CVEs published October 15, 2026
553 CVEs were published on October 15, 2026: 48 critical, 235 high. 3 are now in CISA KEV.
- Published
- 553
- Critical
- 48
- High
- 235
- Medium
- 252
- Low
- 18
- Unrated
- 0
- Now in CISA KEV
- 3
- Fix available
- 275
Most affected products
- Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1
- 20
- Netgate pfSense CE
- 20
- Progress Software Kendo UI for jQuery
- 14
- FreeBSD
- 13
- Eclipse Foundation Eclipse Vert.x
- 12
- espocrm
- 12
- Google Chrome
- 10
- LycheeOrg Lychee
- 10
- opnsense core
- 10
- getkin kin-openapi · github.com/getkin/kin-openapi
- 9
Critical 48
- CVE-2026-110916Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary codeGoogle Chrome
- CVE-2026-111356MacCMS v10 through 2026.1000.4056 Account Takeover via Password Recovery Brute-Forcemagicblack MacCMS
- CVE-2026-111329JuggleIM im-server through 1.8.16 Default Admin Credentials in Admin ConsoleJuggleIM
- CVE-2026-111322Archon 0.2.13 through 0.11.1 Missing Authentication via /api/* Control APIcoleam00 Archon
- CVE-2026-111312OpenHealth through 0.2.0 Missing Authentication via /api/health-data/[id] RouteOpenHealthForAll OpenHealth
- CVE-2026-111283BMC Helix Network Management 26.3.00 before 26.3.01 Authentication Bypass via SAML ConfigurationBMC Helix Network Management
- CVE-2026-111281Jooan JA-A12 Unauthenticated Root RCE via SetDiagMode Hard-Coded CredentialsJooan JA-A12
- CVE-2026-94134Apache Airflow SSH provider, Apache Airflow SFTP provider: SSH hook disables host-key verification by defaultApache Software Foundation Apache Airflow SSH provider · Ap…
- CVE-2026-105039EnergizeLab Station Middleware Admin APIs Missing Role ChecksEnergizeLab station-middleware
- CVE-2026-105038EnergizeLab Eilik Unauthenticated AI Model Administration and Runtime Model SwitchingEnergizeLab FastAPI AI inference server
- CVE-2026-105037EnergizeLab Station Middleware Authenticated Path Traversal Arbitrary File ReadEnergizeLab station-middleware
- CVE-2026-105032EnergizeLab Eilik AI Skill Upload Unauthenticated Path Traversal Arbitrary File WriteEnergizeLab FastAPI AI inference server
- CVE-2026-102764Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote SupportBeyondTrust Remote Support
- CVE-2026-111235OpenNMS REST authorization bypass via non-canonical HTTP methodThe OpenNMS Group Meridian · The OpenNMS Group Horizon
- CVE-2026-57496NetLicensing MCP Server: REST Path Traversal Bypasses Token RedactionLabs64 NetLicensing-MCP · netlicensing-mcp
- CVE-2026-102946joserfc: JWS signature verification bypass via empty signatures array in jws.deserialize_jsonauthlib joserfc
- CVE-2026-47218runwasi: Forged Wasmtime precompiled OCI layer bypasses runwasi WASI sandboxcontainerd runwasi
- CVE-2026-55240Tianji: Remote Code Execution via lodash template evaluate pattern in survey feed templatesmsgbyte tianji
- CVE-2026-84731Pre-Authentication Admin Bypass and Remote Code Execution in Nutanix Prism Gateway inside AOSNutanix Acropolis Operating System
- CVE-2026-110812Deserialization of untrusted data in the Gremlin graph-import path in Amazon NeptuneAWS Amazon Neptune Engine
- CVE-2026-110958Wavlink WN530HG4B api.cgi heap-based overflowWavlink WN530HG4B
- CVE-2026-105474A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary cWebPros SolusVM
- CVE-2026-57155OPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importeropnsense core
- CVE-2026-110957Wavlink WL-WN530BE2-A Login Processing api.cgi sub_12580 os command injectionWavlink WL-WN530BE2-A
- CVE-2026-47168EspoCRM: Authenticated RCE via Unsafe PHP Object Deserialization in MassAction/Export paramsespocrm
- CVE-2026-109686WordPress Link Whisper Free plugin <= 0.9.7 - PHP Object Injection vulnerabilityLink Whisper Free
- CVE-2026-109892WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - Privilege Escalation vulnerabilityShabti Kaplan Frontend Admin by DynamiApps
- CVE-2026-109688WordPress Link Whisper Free plugin <= 0.9.7 - SQL Injection vulnerabilityLink Whisper Free
- CVE-2026-99999ipv4: validate checksum_start before completing checksumLinux
- CVE-2026-109698WordPress Mang Board WP plugin <= 2.4.4 - SQL Injection vulnerabilityKitae Park Mang Board WP
- CVE-2026-98432ipv4: free inet_opt and ireq_opt after an RCU grace periodLinux
- CVE-2026-109694WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation vulnerabilityWP ManageNinja Fluent CRM
- CVE-2026-108497WordPress Amelia plugin <= 2.4.10 - SQL Injection vulnerabilityTMS Amelia
- CVE-2026-19863An unauthenticated client may access certain protected resources when using EthereumAuthenticator if the request path contains the configureEclipse Foundation org.eclipse.jetty:jetty-ethereum
- CVE-2026-50619Unauthenticated remote code execution vulnerabilityQNAP Systems Qsirch
- CVE-2026-47786Pre-Authentication Command InjectionQNAP Systems HybridDesk Station
- CVE-2026-50612Import Symlink Following Remote Code Execution Vulnerability in QuMagieQNAP Systems QuMagie
- CVE-2026-34006Pre-Authentication Multiple Critical Vulnerabilities in QNAP sMedioDTCPServerQNAP Systems sMedio DTCP MOVE
- CVE-2026-101287Authentication bypass in Stela by Diaple NetworkingDiaple Stela
- CVE-2026-16438An arbitrary operation vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, and MC Works64Mitsubishi Electric GENESIS64 · Mitsubishi Electric Icon… +9
- CVE-2026-16436An authentication bypass vulnerability in GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizVizMitsubishi Electric GENESIS · Mitsubishi Electric Iconi… +17
- CVE-2026-102469In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x DB2 client (vertx-db2-client) coEclipse Foundation Eclipse Vert.x
- CVE-2026-101306Multiple jail filesystem root escapesFreeBSD
- CVE-2026-109145User Rights Access Manager <= 1.1.3 - Unauthenticated Privilege Escalation via AJAX Registration HandlerUser Rights Access Manager
- CVE-2026-10858710Web Booster <= 2.34.10 - Unauthenticated Arbitrary File Upload via 'page_id' Parameter10Web Booster – Website speed optimization, Cache & Page Sp…
- CVE-2026-93483In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functionsZnuny
- CVE-2026-110911Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again as SQL by dynamic finders (such as findOWheels
- CVE-2026-104586AUTOM8N (WHM/cPanel plugin) through commit 82821f7 contains an OS Command Injection in borg_restore.cgi.
High 235
- CVE-2026-84823Org.wildfly.core: wildfly: path traversal in take-snapshot discloses the server configuration to the monitor roleRed Hat Enterprise Linux · Red Hat Fuse +2
- CVE-2026-92629A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, thLenovo Baiying PC Client
- CVE-2026-89057A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unaLenovo Idea Tab Pro · Idea Tab/ Lenovo Tab K11 Gen +11
- CVE-2026-75941A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese market, that could alloLenovo Legion Zone Application
- CVE-2026-110914Memory corruption in Workers in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code inside Google Chrome
- CVE-2026-110915Use after free in Compositing in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandboxGoogle Chrome
- CVE-2026-110920Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via aGoogle Chrome
- CVE-2026-110921Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crGoogle Chrome
- CVE-2026-110919Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crGoogle Chrome
- CVE-2026-110913Memory corruption in DOM in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via Google Chrome
- CVE-2026-110922Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox vGoogle Chrome
- CVE-2026-111369ClassroomIO through 1.0.0 Incorrect Authorization via Lesson Update and Delete RoutesClassroomIO
- CVE-2026-111366cool-admin-midway through 8.0.0 Authorization Bypass via /admin/sys/user Endpointscool-team-official cool-admin-midway
- CVE-2026-111365cool-admin-midway through 8.0.0 Missing Authorization via System Role Endpointscool-team-official cool-admin-midway
- CVE-2026-111364MinDoc through 2.2-beta.2 IDOR via /api/:key/content/:id GET Branchmindoc-org MinDoc
- CVE-2026-111363BISHENG through 3.0.0-beta4 IDOR via /api/v1/knowledge/file_bboxdataelement bisheng
- CVE-2026-111359CRMEB 5.6.1 through 6.0.0 IDOR via giftDetail and receiveGiftCRMEB
- CVE-2026-111352ThinkCMF through 8.0.1 Incorrect Authorization in Admin REST APIThinkCMF
- CVE-2026-111347go-ldap-admin through 0.6.2 Hard-Coded RSA Private Key via /base/decryptpwdopsre go-ldap-admin
- CVE-2026-111330JuggleIM im-server through 1.8.16 Weak Password Hashing via Unsalted SHA-1JuggleIM
- CVE-2026-111313JobOps through 0.13.1 SSRF via POST /api/manual-jobs/fetchDaKheera47 JobOps
- CVE-2026-111282iso14229 before 0.10.1 Out-of-Bounds Read via Handle_0x38_RequestFileTransferdriftregion iso14229
- CVE-2026-111280snap7 through 1.4.3 Out-of-Bounds Write via TSnap7MicroClient::opReadAreadavenardella snap7
- CVE-2026-111279Dragonfly through 2.0.2 Unbounded Memory Allocation via Negative COUNT in HRANDFIELD, ZRANDMEMBER and SRANDMEMBERdragonflydb dragonfly
- CVE-2026-111277NivoCart through 2.5.1 Guest Order Invoice Disclosure via account/order/downloadnivocart
- CVE-2026-109468ASP.NET Core Denial of Service VulnerabilityMicrosoft Visual Studio · Microsoft System.Formats.Cbor
- CVE-2026-108452Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-108451Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-108450Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-108449Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-108448Microsoft Office Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-108447Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-108446Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-108445Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-108444Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-108443Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-108442Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-108441Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-108440Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-108439Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-108437Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-108433Microsoft Office Word Security Feature Bypass VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-108432Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-108431Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-108430Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-108429Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-108428Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-108427Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-108426Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-111357Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege…Ivanti Connect Secure
- CVE-2026-105040EnergizeLab Eilik User-ID Mass Assignment Account TakeoverEnergizeLab NestJS auth service
- CVE-2026-105036EnergizeLab Firmware Updates Downloaded over HTTP Without Integrity ChecksEnergizeLab Robot firmware · EnergizeLab AI Station firm… +1
- CVE-2026-105035EnergizeLab FirmwareUpdater Universal Hard-Coded AES KeyEnergizeLab FirmwareUpdater
- CVE-2026-105034EnergizeLab Eilik Unauthenticated Device-Token Issuance for Arbitrary Serial NumbersEnergizeLab NestJS auth service
- CVE-2026-105033EnergizeLab AI Station Default Root Credentials with SSH EnabledEnergizeLab AI Station firmware
- CVE-2026-45165Idira Secrets Manager (Self-Hosted): Improper Authorization in REST APIPalo Alto Networks Idira Secrets Manager
- CVE-2026-111170kedro-datasets 9.3.0 through 9.6.0 Path Traversal via MatplotlibDataset Plot Namekedro-org kedro-datasets · kedro-datasets
- CVE-2026-111160LightLLM through 1.2.0 Unauthenticated DoS via pd_kv_trans_params DeserializationModelTC LightLLM
- CVE-2026-110874Dolibarr before 23.0.4 PHP Object Injection via jsonOrUnserialize()dolibarr
- CVE-2026-111234SimplePie through 1.9.0 Local File Read via file:// Redirectsimplepie
- CVE-2026-111231Netgate pfSense CE through 2.9.0 Authorization Bypass via config_restore() and config_install()Netgate pfSense CE
- CVE-2026-111229Netgate pfSense CE 2.7.0 through 2.9.0 Command Injection via Captive Portal HA SyncNetgate pfSense CE
- CVE-2026-111226Netgate pfSense CE 2.4.5 through 2.9.0 OS Command Injection via system_advanced_admin.phpNetgate pfSense CE
- CVE-2026-111224Netgate pfSense CE through 2.9.0 OS Command Injection via openvpn.connect_async.shNetgate pfSense CE
- CVE-2026-111223Netgate pfSense CE 2.7.0 through 2.9.0 Command Injection via IPsec Mobile Login BannerNetgate pfSense CE
- CVE-2026-111222Netgate pfSense CE through 2.9.0 php.ini Injection via Timezone SettingNetgate pfSense CE
- CVE-2026-111221Netgate pfSense CE through 2.9.0 Command Injection via RADIUS Secret mpd.conf InjectionNetgate pfSense CE
- CVE-2026-111220Netgate pfSense CE through 2.9.0 Crontab Injection via PPP Periodic Reset ptpidNetgate pfSense CE
- CVE-2026-111219Netgate pfSense CE through 2.9.0 Command Injection via PPPoE Server UsernameNetgate pfSense CE
- CVE-2026-111218Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via Traffic Shaper LimitersNetgate pfSense CE
- CVE-2026-111217Netgate pfSense CE through 2.9.0 OS Command Injection via CARP VHIDNetgate pfSense CE
- CVE-2026-111216Netgate pfSense CE through 2.9.0 OS Command Injection via Gateway Monitor IPNetgate pfSense CE
- CVE-2026-111215Netgate pfSense CE through 2.9.0 OS Command Injection via Wireless Parent InterfaceNetgate pfSense CE
- CVE-2026-111214Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via interfaces_qinq_edit.phpNetgate pfSense CE
- CVE-2026-108334Github.com/kuadrant/kuadrant-operator/internal/wasm: github.com/rh-api-management/rhcl-operator-product-build/kuadrant-operator: kuadrant-operator: crafted httproute match values can bypass gateway policy overridesRed Hat Connectivity Link · Red Hat OpenShift AI
- CVE-2026-104150AdonisJS HTTP Server: Uncontrolled Resource Consumption and Inefficient Regular Expression Complexityadonisjs http-server · @adonisjs/http-server
- CVE-2026-87018undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiationundici
- CVE-2026-104828HtmlUnit Neko: Mutation XSS (mXSS) in HTMLWriterFilter - TEXTAREA/TITLE entity decode without re-encodehtmlunit-neko
- CVE-2026-109383undici vulnerable to TLS certificate validation bypass via dropped tls options in Agentundici
- CVE-2026-109829undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirectsundici
- CVE-2026-55872GYM One admin user list is vulnerable to stored cross-site scriptingmayerbalintdev GYM-One
- CVE-2026-55587AliasVault: Browser extension WebAuthn bridge accepts forged origin/RP IDaliasvault
- CVE-2026-104827react/http: Unbounded HTTP Client Response Header Buffering Leads to Memory Exhaustion DoSreactphp http · react/http
- CVE-2026-97370Junrar: RarVM VM_JMP maxOpCount bypass causes infinite CPU loop during RAR4 extractionjunrar · com.github.junrar:junrar
- CVE-2026-55239Tianji: SQL Injection via unsanitized timezone parameter in analytics queriesmsgbyte tianji
- CVE-2026-109869undici vulnerable to Denial of Service via unhandled error on excessive content-encodingsundici
- CVE-2026-111105Telegram rlottie Numeric Truncation Remote Code Execution VulnerabilityTelegram
- CVE-2026-103936libp2p: Single pre-auth STUN packet terminates `@libp2p/webrtc` WebRTC-direct Node.js listenersjs-libp2p · @libp2p webrtc
- CVE-2026-55246bincookie: Heap buffer overflow via unvalidated `num_pages` when parsing a `.binarycookies` fileTatsh bincookie
- CVE-2026-55103Discourse ActivityPub: Fix inbound actor validation and apply outbound request SSRF hardeningdiscourse-activity-pub
- CVE-2026-105065WordPress XStore theme < 9.7.9 - Cross Site Scripting (XSS) vulnerability8theme.com XStore
- CVE-2026-100409OpenNext Cloudflare: Cache interception can bypass middleware protection for encoded pathsopennextjs-cloudflare · @opennextjs/cloudflare
- CVE-2026-77466Lychee: Webshop payment bypass via unrestricted "Dummy" gateway selectionLycheeOrg Lychee
- CVE-2026-77470Lychee: Webshop checkout lets the client override the payment `amount` sent to the gateway via malicious crafted POST requestLycheeOrg Lychee
- CVE-2026-77467Lychee: A single 383-byte PDF causes ~184 seconds of CPU consumption in the real processing pathLycheeOrg Lychee
- CVE-2026-62679Lychee: Path traversal in `SecurePathController` allows authenticated arbitrary file readLycheeOrg Lychee
- CVE-2026-61838Lychee: Album password bypass in ZIP downloadsLycheeOrg Lychee
- CVE-2026-61611Lychee: Missing rate limiting on album password unlock endpoint allows brute-force attacksLycheeOrg Lychee
- CVE-2026-85634Wildfly-core: wildfly-core: deployer rbac role privilege escalation via path traversal in deployment nameRed Hat Fuse · Red Hat JBoss Enterprise Application Plat… +1
- CVE-2026-100353kin-openapi: Incomplete Fix for GHSA-p6wj-qrr4-pgh5: Three Unpatched nil-Items Panic Paths in openapi3filtergetkin kin-openapi · github.com/getkin/kin-openapi
- CVE-2026-100354kin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Causes Fatal Process Crashgetkin kin-openapi · github.com/getkin/kin-openapi
- CVE-2026-100352kin-openapi: YAML NaN/Inf Values Bypass Built-in Guards and Panic via OAS 3.1 Validation Pathgetkin kin-openapi · github.com/getkin/kin-openapi
- CVE-2026-100351kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusiongetkin kin-openapi · github.com/getkin/kin-openapi
- CVE-2026-100349kin-openapi openapi3filter: nil-pointer panic in ValidateResponse on a response header declared with contentgetkin kin-openapi · github.com/getkin/kin-openapi
- CVE-2026-92982Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injectionRed Hat Ansible Automation Platform · Red Hat OpenShift… +8
- CVE-2026-97712Nexus Repository 3 - Privilege Escalation via Role ManagementSonatype Nexus Repository
- CVE-2026-97665Nexus Repository 3 - Missing Authorization on NuGet Symbol Package UploadSonatype Nexus Repository
- CVE-2026-111095In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic project overview was possibleJetBrains TeamCity
- CVE-2026-111094In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was pJetBrains TeamCity
- CVE-2026-111093In JetBrains Datalore before 2026.2.1 unauthenticated path traversal via the report blob endpoint allowed reading arbitrary filesJetBrains Datalore
- CVE-2026-111091In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configurationJetBrains Junie CLI
- CVE-2026-97394kin-openapi: Nil-pointer dereference panic in openapi3filter for OpenAPI 3.1 array schemas missing itemsgetkin kin-openapi · github.com/getkin/kin-openapi
- CVE-2026-45452Unitronics - CWE-134 Use of Externally-Controlled format stringUnitronics UniStream Pro/UniLogic
- CVE-2026-71490OPNsense: Direct comma-separated user privileges bypass OPNsense MVC read-only write protectionopnsense core
- CVE-2026-45451Unitronics - CWE-287: Improper AuthenticationUnitronics UniStream Pro/UniLogic
- CVE-2026-63442OPNsense: Log Forgery via Login Username CRLF in WebGUI Authentication → Pf Table IP Blockingopnsense core
- CVE-2026-45450Unitronics - CWE-119: Improper Restriction of Operations within the Bounds of a Memory BufferUnitronics UniStream Pro/UniLogic
- CVE-2026-58390OPNsense: Stored XSS to root RCE via OpenVPN client common_name in status viewsopnsense core
- CVE-2026-109449Symfony: Unbounded Nesting in the Expression Parser Lets Untrusted Expressions Crash the Processsensiolabs symfony
- CVE-2026-45449Unitronics - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Unitronics UniStream Pro/UniLogic
- CVE-2026-53582OPNsense: XPATH Injection can disclose any secret in config.xmlopnsense core
- CVE-2026-109413Symfony: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Processsensiolabs symfony · symfony/symfony +1
- CVE-2026-108082Symfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Headersensiolabs symfony · symfony/http-foundation +1
- CVE-2026-53574EspoCRM: Blind SQL injection via streamAttachments where-clause complex expressionespocrm
- CVE-2026-103509Credential Disclosure in P4 Search Configuration APIPerforce P4
- CVE-2026-79840HPE NonStop XABroker - Memory corruption vulnerabilityHewlett Packard Enterprise HPE NonStop XABroker
- CVE-2026-79839HPE NonStop ODBC/MX Server - Memory corruption vulnerabilityHewlett Packard Enterprise HPE NonStop ODBC/MX Server
- CVE-2026-79838HPE NonStop ODBC/MX Services - Memory corruption vulnerabilityHewlett Packard Enterprise HPE NonStop ODBC/MX Services
- CVE-2026-108116MDX and SOAP Injection in Kendo UI for jQueryProgress Software Kendo UI for jQuery
- CVE-2026-110746CVE-2026-110746TotalSecurity TotalAV
- CVE-2026-103508Path traversal via logging configuration in P4SearchPerforce P4
- CVE-2026-9703Viewer role can create, modify and delete Loki alerting rulesGrafana Enterprise · Grafana OSS
- CVE-2026-93649In the Eclipse Adoptium website (adoptium.net), in every deployment built from commit 0b24ea1 (2025-06-18) up to the fix in commit cbb53cf (Eclipse Foundation Adoptium Temurin
- CVE-2026-109685WordPress Link Whisper Free plugin <= 0.9.7 - Cross Site Scripting (XSS) vulnerabilityLink Whisper Free
- CVE-2026-107416WordPress Webba Booking plugin <= 6.5.2 - Insecure Direct Object References (IDOR) vulnerabilityWebba Plugins Webba Booking
- CVE-2026-109702WordPress Social Share Buttons plugin <= 1.31 - Cross Site Scripting (XSS) vulnerabilitymaxfoundry Social Share Buttons
- CVE-2026-88794XML External Entity injection in Sparx Enterprise ArchitectSparx Systems Enterprise Architect
- CVE-2026-110723In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from tEclipse Foundation Eclipse Connected Services Platform
- CVE-2026-110724In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from tEclipse Foundation Eclipse Connected Services Platform
- CVE-2026-109692WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerabilityThemeGrill User Registration
- CVE-2026-109693WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation vulnerabilityWP ManageNinja Fluent CRM
- CVE-2026-79837HPE NonStop SQL/MX UDR SERVER - Service disruption vulnerabilityHewlett Packard Enterprise HPE NonStop SQL/MX UDR SERVER
- CVE-2026-104025Path traversal in PeaZip object preview allows execution of arbitrary programs via a crafted archive entry namePeaZip
- CVE-2026-79834HPE NonStop SQL/MX SQLCAT - Unauthorized command execution vulnerabilityHewlett Packard Enterprise HPE NonStop SQL/MX SQLCAT
- CVE-2026-79833HPE NonStop ANSI SQLUTIL - Denial of Service vulnerabilityHewlett Packard Enterprise HPE NonStop ANSI SQLUTIL
- CVE-2026-109695WordPress FluentCart plugin <= 1.7.1 - Sensitive Data Exposure vulnerabilityWPManageNinja FluentCart
- CVE-2026-108491WordPress Everest Forms plugin <= 3.6.1 - Cross Site Scripting (XSS) vulnerabilityEverest Forms
- CVE-2026-108498WordPress BSK PDF Manager plugin <= 3.8.1 - Cross Site Scripting (XSS) vulnerabilitybannersky BSK PDF Manager
- CVE-2026-79832HPE NonStop SQL/MX Executor - Buffer overflow vulnerabilityHewlett Packard Enterprise HPE NonStop SQL/MX Executor
- CVE-2026-79829HPE NonStop HTTP WEBSERVER - Memory corruption vulnerabilityHewlett Packard Enterprise HPE NonStop HTTP WEBSERVER
- CVE-2026-79828HPE NonStop Debug Utilities - Heap buffer overflow vulnerabilityHewlett Packard Enterprise HPE NonStop Debug Utilities
- CVE-2026-79827HPE NonStop Inspect Subsystem - Heap buffer overflow vulnerabilityHewlett Packard Enterprise HPE NonStop Inspect Subsystem
- CVE-2026-79826HPE NonStop OCAX - Heap buffer overflow vulnerabilityHewlett Packard Enterprise HPE NonStop OCAX
- CVE-2026-39997Unauthenticated Remote Input Injection in QNAP HD Station's remotepadQNAP Systems HybridDesk Station
- CVE-2026-18660Jetty proxy blacklist performs case-sensitive matching of case-insensitive DNS hostnamesEclipse Foundation org.eclipse.jetty:jetty-server · Eclipse…
- CVE-2026-34009**Container Escape** Host user home directory mounted with write access into application containerQNAP Systems Notes Station
- CVE-2026-34008**Privilege Escalation** World-writable crontab path monitored and executed by root-owned processQNAP Systems Notes Station
- CVE-2026-53882Path Traversal in Virtualization Station VM ImportQNAP Systems Virtualization Station
- CVE-2026-44084Access Code Forgery in Video Station leading to unauthorized media accessQNAP Systems Video Station
- CVE-2026-41545WebSocket timelapse path traversal and command injectionQNAP Systems QuMagie
- CVE-2026-34015Remote Code Execution in upload.php of Video StationQNAP Systems Video Station
- CVE-2026-34014ds-move-files.sh is writable and executed as rootQNAP Systems Download Station
- CVE-2026-26245SQLi#2 SQL Injection in class_videos.php getSmartVideosByOffsetQNAP Systems Video Station
- CVE-2026-26244SQLi#1 SQL Injection in class_videos.php _getFiltersQNAP Systems Video Station
- CVE-2026-26243Arbitrary Folder Deletion in Qsync Central 5.0.0.5QNAP Systems Qsync Central
- CVE-2026-79825HPE NonStop NDSREST - Heap buffer overflow vulnerabilityHewlett Packard Enterprise HPE NonStop NDSREST
- CVE-2026-79824HPE NonStop Python 3.x - Directory traversal vulnerabilityHewlett Packard Enterprise HPE NonStop Python 3.x
- CVE-2026-18661In Eclipse Jetty, across various versions of `jetty-annotations`, and `jetty-eeN-annotations`, the Jakarta Spec authoritative url-pattern ruEclipse Foundation org.eclipse.jetty.ee11:jetty-ee11-ann… +3
- CVE-2026-63315Plaintext storage of a password in WebCTISlican IPx
- CVE-2026-63314SQL Injection in WebCTISlican IPx
- CVE-2026-35088Inadequate Encryption Strength in Slican telephone exchangesSlican IPx · Slican CCT-1668 +2
- CVE-2026-101290CVE-2026-101290SICK AG Sick_Safetyscanners_Base CPP Driver
- CVE-2026-77711When Jetty's `HttpClient` make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication RequiredEclipse Foundation Eclipse Jetty
- CVE-2026-76184In Eclipse Jetty, HttpClient may receive a redirect of the form: ``` /secure/../evil ``` If an attacker is able to control the rEclipse Foundation Eclipse Jetty
- CVE-2026-16437An authentication bypass vulnerability in GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizVizMitsubishi Electric GENESIS · Mitsubishi Electric Iconi… +17
- CVE-2026-102477In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a gRPC endpoint does have a configurable peEclipse Foundation Eclipse Vert.x
- CVE-2026-102464In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Eclipse Vert.x MQTT (vertx-mqtt) MqttClEclipse Foundation Eclipse Vert.x
- CVE-2026-102461In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the uniqueItems keyword validation uses an Eclipse Foundation Eclipse Vert.x
- CVE-2023-32198Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacksSUSE steve · github.com/rancher/steve
- CVE-2026-103224In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the MySQL message decoder aggregates inbounEclipse Foundation Eclipse Vert.x
- CVE-2024-22031Rancher users who can create Projects can gain access to arbitrary projectsSUSE rancher · github.com/rancher/rancher
- CVE-2026-103223In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the PostgreSQL message decoder reads the 4-Eclipse Foundation Eclipse Vert.x
- CVE-2026-102466In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x MySQL client (vertx-mysql-clientEclipse Foundation Eclipse Vert.x
- CVE-2026-102463In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the binary array decoder in vertx-pg-clientEclipse Foundation Eclipse Vert.x
- CVE-2026-109855undici WebSocket client vulnerable to Denial of Service via failed HTTP/2 handshakeundici
- CVE-2026-102462In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the TDS message decoder in the Vert.x MSSQLEclipse Foundation Eclipse Vert.x
- CVE-2026-102465In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x Redis client RESP parser pre-allEclipse Foundation Eclipse Vert.x
- CVE-2026-102475In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the HTTP proxy provides a body transformer interceptor that reEclipse Foundation Eclipse Vert.x
- CVE-2026-102467In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the WebSocket implementation does not definEclipse Foundation Eclipse Vert.x
- CVE-2026-101311Multiple vulnerabilities in bhyve device modelsFreeBSD
- CVE-2026-101310Multiple vulnerabilities in bhyve device modelsFreeBSD
- CVE-2026-101309Multiple vulnerabilities in bhyve device modelsFreeBSD
- CVE-2026-101307Remotely triggerable buffer overflow in tcp_rackFreeBSD
- CVE-2026-41544Path Traversal leading to Arbitrary File Move, Docker Escape, and Host RCE in /calapi/renameUpload endpointQNAP Systems QcalAgent
- CVE-2026-39993Path Traversal to Root RCE in QNAP Download Station via Addon/Search addon ParameterQNAP Systems Download Station
- CVE-2026-101303IPv6 UDP sendto(2) bypasses jail loopback restrictionFreeBSD
- CVE-2025-68404vcs_pentest Race Condition Authentication Bypass Vulnerability in QuRouter management interfaceQNAP Systems QuRouter
- CVE-2025-66275Remote code execution via command injectionQNAP Systems Video Station
- CVE-2025-66272Arbitrary file deletion and remote code executionQNAP Systems Video Station
- CVE-2026-79822HPE NonStop TNS/X Native Inspect - Execution flow vulnerabilityHewlett Packard Enterprise HPE NonStop TNS/X Native Inspect
- CVE-2026-101305Multiple jail filesystem root escapesFreeBSD
- CVE-2026-101304Multiple jail filesystem root escapesFreeBSD
- CVE-2026-81534Email Customizer for WooCommerce (Pro) <= 3.9.5 - Authenticated (Subscriber+) Remote Code Execution via 'template' ParameterThemeHigh Email Customizer for WooCommerce
- CVE-2026-79821HPE NonStop SOAP 4.0 - Memory corruptionHewlett Packard Enterprise HPE NonStop SOAP
- CVE-2026-58100Memory safety bugs in kqueue copy-on-fork implementationFreeBSD
- CVE-2026-58099Memory safety bugs in kqueue copy-on-fork implementationFreeBSD
- CVE-2026-58098Heap out-of-bounds access in semop(2)FreeBSD
- CVE-2026-96537Tutor LMS < 4.1.1 - Unauthenticated Tutor Page Force-Publish and Content OverwriteTutor LMS
- CVE-2026-74920Document Gallery <= 5.1.1 - Reflected XSS via data-shortcode AttributeDocument Gallery
- CVE-2026-15090Link Library <= 7.9.2 - Unauthenticated SQL Injection via 'link_url' Parameterjackdewey Link Library
- CVE-2026-88043Mang Board WP <= 2.4.0 - Unauthenticated Stored Cross-Site Scripting via 'data_type' Parameterkitae-park Mang Board
- CVE-2026-18548Groundhogg <= 4.5.14 - Unauthenticated Stored Cross-Site Scripting via 'ref' Parametertrainingbusinesspros Groundhogg — CRM, Newsletters, and Mar…
- CVE-2026-18586Premium Packages <= 7.0.5 - Unauthenticated Stored Cross-Site Scripting via 'order_email'codename065 Premium Packages – Sell Digital Products Secure…
- CVE-2026-17031Checkout Field Manager (Checkout Manager) for WooCommerce <= 7.9.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Media Deletion via Checkout File Field Attachment IDquadlayers Checkout Field Manager (Checkout Manager) for Wo…
- CVE-2026-76665HPE NonStop EXPAND - Buffer Overflow vulnerabilityHewlett Packard Enterprise HPE NonStop EXPAND
- CVE-2026-3712PhastPress <= 3.10 - Unauthenticated Server-Side Request Forgery via 'src' Parameterkiboit PhastPress
- CVE-2026-93484Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement.Znuny
- CVE-2026-110912In DragonFly BSD through 6.4.2 before 4bb22ff, the ARP input handlers arpintr() and in_arpinput() (sys/netinet/if_ether.c) do not validate tDragonFlyBSD
- CVE-2026-110908Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS command injection vulnerability in the FRR sNetgate pfSense-pkg-frr
- CVE-2026-76663HPE NonStop TELSERV - Memory corruption vulnerabilityHewlett Packard Enterprise HPE NonStop TELSERV
- CVE-2026-110907Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishandles tokens.BackdropCMS Backdrop
- CVE-2026-76661HPE NonStop QIOMON - Memory corruption vulnerabilityHewlett Packard Enterprise HPE NonStop QIOMON
- CVE-2026-76660HPE NonStop CIPSAM - Memory corruption vulnerabilityHewlett Packard Enterprise HPE NonStop CIPSAM
- CVE-2026-76066IntentKit 2.6.3 Executor Tool Authorization Bypass via ToolNodecrestalnetwork intentkit
- CVE-2026-76659HPE NonStop TCP/IP UTILITIES - Denial of Service vulnerabilityHewlett Packard Enterprise HPE NonStop TCP/IP UTILITIES
- CVE-2026-109430Ellucian WebAdvisor 3.2 Unauthenticated XXE InjectionEllucian WebAdvisor
- CVE-2026-77931MoviePilot 3.1.5 Command Injection via ExecuteCommandTooljxxghp MoviePilot
- CVE-2026-73799HPE NonStop SNMP Trap Multiplexer - Memory Corruption vulnerabilityHewlett Packard Enterprise HPE NonStop SNMP Trap Multiplexer
- CVE-2026-0993SODOLA SL902-SWTGW124AS Buffer Overflow DoS via Multipart Boundary ParserSODOLA SL902-SWTGW124AS
- CVE-2026-106700ELADMIN v2.7 and earlier contains an improper access control vulnerability in the user-management endpoint PUT /api/users/resetPwd of me.zhe
- CVE-2026-106708XXL-JOB 3.5.0-SNAPSHOT and earlier contains a Cross-Site Request Forgery (CSRF) vulnerability in the user management controller (JobUserCont
- CVE-2026-36436An issue in Trisolutions BRPerfX version 1.4.4.0 exposes LDAP credentials in plaintext within the administrative configuration interface.
- CVE-2026-88753A Regular-Expression Denial of Service (ReDoS) in the Markdown2.
- CVE-2026-95155FasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.9.13, allows attackers to cause a denial
- CVE-2026-95179An issue in lottie-android 6.7.1 and earlier (and master) allows a remote attacker to cause a denial of service via a crafted Lottie animati
Medium, low and unrated 270
- CVE-2026-92777A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass dLenovo Idea Tab Pro · Idea Tab/ Lenovo Tab K11 Gen +12
- CVE-2026-89062A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver that could allow a local authenticated useLenovo Energy Management Driver
- CVE-2026-16755A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an unauthLenovo Smart Camera C33 · Lenovo Smart Camera C35 +9
- CVE-2026-16754A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese maLenovo Smart Camera C33 · Lenovo Smart Camera C35 +9
- CVE-2026-110917Memory corruption in SVG in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page.Google Chrome
- CVE-2026-110918Memory corruption in Core in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page.Google Chrome
- CVE-2026-111368ClassroomIO through 1.0.0 IDOR via Course Submission Update, Grade and Delete RoutesClassroomIO
- CVE-2026-111367BillionMail through 4.9 Forgeable JWTs via Default Signing KeyaaPanel BillionMail
- CVE-2026-111358SendPortal sendportal-core through 4.0.1 Cross-Workspace Tag Attachment via Subscriber Formmettle sendportal-core
- CVE-2026-111355zhontai Admin.Core through 10.1.0 Authorization Bypass via User and Organization By-ID Endpointszhontai Admin.Core
- CVE-2026-111354crmeb_java through 3.1 Authorization Bypass via Front Order Express and Refund Endpointscrmeb_java
- CVE-2026-111353Peppermint through 0.5.5 Missing Authorization via Time-Tracking and Attachment Upload EndpointsPeppermint-Lab peppermint
- CVE-2026-111351metasfresh through 5.175 Authorization Bypass via /rest/api/board REST APImetasfresh
- CVE-2026-111350Papermark through 0.22.0 Missing Authorization in Data Room Viewer Group APIPapermark
- CVE-2026-111349Craftplan through 0.7.5 Missing Authorization via CRM Customer JSON:API and GraphQLpuemos Craftplan
- CVE-2026-111348Likeshop through 3.5.1 IDOR via AfterSale API Refund Endpointslikeshop
- CVE-2026-111346ZenTao PMS through 22.6 Authorization Bypass via action::editCommenteasysoft zentaopms
- CVE-2026-111345Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/messages/conversation/:idpolonel trudesk
- CVE-2026-111344APITable through 1.14.0-beta Authorization Bypass via GET /node/{nodeId}/descriptionapitable
- CVE-2026-111343pig through 4.1.1 Missing Authorization via GET /admin/user/details/{id}pig-mesh pig
- CVE-2026-111332OxiCloud 0.9.1 through 0.9.3 Incorrect Authorization via Share Ring CookieAtalayaLabs OxiCloud
- CVE-2026-111331Dokploy through 0.30.8 Cross-Organization Authorization Bypass via port tRPC RouterDokploy
- CVE-2026-111324rustdesk-api through 2.7 Authorization Bypass via POST /api/sysinfolejianwen rustdesk-api
- CVE-2026-111323RedAmon through 7.0.1 Unauthenticated SSRF via /tradecraft/verify Endpointsamugit83 RedAmon
- CVE-2026-111321TaskingAI through 0.3.0 SSRF via OpenAPI servers[0].url in ActionsTaskingAI
- CVE-2026-111320ValueCell through 0.1.20 Unauthenticated SSRF via /api/v1/models/checkValueCell-ai ValueCell
- CVE-2026-111284Aureus ERP through 1.6.0 Stored XSS via Time Off Holiday Action ModalWebkul Aureus ERP
- CVE-2026-111278NivoCart through 2.5.1 CAPTCHA Bypass via Answer Disclosed in Page HTMLnivocart
- CVE-2026-111275nifti_clib through 3.0.1 Stack Out-of-Bounds Access via nifti_convert_n2hdr2nimNIFTI-Imaging nifti_clib
- CVE-2026-111274unarr through 1.1.1 Heap Out-of-Bounds Read via zip_parse_extra_fieldsselmf unarr
- CVE-2026-111273unarr through 1.1.1 Off-by-One Heap Buffer Overflow via tar_get_nameselmf unarr
- CVE-2026-111272LibRaw through 0.22.2 Heap Out-of-Bounds Read via parseNikonMakernote ShotInfoLibRaw
- CVE-2026-111271libmodplug through 0.8.9.1 Heap Out-of-Bounds Read via CSoundFile::ReadAMS2Konstanty Bialkowski libmodplug
- CVE-2026-111270libmodplug through 0.8.9.1 Heap Out-of-Bounds Write via CSoundFile::ReadDSMKonstanty Bialkowski libmodplug
- CVE-2026-111269libical through 4.0.6 Heap Out-of-Bounds Read via icalvalue_decode_ical_stringlibical
- CVE-2024-58397MP4v2 through 2.1.3 Heap Out-of-Bounds Read via MP4File::GetChaptersenzo1982 mp4v2
- CVE-2026-94135Apache Airflow SFTP provider: Async SFTP hook disables host-key verification by defaultApache Software Foundation Apache Airflow SFTP provider
- CVE-2026-96806Apache Airflow Keycloak provider: Keycloak auth manager: logout does not invalidate the session — JWTMiddleware mints an unrevoked replacement tokenApache Software Foundation Apache Airflow Keycloak provider
- CVE-2026-92228Apache Airflow Keycloak provider: Keycloak multi-team provisioning grants every team role global audit-log readApache Software Foundation Apache Airflow Keycloak provider
- CVE-2026-108455Microsoft Office PowerPoint Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-108454Microsoft Office PowerPoint Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-108453Microsoft Office PowerPoint Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-108438Microsoft Office Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-108436Microsoft Office Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-108435Microsoft Office Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-108434Microsoft Office Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-104198ZoneMinder failed token handling bypasses web authenticationzoneminder
- CVE-2026-108126temporal-proxy payload decryption is not bound to the request namespaceTemporal Technologies temporal-proxy
- CVE-2026-111172@casl/ability 6.7.5 before 7.0.2 Prototype Pollution via rulesToFields setByPathstalniy @casl/ability
- CVE-2026-111171Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 CCIP-Read SSRF Bypassethereum web3.py · web3
- CVE-2026-111169La Suite Docs through 6.0.1 Authorization Bypass via Comment Thread Creationsuitenumerique docs
- CVE-2026-111168LibreDesk before 2.9.0-rc.8 Stored XSS via SVG Upload Content-Type Parameterabhinavxd libredesk
- CVE-2026-111167GNU LibreDWG through 0.14.8612 Out-of-Bounds Read in acds_private AcDs DecoderGNU LibreDWG
- CVE-2026-111166libmikmod through 3.3.15 Heap Out-of-Bounds Read via IMF_Loadsezero libmikmod
- CVE-2026-111165libmikmod through 3.3.15 Out-of-Bounds Read in MTM_Load via Channel Countsezero libmikmod
- CVE-2026-111164UADE through 3.05 Out-of-Bounds Read in uade_filemagic via Short Moduleuade
- CVE-2026-111163WildMIDI through 0.5.0 Heap Out-of-Bounds Read via _WM_ParseNewHmiMindwerks WildMIDI
- CVE-2026-111162WildMIDI through 0.5.0 Heap Out-of-Bounds Read via _WM_ParseNewHmpMindwerks WildMIDI
- CVE-2026-111161libADLMIDI 1.6.2 through 1.6.2.1 Stack Out-of-Bounds Write via BW_MidiSequencer noteStatesWohlstand libADLMIDI
- CVE-2026-111159libewf through 20260924 Heap Out-of-Bounds Read via L01 Extended Attribute Parsinglibyal libewf
- CVE-2026-111158EarthScope libmseed through 3.5.4 Heap Out-of-Bounds Read via ms3_detectEarthScope libmseed
- CVE-2026-111157SoX through 14.4.2 Heap Out-of-Bounds Write via MS ADPCM WAV Decodingsox
- CVE-2026-111156libTiMidity through 0.2.8 Out-of-Bounds Access via SoundFont Preset Headersezero libtimidity
- CVE-2026-111155libTiMidity through 0.2.8 Out-of-Bounds Read via SoundFont Loader sndfont.csezero libtimidity
- CVE-2026-111154libTiMidity through 0.2.8 Stack Out-of-Bounds Write via parse_gen in SoundFont Loadersezero libtimidity
- CVE-2026-111153Game Music Emu (libgme) through 0.6.5 Out-of-Bounds Read via Classic_Emu::mute_voices_libgme game-music-emu
- CVE-2026-111152Game Music Emu (libgme) through 0.6.5 Heap Out-of-Bounds Read via AY Loaderlibgme game-music-emu
- CVE-2026-111151OpenJPH through 0.32.0 Heap Out-of-Bounds Write in HTJ2K Cleanup-Pass Decoderaous72 OpenJPH
- CVE-2026-111150ValleyBell libvgm through commit a6eed945 Heap Out-of-Bounds Read via DecompressDataBlkValleyBell libvgm
- CVE-2026-111149FreeImage through 3.19.23 Heap Out-of-Bounds Read via PICT Unpack32Bitsdanoli3 FreeImage · FreeImage
- CVE-2026-111148libsidplayfp through 3.1.1 Heap Out-of-Bounds Read via SidTuneBase::acceptSidTunelibsidplayfp
- CVE-2026-111147Libyal libesedb through 20260704 Heap Out-of-Bounds Read via libesedb_record_get_multi_valuelibyal libesedb
- CVE-2026-111146ytnef through 2.1.2 Heap Out-of-Bounds Read via MAPIPrint in lib/ytnef.cYeraze ytnef
- CVE-2026-111145ytnef through 2.1.2 Heap Out-of-Bounds Read via DecompressRTFYeraze ytnef
- CVE-2026-111144libansilove 1.3.0 through 1.4.2 NULL Pointer Dereference via ansilove_xbinlibansilove
- CVE-2026-111143Ansilove libansilove through 1.4.2 Out-of-Bounds Read via ansilove_xbin RLE Decodinglibansilove
- CVE-2026-111142Zziplib through 0.13.80 Out-of-Bounds Read via zzip_disk_findfirstgdraheim zziplib
- CVE-2026-111141zziplib through 0.13.80 Out-of-Bounds Read via __zzip_parse_root_directory ZIP64 Parsinggdraheim zziplib
- CVE-2026-111140libregf through 20260526 Heap Out-of-Bounds Read via libregf_value_item_read_value_datalibyal libregf
- CVE-2026-111139NetSurf libnsbmp through 0.1.7 Out-of-Bounds Read via bmp_decode_maskNetSurf libnsbmp
- CVE-2026-111138NetSurf libnsbmp through 0.1.7 Out-of-Bounds Read in RLE8 and RLE4 DecodersNetSurf libnsbmp
- CVE-2026-111137libsmi through 0.5.0 Out-of-Bounds Write via smiValueAsString OCTET STRING DEFVALamartin755 libsmi
- CVE-2026-111136libInstPatch through 1.1.7 Heap Out-of-Bounds Write via ipatch_sf2_gen_is_validswami libinstpatch
- CVE-2026-111135libfwsi through 20260522 Heap Out-of-Bounds Read via libfwsi_mtp_volume_values_read_datalibyal libfwsi
- CVE-2026-111134libfwsi through 20260522 Heap Out-of-Bounds Read via libfwsi_mtp_file_entry_values_read_datalibyal libfwsi
- CVE-2026-111133libfsapfs through 20260921 Heap Out-of-Bounds Read via libfsapfs_key_encrypted_key_read_datalibyal libfsapfs
- CVE-2026-111132GNOME libgxps through 0.3.2 Heap Out-of-Bounds Read via path_geometry_start_elementGNOME libgxps
- CVE-2026-111131libxmp through 4.7.4 Stack Out-of-Bounds Read via P61A Depackerlibxmp
- CVE-2026-111130OpenSlide through 4.0.1 Heap Out-of-Bounds Read via MIRAX get_tile_positionopenslide
- CVE-2026-111129Assimp through 6.0.5 NULL Pointer Dereference via Ogre Animation Trackassimp
- CVE-2026-111128Assimp through 6.0.5 NULL Pointer Dereference via Ogre Importer Bone Assignmentassimp
- CVE-2026-111127catdoc through 0.95 Out-of-Bounds Read via xls2csv copy_unicode_stringcatdoc
- CVE-2026-111126catdoc through 0.95 Out-of-Bounds Read in xls2csv MULRK Record Handlercatdoc
- CVE-2026-111125CFITSIO through 4.7.0 Heap Out-of-Bounds Read via HCOMPRESS input_nnybbleHEASARC cfitsio
- CVE-2026-111124CFITSIO through 4.7.0 Heap Out-of-Bounds Read via Negative ZDITHER0 SeedHEASARC cfitsio
- CVE-2026-111123FluidSynth through 2.6.1 Out-of-Bounds Write via SoundFont Modulator Destinationfluidsynth
- CVE-2026-110878Aureus ERP through 1.6.0 Stored XSS via Inventory Rule Action Informationaureuserp
- CVE-2026-110877AdPlug through 2.4 Heap Out-of-Bounds Read via CdmoLoader::loadadplug
- CVE-2026-110876AdPlug through 2.4 Out-of-Bounds Read via CxsmPlayer::play_note in XSM Filesadplug
- CVE-2026-110875AdPlug through 2.4 Heap Buffer Overflow via CksmPlayer::update in ksm.cppadplug
- CVE-2026-111252OpenNMS denial of service via XML entity expansionThe OpenNMS Group Meridian · The OpenNMS Group Horizon
- CVE-2026-87029undici vulnerable to Denial of Service via unhandled exception in the decompress interceptorundici
- CVE-2026-111233Netgate pfSense CE 2.7.1 through 2.9.0 Reflected XSS via firewall_rules.phpNetgate pfSense CE
- CVE-2026-111232Netgate pfSense CE 2.3.0 through 2.9.0 Stored XSS via Separator ColorNetgate pfSense CE
- CVE-2026-111230Netgate pfSense CE through 2.9.0 Local File Read via Dynamic DNS Update URLNetgate pfSense CE
- CVE-2026-111228Netgate pfSense CE 2.7.1 through 2.9.0 CRLF Injection via services_unbound_advanced.phpNetgate pfSense CE
- CVE-2026-111227Netgate pfSense CE through 2.9.0 CRLF Injection via services_unbound_acls.phpNetgate pfSense CE
- CVE-2026-111225Netgate pfSense CE 2.5.0 through 2.9.0 OS Command Injection via openvpn.learn-address.shNetgate pfSense CE
- CVE-2026-109131Ansible-ui: ansible-ui: stored xss via unsafe javascript url scheme in hub collection module documentation (formatparturl)Red Hat Ansible Automation Platform
- CVE-2026-62322Python Social Auth: Login CSRF in LINE backend (LineOAuth2) — missing OAuth state validation (incomplete fix of 5.0.0 campaign)python-social-auth social-core · social-auth-core
- CVE-2026-109932undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG bufferingundici
- CVE-2026-105660Unvalidated HTTP/1 request-target authority lets a client choose conn.host and conn.port in Banditmtrudel bandit · bandit
- CVE-2026-92707MessagePack: Nested arrays can blow past buffer length limitsMessagePack-CSharp · MessagePack
- CVE-2026-57183Scoold: Forged JWT Accepted as Admin API Token Allowing Unauthorized Access to Sensitive Configuration and LogsErudika scoold
- CVE-2026-55840Scoold: Open Redirect in getBackToUrl() allows phishing via domain-prefix startsWith bypassErudika scoold
- CVE-2026-55842Scoold: CORS wildcard origin with credentials enabled allows cross-origin authenticated API access from any domainErudika scoold
- CVE-2026-55871GYM One: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in admin/users/index.phpmayerbalintdev GYM-One
- CVE-2026-94621AliasVault: Server-Side Request Forgery via DNS rebinding in Favicon Extractionaliasvault · ghcr.io/aliasvault/aliasvault +2
- CVE-2026-109841undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokensundici
- CVE-2026-110361WordPress Infinite Uploads plugin <= 3.4.1 - Sensitive Data Exposure vulnerabilityClikIT Infinite Uploads
- CVE-2026-110362WordPress PlanetStudio Payment Gateway plugin <= 1.3.3 - Broken Access Control vulnerabilityPlanet studio PlanetStudio Payment Gateway
- CVE-2026-109893WordPress Presto Player plugin <= 4.5.3 - Cross Site Scripting (XSS) vulnerabilityBrainstorm Force Presto Player
- CVE-2026-110374WordPress Login with phone number plugin <= 1.8.77 - Broken Access Control vulnerabilityHamid Alinia Login with phone number
- CVE-2026-108499WordPress Knowledge Base plugin <= 3.2.0 - Broken Access Control vulnerabilityWebberZone Knowledge Base
- CVE-2026-110364WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin <= 2.3.23 - Broken Access Control vulnerabilityWP Desk Flexible Quantity – Measurement Price Calculator fo…
- CVE-2026-109924undici vulnerable to Denial of Service via unbounded memory in the EventSource parserundici
- CVE-2026-110375WordPress Download Monitor plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerabilityWP Chill Download Monitor
- CVE-2026-109689WordPress Sunshine Photo Cart plugin <= 3.7.4 - Broken Access Control vulnerabilityWP Sunshine Sunshine Photo Cart
- CVE-2026-110360WordPress Ajax Search Lite plugin <= 4.14.5 - Broken Access Control vulnerabilityWPdreams Ajax Search Lite
- CVE-2026-109897WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerabilityWP Chill Strong Testimonials
- CVE-2026-63430ammonia: mXSS in ammonia via MathML `annotation-xml` encoding striprust-ammonia ammonia · ammonia
- CVE-2026-110378WordPress Ninja Forms Signature Contract Add-On plugin <= 3.2.5 - Broken Access Control vulnerabilityWP E-Signature Ninja Forms Signature Contract Add-On
- CVE-2026-96449WordPress WP EasyPay plugin <= 4.5.4 - Broken Access Control vulnerabilityWPExperts WP EasyPay
- CVE-2026-106604WordPress YITH WooCommerce Compare plugin <= 3.15.0 - Cross Site Scripting (XSS) vulnerabilityYITH WooCommerce Compare
- CVE-2026-103083WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin <= 1.5.3 - Insecure Direct Object References (IDOR) vulnerabilityELEXtensions ELEX WooCommerce Advanced Bulk Edit Products,…
- CVE-2026-108175WordPress MDTF plugin <= 1.4.0 - Cross Site Scripting (XSS) vulnerabilityPluginUs.Net MDTF
- CVE-2026-110381WordPress Simply Schedule Appointments plugin <= 1.6.12.35 - Insecure Direct Object References (IDOR) vulnerabilityNSquared Simply Schedule Appointments
- CVE-2026-103350WordPress Booking and Rental Manager plugin <= 2.8.0 - Other vulnerability Type vulnerabilityMagepeople Booking and Rental Manager
- CVE-2026-110888WordPress AI Engine plugin <= 3.8.3 - Broken Access Control vulnerabilityMeow Apps AI Engine
- CVE-2026-110891WordPress WordLift plugin <= 3.54.15 - Broken Access Control vulnerabilityWordLift Srl WordLift
- CVE-2026-110890WordPress JetSmartFilters plugin <= 3.8.6 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetSmartFilters
- CVE-2026-110367WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerabilityWPExperts APIExperts Square for WooCommerce
- CVE-2026-110371WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerabilityWP Chill Strong Testimonials
- CVE-2026-55414NL Portal Backend Libraries: Unauthenticated form resolver forwards the privileged Objecten-API token to a caller-supplied URL (SSRF)nl-portal-backend-libraries · nl.nl-portal:form
- CVE-2026-54683NL Portal Backend Libraries: Document contents remained downloadable by any logged-in user until 3.0.3 (incomplete fix of CVE-2026-49463)nl-portal-backend-libraries · nl.nl-portal:documenten-api
- CVE-2026-102740AsyncHttpClient: Resumable download index store is created world-readable and follows a planted symlinkAsyncHttpClient async-http-client
- CVE-2026-55875Helium: SSRF via External Calendar URL Allows Authenticated Users to Probe Internal NetworkHeliumEdu platform
- CVE-2026-55876Helium: Stored XSS via Unrestricted SVG File Upload — Authenticated Users Can Store Executable ScriptsHeliumEdu platform
- CVE-2026-104266tinytag: Infinite loop when parsing certain M4A files containing invalid atomstinytag
- CVE-2026-61702OpenPrinting CUPS: root-side banner file disclosureOpenPrinting cups
- CVE-2026-55453CUPS ipp backend status-line injection can update queue PPD and lead to conditional RCE as lp via foomatic-ripOpenPrinting cups
- CVE-2026-55480CUPS copy_model() creates a predictable PPD tempfile without O_EXCL/O_NOFOLLOW (symlink TOCTOU, lp → root)OpenPrinting cups
- CVE-2026-55467CUPS fax option values bypass the CVE-2026-34980 control-character sanitizer (incomplete fix)OpenPrinting cups
- CVE-2026-102527Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routesnuxt-modules og-image · nuxt-og-image
- CVE-2026-102631authd: Account takeover via username fallback in identity matching after IdP email reassignmentCanonical authd
- CVE-2026-77468Lychee: Missing Authentication for Critical Function and Allocation of Resources Without Limits or Throttling on /docs/apiLycheeOrg Lychee
- CVE-2026-61610Lychee: unauthenticated photo starring reveals existence of private photos when photos_star_visibility=anonymousLycheeOrg Lychee
- CVE-2026-57569Lychee: Distinct post-fix SSRF variant in Photo::fromUrl due to missing IP pinning after DNS-based validationLycheeOrg Lychee
- CVE-2026-57568Lychee: Stored XSS via Markdown javascript: Links in Photo and Album Descriptions (Gallery View)LycheeOrg Lychee
- CVE-2026-100350kin-openapi deepObject query decoding repeatedly compiles an invariant regular expressiongetkin kin-openapi · github.com/getkin/kin-openapi
- CVE-2026-100347kin-openapi: Unauthenticated panic (DoS) in openapi3filter legacy router via non-canonical/unsupported HTTP method on a static pathgetkin kin-openapi · github.com/getkin/kin-openapi
- CVE-2026-97667Nexus Repository 3 - Stored Cross-Site Scripting in Browse UISonatype Nexus Repository
- CVE-2026-97666Nexus Repository 3 - Unsafe Reflection in ExtDirect Repository EndpointSonatype Nexus Repository
- CVE-2026-100348kin-openapi spec loader panics on a self-referential additionalProperties $ref (nil-pointer DoS)getkin kin-openapi · github.com/getkin/kin-openapi
- CVE-2026-111096In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic build log was possibleJetBrains TeamCity
- CVE-2026-111092In JetBrains YouTrack before 2026.2.19575 2026.3.16075 2026.3.16397 2026.3.16402 mail rules allowed a project admin to execute cross-projectJetBrains YouTrack
- CVE-2026-58394OPNsense: Stored XSS in Administration Settings via Certificate Descriptionopnsense core
- CVE-2026-58392OPNsense: Stored XSS in Services: NTP GPSopnsense core
- CVE-2026-58395OPNsense: XPath injection in MVC safe-deleteopnsense core
- CVE-2026-58393OPNsense: OpenVPN Client Specific Override common_name allows path traversal in generated CSO filesopnsense core
- CVE-2026-58391OPNsense: Stored XSS in Firewall Rules/NAT pages via a HTML-attribute breakoutopnsense core
- CVE-2026-75505EspoCRM: Access control bypass in Mass Update letting regular user with Mass Update permission read any attachmentespocrm
- CVE-2026-77460EspoCRM: Mass email template renderer leaks restricted record fieldsespocrm
- CVE-2026-63130EspoCRM: Admin path traversal in LabelManager (Custom Label saving) allows arbitrary `.json` file read, write and deleteespocrm
- CVE-2026-79843HPE NonStop SQL/MX EXE - out-of-bounds read vulnerabilityHewlett Packard Enterprise HPE NonStop SQL/MX EXE
- CVE-2026-59994EspoCRM: Pre-authentication stored HTML injection in stream notification emails about email receivedespocrm
- CVE-2026-55154EspoCRM: CSV/Formula Injection sanitizer bypass via leading whitespace/control characters in exportespocrm
- CVE-2026-55184EspoCRM: Stored XSS in wysiwyg template fields if CSP is disabledespocrm
- CVE-2026-53575EspoCRM: Persistent XSS via CSP nonce injection in applicationName setting by admin userespocrm
- CVE-2026-46691EspoCRM: IDOR in Import exportErrors Endpoint Leaks CSV Data of Other Usersespocrm
- CVE-2026-46708EspoCRM: Target list Opt-Out actions allows opting out record without access Target List and access to recordespocrm
- CVE-2026-79841HPE NonStop RDMA SERVICES NSK - Out-of-bounds memory write vulnerabilityHewlett Packard Enterprise HPE NonStop RDMA SERVICES NSK
- CVE-2026-46694EspoCRM: Portal User ACL Bypass Exposes Internal Stream Notesespocrm
- CVE-2026-106153Cross-site Scripting (XSS) in Kendo UI for jQuery Calendar and MultiViewCalendarProgress Software Kendo UI for jQuery
- CVE-2026-106151Cross-Site Scripting in Validator Validation Messages in Kendo UI for jQueryProgress Software Kendo UI for jQuery
- CVE-2026-106150Cross-site Scripting (XSS) in Kendo UI for jQuery Splitter, Window, and TooltipProgress Software Kendo UI for jQuery
- CVE-2026-106149Cross-site Scripting (XSS) in Kendo UI for jQuery MenuProgress Software Kendo UI for jQuery
- CVE-2026-110936A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8).Siemens Software Center
- CVE-2026-104024Incomplete dangerous-extension list in PeaZip object open allows execution of a program or command from a crafted archive entry without confirmationPeaZip
- CVE-2026-106148Cross-Site Scripting via TabStrip, Menu, and PanelBar Image URLs in Kendo UI for jQueryProgress Software Kendo UI for jQuery
- CVE-2026-106147Cross-Site Scripting via ListBox Bound Text in Kendo UI for jQueryProgress Software Kendo UI for jQuery
- CVE-2026-106161Cross-Site Scripting via Badge Text Binding in Kendo UI for jQueryProgress Software Kendo UI for jQuery
- CVE-2026-106160Prototype Pollution via Model.accept and kendo.setter in Kendo UI for jQueryProgress Software Kendo UI for jQuery
- CVE-2026-106159Cross-Site Scripting via ToolBar ButtonGroup URLs in Kendo UI for jQueryProgress Software Kendo UI for jQuery
- CVE-2026-106158Cross-Site Scripting via Scheduler Resource Colors in Kendo UI for jQueryProgress Software Kendo UI for jQuery
- CVE-2026-106157Cross-Site Scripting via PanelBar Item URLs in Kendo UI for jQueryProgress Software Kendo UI for jQuery
- CVE-2026-106162Cross-Site Scripting in FileManager Drag Hints in Kendo UI for jQueryProgress Software Kendo UI for jQuery
- CVE-2026-106163Cross-site Scripting (XSS) in Kendo UI for jQuery FileBrowser and ImageBrowserProgress Software Kendo UI for jQuery
- CVE-2026-102389WordPress Broken Link Checker plugin <= 2.4.14.1 - Content Injection vulnerabilityWPMU DEV Broken Link Checker
- CVE-2026-105882WordPress User Registration plugin <= 5.2.8 - Cross Site Scripting (XSS) vulnerabilityThemeGrill User Registration
- CVE-2026-110726In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from tEclipse Foundation Eclipse Connected Services Platform
- CVE-2026-79836HPE NonStop SQL/MX Run-Time Statistics - Information disclosure and DoS vulnerabilityHewlett Packard Enterprise HPE NonStop SQL/MX Run-Time Stat…
- CVE-2026-8145WholesaleX <= 3.0.8 - Unauthenticated Limited Privilege Escalation via 'process_registration'wpxpo WholesaleX – All-in-One B2B Solution with Wholesale P…
- CVE-2026-79835HPE Nonstop KMS Server - Buffer overflow vulnerabilityHewlett Packard Enterprise HPE Nonstop KMS Server
- CVE-2026-79831HPE NonStop Posix User Threads - Heap buffer overflow vulnerabilityHewlett Packard Enterprise HPE NonStop Posix User Threads
- CVE-2026-79830HPE NonStop Kernel Level Thread Model Lib - Stack buffer overflow vulnerabilityHewlett Packard Enterprise HPE NonStop Kernel Level Thread…
- CVE-2026-17525My Control System 26.5 – Disk space exhaustion due to incorrect temporary file cleanup after XML conversionABB My Control System
- CVE-2026-18659Unauthenticated authorization bypass in ConstraintSecurityHandler - HTTP method-omission matched by substringEclipse Foundation org.eclipse.jetty.ee11:jetty-ee11-ser… +3
- CVE-2026-18662In Eclipse Jetty, across various versions of `jetty-security`, and `jetty-eeN-security`, two or more security constraints with the same httpEclipse Foundation org.eclipse.jetty.ee11:jetty-ee11-ser… +3
- CVE-2026-19864Eclipse Jetty's `SessionAuthentication` retains authentication credentials in a serializable object.Eclipse Foundation org.eclipse.jetty:jetty-security
- CVE-2026-47790Privilege Escalation via QuFTP Log-based XSSQNAP Systems QuFTP Service
- CVE-2026-39991Stored Cross-Site Scripting (XSS) in Note Station file upload functionalityQNAP Systems Notes Station
- CVE-2026-34007**RCE** Unsanitized `X-Forwarded-For` header passed to `shell_exec()` via broken IP validation fallback in `getClientIP()`QNAP Systems Notes Station
- CVE-2026-41541Symlink creation in qsyncsrv.cgiQNAP Systems Qsync Central
- CVE-2026-39989SSRF in QNAP Download StationQNAP Systems Download Station
- CVE-2026-79823HPE NonStop EMS Distributor - Buffer Overflow vulnerabilityHewlett Packard Enterprise HPE NonStop EMS Distributor
- CVE-2026-104618sdbootutil: world-readable debug logSUSE Linux Enterprise Server · openSUSE Leap +1
- CVE-2026-76182In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to template URIs such as `index?p=$path`, wheEclipse Foundation Eclipse Jetty
- CVE-2026-104617sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/<pid>/cmdlineSUSE Linux Enterprise Server · openSUSE Leap +1
- CVE-2026-72528"Handmade Marketplace App - Creema" provided by CREEMA LTD."Handmade Marketplace App - Creema" for Android · "Creema -…
- CVE-2026-75559The smartphone application "Vehicle Inspection Certificate Viewer" contains a vulnerability in which sensitive information may be included iMinistry of Land, Infrastructure, Transport and Tourism Veh…
- CVE-2026-96614"ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme.GEO "ゲオアプリ" for Android · GEO "ゲオアプリ" for iOS
- CVE-2026-105271"ゲオアプリ" provided by GEO CORPORATION contains an issue with cleartext storage of sensitive information, which may allow an attacker to obtainGEO "ゲオアプリ" for Android · GEO "ゲオアプリ" for iOS
- CVE-2025-23390Fleet doesn’t validate a server’s certificate when connecting through SSHSUSE fleet · github.com/rancher/fleet
- CVE-2026-108092Social Media Auto Post & Scheduler <= 9.1.4 - Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information Exposurepr-gateway Blog2Social: Social Media Auto Post & Scheduler
- CVE-2026-101308TOCTOU race between sound(4) buffer resizing and mmapFreeBSD
- CVE-2026-19377Improper certificate validation in Cato Client tunnel handshakeCato Networks Cato Client for Windows · Cato Networks Ca… +3
- CVE-2026-24723NULL Pointer Dereference in utilRequest.cgiQNAP Systems File Station
- CVE-2026-24722Null Pointer Dereference in File Station 5QNAP Systems File Station
- CVE-2026-24721Null Pointer Dereference in File Station 5QNAP Systems File Station
- CVE-2026-24718Path Traversal Vulnerability in Qsync Central's qsyncsrv.cgiQNAP Systems Qsync Central
- CVE-2026-24715Lack of Reproducible Vulnerability Evidence in QNAP ReportQNAP Systems QuRouter
- CVE-2026-22896Stored XSS via Interface Name in Network & Virtual Switch AppQNAP Systems Network & Virtual Switch
- CVE-2025-68403Inadequate Steps to Confirm Vulnerability in QuRouterQNAP Systems QuRouter
- CVE-2025-29897Stack-based Buffer Overflow in qsyncsrv.cgiQNAP Systems Qsync Central
- CVE-2025-29896NULL Pointer Dereference in qsyncsrv.cgiQNAP Systems Qsync Central
- CVE-2025-29895NULL Pointer Dereference in qsyncsrv.cgiQNAP Systems Qsync Central
- CVE-2026-101302Remote DoS via receive-side kernel TLSFreeBSD
- CVE-2026-110934Improper validation of array index vulnerability in Samsung Open Source Vyond allows Input Data Manipulation.Samsung Open Source Vyond
- CVE-2026-110933Uncaught exception vulnerability in Samsung Open Source Vyond allows Input Data Manipulation.Samsung Open Source Vyond
- CVE-2026-11905Elementor Website Builder <= 4.2.3 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'is_public' and 'keys_conversion_map' Parameterselemntor Elementor Website Builder – more than just a page…
- CVE-2026-92429Rede Itaú for WooCommerce 3.7.1 - 5.5.2 - Unauthenticated Order Status Manipulation via maxiPago Debit WebhookRede Itaú for WooCommerce
- CVE-2026-92428Rede Itaú for WooCommerce < 5.5.3 - Unauthenticated Order Status Manipulation via 3DS Failure WebhookRede Itaú for WooCommerce
- CVE-2026-103324Cardinity Payment Gateway for WooCommerce 3.2.6 - 3.4.1 - Unauthenticated Arbitrary Order Payment Forgery via Empty-Default Project SecretCardinity Payment Gateway for WooCommerce
- CVE-2026-76668HPE NonStop Kernel - Access to unmapped or privileged dataHewlett Packard Enterprise HPE NonStop Kernel
- CVE-2026-106031Spin Wheel < 2.2.1 - Unauthenticated Coupon Code Disclosure via Forged Spin ResultSpin Wheel
- CVE-2026-104643Easy HTTPS Redirection (SSL) < 2.0.2 - Subscriber+ Scan Result Disclosure and Site-Wide URL RewriteEasy HTTPS Redirection
- CVE-2026-103304eaSYNC < 1.3.31 - Unauthenticated Cancellation Request Creation and Email Template UpdateeaSYNC Booking
- CVE-2026-78087VK Blocks <= 1.126.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Group Block 'linkToPost' Featurevektor-inc VK Blocks
- CVE-2026-15180Tracking Code Manager <= 2.6.0 - Reflected Cross-Site Scripting via 'TCM_ErrorMessages'data443 Tracking Code Manager
- CVE-2026-18557Photo Gallery by 10Web <= 1.8.42 - Reflected Cross-Site Scripting via 'title' ParameterPhoto Gallery by 10Web – Mobile-Friendly Image Gallery
- CVE-2026-17001Import and export users and customers <= 2.4.5 - Authenticated (Custom+) Stored Cross-Site Scripting via User Meta Profile Fieldscarazo Import and export users and customers
- CVE-2026-86803Ocean Extra <= 2.6.0 - Unauthenticated Arbitrary Shortcode Execution via 'oceanwp_library' Shortcode Templateoceanwp Ocean Extra
- CVE-2026-78001Post and Page Builder by BoldGrid <= 1.27.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-label' AttributePost and Page Builder by BoldGrid – Visual Drag and Drop Ed…
- CVE-2026-76667HPE NonStop EXPAND - Out-of-Bounds memory read vulnerabilityHewlett Packard Enterprise HPE NonStop EXPAND
- CVE-2026-76666HPE NonStop EXPAND - Out-of-Bounds memory readHewlett Packard Enterprise HPE NonStop EXPAND
- CVE-2026-14572Kirki <= 6.2.0 - Authenticated (Custom+) Stored Cross-Site Scripting via Page Builder Text Contentthemeum Kirki – Freeform Page Builder, Website Builder & Cu…
- CVE-2026-76664HPE NonStop EXPAND - Out-of-Bounds memory read/writeHewlett Packard Enterprise HPE NonStop EXPAND
- CVE-2026-110909Wheels CLI through 4.1.0 does not verify that the local development server answering its HTTP requests belongs to the current project.Wheels CLI
- CVE-2026-76662HPE NonStop TELSERV - Memory corruption vulnerabilityHewlett Packard Enterprise HPE NonStop TELSERV
- CVE-2026-76656HPE NonStop TCP/IP UTILITIES - Denial of Service vulnerabilityHewlett Packard Enterprise HPE NonStop TCP/IP UTILITIES
- CVE-2026-110904ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostrophecms/page?all=1 cApostropheCMS · apostrophe
- CVE-2026-110810ggml-org whisper.cpp Model Loader whisper_model_load out-of-boundsggml-org whisper.cpp
- CVE-2026-106701ELADMIN v2.7 and before is vulnerable to Cross Site Scripting (XSS) via the component WebSocketServer, SpringSecurityConfig, deploy.vue.
- CVE-2026-106706XXL-JOB through 3.5.0-SNAPSHOT is vulnerable to stored cross-site scripting (XSS) in the GLUE code editor.
- CVE-2026-106707XXL-JOB <=3.5.0-SNAPSHOT contains a stored Cross-Site Scripting (XSS) vulnerability in the job log list page (/joblog).
- CVE-2026-52167A stack overflow in the gensub_ParsePsb() function of AOC LC32D1320 v2.05 allows attackers to cause a Denial of Service (DoS) via supplying
- CVE-2026-78850An issue in Matomo v.5.11.2 allows a remote attacker to obtain sensitive information via the SiteContentDetector / SitesManager component.
- CVE-2026-78851Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the GravExten
- CVE-2026-95180An issue in Justson agentweb-core v5.1.6-androidx and earlier allows a local attacker to obtain sensitive information and launch non-exporte