-100514WordPress REST API Log plugin <= 1.7.2 - Insecure Direct Object References (IDOR) vulnerabilityPete Nelson REST API Log
- CVE-2026-97297WordPress Gratisfaction plugin <= 4.6.3 - Broken Access Control vulnerabilityApps Mav Gratisfaction
- CVE-2026-97284WordPress Icegram plugin <= 3.1.31 - PHP Object Injection vulnerabilityIcegram
- CVE-2026-97277WordPress Social Boost plugin <= 3.6.2 - Broken Access Control vulnerabilityApps Mav Social Boost
- CVE-2026-97273WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.13 - Cross Site Scripting (XSS) vulnerabilityPremmerce Wishlist for WooCommerce
- CVE-2026-97268WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.13 - Cross Site Scripting (XSS) vulnerabilityPremmerce Wishlist for WooCommerce
- CVE-2026-97260WordPress MaxGalleria plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerabilitymaxfoundry MaxGalleria
- CVE-2026-95588WordPress AcyMailing SMTP Newsletter plugin <= 11.0.5 - Arbitrary File Deletion vulnerabilityAcyMailing Newsletter Team AcyMailing SMTP Newsletter
- CVE-2026-94390WordPress Hide Shipping Method For WooCommerce plugin <= 1.5.4 - PHP Object Injection vulnerabilityDotstore Hide Shipping Method For WooCommerce
- CVE-2026-62073WordPress WP Full Stripe Free plugin <= 8.5.6 - Broken Access Control vulnerabilityThemeisle WP Full Stripe Free
- CVE-2024-58388Sharp Multifunction Printers Local File Inclusion via installed_emanual_down.htmlSharp Multiple Multifunction Printers · Toshiba Tec Multipl…
- CVE-2026-66246HCL iControl is affected by multiple security vulnerabilitiesHCL Software iControl
- CVE-2026-102504Imager versions before 1.037 for Perl exit the process reading a raw image with an out-of-range raw_datachannels value in i_readraw_wiolImager
- CVE-2026-62059WordPress Ultimate Member plugin <= 2.13.1 - SQL Injection vulnerabilityUltimate Member
- CVE-2026-62060WordPress Captivate Sync plugin <= 3.3.2 - SQL Injection vulnerabilitycaptivateaudio Captivate Sync
- CVE-2026-102379WordPress BuildKit – Product Builder for WooCommerce – Custom PC Builder plugin <= 1.0.28 - SQL Injection vulnerabilityVillaTheme BuildKit – Product Builder for WooCommerce – Cus…
- CVE-2026-103338WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerabilityUnlimited Elements For Elementor
- CVE-2026-103067WordPress Memberful - Membership Plugin plugin <= 1.81.0 - Cross Site Request Forgery (CSRF) vulnerabilityMemberful - Membership Plugin
- CVE-2026-94250Apache APISIX: Batch response aggregation can exhaust worker memoryApache Software Foundation Apache APISIX
- CVE-2026-88789Apache Camel Quarkus: Camel Quarkus: Forced Xalan TransformerFactory drops upstream external-DTD/stylesheet hardeningApache Software Foundation Apache Camel Quarkus
- CVE-2026-103758Obot 0.21.1 through 0.24.1 Authorization Bypass via /mcp-connect-composite/ Routeobot-platform obot
- CVE-2026-103757Budibase before 3.41.0 SSRF via uploadUrl in AI Table Generationbudibase
- CVE-2026-103292Ghost 0.5.3 before 6.50.0 Cross-Site Scripting via ghost_headTryGhost Ghost · ghost
- CVE-2026-103289Ghost 5.9.0 before 6.44.1 Authorization Bypass via CommentsTryGhost Ghost · ghost
- CVE-2026-103288Ghost 5.9.0 before 6.44.1 Authorization Bypass via Comment LikeTryGhost Ghost · ghost
- CVE-2026-103286Ghost 2.21.0 before 6.56.0 Privilege Escalation via NotificationsTryGhost Ghost · ghost
- CVE-2026-103283Ghost 6.20.0 before 6.57.1 Authentication Bypass via Session HandlingTryGhost Ghost · ghost
- CVE-2026-103279Ghost 3.10.0 before 6.34.0 Session Invalidation BypassTryGhost Ghost · ghost
- CVE-2026-103278Ghost 5.8.0 before 6.34.0 Staff Account Takeover via Admin iframeTryGhost Ghost · ghost
- CVE-2026-103277Ghost 2.5.0 before 6.34.0 Untrusted Script Execution via oEmbedTryGhost Ghost · ghost
- CVE-2026-103272Ghost 2.10.0 before 6.63.0 Staff Enumeration via Content APITryGhost Ghost · ghost
- CVE-2026-103271Ghost 4.0.0 before 6.63.0 Restricted Content BypassTryGhost Ghost · ghost
- CVE-2026-103268Ghost 1.0.0 before 6.62.0 Suspension Bypass via Password ResetTryGhost Ghost · ghost
- CVE-2026-103266Ghost 5.2.0 before 6.62.0 Unauthenticated Stripe Checkout Account ModificationTryGhost Ghost · ghost
- CVE-2026-103263Tornado before 6.5.9 StaticFileHandler Path Traversal via Symlinktornadoweb tornado · tornado
- CVE-2026-103262Tornado before 6.5.9 Denial of Service via CurlAsyncHTTPClienttornadoweb tornado · tornado
- CVE-2026-103259n8n before 2.39.6 and 2.40.x before 2.40.1 Session Token Leak via Dynamic Credentialsn8n-io n8n
- CVE-2026-103257n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal via n8n Noden8n-io n8n
- CVE-2026-103256n8n before 2.39.6 and 2.40.x before 2.40.1 Credentials Leak via preAuthentication Hookn8n-io n8n
- CVE-2026-103255n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal and Query Injection via Supabasen8n-io n8n
- CVE-2026-103254n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal via Resume URL Generationn8n-io n8n
- CVE-2026-103253n8n before 1.123.80, 2.39.6, and 2.40.1 SQL Injection via Oracle Database Drop Tablen8n-io n8n
- CVE-2026-103252n8n before 1.123.80, 2.39.6, and 2.40.1 Information Disclosure via Credential Test Endpointn8n-io n8n
- CVE-2026-103251n8n before 1.123.80, 2.39.6, and 2.40.1 Package Install Validation Bypass via PubSubn8n-io n8n
- CVE-2026-103250n8n before 1.123.80, 2.39.6, and 2.40.1 NoSQL Injection via MongoDB Chat Memoryn8n-io n8n
- CVE-2026-103248n8n before 1.123.80, 2.39.6, and 2.40.1 PostgREST Filter Injection via Supabasen8n-io n8n
- CVE-2026-103246n8n before 2.39.6 and 2.40.x before 2.40.1 Credential Disclosure via Node-Tool Introspectionn8n-io n8n
- CVE-2026-103082WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Server Side Request Forgery (SSRF) vulnerabilityLA-Studio Element Kit for Elementor
- CVE-2026-75786SQL Injection in Grafana Integration Endpoint (query.php)Pandora FMS
- CVE-2026-64950Stored Cross-Site Scripting via Directory Name in File Manager Create DirectoryPandora FMS
- CVE-2026-64949Unrestricted File Upload Leading to Remote Code Execution in Admin Tools File ManagerPandora FMS
- CVE-2026-64948Missing Authorization in get_module_detail AJAX Endpoint Allows Cross-Group Module Data DisclosurePandora FMS
- CVE-2026-64947CSRF Bypass Leading to Remote Code Execution via Unrestricted File Upload in Plugin File ManagerPandora FMS
- CVE-2026-92144Forminator Forms <= 1.57.2 - Unauthenticated Stored Cross-Site Scripting via 'postdata-1[post-custom]' Parameterwpmudev Forminator Forms – Contact Form, Payment Form & Cus…
- CVE-2026-64946CSRF Bypass Leading to Stored Cross-Site Scripting via Unrestricted SVG Upload in File ManagerPandora FMS
- CVE-2026-96577Oc-mirror__release-4.21: embedded local cache registry listens on all interfaces without authentication, with delete enabledRed Hat OpenShift Container Platform · Assisted Installer f…
- CVE-2026-103493In JetBrains YouTrack before 2026.2.19422 stored XSS via Mermaid and LaTeX content was possibleJetBrains YouTrack
- CVE-2026-103490In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group linksJetBrains YouTrack
- CVE-2026-103488In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed authenticated users to add themselves to project teams and access reJetBrains YouTrack
- CVE-2026-103431Collectl: collectl: colmux does not sanitize ansi/vt100 terminal escape sequences in data received from remote collectl instancescollectl
- CVE-2026-103659MISP: Object Distribution ACL Bypass via Event Flattening Exposes Organisation-Only AttributesMISP
- CVE-2026-97661Business Essentials for Contact Form 7 <= 1.2.1 - Unauthenticated Stored Cross-Site Scripting via 'gateway' Form Fieldscottpaterson Business Essentials for Contact Form
- CVE-2026-96813Form Maker by 10Web <= 1.15.47 - Unauthenticated Stored Cross-Site Scripting via Mark on Map Longitude/Latitude FieldsForm Maker by 10Web – Mobile-Friendly Drag & Drop Contact F…
- CVE-2026-95687WPC Shop as a Customer for WooCommerce <= 2.0.0 - Authenticated (Subscriber+) Privilege Escalation via Missing Role Check on Target User to wpcsa_login AJAX Endpointwpclever WPC Shop as a Customer for WooCommerce
- CVE-2026-96573Appointment Hour Booking <= 1.5.97 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Booking Form Single-Line Field via Schedule Calendar List Renderercodepeople Appointment Hour Booking – Booking Calendar
- CVE-2026-85235Forminator Forms <= 1.57.2 - Unauthenticated Stored Cross-Site Scripting via Rich-Text Textarea Fieldwpmudev Forminator Forms – Contact Form, Payment Form & Cus…
- CVE-2026-92244PDF Invoices & Packing Slips for WooCommerce <= 5.16.1 - Unauthenticated Stored Cross-Site Scripting via Billing First Name / Last Name / Company Fieldswpovernight PDF Invoices & Packing Slips for WooCommerce
- CVE-2026-15983Super Forms <= 6.3.316 - Authenticated (Subscriber+) Arbitrary File/Directory Deletion via 'subdir' / 'path' ParameterWebRehab Super Forms – Drag & Drop Form Builder
- CVE-2026-14995Autoptimize <= 3.1.15.1 - Unauthenticated Stored Cross-Site Scripting via REQUEST_URI Pathoptimizingmatters Autoptimize
- CVE-2026-19807ByteCoreStack <= 1.2.3 - Authenticated (Subscriber+) Privilege Escalation via wp_update_user_meta MCP ToolByteCoreStack – MCP Connector for AI Tools
- CVE-2026-93882LearnPress <= 4.4.8 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'item_id' Parameterthimpress LearnPress – WordPress LMS Plugin for Create and…
- CVE-2026-103651MISP HOTP Token Replay via Stale Session-Cached Counter Allows Second-Factor Authentication BypassMISP
- CVE-2026-96255Payments for Hubtel < 1.0.2 - Unauthenticated Payment Gateway Credentials Disclosure via Debug LogPayments for Hubtel
- CVE-2026-92412Five Star Restaurant Reviews < 2.3.14 - Reflected XSSFive Star Restaurant Reviews
- CVE-2026-89296Pro Like Button < 2.0 - Unauthenticated SQLi via 'postid' ParameterPro Like Button
- CVE-2026-81809Paytm Payment Gateway < 2.8.9 - Unauthenticated SQLi via Payment CallbackPaytm Payment Gateway
- CVE-2026-81739Paytm Payment Gateway < 2.8.9 - Unauthenticated Stored XSS via Payment CallbackPaytm Payment Gateway
- CVE-2026-19253Cache Enabler < 1.8.17 - Unauthenticated Arbitrary File and Directory Deletion via cache_enabler_clear_page_cache_by_urlCache Enabler
- CVE-2026-101147Featured Image from URL (FIFU) Free & Premium - Administrator Account Creation via CSRFFeatured Image from URL
- CVE-2026-80275Comelit 1456B gateway allows low priviledge user to overwrite installer password via unauthorized endpointComelit Group S.p.A. 1456B Multi-User Gateway
- CVE-2026-80276Comelit 1456B gateway exposes remote configuration password via unauthenticated management interfaceComelit Group S.p.A. 1456B Multi-User Gateway
- CVE-2026-85679Extendify <= 3.1.6 - Unauthenticated Stored Cross-Site Scripting via 'styles.blocks' Block Type KeyExtendify
- CVE-2026-82826Authentication information or sensitive data may be intercepted in transitHitachi Industrial Equipment Systems Hitachi Coding Softwar…
- CVE-2026-82828Improper authorization may allow a general user to perform operations equivalent to those available with administrator privilegesHitachi Industrial Equipment Systems Hitachi Coding Softwar…
- CVE-2026-76146Genians, Inc Genian SSL PNS OS Command InjectionGenians Genian SSL PNS
- CVE-2026-76145Genians, Inc Genian SSL PNS Improper Privilege ManagementGenians Genian SSL PNS
- CVE-2026-76143Genians, Inc Genian SSL PNS Multi Factor Authentication BypassGenians Genian SSL PNS
- CVE-2026-78210In affected versions of Octopus Server, users with certain scoped permission sets could execute arbitrary scripts in an environment without Octopus Deploy Octopus Server
- CVE-2026-96561AI Engine <= 3.8.0 - Unauthenticated Stored Cross-Site Scripting via 'model_' Parameter → PHP Error-Log Injection → Advisor Indirect Prompt Injectiontigroumeow AI Engine – The Chatbot, AI Framework & MCP for…
- CVE-2026-92245Simply Schedule Appointments <= 1.6.12.32 - Missing Authorization to Unauthenticated Sensitive Information Exposure and Arbitrary Appointment Deletion via 'recursive' Parameter on the appointment_types REST Endpoint via Public Noncecroixhaug Simply Schedule Appointments
- CVE-2026-13313An Active Debug Code vulnerability in certain ASUS router models allows a remote authenticated user, via a crafted HTTP request, to bypass sASUS Router
- CVE-2026-93495Improper initialization in an ASUS certain motherboard allows an physically proximate user to read or write arbitrary memory by inserting a ASUS Motherboard · ASUS Motherboard(ROG MAXIMUS XI HERO (WI…
- CVE-2026-51873Devika v1.0 is vulnerable to Directory Traversal in the Coder.save_code_to_project function, which allows attackers to write files outside t
- CVE-2026-51874In Devika v1.0, the Patcher Agent save_code_to_project function contains a path traversal vulnerability that allows attackers to write files
- CVE-2026-51888langflow-ai langflow v1.8.4 is affected by: Directory Traversal.
Medium, low and unrated 174
- CVE-2026-27873- Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FG allows - Pasword Spraying.Johnson Controls EasyIO FG
- CVE-2026-64892- Exposure of Sensitive Information vulnerability in Johnson Controls Easy IO Neo allows Collect Data from Common Resource Locations.Johnson Controls Easy IO Neo
- CVE-2026-71448: Insecure Default Initialization of Resource vulnerability in Johnson Controls EasyIO FS32 allows : Authentication Abuse.Johnson Controls EasyIO FS32
- CVE-2026-71454Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in CWE-79 - Cross-site Scripting CAPEC-63CWE-79 - Cross-site Scripting CAPEC-63
- CVE-2026-71453- External Control of File Name or Path vulnerability in Johnson Controls EasyIO FS32 allows - traversal attack.Johnson Controls EasyIO FS32
- CVE-2026-104002Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)AWS powertools-lambda-python
- CVE-2026-71451- OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows - Command Injection.Johnson Controls EasyIO FS32
- CVE-2026-27874: Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FS32 allows : Exploitation of Default or Hard-coded Credentials.Johnson Controls EasyIO FS32
- CVE-2026-102370Physical UART Access Leading to an Unauthenticated Root Shell in TP-Link Kasa EC70 and EC71TP-Link Systems Kasa EC70 · TP-Link Systems Kasa EC71
- CVE-2026-104183stream-json: Prototype pollution: Assembler writes this.current[this.key] on plain objectsuhop stream-json · stream-json
- CVE-2026-104182stream-json: JSONC parser and verifier re-scan the whole accumulated comment on every input chunkuhop stream-json · stream-json
- CVE-2026-104181Filament: Multi-factor authentication (app) management actions do not require password reauthenticationfilamentphp filament · filament/filament
- CVE-2026-55394Unencrypted 802.11 Network in Teledyne FLIR Robots running Aware2Teledyne FLIR Aware2
- CVE-2026-55252OpenRun: Redirect URL validation bypass using //host paths leads to Open Redirectopenrundev openrun · github.com/openrundev/openrun
- CVE-2026-55251NetBox Device Type Library: Arbitrary Code Execution on CI Runner Through Malicious requirements.txt, .pre-commit-hooks-config.yaml, and .gitmodules Filesnetbox-community devicetype-library
- CVE-2026-100251Wormhole.app SSRFWormhole App Wormhole
- CVE-2026-93832A component of one of the Motorola system applications was exported without permission, allowing for the revocation of runtime permissions fMotorola Setup App
- CVE-2026-102671Joyland AI WebView accepts invalid SSL certificatesJoyland.ai
- CVE-2026-102670Joyland AI enables HTTPJoyland.ai
- CVE-2026-102669Joyland AI hostname checking disabledJoyland.ai
- CVE-2026-102668Joyland AI accepts TLS certificates without validationJoyland.ai
- CVE-2026-82358RT-Labs AB C-Open CANopen SDO Server Write Protection BypassRT-Labs AB C-Open
- CVE-2026-102666Joyland AI hard-coded credentials for push notificationsJoyland.ai
- CVE-2026-82357RT-Labs AB C-Open CANopen NULL pointer dereferenceRT-Labs AB C-Open
- CVE-2026-27872EasyIO FGJohnson Controls Easy IO FG
- CVE-2026-104058Podgrab Missing Authentication on WebSocket /ws Endpointakhilrex podgrab
- CVE-2026-78577Unauthenticated Onboarding Scan Information Disclosure in TP-Link Tapo C120 & C200TP-Link Systems Tapo C200 · TP-Link Systems Tapo C120
- CVE-2026-103923KaTeX: Existing prototype pollution can bypass trust restrictionsKaTeX
- CVE-2026-103884Keycloak-services: keycloak-services: path traversal in x.509 crl distribution point allows arbitrary local file readRed Hat Build of Keycloak · Red Hat Single Sign-On
- CVE-2026-56098Rubygem-katello: improper authorization logic allows resource enumerationRed Hat Satellite 6.16 for RHEL · Red Hat Satellite 6.17… +3
- CVE-2026-56097Rubygem-katello: sql injection in registry proxy via labelsRed Hat Satellite 6.16 for RHEL · Red Hat Satellite 6.17… +3
- CVE-2026-12542Foreman: command injection in foreman-tailRed Hat Satellite 6.16 for RHEL · Red Hat Satellite 6.17… +3
- CVE-2026-12545Rubygem-hammer_cli: command injection via insecure editor invocationRed Hat Satellite 6.16 for RHEL · Red Hat Satellite 6.17… +3
- CVE-2026-21833HCL AION is susceptible to a Missing "Content-Security-Policy" header Vulnerability (CVE-2026-21833)HCL Software AION
- CVE-2026-77387geopy: Regular Expression Denial of Service (ReDoS) in geopy.Pointgeopy
- CVE-2026-101890Prime Mover < 2.2.1 Stored XSS via Package MetadataCodexonics Prime Mover
- CVE-2026-79768Apache HTTP Server: mod_userdir information disclosureApache Software Foundation Apache HTTP Server
- CVE-2025-31980HCL BigFix Service Management is affected by multiple security vulnerabilities.HCL Software HCL BigFix Service Management
- CVE-2026-67172HCL BigFix Service Management is affected by multiple security vulnerabilities.HCL Software HCL BigFix Service Management
- CVE-2026-67171HCL BigFix Service Management is affected by multiple security vulnerabilities.HCL Software HCL BigFix Service Management
- CVE-2026-58415Apache HTTP Server: mod_dav_fs property database read accessApache Software Foundation Apache HTTP Server
- CVE-2026-9864Fortra BoKS Server Agent adjoin machine-account password generation vulnerabilityFortra Core Privileged Access Manager
- CVE-2026-103690itsourcecode Leave Management System controller.php sql injectionitsourcecode Leave Management System
- CVE-2026-42356Apache HTTP Server: limited RCE for some internal redirects to non-CGI files in CGI directoriesApache Software Foundation Apache HTTP Server
- CVE-2026-42528Apache HTTP Server: mod_dav shared lock overflowApache Software Foundation Apache HTTP Server
- CVE-2026-103505AWS EFS CSI Driver Mount Option Injection via mounttargetipmapaws-efs-csi-driver
- CVE-2026-17053SMBus callback-removal syscalls accept an unvalidated user pointer, letting user threads manipulate kernel callback statezephyrproject zephyr
- CVE-2026-67106HCL BigFix Service Management is affected by multiple security vulnerabilities.HCL Software HCL BigFix Service Management
- CVE-2026-56599HCL BigFix Service Management is affected by multiple security vulnerabilities.HCL Software HCL BigFix Service Management
- CVE-2026-67104HCL BigFix Service Management is affected by multiple security vulnerabilities.HCL Software HCL BigFix Service Management
- CVE-2026-97280WordPress Review Schema plugin 3.1.0 - Broken Access Control vulnerabilityMamunur Rashid Review Schema
- CVE-2026-103004next.js cache leak on warm `use cache` handlers accessing root paramvercel next.js · next
- CVE-2026-103347WordPress hCaptcha for WP plugin <= 5.3.0 - Bypass Vulnerability vulnerabilityhCaptcha for WP
- CVE-2026-97281WordPress WP Project Manager plugin <= 4.0.7 - Broken Access Control vulnerabilityweDevs WP Project Manager
- CVE-2026-97269WordPress WPFunnels plugin <= 3.13.1 - Insecure Direct Object References (IDOR) vulnerabilityWPFunnels
- CVE-2026-97258WordPress Aruba Migration Tool plugin <= 1.0.4 - Broken Access Control vulnerabilityAruba.it Aruba Migration Tool
- CVE-2026-97251WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.3 - Insecure Direct Object References (IDOR) vulnerabilitymagepeopleteam Bus Ticket Booking with Seat Reservation
- CVE-2026-103687rhukster dom-sanitizer SVG Sanitization DOMSanitizer.php url incomplete blacklistrhukster dom-sanitizer
- CVE-2026-79900Heap overflow in KSL checksum initializationFortra BoKS Manager boks-server
- CVE-2026-103686rhukster dom-sanitizer URL Validation DOMSanitizer.php isDangerousUrl cross site scriptingrhukster dom-sanitizer
- CVE-2026-66253HCL iControl is affected by a Session Timeout vulnerabilityHCL Software iControl
- CVE-2026-66249HCL iControl is affected by a Missing Secure Attribute vulnerabilityHCL Software iControl
- CVE-2026-66248HCL iControl is affected by an Improper Error Handling vulnerabilityHCL Software iControl
- CVE-2026-66247iControl is affected by an insecure Cross-Origin Resource Sharing (CORS) policy vulnerability, which could allow a malicious website to execHCL Software iControl
- CVE-2026-102505Imager versions before 1.037 for Perl overflow a heap buffer fetching float samples from a paletted image in i_gsampf_fpImager
- CVE-2026-62058WordPress CF7 Apps plugin <= 3.7.2 - Sensitive Data Exposure vulnerabilityWPExperts CF7 Apps
- CVE-2026-62061WordPress ProfileGrid plugin <= 6.0.0.2 - Insecure Direct Object References (IDOR) vulnerabilityMetagauss ProfileGrid
- CVE-2026-62063WordPress WpTravelly plugin <= 2.3.1 - Broken Access Control vulnerabilityMagepeople WpTravelly
- CVE-2026-102394WordPress Essential Addons for Elementor plugin <= 6.8.4 - Cross Site Scripting (XSS) vulnerabilityWPDeveloper Essential Addons for Elementor
- CVE-2026-103339WordPress Metform plugin <= 4.3.0 - Cross Site Scripting (XSS) vulnerabilityWpmet Metform
- CVE-2026-103063WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerabilityWpmet ElementsKit Elementor addons Lite
- CVE-2026-103345WordPress Pie Register plugin <= 3.8.4.13 - Sensitive Data Exposure vulnerabilityShamim Rajani Pie Register
- CVE-2026-103064WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerabilityWpmet ElementsKit Elementor addons Lite
- CVE-2026-102390WordPress AFFI – Affiliate Marketing for WooCommerce plugin <= 1.0.9 - Broken Access Control vulnerabilityVillaTheme AFFI – Affiliate Marketing for WooCommerce
- CVE-2026-102382WordPress Majestic Support plugin <= 1.2.0 - Insecure Direct Object References (IDOR) vulnerabilityAhmad Majestic Support
- CVE-2026-102381WordPress Majestic Support plugin <= 1.2.0 - Broken Access Control vulnerabilityAhmad Majestic Support
- CVE-2026-103343WordPress FluentForm plugin <= 6.2.14 - Cross Site Scripting (XSS) vulnerabilityWP ManageNinja FluentForm
- CVE-2026-103341WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Broken Access Control vulnerabilityUnlimited Elements For Elementor
- CVE-2026-103340WordPress Site Reviews plugin <= 8.3.2 - Broken Access Control vulnerabilityGemini Labs Site Reviews
- CVE-2026-103754Ansible-runner: ansible-runner: path traversal and symlink escape in unstream_dir() allows file write outside the target directoryRed Hat Ansible Automation Platform
- CVE-2026-103336WordPress WP Ultimate CSV Importer plugin <= 9.1 - Sensitive Data Exposure vulnerabilitySmackcoders WP Ultimate CSV Importer
- CVE-2026-103680Tnef: heap buffer overflow in find_free_number() via numbered-backup suffix generationtnef
- CVE-2026-103679Tnef: use-after-free and double-free in get_body_files() via multi-value body extractiontnef
- CVE-2026-103678Tnef: heap out-of-bounds read in get_rtf_data_from_buf() via uncompressed rtf mapi valuetnef
- CVE-2026-103858MISP Incomplete Thread Authorization Allows Unauthorized Read and Post Access to DiscussionsMISP
- CVE-2026-94276Apache APISIX: Openid-connect introspection validation issueApache Software Foundation Apache APISIX
- CVE-2026-94269Apache APISIX: Servlet-style normalization creates a route/upstream authorization mismatchApache Software Foundation Apache APISIX
- CVE-2026-94220Apache APISIX: session fixation issue in feishu-auth and dingtalk-auth pluginApache Software Foundation Apache APISIX
- CVE-2026-94212Apache APISIX: unauthenticated impersonation issue in saml-authApache Software Foundation Apache APISIX
- CVE-2026-82806Apache APISIX: cross-request permission pollution via static permission list mutationApache Software Foundation Apache APISIX
- CVE-2026-78242Apache APISIX: data-mask may fail to redact request headers in logger outputApache Software Foundation Apache APISIX
- CVE-2026-103353WordPress FluentForm plugin <= 6.2.14 - Broken Access Control vulnerabilityWP ManageNinja FluentForm
- CVE-2026-103291Ghost 3.20.2 before 6.51.0 SSRF via image-size fetchTryGhost Ghost · ghost
- CVE-2026-103290Ghost 6.14.0 before 6.27.0 Path Traversal via ImageSizeTryGhost Ghost · ghost
- CVE-2026-103287Ghost 1.18.0 before 6.27.0 Server-Side Request Forgery via WebhookTryGhost Ghost · ghost
- CVE-2026-103285Ghost 5.19.0 before 6.57.1 Cross-Site Request ForgeryTryGhost Ghost · ghost
- CVE-2026-103284Ghost 5.125.1 before 6.57.1 Information Disclosure via FeedbackTryGhost Ghost · ghost
- CVE-2026-103282Ghost 0.5.0 before 6.23.0 Multiple Account Creation via Invite TokenTryGhost Ghost · ghost
- CVE-2026-103281Ghost 3.23.0 before 6.23.0 API Key Exposure via Admin APITryGhost Ghost · ghost
- CVE-2026-103280Ghost 0.8.0 before 6.23.0 Information Disclosure via Setup EndpointTryGhost Ghost · ghost
- CVE-2026-103276Ghost before 6.20.0 File Read via URL Encoding BypassTryGhost Ghost · ghost
- CVE-2026-103275Ghost 5.42.2 before 6.58.0 Password Hash DisclosureTryGhost Ghost · ghost
- CVE-2026-103274Ghost 5.3.0 before 6.58.0 Unauthenticated Comment ReadTryGhost Ghost · ghost
- CVE-2026-103273Ghost 4.3.0 before 6.58.0 Incorrect Authorization via Staff TokenTryGhost Ghost · ghost
- CVE-2026-103269Ghost 5.3.0 before 6.62.0 Missing Authorization via Post ExcerptsTryGhost Ghost · ghost
- CVE-2026-103267Ghost 0.5.0 before 6.62.0 Arbitrary Email Registration via Staff InviteTryGhost Ghost · ghost
- CVE-2026-103265Fleet before 4.89.0 Information Disclosure via MDM Command Resultsfleetdm fleet
- CVE-2026-103261Tornado before 6.5.9 Denial of Service via Query Stringtornadoweb tornado · tornado
- CVE-2026-103260n8n before 2.39.6 and 2.40.x before 2.40.1 Approval Bypass via Send and Wait Noden8n-io n8n
- CVE-2026-103258n8n before 2.39.6 and 2.40.x before 2.40.1 Filter Bypass via Parameter Interpolationn8n-io n8n
- CVE-2026-103249n8n before 1.123.80, 2.39.6, and 2.40.1 Stored DOM XSS via Resource Locatorn8n-io n8n
- CVE-2026-103247n8n before 1.123.80 Credential Tampering via Duplicate Node IDsn8n-io n8n
- CVE-2026-103245n8n before 1.123.80, 2.39.6, and 2.40.1 Missing Webhook Signature Verificationn8n-io n8n
- CVE-2026-7176Multiple vulnerabilities in Entradium by CrocanticketsCrocantickets Entradium
- CVE-2026-7175Multiple vulnerabilities in Entradium by CrocanticketsCrocantickets Entradium
- CVE-2026-7174Multiple vulnerabilities in Entradium by CrocanticketsCrocantickets Entradium
- CVE-2026-7173Multiple vulnerabilities in Entradium by CrocanticketsCrocantickets Entradium
- CVE-2026-96256Gutenberg Essential Blocks <= 6.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'marker' Attributewpdevteam Gutenberg Essential Blocks – Page Builder for Gut…
- CVE-2026-34190CSRF in Alert Command DeletionPandora FMS
- CVE-2026-34189CSRF in Event Response DeletionPandora FMS
- CVE-2026-83589Oauth-proxy: open redirect via /\ and /\t bypass in post-login redirectRed Hat OpenShift Container Platform
- CVE-2026-103497In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integrationJetBrains YouTrack
- CVE-2026-103496In JetBrains YouTrack before 2026.2.19422 iDOR in inbox threads allowed reading other users' notificationsJetBrains YouTrack
- CVE-2026-103495In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation catalogsJetBrains YouTrack
- CVE-2026-103494In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group membership changesJetBrains YouTrack
- CVE-2026-103492In JetBrains YouTrack before 2026.2.19422 doS attack was possible via crafted PSD attachmentsJetBrains YouTrack
- CVE-2026-103491In JetBrains YouTrack before 2026.2.19422 iDOR in the issue activities API allowed reading restricted issuesJetBrains YouTrack
- CVE-2026-103489In JetBrains YouTrack before 2026.2.19422 hTML injection in VCS command failure notifications was possibleJetBrains YouTrack
- CVE-2026-103664MISP Reflected Cross-Site Scripting via Unsanitized Analyst Data Seed ParameterMISP
- CVE-2026-103662MISP Reflected XSS in Taxonomy Tag Confirmation FormsMISP
- CVE-2026-89424Duplicate Post <= 1.5.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'noti_token' Parameterinisev Duplicate Post
- CVE-2026-89427Ad Inserter <= 2.8.18 - Reflected Cross-Site Scripting via 's' Search Parameterspacetime Ad Inserter – Ad Manager & AdSense Ads
- CVE-2026-100184Calculated Fields Form <= 5.5.1.3 - Reflected DOM-Based Cross-Site Scripting via 'x' URL Query Parameter via Text Area Predefined Valuecodepeople Calculated Fields Form – AI Form Builder for Wor…
- CVE-2026-96268Awesome Support <= 6.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'gdpr-data' Parameter via wpas_gdpr_user_opt_out AJAX Actionawesomesupport Awesome Support – WordPress HelpDesk & Suppo…
- CVE-2026-101925bbp style pack <= 6.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Author Display Namerobin-w bbp style pack
- CVE-2026-90992Redux Framework <= 4.5.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'user-mediaurl' Media Fielddavidanderson Redux Framework
- CVE-2026-100179Calculated Fields Form <= 5.5.1.3 - Reflected DOM-Based Cross-Site Scripting via 'x' URL Parameter via setChoices()codepeople Calculated Fields Form – AI Form Builder for Wor…
- CVE-2026-78249A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 Fujifilm Business Innovation Apeos 3060 / 2560 / 1860 J… +67
- CVE-2026-19902Ad Inserter <= 2.8.18 - Reflected Cross-Site Scripting via {search-query} Dynamic Tag (Referer Header)spacetime Ad Inserter – Ad Manager & AdSense Ads
- CVE-2026-89047Social Media Share Buttons & Social Sharing Icons <= 3.0.1 - Reflected DOM-Based Cross-Site Scripting via URLinisev Social Media Share Buttons & Social Sharing Icons
- CVE-2026-103544datadrivenconstruction OpenConstructionERP Al Provider Configuration ai_client.py wrong sessiondatadrivenconstruction OpenConstructionERP
- CVE-2026-96200Payments for Hubtel < 1.0.2 - Unauthenticated Payment Confirmation Forgery via Delayed Payment CallbackPayments for Hubtel
- CVE-2026-96173Payments for Hubtel < 1.0.2 - Unauthenticated Order Key Disclosure via IDORPayments for Hubtel
- CVE-2026-90974WP Fusion Lite 3.37.14 - 3.47.14 - Unauthenticated CRM Integration Settings UpdateWP Fusion Lite
- CVE-2026-90972WP Fusion Lite < 3.48.0 - Subscriber+ User Email Disclosure and Cross-User CRM Data DeletionWP Fusion Lite
- CVE-2026-87973If-So Dynamic Content 1.9.9 - 1.10.1 - Editor+ Stored XSS via Conversion NameIf-So Dynamic Content
- CVE-2026-87970If-So Dynamic Content 1.8 - 1.10.1 - Reflected XSS via render_ifso_shortcodesIf-So Dynamic Content
- CVE-2026-86610Download Manager < 3.3.71 - Author+ Stored XSS via Package IconDownload Manager
- CVE-2026-103543itsourcecode Leave Management System controller.php sql injectionitsourcecode Leave Management System
- CVE-2026-103542formtools.org Form Tools AJAX Endpoint actions.php smart_fill server-side request forgeryformtools.org Form Tools
- CVE-2026-88999Redux Framework <= 4.5.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletion via 'attachment_id' Parameterdavidanderson Redux Framework
- CVE-2026-103541formtools.org Form Tools Ajax actions.php uploadFile unrestricted uploadformtools.org Form Tools
- CVE-2026-67075HCL Digital Experience is affected by improper input sanitationHCLSoftware Digital Experience
- CVE-2026-103540formtools.org Form Tools Client Settings Clients.class.php updateClientSettingsTab special elements in template engineformtools.org Form Tools
- CVE-2026-103539ZongXR SuperMarket Instant Buy InstantBuyController.java startBuy missing authenticationZongXR SuperMarket
- CVE-2026-76147Genians, Inc Genian NAC/ZTNA Remote Code ExecutionGenians Genian NAC 4.0.175 Release · Genians Genian NAC… +7
- CVE-2026-76144Genians, Inc Genian SSL PNS Unrestricted File UploadGenians Genian SSL PNS
- CVE-2026-103538ZongXR SuperMarket Order Deletion Endpoint OrderController.java OrderController.deleteOrder missing authenticationZongXR SuperMarket
- CVE-2026-12241Advanced Woo Labels – Product Labels & Badges for WooCommerce <= 2.51 - Improper Authorization to Authenticated (Subscriber+) Stored Cross-Site Scriptingmihail-barinov Advanced Woo Labels – Product Labels & Badge…
- CVE-2026-92548WP Popular Posts <= 7.4.2 - Unauthenticated Information Disclosure in 'post_type' and 'context' Parametershcabrera WP Popular Posts
- CVE-2026-103536ZongXR Supermarket save Endpoint OrderController.java OrderController.addOrder missing authenticationZongXR Supermarket
- CVE-2026-103641Gegl: gegl04: gegl: out-of-bounds read in the radiance hdr uncompressed scanline decoderRed Hat Enterprise Linux
- CVE-2026-103534David-Crty databasement Snapshot Model snapshots SnapshotPolicy.view access controlDavid-Crty databasement
- CVE-2026-91109Simply Schedule Appointments <= 1.6.12.31 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Disclosure via 'complete_group' Parametercroixhaug Simply Schedule Appointments
- CVE-2026-103533David-Crty databasement database-servers API Endpoint RestoreRequest.php 511 path traversalDavid-Crty databasement
- CVE-2026-101887BlueALSA bluealsad LC3plus Decoder Division-by-Zero DoSarkq bluez-alsa
- CVE-2026-92537Newsletter <= 9.3.9 - Unauthenticated Insufficiently Protected Credentials via '/tnp/l/' Click-Tracking REST Endpoint (Raw Subscriber Token Cookie Disclosure)satollo Newsletter – Send awesome emails from WordPress
- CVE-2026-103532immich-app Immich Shared Link Preview access.ts checkSharedLinkAccess improper authorizationimmich-app Immich
- CVE-2026-103531OpenSC card-setcos.c setcos_construct_fci_44 stack-based overflowOpenSC
- CVE-2026-51878deeptutor 1.4.0 contains an authorization bypass through a user-controlled object identifier in TurnRuntimeManager.regenerate_last_turn.
- CVE-2026-51892infiniflow ragflow 0.24.0 is vulnerable to Incorrect Access Control via /v1/document/get/<doc_id>.
- CVE-2026-51894infiniflow ragflow 0.24.0 is vulnerable to Incorrect Access Control via run_mindmap.
- CVE-2026-51895Ragflow 0.24.0 and prior contains improper access control in update_metadata_setting (api/apps/kb_app.py).
- CVE-2026-51896infiniflow ragflow 0.25.3 contains improper access control in resume (api/apps/connector_app.py).