CVEs published October 14, 2026
831 CVEs were published on October 14, 2026: 79 critical, 331 high. 4 are now in CISA KEV.
- Published
- 831
- Critical
- 79
- High
- 331
- Medium
- 344
- Low
- 27
- Unrated
- 50
- Now in CISA KEV
- 4
- Fix available
- 619
Most affected products
- Juniper Networks Junos OS
- 141
- Linux
- 46
- Gitea
- 34
- error311 FileRise
- 22
- n8n-io n8n
- 14
- Red Hat Fast Datapath for RHEL · Red Hat Enterprise Linux +2
- 14
- Juniper Networks Junos OS Evolved
- 12
- Progress MOVEit Transfer
- 12
- FreeRDP
- 11
- nasa fprime
- 11
Critical 79
- CVE-2026-110867Renovate before 44.60.1 allowedEnv Allowlist Bypass via Shared Presetrenovatebot renovate · mend renovate-ce +4
- CVE-2026-110864Better Auth 1.5.0-beta.12 before 1.7.7 Authentication Bypass via OAuth Proxybetter-auth
- CVE-2026-110862Better Auth 1.4.0-beta.18 before 1.7.7 Authentication Bypass via Magic Linkbetter-auth
- CVE-2026-110858GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() Refspecgitpython-developers GitPython · gitpython
- CVE-2026-108336Token Signing Key Allows Unauthenticated Administrative AccessHitachi Vantara Remot Ops Agent
- CVE-2026-108335Password Reset Functionality Missing Brute-Force ProtectionHitachi Vantara Remote Ops Agent
- CVE-2026-55684WeGIA: SQL Injection in html/socio/sistema/cadastro_cobrancas_geracao.phpLabRedesCefetRJ WeGIA
- CVE-2026-55680WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameterLabRedesCefetRJ WeGIA
- CVE-2026-55683WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.phpLabRedesCefetRJ WeGIA
- CVE-2026-110770Databasus 3.7.0 through 3.61.0 Account Takeover via Password Reset Brute-Forcedatabasus
- CVE-2026-102748Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Servicedgraph-io dgraph · github.com/dgraph-io/dgraph/v25
- CVE-2026-85714Stirling-PDF: Remote Code Execution via H2Stirling-Tools Stirling-PDF
- CVE-2026-110536D-Link DIR-868L HNAP CGI cgibin system os command injectionD-Link DIR-868L
- CVE-2026-55573e107: Unsafe deserialization in install.php allows unauthenticated RCE via POP chaine107inc e107
- CVE-2026-55572e107: SQL injection in alt_auth plugin (otherdb / e107db backends) via login usernamee107inc e107
- CVE-2026-102476In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP client relies on an SSL context for efficiencyEclipse Foundation Eclipse Vert.x
- CVE-2026-77371Redash: DuckDB query runner allows arbitrary file read/write via unrestricted external accessgetredash redash
- CVE-2026-103415When a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second ClientHello without checking that the cooEclipse Foundation NetX Duo
- CVE-2026-101954Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabledJuniper Networks Junos OS
- CVE-2026-101983Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual-domain is configuredJuniper Networks Junos OS
- CVE-2026-108390HestiaCP Low-Privileged User to Root via Config-Field Injection and PATH Hijackinghestiacp
- CVE-2026-101982Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise when EVPN-VPWS is usedJuniper Networks Junos OS
- CVE-2026-92152F´: Unvalidated Port Index in GenericHubnasa fprime
- CVE-2026-33796Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabledJuniper Networks Junos OS
- CVE-2026-33792Junos OS: SRX Series: An attacker causes remote code execution and denial of service when a GRE tunnel is configuredJuniper Networks Junos OS
- CVE-2026-33789Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a specifically crafted BGP route update results in denial of serviceJuniper Networks Junos OS
- CVE-2026-102182Junos OS: MX Series: Certificate-based IKE packets cause root-level code executionJuniper Networks Junos OS
- CVE-2026-102178Junos OS and Junos OS Evolved: When BGP update-threading is enabled a specifically malformed flowspec NLRI causes routing-engine compromiseJuniper Networks Junos OS
- CVE-2026-102175Junos OS and Junos OS Evolved: An attacker causes remote code execution or denial of service when service-deployment processing is usedJuniper Networks Junos OS
- CVE-2026-102031Junos OS Evolved: A low-privileged TACACS+ user causes root command execution when authorization refresh is enabledJuniper Networks Junos OS Evolved
- CVE-2026-109439Lantronix XPress-DR 8.1.0.0 Unauthenticated Configuration Write via UDP 30718LANTRONIX XPress-DR · LANTRONIX XPress-DR-I
- CVE-2026-101990Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when flow-spec routes are re-advertisedJuniper Networks Junos OS
- CVE-2026-101950Junos OS: SRX Series: Malformed IPv4 packets cause packet-forwarding process crash when Secure Vector Routing is enabledJuniper Networks Junos OS
- CVE-2026-101986Junos OS and Junos OS Evolved: J-Web permits pre-authentication CGI executionJuniper Networks Junos OS
- CVE-2026-101956Junos OS: Unauthorized root command execution when J-Web is enabledJuniper Networks Junos OS
- CVE-2026-101980Junos OS: Malformed Extended Echo requests cause a Routing Engine reboot when Extended Echo is enabledJuniper Networks Junos OS
- CVE-2026-77524KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthenticationkedacore keda · github.com/kedacore/keda +1
- CVE-2026-76519Cisco Secure Email Gateway Arbitrary File Write VulnerabilityCisco Secure Email
- CVE-2026-86002Dokku: Host Command Execution via eval of Unsanitized Docker Options in DOCKER_ARGSdokku
- CVE-2026-102893Zulip: OpenID Connect authentication ignores the email_verified claimzulip
- CVE-2026-91881Dell Terraform Provider for Redfish, versions prior to 1.6.2, contains an Improper Certificate Validation vulnerability in the HTTP transporDell Terraform Provider for Redfish
- CVE-2026-59774Gitea Org-mode file disclosure and code executionGitea
- CVE-2026-110650Thumbnail through 1.5 OS Command Injection via generate_thumbnail File Pathsanshulkharb thumbnail
- CVE-2026-110649Stills before 25.24.2 OS Command Injection via Media File Namesshahkashani stills
- CVE-2026-110646Beganovich snappdf 1.1.0 before 6.1.0 OS Command Injection on Windows via setUrl()beganovich snappdf
- CVE-2026-110645Video-stitch before 2.0.0-beta.1 OS Command Injection via concat() and cut()ArsalanDotMe video-stitch
- CVE-2026-110644nodejs-whisper through 0.3.1 OS Command Injection via convertToWavTypeChetanXpro nodejs-whisper
- CVE-2026-110643transcribe2texts through 1.0.6 OS Command Injection via transcribeAudio audioPathkky-ykk transcribe2texts
- CVE-2026-110640Whisper-node through 1.1.1 OS Command Injection via filePath and languageariym whisper-node
- CVE-2026-110639@mborne/extract before 0.2.1 OS Command Injection via archivePath and targetDir@mborne/extract
- CVE-2026-110638doc-recog through 1.1.6 OS Command Injection via DocData._readPDF File Pathzepspaiva doc-recog
- CVE-2026-110636pypdftk through 0.5 OS Command Injection via PDF and Output Pathsrevolunet pypdftk
- CVE-2026-110635webp-converter before 3.0.0 OS Command Injection via File Names and Optionsscionoftech webp-converter
- CVE-2026-110634git-diff before 2.0.7 OS Command Injection via gitDiff Input Stringsdanday74 git-diff · git-diff
- CVE-2026-110632Report One MyReport Updater through 2.1.1 Unauthenticated gRPC Service RCEReport One MyReport Updater
- CVE-2026-110631Komodo through 2.3.3 Periphery Agent Unauthenticated RCE via Default Configurationmoghtech komodo
- CVE-2026-110628Kan 0.5.5 through 0.6.0 Unauthenticated SSRF via /api/download/attatchmentkanbn kan
- CVE-2026-110616NullHub through 2026.5.29 Missing Authentication for /api Management APInullclaw NullHub
- CVE-2026-110612vlife through 2.0.1 Authentication Bypass via Hardcoded JWT Secret in TokenUtilwwwlike vlife
- CVE-2020-37282office-converter through 1.0.2 OS Command Injection via fileName in generatePdfvworld4u office-converter
- CVE-2020-37281Gravitee API Management through 4.12.22 Default JWT Secret Authentication BypassGravitee API Management
- CVE-2026-108065Unauthenticated SQL Injection in Channel Software WebAlliance eCommerceChannel Software WebAlliance eCommerce
- CVE-2026-16740Missing Authentication for Critical Function in TR7 Cyber Defense's TR7 ASPTR7 Cyber Defense TR7 ASP
- CVE-2026-16741OS Command in TR7 Cyber Defense's TR7 ASPTR7 Cyber Defense TR7 ASP
- CVE-2026-108291WordPress Affiliates plugin <= 7.0.1 - PHP Object Injection vulnerabilityitthinx Affiliates
- CVE-2026-107424WordPress Frontend Dashboard plugin <= 3.0.7 - Privilege Escalation vulnerabilityM A Vinoth Kumar Frontend Dashboard
- CVE-2026-14851Unauthorised disclosure of information on Copart’s online billing serviceCopart’s online billing service
- CVE-2026-104748SimpleForm <= 3.10.0 - Unauthenticated Privilege Escalation to wp_capabilities Mass Assignment via simpleform_wp_registerwpazleen SimpleForm – Form Maker to Chat Apps with Quiz, Po…
- CVE-2026-89310SQL Command Injection Vulnerability in JTL-WMSJTL SW JTL-WMS
- CVE-2026-107594File Upload to Order < 1.1.4 - Unauthenticated Arbitrary File DeletionFile Upload to Order
- CVE-2026-87855JTL-Connector for WooCommerce <= 2.4.3 - Unauthenticated Arbitrary File Upload via 'image.push' Methodntbyk JTL-Connector for WooCommerce
- CVE-2026-104800AGE-GATE <= 1.0 - Unauthenticated Remote Code Execution via PHP Code Injection via 'width'/'height' Parameters to Standalone admin.phpstreetforce1 AGE-GATE
- CVE-2026-110447Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in…Collabora Online - Built-in CODE Server
- CVE-2026-97657Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated Authentication Bypass via Malleable Encryption and Bypassable HMAC via Recovery Link 'validate' ParameterTyche Softwares Abandoned Cart Pro for WooCommerce
- CVE-2026-97668Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated SQL Injection via Guest Persistent Cart meta_valueTyche Softwares Abandoned Cart Pro for WooCommerce
- CVE-2026-110002Snazzy Social Media Feed <= 2.5 - Unauthenticated Arbitrary File Upload via 'pluginURL' Parametersnazzyplugins Snazzy Social Media Feed
- CVE-2026-110392Samsung QA-Board — Unauthenticated OS command injection via output redo/tuningSamsung Open Source QA-Board
- CVE-2026-92097Click to Chat <= 4.44 - Unauthenticated Arbitrary Shortcode Execution via REQUEST_URI via {url} PlaceholderClick to Chat – HoliThemes
- CVE-2026-93388Printcart Store - Web to Print Product Designer for WooCommerce (PCDesigner) <= 2.9.1 - Unauthenticated Arbitrary File Upload to Remote Code Execution via nbdesigner_copy_image_from_urlPrintcart Store – Web to Print Product Designer for WooComm…
High 331
- CVE-2026-110873Heym 0.0.55 before 0.0.121 Credential Theft via error_workflow_id Fieldheymrun heym
- CVE-2026-110872Nodemailer 3.0.0 before 10.0.10 Denial of Service via SMTP Reply Parsingnodemailer
- CVE-2026-110871Nodemailer 3.0.0 before 10.0.10 Quadratic DKIM Header Unfolding Denial of Servicenodemailer
- CVE-2026-110869Nodemailer 3.0.0 before 10.0.13 ReDoS via SMTP AUTH Mechanism Detection Regexesnodemailer
- CVE-2026-110868Renovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasourcesrenovatebot renovate · mend renovate-ce +4
- CVE-2026-110865Renovate before 44.60.1 HTTP Header Allowlist Bypass via Shared Presetsrenovatebot renovate · mend renovate-ce +4
- CVE-2026-110863Better Auth @better-auth/sso before 1.7.3 Authentication Bypass via Personal SSO Providersbetter-auth sso
- CVE-2026-110859GitPython before 3.2.0 Arbitrary File Read via Head.checkout() Branch Namegitpython-developers GitPython · gitpython
- CVE-2026-110857GitPython before 3.2.0 Command Execution via ls_remote ext:: URLsgitpython-developers GitPython · gitpython
- CVE-2026-110856GitPython before 3.2.0 ReDoS via _re_actor_epoch in parse_actor_and_dategitpython-developers GitPython · gitpython
- CVE-2026-110855GitPython before 3.2.0 Environment Variable Disclosure via .gitmodules Submodule Namegitpython-developers GitPython · gitpython
- CVE-2026-110854Parse Server before 8.6.97 and 9.10.2-alpha.6 Denial of Service via Unhandled Email Errorparse-community parse-server · parse
- CVE-2026-110853n8n before 1.123.83 Authorization Bypass via Execute Sub-workflow Inline JSONn8n-io n8n
- CVE-2026-110850n8n before 2.41.4 and 2.42.1 Credential Check Bypass via Agent Node Parametersn8n-io n8n
- CVE-2026-110849n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Binary-Data File Previewn8n-io n8n
- CVE-2026-110847n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Chat Trigger customCss Parametern8n-io n8n
- CVE-2026-110846n8n before 2.41.4 and 2.42.1 Send-and-Wait HMAC Signature Bypass via Waiting-Webhookn8n-io n8n
- CVE-2026-110845n8n before 1.123.83, 2.41.4, and 2.42.1 Code Execution via Git Node Log Operationn8n-io n8n
- CVE-2026-110844n8n before 1.123.83 Credential Authorization Bypass via Nested Inline Sub-Workflowsn8n-io n8n
- CVE-2026-110843n8n before 2.41.4 and 2.42.1 Unauthenticated Unbounded OAuth Client Persistence via Authorize Endpointn8n-io n8n
- CVE-2026-110842n8n before 2.41.4 and 2.42.1 Prototype Pollution via MCP Workflow-Validation Interpretern8n-io n8n
- CVE-2026-110840n8n before 2.41.4 and 2.42.1 SQL Injection via Microsoft SQL Node Query Fieldn8n-io n8n
- CVE-2026-110839FreeRDP 3.3.0 before 3.32.0 Heap Out-of-Bounds Write via Grayscale JPEG Clipboard DataFreeRDP
- CVE-2026-110838FreeRDP shadow before 3.32.0 Pre-Authentication Input Injection via Confirm Active bypassFreeRDP
- CVE-2026-110836FreeRDP 3.0.0 before 3.32.0 Infinite Loop DoS via Gateway Content-TypeFreeRDP
- CVE-2026-110834FreeRDP 2.0.0 before 3.32.0 Denial of Service via Serial IRP Null HandleFreeRDP
- CVE-2026-110833FreeRDP before 3.32.0 Unbounded Memory Retention via RDPDR ProxyFreeRDP
- CVE-2026-110832FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via DRDYNVC DATA_FIRSTFreeRDP
- CVE-2026-110830FreeRDP before 3.32.0 Denial of Service via Serial IRP_MJ_CREATEFreeRDP
- CVE-2026-110829FreeRDP 3.0.0 before 3.32.0 Null Pointer Dereference via rdpsnd FragmentFreeRDP
- CVE-2026-107795Improper Authorization in TP-Link Omada Controller TLS Certificate and Private Key Management APITP-Link Systems Omada Software Controller
- CVE-2026-102298Insufficient Authorization and User Boundary Validation in Omada Controller MSPTP-Link System Omada Software Controller
- CVE-2026-108337Password Reset Code Accessible in User Listing APIHitachi Vantara Remot Ops Agent
- CVE-2026-104108FileRise OIDC login can bind an attacker identity to an existing local accounterror311 FileRise
- CVE-2026-103977FileRise: Session-scoped TOTP rate limiting permits repeated verification attemptserror311 FileRise
- CVE-2026-61844FileRise: Folder Metadata Filename Collisions Bypass "read_own" Isolationerror311 FileRise
- CVE-2026-61843FileRise: Unauthenticated File Overwrite Through Upload-Enabled Folder Shareserror311 FileRise
- CVE-2026-57492FileRise: Setup mode re-activates when users.txt becomes empty, allowing unauthenticated admin creationerror311 FileRise
- CVE-2026-57490FileRise: WebDAV authentication bypasses TOTP/MFA entirelyerror311 FileRise
- CVE-2026-57489FileRise: AUTH_BYPASS reverse-proxy header trust without source IP validation enables full authentication bypasserror311 FileRise
- CVE-2026-100232Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identiSonicWall Network Security Manager
- CVE-2026-96540An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potSonicWall Network Security Manager
- CVE-2026-71854OpenAEV has unauthenticated access and missing object-level authorization on player lessons APIOpenAEV-Platform openaev
- CVE-2026-55682WeGIA: Session Fixation via User-Controlled PHPSESSID Cookie + DB_HOST Leak in html/seguranca/sessionStart.phpLabRedesCefetRJ WeGIA
- CVE-2026-55681WeGIA: SQL Injection in html/matPat/restaurar_produto_desocultar.php via id_produto parameterLabRedesCefetRJ WeGIA
- CVE-2026-102986Plane: Any Authenticated User Can Upload and Delete Assets in Any Published Project via /api/public/assets/v2/anchor/{anchor}/makeplane plane
- CVE-2026-55382InvoiceShelf: Cross-company read/modify/delete of notes via missing company scope in NotePolicy (BOLA/IDOR)InvoiceShelf
- CVE-2026-55381InvoiceShelf: IDOR in InvoiceShelf estimate-to-invoice conversion allows any company user to read and tamper with other companies' estimatesInvoiceShelf
- CVE-2026-55383InvoiceShelf: Public EmailLog token type confusion allows cross-company invoice disclosureInvoiceShelf
- CVE-2026-55387InvoiceShelf bulk deletion lacks company scopingInvoiceShelf
- CVE-2026-55386InvoiceShelf ORDER BY SQL injection through orderByFieldInvoiceShelf
- CVE-2026-54702Markdown Preview Enhanced: Blind Command Dispatch via Unvalidated Webview Message Handlershd101wyy vscode-markdown-preview-enhanced
- CVE-2026-54566Markdown Preview Enhanced: Remote Code Execution via VM Sandbox Escape in `.crossnote/config.js` and `.crossnote/parser.js`shd101wyy vscode-markdown-preview-enhanced
- CVE-2026-54525Markdown Preview Enhanced: One Click RCE via Markdown Link Command Injection on Windowsshd101wyy vscode-markdown-preview-enhanced
- CVE-2026-102899Sentry: Improper authentication on SAML SSO process allows user identity linkinggetsentry sentry
- CVE-2026-110775Nexent through 2.7.0 Cross-Tenant Knowledge-Base File Read via check_file_accessModelEngine-Group nexent
- CVE-2026-110769holaOS through 2026.822.1 Missing Authorization in Channel-Gateway Connectorsholaboss-ai holaOS
- CVE-2026-110767Gitingest through 0.3.1 Arbitrary File Read via Symlink in Blob Ingestioncoderamp-labs gitingest
- CVE-2026-110765FlexPrice through 2.1.38 QuickBooks Webhook Signature Verification Bypassflexprice
- CVE-2026-110761ILIAS before 9.24, 10.12, and 11.5 PHP Object Injection via Test Results ImportILIAS-eLearning e.V. ILIAS
- CVE-2026-102479In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP/1.x decoder uses a canonicalization for well kEclipse Foundation Eclipse Vert.x
- CVE-2026-104143DataEase: Stored SQL Injection via dateFormat field templatesdataease
- CVE-2026-104142DataEase: Stored SQL Injection in group-field binning boundsdataease
- CVE-2026-104141DataEase: SQL Injection in datasource metadata identifiersdataease
- CVE-2026-53999Radius Controller May Delete a Container Resource via an Injected Deployment Annotation (Multi-Tenant Installs)radius-project radius · github.com/radius-project/radius
- CVE-2026-102460In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a scope bypass vulnerability exists in EcliEclipse Foundation Eclipse Vert.x
- CVE-2026-100406dbt: Unauthenticated Arbitrary SQL Execution in `dbt docs serve`dbt-labs dbt-core
- CVE-2026-63626Mongoose: ppp_handle_ipv6cp() uses attacker-controlled length without bounds check — OOB read and heap overflow (PPP/PPPoE, MG_ENABLE_IPV6)cesanta mongoose
- CVE-2026-73261Mongoose: handle_opt() missing opts[1] > len check — 1-byte OOB read corrupts TCP MSS, silences mg_send() per connectioncesanta mongoose
- CVE-2026-73260Mongoose: Out-of-bounds Read via length-counter underflow in built-in TLS X.509 DER parsercesanta mongoose
- CVE-2026-73252Mongoose: Unauthenticated remote heap out-of-bounds read in built-in TLS: off-by-one length check in mg_tls_recv_record() underflows recv_len to SIZE_MAXcesanta mongoose
- CVE-2026-102944cpp-httplib: Cookie header leaked on cross-origin redirectyhirose cpp-httplib
- CVE-2026-55786Flyto2 Core: Unauthenticated Command Execution via HTTP MCP `execute_module`flytohub flyto-core · flyto-core
- CVE-2026-55787Flyto2 Core: SSRF guard bypass via IPv6 transition addresses (IPv4-mapped / 6to4 / NAT64) in validate_url_ssrfflytohub flyto-core · flyto-core
- CVE-2026-108480WordPress Skydropx plugin <= 2.1.4 - Broken Access Control vulnerabilitySkydropx
- CVE-2026-108484WordPress Best Payments Plugin for WP plugin <= 4.6.27 - Cross Site Scripting (XSS) vulnerabilityWPManageNinja Best Payments Plugin for WP
- CVE-2026-108483WordPress Hippoo Mobile App for WooCommerce plugin <= 1.12.0 - Cross Site Scripting (XSS) vulnerabilityhippooo Hippoo Mobile App for WooCommerce
- CVE-2026-105066WordPress SimplyRETS Real Estate IDX plugin <= 3.2.9 - Cross Site Scripting (XSS) vulnerabilitySimplyRETS Real Estate IDX
- CVE-2026-103081WordPress Salevo plugin <= 1.3.0 - Content Injection vulnerabilityVillaTheme Salevo
- CVE-2026-104103Ludwig: Path traversal in dataset archive extraction allows arbitrary file write via symlink membersludwig-ai ludwig
- CVE-2026-54554FOG adInfo endpoint is reported to disclose the Active Directory join passwordfogproject
- CVE-2026-100413SeaweedFS: Hard-coded SSH host key can be presented by certain standalone SFTP Helm deploymentsseaweedfs
- CVE-2026-79957ServiceNext Insecure Direct Object Reference via GetUsariosServiceNext SerTec
- CVE-2026-42093Redash: SQL Injection via Query Results parameterized query substitutiongetredash redash
- CVE-2026-109527Model Context Protocol Python SDK HTTP and OAuth endpoints allow memory exhaustion through unbounded request bodiesmodelcontextprotocol python-sdk
- CVE-2026-86848Dpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-cryptoRed Hat Fast Datapath for RHEL · Red Hat Enterprise Linux +2
- CVE-2026-88164Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-86567Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmapRed Hat Fast Datapath for RHEL · Red Hat Enterprise Linux +2
- CVE-2026-106465The NetX Secure DTLS server sends a HelloVerifyRequest carrying a freshly generated cookie, but never checks the cookie a client returns.Eclipse Foundation NetX Duo
- CVE-2026-108395Model Context Protocol Java SDK HTTP server transports allow memory exhaustion through unbounded request bodiesio.modelcontextprotocol.sdk:mcp · io.modelcontextprotocol.s…
- CVE-2026-106464`_nx_secure_x509_parse_signature_data` computes the certificate signature's length as `tlv_length - 1` without first checking that `tlv_lengEclipse Foundation NetX Duo
- CVE-2026-107350Authentication bypass via second StartupMessage during SCRAM authentication in PgBouncerPgBouncer
- CVE-2026-107349Infinite loop on empty option name in startup options parameter in PgBouncerPgBouncer
- CVE-2026-103414The GUIX binary resource (theme) loader sizes its arena and populates it in two separate passes that traverse the resource file with indepenEclipse Foundation GUIX
- CVE-2026-86461FV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Arbitrary File Upload via 'video_url' Parameterfoliovision FV Flowplayer Video Player
- CVE-2026-0322PAN-OS: Authenticated Remote Code Execution (RCE) in the Management InterfacePalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-101952Junos OS and Junos OS Evolved: A specific BGP ISO-VPN update causes an rpd crash when BMP or NSR is enabledJuniper Networks Junos OS
- CVE-2026-101949Junos OS and Junos OS Evolved: In a scenario with VPN-flowspec and BMP monitoring a specific BGP update causes an rpd crashJuniper Networks Junos OS
- CVE-2026-101963Junos OS and Junos OS Evolved: A BGP EVPN neighbor causes an rpd crash when SRv6 multihoming is usedJuniper Networks Junos OS
- CVE-2026-101962Junos OS and Junos OS Evolved: An attacker sending a malformed update causes an rpd crash when BGP EVPN signaling is usedJuniper Networks Junos OS
- CVE-2026-92155F´: FileUplink Unknown Packet Type Assertion DoSnasa fprime
- CVE-2026-101961Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when an ECMP qualifier is used in an import policyJuniper Networks Junos OS
- CVE-2026-92150F´: GenericHub Malformed Buffer Assertion DoSnasa fprime
- CVE-2026-92154F´: File size bounds bypass in Svc::FileUplink via unsigned integer overflow in DATA packet validationnasa fprime
- CVE-2026-101981Junos OS and Junos OS Evolved: An adjacent LDP peer causes routing-engine compromise when LDP is enabledJuniper Networks Junos OS
- CVE-2026-101979Junos OS and Junos OS Evolved: A network attacker causes root-level code execution or denial of service when SNMP and AAA are enabledJuniper Networks Junos OS
- CVE-2026-101976Junos OS and Junos OS Evolved: In a non-4byte-AS scenario a specific BGP update causes an rpd crashJuniper Networks Junos OS
- CVE-2026-92158F´: FpySequencer Integer Overflow in Stack Offset/Size Validation Leading to Out-of-Bounds Writenasa fprime
- CVE-2026-102077Junos OS: MX Series with SPC3: In a source NAT scenario malformed packets will lead to resource leaks and eventually traffic stopsJuniper Networks Junos OS
- CVE-2026-33798Junos OS and Junos OS Evolved: SRX Series: An attacker causes remote code execution when SRX chassis-cluster is enabledJuniper Networks Junos OS
- CVE-2026-33795Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP Prefix-SID routes are re-advertisedJuniper Networks Junos OS
- CVE-2026-102185Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when EVPN multihoming preference-based DF election is usedJuniper Networks Junos OS
- CVE-2026-102184Junos OS and Junos OS Evolved: A malformed EVPN SRv6 route causes an rpd crashJuniper Networks Junos OS
- CVE-2026-102183Junos OS and Junos OS Evolved: If in a BGP EVPN scenario a malformed NLRI is received rpd crashesJuniper Networks Junos OS
- CVE-2026-102180Junos OS and Junos OS Evolved: An attacker causes an rpd crash when BGP RIB streaming telemetry is in useJuniper Networks Junos OS
- CVE-2026-102179Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when BGP EVPN RIB telemetry is usedJuniper Networks Junos OS
- CVE-2026-102177Junos OS and Junos OS Evolved: An out-of-bounds write causes an rpd crash when IS-IS backup selection is usedJuniper Networks Junos OS
- CVE-2026-102176Junos OS: Specific packets cause SDK service crash or Routing Engine compromise when the SDK service and JDAF is enabledJuniper Networks Junos OS
- CVE-2026-102174Junos OS: SRX Series: An authenticated remote-access VPN client causes iked denial of service or root-level code execution when JIMS identity publishing is enabledJuniper Networks Junos OS
- CVE-2026-102061Junos OS and Junos OS Evolved: An attacker causes root code execution when SZTP DHCP provisioning is usedJuniper Networks Junos OS
- CVE-2026-102059Junos OS and Junos OS Evolved: EX Series, SRX Series, QFX Series: A rogue DHCP server causes root-level command execution when the phone-home client processes specific informationJuniper Networks Junos OS
- CVE-2026-94200TLS 1.3 client ticket store crashed by NewSessionTicket with empty early_data extension in sslErlang OTP
- CVE-2026-102057Junos OS: An attacker causes DHCP service disruption during DHCP client operationJuniper Networks Junos OS
- CVE-2026-102056Junos OS and Junos OS Evolved: An attacker causes denial of service and information disclosure when Ethernet CFM is enabledJuniper Networks Junos OS
- CVE-2026-105659HTTP/2 blocked-send deadlines reset on every WINDOW_UPDATE, letting a trickle pin stream processes indefinitely in Banditmtrudel bandit · bandit
- CVE-2026-102055Junos OS and Junos OS Evolved: MX Series, PTX Series: An attacker causes remote code execution and denial of service when enhanced CFM is enabledJuniper Networks Junos OS
- CVE-2026-102052Junos OS and Junos OS Evolved: An attacker causes jdhcpd to crash when the DHCPv4 local-client feature is usedJuniper Networks Junos OS
- CVE-2026-102050Junos OS and Junos OS Evolved: An adjacent attacker causes Layer 2 control-plane denial of service when LLDP is enabledJuniper Networks Junos OS
- CVE-2026-102049Junos OS and Junos OS Evolved: An attacker causes l2cpd crash or root code execution when Unified Access Policy is enabledJuniper Networks Junos OS
- CVE-2026-102046Junos OS: MX Series: An attacker causes a Routing Engine denial of service when SCTP service is usedJuniper Networks Junos OS
- CVE-2026-102044Junos OS and Junos OS Evolved: An attacker causes a routing control-plane denial of service when BGP-LS traffic engineering is enabledJuniper Networks Junos OS
- CVE-2026-102037Junos OS: SRX Series: An attacker causes arbitrary configuration commit when the custom URL-feed feature is usedJuniper Networks Junos OS
- CVE-2026-102036Junos OS and Junos OS Evolved: An EVPN default-gateway route burst causes l2ald denial of serviceJuniper Networks Junos OS
- CVE-2026-102030Junos OS and Junos OS Evolved: An attacker causes routing-daemon denial of service when BGP MVPN inter-region tunneling is usedJuniper Networks Junos OS
- CVE-2026-102029Junos OS and Junos OS Evolved: An attacker causes routing-daemon denial of service when an MSDP or PIM policy uses AS-path expansionJuniper Networks Junos OS
- CVE-2026-102028Junos OS and Junos OS Evolved: An attacker causes an rpd crash when VPLS auto-discovery is usedJuniper Networks Junos OS
- CVE-2026-102027Junos OS and Junos OS Evolved: A configured BGP neighbor causes rpd crash when multipath next-hops are processedJuniper Networks Junos OS
- CVE-2026-102026Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP RIB sharding is usedJuniper Networks Junos OS
- CVE-2026-102025Junos OS and Junos OS Evolved: A BGP route-processing error causes rpd crash when extended next-hop tunneling and SRv6 service processing are usedJuniper Networks Junos OS
- CVE-2026-102024Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when BGP extended-nexthop-tunnel is usedJuniper Networks Junos OS
- CVE-2026-102023Junos OS Evolved: An attacker causes denial of service via SNMP when firewall counters are usedJuniper Networks Junos OS Evolved
- CVE-2026-102022Junos OS and Junos OS Evolved: An attacker causes a routing-process crash when BGP-LS traffic-engineering is enabledJuniper Networks Junos OS
- CVE-2026-102020Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when BGP-LS TED export is enabledJuniper Networks Junos OS
- CVE-2026-19673Out-of-bounds read and net_buf length underflow in Zephyr Ethernet L2 when parsing a truncated VLAN headerzephyrproject zephyr
- CVE-2026-102016Junos OS and Junos OS Evolved: An attacker causes a routing outage when BGP MVPN signaling is enabledJuniper Networks Junos OS
- CVE-2026-102015Junos OS and Junos OS Evolved: An attacker causes root code execution when 802.1X authentication is usedJuniper Networks Junos OS
- CVE-2026-102014Junos OS: An attacker causes authd to crash when subscriber RADIUS authentication is usedJuniper Networks Junos OS
- CVE-2026-102012Junos OS Evolved: An attacker causes na-grpcd to crash when gRPC telemetry is enabledJuniper Networks Junos OS Evolved
- CVE-2026-101945Junos OS and Junos OS Evolved: An attacker causes routing daemon denial of service when EVPN BGP is enabledJuniper Networks Junos OS
- CVE-2026-101944Junos OS and Junos OS Evolved: An attacker causes a routing protocol daemon denial of service when EVPN is usedJuniper Networks Junos OS
- CVE-2026-101943Junos OS and Junos OS Evolved: An attacker causes rpd crash and denial of service when EVPN is configuredJuniper Networks Junos OS
- CVE-2026-101942Junos OS and Junos OS Evolved: An attacker causes rpd denial of service when EVPN route signaling is usedJuniper Networks Junos OS
- CVE-2026-101941Junos OS and Junos OS Evolved: An attacker causes an rpd crash when routing-policy resolution-map processing and policy event tracing are enabledJuniper Networks Junos OS
- CVE-2026-101940Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP ISO-VPN egress protection is enabledJuniper Networks Junos OS
- CVE-2026-101939Junos OS and Junos OS Evolved: A routing-policy table reference causes routing-daemon denial of service when source-based forwarding is usedJuniper Networks Junos OS
- CVE-2026-101927Junos OS and Junos OS Evolved: An unprivileged local attacker causes denial of service or privilege escalationJuniper Networks Junos OS
- CVE-2026-100236Dpdk: dpdk: heap out-of-bounds read/write in gso header copyRed Hat Fast Datapath for RHEL · Red Hat Enterprise Linux +2
- CVE-2026-101994Junos OS and Junos OS Evolved: Malformed MC-LAG ICCP message causes l2ald heap disclosure or crashJuniper Networks Junos OS
- CVE-2026-102064Junos OS and Junos OS Evolved: An attacker causes an rpd crash when inter-AS MVPN ingress replication is usedJuniper Networks Junos OS
- CVE-2026-15102Cleartext Transmission of Sensitive Information in ADP Desktop SDKAutodesk ADP Desktop SDK
- CVE-2026-101955Junos OS: SRX Series: Malformed DNS packet causes service disruption when UTM Anti-Spam SBL is usedJuniper Networks Junos OS
- CVE-2026-101997Junos OS: SRX Series: A network-based attacker causes Remote Code Execution when Security Intelligence is used without a tls-profile authenticationJuniper Networks Junos OS
- CVE-2026-92153F´: Arbitrary File Write in Svc::FileUplink via attacker-controlled StartPacket.destinationPathnasa fprime
- CVE-2026-102062Junos OS: SRX Series: An compromised HTTPS feed server can cause remote code execution when Security Intelligence is usedJuniper Networks Junos OS
- CVE-2026-102079Junos OS: MX Series: Missing Authorization for specific 'request' CLI commands allows command injectionJuniper Networks Junos OS
- CVE-2026-102081Junos OS: SRX4000 Series, SRX5000 Series and MX Series with SPC3: With application services configured, high session churn causes memory leak which will ultimately impact trafficJuniper Networks Junos OS
- CVE-2026-92151F´: SpacePacketDeframer Small Packet Assertion DoSnasa fprime
- CVE-2026-102084Junos OS: SRX Series: In an ADVPN scenario a malformed message from a peer causes Remote Code ExecutionJuniper Networks Junos OS
- CVE-2026-101951Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash if a malformed MCAST-TREE NLRI is received and readvertisedJuniper Networks Junos OS
- CVE-2026-101957Junos OS and Junos OS Evolved: A remote BGP peer causes an rpd crash when long-lived graceful restart (LLGR) is usedJuniper Networks Junos OS
- CVE-2026-102065Junos OS and Junos OS Evolved: A malformed SRv6 service route causes an rpd crash when dynamic tunnels are enabledJuniper Networks Junos OS
- CVE-2026-101948Junos OS and Junos OS Evolved: A specific BGP FlowSpec update causes an rpd crash when BGP FlowSpec import policy is usedJuniper Networks Junos OS
- CVE-2026-101977Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when ephemeral configuration is usedJuniper Networks Junos OS
- CVE-2026-103946SQL InjectionTenable Nessus
- CVE-2026-102069Junos OS: An ICCP peer causes dot1xd to crash when dot1x synchronization is enabledJuniper Networks Junos OS
- CVE-2026-102070Junos OS: A remote TWAMP peer causes rmopd service disruption when TWAMP-Control is usedJuniper Networks Junos OS
- CVE-2026-101973Junos OS: Malformed packet causes pkid denial of service when certificate re-enrollment is usedJuniper Networks Junos OS
- CVE-2026-103994Junos OS: A crafted OVSDB message crashes vgd and allows remote code executionJuniper Networks Junos OS
- CVE-2026-101965Junos OS Evolved: An attacker causes telemetry disruption when network analytics telemetry is enabledJuniper Networks Junos OS Evolved
- CVE-2026-101967Junos OS Evolved: PTX Series: An attacker controlled DHCP response causes root-level compromise when zero-touch provisioning is usedJuniper Networks Junos OS Evolved
- CVE-2026-102068Junos OS Evolved: Malformed TCP key-chain traffic causes a kernel panic when BGP or LDP key-chain authentication is usedJuniper Networks Junos OS Evolved
- CVE-2026-101978Junos OS Evolved: PTX Series: An attacker controlled gRPC response causes root-level compromise when zero-touch provisioning is usedJuniper Networks Junos OS Evolved
- CVE-2026-101966Junos OS Evolved: A crafted analytics sensor resource causes telemetry dial-out daemon denial of serviceJuniper Networks Junos OS Evolved
- CVE-2026-86565Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds writeRed Hat Fast Datapath for RHEL · Red Hat Enterprise Linux +2
- CVE-2026-86563Dpdk: dpdk: double offset bug in vhost log mapping calculationRed Hat Fast Datapath for RHEL · Red Hat Enterprise Linux +2
- CVE-2026-86562Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse)Red Hat Fast Datapath for RHEL · Red Hat Enterprise Linux +2
- CVE-2026-100169Account pre-hijacking in the Prowler API through email based social account linking without verificationProwler · prowler-cloud
- CVE-2026-102695OmniFaces: Forged combined-resource IDs and related output/push boundariesomnifaces · org.omnifaces:omnifaces
- CVE-2026-53615util-linux libblkid DOS extended-partition overflow produces invalid partition metadatautil-linux
- CVE-2026-53614util-linux LIBMOUNT_FORCE_MOUNT2 allows nosuid and noexec bypassutil-linux
- CVE-2026-91157Discourse: Media uploads remain publicly accessible after category permissions are restricteddiscourse
- CVE-2026-91156Discourse: Chat MessageBus delivers read-restricted messages to unauthorized usersdiscourse
- CVE-2026-91159Discourse: Stored oEmbed HTML injection via allowed iframediscourse
- CVE-2026-89077MOVEit Transfer Identity validation flaw in SFTP authenticationProgress MOVEit Transfer
- CVE-2026-91882Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Externally-Accessible FilDell Terraform Provider for OME
- CVE-2026-89076MOVEit Transfer SQL injection in custom reportingProgress MOVEit Transfer
- CVE-2026-89075MOVEit Transfer Local Disclosure of Session Information VulnerabilityProgress MOVEit Transfer
- CVE-2026-89074MOVEit Transfer Email MFA BypassProgress MOVEit Transfer
- CVE-2026-89073MOVEit Transfer Access restriction bypass in OAuth authenticationProgress MOVEit Transfer
- CVE-2026-103929mise permits untrusted local configuration to override default shell argumentsjdx mise · mise
- CVE-2026-89072MOVEit Transfer Authorization Flaw in Certificate ManagementProgress MOVEit Transfer
- CVE-2026-89071MOVEit Transfer LDAP injection in certificate-based authenticationProgress MOVEit Transfer
- CVE-2026-89070MOVEit Transfer OIDC Authentication Replay VulnerabilityProgress MOVEit Transfer
- CVE-2026-89069MOVEit Transfer Stored XSS Vulnerability in Ad Hoc PackagesProgress MOVEit Transfer
- CVE-2026-89068MOVEit Transfer Authentication bypass in LDAP sign-onProgress MOVEit Transfer
- CVE-2026-101896Angular: Denial of Service via Numeric URL Matrix Parameters in Server-Side Rendering (SSR)angular · @angular router +1
- CVE-2026-89067MOVEit Transfer Secure Messaging Authentication BypassProgress MOVEit Transfer
- CVE-2026-87093MOVEit Transfer Service Directory Writable by Local Users Enables Local Privilege EscalationProgress MOVEit Transfer
- CVE-2026-110718TurboDocx html-to-docx through 1.23.1 SSRF via img src Remote Image DownloadTurboDocx html-to-docx
- CVE-2026-110714libsmb2 through 6.2 Heap Out-of-Bounds Read via decode_acl Integer Underflowsahlberg libsmb2
- CVE-2026-110713libsmb2 through 6.2 Heap Out-of-Bounds Read via File System Info Decoderssahlberg libsmb2
- CVE-2026-110712libsmb2 through 6.2 Heap Out-of-Bounds Read via smb2_decode_file_all_infosahlberg libsmb2
- CVE-2026-101895Angular SSR: Denial of Service (DoS) via Infinite Loop on Malformed DOCTYPEangular · @angular/ platform-server +1
- CVE-2026-53613util-linux mount target TOCTOU allows local privilege escalationutil-linux
- CVE-2026-53612util-linux mount hook_owner TOCTOU allows local privilege escalationutil-linux
- CVE-2026-104939NGINX Ingress Controller vulnerabilityF5 NGINX Ingress Controller
- CVE-2026-94197NGINX Ingress Controller vulnerabilityF5 NGINX Ingress Controller
- CVE-2026-91184NGINX Gateway Fabric vulnerabilityF5 NGINX Gateway Fabric
- CVE-2026-97205NGINX ngx_http_core_module vulnerabilityF5 NGINX Plus · F5 NGINX Open Source
- CVE-2026-93479NGINX map directive and regex matching vulnerabilityF5 NGINX Plus · F5 NGINX Open Source
- CVE-2026-15176NGINX ngx_http_core_module vulnerabilityF5 NGINX Plus · F5 NGINX Open Source
- CVE-2026-73804Gitea API token scope escalation through HTTP signaturesGitea
- CVE-2026-73802Gitea Runner host isolation bypass through container optionsGitea Runner · gitea.com/gitea/runner
- CVE-2026-73800Gitea reusable workflow secret exposure in pull_request_targetGitea
- CVE-2026-73539Gitea external renderer argument injection and code executionGitea
- CVE-2026-73535Gitea second-factor bypass through OpenID identity linkingGitea
- CVE-2026-71184Gitea fork workflow approval bypass through review eventsGitea
- CVE-2026-66877Gitea fork workflow approval bypass through concurrency cancellationGitea
- CVE-2026-84471The fix for CVE-2026-12996 was incomplete.OpenVPN
- CVE-2026-110648@offactory/compress-fonts before 1.1.1 OS Command Injection via Font File Namesadamarcanov compress-fonts
- CVE-2026-110647Turnpress through 0.4.2 OS Command Injection via Crafted .docx File Namesjinghaihan turnpress
- CVE-2026-110642xhtml2pdf before 0.2.19 OS Command Injection via startViewer File Namexhtml2pdf
- CVE-2026-110641@runnerty/executor-decompress through 3.1.1 OS Command Injection via Archive File Name@runnerty/executor-decompress
- CVE-2026-110637buildebooks before 0.2.2 OS Command Injection via kindlegen EPUB File Namewastemobile buildebooks
- CVE-2026-110633MyReport Updater through 2.1.1 Local Privilege Escalation via Updater ServiceReport One MyReport Updater
- CVE-2026-110630VentureDrake Laravel CRM before 2.4.0 Privilege Escalation via Unscoped Role Assignmentventuredrake laravel-crm
- CVE-2026-110629VentureDrake Laravel CRM before 2.4.0 Missing Authorization via Livewire Actionsventuredrake laravel-crm
- CVE-2026-110623Papermerge Core through 3.5.3 Missing Authorization in Shared Nodes APIpapermerge-core
- CVE-2026-110622Papermerge Core through 3.5.3 Missing Authorization in Page Management and OCR Endpointspapermerge-core
- CVE-2026-110621Swetrix Cloud before 5.1.0 Missing Authorization via POST /project/organisation/:orgIdswetrix
- CVE-2026-110618SmsForwarder through 3.5.0 Missing Authentication in HTTP Server Remote Control APIpppscn SmsForwarder
- CVE-2026-110615jshERP through 3.6 Missing Authorization via /user/batchSetStatusjishenghua jshERP
- CVE-2026-110614Yiuman citrus through 0.15.0 ORDER BY SQL Injection via sortBy ParameterYiuman citrus
- CVE-2026-110613youlai-mall through commit 9f62de8 Order Information Disclosure via App Order Listyoulaitech youlai-mall
- CVE-2026-110609Dromara Skyeye through commit 65d3ddcede70 SQL Injection via keyword Parameterdromara skyeye
- CVE-2026-110607BizSpring Shop through commit cf22d39daaf1 Payment Bypass via test_post_pay EndpointBizSpring Shop · BizSpring Java Mall
- CVE-2025-71433Kaneo before 2.1.6 Missing Authorization Allows Cross-Workspace Data Accessusekaneo kaneo
- CVE-2017-20286DevIL through 1.8.0 Heap Buffer Overflow via GIF iGetPaletteDentonW DevIL
- CVE-2026-107870WordPress JetEngine plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetEngine
- CVE-2026-110690Cloud Commander 19.20.2 through 19.21.1 Path Traversal via GET /api/v1/packcoderaiser cloudcmd
- CVE-2026-98419drop_monitor: fix out-of-bounds write in reset_per_cpu_data()Linux
- CVE-2026-98405smb: client: fix missing iov bounds check in parse_posix_sids()Linux
- CVE-2026-98401net: iptunnel: fix stale transport header during tunnel decapsulationLinux
- CVE-2026-107426WordPress Paid Videochat Turnkey Site plugin <= 7.5.12 - Broken Access Control vulnerabilityVideoWhisper.com Paid Videochat Turnkey Site
- CVE-2026-82026Radar < 1.12.2 Missing Authorization via /api/local-terminalskyhook-io radar
- CVE-2026-107867WordPress JetProductTables plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetProductTables
- CVE-2026-107421WordPress Broadcast Live Video plugin <= 7.3.2 - Session Hijacking vulnerabilityVideoWhisper.com Broadcast Live Video
- CVE-2026-105874WordPress SureCart plugin <= 4.9.3 - Cross Site Scripting (XSS) vulnerabilityBrainstorm Force SureCart
- CVE-2026-106599WordPress SureCart plugin <= 4.9.3 - PHP Object Injection vulnerabilityBrainstorm Force SureCart
- CVE-2026-97278WordPress Polylang plugin <= 3.8.9 - PHP Object Injection vulnerabilityWP SYNTEX Polylang
- CVE-2026-76655HPE NonStop SNMP Trap Multiplexer - Buffer Overflow vulnerabilityHewlett Packard Enterprise HPE NonStop SNMP Trap Multiplexer
- CVE-2026-73798HPE NonStop DNS 9.2.3 Non Secure VersionHewlett Packard Enterprise HPE NonStop DNS 9.2.3 Non Secure…
- CVE-2026-85298Improper Authorization in Google Cloud Application Integration Leads to Privilege EscalationGoogle Cloud Application Integration
- CVE-2026-108071Improper Multi-Factor Authentication Validation Allows Authentication BypassTSplus Remote Access
- CVE-2026-105067WordPress Modern Events Calendar Lite plugin < 7.37.0 - SQL Injection vulnerabilityWebnus Modern Events Calendar Lite
- CVE-2026-103358WordPress Email Template Customizer for WooCommerce plugin <= 1.3.4 - Content Injection vulnerabilityVillaTheme Email Template Customizer for WooCommerce
- CVE-2026-107431WordPress JetFormBuilder plugin <= 3.6.6 - Broken Access Control vulnerabilityCrocoblock JetFormBuilder
- CVE-2026-101341Stack overwrite from specially formatted TXT-DATA RDATA fieldNLnet Labs NSD
- CVE-2026-101339Stack overwrite from a specially crafted and formatted HIP RRNLnet Labs NSD
- CVE-2026-101338Stack overwrite from a specially crafted and formatted SVCB or HTTPS RRNLnet Labs NSD
- CVE-2026-101337Stack overwrite from specially formatted base64 RDATA fieldNLnet Labs NSD
- CVE-2026-104795Insights-runtime-extractor: insights-runtime-extractor: container escape via privileged binary executionRed Hat OpenShift Container Platform
- CVE-2026-108070Improper Access Control Allows Unauthorized Access to Protected Internal Web Resources in TSplus Remote AccessTSplus Remote Access
- CVE-2026-103905Unauthenticated Plugin Safe Mode Toggle Vulnerability in JTL-ShopJTL-Software JTL-Shop
- CVE-2026-103904Stored XSS Vulnerability in JTL-ShopJTL-Software JTL-Shop
- CVE-2026-88829Busybox: busybox: http request smuggling via pipelined requests in httpd reverse proxyRed Hat Hardened Images
- CVE-2026-90954Busybox: busybox: dpkg-deb extraction-root escape via per-ar-member deferred symlink flushRed Hat Hardened Images
- CVE-2026-86476Gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated gstvideometa plane extents in gst_video_frame_map_id and video_meta_deserializeRed Hat Enterprise Linux
- CVE-2026-73793HPE NonStop Middleware - Secret key handling vulnerabilityHewlett Packard Enterprise HPE NonStop Middleware
- CVE-2026-73790HPE NonStop iTP WebServer - Memory corruption vulnerabilityHewlett Packard Enterprise HPE NonStop iTP WebServer
- CVE-2026-107428WordPress Paid Videochat Turnkey Site plugin <= 7.5.12 - Cross Site Scripting (XSS) vulnerabilityVideoWhisper.com Paid Videochat Turnkey Site
- CVE-2026-92392HTTP/2 upload Use-After-Freecurl
- CVE-2026-104909Mang Board <= 2.4.3 - Unauthenticated Local File Inclusion via '<mode>_type' Parameterkitae-park Mang Board
- CVE-2026-104764Post Export Import with Media <= 1.17.1 - Authenticated (Administrator+) PHP Object Injection via 'page_data[meta]' Parameterwpazleen Post Export Import with Media
- CVE-2026-107631Record of Consent Extension for Complianz <= 2.5 - Unauthenticated Stored Cross-Site Scripting via 'uid' Parameterdavidevalerio Record of Consent Extension for Complianz
- CVE-2026-107751Mang Board <= 2.4.3 - Unauthenticated Stored Cross-Site Scripting via 'user_name' Parameterkitae-park Mang Board
- CVE-2026-110284LifterLMS <= 10.3.1 - Authenticated (Contributor+) Local File Inclusion via 'lifterlms_checkout' Shortcode AttributesLifterLMS – WP LMS for eLearning, Online Courses, & Quizzes
- CVE-2026-103367ShopMagic <= 4.9.0 - Unauthenticated Local File Inclusion via 'billing.first_name' Parameterwpdesk ShopMagic – email automation for WordPress
- CVE-2026-103366Appointment Booking Plugin <= 5.7.3 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'booking[id]' and 'cart[id]' ParametersAppointment Booking Plugin – LatePoint | Calendar & Schedul…
- CVE-2026-100163Appointment Booking Plugin <= 5.7.2 - Unauthenticated Authentication Bypass to Customer Account Takeover via Insufficient Verification in create_wp_user_for_customer() username_exists FallbackAppointment Booking Plugin – LatePoint | Calendar & Schedul…
- CVE-2026-105107Koha SQL injection in reports/cat_issues_top.pl via the Criteria, Filter and Limit request parametersKoha Community Koha
- CVE-2026-105106Koha authenticated OS command injection in tools/scheduler.pl via the jobid parameter when deleting a scheduled taskKoha Community Koha
- CVE-2026-109901WordPress CP Multi View Event Calendar plugin <= 1.4.41 - SQL Injection vulnerabilityCodepeople CP Multi View Event Calendar
- CVE-2026-89288Fast Courier 5.0.0 - 5.2.3 - Unauthenticated SQLi via 'wp_order_id' ParameterFast Courier
- CVE-2026-86799Forms < 3.0.2 - Unauthenticated Stored XSS via Form SubmissionForms
- CVE-2026-86787Affiliate Toolkit 3.8.7 - 3.9.0 - Contributor+ RCE via BladeOne @php Directiveaffiliate-toolkit
- CVE-2026-107508Ultimate Multisite < 2.17.2 - Unauthenticated LFI via 'attributes' ParameterUltimate Multisite
- CVE-2026-107126WP Booking System < 2.1.0.1 - Unauthenticated Stored XSS via X-Forwarded-For HeaderWP Booking System
- CVE-2026-103307Walletdoc Payment Gateway for WooCommerce < 1.8.5 - Unauthenticated SQLi and Order Payment Forgery via WebhookWalletdoc Payment Gateway for WooCommerce
- CVE-2026-110459A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to obtain Ubiquiti UniFi Protect AI Key
- CVE-2026-110455A malicious actor with access to the network and under certain conditions could exploit an Improper Input Validation vulnerability found in Ubiquiti UniFi Protect AI Key
- CVE-2026-106931SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with…EG Secure Solutions SiteGuard Server Edition for Apache… +1
- CVE-2026-105429NetBird client SSH config Match line injection via peer FQDN or hostname allows local command executionNetBird
- CVE-2026-101924NewStatPress <= 1.4.5 - Unauthenticated Stored Cross-Site Scripting via 'urlrequested' Attribute via Query Stringice00 NewStatPress
- CVE-2026-110450Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it could destroy and then replace a store NixOS Nix
- CVE-2026-110449Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions becNixOS Nix
- CVE-2026-100153NewStatPress <= 1.4.5 - Unauthenticated Stored Cross-Site Scripting via URL Request Tracking (urlrequested field)ice00 NewStatPress
- CVE-2026-97398FV Flowplayer Video Player <= 7.5.54.7212 - Unauthenticated Stored Cross-Site Scripting via 'synopsis' Shortcode Attributefoliovision FV Flowplayer Video Player
- CVE-2026-95808Form Maker by 10Web <= 1.15.48 - Unauthenticated SQL Injection via 'inputs' ParameterForm Maker by 10Web – Mobile-Friendly Drag & Drop Contact F…
- CVE-2026-83592Contact Form DB for Enfold <= 2.0.2 - Unauthenticated Stored Cross-Site Scripting via Contact Form Field Valuesdoctorwp Contact Form DB for Enfold
- CVE-2026-95816Smart Forms <= 2.6.104 - Unauthenticated Stored Cross-Site Scripting via 'formString' Parameteredgarrojas Smart Forms – when you need more than just a con…
- CVE-2026-78193JTL-Connector for WooCommerce <= 2.4.3 - Unauthenticated SQL Injectionntbyk JTL-Connector for WooCommerce
- CVE-2026-94377Verified Reviews (Avis Vérifiés) <= 2.4.6 - Unauthenticated Stored Cross-Site Scripting via 'moderation' Parameter (discussion.commentaire)avisverifies Verified Reviews
- CVE-2026-93885Cryptocurrency Donation Box <= 2.2.13 - Unauthenticated Stored Cross-Site Scripting via data_object Parameterblackworks1 Cryptocurrency Donation Box – Bitcoin & Crypto…
- CVE-2026-77114Document Gallery <= 5.1.1 - Unauthenticated Stored Cross-Site Scriptingdanrossiter Document Gallery
- CVE-2026-96661Gmedia Photo Gallery <= 1.25.1 - Unauthenticated SQL Injection via 'gmedia__in' Parameterpasyuk Gmedia Photo Gallery
- CVE-2026-110445TEAMPLUS TECHNOLOGY｜TeamPlus Messenger - Code InjectionTEAMPLUS TECHNOLOGY TeamPlus Messenger
- CVE-2026-110444TEAMPLUS TECHNOLOGY｜TeamPlus Messenger - Code InjectionTEAMPLUS TECHNOLOGY TeamPlus Messenger
- CVE-2026-14765Epic Games Unreal Engine Insecure Default URL Scheme Allowance in LaunchURLEpic Games Unreal Engine
- CVE-2026-103422AnyComment <= 0.3.6 - Unauthenticated Stored Cross-Site Scripting via 'email' Parameterateshabaev AnyComment
- CVE-2026-102251Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated SQL Injection via AES-CTR Ciphertext Forgery in 'validate' ParameterTyche Softwares Abandoned Cart Pro for WooCommerce
- CVE-2026-82715Insecure Temporary File Vulnerability in Hitachi Disk Array Driver for AIX, Hitachi Disk Array Driver for Virtual I/O ServerHitachi Disk Array Driver for AIX · Hitachi Disk Array Driv…
- CVE-2026-17092Directorist: AI-Powered Business Directory, Listings & Classified Ads <= 8.10.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Listing Deletion via 'listing_id' Parameterwpwax Directorist: AI-Powered Business Directory, Listings…
- CVE-2026-104995BP Profile Search <= 5.9 - Unauthenticated Local File Inclusion to Remote Code Execution via 'bps_directory' Cookie 'ajax_template' Valuedontdream BP Profile Search
- CVE-2026-104767Membership & User Roles for WooCommerce (Automatic Role Changer) <= 20260828 - Authenticated (Subscriber+) Privilege Escalation to Stale Foreign Role Cachedavefx Membership & User Roles for WooCommerce
- CVE-2026-104749Bit integrations <= 2.10.6 - Unauthenticated Privilege Escalation via Identity-Confused Log Re-execution to Account Takeover via Log Re-execution of Anonymous-Captured Field Databitpressadmin Bit integrations – Form Integration, Webhook,…
- CVE-2026-103423Booking Package <= 1.7.29 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'mode=sendBooking' with nonexistent 'timeKey' and 'public=0'masaakitanaka Booking Package
- CVE-2026-110385A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows an authenticated attacker with a valid InboONLYOFFICE Document Server
- CVE-2026-110359Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation.Hyland Desktop Host
- CVE-2026-108473Improper Authentication and Credential Exposure in Multiple TP-Link Kasa DevicesTP-Link Systems HS103 · TP-Link Systems EP10 +22
- CVE-2026-50218Akamai GPA (Guardicore Platform Agent) client on all platforms before 7.4 improperly validates JWT tokens used for seeding.Akamai Guardicore Platform Agent
Medium, low and unrated 421
- CVE-2026-110809sgl-project SGLang Session Cleanup session_controller.py Session.create_req denial of servicesgl-project SGLang
- CVE-2026-110807sgl-project SGLang generate Endpoint io_struct.py denial of servicesgl-project SGLang
- CVE-2026-110870Nodemailer before 10.0.13 Improper Input Validation via Angle-Bracket Address Commentsnodemailer
- CVE-2026-110866Renovate before 44.61.3 minimumReleaseAge Bypass via PR Rebase Requestrenovatebot renovate · mend renovate-ce +4
- CVE-2026-110861Better Auth drizzle-adapter 1.6.17 before 1.7.7 Rate Limit Bypass via Race Conditionbetter-auth drizzle-adapter · better-auth kysely-adapter +3
- CVE-2026-110860GitPython 3.1.62 before 3.2.0 Symlink Path Traversal via Submodule.move()gitpython-developers GitPython · gitpython
- CVE-2026-110852n8n before 1.123.83, 2.41.4, and 2.42.1 Unauthenticated Workflow Execution via Dynamic-Path Webhook Resolutionn8n-io n8n
- CVE-2026-110851n8n before 2.41.4 and 2.42.1 Cross-Project Agent Ownership Transfer via Agents Create Endpointn8n-io n8n
- CVE-2026-110848n8n before 1.123.83, 2.41.4, and 2.42.1 Prototype Pollution via AI Workflow Builder Connection Mergen8n-io n8n
- CVE-2026-110841n8n before 2.41.4 and 2.42.0 Authorization Bypass in Agent Chat Resume Tool Approvaln8n-io n8n
- CVE-2026-110837FreeRDP 2.0.0 before 3.32.0 Heap Buffer Overflow via MP3 Audio DecodingFreeRDP
- CVE-2026-110835FreeRDP 3.0.0 before 3.32.0 HTTP Header Injection via Proxy Routing TokenFreeRDP
- CVE-2026-110831FreeRDP 3.13.0 before 3.32.0 Resource Leak via Drive Redirection IRP_MJ_CREATEFreeRDP
- CVE-2026-110816qs.stringify with arrayFormat comma throws TypeError on array elements that cannot be coerced to a stringljharb qs · qs
- CVE-2026-110698Praat Model Loader whisper.cpp whisper_model_load out-of-bounds writePraat
- CVE-2026-110696itsmeravitejak Online-Examination-System dbtables.sql information disclosureitsmeravitejak Online-Examination-System
- CVE-2026-110695turboderp ExLlamaV2 Safetensors Tensor Loader stloader.py STFile.get_tensor buffer overflowturboderp ExLlamaV2
- CVE-2026-110694OAID Tengine tmfile Model Loader tm2_serializer.c get_tm_file_model out-of-boundsOAID Tengine
- CVE-2026-110689OpenClaw ClawScan Static Scanner runner.go shouldSkipTargetPath protection mechanismOpenClaw ClawScan
- CVE-2026-104109FileRise: Authenticated ZIP extraction follows a pre-existing symlink and deletes files outside the storage rooterror311 FileRise
- CVE-2026-104107FileRise: Authenticated path traversal escapes configured storage root through inherited ACLserror311 FileRise
- CVE-2026-104110FileRise: Unauthenticated disclosure of internal folder path, client email, and upload policy for FileRise Pro client portals via /api/pro/portals/get.phperror311 FileRise
- CVE-2026-104105FileRise: TOTP codes are not single-use — valid 6-digit code can be replayed within its window (capture-replay)error311 FileRise
- CVE-2026-104106FileRise: 2FA disable and TOTP enrollment lack step-up re-authentication; enrollment activates before verificationerror311 FileRise
- CVE-2026-103988FileRise renameFolder omits destination-parent authorizationerror311 FileRise
- CVE-2026-69193FileRise: Rate Limiting Bypass via Username Rotation Enables Unlimited Password Sprayingerror311 FileRise
- CVE-2026-69191FileRise: Login Method Restriction Bypass via Direct API Accesserror311 FileRise
- CVE-2026-77427FileRise: Insecure default cryptographic key fallback in manual installserror311 FileRise
- CVE-2026-69194FileRise: Unsanitized footerHtml in Public Site Configerror311 FileRise
- CVE-2026-110679OpenSIPS rtpproxy rtpproxy_answer out-of-boundsOpenSIPS
- CVE-2026-0311Checkov by Prisma Cloud: Server-Side Request Forgery VulnerabilityPalo Alto Networks Checkov by Prisma Cloud
- CVE-2026-0312Checkov by Prisma Cloud: Path Traversal VulnerabilitiesPalo Alto Networks Checkov by Prisma Cloud
- CVE-2026-0313Cortex XSOAR: OS Command Injection VulnerabilityPalo Alto Networks Cortex XSOAR OS Query · Palo Alto Networ…
- CVE-2026-64856FileRise: Missing Authentication Guard on File Snippet Preview Endpointerror311 FileRise
- CVE-2026-0314GlobalProtect App: Local Denial of Service (DoS) on WindowsPalo Alto Networks GlobalProtect App
- CVE-2026-62664FileRise: Authenticated path traversal in createFolder allows arbitrary directory creation outside the upload rooterror311 FileRise
- CVE-2026-0315GlobalProtect App: Local Privilege Escalation Vulnerability on macOSPalo Alto Networks GlobalProtect App
- CVE-2026-0316PAN-OS: Stored Cross-Site Scripting (XSS) VulnerabilityPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-57493FileRise: Remember-me auto-login uses stale admin role from token instead of current roleerror311 FileRise
- CVE-2026-0317PAN-OS: Denial of Service VulnerabilityPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0318PAN-OS: Denial of Service (DoS) on PanoramaPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-57491FileRise: ZIP extraction writes blocked file extensions to disk, bypassing the upload blocklisterror311 FileRise
- CVE-2026-0319PAN-OS: Improper Input Handling VulnerabilityPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-110670cemtan sar2html Archive Processing sar2html.py updateDb sql injectioncemtan sar2html
- CVE-2026-0320PAN-OS: Authenticated Admin Command Injection VulnerabilityPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0321PAN-OS: Denial of Service (DoS) Vulnerabilities in Network ServicesPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-55498FileRise Shared Folder Symlink Escapeerror311 FileRise
- CVE-2026-110669cemtan sar2html sar2html.py deleteAll missing authenticationcemtan sar2html
- CVE-2026-55679WeGIA: Pre-auth Installer Injection Chain Enables Command Execution and Arbitrary PHP Code InjectionLabRedesCefetRJ WeGIA
- CVE-2026-110310RSA PKCS#1 v1.5 padding oracle via legacy envelope key format downgrade in Amazon S3 Encryption Client for .NETAmazon.Extensions.S3.Encryption
- CVE-2026-102980Plane: Cross-Project Page Content Disclosure via PageVersionEndpoint Missing Project Scopemakeplane plane
- CVE-2026-102985Plane: Any project member can modify (deactivate) other members' recordsmakeplane plane
- CVE-2026-110668cemtan sar2html sar2html.py index sql injectioncemtan sar2html
- CVE-2026-55385InvoiceShelf: SSRF via unvalidated Gotenberg PDF renderer host in PDF configurationInvoiceShelf
- CVE-2026-55384InvoiceShelf trusts client-supplied document totalsInvoiceShelf
- CVE-2026-54701Markdown Preview Enhanced: Stored XSS via Unsanitized `.crossnote/head.html` Injection in Webviewshd101wyy vscode-markdown-preview-enhanced
- CVE-2026-54703Markdown Preview Enhanced: Arbitrary File Write via updateMarkdown Command Without Path Validationshd101wyy vscode-markdown-preview-enhanced
- CVE-2026-110667cemtan sar2html sar2html.py hard-coded credentialscemtan sar2html
- CVE-2026-102354BentoPDF: SSRF via DNS Rebinding (TOCTOU) in Cloudflare CORS Proxy Workeralam00000 bentopdf
- CVE-2026-102471CRLF header injection in vertx-mail-client allows manipulation of outgoing SMTP messagesEclipse Foundation Eclipse Vert.x
- CVE-2026-82402Gogs: Open Redirect in /redirect endpoint via backslash bypass in `IsSameSite`gogs
- CVE-2026-110774Blinko through 1.8.8 Private Attachment Read via /api/file Routeblinkospace blinko
- CVE-2026-110773GrowChief through 0.3.0 Missing Authorization via /users/all-users Endpointgrowchief
- CVE-2026-110772Sure 0.7.0 through 0.7.6-alpha.6 Missing Authorization via Transaction Bulk Updatewe-promise sure
- CVE-2026-110771Shopizer through 3.2.5 Authorization Bypass via Product Review customerIdShopizer
- CVE-2026-110768holaOS through 2026.822.1 Authorization Bypass via Telegram Connector Username Allowlistholaboss-ai holaOS
- CVE-2026-110766Colanode Server through 0.4.7 Path Traversal via Avatar Download Routecolanode
- CVE-2026-110764AstronRPA through 1.1.6 Cross-Tenant File Disclosure via /file/downloadiflytek astron-rpa
- CVE-2026-110763lamp-boot 4.16.0-java17 through 4.21.2-java17 IDOR via /anyone/findDeptByCompanyzuihou lamp-boot
- CVE-2026-110762bbPress before 2.6.19 Information Disclosure via BuddyPress Activity StreambbPress
- CVE-2026-102755DataEase Datasource/Dataset Folder Name Stored Cross-Site Scriptingdataease
- CVE-2026-110666cemtan sar2html File Upload sar2html.py updateDb path traversalcemtan sar2html
- CVE-2026-102756DataEase bar-horizontal Axis Label Tooltip Stored Cross-Site Scriptingdataease
- CVE-2026-82153Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive Information vulnerability.Dell OS Recovery Tool
- CVE-2026-110248Insertion of sensitive information into log files in Amazon SageMaker Python SDK git_utils[.]pyAWS SageMaker Python SDK
- CVE-2026-109506Improper Authentication in Multiple TP-Link WiFi RepeatersTP-Link Systems RE190 · TP-Link Systems RE200 +13
- CVE-2026-102682Pipecat: Public exposure of Pipecat’s development runner can allow unauthenticated bot session creationpipecat-ai pipecat · pipecat-ai
- CVE-2026-55167LDAP Account Manager: WebAuthn authentication challenge is kept in the PHP sessionLDAPAccountManager lam
- CVE-2026-103930cpp-httplib open_stream serializes CRLF in request target into HTTP request lineyhirose cpp-httplib
- CVE-2026-103974lichess.org: Stored HTML Injection via PGN Annotator Tag in Studieslichess-org lila
- CVE-2026-103975Appium: Symlink based Zip Slip in @appium/support ZIP extractionappium · @appium/support
- CVE-2026-108151WordPress MDTF plugin <= 1.3.9 - Arbitrary Code Execution vulnerabilityPluginUs.Net MDTF
- CVE-2026-110777Evolution-data-server: local file disclosure via attach file:// urisGNOME evolution-data-server · Red Hat Enterprise Linux
- CVE-2026-76083Redash: JSON data source query URL can bypass base URL restrictiongetredash redash
- CVE-2026-86849Dpdk: dpdk: integer overflow combined with missing validation leads to host buffer overflow in vhost-cryptoRed Hat Fast Datapath for RHEL · Red Hat Enterprise Linux +2
- CVE-2026-86856Dpdk: dpdk: stack and heap buffer overflow in nfp vdpa driverRed Hat Fast Datapath for RHEL · Red Hat Enterprise Linux +2
- CVE-2026-86847Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanupRed Hat Fast Datapath for RHEL · Red Hat Enterprise Linux +2
- CVE-2026-86846Dpdk: dpdk: guest can trigger out-of-bounds write by controlling avail ring index in vhost-cryptoRed Hat Fast Datapath for RHEL · Red Hat Enterprise Linux +2
- CVE-2026-86845Dpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanupRed Hat Fast Datapath for RHEL · Red Hat Enterprise Linux +2
- CVE-2026-86566Dpdk: dpdk: guest with runt rx descriptors underflows copy length in vhost enqueue (split and packed rings)Red Hat Fast Datapath for RHEL · Red Hat Enterprise Linux +2
- CVE-2026-107348Integer overflow causes an infinite loop in message buffer growth in PgBouncerPgBouncer
- CVE-2026-92160F´: SendPartial Integer Overflow Leading to Assertion DoSnasa fprime
- CVE-2026-101964Junos OS and Junos OS Evolved: An attacker can cause an rpd crash via a crafted LDP messageJuniper Networks Junos OS
- CVE-2026-101959Junos OS and Junos OS Evolved: A malformed LSP-ping causes an rpd crashJuniper Networks Junos OS
- CVE-2026-101975Junos OS and Junos OS Evolved: Improper OSPF LSA validation causes an rpd crash when prefix-SID best-route installation is usedJuniper Networks Junos OS
- CVE-2026-101972Junos OS and Junos OS Evolved: Malformed OSPF packets causes routing disruption when OSPF is enabledJuniper Networks Junos OS
- CVE-2026-92159F´: TlmPacketizer copies oversized telemetry past configured channel slots and emits corrupted packetized telemetrynasa fprime
- CVE-2026-92156F´: EventManager asserts on legal oversized LogBuffer values delivered over the standard GenericHub event bridgenasa fprime
- CVE-2026-92157F´: FileDownlink SendPartial integer overflow lets legal startOffset/length values reach a reachable assertionnasa fprime
- CVE-2026-96596erl_tar:extract/2 loops forever on a GNU sparse member with a trailing holeerlang rebar3 · hexpm hex_core +3
- CVE-2026-105236TLS 1.2 session resumption in ssl crosses SNI virtual-host client-certificate trust boundariesErlang OTP
- CVE-2026-102060Junos OS and Junos OS Evolved: MX Series, ACX Series: An attacker causes a routing daemon crash when multicast lawful intercept is usedJuniper Networks Junos OS
- CVE-2026-102058Junos OS and Junos OS Evolved: An attacker causes a bfdd denial of service when BFD is enabledJuniper Networks Junos OS
- CVE-2026-102054Junos OS and Junos OS Evolved: Insufficient validation of VXLAN overlay ping causes information disclosure when EVPN-VXLAN is configuredJuniper Networks Junos OS
- CVE-2026-102053Junos OS and Junos OS Evolved: An EVPN-VXLAN memory leak causes denial of service when active-active multihoming is usedJuniper Networks Junos OS
- CVE-2026-102051Junos OS and Junos OS Evolved: An attacker causes l2cpd memory exhaustion when LLDP fast receive processing is enabledJuniper Networks Junos OS
- CVE-2026-102048Junos OS: An attacker causes l2cpd crash when FNP is used with VLAN-VPLS encapsulation enabledJuniper Networks Junos OS
- CVE-2026-102047Junos OS and Junos OS Evolved: An attacker causes l2cpd denial of service when MVRP is usedJuniper Networks Junos OS
- CVE-2026-102045Junos OS Evolved: An crafted LACP frame causes lacpd to crash when LACP is enabledJuniper Networks Junos OS Evolved
- CVE-2026-102043Junos OS and Junos OS Evolved: An attacker causes a routing-process crash when MPLS-TE fast reroute is enabledJuniper Networks Junos OS
- CVE-2026-102042Junos OS and Junos OS Evolved: An attacker causes rpd to crash when RSVP associated-bidirectional LSP is enabledJuniper Networks Junos OS
- CVE-2026-102041Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when RSVP is enabledJuniper Networks Junos OS
- CVE-2026-102040Junos OS and Junos OS Evolved: An attacker crashes the routing daemon when co-routed bidirectional RSVP LSPs are usedJuniper Networks Junos OS
- CVE-2026-102039Junos OS and Junos OS Evolved: An attacker causes routing-process denial of service when GMPLS EVPL dynamic transport is usedJuniper Networks Junos OS
- CVE-2026-102035Junos OS and Junos OS Evolved: An attacker causes a denial of service when MC-LAG IRB MAC synchronization is enabledJuniper Networks Junos OS
- CVE-2026-102034Junos OS and Junos OS Evolved: An attacker causes l2ald to restart when MC-LAG ICCP MAC synchronization is enabledJuniper Networks Junos OS
- CVE-2026-102033Junos OS and Junos OS Evolved: An attacker causes denial of service when MC-LAG MAC synchronization is enabledJuniper Networks Junos OS
- CVE-2026-102032Junos OS and Junos OS Evolved: Unintended l2ald memory allocation causes a denial of service when static MAC IP configurations are presentJuniper Networks Junos OS
- CVE-2026-102021Junos OS and Junos OS Evolved: Malformed RSVP packet causes rpd crash when MPLS-TE error processing is enabledJuniper Networks Junos OS
- CVE-2026-102019Junos OS and Junos OS Evolved: Malformed RIPv2 messages cause routing service disruption when RIP is enabledJuniper Networks Junos OS
- CVE-2026-102018Junos OS and Junos OS Evolved: Malformed PIM Bidir DF-Election messages cause routing service disruption when bidirectional PIM is enabledJuniper Networks Junos OS
- CVE-2026-75085Out-of-bounds read from received-frame length underflow in the STM32WBA IEEE 802.15.4 driverzephyrproject zephyr
- CVE-2026-75084Out-of-bounds write in the TI CC1200 IEEE 802.15.4 driver from an unvalidated radio-supplied packet lengthzephyrproject zephyr
- CVE-2026-75083Integer underflow of the radio-reported frame length causes an out-of-bounds write in the NXP KW41Z IEEE 802.15.4 driverzephyrproject zephyr
- CVE-2026-102017Junos OS and Junos OS Evolved: An attacker causes routing-plane denial of service when Auto-RP mapping is enabledJuniper Networks Junos OS
- CVE-2026-102013Junos OS and Junos OS Evolved: An attacker causes na-grpcd to crash when the InitialSync service is usedJuniper Networks Junos OS
- CVE-2026-102011Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP link protection is enabledJuniper Networks Junos OS
- CVE-2026-102000Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabledJuniper Networks Junos OS
- CVE-2026-101999Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabledJuniper Networks Junos OS
- CVE-2026-101971Junos OS and Junos OS Evolved: An attacker causes routing protocol daemon crash when OSPFv3 is enabledJuniper Networks Junos OS
- CVE-2026-101970Junos OS and Junos OS Evolved: Specific PIM messages causes rpd crash when multiple-triggered-joins is usedJuniper Networks Junos OS
- CVE-2026-101969Junos OS and Junos OS Evolved: An unauthenticated attacker causes rpd denial of service when IPv6 PIM is enabledJuniper Networks Junos OS
- CVE-2026-101968Junos OS and Junos OS Evolved: EX Series, MX Series, ACX Series: An attacker causes rpd heap memory disclosure when Rosen-MVPN data-MDT is enabledJuniper Networks Junos OS
- CVE-2026-101946Junos OS and Junos OS Evolved: An attacker causes rpd process memory disclosure when IPv6 LDP is usedJuniper Networks Junos OS
- CVE-2026-101938Junos OS and Junos OS Evolved: SRX Series: An attacker causes a forwarding-plane outage when SVR vector routing is usedJuniper Networks Junos OS
- CVE-2026-101937Junos OS: SRX Series: An attacker causes data-plane denial of service when chassis-cluster high availability is usedJuniper Networks Junos OS
- CVE-2026-101936Junos OS: SRX Series: An attacker causes data-plane denial of service when chassis-cluster high availability is enabledJuniper Networks Junos OS
- CVE-2026-101934Junos OS and Junos OS Evolved: An attacker causes Denial of Service in eventdJuniper Networks Junos OS
- CVE-2026-101984Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when labeled-unicast aggregate-label is configuredJuniper Networks Junos OS
- CVE-2026-101987Junos OS and Junos OS Evolved: A specific IS-IS SRv6 packet causes an rpd crash when flexible algorithm is usedJuniper Networks Junos OS
- CVE-2026-101988Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker causes an rpd crash when LDP is enabledJuniper Networks Junos OS
- CVE-2026-101989Junos OS and Junos OS Evolved: An crafted LDP message causes an rpd crash when LDP is enabledJuniper Networks Junos OS
- CVE-2026-101992Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when automatic VPLS site ID is usedJuniper Networks Junos OS
- CVE-2026-101993Junos OS and Junos OS Evolved: An eBGP peer causes an rpd crash when VPLS automatic site-ID collision resolution is usedJuniper Networks Junos OS
- CVE-2026-101996Junos OS and Junos OS Evolved: An inconsistent ICCP peer message causes an l2ald crash when MC-LAG is configuredJuniper Networks Junos OS
- CVE-2016-15060PCMan FTP Server PORT buffer overflowPCMan FTP Server
- CVE-2026-102066Junos OS and Junos OS Evolved: Malformed RSVP packet causes a rpd crash when RSVP is enabledJuniper Networks Junos OS
- CVE-2026-102071Junos OS and Junos OS Evolved: Specific RSVP packet causes an rpd crash when associated bidirectional LSP is enabledJuniper Networks Junos OS
- CVE-2026-102078Junos OS: SRX Series: A high volume of DNS traffic over TCP can lead to a flowd crashJuniper Networks Junos OS
- CVE-2026-102080Junos OS: MX Series: Malformed SyncE or PTP clock input causes continuous RE switchoverJuniper Networks Junos OS
- CVE-2026-102082Junos OS: SRX Series: If TLS session resumption is configured and a specific TLS message is received a PFE crash occursJuniper Networks Junos OS
- CVE-2026-93637Zimbra Collaboration Suite GraphQL Batched Authentication Bypasses Pre-Auth Rate LimitingZimbra Collaboration Suite
- CVE-2026-102083Junos OS: SRX Series: With WebFiltering enabled prolonged HTTP session load can cause a crashJuniper Networks Junos OS
- CVE-2026-93635Zimbra Collaboration Suite LDAP Filter Injection via Unescaped computeDn() Template SubstitutionZimbra Collaboration Suite
- CVE-2026-102085Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attackerJuniper Networks Junos OS Evolved
- CVE-2026-102086Junos OS: SRX Series: Multiple DNS queries processed by SecIntel and DGA in the same session cause a flowd crashJuniper Networks Junos OS
- CVE-2026-102087Junos OS and Junos OS Evolved: If in a traffic engineering scenario a specific valid BGP-LS attribute is received rpd crashesJuniper Networks Junos OS
- CVE-2026-103993Junos OS and Junos OS Evolved: If a specific set of BGP communities is present and graceful-shutdown sender is added while attempting to advertise rpd crashesJuniper Networks Junos OS
- CVE-2026-59951MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource Exhaustionmodelcontextprotocol python-sdk · mcp
- CVE-2026-101991Junos OS and Junos OS Evolved: A BGP-LS peer causes heap data disclosure when traffic-engineering routing is enabledJuniper Networks Junos OS
- CVE-2026-101974Junos OS and Junos OS Evolved: Malformed OSPF packets cause rpd memory disclosure or service disruption when link-local TE processing is usedJuniper Networks Junos OS
- CVE-2026-102067Junos OS and Junos OS Evolved: A specific RSVP packet causes an rpd crash when L2 LSP support is usedJuniper Networks Junos OS
- CVE-2026-101995Junos OS and Junos OS Evolved: Malformed ICCP packets cause l2ald memory disclosure and disruptionJuniper Networks Junos OS
- CVE-2026-102072Junos OS: An authenticated attacker causes a denial of service when the gRPC extension-service is enabledJuniper Networks Junos OS
- CVE-2026-102063Junos OS: MX Series: An unauthenticated network attacker causes an rpd crash when HFRR link protection is usedJuniper Networks Junos OS
- CVE-2026-101960Junos OS Evolved: QFX Series: A BGP peer causes an rpd crash when global load balancing is enabledJuniper Networks Junos OS Evolved
- CVE-2026-101985Junos OS Evolved: PTX Series: An IS-IS peer causes an rpd crash when BIER over IS-IS is enabledJuniper Networks Junos OS Evolved
- CVE-2026-77564Talos Linux: Support bundle does not redact registry credentialssiderolabs talos · github.com/siderolabs/talos
- CVE-2026-67418RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribersrabbitmq-server · rabbitmq
- CVE-2026-67414RabbitMQ AMQP 1.0 parser: amplification memory-exhaustion DoS via zero-width array aggregationrabbitmq-server · rabbitmq
- CVE-2026-67416RabbitMQ: AMQP 1.0 symbolic body descriptor prefix collisions bypass validationrabbitmq-server · rabbitmq
- CVE-2026-1094383proxy 0.9.7 - 1.0.1 Uninitialized Stack Memory Disclosure via SOCKS43proxy
- CVE-2026-110736Godot Engine through 4.7.2 has an out-of-bounds read in the optimized translation loader (core/string/optimized_translation.cpp, OptimizedTrgodotengine Godot Engine
- CVE-2026-100404Zulip: Guests can read new messages in non-subscribed public channelszulip
- CVE-2026-49206rapidcsv: Integer overflow in iterator arithmetic causes out-of-bounds accessd99kris rapidcsv
- CVE-2026-62858YOURLS: Unauthenticated File InclusionYOURLS · yourls/yourls
- CVE-2026-86561Dpdk: dpdk: missing memory size validation before mmap in vhost memory region setupRed Hat Fast Datapath for RHEL · Red Hat Enterprise Linux +2
- CVE-2026-93683Dpdk: dpdk: guest-triggered out-of-bounds walk via vhost indirect descriptor length toctouRed Hat Fast Datapath for RHEL · Red Hat Enterprise Linux +2
- CVE-2026-110735Godot Engine through 4.7.2 has a heap out-of-bounds write in the binary resource loader (core/io/resource_format_binary.cpp, ResourceLoaderBgodotengine Godot Engine
- CVE-2026-100394Nezha Monitoring: Whole-instance DoS in Nezha dashboard: a member can crash the process for every tenantnezhahq nezha · github.com/nezhahq/nezha
- CVE-2026-110734Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR (.hdr) image decoder (modules/hdr/image_loader_hdr.cpp).godotengine Godot Engine
- CVE-2026-77572VeraCrypt: Missing authorization on veracrypt.sys IOCTLs exposes disk topology, symlink targets, and DeviceObject reference count to any client of \\.\VeraCryptVeraCrypt
- CVE-2026-91883Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Log File vulnerability inDell Terraform Provider for OME
- CVE-2026-76113Dell Terraform Provider for Redfish, versions 1.1.0 through 1.6.1, contains an Exposure of Sensitive Information to an Unauthorized Actor vuDell Terraform Provider for Redfish
- CVE-2026-101897Angular DevTools (Local DoS)angular
- CVE-2026-110719Portkey AI Gateway 1.14.0 through 1.15.2 SSRF via x-portkey-custom-host HeaderPortkey-AI gateway
- CVE-2026-110717Janus WebRTC Server through 1.4.3 Path Traversal via Record&Play Filenamemeetecho janus-gateway
- CVE-2026-110716unshield through 1.6.2 Heap Out-of-Bounds Read via unshield_get_file_tabletwogood unshield
- CVE-2026-110715MuJS 1.3.6 before 1.3.9 Heap Out-of-Bounds Read/Write via Array.prototype.sortArtifex Software MuJS
- CVE-2026-110661CGNS through 4.5.2 Stack Out-of-Bounds Read via ADFI_read_node_headerCGNS
- CVE-2026-110660vgmstream through r2117 Stack Out-of-Bounds Read via G.722.1/Siren14 Decodervgmstream
- CVE-2026-110659ELFIO through 3.12 NULL Pointer Dereference via relocation_section_accessor get_entryserge1 ELFIO
- CVE-2026-110658Sofia-SIP through 1.13.18 Heap Out-of-Bounds Read via msg_multipart_parsefreeswitch sofia-sip
- CVE-2026-110657Khronos NNEF-Tools nnef through 1.0.10 and nnef-tools through 1.0.11 Path Traversal via Variable LabelKhronos Group nnef · Khronos Group nnef-tools
- CVE-2026-110656miniupnpc through 2.3.3 Heap Out-of-Bounds Read via minixml parseeltminiupnp project miniupnpc
- CVE-2026-110655miniupnpc through 2.3.3 Heap Out-of-Bounds Read via minixml parseattminiupnp project miniupnpc
- CVE-2026-110654libzvbi through 0.2.45 Out-of-Bounds Write via Teletext DRCS convert_drcszapping-vbi libzvbi
- CVE-2026-107381svg-sanitizer: Mixed-case xlink:HrEf skips the `<use>` nesting-DoS check in Resolver::processReferencesdarylldoyle svg-sanitizer · enshrined/svg-sanitize
- CVE-2026-101019NGINX ngx_http_js_module vulnerabilityF5 NGINX JavaScript
- CVE-2026-101025NGINX ngx_http_js_module vulnerabilityF5 NGINX JavaScript
- CVE-2026-95101NGINX ngx_http_v3_module vulnerabilityF5 NGINX Plus · F5 NGINX Open Source
- CVE-2026-96615NGINX Gateway Fabric vulnerabilityF5 NGINX Gateway Fabric
- CVE-2026-97629NGINX ngx_http_ssl_module vulnerabilityF5 NGINX Plus · F5 NGINX Open Source
- CVE-2026-78433Gitea private attachment disclosure through repository mismatchGitea
- CVE-2026-78231Gitea blind SSRF through OpenID assertion verificationGitea
- CVE-2026-73814Gitea repository ownership escalation by administratorsGitea
- CVE-2026-73273Gitea Maven checksum upload quota bypass and memory exhaustionGitea
- CVE-2026-73135Gitea hidden-owner repository listing disclosureGitea
- CVE-2026-73130Gitea repository initialization resource exhaustionGitea
- CVE-2026-73126Gitea private workflow badge token scope bypassGitea
- CVE-2026-71301Gitea private pull request title disclosure through markupGitea
- CVE-2026-70407Gitea organization listing token scope bypassGitea
- CVE-2026-70406Gitea private comparison disclosure with public-only tokensGitea
- CVE-2026-70402Gitea local code execution through writable Git hooksGitea
- CVE-2026-70400Gitea private migration creation with public-only tokensGitea
- CVE-2026-70396Gitea organization repository creation token scope bypassGitea
- CVE-2026-68964Gitea restricted-user SSH and GPG key metadata disclosureGitea
- CVE-2026-68957Gitea restricted-user issue search disclosureGitea
- CVE-2026-67577Gitea restricted-user activity and heatmap disclosureGitea
- CVE-2026-66874Gitea required Actions check bypass through skipped workflowsGitea
- CVE-2026-66853Gitea restricted-user organization metadata disclosureGitea
- CVE-2026-66849Gitea restricted-user package visibility bypassGitea
- CVE-2026-63792Gitea private reusable workflow disclosure to fork runsGitea
- CVE-2026-63021Gitea Swift package manifest memory exhaustionGitea
- CVE-2026-62925Gitea Alpine package parsing memory exhaustionGitea
- CVE-2026-60021Gitea GitLab migration denial of serviceGitea
- CVE-2026-60018Gitea OneDev migration denial of serviceGitea
- CVE-2026-60010Gitea organization team policy bypass through repository APIGitea
- CVE-2026-60008Gitea Jupyter notebook UI redress through CSS class injectionGitea
- CVE-2026-59766Gitea private repository metadata disclosure after access revocationGitea · code.gitea.io/gitea +1
- CVE-2026-25946Gitea OpenID discovery server-side request forgeryGitea
- CVE-2026-110627ClipBucket v5 through 5.5.3-#206 Reflected XSS via add_todo val ParameterMacWarrior clipbucket-v5
- CVE-2026-110626ClipBucket v5 through 5.5.3-#206 Reflected XSS via edit_language in language_settings.phpMacWarrior clipbucket-v5
- CVE-2026-110625ClipBucket v5 through 5.5.3-#206 Reflected XSS via type Parameter in flagged_item.phpMacWarrior clipbucket-v5
- CVE-2026-110624Papermerge Core through 3.5.3 Missing Authorization via /tags/all and /document-types/allpapermerge-core
- CVE-2026-110620Formbricks before 4.9.0 Cross-Organization IDOR in Server Actions via organizationIdformbricks
- CVE-2026-110619frp 0.41.0 through 0.71.1 Missing Authentication for pprof Debug Endpointsfatedier frp
- CVE-2026-110617we-mp-rss through 1.5.3 Missing Authorization via Export File Download Endpointrachelos we-mp-rss
- CVE-2026-110611REBUILD through 4.5.0 Authorization Bypass via aibot2 Chat Endpoints chatidgetrebuild rebuild
- CVE-2026-110610ruoyi-vue-pro through 2026.09 SSRF via Midjourney referImageUrl and notify imageUrlYunaiV ruoyi-vue-pro
- CVE-2026-110608BizSpring Shop through commit cf22d39daaf1 IDOR via /member/order Cancel and ReceiveBizSpring Shop · BizSpring Java Mall
- CVE-2026-110606LibreCAD libdxfrw through LC2.2.0 Stack Out-of-Bounds Read via dwgReader18::readFileHeaderLibreCAD libdxfrw · LibreCAD
- CVE-2026-110605libschrift through 0.10.2 Divide by Zero via unitsPerEm in draw_linetomolt libschrift
- CVE-2026-110604Mini-XML 4.0.0 through 4.0.6 Stack Out-of-Bounds Write via mxml_strtod()Michael R Sweet Mini-XML
- CVE-2026-110603LASzip through 3.5.0 Invalid Free via Truncated VLR Header in laszip_read_headerrapidlasso LASzip
- CVE-2026-110602libmspack through 0.11alpha Uninitialized Pointer Free via kwajd_open Error Pathkyz libmspack
- CVE-2026-110601libsixel before 1.8.7-r1 and 1.9.0 through 1.10.5 Heap Out-of-Bounds Write via GIFsaitoha libsixel
- CVE-2026-110600xlsxio through 0.2.37 NULL Pointer Dereference via Worksheet Relationship Without Idbrechtsanders xlsxio
- CVE-2026-110599L-SMASH through 2.14.5 Double Free in HEVC and H.264 Importer Probel-smash
- CVE-2026-110598Libyal libpff through 20260926 heap out-of-bounds read via libpff_record_entry_get_multi_valuelibyal libpff
- CVE-2026-110597Tinyexr through 3.2.0 Heap Out-of-Bounds Read via ParseEXRMultipartHeaderFromMemorysyoyo tinyexr
- CVE-2026-110596quirc through 1.2 Denial of Service via find_alignment_pattern Spiral Searchdlbeer quirc
- CVE-2026-110595BottleCRM 0.45 through 1.14.5 Memory Exhaustion via Contact and Case CSV ImportMicroPyramid BottleCRM
- CVE-2026-110594BottleCRM 0.43 through 1.14.5 ReDoS via Case Routing Rule RegexMicroPyramid BottleCRM
- CVE-2026-110593BottleCRM through 1.14.5 Server-Side Template Injection via Account Email create_mailMicroPyramid BottleCRM
- CVE-2026-110592BottleCRM 0.30 through 1.14.5 HTML Injection via Custom Invoice PDF TemplateMicroPyramid BottleCRM
- CVE-2026-110591OW2 ASM 1.4.3 before 9.11 Excessive Resource Consumption via AnalyzerOW2 ASM
- CVE-2026-110270OW2 ASM 3.0 before 9.11 Exponential Memory Allocation in JSRInlinerAdapterOW2 ASM
- CVE-2026-110263OW2 ASM 3.0 before 9.11 Uncontrolled Recursion in SignatureReaderOW2 ASM
- CVE-2026-110262OW2 ASM 3.1 before 9.11 Excessive Memory Allocation in AdviceAdapterOW2 ASM
- CVE-2026-110261OW2 ASM 3.0 before 9.11 Excessive CPU Consumption via ClassWriter COMPUTE_FRAMESOW2 ASM
- CVE-2026-110260OW2 ASM 3.0 before 9.11 Quadratic Memory Allocation via Exception HandlersOW2 ASM
- CVE-2026-110259OW2 ASM 3.0 before 9.11 Uncontrolled Recursion via ClassWriter.replaceAsmInstructions()OW2 ASM
- CVE-2026-110258OW2 ASM 3.0 before 9.11 Excessive Memory Allocation via Multiple RET InstructionsOW2 ASM
- CVE-2026-110257OW2 ASM 5.0 before 9.11 Excessive Memory Allocation via BootstrapMethods AttributeOW2 ASM
- CVE-2024-58392PhysicsFS through 3.2.0 Out-of-Bounds Read via __PHYSFS_utf8codepointicculus PhysicsFS
- CVE-2016-20099L-SMASH through 2.14.5 Infinite Loop in VC-1 Importer Probel-smash
- CVE-2026-35161Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Overly Restrictive Account Lockout Mechanism vulnerability.Dell PowerScale InsightIQ
- CVE-2026-1040867-Zip < 26.03 SquashFS Uninitialized Memory Disclosure via UID/GID Table7-Zip
- CVE-2026-94348Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQDell PowerScale InsightIQ
- CVE-2026-101215Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS CDell Unisphere for PowerMax vApp
- CVE-2026-101217Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Limitation of a Pathname to a Restricted Directory ('Path TraveDell Unisphere for PowerMax vApp
- CVE-2026-101216Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Dell Unisphere for PowerMax vApp
- CVE-2026-98431RDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependencyLinux
- CVE-2026-98430RDMA/efa: Keep admin queues alive while IRQ is registeredLinux
- CVE-2026-98429RDMA/efa: Keep EQ resources alive while IRQ is registeredLinux
- CVE-2026-98428ALSA: usb: 6fire: Avoid embedded URBsLinux
- CVE-2026-98427net/sched: codel: bound the dropping loop per dequeue callLinux
- CVE-2026-98426wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error pathLinux
- CVE-2026-98425wifi: mac80211: don't warn when an IBSS has no channel to scanLinux
- CVE-2026-98424wifi: cfg80211: undo netns switch if renaming the wiphy failsLinux
- CVE-2026-98423wifi: mac80211_hwsim: don't hand frames to mac80211 while stoppingLinux
- CVE-2026-98422wifi: mac80211: reset the AP_VLAN tailroom counter on ifdownLinux
- CVE-2026-98421wifi: mac80211: require a peer station for TDLS setup confirmLinux
- CVE-2026-98420ksmbd: follow SMB2 session expiration semanticsLinux
- CVE-2026-98418sched/core: Avoid false migration warning for proxy donorsLinux
- CVE-2026-98417net: xfrm: reject unrepresentable espintcp transport headersLinux
- CVE-2026-98416dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn()Linux
- CVE-2026-98415soc: samsung: exynos-pmu: fix use-after-free of interrupt generator nodeLinux
- CVE-2026-98414memcg: avoid charging the root memcg from obj_cgroup_charge_pages()Linux
- CVE-2026-98413selinux: always fill AVC decision in avc_has_perm_noaudit()Linux
- CVE-2026-98412power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new()Linux
- CVE-2026-98411power: sequencing: fix NULL-pointer dereference in pwrseq_device_register()Linux
- CVE-2026-98410watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdogLinux
- CVE-2026-98409watchdog: rtd119x: Avoid division by zeroLinux
- CVE-2026-98408watchdog: rzv2h: Avoid division by zeroLinux
- CVE-2026-98407wifi: rsi: fix heap OOB write on key removalLinux
- CVE-2026-98406wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driverLinux
- CVE-2026-98404drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create()Linux
- CVE-2026-98403s390/boot: Avoid IPL parameter append past command lineLinux
- CVE-2026-98402net: icmp: avoid invalid transport header access in icmp_send tracepointLinux
- CVE-2026-98400s390/ipl: Fix NULL deref in kdump without re-IPL parm blockLinux
- CVE-2026-98399s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm blockLinux
- CVE-2026-98398locking/lockdep: Invalidate stale class_cache entries for zapped classesLinux
- CVE-2026-98397platform/x86: x86-android-tablets: hold device reference for secondary fwnode teardownLinux
- CVE-2026-98396powerpc: Do not restore KUAP in arch_exit_to_user_mode_prepare()Linux
- CVE-2026-98395powerpc/entry: Fix irq_soft_mask corruption on replayed interrupt exitLinux
- CVE-2026-98394af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer.Linux
- CVE-2026-98393net: ipv4: Fix UDP length overflow with PMTU discover and big MTULinux
- CVE-2026-98392Bluetooth: btintel_pcie: fix tx_handle bounds off-by-oneLinux
- CVE-2026-98391drm/xe: Guard page-fault worker with runtime PM checkLinux
- CVE-2026-98390x86/amd_node: Avoid divide by zero on virtualized systemsLinux
- CVE-2026-98389drm/amdgpu: skip gfx switch_power_profile during GPU resetLinux
- CVE-2026-98388exec: do_close_on_exec() before taking exec_update_lockLinux
- CVE-2026-98387s390/crypto: Fix skcipher_walk return code handling in aes_s390Linux
- CVE-2026-98386scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slotLinux
- CVE-2026-110652ONLYOFFICE DocumentServer before 10.0.0 SSRF via downloadfile isInJwtToken BypassONLYOFFICE DocumentServer
- CVE-2026-107417WordPress Push Notification for Post and BuddyPress plugin <= 3.23 - Broken Access Control vulnerabilityMuralidharan Ramasamy Push Notification for Post and BuddyP…
- CVE-2026-109968Clevis: clevis: pkcs#11 luks passphrase logged in plaintext to world-readable fileRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-107425WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.7 - Broken Access Control vulnerabilityMagepeople Bus Ticket Booking with Seat Reservation
- CVE-2026-107422WordPress WP w3all phpBB plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerabilityaxew3.com WP w3all phpBB
- CVE-2026-107433WordPress WP OAuth Server plugin <= 6.4.0 - Broken Access Control vulnerabilityminiOrange WP OAuth Server
- RUSTSEC-2026-0352Filesystem sandbox escape when renaming symlinks with trailing slasheswasmtime-wasi
- RUSTSEC-2026-0353Panic when invoking an async-lifted function via `call`wasmtime
- RUSTSEC-2026-0355Panic viewing component model stream or future as the wrong typewasmtime
- RUSTSEC-2026-0356Panic on erroneous call-to-host from guest realloc callwasmtime
- RUSTSEC-2026-0358Yielding in a component start function can lead to a host panicwasmtime
- RUSTSEC-2026-0363Component-model handle tables are capped only per instance and charged to no limitwasmtime
- RUSTSEC-2026-0364Exception tags can cause host data structures to be unalignedwasmtime
- CVE-2026-73797HPE NonStop TSQLFIL - Memory corruption vulnerabilityHewlett Packard Enterprise HPE NonStop TSQLFIL
- CVE-2026-73796HPE NonStop TSQLEXE - Memory Corruption vulnerabilityHewlett Packard Enterprise HPE NonStop TSQLEXE
- CVE-2026-108072Insecure Permissions on Shared Startup Scripts Allow Cross-User Code Execution and Potential Privilege EscalationTSplus Remote Access
- CVE-2026-97315Responsive Blocks < 2.3.0 - Unauthenticated HTML Injection in Form Notification EmailResponsive Blocks
- CVE-2026-88998Tickera < 3.6.0.4 - Unauthenticated Order Payment Bypass via 2Checkout IPNTickera
- CVE-2026-82844WPForms Lite 1.10.0.1 - 2.0.2.1 - Unauthenticated Payment Bypass via PayPal CommerceWPForms Lite
- CVE-2026-103308Visma Pay for WooCommerce < 1.2.2 - Unauthenticated Payment Bypass and Order Data Disclosure via Gateway Return EndpointVisma Pay for WooCommerce
- CVE-2026-101301WPCode 2.0.0 - 2.3.9 - Unauthenticated Snippet Suppression via Safe Mode BypassWPCode
- CVE-2026-73795HPE NonStop TMF Auditread2 - Denial of Service vulnerabilityHewlett Packard Enterprise HPE NonStop TMF Auditread2
- CVE-2026-100229Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: out-of-bounds write in gst_h266_parser_parse_dci() due to off-by-one array bound checkRed Hat Enterprise Linux
- CVE-2026-88842Busybox: busybox: dpkg stale field_start pointer causes out-of-bounds read and status file corruptionRed Hat Hardened Images
- CVE-2026-109971Clevis: clevis: pkcs#11 token pin exposed on command line via pkcs11-toolRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-109970Clevis: clevis: pkcs#11 token pin written to world-readable fileRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-109969Clevis: clevis: no authentication on pkcs#11 af_unix sockets allows key injection under permissive umaskRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-100231Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: heap out-of-bounds write in asfmux due to incorrect utf-16 size calculation for non-bmp charactersRed Hat Enterprise Linux
- CVE-2026-73794HPE NonStop MODULAR NSJ - Vulnerability in Random Number GenerationHewlett Packard Enterprise HPE NonStop MODULAR NSJ
- CVE-2026-73792HPE NonStop Java JToolkit - Command Injection and buffer overflow vulnerabilityHewlett Packard Enterprise HPE NonStop Java JToolkit
- CVE-2026-73791HPE NonStop Hpjmeter - Buffer overflow vulnerabilityHewlett Packard Enterprise HPE NonStop Hpjmeter
- CVE-2026-103671External control of assumed-Immutable web parameter issue exists in EC-CUBE plugin (for EC-CUBE 4 series) "AmazonPay Plugin".EC-CUBE CO. AmazonPay V2 Plugin · EC-CUBE CO. AmazonPay Plu…
- CVE-2026-107757Gallery Custom Links <= 2.3.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Comment Author Display Name + Comment HTML Comment Bodytigroumeow Gallery Custom Links
- CVE-2026-107650GeoDirectory <= 2.8.190 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Dynamic Content Field-Token Substitution via Listing Titlepaoltaia GeoDirectory – WP Business Directory Plugin and Cl…
- CVE-2026-103907Jeg Kit for Elementor <= 3.2.19 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via 'jeg_find_author' AJAX Actionjegtheme Jeg Kit for Elementor – Powerful Addons for Elemen…
- CVE-2026-107756Meow Lightbox <= 5.6.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Output Buffering parser noise substitution via comment body + display_nametigroumeow Meow Lightbox
- CVE-2026-104761Mang Board <= 2.4.3 - Authenticated (Custom+) Stored Cross-Site Scripting via 'content' Parameterkitae-park Mang Board
- CVE-2025-9373PeproDev Branches Map <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingPeproDev Branches Map
- CVE-2026-103380Appointment Booking Plugin <= 5.7.3 - Authenticated (Subscriber+) Sensitive Information Exposure in 'first_name' Parameter Template Re-expansionAppointment Booking Plugin – LatePoint | Calendar & Schedul…
- CVE-2026-107754GeoDirectory <= 2.8.190 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Image Titlepaoltaia GeoDirectory – WP Business Directory Plugin and Cl…
- CVE-2026-110227WordPress Restricted Site Access plugin <= 7.6.2 - Broken Access Control vulnerability10up Restricted Site Access
- CVE-2026-107171An Hardcoded Cryptographic Key vulnerability existed in Trellix Agent 5.8.4 via mfecryptc.dll leads to Database Decryption by Regular Users.Trellix Agent
- CVE-2026-110467WisdomGarden｜Tronclass - Insecure Direct Object ReferenceWisdomGarden Tronclass
- CVE-2026-110466WisdomGarden｜Tronclass - Sensitive Data ExposureWisdomGarden Tronclass
- CVE-2026-110465WisdomGarden｜Tronclass - Insecure Direct Object ReferenceWisdomGarden Tronclass
- CVE-2026-96904AWP Classifieds < 4.4.9 - Unauthenticated Listing Contact Email Disclosure via Place Ad PageAWP Classifieds
- CVE-2026-96900Cart Abandonment Recovery for WooCommerce < 2.1.4 - Unauthenticated Abandoned Cart Record Deletion and Modification via IDORCart Abandonment Recovery for WooCommerce
- CVE-2026-94360Paymentfor Gateway for WooCommerce < 1.0.6 - Unauthenticated Order Payment Forgery via Unverified Card CallbacksPaymentfor Gateway for WooCommerce
- CVE-2026-94261Sifalo Pay 2.0 - 2.5.2 - Unauthenticated Payment Confirmation Forgery via an Unbound Transaction IdSifalo Pay
- CVE-2026-94260Sifalo Pay 2.0 - 2.5.2 - Unauthenticated Order Payment Metadata Modification and Forced Order FailureSifalo Pay
- CVE-2026-94254SellKit 2.3.5 - 2.7.0 - Unauthenticated Arbitrary Price Manipulation via 'sellkit_product_prices' ParameterSellKit
- CVE-2026-92426YITH WooCommerce Popup < 1.60.0 - Contributor+ Arbitrary Post Meta DeletionYITH WooCommerce Popup
- CVE-2026-92409Donation Thermometer 2.2.9 - 2.2.11 - Contributor+ Stored XSS via ShortcodeDonation Thermometer
- CVE-2026-91076Robokassa payment for WooCommerce < 1.9.0 - Unauthenticated Arbitrary Order Status Change to FailedRobokassa payment gateway for Woocommerce
- CVE-2026-90989Tainacan < 1.4.0 - Subscriber+ Repository Staff Email Address Disclosure via Reports REST EndpointsTainacan
- CVE-2026-88927rtMedia for WordPress, BuddyPress and bbPress < 4.7.14 - Subscriber+ Arbitrary Album Media Injection via IDORrtMedia for WordPress, BuddyPress and bbPress
- CVE-2026-87974Asaas Gateway for WooCommerce < 2.7.8 - Unauthenticated Order Payment Bypass via WebhookAsaas Gateway for WooCommerce
- CVE-2026-87968Product Feed for Google Shopping < 5.3.2 - Unauthenticated Forced Store RegistrationProduct Feed for Google Shopping, Microsoft Advertising and…
- CVE-2026-87843Trust Payments Gateway for WooCommerce < 3.1.0 - Unauthenticated Order Payment Completion via Payment Return PageTrust Payments Gateway for WooCommerce
- CVE-2026-86797Pricing Table Block 1.0.7 - 2.1.4 - Contributor+ Stored XSS via Pricing LinkPricing Table
- CVE-2026-85345FV Player 7.5.44.7212 - 7.5.54.7212 - Contributor+ SSRF via retrieve_video_dataFV Flowplayer Video Player
- CVE-2026-85000EmbedPress < 4.6.8 - Unauthenticated YouTube API Quota Consumption and Database BloatingEmbedPress
- CVE-2026-108069Sunshine Photo Cart < 3.7.4 - Unauthenticated Content Injection via sunshine_modal_add_comment()Sunshine Photo Cart
- CVE-2026-108066WP 2FA < 4.2.0 - Admin+ Arbitrary User 2FA Removal via IDORWP 2FA
- CVE-2026-108064WP Encryption < 7.8.8.2 - Unauthenticated Certificate Private Key and ACME Order Replacement via wple_auto_handlerWP Encryption
- CVE-2026-107320GamiPress 7.9.5 - 8.0.5 - Unauthenticated Private Activity Log DisclosureGamiPress
- CVE-2026-107319GamiPress < 8.0.6 - Subscriber+ Activity Log DisclosureGamiPress
- CVE-2026-107178Image Photo Gallery Final Tiles Grid < 3.6.16 - Contributor+ Stored XSS via 'lightboxOptions' ParameterImage Photo Gallery Final Tiles Grid
- CVE-2026-107160LTL Freight Quotes – Old Dominion Edition < 4.2.19 - Unauthenticated Stored HTML Injection via Checkout Error MessageLTL Freight Quotes
- CVE-2026-107158LTL Freight Quotes – Old Dominion Edition < 4.2.19 - Unauthenticated FreightDesk Integration Option Update via REST RouteLTL Freight Quotes
- CVE-2026-106646Classified Listing < 6.1.1 - Subscriber+ Unattached Media Deletion and Modification via Gallery AJAX HandlersClassified Listing
- CVE-2026-106469Gutenverse Form < 3.0.11 - Contributor+ Stored XSS via SVG IconGutenverse Form
- CVE-2026-106166NEX-Forms 9.2.1 - 9.2.5 - Unauthenticated Arbitrary Form Entry Modification via 'nf_set_entry_update_id' ParameterNEX-Forms
- CVE-2026-106099WP Data Access < 5.5.84 - Unauthenticated Sensitive Data Disclosure via Table ExportWP Data Access
- CVE-2026-106098WP Data Access < 5.5.77 - Unauthenticated Incorrect Authorization via Inline App UpdateWP Data Access
- CVE-2026-105975CamPay Shortcode Payment Gateway < 1.7 - Unauthenticated Payment Status Forgery via external_referenceCamPay Shortcode Payment Gateway
- CVE-2026-105969CodeAtoz B2B Suite for WooCommerce < 1.6.1 - Unauthenticated Guest Quote DisclosureCodeAtoZ B2B Suite for WooCommerce
- CVE-2026-105261PublishPress Future 4.10.1 - 4.10.5 - Contributor+ Stored XSS via 'wrapper' and 'dateformat' Shortcode AttributesSchedule Post Changes With PublishPress Future: Unpublish,…
- CVE-2026-104751Rank Math SEO < 1.0.280 - Unauthenticated SEO Analyzer Results DeletionRank Math SEO
- CVE-2026-104644Image Photo Gallery Final Tiles Grid < 3.6.15 - Contributor+ Stored XSS via Gallery Configuration UpdateImage Photo Gallery Final Tiles Grid
- CVE-2026-94370Memory corruption (double free / use-after-free) vulnerability in core string handling impacts Qt for MCUsQt_for_MCUs
- CVE-2026-110458A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi ProtecUbiquiti UniFi Protect AI Key
- CVE-2026-107153Multiple smartphones provided by Rakuten Mobile, Inc.Rakuten Mobile Rakuten Mini · Rakuten Mobile Rakuten Hand +1
- CVE-2026-110457A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi ProtecUbiquiti UniFi Protect AI Key
- CVE-2026-110456A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UnUbiquiti UniFi Protect AI Key
- CVE-2026-110454A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access Ubiquiti UniFi Protect AI Key
- CVE-2026-101926Hyyan WooCommerce Polylang Integration <= 1.5.0 - Authenticated (Subscriber+) SQL Injection via 'variation_ids' ParameterHyyan WooCommerce Polylang Integration
- CVE-2026-103369Social Share Buttons & Analytics Plugin <= 4.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'response' Parameter via gs_update_with_values AJAXjoaoromao Social Share Buttons & Analytics Plugin – GetSoci…
- CVE-2026-110453Nix before 2.35.3, when unsandboxed on macOS or FreeBSD, incorrectly allows connections made by build users from daemon clients.NixOS Nix
- CVE-2026-110452The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user (who invoked the installer) even though it shNixOS Nix
- CVE-2026-110451Nix before 2.35.3 and Lix before 2.95.4 on macOS allow a Seatbelt sandbox escape (for an unconfined build) because a certain size threshold NixOS Nix
- CVE-2026-97471Avada (Fusion) Builder <= 3.16.1 - Unauthenticated Sensitive Information Exposure in 'args[link_target]' Parameter via {user_meta} Dynamic Data Tokenthemefusion Avada (Fusion) Builder
- CVE-2026-100185Directorist: AI-Powered Business Directory, Listings & Classified Ads <= 8.10.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'phone' Listing Fieldwpwax Directorist: AI-Powered Business Directory, Listings…
- CVE-2026-97020PO/MO Editor <= 1.4.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'podata' Parameterdougwollison PO/MO Editor
- CVE-2026-16495Countdown Timer – Widget Countdown <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'redirect_url' Shortcode Attributewpdevart Countdown Timer – Widget Countdown
- CVE-2026-100193Tutor LMS <= 4.1.0 - Reflected Cross-Site Scripting via 'tab' Parameterthemeum Tutor LMS – eLearning and online course solution
- CVE-2026-95807FV Player 8 <= 8.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'synopsis' Shortcode Attributefoliovision FV Player
- CVE-2026-86573Out-of-bounds Write Vulnerability in Hitachi Disk Array Driver for AIX, Hitachi Disk Array Driver for Virtual I/O ServerHitachi Disk Array Driver for AIX · Hitachi Disk Array Driv…
- CVE-2026-86607Internal Application Information Exposure Vulnerability in Hitachi Ops Center AdministratorHitachi Ops Center Administrator
- CVE-2026-107652Database Addon for Contact Form 7 <= 1.4.1 - Unauthenticated Limited File Deletion via Injected 'attackcfdb7_file' Submission Fieldarshidkv12 Database Addon for Contact Form 7 – CFDB7
- CVE-2026-103425Booking Package <= 1.7.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attributemasaakitanaka Booking Package
- CVE-2026-46449The Akamai Guardicore Platform Agent (GPA) before 7.4 for macOS is affected by a local privilege escalation vulnerability within the wapptunAkamai Guardicore Platform Agent
- CVE-2026-50215A use-after-free exists in the Windows WFP packet-capture driver shipped with Akamai Guardicore Platform Agent (GPA) before 7.4.Akamai Guardicore Platform Agent
- CVE-2026-50216An integer underflow exists in the DNS proxy component of the macOS NetworkExtension system extension shipped with Akamai Guardicore PlatforAkamai Guardicore Platform Agent
- CVE-2026-50217A use-after-free vulnerability in the Windows WFP callout driver of Akamai Guardicore Platform Agent (GPA) allows a local low-privileged useAkamai Guardicore Platform Agent