CVEs published October 11, 2026
233 CVEs were published on October 11, 2026: 17 critical, 72 high.
- Published
- 233
- Critical
- 17
- High
- 72
- Medium
- 127
- Low
- 17
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 52
Most affected products
- JeecgBoot
- 24
- zephyrproject zephyr
- 11
- 1Panel-dev CordysCRM
- 7
- erzhongxmu JEEWMS
- 5
- zhayujie CowAgent
- 5
- Envira Gallery
- 4
- ph7software ph7builder
- 4
- Robo Gallery
- 4
- UnicomAI Wanwu
- 4
- InstantSoft icms2
- 3
Critical 17
- CVE-2026-108860BotSharp through 5.2.0 Authentication Bypass via Hard-Coded JWT Signing KeySciSharp BotSharp
- CVE-2026-108753Agnaistic agnai through 1.0.555 Hard-Coded Credentials in self-host Docker Composeagnaistic agnai
- CVE-2026-108576TOZED X300 IPPingDiagnostics process_ping os command injectionTOZED X300
- CVE-2026-108540OpenSpug File Transfer transfer os command injectionOpenSpug Spug
- CVE-2026-86717Insurify <= 1.0 - Unauthenticated Arbitrary Option Deletion via removeimg_popupInsurify
- CVE-2026-86706Quick quotes <= 1.0.0 - Unauthenticated Integer-Value Option UpdateQuick quotes
- CVE-2026-85121Insurify <= 1.0 - Unauthenticated Arbitrary Option Creation and Overwrite via saveemailtemplatedesignInsurify
- CVE-2026-85118AI Content Generator Marketing <= 1.0.0 - Unauthenticated Privilege Escalation via Arbitrary Option Update and DeletionAI Content Generator Marketing
- CVE-2026-84737Freeton WP <= 1.0.0 - Unauthenticated Account Takeover via 'secod' ParameterFreeton WP
- CVE-2026-84734Mindstien Quick Login <= 1.0 - Unauthenticated Administrator Account Takeover via 'mql_pass' ParameterMindstien Quick Login
- CVE-2026-84254click5 CRM add-on to Contact Form 7 <= 1.0.4 - Unauthenticated Arbitrary Options Updateclick5 CRM add-on to Contact Form
- CVE-2026-84253click5 CRM add-on to Gravity Forms <= 1.0.3 - Unauthenticated Arbitrary Options Updateclick5 CRM add-on to Gravity Forms
- CVE-2026-84252click5 CRM add-on to WPForms <= 1.0.3 - Unauthenticated Arbitrary Options Updateclick5 CRM add-on to WPForms
- CVE-2026-84251click5 CRM add-on to Ninja Forms <= 1.0.1 - Unauthenticated Arbitrary Options Updateclick5 CRM add-on to Ninja Forms
- CVE-2026-81649Fundiin <= 3.4.0 - Unauthenticated Payment Gateway Settings Update and Credential DisclosureFundiin cho WooCommerce
- CVE-2026-104028Anton Extensions <= 1.2.2 - Unauthenticated Arbitrary File Upload to RCEAnton Extensions
- CVE-2026-108707Wukong_HRM through commit 186115e Authentication Bypass via ParamAspectWuKongOpenSource Wukong_HRM
High 72
- CVE-2026-108976GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has an incomplete list GNU Emacs
- CVE-2026-108963databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., mariadb-dump) with a database name that can bDavid-Crty databasement
- CVE-2026-19935Use-after-free of an L2CAP CoC channel object in the Zephyr Bluetooth host: RX work item is not cancelled on channel teardownzephyrproject zephyr
- CVE-2026-19736Out-of-bounds write in the NXP MCUX TRNG entropy driver for non-word-multiple request lengthszephyrproject zephyr
- CVE-2026-19577Out-of-bounds read in IPv6 route forwarding when the nexthop neighbor has no link-layer addresszephyrproject zephyr
- CVE-2026-19669Unbounded variable-length array in fuel gauge syscall verifiers allows kernel stack overflow from user modezephyrproject zephyr
- CVE-2026-108913omarchy-theme-set in Omarchy 4 before 4.0.1 allows code execution via a third-party theme because the files placed into ~/.local/state/omarcOmarchy
- CVE-2026-108905pH7Builder before 18.6.0 Hard-Coded API Key Bypass via Host Headerph7software ph7builder
- CVE-2026-108904pH7Builder before 18.5.0 Sensitive Data Exposure via Member API UserControllerph7software ph7builder
- CVE-2026-108902pH7Builder before 18.5.0 Path Traversal Arbitrary File Deletion via picture_linkph7software ph7builder
- CVE-2026-108883JeecgBoot through 3.9.5 Missing Authorization via /sys/thirdApp/editThirdAppConfigJeecgBoot
- CVE-2026-108865AmoyLab Unla through 0.10.0 OAuth2 Authentication Bypass via /authorizeAmoyLab Unla
- CVE-2026-108863Katanemo Plano through 0.4.37 Missing Authentication on Envoy Admin InterfaceKatanemo Plano
- CVE-2026-108859mcp-go through 1.2.1 Denial of Service via Unbounded POST Body Bufferingmark3labs mcp-go
- CVE-2026-108853UnicomAI Wanwu before 0.6.3 IDOR via DELETE /v1/appspace/appUnicomAI Wanwu
- CVE-2026-108699hyper-mcp through 0.8.3 Improper Signature Verification of OCI WebAssembly Pluginshyper-mcp-rs hyper-mcp
- CVE-2026-108698hyper-mcp through 0.8.3 OCI Plugin Signature Verification TOCTOU Race Conditionhyper-mcp-rs hyper-mcp
- CVE-2026-108760LlamaFarm through 0.0.34 Unauthenticated API Exposed on All Interfacesllama-farm llamafarm
- CVE-2026-108759mistral.rs 0.9.0 through 0.9.4 Sandbox Escape via Symlink Following in mistralrs-code-execEricLBuehler mistral.rs
- CVE-2026-108758Easy!Appointments through 1.6.0 Authorization Bypass via booking/register Endpointalextselegidis easyappointments
- CVE-2026-108757Nexting pinclaw through 0.3.0 Missing Authentication via POST /pinclaw/sendNexting pinclaw
- CVE-2026-108746Vearch 3.5.2 through 3.5.9 Incorrect Authorization via Role.HasPermissionForResourcesvearch
- CVE-2026-108744pbi-cli 3.10.1 through 3.12.0 OS Command Injection via Desktop SyncMinaSaad1 pbi-cli
- CVE-2026-108740GoatCounter through 2.7.0 Privilege Escalation via /user/pref Mass Assignmentarp242 GoatCounter
- CVE-2026-108739OpenAgents Workspace through launcher-v1.0.17 Unauthenticated Credential Exposure via /v1/workspacesopenagents-org OpenAgents
- CVE-2026-108737Traccar through 6.16.0 Weak Password Recovery via TokenManager Token Purpose ConfusionTraccar
- CVE-2026-108729Corteza through 2024.9.10 Unauthenticated Attachment Access via Compose Attachment Endpointscortezaproject corteza
- CVE-2026-108728Flyte 2.0.1 through 2.0.51 Cleartext Secret Exposure via Admission Webhookflyteorg flyte
- CVE-2026-108718Rill 0.77.0 through 0.90.5 OAuth Missing Authorization via Dynamic Client RegistrationRill Data rill
- CVE-2026-108714MCP Kotlin SDK through 0.15.0 Memory Exhaustion via Application.mcpWebSocketmodelcontextprotocol kotlin-sdk
- CVE-2026-108710NornicDB through 1.4.1 Missing Authorization via Vector Search Endpointsorneryd NornicDB
- CVE-2026-96227Piotnet Forms <= 1.0.30 - Unauthenticated Stored XSS via File UploadPiotnet Forms
- CVE-2026-91829Subscribe to Comments < 2.3.3 - Reflected XSS via 'ref' ParameterSubscribe to Comments
- CVE-2026-89302Post Voting System <= 1.0 - Unauthenticated SQLi via 'id' ParameterPost Voting System
- CVE-2026-89299WP Verify API <= 1.0.0 - Unauthenticated SQLi via 'verify' ParameterWP Verify API
- CVE-2026-89297Loja Automática <= 1.0.0 - Unauthenticated SQLi via 'id' ParameterLoja Automática
- CVE-2026-89287ASPL Product Quotation <= 1.1.0 - Unauthenticated SQLi via 'quote_id' ParameterASPL Product Quotation
- CVE-2026-89285Datalist it <= 0.0.3 - Unauthenticated SQLi via dli_fronted_actionDatalist it
- CVE-2026-89283WP Posts Password Batch Manager <= 1.1 - Unauthenticated Bulk Post Password RewriteWP Posts Password Batch Manager
- CVE-2026-89234WP-Partner <= 1.2.1 - Unauthenticated SQLi via 'id' ParameterWP-Partner
- CVE-2026-89232RecordBrowser <= 1.1.7 - Unauthenticated SQLi via 'recordid' ParameterRecordbrowser
- CVE-2026-89214WpCues Basic Quiz <= 1.6.5 - Unauthenticated SQLi via Quiz Result SubmissionWpCues Basic Quiz
- CVE-2026-89213Llavero.io <= 0.1.4 - Unauthenticated Blind SQLi via 'cill_login' ParameterLlavero.io
- CVE-2026-89195Site Setup Wizard <= 1.5.8 - Unauthenticated SQLi via ssw_check_admin_email_existsSite Setup Wizard
- CVE-2026-88930Social Web Suite <= 4.1.12 - Unauthenticated Blind SQLi via Unset Shared SecretSocial Web Suite
- CVE-2026-88905KeyWord Collector <= 1.4 - Unauthenticated Stored XSS and Settings Update via WPKeyWordSettingsKeyWord Collector
- CVE-2026-88903Topcontent <= 1.2.1 - Unauthenticated Stored XSS via Content WebhookTopcontent
- CVE-2026-88827Disable Users <= 1.0.5 - Disabled Account Authentication Bypass via XML-RPC and Application PasswordsDisable Users
- CVE-2026-88826SmugMug Embed <= 3.13 - Unauthenticated Stored XSS via saveSelectedAlbumsSmugMug Embed
- CVE-2026-87764BuddyPress Instant Chat <= 1.6 - Unauthenticated Stored XSS via Chat MessageBuddyPress Instant Chat
- CVE-2026-87762Adwised Web Push Notification <= 2.5.7 - Unauthenticated Stored XSS via Secret Key Type JugglingAdwised Web Push Notification
- CVE-2026-87761Adwised Web Push Notification <= 2.5.7 - Subscriber+ Stored XSS via Pop-up SettingsAdwised Web Push Notification
- CVE-2026-87760Web Vitals Tracking <= 5.4.2 - Unauthenticated Stored XSS via Tracking Beacon Metric NameWeb Vitals Tracking
- CVE-2026-86798HootBoard <= 3.1.4 - Unauthenticated Stored XSS via Board Configuration REST EndpointHootBoard
- CVE-2026-85126Crowdfundly <= 2.2.2 - Crowdfundly Manager+ Privilege EscalationCrowdfundly
- CVE-2026-84261click5 CRM add-on to Contact Form 7 <= 1.0.4 - Unauthenticated Stored XSS via post_notificationsclick5 CRM add-on to Contact Form
- CVE-2026-84260click5 CRM add-on to Gravity Forms <= 1.0.3 - Unauthenticated Stored XSS via post_notificationsclick5 CRM add-on to Gravity Forms
- CVE-2026-84259click5 CRM add-on to WPForms <= 1.0.3 - Unauthenticated Stored XSS via post_notificationsclick5 CRM add-on to WPForms
- CVE-2026-84258click5 CRM add-on to Ninja Forms <= 1.0.1 - Unauthenticated Stored XSS via post_notificationsclick5 CRM add-on to Ninja Forms
- CVE-2026-81420Tcard WP <= 1.8.0 - Unauthenticated SQLi via group_id ParameterTcard WP
- CVE-2026-14854WooCommerce Bookings < 3.11.0 - Unauthenticated Denial of ServiceWooCommerce Bookings
- CVE-2026-106029WeddingCity Lite <= 1.0.4 - Unauthenticated Arbitrary Post and Attachment DeletionWeddingCity Lite
- CVE-2026-104680Envira Gallery < 1.16.2 - Multisite Subsite Admin+ Arbitrary Plugin Installation via Onboarding WizardEnvira Gallery
- CVE-2026-103695Mobile Builder <= 1.4.2 - Unauthenticated SQLi via 'vendor_id' ParameterMobile builder
- CVE-2026-103694Mobile builder <= 1.4.2 - Subscriber+ Privilege Escalation to AdminMobile builder
- CVE-2026-103305Prenotazioni <= 1.7.5 - Unauthenticated Stored XSS via Settings UpdatePrenotazioni
- CVE-2026-108695MultiVendorX through 5.0.19 Incorrect Authorization via Settings REST EndpointMultiVendorX
- CVE-2026-108694ConvertX through 0.19.0 Arbitrary File Read via Pandoc ConverterC4illin ConvertX
- CVE-2026-108693ImageMagick through 7.1.2-33 and 6.9.13-58 Uncontrolled Search Path via Ghostscript DelegateImageMagick
- CVE-2026-108708Wukong_HRM through commit 186115e Missing Authorization via EmployeeAspect and EmployeeUtilWuKongOpenSource Wukong_HRM
- CVE-2026-1087001Panel-dev CordysCRM before 1.9.2 Missing Authorization via /field/source/business-title1Panel-dev CordysCRM
- CVE-2026-1086921Panel-dev CordysCRM 1.9.0 before 1.9.2 Missing Authorization via /field/source Endpoints1Panel-dev CordysCRM
Medium, low and unrated 144
- CVE-2026-108778erzhongxmu JEEWMS Inbound Quality Check Pda WmInQmIController.java WmInQmIController.list sql injectionerzhongxmu JEEWMS
- CVE-2026-108777erzhongxmu JEEWMS WvGiController.java WvGiController.list sql injectionerzhongxmu JEEWMS
- CVE-2026-108775erzhongxmu JEEWMS Search Endpoint WvNoticeController.java WvNoticeController.list sql injectionerzhongxmu JEEWMS
- CVE-2026-108774erzhongxmu JEEWMS MdBinController.java getbinallagv sql injectionerzhongxmu JEEWMS
- CVE-2026-108773erzhongxmu JEEWMS WmOmNoticeHController.java docheck sql injectionerzhongxmu JEEWMS
- CVE-2026-108772bleenco abstruse Cache Endpoint download_cache.go filepath.Join path traversalbleenco abstruse
- CVE-2026-108770Appwrite Browser Screenshot Service Get.php PublicHostname server-side request forgeryAppwrite
- CVE-2026-108769zhayujie CowAgent Markdown Rendering Markdown.tsx denial of servicezhayujie CowAgent
- CVE-2026-108978Heap-based buffer overflow vulnerability in Samsung Opensource rlottie allows Buffer Overflow via Environment Variables.Samsung Opensource rlottie
- CVE-2026-108768zhayujie CowAgent Streaming Tool-Call Argument json.loads allocation of resourceszhayujie CowAgent
- CVE-2026-108925Cohesity - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)Cohesity NetBackup Administration Console web interface
- CVE-2026-59508Interuse i-Bos CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Interuse i-Bos
- CVE-2026-19740Bluetooth LE Controller: retained RX node leak and reachable assertion in the PHY Update procedurezephyrproject zephyr
- CVE-2026-19739Bluetooth LE controller leaks a retained RX node when an unexpected LL Control PDU arrives during a Connection Updatezephyrproject zephyr
- CVE-2026-19738Retained RX node leak and reachable assertion in Bluetooth Controller CIS Create procedureszephyrproject zephyr
- CVE-2026-19737NULL pointer dereference in the ESP32 I2S driver when triggering an unsupported directionzephyrproject zephyr
- CVE-2026-18418Out-of-bounds read when the zbus proxy agent IPC backend logs a rejected peer frame's channel namezephyrproject zephyr
- CVE-2026-19735Predictable TCP initial sequence numbers when the RFC 6528 secret key generation fails silently in the Zephyr TCP stackzephyrproject zephyr
- CVE-2026-19576Stack out-of-bounds write in the Goodix GT911 touch controller driver from an unvalidated device-reported touch point countzephyrproject zephyr
- CVE-2026-107761Channel tokens and organization API key exposed in API responsesGitroomHQ postiz-app
- CVE-2026-108903pH7Builder before 19.3.0 CAPTCHA Bypass via Client-Chosen Form IDph7software ph7builder
- CVE-2026-108684erzhongxmu Jeewms Autocomplete Data JeecgFormDemoController.java getTreeData sql injectionerzhongxmu Jeewms
- CVE-2026-108891JeecgBoot through 3.9.5 Missing Authorization via /sys/user/getUserDetailByUserIdJeecgBoot
- CVE-2026-108888JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartRole/exportXlsJeecgBoot
- CVE-2026-108887JeecgBoot through 3.9.5 Missing Authorization via /sys/comment/exportXlsJeecgBoot
- CVE-2026-108886JeecgBoot through 3.9.5 Missing Authorization via /sys/user/queryChildrenByUsernameJeecgBoot
- CVE-2026-108885JeecgBoot through 3.9.5 Missing Authorization via /sys/message/sysMessage/deleteJeecgBoot
- CVE-2026-108884JeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate Delete EndpointJeecgBoot
- CVE-2026-108882JeecgBoot through 3.9.5 Missing Authorization via /sys/position/removePositionUserJeecgBoot
- CVE-2026-108881JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/getTenantPackInfoJeecgBoot
- CVE-2026-108880JeecgBoot through 3.9.5 Missing Authorization via /sys/dict/editDictByLowAppIdJeecgBoot
- CVE-2026-108879JeecgBoot through 3.9.5 IDOR via /airag/api/getChatVariable Username ParameterJeecgBoot
- CVE-2026-108878JeecgBoot through 3.9.5 Missing Authorization via /airag/app/queryByIdJeecgBoot
- CVE-2026-108877JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/deleteJeecgBoot
- CVE-2026-108876JeecgBoot through 3.9.5 Missing Authorization via /sys/user/putCancelQuitJeecgBoot
- CVE-2026-108875JeecgBoot through 3.9.5 Missing Authorization via /sys/user/addSysUserGroupJeecgBoot
- CVE-2026-108874JeecgBoot through 3.9.5 Missing Authorization via /sys/user/changeDepartChargePersonJeecgBoot
- CVE-2026-108873JeecgBoot through 3.9.5 Missing Authorization via /sys/user/doUpdateDepartInfoJeecgBoot
- CVE-2026-108872JeecgBoot through 3.9.5 Missing Authorization via /sys/user/batchEditUsersJeecgBoot
- CVE-2026-108871JeecgBoot through 3.9.5 Missing Authorization via POST /sys/sysDepartRole/dataruleJeecgBoot
- CVE-2026-108870JeecgBoot through 3.9.5 Missing Authorization via POST /sys/role/dataruleJeecgBoot
- CVE-2026-108869JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendSysAnnouncementJeecgBoot
- CVE-2026-108868JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendBusTemplateAnnouncementJeecgBoot
- CVE-2026-108867JeecgBoot through 3.9.5 Missing Authorization via /sys/api/getUserRoleSetByIdJeecgBoot
- CVE-2026-108866JeecgBoot through 3.9.5 Missing Authorization via /sys/api/queryUserAuthsJeecgBoot
- CVE-2026-108683zhayujie CowAgent Media Download memory allocationzhayujie CowAgent
- CVE-2026-108682zhayujie CowAgent Web Console upload read denial of servicezhayujie CowAgent
- CVE-2026-108864iFlytek Astron Agent through 1.1.2 Authorization Bypass via /workflow/v1/resume Endpointiflytek astron-agent
- CVE-2026-108862APIPark through 1.9.7-beta IDOR via application authorization endpointsAPIParkLab APIPark
- CVE-2026-108861Odoo MCP 1.0.0 through 1.3.2 Information Disclosure via execute_method Toolerpipe-org Odoo MCP
- CVE-2026-108858Predibase LoRAX through 0.12.1 API Token Exposure via Router LogsPredibase LoRAX
- CVE-2026-108857Hugging Face Text Embeddings Inference through 1.9.4 Cleartext API Key LoggingHugging Face Text Embeddings Inference
- CVE-2026-108856UnicomAI Wanwu through 0.6.5 Authorization Bypass via /v1/appspace/app/key AppKey MintingUnicomAI Wanwu
- CVE-2026-108855UnicomAI Wanwu through 0.6.5 Missing Authorization via DELETE /v1/appspace/app/publishUnicomAI Wanwu
- CVE-2026-108854Wanwu before 0.6.3 IDOR AppKey Deletion via DELETE /v1/appspace/app/keyUnicomAI Wanwu
- CVE-2026-108852Deep Chat through 2.5.1 XSS via Markdown Link Validation BypassOvidijusParsiunas Deep Chat
- CVE-2026-108851phpMyFAQ through 4.1.10 Missing Authorization via MCP Server faq_search Toolthorsten phpMyFAQ
- CVE-2026-108850Company Research Agent through 2.2.0 SSRF via /generate-pdf ReportLab Markupguy-hartstein company-research-agent
- CVE-2026-108839thClaws through 0.141.0 Symlink Following File Write via POST /v1/inputsthClaws
- CVE-2026-108697CoreShop through 2026.2.2 Missing Authorization via ResourceController listActionCoreShop
- CVE-2026-108681zhayujie CowAgent Web Console web_channel.py denial of servicezhayujie CowAgent
- CVE-2026-108584FunnyWolf Viper config hard-coded credentialsFunnyWolf Viper
- CVE-2026-108578Neterbit NW-431F Embedded Web Server sms.json information disclosureNeterbit NW-431F
- CVE-2026-108577Konstanty Bialkowski libmodplug ABC Music Format load_abc.cpp abc_add_gchord resource consumptionKonstanty Bialkowski libmodplug
- CVE-2026-108756Abilityai Trinity through 0.9.5 Missing Authorization in Telegram Binding RoutesAbilityai trinity
- CVE-2026-108755Hatchet through 0.110.5 Unauthenticated Memory Exhaustion via SNS Ingestion Endpointhatchet-dev hatchet
- CVE-2026-108754GPT-Load through 1.4.11 Cleartext Proxy Key Logging via Access Loggertbphp gpt-load
- CVE-2026-108752JupyterHub through 6.0.1 OAuth Client ID Collision via Unescaped Hyphenjupyterhub
- CVE-2026-108751MoAI-ADK through 3.1.2 Symlink Following via moai init Template Deployermodu-ai moai-adk
- CVE-2026-108750OpenDocMan 2.4.0 through 2.10.0 Decompression Bomb DoS via Upload Text ExtractionOpenDocMan
- CVE-2026-108748Quarkus LangChain4j 1.9.0 through 1.14.1 Memory Exhaustion via /_chat/routes WebSocketquarkiverse quarkus-langchain4j
- CVE-2026-108747Lightdash through 2.556.0 Authorization Bypass via Personal Access Token Deletionlightdash
- CVE-2026-108745CloudBeaver through 25.3.5 Missing Authorization via /api/sql-result-value ServletCloudBeaver
- CVE-2026-108742CloudBeaver through 25.3.5 Missing Authorization via initConnection GraphQL MutationCloudBeaver
- CVE-2026-108741Shepherd through 0.3.1 SSRF via DNS Rebinding in Citation Checkershepherd-agents Shepherd
- CVE-2026-108738Traccar 5.7 through 6.16.0 Login CSRF via OpenID Connect CallbackTraccar
- CVE-2026-108736Speedtest Tracker through 1.15.0 IP Allowlist Bypass via X-Forwarded-For Spoofingalexjustesen speedtest-tracker
- CVE-2026-108735Miniflux 2.3.0 through 2.3.3 SSRF via Per-Feed Proxy URLminiflux
- CVE-2026-108734Frappe CRM 1.49.0 through 1.87.0 Missing Authorization via get_linked_docs_of_documentfrappe crm
- CVE-2026-108733Frappe HR (hrms) before 16.11.0 Missing Authorization via expire_allocationfrappe hrms
- CVE-2026-108732Frappe HR (hrms) before 16.11.0 Missing Authorization via get_account_and_amountfrappe hrms
- CVE-2026-108731Raven 2.0.0 through 3.0.0 Missing Authorization via join_workspace Invite-Only BypassThe-Commit-Company raven
- CVE-2026-108730Raven 2.0.0 through 3.0.0 Missing Authorization via Legacy Message and File APIsThe-Commit-Company raven
- CVE-2026-108727EdgeEver through 1.108.0 Missing Authorization via Memo-Template API Routestianma-if EdgeEver
- CVE-2026-108726GLPI through 12.0.0 Missing Authorization via ajax/map.phpglpi-project GLPI
- CVE-2026-108725Cheshire Cat AI core through 2.0.23 Stored XSS via uploads plugincheshire-cat-ai core
- CVE-2026-108724Sylius through 2.3.0 Authorization Bypass via Shop API Product-Review EndpointSylius
- CVE-2026-108723answer-me-with-html through 0.5.0 Symlink Following in Code Block src EmbeddingQingYunA answer-me-with-html
- CVE-2026-108722open-computer-use through commit 610bac8 Stored XSS via log.html Session Loge2b-dev open-computer-use
- CVE-2026-108721Open Computer Use through 1.0.0 Denylist Bypass via Case-Variant Bundle IDiFurySt open-computer-use
- CVE-2026-108720phpIPAM through 1.8.3 Missing Authorization in Customers, Locations and NAT Pagesphpipam
- CVE-2026-108719LLMGateway through 1.20.0 Blind SSRF via Video-Generation callback_urltheopenco LLMGateway
- CVE-2026-108717Combodo iTop 3.1.0 through 3.3.0 Missing Authorization via LinkSetControllerCombodo iTop
- CVE-2026-108716mcp-remote 0.8.0 through 0.14.3 Cleartext Credential Transmission via --device-code OAuth Grantpunkpeye mcp-remote
- CVE-2026-108715LibreNMS through 26.9.1.1 Authorization Bypass via Smokeping Graph auth.inc.phplibrenms
- CVE-2026-108713SuiteCRM through 7.15.2 and 8.10.2 Missing Authorization via setCampaignMarketingAndTemplateSuiteCRM
- CVE-2026-108712SuiteCRM through 7.15.2 and 8.10.2 Missing Authorization via DetailUserRole Entry PointSuiteCRM
- CVE-2026-108711Plastic Labs Honcho through 3.3.0 Incorrect Authorization via POST /v3/workspacesPlastic Labs honcho
- CVE-2026-108575BerriAI LiteLLM Secret Resolution main.py get_secret improper authorizationBerriAI LiteLLM
- CVE-2026-108574BerriAI LiteLLM Spend Tracking spend_management_endpoints.py ui_view_session_spend_logs authorizationBerriAI LiteLLM
- CVE-2026-108573Open Asset Import Library Assimp PLY File getNextBlock out-of-boundsOpen Asset Import Library Assimp
- CVE-2026-108572Casdoor Proxy Validation cas.go CasP3ProxyValidate server-side request forgeryCasdoor
- CVE-2026-108571Xinhu Rainrock RockOA Openkqj Action openkqjAction.php returnchuli sql injectionXinhu Rainrock RockOA
- CVE-2026-108570Furion .NET Framework View ViewEngine.cs RunCompile special elements in template engineFurion .NET Framework
- CVE-2026-108569Furion .NET Framework StringRenderExtensions.cs String.Replace sql injectionFurion .NET Framework
- CVE-2026-108568InstantSoft icms2 Billing paypal.php validatePaypalOrder data authenticityInstantSoft icms2
- CVE-2026-108567InstantSoft icms2 Image image.php files_delete_file path traversalInstantSoft icms2
- CVE-2026-108566InstantSoft icms2 Private Message index.tpl.php index cross site scriptingInstantSoft icms2
- CVE-2026-108544Lippu Docx Reader Office Viewer App path traversalLippu Docx Reader Office Viewer App
- CVE-2026-108543ag2ai ag2 UserProxyAgent os.path.join path traversalag2ai ag2
- CVE-2026-108542021is elvix-sdk MCP Request index.ts server-side request forgery021is elvix-sdk
- CVE-2026-108541highwarden Super Store Finder index.php sql injectionhighwarden Super Store Finder
- CVE-2026-97183WP-Invoice <= 4.3.1 - Subscriber+ User PII Disclosure via Unprotected AJAX HandlersWP-Invoice
- CVE-2026-93550Veeqo for WooCommerce <= 2.2.8 - Subscriber+ Arbitrary File Upload via start_veeqo_connection_processVeeqo for WooCommerce
- CVE-2026-89305Paymendo Bank Transfer <= 1.1 - Subscriber+ SQLi via 'orderBy' Parameterpaymendo
- CVE-2026-89304Paymendo Bank Transfer <= 1.1 - Unauthenticated Blind SQLi via 'paymendo_bank_transfer_completed_payment' Parameterpaymendo
- CVE-2026-88785Simple Membership < 4.8.3 - Newly Registered Member Password Disclosure via URL Query StringSimple Membership
- CVE-2026-81156Robo Gallery < 5.2.6 - Contributor+ Stored XSS via Gallery SettingsRobo Gallery
- CVE-2026-81155Robo Gallery < 5.2.6 - Author+ Stored XSS via Gallery Search LabelRobo Gallery
- CVE-2026-81154Robo Gallery < 5.2.6 - Author+ Stored XSS via Image Alt TextRobo Gallery
- CVE-2026-81153Robo Gallery < 5.2.6 - Author+ Stored XSS via Image Overlay Effect MetaRobo Gallery
- CVE-2026-107694Dokan < 5.2.0 - Vendor+ Cross-Vendor Commission Settings Disclosure via Commission REST EndpointDokan: AI Powered WooCommerce Multivendor Marketplace Solut…
- CVE-2026-107507Squadeno < 1.12.0 - Trainer+ Section and Age Group Reassignment via Quick EditSquadeno
- CVE-2026-104684Envira Gallery < 1.16.2 - Author+ IDOR via ShortcodeEnvira Gallery
- CVE-2026-104682Envira Gallery < 1.16.2 - Contributor Missing Authorization via Convert Gallery REST RouteEnvira Gallery
- CVE-2026-104681Envira Gallery < 1.16.2 - Author+ Non-Public Post Title and Excerpt Disclosure via Gallery REST FieldEnvira Gallery
- CVE-2026-94235Simple User Registration <= 6.9 - Subscriber+ Arbitrary Email Sending via wpr_send_email_to_userMemberHero
- CVE-2026-12980Post Snippets <= 4.2.4 - Contributor+ Stored XSS via Snippet VariablePost Snippets
- CVE-2026-108539GPAC MP4Box filter_queue.c gf_fq_pop use after freeGPAC
- CVE-2026-108538GPAC MP4Box os_thread.c gf_mx_v use after freeGPAC
- CVE-2026-108523Studio-Saelix Sencho git-sources Browse API Endpoint outboundTarget.ts server-side request forgeryStudio-Saelix Sencho
- CVE-2026-108522Studio-Saelix Sencho Login Endpoint login improper authenticationStudio-Saelix Sencho
- CVE-2026-108521Studio-Saelix Sencho Add Remote Node API Endpoint validation.ts isValidRemoteUrl server-side request forgeryStudio-Saelix Sencho
- CVE-2026-108696CoreShop through 1.5.5 Authorization Bypass via OrderController OrderConfirm and SendReshipCoreUnion CoreShop
- CVE-2026-108706eladmin through commit 55fbf70 Missing Authorization via S3 Storage Download Endpointelunez eladmin
- CVE-2026-108705CordysCRM through 1.9.3 Missing Authorization via /custom-form/data/import1Panel-dev CordysCRM
- CVE-2026-108704CordysCRM through 1.9.3 Authorization Bypass via Follow-Up Record Add Endpoints1Panel-dev CordysCRM
- CVE-2026-108703CordysCRM through 1.9.3 Missing Authorization via /approval-resource/push1Panel-dev CordysCRM
- CVE-2026-108702CordysCRM through 1.9.3 Missing Authorization and Blind SSRF via Webhook Test1Panel-dev CordysCRM
- CVE-2026-1087011Panel-dev CordysCRM before 1.9.2 Missing Authorization via POST /contract/sort1Panel-dev CordysCRM
- CVE-2026-108691mall4j through 4.0 Operator Precedence Error Deletes Other Users' Cart Items via /p/shopCart/cleanExpiryProdListgz-yami mall4j
- CVE-2026-108690mall4j through 4.0 Operator Precedence Error Exposes Other Users' Cart Items via /p/shopCart/expiryProdListgz-yami mall4j
- CVE-2026-108689Wukong AICRM through 20260610 Authorization Bypass via User-Controlled Session ID in POST /chat/sendWuKongOpenSource Wukong AICRM
- CVE-2026-108688Eladmin through 2.7 Missing Authorization via /api/localStorage/pictures Uploadelunez eladmin