# CVEs published 2026-10-15

553 CVEs were published on October 15, 2026: 48 critical, 235 high. 3 are now in CISA KEV. Days are UTC.

- [CVE-2026-84823](https://cve.now/CVE-2026-84823.md): Org.wildfly.core: wildfly: path traversal in take-snapshot discloses the server configuration to the monitor role (CVSS 7.1, Red Hat Enterprise Linux · Red Hat Fuse +2)
- [CVE-2026-92777](https://cve.now/CVE-2026-92777.md): A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass d (CVSS 5.4, Lenovo Idea Tab Pro · Idea Tab/ Lenovo Tab K11 Gen +12)
- [CVE-2026-92629](https://cve.now/CVE-2026-92629.md): A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, th (CVSS 7.0, Lenovo Baiying PC Client)
- [CVE-2026-89062](https://cve.now/CVE-2026-89062.md): A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver that could allow a local authenticated use (CVSS 6.8, Lenovo Energy Management Driver)
- [CVE-2026-89057](https://cve.now/CVE-2026-89057.md): A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain una (CVSS 7.0, Lenovo Idea Tab Pro · Idea Tab/ Lenovo Tab K11 Gen +11)
- [CVE-2026-75941](https://cve.now/CVE-2026-75941.md): A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese market, that could allo (CVSS 8.6, Lenovo Legion Zone Application)
- [CVE-2026-16755](https://cve.now/CVE-2026-16755.md): A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an unauth (CVSS 6.0, Lenovo Smart Camera C33 · Lenovo Smart Camera C35 +9)
- [CVE-2026-16754](https://cve.now/CVE-2026-16754.md): A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese ma (CVSS 5.9, Lenovo Smart Camera C33 · Lenovo Smart Camera C35 +9)
- [CVE-2026-110914](https://cve.now/CVE-2026-110914.md): Memory corruption in Workers in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code inside (CVSS 8.8, Google Chrome)
- [CVE-2026-110915](https://cve.now/CVE-2026-110915.md): Use after free in Compositing in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome)
- [CVE-2026-110916](https://cve.now/CVE-2026-110916.md): Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code (CVSS 9.6, Google Chrome)
- [CVE-2026-110920](https://cve.now/CVE-2026-110920.md): Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-110921](https://cve.now/CVE-2026-110921.md): Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr (CVSS 8.8, Google Chrome)
- [CVE-2026-110917](https://cve.now/CVE-2026-110917.md): Memory corruption in SVG in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page. (CVSS 4.3, Google Chrome)
- [CVE-2026-110918](https://cve.now/CVE-2026-110918.md): Memory corruption in Core in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page. (CVSS 4.3, Google Chrome)
- [CVE-2026-110919](https://cve.now/CVE-2026-110919.md): Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr (CVSS 8.8, Google Chrome)
- [CVE-2026-110913](https://cve.now/CVE-2026-110913.md): Memory corruption in DOM in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome)
- [CVE-2026-110922](https://cve.now/CVE-2026-110922.md): Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox v (CVSS 8.8, Google Chrome)
- [CVE-2026-111369](https://cve.now/CVE-2026-111369.md): ClassroomIO through 1.0.0 Incorrect Authorization via Lesson Update and Delete Routes (CVSS 7.1, ClassroomIO)
- [CVE-2026-111368](https://cve.now/CVE-2026-111368.md): ClassroomIO through 1.0.0 IDOR via Course Submission Update, Grade and Delete Routes (CVSS 6.1, ClassroomIO)
- [CVE-2026-111367](https://cve.now/CVE-2026-111367.md): BillionMail through 4.9 Forgeable JWTs via Default Signing Key (CVSS 6.9, aaPanel BillionMail)
- [CVE-2026-111366](https://cve.now/CVE-2026-111366.md): cool-admin-midway through 8.0.0 Authorization Bypass via /admin/sys/user Endpoints (CVSS 8.6, cool-team-official cool-admin-midway)
- [CVE-2026-111365](https://cve.now/CVE-2026-111365.md): cool-admin-midway through 8.0.0 Missing Authorization via System Role Endpoints (CVSS 7.0, cool-team-official cool-admin-midway)
- [CVE-2026-111364](https://cve.now/CVE-2026-111364.md): MinDoc through 2.2-beta.2 IDOR via /api/:key/content/:id GET Branch (CVSS 7.1, mindoc-org MinDoc)
- [CVE-2026-111363](https://cve.now/CVE-2026-111363.md): BISHENG through 3.0.0-beta4 IDOR via /api/v1/knowledge/file\_bbox (CVSS 7.1, dataelement bisheng)
- [CVE-2026-111359](https://cve.now/CVE-2026-111359.md): CRMEB 5.6.1 through 6.0.0 IDOR via giftDetail and receiveGift (CVSS 7.1, CRMEB)
- [CVE-2026-111358](https://cve.now/CVE-2026-111358.md): SendPortal sendportal-core through 4.0.1 Cross-Workspace Tag Attachment via Subscriber Form (CVSS 5.3, mettle sendportal-core)
- [CVE-2026-111356](https://cve.now/CVE-2026-111356.md): MacCMS v10 through 2026.1000.4056 Account Takeover via Password Recovery Brute-Force (CVSS 9.1, magicblack MacCMS)
- [CVE-2026-111355](https://cve.now/CVE-2026-111355.md): zhontai Admin.Core through 10.1.0 Authorization Bypass via User and Organization By-ID Endpoints (CVSS 5.3, zhontai Admin.Core)
- [CVE-2026-111354](https://cve.now/CVE-2026-111354.md): crmeb\_java through 3.1 Authorization Bypass via Front Order Express and Refund Endpoints (CVSS 2.3, crmeb\_java)
- [CVE-2026-111353](https://cve.now/CVE-2026-111353.md): Peppermint through 0.5.5 Missing Authorization via Time-Tracking and Attachment Upload Endpoints (CVSS 5.3, Peppermint-Lab peppermint)
- [CVE-2026-111352](https://cve.now/CVE-2026-111352.md): ThinkCMF through 8.0.1 Incorrect Authorization in Admin REST API (CVSS 8.7, ThinkCMF)
- [CVE-2026-111351](https://cve.now/CVE-2026-111351.md): metasfresh through 5.175 Authorization Bypass via /rest/api/board REST API (CVSS 2.3, metasfresh)
- [CVE-2026-111350](https://cve.now/CVE-2026-111350.md): Papermark through 0.22.0 Missing Authorization in Data Room Viewer Group API (CVSS 2.3, Papermark)
- [CVE-2026-111349](https://cve.now/CVE-2026-111349.md): Craftplan through 0.7.5 Missing Authorization via CRM Customer JSON:API and GraphQL (CVSS 6.9, puemos Craftplan)
- [CVE-2026-111348](https://cve.now/CVE-2026-111348.md): Likeshop through 3.5.1 IDOR via AfterSale API Refund Endpoints (CVSS 5.3, likeshop)
- [CVE-2026-111347](https://cve.now/CVE-2026-111347.md): go-ldap-admin through 0.6.2 Hard-Coded RSA Private Key via /base/decryptpwd (CVSS 8.2, opsre go-ldap-admin)
- [CVE-2026-111346](https://cve.now/CVE-2026-111346.md): ZenTao PMS through 22.6 Authorization Bypass via action::editComment (CVSS 5.3, easysoft zentaopms)
- [CVE-2026-111345](https://cve.now/CVE-2026-111345.md): Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/messages/conversation/:id (CVSS 5.3, polonel trudesk)
- [CVE-2026-111344](https://cve.now/CVE-2026-111344.md): APITable through 1.14.0-beta Authorization Bypass via GET /node/{nodeId}/description (CVSS 5.3, apitable)
- [CVE-2026-111343](https://cve.now/CVE-2026-111343.md): pig through 4.1.1 Missing Authorization via GET /admin/user/details/{id} (CVSS 5.3, pig-mesh pig)
- [CVE-2026-111332](https://cve.now/CVE-2026-111332.md): OxiCloud 0.9.1 through 0.9.3 Incorrect Authorization via Share Ring Cookie (CVSS 6.3, AtalayaLabs OxiCloud)
- [CVE-2026-111331](https://cve.now/CVE-2026-111331.md): Dokploy through 0.30.8 Cross-Organization Authorization Bypass via port tRPC Router (CVSS 5.3, Dokploy)
- [CVE-2026-111330](https://cve.now/CVE-2026-111330.md): JuggleIM im-server through 1.8.16 Weak Password Hashing via Unsalted SHA-1 (CVSS 8.2, JuggleIM)
- [CVE-2026-111329](https://cve.now/CVE-2026-111329.md): JuggleIM im-server through 1.8.16 Default Admin Credentials in Admin Console (CVSS 9.3, JuggleIM)
- [CVE-2026-111324](https://cve.now/CVE-2026-111324.md): rustdesk-api through 2.7 Authorization Bypass via POST /api/sysinfo (CVSS 6.9, lejianwen rustdesk-api)
- [CVE-2026-111323](https://cve.now/CVE-2026-111323.md): RedAmon through 7.0.1 Unauthenticated SSRF via /tradecraft/verify Endpoint (CVSS 6.9, samugit83 RedAmon)
- [CVE-2026-111322](https://cve.now/CVE-2026-111322.md): Archon 0.2.13 through 0.11.1 Missing Authentication via /api/\* Control API (CVSS 9.3, coleam00 Archon)
- [CVE-2026-111321](https://cve.now/CVE-2026-111321.md): TaskingAI through 0.3.0 SSRF via OpenAPI servers\[0\].url in Actions (CVSS 5.3, TaskingAI)
- [CVE-2026-111320](https://cve.now/CVE-2026-111320.md): ValueCell through 0.1.20 Unauthenticated SSRF via /api/v1/models/check (CVSS 6.9, ValueCell-ai ValueCell)
- [CVE-2026-111313](https://cve.now/CVE-2026-111313.md): JobOps through 0.13.1 SSRF via POST /api/manual-jobs/fetch (CVSS 7.1, DaKheera47 JobOps)
- [CVE-2026-111312](https://cve.now/CVE-2026-111312.md): OpenHealth through 0.2.0 Missing Authentication via /api/health-data/\[id\] Route (CVSS 9.2, OpenHealthForAll OpenHealth)
- [CVE-2026-111284](https://cve.now/CVE-2026-111284.md): Aureus ERP through 1.6.0 Stored XSS via Time Off Holiday Action Modal (CVSS 5.1, Webkul Aureus ERP)
- [CVE-2026-111283](https://cve.now/CVE-2026-111283.md): BMC Helix Network Management 26.3.00 before 26.3.01 Authentication Bypass via SAML Configuration (CVSS 9.5, BMC Helix Network Management)
- [CVE-2026-111282](https://cve.now/CVE-2026-111282.md): iso14229 before 0.10.1 Out-of-Bounds Read via Handle\_0x38\_RequestFileTransfer (CVSS 8.8, driftregion iso14229)
- [CVE-2026-111281](https://cve.now/CVE-2026-111281.md): Jooan JA-A12 Unauthenticated Root RCE via SetDiagMode Hard-Coded Credentials (CVSS 9.3, Jooan JA-A12)
- [CVE-2026-111280](https://cve.now/CVE-2026-111280.md): snap7 through 1.4.3 Out-of-Bounds Write via TSnap7MicroClient::opReadArea (CVSS 8.3, davenardella snap7)
- [CVE-2026-111279](https://cve.now/CVE-2026-111279.md): Dragonfly through 2.0.2 Unbounded Memory Allocation via Negative COUNT in HRANDFIELD, ZRANDMEMBER and SRANDMEMBER (CVSS 8.7, dragonflydb dragonfly)
- [CVE-2026-111278](https://cve.now/CVE-2026-111278.md): NivoCart through 2.5.1 CAPTCHA Bypass via Answer Disclosed in Page HTML (CVSS 6.9, nivocart)
- [CVE-2026-111277](https://cve.now/CVE-2026-111277.md): NivoCart through 2.5.1 Guest Order Invoice Disclosure via account/order/download (CVSS 8.7, nivocart)
- [CVE-2026-111275](https://cve.now/CVE-2026-111275.md): nifti\_clib through 3.0.1 Stack Out-of-Bounds Access via nifti\_convert\_n2hdr2nim (CVSS 6.9, NIFTI-Imaging nifti\_clib)
- [CVE-2026-111274](https://cve.now/CVE-2026-111274.md): unarr through 1.1.1 Heap Out-of-Bounds Read via zip\_parse\_extra\_fields (CVSS 6.8, selmf unarr)
- [CVE-2026-111273](https://cve.now/CVE-2026-111273.md): unarr through 1.1.1 Off-by-One Heap Buffer Overflow via tar\_get\_name (CVSS 6.9, selmf unarr)
- [CVE-2026-111272](https://cve.now/CVE-2026-111272.md): LibRaw through 0.22.2 Heap Out-of-Bounds Read via parseNikonMakernote ShotInfo (CVSS 6.8, LibRaw)
- [CVE-2026-111271](https://cve.now/CVE-2026-111271.md): libmodplug through 0.8.9.1 Heap Out-of-Bounds Read via CSoundFile::ReadAMS2 (CVSS 6.8, Konstanty Bialkowski libmodplug)
- [CVE-2026-111270](https://cve.now/CVE-2026-111270.md): libmodplug through 0.8.9.1 Heap Out-of-Bounds Write via CSoundFile::ReadDSM (CVSS 6.9, Konstanty Bialkowski libmodplug)
- [CVE-2026-111269](https://cve.now/CVE-2026-111269.md): libical through 4.0.6 Heap Out-of-Bounds Read via icalvalue\_decode\_ical\_string (CVSS 6.9, libical)
- [CVE-2024-58397](https://cve.now/CVE-2024-58397.md): MP4v2 through 2.1.3 Heap Out-of-Bounds Read via MP4File::GetChapters (CVSS 6.9, enzo1982 mp4v2)
- [CVE-2026-94135](https://cve.now/CVE-2026-94135.md): Apache Airflow SFTP provider: Async SFTP hook disables host-key verification by default (CVSS 4.3, Apache Software Foundation Apache Airflow SFTP provider)
- [CVE-2026-96806](https://cve.now/CVE-2026-96806.md): Apache Airflow Keycloak provider: Keycloak auth manager: logout does not invalidate the session — JWTMiddleware mints an unrevoked replacement token (CVSS 5.8, Apache Software Foundation Apache Airflow Keycloak provider)
- [CVE-2026-94134](https://cve.now/CVE-2026-94134.md): Apache Airflow SSH provider, Apache Airflow SFTP provider: SSH hook disables host-key verification by default (CVSS 9.1, Apache Software Foundation Apache Airflow SSH provider · Ap…)
- [CVE-2026-92228](https://cve.now/CVE-2026-92228.md): Apache Airflow Keycloak provider: Keycloak multi-team provisioning grants every team role global audit-log read (CVSS 6.5, Apache Software Foundation Apache Airflow Keycloak provider)
- [CVE-2026-109468](https://cve.now/CVE-2026-109468.md): ASP.NET Core Denial of Service Vulnerability (CVSS 7.5, Microsoft Visual Studio · Microsoft System.Formats.Cbor)
- [CVE-2026-108455](https://cve.now/CVE-2026-108455.md): Microsoft Office PowerPoint Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-108454](https://cve.now/CVE-2026-108454.md): Microsoft Office PowerPoint Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-108453](https://cve.now/CVE-2026-108453.md): Microsoft Office PowerPoint Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-108452](https://cve.now/CVE-2026-108452.md): Microsoft Office SharePoint Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Server Subscription Edition)
- [CVE-2026-108451](https://cve.now/CVE-2026-108451.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-108450](https://cve.now/CVE-2026-108450.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-108449](https://cve.now/CVE-2026-108449.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-108448](https://cve.now/CVE-2026-108448.md): Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 7.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-108447](https://cve.now/CVE-2026-108447.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-108446](https://cve.now/CVE-2026-108446.md): Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2)
- [CVE-2026-108445](https://cve.now/CVE-2026-108445.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-108444](https://cve.now/CVE-2026-108444.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-108443](https://cve.now/CVE-2026-108443.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-108442](https://cve.now/CVE-2026-108442.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-108441](https://cve.now/CVE-2026-108441.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-108440](https://cve.now/CVE-2026-108440.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-108439](https://cve.now/CVE-2026-108439.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-108438](https://cve.now/CVE-2026-108438.md): Microsoft Office Word Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-108437](https://cve.now/CVE-2026-108437.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-108436](https://cve.now/CVE-2026-108436.md): Microsoft Office Word Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-108435](https://cve.now/CVE-2026-108435.md): Microsoft Office Word Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-108434](https://cve.now/CVE-2026-108434.md): Microsoft Office Word Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-108433](https://cve.now/CVE-2026-108433.md): Microsoft Office Word Security Feature Bypass Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-108432](https://cve.now/CVE-2026-108432.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-108431](https://cve.now/CVE-2026-108431.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-108430](https://cve.now/CVE-2026-108430.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1)
- [CVE-2026-108429](https://cve.now/CVE-2026-108429.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-108428](https://cve.now/CVE-2026-108428.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-108427](https://cve.now/CVE-2026-108427.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-108426](https://cve.now/CVE-2026-108426.md): Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2026-111357](https://cve.now/CVE-2026-111357.md): Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege… (CVSS 7.0, KEV, Ivanti Connect Secure)
- [CVE-2026-105040](https://cve.now/CVE-2026-105040.md): EnergizeLab Eilik User-ID Mass Assignment Account Takeover (CVSS 8.8, EnergizeLab NestJS auth service)
- [CVE-2026-105039](https://cve.now/CVE-2026-105039.md): EnergizeLab Station Middleware Admin APIs Missing Role Checks (CVSS 9.6, EnergizeLab station-middleware)
- [CVE-2026-105038](https://cve.now/CVE-2026-105038.md): EnergizeLab Eilik Unauthenticated AI Model Administration and Runtime Model Switching (CVSS 9.8, EnergizeLab FastAPI AI inference server)
- [CVE-2026-105037](https://cve.now/CVE-2026-105037.md): EnergizeLab Station Middleware Authenticated Path Traversal Arbitrary File Read (CVSS 9.9, EnergizeLab station-middleware)
- [CVE-2026-105036](https://cve.now/CVE-2026-105036.md): EnergizeLab Firmware Updates Downloaded over HTTP Without Integrity Checks (CVSS 7.5, EnergizeLab Robot firmware · EnergizeLab AI Station firm… +1)
- [CVE-2026-105035](https://cve.now/CVE-2026-105035.md): EnergizeLab FirmwareUpdater Universal Hard-Coded AES Key (CVSS 7.8, EnergizeLab FirmwareUpdater)
- [CVE-2026-105034](https://cve.now/CVE-2026-105034.md): EnergizeLab Eilik Unauthenticated Device-Token Issuance for Arbitrary Serial Numbers (CVSS 8.2, EnergizeLab NestJS auth service)
- [CVE-2026-105033](https://cve.now/CVE-2026-105033.md): EnergizeLab AI Station Default Root Credentials with SSH Enabled (CVSS 8.8, EnergizeLab AI Station firmware)
- [CVE-2026-105032](https://cve.now/CVE-2026-105032.md): EnergizeLab Eilik AI Skill Upload Unauthenticated Path Traversal Arbitrary File Write (CVSS 9.1, EnergizeLab FastAPI AI inference server)
- [CVE-2026-102764](https://cve.now/CVE-2026-102764.md): Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support (CVSS 9.3, KEV, BeyondTrust Remote Support)
- [CVE-2026-104198](https://cve.now/CVE-2026-104198.md): ZoneMinder failed token handling bypasses web authentication (CVSS 5.3, zoneminder)
- [CVE-2026-108126](https://cve.now/CVE-2026-108126.md): temporal-proxy payload decryption is not bound to the request namespace (CVSS 6.0, Temporal Technologies temporal-proxy)
- [CVE-2026-45165](https://cve.now/CVE-2026-45165.md): Idira Secrets Manager (Self-Hosted): Improper Authorization in REST API (CVSS 8.6, Palo Alto Networks Idira Secrets Manager)
- [CVE-2026-111172](https://cve.now/CVE-2026-111172.md): @casl/ability 6.7.5 before 7.0.2 Prototype Pollution via rulesToFields setByPath (CVSS 6.0, stalniy @casl/ability)
- [CVE-2026-111171](https://cve.now/CVE-2026-111171.md): Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 CCIP-Read SSRF Bypass (CVSS 6.3, ethereum web3.py · web3)
- [CVE-2026-111170](https://cve.now/CVE-2026-111170.md): kedro-datasets 9.3.0 through 9.6.0 Path Traversal via MatplotlibDataset Plot Name (CVSS 7.1, kedro-org kedro-datasets · kedro-datasets)
- [CVE-2026-111169](https://cve.now/CVE-2026-111169.md): La Suite Docs through 6.0.1 Authorization Bypass via Comment Thread Creation (CVSS 2.3, suitenumerique docs)
- [CVE-2026-111168](https://cve.now/CVE-2026-111168.md): LibreDesk before 2.9.0-rc.8 Stored XSS via SVG Upload Content-Type Parameter (CVSS 5.1, abhinavxd libredesk)
- [CVE-2026-111167](https://cve.now/CVE-2026-111167.md): GNU LibreDWG through 0.14.8612 Out-of-Bounds Read in acds\_private AcDs Decoder (CVSS 6.9, GNU LibreDWG)
- [CVE-2026-111166](https://cve.now/CVE-2026-111166.md): libmikmod through 3.3.15 Heap Out-of-Bounds Read via IMF\_Load (CVSS 6.8, sezero libmikmod)
- [CVE-2026-111165](https://cve.now/CVE-2026-111165.md): libmikmod through 3.3.15 Out-of-Bounds Read in MTM\_Load via Channel Count (CVSS 6.8, sezero libmikmod)
- [CVE-2026-111164](https://cve.now/CVE-2026-111164.md): UADE through 3.05 Out-of-Bounds Read in uade\_filemagic via Short Module (CVSS 6.8, uade)
- [CVE-2026-111163](https://cve.now/CVE-2026-111163.md): WildMIDI through 0.5.0 Heap Out-of-Bounds Read via \_WM\_ParseNewHmi (CVSS 6.8, Mindwerks WildMIDI)
- [CVE-2026-111162](https://cve.now/CVE-2026-111162.md): WildMIDI through 0.5.0 Heap Out-of-Bounds Read via \_WM\_ParseNewHmp (CVSS 6.9, Mindwerks WildMIDI)
- [CVE-2026-111161](https://cve.now/CVE-2026-111161.md): libADLMIDI 1.6.2 through 1.6.2.1 Stack Out-of-Bounds Write via BW\_MidiSequencer noteStates (CVSS 6.9, Wohlstand libADLMIDI)
- [CVE-2026-111160](https://cve.now/CVE-2026-111160.md): LightLLM through 1.2.0 Unauthenticated DoS via pd\_kv\_trans\_params Deserialization (CVSS 8.7, ModelTC LightLLM)
- [CVE-2026-111159](https://cve.now/CVE-2026-111159.md): libewf through 20260924 Heap Out-of-Bounds Read via L01 Extended Attribute Parsing (CVSS 6.9, libyal libewf)
- [CVE-2026-111158](https://cve.now/CVE-2026-111158.md): EarthScope libmseed through 3.5.4 Heap Out-of-Bounds Read via ms3\_detect (CVSS 6.8, EarthScope libmseed)
- [CVE-2026-111157](https://cve.now/CVE-2026-111157.md): SoX through 14.4.2 Heap Out-of-Bounds Write via MS ADPCM WAV Decoding (CVSS 6.9, sox)
- [CVE-2026-111156](https://cve.now/CVE-2026-111156.md): libTiMidity through 0.2.8 Out-of-Bounds Access via SoundFont Preset Header (CVSS 6.9, sezero libtimidity)
- [CVE-2026-111155](https://cve.now/CVE-2026-111155.md): libTiMidity through 0.2.8 Out-of-Bounds Read via SoundFont Loader sndfont.c (CVSS 6.9, sezero libtimidity)
- [CVE-2026-111154](https://cve.now/CVE-2026-111154.md): libTiMidity through 0.2.8 Stack Out-of-Bounds Write via parse\_gen in SoundFont Loader (CVSS 6.9, sezero libtimidity)
- [CVE-2026-111153](https://cve.now/CVE-2026-111153.md): Game Music Emu (libgme) through 0.6.5 Out-of-Bounds Read via Classic\_Emu::mute\_voices\_ (CVSS 6.8, libgme game-music-emu)
- [CVE-2026-111152](https://cve.now/CVE-2026-111152.md): Game Music Emu (libgme) through 0.6.5 Heap Out-of-Bounds Read via AY Loader (CVSS 6.8, libgme game-music-emu)
- [CVE-2026-111151](https://cve.now/CVE-2026-111151.md): OpenJPH through 0.32.0 Heap Out-of-Bounds Write in HTJ2K Cleanup-Pass Decoder (CVSS 6.9, aous72 OpenJPH)
- [CVE-2026-111150](https://cve.now/CVE-2026-111150.md): ValleyBell libvgm through commit a6eed945 Heap Out-of-Bounds Read via DecompressDataBlk (CVSS 6.8, ValleyBell libvgm)
- [CVE-2026-111149](https://cve.now/CVE-2026-111149.md): FreeImage through 3.19.23 Heap Out-of-Bounds Read via PICT Unpack32Bits (CVSS 6.9, danoli3 FreeImage · FreeImage)
- [CVE-2026-111148](https://cve.now/CVE-2026-111148.md): libsidplayfp through 3.1.1 Heap Out-of-Bounds Read via SidTuneBase::acceptSidTune (CVSS 6.8, libsidplayfp)
- [CVE-2026-111147](https://cve.now/CVE-2026-111147.md): Libyal libesedb through 20260704 Heap Out-of-Bounds Read via libesedb\_record\_get\_multi\_value (CVSS 6.9, libyal libesedb)
- [CVE-2026-111146](https://cve.now/CVE-2026-111146.md): ytnef through 2.1.2 Heap Out-of-Bounds Read via MAPIPrint in lib/ytnef.c (CVSS 6.9, Yeraze ytnef)
- [CVE-2026-111145](https://cve.now/CVE-2026-111145.md): ytnef through 2.1.2 Heap Out-of-Bounds Read via DecompressRTF (CVSS 6.9, Yeraze ytnef)
- [CVE-2026-111144](https://cve.now/CVE-2026-111144.md): libansilove 1.3.0 through 1.4.2 NULL Pointer Dereference via ansilove\_xbin (CVSS 6.8, libansilove)
- [CVE-2026-111143](https://cve.now/CVE-2026-111143.md): Ansilove libansilove through 1.4.2 Out-of-Bounds Read via ansilove\_xbin RLE Decoding (CVSS 6.8, libansilove)
- [CVE-2026-111142](https://cve.now/CVE-2026-111142.md): Zziplib through 0.13.80 Out-of-Bounds Read via zzip\_disk\_findfirst (CVSS 6.8, gdraheim zziplib)
- [CVE-2026-111141](https://cve.now/CVE-2026-111141.md): zziplib through 0.13.80 Out-of-Bounds Read via \_\_zzip\_parse\_root\_directory ZIP64 Parsing (CVSS 5.7, gdraheim zziplib)
- [CVE-2026-111140](https://cve.now/CVE-2026-111140.md): libregf through 20260526 Heap Out-of-Bounds Read via libregf\_value\_item\_read\_value\_data (CVSS 6.9, libyal libregf)
- [CVE-2026-111139](https://cve.now/CVE-2026-111139.md): NetSurf libnsbmp through 0.1.7 Out-of-Bounds Read via bmp\_decode\_mask (CVSS 6.8, NetSurf libnsbmp)
- [CVE-2026-111138](https://cve.now/CVE-2026-111138.md): NetSurf libnsbmp through 0.1.7 Out-of-Bounds Read in RLE8 and RLE4 Decoders (CVSS 6.8, NetSurf libnsbmp)
- [CVE-2026-111137](https://cve.now/CVE-2026-111137.md): libsmi through 0.5.0 Out-of-Bounds Write via smiValueAsString OCTET STRING DEFVAL (CVSS 6.9, amartin755 libsmi)
- [CVE-2026-111136](https://cve.now/CVE-2026-111136.md): libInstPatch through 1.1.7 Heap Out-of-Bounds Write via ipatch\_sf2\_gen\_is\_valid (CVSS 6.9, swami libinstpatch)
- [CVE-2026-111135](https://cve.now/CVE-2026-111135.md): libfwsi through 20260522 Heap Out-of-Bounds Read via libfwsi\_mtp\_volume\_values\_read\_data (CVSS 6.9, libyal libfwsi)
- [CVE-2026-111134](https://cve.now/CVE-2026-111134.md): libfwsi through 20260522 Heap Out-of-Bounds Read via libfwsi\_mtp\_file\_entry\_values\_read\_data (CVSS 6.9, libyal libfwsi)
- [CVE-2026-111133](https://cve.now/CVE-2026-111133.md): libfsapfs through 20260921 Heap Out-of-Bounds Read via libfsapfs\_key\_encrypted\_key\_read\_data (CVSS 6.9, libyal libfsapfs)
- [CVE-2026-111132](https://cve.now/CVE-2026-111132.md): GNOME libgxps through 0.3.2 Heap Out-of-Bounds Read via path\_geometry\_start\_element (CVSS 6.9, GNOME libgxps)
- [CVE-2026-111131](https://cve.now/CVE-2026-111131.md): libxmp through 4.7.4 Stack Out-of-Bounds Read via P61A Depacker (CVSS 6.9, libxmp)
- [CVE-2026-111130](https://cve.now/CVE-2026-111130.md): OpenSlide through 4.0.1 Heap Out-of-Bounds Read via MIRAX get\_tile\_position (CVSS 6.9, openslide)
- [CVE-2026-111129](https://cve.now/CVE-2026-111129.md): Assimp through 6.0.5 NULL Pointer Dereference via Ogre Animation Track (CVSS 6.8, assimp)
- [CVE-2026-111128](https://cve.now/CVE-2026-111128.md): Assimp through 6.0.5 NULL Pointer Dereference via Ogre Importer Bone Assignment (CVSS 6.8, assimp)
- [CVE-2026-111127](https://cve.now/CVE-2026-111127.md): catdoc through 0.95 Out-of-Bounds Read via xls2csv copy\_unicode\_string (CVSS 6.9, catdoc)
- [CVE-2026-111126](https://cve.now/CVE-2026-111126.md): catdoc through 0.95 Out-of-Bounds Read in xls2csv MULRK Record Handler (CVSS 6.9, catdoc)
- [CVE-2026-111125](https://cve.now/CVE-2026-111125.md): CFITSIO through 4.7.0 Heap Out-of-Bounds Read via HCOMPRESS input\_nnybble (CVSS 6.9, HEASARC cfitsio)
- [CVE-2026-111124](https://cve.now/CVE-2026-111124.md): CFITSIO through 4.7.0 Heap Out-of-Bounds Read via Negative ZDITHER0 Seed (CVSS 6.9, HEASARC cfitsio)
- [CVE-2026-111123](https://cve.now/CVE-2026-111123.md): FluidSynth through 2.6.1 Out-of-Bounds Write via SoundFont Modulator Destination (CVSS 6.9, fluidsynth)
- [CVE-2026-110878](https://cve.now/CVE-2026-110878.md): Aureus ERP through 1.6.0 Stored XSS via Inventory Rule Action Information (CVSS 5.1, aureuserp)
- [CVE-2026-110877](https://cve.now/CVE-2026-110877.md): AdPlug through 2.4 Heap Out-of-Bounds Read via CdmoLoader::load (CVSS 6.8, adplug)
- [CVE-2026-110876](https://cve.now/CVE-2026-110876.md): AdPlug through 2.4 Out-of-Bounds Read via CxsmPlayer::play\_note in XSM Files (CVSS 6.8, adplug)
- [CVE-2026-110875](https://cve.now/CVE-2026-110875.md): AdPlug through 2.4 Heap Buffer Overflow via CksmPlayer::update in ksm.cpp (CVSS 6.9, adplug)
- [CVE-2026-110874](https://cve.now/CVE-2026-110874.md): Dolibarr before 23.0.4 PHP Object Injection via jsonOrUnserialize() (CVSS 7.5, dolibarr)
- [CVE-2026-111252](https://cve.now/CVE-2026-111252.md): OpenNMS denial of service via XML entity expansion (CVSS 6.5, The OpenNMS Group Meridian · The OpenNMS Group Horizon)
- [CVE-2026-87029](https://cve.now/CVE-2026-87029.md): undici vulnerable to Denial of Service via unhandled exception in the decompress interceptor (CVSS 5.9, undici)
- [CVE-2026-111234](https://cve.now/CVE-2026-111234.md): SimplePie through 1.9.0 Local File Read via file:// Redirect (CVSS 8.2, simplepie)
- [CVE-2026-111233](https://cve.now/CVE-2026-111233.md): Netgate pfSense CE 2.7.1 through 2.9.0 Reflected XSS via firewall\_rules.php (CVSS 2.3, Netgate pfSense CE)
- [CVE-2026-111232](https://cve.now/CVE-2026-111232.md): Netgate pfSense CE 2.3.0 through 2.9.0 Stored XSS via Separator Color (CVSS 4.8, Netgate pfSense CE)
- [CVE-2026-111231](https://cve.now/CVE-2026-111231.md): Netgate pfSense CE through 2.9.0 Authorization Bypass via config\_restore() and config\_install() (CVSS 8.6, Netgate pfSense CE)
- [CVE-2026-111230](https://cve.now/CVE-2026-111230.md): Netgate pfSense CE through 2.9.0 Local File Read via Dynamic DNS Update URL (CVSS 6.9, Netgate pfSense CE)
- [CVE-2026-111229](https://cve.now/CVE-2026-111229.md): Netgate pfSense CE 2.7.0 through 2.9.0 Command Injection via Captive Portal HA Sync (CVSS 8.6, Netgate pfSense CE)
- [CVE-2026-111228](https://cve.now/CVE-2026-111228.md): Netgate pfSense CE 2.7.1 through 2.9.0 CRLF Injection via services\_unbound\_advanced.php (CVSS 5.1, Netgate pfSense CE)
- [CVE-2026-111227](https://cve.now/CVE-2026-111227.md): Netgate pfSense CE through 2.9.0 CRLF Injection via services\_unbound\_acls.php (CVSS 5.1, Netgate pfSense CE)
- [CVE-2026-111226](https://cve.now/CVE-2026-111226.md): Netgate pfSense CE 2.4.5 through 2.9.0 OS Command Injection via system\_advanced\_admin.php (CVSS 8.6, Netgate pfSense CE)
- [CVE-2026-111225](https://cve.now/CVE-2026-111225.md): Netgate pfSense CE 2.5.0 through 2.9.0 OS Command Injection via openvpn.learn-address.sh (CVSS 2.3, Netgate pfSense CE)
- [CVE-2026-111224](https://cve.now/CVE-2026-111224.md): Netgate pfSense CE through 2.9.0 OS Command Injection via openvpn.connect\_async.sh (CVSS 7.7, Netgate pfSense CE)
- [CVE-2026-111223](https://cve.now/CVE-2026-111223.md): Netgate pfSense CE 2.7.0 through 2.9.0 Command Injection via IPsec Mobile Login Banner (CVSS 8.6, Netgate pfSense CE)
- [CVE-2026-111222](https://cve.now/CVE-2026-111222.md): Netgate pfSense CE through 2.9.0 php.ini Injection via Timezone Setting (CVSS 7.5, Netgate pfSense CE)
- [CVE-2026-111221](https://cve.now/CVE-2026-111221.md): Netgate pfSense CE through 2.9.0 Command Injection via RADIUS Secret mpd.conf Injection (CVSS 7.5, Netgate pfSense CE)
- [CVE-2026-111220](https://cve.now/CVE-2026-111220.md): Netgate pfSense CE through 2.9.0 Crontab Injection via PPP Periodic Reset ptpid (CVSS 8.6, Netgate pfSense CE)
- [CVE-2026-111219](https://cve.now/CVE-2026-111219.md): Netgate pfSense CE through 2.9.0 Command Injection via PPPoE Server Username (CVSS 7.5, Netgate pfSense CE)
- [CVE-2026-111218](https://cve.now/CVE-2026-111218.md): Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via Traffic Shaper Limiters (CVSS 8.6, Netgate pfSense CE)
- [CVE-2026-111217](https://cve.now/CVE-2026-111217.md): Netgate pfSense CE through 2.9.0 OS Command Injection via CARP VHID (CVSS 8.6, Netgate pfSense CE)
- [CVE-2026-111216](https://cve.now/CVE-2026-111216.md): Netgate pfSense CE through 2.9.0 OS Command Injection via Gateway Monitor IP (CVSS 8.6, Netgate pfSense CE)
- [CVE-2026-111215](https://cve.now/CVE-2026-111215.md): Netgate pfSense CE through 2.9.0 OS Command Injection via Wireless Parent Interface (CVSS 8.6, Netgate pfSense CE)
- [CVE-2026-111214](https://cve.now/CVE-2026-111214.md): Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via interfaces\_qinq\_edit.php (CVSS 8.6, Netgate pfSense CE)
- [CVE-2026-109131](https://cve.now/CVE-2026-109131.md): Ansible-ui: ansible-ui: stored xss via unsafe javascript url scheme in hub collection module documentation (formatparturl) (CVSS 5.4, Red Hat Ansible Automation Platform)
- [CVE-2026-111235](https://cve.now/CVE-2026-111235.md): OpenNMS REST authorization bypass via non-canonical HTTP method (CVSS 9.1, The OpenNMS Group Meridian · The OpenNMS Group Horizon)
- [CVE-2026-62322](https://cve.now/CVE-2026-62322.md): Python Social Auth: Login CSRF in LINE backend (LineOAuth2) — missing OAuth state validation (incomplete fix of 5.0.0 campaign) (CVSS 6.5, python-social-auth social-core · social-auth-core)
- [CVE-2026-108334](https://cve.now/CVE-2026-108334.md): Github.com/kuadrant/kuadrant-operator/internal/wasm: github.com/rh-api-management/rhcl-operator-product-build/kuadrant-operator: kuadrant-operator: crafted httproute match values can bypass gateway policy overrides (CVSS 7.4, Red Hat Connectivity Link · Red Hat OpenShift AI)
- [CVE-2026-109932](https://cve.now/CVE-2026-109932.md): undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering (CVSS 5.9, undici)
- [CVE-2026-104150](https://cve.now/CVE-2026-104150.md): AdonisJS HTTP Server: Uncontrolled Resource Consumption and Inefficient Regular Expression Complexity (CVSS 8.7, adonisjs http-server · @adonisjs/http-server)
- [CVE-2026-57496](https://cve.now/CVE-2026-57496.md): NetLicensing MCP Server: REST Path Traversal Bypasses Token Redaction (CVSS 9.6, Labs64 NetLicensing-MCP · netlicensing-mcp)
- [CVE-2026-87018](https://cve.now/CVE-2026-87018.md): undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation (CVSS 7.5, undici)
- [CVE-2026-105660](https://cve.now/CVE-2026-105660.md): Unvalidated HTTP/1 request-target authority lets a client choose conn.host and conn.port in Bandit (CVSS 6.9, mtrudel bandit · bandit)
- [CVE-2026-104828](https://cve.now/CVE-2026-104828.md): HtmlUnit Neko: Mutation XSS (mXSS) in HTMLWriterFilter - TEXTAREA/TITLE entity decode without re-encode (CVSS 7.2, htmlunit-neko)
- [CVE-2026-92707](https://cve.now/CVE-2026-92707.md): MessagePack: Nested arrays can blow past buffer length limits (CVSS 5.3, MessagePack-CSharp · MessagePack)
- [CVE-2026-109383](https://cve.now/CVE-2026-109383.md): undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent (CVSS 7.4, undici)
- [CVE-2026-57183](https://cve.now/CVE-2026-57183.md): Scoold: Forged JWT Accepted as Admin API Token Allowing Unauthorized Access to Sensitive Configuration and Logs (CVSS 6.1, Erudika scoold)
- [CVE-2026-55840](https://cve.now/CVE-2026-55840.md): Scoold: Open Redirect in getBackToUrl() allows phishing via domain-prefix startsWith bypass (CVSS 5.4, Erudika scoold)
- [CVE-2026-55842](https://cve.now/CVE-2026-55842.md): Scoold: CORS wildcard origin with credentials enabled allows cross-origin authenticated API access from any domain (CVSS 5.4, Erudika scoold)
- [CVE-2026-102946](https://cve.now/CVE-2026-102946.md): joserfc: JWS signature verification bypass via empty signatures array in jws.deserialize\_json (CVSS 9.1, authlib joserfc)
- [CVE-2026-109829](https://cve.now/CVE-2026-109829.md): undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects (CVSS 7.4, undici)
- [CVE-2026-55872](https://cve.now/CVE-2026-55872.md): GYM One admin user list is vulnerable to stored cross-site scripting (CVSS 8.7, mayerbalintdev GYM-One)
- [CVE-2026-55871](https://cve.now/CVE-2026-55871.md): GYM One: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in admin/users/index.php (CVSS 6.5, mayerbalintdev GYM-One)
- [CVE-2026-94621](https://cve.now/CVE-2026-94621.md): AliasVault: Server-Side Request Forgery via DNS rebinding in Favicon Extraction (CVSS 6.3, aliasvault · ghcr.io/aliasvault/aliasvault +2)
- [CVE-2026-109841](https://cve.now/CVE-2026-109841.md): undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokens (CVSS 5.9, undici)
- [CVE-2026-55587](https://cve.now/CVE-2026-55587.md): AliasVault: Browser extension WebAuthn bridge accepts forged origin/RP ID (CVSS 8.1, aliasvault)
- [CVE-2026-110361](https://cve.now/CVE-2026-110361.md): WordPress Infinite Uploads plugin \<= 3.4.1 - Sensitive Data Exposure vulnerability (CVSS 6.5, ClikIT Infinite Uploads)
- [CVE-2026-110362](https://cve.now/CVE-2026-110362.md): WordPress PlanetStudio Payment Gateway plugin \<= 1.3.3 - Broken Access Control vulnerability (CVSS 5.3, Planet studio PlanetStudio Payment Gateway)
- [CVE-2026-104827](https://cve.now/CVE-2026-104827.md): react/http: Unbounded HTTP Client Response Header Buffering Leads to Memory Exhaustion DoS (CVSS 7.5, reactphp http · react/http)
- [CVE-2026-109893](https://cve.now/CVE-2026-109893.md): WordPress Presto Player plugin \<= 4.5.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Brainstorm Force Presto Player)
- [CVE-2026-110374](https://cve.now/CVE-2026-110374.md): WordPress Login with phone number plugin \<= 1.8.77 - Broken Access Control vulnerability (CVSS 4.3, Hamid Alinia Login with phone number)
- [CVE-2026-108499](https://cve.now/CVE-2026-108499.md): WordPress Knowledge Base plugin \<= 3.2.0 - Broken Access Control vulnerability (CVSS 5.3, WebberZone Knowledge Base)
- [CVE-2026-97370](https://cve.now/CVE-2026-97370.md): Junrar: RarVM VM\_JMP maxOpCount bypass causes infinite CPU loop during RAR4 extraction (CVSS 7.5, junrar · com.github.junrar:junrar)
- [CVE-2026-110364](https://cve.now/CVE-2026-110364.md): WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin \<= 2.3.23 - Broken Access Control vulnerability (CVSS 5.3, WP Desk Flexible Quantity – Measurement Price Calculator fo…)
- [CVE-2026-109924](https://cve.now/CVE-2026-109924.md): undici vulnerable to Denial of Service via unbounded memory in the EventSource parser (CVSS 5.9, undici)
- [CVE-2026-110375](https://cve.now/CVE-2026-110375.md): WordPress Download Monitor plugin \<= 5.3.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, WP Chill Download Monitor)
- [CVE-2026-47218](https://cve.now/CVE-2026-47218.md): runwasi: Forged Wasmtime precompiled OCI layer bypasses runwasi WASI sandbox (CVSS 9.3, containerd runwasi)
- [CVE-2026-55240](https://cve.now/CVE-2026-55240.md): Tianji: Remote Code Execution via lodash template evaluate pattern in survey feed templates (CVSS 9.1, msgbyte tianji)
- [CVE-2026-109689](https://cve.now/CVE-2026-109689.md): WordPress Sunshine Photo Cart plugin \<= 3.7.4 - Broken Access Control vulnerability (CVSS 5.3, WP Sunshine Sunshine Photo Cart)
- [CVE-2026-55239](https://cve.now/CVE-2026-55239.md): Tianji: SQL Injection via unsanitized timezone parameter in analytics queries (CVSS 8.8, msgbyte tianji)
- [CVE-2026-110360](https://cve.now/CVE-2026-110360.md): WordPress Ajax Search Lite plugin \<= 4.14.5 - Broken Access Control vulnerability (CVSS 5.3, WPdreams Ajax Search Lite)
- [CVE-2026-109897](https://cve.now/CVE-2026-109897.md): WordPress Strong Testimonials plugin \<= 3.3.12 - Broken Access Control vulnerability (CVSS 5.4, WP Chill Strong Testimonials)
- [CVE-2026-63430](https://cve.now/CVE-2026-63430.md): ammonia: mXSS in ammonia via MathML \`annotation-xml\` encoding strip (CVSS 6.3, rust-ammonia ammonia · ammonia)
- [CVE-2026-109869](https://cve.now/CVE-2026-109869.md): undici vulnerable to Denial of Service via unhandled error on excessive content-encodings (CVSS 7.5, undici)
- [CVE-2026-110378](https://cve.now/CVE-2026-110378.md): WordPress Ninja Forms Signature Contract Add-On plugin \<= 3.2.5 - Broken Access Control vulnerability (CVSS 5.3, WP E-Signature Ninja Forms Signature Contract Add-On)
- [CVE-2026-96449](https://cve.now/CVE-2026-96449.md): WordPress WP EasyPay plugin \<= 4.5.4 - Broken Access Control vulnerability (CVSS 5.3, WPExperts WP EasyPay)
- [CVE-2026-106604](https://cve.now/CVE-2026-106604.md): WordPress YITH WooCommerce Compare plugin \<= 3.15.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, YITH WooCommerce Compare)
- [CVE-2026-103083](https://cve.now/CVE-2026-103083.md): WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin \<= 1.5.3 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.4, ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products,…)
- [CVE-2026-108175](https://cve.now/CVE-2026-108175.md): WordPress MDTF plugin \<= 1.4.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, PluginUs.Net MDTF)
- [CVE-2026-110381](https://cve.now/CVE-2026-110381.md): WordPress Simply Schedule Appointments plugin \<= 1.6.12.35 - Insecure Direct Object References (IDOR) vulnerability (CVSS 6.3, NSquared Simply Schedule Appointments)
- [CVE-2026-103350](https://cve.now/CVE-2026-103350.md): WordPress Booking and Rental Manager plugin \<= 2.8.0 - Other vulnerability Type vulnerability (CVSS 5.3, Magepeople Booking and Rental Manager)
- [CVE-2026-110888](https://cve.now/CVE-2026-110888.md): WordPress AI Engine plugin \<= 3.8.3 - Broken Access Control vulnerability (CVSS 4.3, Meow Apps AI Engine)
- [CVE-2026-110891](https://cve.now/CVE-2026-110891.md): WordPress WordLift plugin \<= 3.54.15 - Broken Access Control vulnerability (CVSS 5.4, WordLift Srl WordLift)
- [CVE-2026-110890](https://cve.now/CVE-2026-110890.md): WordPress JetSmartFilters plugin \<= 3.8.6 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Crocoblock JetSmartFilters)
- [CVE-2026-110367](https://cve.now/CVE-2026-110367.md): WordPress APIExperts Square for WooCommerce plugin \<= 4.7.5 - Broken Access Control vulnerability (CVSS 5.3, WPExperts APIExperts Square for WooCommerce)
- [CVE-2026-110371](https://cve.now/CVE-2026-110371.md): WordPress Strong Testimonials plugin \<= 3.3.12 - Broken Access Control vulnerability (CVSS 4.3, WP Chill Strong Testimonials)
- [CVE-2026-111105](https://cve.now/CVE-2026-111105.md): Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability (CVSS 7.0, Telegram)
- [CVE-2026-55414](https://cve.now/CVE-2026-55414.md): NL Portal Backend Libraries: Unauthenticated form resolver forwards the privileged Objecten-API token to a caller-supplied URL (SSRF) (CVSS 5.3, nl-portal-backend-libraries · nl.nl-portal:form)
- [CVE-2026-54683](https://cve.now/CVE-2026-54683.md): NL Portal Backend Libraries: Document contents remained downloadable by any logged-in user until 3.0.3 (incomplete fix of CVE-2026-49463) (CVSS 6.5, nl-portal-backend-libraries · nl.nl-portal:documenten-api)
- [CVE-2026-103936](https://cve.now/CVE-2026-103936.md): libp2p: Single pre-auth STUN packet terminates \`@libp2p/webrtc\` WebRTC-direct Node.js listeners (CVSS 7.5, js-libp2p · @libp2p webrtc)
- [CVE-2026-102740](https://cve.now/CVE-2026-102740.md): AsyncHttpClient: Resumable download index store is created world-readable and follows a planted symlink (CVSS 5.8, AsyncHttpClient async-http-client)
- [CVE-2026-55875](https://cve.now/CVE-2026-55875.md): Helium: SSRF via External Calendar URL Allows Authenticated Users to Probe Internal Network (CVSS 4.3, HeliumEdu platform)
- [CVE-2026-55876](https://cve.now/CVE-2026-55876.md): Helium: Stored XSS via Unrestricted SVG File Upload — Authenticated Users Can Store Executable Scripts (CVSS 3.5, HeliumEdu platform)
- [CVE-2026-104266](https://cve.now/CVE-2026-104266.md): tinytag: Infinite loop when parsing certain M4A files containing invalid atoms (CVSS 6.5, tinytag)
- [CVE-2026-61702](https://cve.now/CVE-2026-61702.md): OpenPrinting CUPS: root-side banner file disclosure (CVSS 5.3, OpenPrinting cups)
- [CVE-2026-55453](https://cve.now/CVE-2026-55453.md): CUPS ipp backend status-line injection can update queue PPD and lead to conditional RCE as lp via foomatic-rip (CVSS 3.3, OpenPrinting cups)
- [CVE-2026-84731](https://cve.now/CVE-2026-84731.md): Pre-Authentication Admin Bypass and Remote Code Execution in Nutanix Prism Gateway inside AOS (CVSS 9.3, Nutanix Acropolis Operating System)
- [CVE-2026-55480](https://cve.now/CVE-2026-55480.md): CUPS copy\_model() creates a predictable PPD tempfile without O\_EXCL/O\_NOFOLLOW (symlink TOCTOU, lp → root) (CVSS 5.7, OpenPrinting cups)
- [CVE-2026-55467](https://cve.now/CVE-2026-55467.md): CUPS fax option values bypass the CVE-2026-34980 control-character sanitizer (incomplete fix) (CVSS 2.5, OpenPrinting cups)
- [CVE-2026-55246](https://cve.now/CVE-2026-55246.md): bincookie: Heap buffer overflow via unvalidated \`num\_pages\` when parsing a \`.binarycookies\` file (CVSS 7.8, Tatsh bincookie)
- [CVE-2026-55103](https://cve.now/CVE-2026-55103.md): Discourse ActivityPub: Fix inbound actor validation and apply outbound request SSRF hardening (CVSS 8.6, discourse-activity-pub)
- [CVE-2026-105065](https://cve.now/CVE-2026-105065.md): WordPress XStore theme \< 9.7.9 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, 8theme.com XStore)
- [CVE-2026-100409](https://cve.now/CVE-2026-100409.md): OpenNext Cloudflare: Cache interception can bypass middleware protection for encoded paths (CVSS 7.5, opennextjs-cloudflare · @opennextjs/cloudflare)
- [CVE-2026-102527](https://cve.now/CVE-2026-102527.md): Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routes (CVSS 6.9, nuxt-modules og-image · nuxt-og-image)
- [CVE-2026-102631](https://cve.now/CVE-2026-102631.md): authd: Account takeover via username fallback in identity matching after IdP email reassignment (CVSS 5.9, Canonical authd)
- [CVE-2026-77466](https://cve.now/CVE-2026-77466.md): Lychee: Webshop payment bypass via unrestricted "Dummy" gateway selection (CVSS 8.3, LycheeOrg Lychee)
- [CVE-2026-77470](https://cve.now/CVE-2026-77470.md): Lychee: Webshop checkout lets the client override the payment \`amount\` sent to the gateway via malicious crafted POST request (CVSS 8.3, LycheeOrg Lychee)
- [CVE-2026-77468](https://cve.now/CVE-2026-77468.md): Lychee: Missing Authentication for Critical Function and Allocation of Resources Without Limits or Throttling on /docs/api (CVSS 6.9, LycheeOrg Lychee)
- [CVE-2026-77467](https://cve.now/CVE-2026-77467.md): Lychee: A single 383-byte PDF causes ~184 seconds of CPU consumption in the real processing path (CVSS 7.1, LycheeOrg Lychee)
- [CVE-2026-110812](https://cve.now/CVE-2026-110812.md): Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune (CVSS 9.9, AWS Amazon Neptune Engine)
- [CVE-2026-62679](https://cve.now/CVE-2026-62679.md): Lychee: Path traversal in \`SecurePathController\` allows authenticated arbitrary file read (CVSS 8.9, LycheeOrg Lychee)
- [CVE-2026-61838](https://cve.now/CVE-2026-61838.md): Lychee: Album password bypass in ZIP downloads (CVSS 8.2, LycheeOrg Lychee)
- [CVE-2026-61610](https://cve.now/CVE-2026-61610.md): Lychee: unauthenticated photo starring reveals existence of private photos when photos\_star\_visibility=anonymous (CVSS 2.3, LycheeOrg Lychee)
- [CVE-2026-61611](https://cve.now/CVE-2026-61611.md): Lychee: Missing rate limiting on album password unlock endpoint allows brute-force attacks (CVSS 7.5, LycheeOrg Lychee)
- [CVE-2026-57569](https://cve.now/CVE-2026-57569.md): Lychee: Distinct post-fix SSRF variant in Photo::fromUrl due to missing IP pinning after DNS-based validation (CVSS 2.3, LycheeOrg Lychee)
- [CVE-2026-57568](https://cve.now/CVE-2026-57568.md): Lychee: Stored XSS via Markdown javascript: Links in Photo and Album Descriptions (Gallery View) (CVSS 5.7, LycheeOrg Lychee)
- [CVE-2026-85634](https://cve.now/CVE-2026-85634.md): Wildfly-core: wildfly-core: deployer rbac role privilege escalation via path traversal in deployment name (CVSS 8.8, Red Hat Fuse · Red Hat JBoss Enterprise Application Plat… +1)
- [CVE-2026-100353](https://cve.now/CVE-2026-100353.md): kin-openapi: Incomplete Fix for GHSA-p6wj-qrr4-pgh5: Three Unpatched nil-Items Panic Paths in openapi3filter (CVSS 7.5, getkin kin-openapi · github.com/getkin/kin-openapi)
- [CVE-2026-100354](https://cve.now/CVE-2026-100354.md): kin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Causes Fatal Process Crash (CVSS 7.5, getkin kin-openapi · github.com/getkin/kin-openapi)
- [CVE-2026-100352](https://cve.now/CVE-2026-100352.md): kin-openapi: YAML NaN/Inf Values Bypass Built-in Guards and Panic via OAS 3.1 Validation Path (CVSS 7.5, getkin kin-openapi · github.com/getkin/kin-openapi)
- [CVE-2026-100351](https://cve.now/CVE-2026-100351.md): kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion (CVSS 7.4, getkin kin-openapi · github.com/getkin/kin-openapi)
- [CVE-2026-100349](https://cve.now/CVE-2026-100349.md): kin-openapi openapi3filter: nil-pointer panic in ValidateResponse on a response header declared with content (CVSS 8.2, getkin kin-openapi · github.com/getkin/kin-openapi)
- [CVE-2026-100350](https://cve.now/CVE-2026-100350.md): kin-openapi deepObject query decoding repeatedly compiles an invariant regular expression (CVSS 5.3, getkin kin-openapi · github.com/getkin/kin-openapi)
- [CVE-2026-92982](https://cve.now/CVE-2026-92982.md): Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection (CVSS 8.5, Red Hat Ansible Automation Platform · Red Hat OpenShift… +8)
- [CVE-2026-100347](https://cve.now/CVE-2026-100347.md): kin-openapi: Unauthenticated panic (DoS) in openapi3filter legacy router via non-canonical/unsupported HTTP method on a static path (CVSS 5.3, getkin kin-openapi · github.com/getkin/kin-openapi)
- [CVE-2026-97712](https://cve.now/CVE-2026-97712.md): Nexus Repository 3 - Privilege Escalation via Role Management (CVSS 8.7, Sonatype Nexus Repository)
- [CVE-2026-97667](https://cve.now/CVE-2026-97667.md): Nexus Repository 3 - Stored Cross-Site Scripting in Browse UI (CVSS 5.1, Sonatype Nexus Repository)
- [CVE-2026-97666](https://cve.now/CVE-2026-97666.md): Nexus Repository 3 - Unsafe Reflection in ExtDirect Repository Endpoint (CVSS 6.9, Sonatype Nexus Repository)
- [CVE-2026-97665](https://cve.now/CVE-2026-97665.md): Nexus Repository 3 - Missing Authorization on NuGet Symbol Package Upload (CVSS 7.1, Sonatype Nexus Repository)
- [CVE-2026-100348](https://cve.now/CVE-2026-100348.md): kin-openapi spec loader panics on a self-referential additionalProperties $ref (nil-pointer DoS) (CVSS 5.3, getkin kin-openapi · github.com/getkin/kin-openapi)
- [CVE-2026-110958](https://cve.now/CVE-2026-110958.md): Wavlink WN530HG4B api.cgi heap-based overflow (CVSS 10.0, Wavlink WN530HG4B)
- [CVE-2026-111096](https://cve.now/CVE-2026-111096.md): In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic build log was possible (CVSS 6.7, JetBrains TeamCity)
- [CVE-2026-111095](https://cve.now/CVE-2026-111095.md): In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic project overview was possible (CVSS 8.0, JetBrains TeamCity)
- [CVE-2026-111094](https://cve.now/CVE-2026-111094.md): In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was p (CVSS 8.1, JetBrains TeamCity)
- [CVE-2026-111093](https://cve.now/CVE-2026-111093.md): In JetBrains Datalore before 2026.2.1 unauthenticated path traversal via the report blob endpoint allowed reading arbitrary files (CVSS 7.5, JetBrains Datalore)
- [CVE-2026-111092](https://cve.now/CVE-2026-111092.md): In JetBrains YouTrack before 2026.2.19575 2026.3.16075 2026.3.16397 2026.3.16402 mail rules allowed a project admin to execute cross-project (CVSS 6.5, JetBrains YouTrack)
- [CVE-2026-111091](https://cve.now/CVE-2026-111091.md): In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configuration (CVSS 7.8, JetBrains Junie CLI)
- [CVE-2026-97394](https://cve.now/CVE-2026-97394.md): kin-openapi: Nil-pointer dereference panic in openapi3filter for OpenAPI 3.1 array schemas missing items (CVSS 7.5, getkin kin-openapi · github.com/getkin/kin-openapi)
- [CVE-2026-105474](https://cve.now/CVE-2026-105474.md): A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary c (CVSS 9.4, WebPros SolusVM)
- [CVE-2026-45452](https://cve.now/CVE-2026-45452.md): Unitronics - CWE-134 Use of Externally-Controlled format string (CVSS 8.3, Unitronics UniStream Pro/UniLogic)
- [CVE-2026-71490](https://cve.now/CVE-2026-71490.md): OPNsense: Direct comma-separated user privileges bypass OPNsense MVC read-only write protection (CVSS 7.1, opnsense core)
- [CVE-2026-45451](https://cve.now/CVE-2026-45451.md): Unitronics - CWE-287: Improper Authentication (CVSS 8.3, Unitronics UniStream Pro/UniLogic)
- [CVE-2026-63442](https://cve.now/CVE-2026-63442.md): OPNsense: Log Forgery via Login Username CRLF in WebGUI Authentication → Pf Table IP Blocking (CVSS 8.1, opnsense core)
- [CVE-2026-45450](https://cve.now/CVE-2026-45450.md): Unitronics - CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer (CVSS 8.3, Unitronics UniStream Pro/UniLogic)
- [CVE-2026-58390](https://cve.now/CVE-2026-58390.md): OPNsense: Stored XSS to root RCE via OpenVPN client common\_name in status views (CVSS 8.0, opnsense core)
- [CVE-2026-58394](https://cve.now/CVE-2026-58394.md): OPNsense: Stored XSS in Administration Settings via Certificate Description (CVSS 5.2, opnsense core)
- [CVE-2026-109449](https://cve.now/CVE-2026-109449.md): Symfony: Unbounded Nesting in the Expression Parser Lets Untrusted Expressions Crash the Process (CVSS 8.7, sensiolabs symfony)
- [CVE-2026-45449](https://cve.now/CVE-2026-45449.md): Unitronics - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CVSS 8.3, Unitronics UniStream Pro/UniLogic)
- [CVE-2026-58392](https://cve.now/CVE-2026-58392.md): OPNsense: Stored XSS in Services: NTP GPS (CVSS 5.4, opnsense core)
- [CVE-2026-58395](https://cve.now/CVE-2026-58395.md): OPNsense: XPath injection in MVC safe-delete (CVSS 4.3, opnsense core)
- [CVE-2026-58393](https://cve.now/CVE-2026-58393.md): OPNsense: OpenVPN Client Specific Override common\_name allows path traversal in generated CSO files (CVSS 5.9, opnsense core)
- [CVE-2026-57155](https://cve.now/CVE-2026-57155.md): OPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importer (CVSS 9.9, opnsense core)
- [CVE-2026-58391](https://cve.now/CVE-2026-58391.md): OPNsense: Stored XSS in Firewall Rules/NAT pages via a HTML-attribute breakout (CVSS 5.4, opnsense core)
- [CVE-2026-53582](https://cve.now/CVE-2026-53582.md): OPNsense: XPATH Injection can disclose any secret in config.xml (CVSS 7.1, opnsense core)
- [CVE-2026-75505](https://cve.now/CVE-2026-75505.md): EspoCRM: Access control bypass in Mass Update letting regular user with Mass Update permission read any attachment (CVSS 6.0, espocrm)
- [CVE-2026-77460](https://cve.now/CVE-2026-77460.md): EspoCRM: Mass email template renderer leaks restricted record fields (CVSS 6.5, espocrm)
- [CVE-2026-109413](https://cve.now/CVE-2026-109413.md): Symfony: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Process (CVSS 8.7, sensiolabs symfony · symfony/symfony +1)
- [CVE-2026-63130](https://cve.now/CVE-2026-63130.md): EspoCRM: Admin path traversal in LabelManager (Custom Label saving) allows arbitrary \`.json\` file read, write and delete (CVSS 5.5, espocrm)
- [CVE-2026-79843](https://cve.now/CVE-2026-79843.md): HPE NonStop SQL/MX EXE - out-of-bounds read vulnerability (CVSS 6.5, Hewlett Packard Enterprise HPE NonStop SQL/MX EXE)
- [CVE-2026-59994](https://cve.now/CVE-2026-59994.md): EspoCRM: Pre-authentication stored HTML injection in stream notification emails about email received (CVSS 4.3, espocrm)
- [CVE-2026-55154](https://cve.now/CVE-2026-55154.md): EspoCRM: CSV/Formula Injection sanitizer bypass via leading whitespace/control characters in export (CVSS 5.4, espocrm)
- [CVE-2026-55184](https://cve.now/CVE-2026-55184.md): EspoCRM: Stored XSS in wysiwyg template fields if CSP is disabled (CVSS 3.5, espocrm)
- [CVE-2026-53575](https://cve.now/CVE-2026-53575.md): EspoCRM: Persistent XSS via CSP nonce injection in applicationName setting by admin user (CVSS 2.7, espocrm)
- [CVE-2026-108082](https://cve.now/CVE-2026-108082.md): Symfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header (CVSS 8.7, sensiolabs symfony · symfony/http-foundation +1)
- [CVE-2026-53574](https://cve.now/CVE-2026-53574.md): EspoCRM: Blind SQL injection via streamAttachments where-clause complex expression (CVSS 7.6, espocrm)
- [CVE-2026-110957](https://cve.now/CVE-2026-110957.md): Wavlink WL-WN530BE2-A Login Processing api.cgi sub\_12580 os command injection (CVSS 10.0, Wavlink WL-WN530BE2-A)
- [CVE-2026-46691](https://cve.now/CVE-2026-46691.md): EspoCRM: IDOR in Import exportErrors Endpoint Leaks CSV Data of Other Users (CVSS 6.5, espocrm)
- [CVE-2026-46708](https://cve.now/CVE-2026-46708.md): EspoCRM: Target list Opt-Out actions allows opting out record without access Target List and access to record (CVSS 4.3, espocrm)
- [CVE-2026-79841](https://cve.now/CVE-2026-79841.md): HPE NonStop RDMA SERVICES NSK - Out-of-bounds memory write vulnerability (CVSS 5.8, Hewlett Packard Enterprise HPE NonStop RDMA SERVICES NSK)
- [CVE-2026-47168](https://cve.now/CVE-2026-47168.md): EspoCRM: Authenticated RCE via Unsafe PHP Object Deserialization in MassAction/Export params (CVSS 9.1, espocrm)
- [CVE-2026-103509](https://cve.now/CVE-2026-103509.md): Credential Disclosure in P4 Search Configuration API (CVSS 8.5, Perforce P4)
- [CVE-2026-46694](https://cve.now/CVE-2026-46694.md): EspoCRM: Portal User ACL Bypass Exposes Internal Stream Notes (CVSS 6.5, espocrm)
- [CVE-2026-79840](https://cve.now/CVE-2026-79840.md): HPE NonStop XABroker - Memory corruption vulnerability (CVSS 7.3, Hewlett Packard Enterprise HPE NonStop XABroker)
- [CVE-2026-79839](https://cve.now/CVE-2026-79839.md): HPE NonStop ODBC/MX Server - Memory corruption vulnerability (CVSS 7.3, Hewlett Packard Enterprise HPE NonStop ODBC/MX Server)
- [CVE-2026-79838](https://cve.now/CVE-2026-79838.md): HPE NonStop ODBC/MX Services - Memory corruption vulnerability (CVSS 7.3, Hewlett Packard Enterprise HPE NonStop ODBC/MX Services)
- [CVE-2026-108116](https://cve.now/CVE-2026-108116.md): MDX and SOAP Injection in Kendo UI for jQuery (CVSS 7.5, Progress Software Kendo UI for jQuery)
- [CVE-2026-106153](https://cve.now/CVE-2026-106153.md): Cross-site Scripting (XSS) in Kendo UI for jQuery Calendar and MultiViewCalendar (CVSS 5.4, Progress Software Kendo UI for jQuery)
- [CVE-2026-106151](https://cve.now/CVE-2026-106151.md): Cross-Site Scripting in Validator Validation Messages in Kendo UI for jQuery (CVSS 5.4, Progress Software Kendo UI for jQuery)
- [CVE-2026-106150](https://cve.now/CVE-2026-106150.md): Cross-site Scripting (XSS) in Kendo UI for jQuery Splitter, Window, and Tooltip (CVSS 5.4, Progress Software Kendo UI for jQuery)
- [CVE-2026-106149](https://cve.now/CVE-2026-106149.md): Cross-site Scripting (XSS) in Kendo UI for jQuery Menu (CVSS 5.4, Progress Software Kendo UI for jQuery)
- [CVE-2026-110746](https://cve.now/CVE-2026-110746.md): CVE-2026-110746 (CVSS 7.8, TotalSecurity TotalAV)
- [CVE-2026-103508](https://cve.now/CVE-2026-103508.md): Path traversal via logging configuration in P4Search (CVSS 7.3, Perforce P4)
- [CVE-2026-9703](https://cve.now/CVE-2026-9703.md): Viewer role can create, modify and delete Loki alerting rules (CVSS 7.1, Grafana Enterprise · Grafana OSS)
- [CVE-2026-110936](https://cve.now/CVE-2026-110936.md): A vulnerability has been identified in Siemens Software Center (All versions \< V4.0.9.8). (CVSS 6.7, KEV, Siemens Software Center)
- [CVE-2026-104024](https://cve.now/CVE-2026-104024.md): Incomplete dangerous-extension list in PeaZip object open allows execution of a program or command from a crafted archive entry without confirmation (CVSS 4.6, PeaZip)
- [CVE-2026-93649](https://cve.now/CVE-2026-93649.md): In the Eclipse Adoptium website (adoptium.net), in every deployment built from commit 0b24ea1 (2025-06-18) up to the fix in commit cbb53cf ( (CVSS 7.5, Eclipse Foundation Adoptium Temurin)
- [CVE-2026-106148](https://cve.now/CVE-2026-106148.md): Cross-Site Scripting via TabStrip, Menu, and PanelBar Image URLs in Kendo UI for jQuery (CVSS 5.4, Progress Software Kendo UI for jQuery)
- [CVE-2026-106147](https://cve.now/CVE-2026-106147.md): Cross-Site Scripting via ListBox Bound Text in Kendo UI for jQuery (CVSS 5.4, Progress Software Kendo UI for jQuery)
- [CVE-2026-106161](https://cve.now/CVE-2026-106161.md): Cross-Site Scripting via Badge Text Binding in Kendo UI for jQuery (CVSS 5.4, Progress Software Kendo UI for jQuery)
- [CVE-2026-106160](https://cve.now/CVE-2026-106160.md): Prototype Pollution via Model.accept and kendo.setter in Kendo UI for jQuery (CVSS 5.4, Progress Software Kendo UI for jQuery)
- [CVE-2026-106159](https://cve.now/CVE-2026-106159.md): Cross-Site Scripting via ToolBar ButtonGroup URLs in Kendo UI for jQuery (CVSS 4.7, Progress Software Kendo UI for jQuery)
- [CVE-2026-106158](https://cve.now/CVE-2026-106158.md): Cross-Site Scripting via Scheduler Resource Colors in Kendo UI for jQuery (CVSS 4.7, Progress Software Kendo UI for jQuery)
- [CVE-2026-106157](https://cve.now/CVE-2026-106157.md): Cross-Site Scripting via PanelBar Item URLs in Kendo UI for jQuery (CVSS 4.7, Progress Software Kendo UI for jQuery)
- [CVE-2026-106162](https://cve.now/CVE-2026-106162.md): Cross-Site Scripting in FileManager Drag Hints in Kendo UI for jQuery (CVSS 4.7, Progress Software Kendo UI for jQuery)
- [CVE-2026-106163](https://cve.now/CVE-2026-106163.md): Cross-site Scripting (XSS) in Kendo UI for jQuery FileBrowser and ImageBrowser (CVSS 6.5, Progress Software Kendo UI for jQuery)
- [CVE-2026-109686](https://cve.now/CVE-2026-109686.md): WordPress Link Whisper Free plugin \<= 0.9.7 - PHP Object Injection vulnerability (CVSS 9.8, Link Whisper Free)
- [CVE-2026-109685](https://cve.now/CVE-2026-109685.md): WordPress Link Whisper Free plugin \<= 0.9.7 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Link Whisper Free)
- [CVE-2026-109892](https://cve.now/CVE-2026-109892.md): WordPress Frontend Admin by DynamiApps plugin \<= 3.29.13 - Privilege Escalation vulnerability (CVSS 9.8, Shabti Kaplan Frontend Admin by DynamiApps)
- [CVE-2026-102389](https://cve.now/CVE-2026-102389.md): WordPress Broken Link Checker plugin \<= 2.4.14.1 - Content Injection vulnerability (CVSS 6.5, WPMU DEV Broken Link Checker)
- [CVE-2026-105882](https://cve.now/CVE-2026-105882.md): WordPress User Registration plugin \<= 5.2.8 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, ThemeGrill User Registration)
- [CVE-2026-109688](https://cve.now/CVE-2026-109688.md): WordPress Link Whisper Free plugin \<= 0.9.7 - SQL Injection vulnerability (CVSS 9.3, Link Whisper Free)
- [CVE-2026-107416](https://cve.now/CVE-2026-107416.md): WordPress Webba Booking plugin \<= 6.5.2 - Insecure Direct Object References (IDOR) vulnerability (CVSS 7.5, Webba Plugins Webba Booking)
- [CVE-2026-109702](https://cve.now/CVE-2026-109702.md): WordPress Social Share Buttons plugin \<= 1.31 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, maxfoundry Social Share Buttons)
- [CVE-2026-88794](https://cve.now/CVE-2026-88794.md): XML External Entity injection in Sparx Enterprise Architect (CVSS 8.2, Sparx Systems Enterprise Architect)
- [CVE-2026-99999](https://cve.now/CVE-2026-99999.md): ipv4: validate checksum\_start before completing checksum (CVSS 9.3, Linux)
- [CVE-2026-110723](https://cve.now/CVE-2026-110723.md): In \`api-gateway\` versions till \`1.7.3\`, The default rate-limit key resolver, \`ClientIpKeyResolver\`, derives the per-client bucket key from t (CVSS 7.5, Eclipse Foundation Eclipse Connected Services Platform)
- [CVE-2026-110724](https://cve.now/CVE-2026-110724.md): In \`api-gateway\` versions till \`1.7.3\`, The default rate-limit key resolver, \`ClientIpKeyResolver\`, derives the per-client bucket key from t (CVSS 7.5, Eclipse Foundation Eclipse Connected Services Platform)
- [CVE-2026-109698](https://cve.now/CVE-2026-109698.md): WordPress Mang Board WP plugin \<= 2.4.4 - SQL Injection vulnerability (CVSS 9.3, Kitae Park Mang Board WP)
- [CVE-2026-109692](https://cve.now/CVE-2026-109692.md): WordPress User Registration plugin \<= 5.2.8 - Broken Access Control vulnerability (CVSS 7.1, ThemeGrill User Registration)
- [CVE-2026-109693](https://cve.now/CVE-2026-109693.md): WordPress Fluent CRM plugin \<= 3.2.5 - Privilege Escalation vulnerability (CVSS 8.8, WP ManageNinja Fluent CRM)
- [CVE-2026-98432](https://cve.now/CVE-2026-98432.md): ipv4: free inet\_opt and ireq\_opt after an RCU grace period (CVSS 9.8, Linux)
- [CVE-2026-79837](https://cve.now/CVE-2026-79837.md): HPE NonStop SQL/MX UDR SERVER - Service disruption vulnerability (CVSS 7.3, Hewlett Packard Enterprise HPE NonStop SQL/MX UDR SERVER)
- [CVE-2026-104025](https://cve.now/CVE-2026-104025.md): Path traversal in PeaZip object preview allows execution of arbitrary programs via a crafted archive entry name (CVSS 8.4, PeaZip)
- [CVE-2026-110726](https://cve.now/CVE-2026-110726.md): In \`api-gateway\` versions till \`1.7.3\`, The default rate-limit key resolver, \`ClientIpKeyResolver\`, derives the per-client bucket key from t (CVSS 6.5, Eclipse Foundation Eclipse Connected Services Platform)
- [CVE-2026-79836](https://cve.now/CVE-2026-79836.md): HPE NonStop SQL/MX Run-Time Statistics - Information disclosure and DoS vulnerability (CVSS 6.4, Hewlett Packard Enterprise HPE NonStop SQL/MX Run-Time Stat…)
- [CVE-2026-8145](https://cve.now/CVE-2026-8145.md): WholesaleX \<= 3.0.8 - Unauthenticated Limited Privilege Escalation via 'process\_registration' (CVSS 5.4, wpxpo WholesaleX – All-in-One B2B Solution with Wholesale P…)
- [CVE-2026-79835](https://cve.now/CVE-2026-79835.md): HPE Nonstop KMS Server - Buffer overflow vulnerability (CVSS 2.8, Hewlett Packard Enterprise HPE Nonstop KMS Server)
- [CVE-2026-79834](https://cve.now/CVE-2026-79834.md): HPE NonStop SQL/MX SQLCAT - Unauthorized command execution vulnerability (CVSS 7.4, Hewlett Packard Enterprise HPE NonStop SQL/MX SQLCAT)
- [CVE-2026-79833](https://cve.now/CVE-2026-79833.md): HPE NonStop ANSI SQLUTIL - Denial of Service vulnerability (CVSS 7.5, Hewlett Packard Enterprise HPE NonStop ANSI SQLUTIL)
- [CVE-2026-109695](https://cve.now/CVE-2026-109695.md): WordPress FluentCart plugin \<= 1.7.1 - Sensitive Data Exposure vulnerability (CVSS 7.5, WPManageNinja FluentCart)
- [CVE-2026-109694](https://cve.now/CVE-2026-109694.md): WordPress Fluent CRM plugin \<= 3.2.5 - Privilege Escalation vulnerability (CVSS 9.8, WP ManageNinja Fluent CRM)
- [CVE-2026-108491](https://cve.now/CVE-2026-108491.md): WordPress Everest Forms plugin \<= 3.6.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Everest Forms)
- [CVE-2026-108497](https://cve.now/CVE-2026-108497.md): WordPress Amelia plugin \<= 2.4.10 - SQL Injection vulnerability (CVSS 9.3, TMS Amelia)
- [CVE-2026-108498](https://cve.now/CVE-2026-108498.md): WordPress BSK PDF Manager plugin \<= 3.8.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, bannersky BSK PDF Manager)
- [CVE-2026-79832](https://cve.now/CVE-2026-79832.md): HPE NonStop SQL/MX Executor - Buffer overflow vulnerability (CVSS 7.6, Hewlett Packard Enterprise HPE NonStop SQL/MX Executor)
- [CVE-2026-79831](https://cve.now/CVE-2026-79831.md): HPE NonStop Posix User Threads - Heap buffer overflow vulnerability (CVSS 6.6, Hewlett Packard Enterprise HPE NonStop Posix User Threads)
- [CVE-2026-79830](https://cve.now/CVE-2026-79830.md): HPE NonStop Kernel Level Thread Model Lib - Stack buffer overflow vulnerability (CVSS 6.6, Hewlett Packard Enterprise HPE NonStop Kernel Level Thread…)
- [CVE-2026-17525](https://cve.now/CVE-2026-17525.md): My Control System 26.5 – Disk space exhaustion due to incorrect temporary file cleanup after XML conversion (CVSS 5.2, ABB My Control System)
- [CVE-2026-79829](https://cve.now/CVE-2026-79829.md): HPE NonStop HTTP WEBSERVER - Memory corruption vulnerability (CVSS 8.2, Hewlett Packard Enterprise HPE NonStop HTTP WEBSERVER)
- [CVE-2026-79828](https://cve.now/CVE-2026-79828.md): HPE NonStop Debug Utilities - Heap buffer overflow vulnerability (CVSS 7.1, Hewlett Packard Enterprise HPE NonStop Debug Utilities)
- [CVE-2026-79827](https://cve.now/CVE-2026-79827.md): HPE NonStop Inspect Subsystem - Heap buffer overflow vulnerability (CVSS 7.1, Hewlett Packard Enterprise HPE NonStop Inspect Subsystem)
- [CVE-2026-18659](https://cve.now/CVE-2026-18659.md): Unauthenticated authorization bypass in ConstraintSecurityHandler - HTTP method-omission matched by substring (CVSS 6.9, Eclipse Foundation org.eclipse.jetty.ee11:jetty-ee11-ser… +3)
- [CVE-2026-18662](https://cve.now/CVE-2026-18662.md): In Eclipse Jetty, across various versions of \`jetty-security\`, and \`jetty-eeN-security\`, two or more security constraints with the same http (CVSS 6.9, Eclipse Foundation org.eclipse.jetty.ee11:jetty-ee11-ser… +3)
- [CVE-2026-19864](https://cve.now/CVE-2026-19864.md): Eclipse Jetty's \`SessionAuthentication\` retains authentication credentials in a serializable object. (CVSS 5.6, Eclipse Foundation org.eclipse.jetty:jetty-security)
- [CVE-2026-19863](https://cve.now/CVE-2026-19863.md): An unauthenticated client may access certain protected resources when using EthereumAuthenticator if the request path contains the configure (CVSS 9.3, Eclipse Foundation org.eclipse.jetty:jetty-ethereum)
- [CVE-2026-79826](https://cve.now/CVE-2026-79826.md): HPE NonStop OCAX - Heap buffer overflow vulnerability (CVSS 7.1, Hewlett Packard Enterprise HPE NonStop OCAX)
- [CVE-2026-50619](https://cve.now/CVE-2026-50619.md): Unauthenticated remote code execution vulnerability (CVSS 9.3, QNAP Systems Qsirch)
- [CVE-2026-47790](https://cve.now/CVE-2026-47790.md): Privilege Escalation via QuFTP Log-based XSS (CVSS 6.3, QNAP Systems QuFTP Service)
- [CVE-2026-47786](https://cve.now/CVE-2026-47786.md): Pre-Authentication Command Injection (CVSS 9.3, QNAP Systems HybridDesk Station)
- [CVE-2026-39997](https://cve.now/CVE-2026-39997.md): Unauthenticated Remote Input Injection in QNAP HD Station's remotepad (CVSS 8.9, QNAP Systems HybridDesk Station)
- [CVE-2026-18660](https://cve.now/CVE-2026-18660.md): Jetty proxy blacklist performs case-sensitive matching of case-insensitive DNS hostnames (CVSS 8.8, Eclipse Foundation org.eclipse.jetty:jetty-server · Eclipse…)
- [CVE-2026-39991](https://cve.now/CVE-2026-39991.md): Stored Cross-Site Scripting (XSS) in Note Station file upload functionality (CVSS 4.8, QNAP Systems Notes Station)
- [CVE-2026-34009](https://cve.now/CVE-2026-34009.md): \*\*Container Escape\*\* Host user home directory mounted with write access into application container (CVSS 8.4, QNAP Systems Notes Station)
- [CVE-2026-34008](https://cve.now/CVE-2026-34008.md): \*\*Privilege Escalation\*\* World-writable crontab path monitored and executed by root-owned process (CVSS 8.5, QNAP Systems Notes Station)
- [CVE-2026-34007](https://cve.now/CVE-2026-34007.md): \*\*RCE\*\* Unsanitized \`X-Forwarded-For\` header passed to \`shell\_exec()\` via broken IP validation fallback in \`getClientIP()\` (CVSS 6.9, QNAP Systems Notes Station)
- [CVE-2026-53882](https://cve.now/CVE-2026-53882.md): Path Traversal in Virtualization Station VM Import (CVSS 8.7, QNAP Systems Virtualization Station)
- [CVE-2026-50612](https://cve.now/CVE-2026-50612.md): Import Symlink Following Remote Code Execution Vulnerability in QuMagie (CVSS 9.4, QNAP Systems QuMagie)
- [CVE-2026-44084](https://cve.now/CVE-2026-44084.md): Access Code Forgery in Video Station leading to unauthorized media access (CVSS 8.7, QNAP Systems Video Station)
- [CVE-2026-41545](https://cve.now/CVE-2026-41545.md): WebSocket timelapse path traversal and command injection (CVSS 8.6, QNAP Systems QuMagie)
- [CVE-2026-41541](https://cve.now/CVE-2026-41541.md): Symlink creation in qsyncsrv.cgi (CVSS 5.3, QNAP Systems Qsync Central)
- [CVE-2026-39989](https://cve.now/CVE-2026-39989.md): SSRF in QNAP Download Station (CVSS 5.3, QNAP Systems Download Station)
- [CVE-2026-34015](https://cve.now/CVE-2026-34015.md): Remote Code Execution in upload.php of Video Station (CVSS 8.7, QNAP Systems Video Station)
- [CVE-2026-34014](https://cve.now/CVE-2026-34014.md): ds-move-files.sh is writable and executed as root (CVSS 8.4, QNAP Systems Download Station)
- [CVE-2026-34006](https://cve.now/CVE-2026-34006.md): Pre-Authentication Multiple Critical Vulnerabilities in QNAP sMedioDTCPServer (CVSS 9.3, QNAP Systems sMedio DTCP MOVE)
- [CVE-2026-26245](https://cve.now/CVE-2026-26245.md): SQLi#2 SQL Injection in class\_videos.php getSmartVideosByOffset (CVSS 7.1, QNAP Systems Video Station)
- [CVE-2026-26244](https://cve.now/CVE-2026-26244.md): SQLi#1 SQL Injection in class\_videos.php \_getFilters (CVSS 7.1, QNAP Systems Video Station)
- [CVE-2026-26243](https://cve.now/CVE-2026-26243.md): Arbitrary Folder Deletion in Qsync Central 5.0.0.5 (CVSS 7.2, QNAP Systems Qsync Central)
- [CVE-2026-79825](https://cve.now/CVE-2026-79825.md): HPE NonStop NDSREST - Heap buffer overflow vulnerability (CVSS 7.1, Hewlett Packard Enterprise HPE NonStop NDSREST)
- [CVE-2026-79824](https://cve.now/CVE-2026-79824.md): HPE NonStop Python 3.x - Directory traversal vulnerability (CVSS 8.0, Hewlett Packard Enterprise HPE NonStop Python 3.x)
- [CVE-2026-18661](https://cve.now/CVE-2026-18661.md): In Eclipse Jetty, across various versions of \`jetty-annotations\`, and \`jetty-eeN-annotations\`, the Jakarta Spec authoritative url-pattern ru (CVSS 8.8, Eclipse Foundation org.eclipse.jetty.ee11:jetty-ee11-ann… +3)
- [CVE-2026-79823](https://cve.now/CVE-2026-79823.md): HPE NonStop EMS Distributor - Buffer Overflow vulnerability (CVSS 4.0, Hewlett Packard Enterprise HPE NonStop EMS Distributor)
- [CVE-2026-63315](https://cve.now/CVE-2026-63315.md): Plaintext storage of a password in WebCTI (CVSS 8.2, Slican IPx)
- [CVE-2026-63314](https://cve.now/CVE-2026-63314.md): SQL Injection in WebCTI (CVSS 8.7, Slican IPx)
- [CVE-2026-35088](https://cve.now/CVE-2026-35088.md): Inadequate Encryption Strength in Slican telephone exchanges (CVSS 8.2, Slican IPx · Slican CCT-1668 +2)
- [CVE-2026-101287](https://cve.now/CVE-2026-101287.md): Authentication bypass in Stela by Diaple Networking (CVSS 9.3, Diaple Stela)
- [CVE-2026-101290](https://cve.now/CVE-2026-101290.md): CVE-2026-101290 (CVSS 7.5, SICK AG Sick\_Safetyscanners\_Base CPP Driver)
- [CVE-2026-77711](https://cve.now/CVE-2026-77711.md): When Jetty's \`HttpClient\` make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication Required (CVSS 8.2, Eclipse Foundation Eclipse Jetty)
- [CVE-2026-76184](https://cve.now/CVE-2026-76184.md): In Eclipse Jetty, HttpClient may receive a redirect of the form: \`\`\` /secure/../evil \`\`\` If an attacker is able to control the r (CVSS 8.2, Eclipse Foundation Eclipse Jetty)
- [CVE-2026-104618](https://cve.now/CVE-2026-104618.md): sdbootutil: world-readable debug log (CVSS 6.2, SUSE Linux Enterprise Server · openSUSE Leap +1)
- [CVE-2026-76182](https://cve.now/CVE-2026-76182.md): In Eclipse Jetty, \`TryPathsHandler\` and \`TryFilesFilter\` can be configured to forward requests to template URIs such as \`index?p=$path\`, whe (CVSS 6.9, Eclipse Foundation Eclipse Jetty)
- [CVE-2026-104617](https://cve.now/CVE-2026-104617.md): sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/\<pid\>/cmdline (CVSS 5.1, SUSE Linux Enterprise Server · openSUSE Leap +1)
- [CVE-2026-16438](https://cve.now/CVE-2026-16438.md): An arbitrary operation vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, and MC Works64 (CVSS 9.4, Mitsubishi Electric GENESIS64 · Mitsubishi Electric Icon… +9)
- [CVE-2026-16437](https://cve.now/CVE-2026-16437.md): An authentication bypass vulnerability in GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz (CVSS 7.1, Mitsubishi Electric GENESIS · Mitsubishi Electric Iconi… +17)
- [CVE-2026-72528](https://cve.now/CVE-2026-72528.md): "Handmade Marketplace App - Creema" provided by CREEMA LTD. (CVSS 4.3, "Handmade Marketplace App - Creema" for Android · "Creema -…)
- [CVE-2026-16436](https://cve.now/CVE-2026-16436.md): An authentication bypass vulnerability in GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz (CVSS 9.2, Mitsubishi Electric GENESIS · Mitsubishi Electric Iconi… +17)
- [CVE-2026-75559](https://cve.now/CVE-2026-75559.md): The smartphone application "Vehicle Inspection Certificate Viewer" contains a vulnerability in which sensitive information may be included i (CVSS 5.3, Ministry of Land, Infrastructure, Transport and Tourism Veh…)
- [CVE-2026-102477](https://cve.now/CVE-2026-102477.md): In Eclipse Vert.x versions \[4.0.0, 4.5.34\] or \[5.0.0,5.0.12\] or \[5.1.0,5.1.9\] or \[5.2.0, 5.2.0\], a gRPC endpoint does have a configurable pe (CVSS 8.7, Eclipse Foundation Eclipse Vert.x)
- [CVE-2026-102464](https://cve.now/CVE-2026-102464.md): In Eclipse Vert.x versions \[4.0.0, 4.5.34\] or \[5.0.0,5.0.12\] or \[5.1.0,5.1.9\] or \[5.2.0, 5.2.0\], the Eclipse Vert.x MQTT (vertx-mqtt) MqttCl (CVSS 8.2, Eclipse Foundation Eclipse Vert.x)
- [CVE-2026-96614](https://cve.now/CVE-2026-96614.md): "ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. (CVSS 5.4, GEO "ゲオアプリ" for Android · GEO "ゲオアプリ" for iOS)
- [CVE-2026-105271](https://cve.now/CVE-2026-105271.md): "ゲオアプリ" provided by GEO CORPORATION contains an issue with cleartext storage of sensitive information, which may allow an attacker to obtain (CVSS 4.3, GEO "ゲオアプリ" for Android · GEO "ゲオアプリ" for iOS)
- [CVE-2026-102461](https://cve.now/CVE-2026-102461.md): In Eclipse Vert.x versions \[4.0.0, 4.5.34\] or \[5.0.0,5.0.12\] or \[5.1.0,5.1.9\] or \[5.2.0, 5.2.0\], the uniqueItems keyword validation uses an (CVSS 8.7, Eclipse Foundation Eclipse Vert.x)
- [CVE-2023-32198](https://cve.now/CVE-2023-32198.md): Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacks (CVSS 8.0, SUSE steve · github.com/rancher/steve)
- [CVE-2026-103224](https://cve.now/CVE-2026-103224.md): In Eclipse Vert.x versions \[4.0.0, 4.5.34\] or \[5.0.0,5.0.12\] or \[5.1.0,5.1.9\] or \[5.2.0, 5.2.0\], the MySQL message decoder aggregates inboun (CVSS 8.2, Eclipse Foundation Eclipse Vert.x)
- [CVE-2024-22031](https://cve.now/CVE-2024-22031.md): Rancher users who can create Projects can gain access to arbitrary projects (CVSS 8.5, SUSE rancher · github.com/rancher/rancher)
- [CVE-2026-103223](https://cve.now/CVE-2026-103223.md): In Eclipse Vert.x versions \[4.0.0, 4.5.34\] or \[5.0.0,5.0.12\] or \[5.1.0,5.1.9\] or \[5.2.0, 5.2.0\], the PostgreSQL message decoder reads the 4- (CVSS 8.2, Eclipse Foundation Eclipse Vert.x)
- [CVE-2025-23390](https://cve.now/CVE-2025-23390.md): Fleet doesn’t validate a server’s certificate when connecting through SSH (CVSS 6.3, SUSE fleet · github.com/rancher/fleet)
- [CVE-2026-102466](https://cve.now/CVE-2026-102466.md): In Eclipse Vert.x versions \[4.0.0, 4.5.34\] or \[5.0.0,5.0.12\] or \[5.1.0,5.1.9\] or \[5.2.0, 5.2.0\], the Vert.x MySQL client (vertx-mysql-client (CVSS 8.2, Eclipse Foundation Eclipse Vert.x)
- [CVE-2026-102463](https://cve.now/CVE-2026-102463.md): In Eclipse Vert.x versions \[4.0.0, 4.5.34\] or \[5.0.0,5.0.12\] or \[5.1.0,5.1.9\] or \[5.2.0, 5.2.0\], the binary array decoder in vertx-pg-client (CVSS 8.2, Eclipse Foundation Eclipse Vert.x)
- [CVE-2026-109855](https://cve.now/CVE-2026-109855.md): undici WebSocket client vulnerable to Denial of Service via failed HTTP/2 handshake (CVSS 7.5, undici)
- [CVE-2026-102469](https://cve.now/CVE-2026-102469.md): In Eclipse Vert.x versions \[4.0.0, 4.5.34\] or \[5.0.0,5.0.12\] or \[5.1.0,5.1.9\] or \[5.2.0, 5.2.0\], the Vert.x DB2 client (vertx-db2-client) co (CVSS 9.2, Eclipse Foundation Eclipse Vert.x)
- [CVE-2026-102462](https://cve.now/CVE-2026-102462.md): In Eclipse Vert.x versions \[4.0.0, 4.5.34\] or \[5.0.0,5.0.12\] or \[5.1.0,5.1.9\] or \[5.2.0, 5.2.0\], the TDS message decoder in the Vert.x MSSQL (CVSS 8.2, Eclipse Foundation Eclipse Vert.x)
- [CVE-2026-108092](https://cve.now/CVE-2026-108092.md): Social Media Auto Post & Scheduler \<= 9.1.4 - Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information Exposure (CVSS 4.3, pr-gateway Blog2Social: Social Media Auto Post & Scheduler)
- [CVE-2026-102465](https://cve.now/CVE-2026-102465.md): In Eclipse Vert.x versions \[4.0.0, 4.5.34\] or \[5.0.0,5.0.12\] or \[5.1.0,5.1.9\] or \[5.2.0, 5.2.0\], the Vert.x Redis client RESP parser pre-all (CVSS 8.2, Eclipse Foundation Eclipse Vert.x)
- [CVE-2026-102475](https://cve.now/CVE-2026-102475.md): In Eclipse Vert.x versions \[5.0.0,5.0.12\] or \[5.1.0,5.1.9\] or \[5.2.0, 5.2.0\], the HTTP proxy provides a body transformer interceptor that re (CVSS 8.7, Eclipse Foundation Eclipse Vert.x)
- [CVE-2026-102467](https://cve.now/CVE-2026-102467.md): In Eclipse Vert.x versions \[4.0.0, 4.5.34\] or \[5.0.0,5.0.12\] or \[5.1.0,5.1.9\] or \[5.2.0, 5.2.0\], the WebSocket implementation does not defin (CVSS 8.7, Eclipse Foundation Eclipse Vert.x)
- [CVE-2026-101311](https://cve.now/CVE-2026-101311.md): Multiple vulnerabilities in bhyve device models (CVSS 7.0, FreeBSD)
- [CVE-2026-101310](https://cve.now/CVE-2026-101310.md): Multiple vulnerabilities in bhyve device models (CVSS 7.0, FreeBSD)
- [CVE-2026-101309](https://cve.now/CVE-2026-101309.md): Multiple vulnerabilities in bhyve device models (CVSS 7.0, FreeBSD)
- [CVE-2026-101308](https://cve.now/CVE-2026-101308.md): TOCTOU race between sound(4) buffer resizing and mmap (CVSS 5.5, FreeBSD)
- [CVE-2026-101307](https://cve.now/CVE-2026-101307.md): Remotely triggerable buffer overflow in tcp\_rack (CVSS 8.2, FreeBSD)
- [CVE-2026-19377](https://cve.now/CVE-2026-19377.md): Improper certificate validation in Cato Client tunnel handshake (CVSS 6.0, Cato Networks Cato Client for Windows · Cato Networks Ca… +3)
- [CVE-2026-41544](https://cve.now/CVE-2026-41544.md): Path Traversal leading to Arbitrary File Move, Docker Escape, and Host RCE in /calapi/renameUpload endpoint (CVSS 8.7, QNAP Systems QcalAgent)
- [CVE-2026-39993](https://cve.now/CVE-2026-39993.md): Path Traversal to Root RCE in QNAP Download Station via Addon/Search addon Parameter (CVSS 8.7, QNAP Systems Download Station)
- [CVE-2026-24723](https://cve.now/CVE-2026-24723.md): NULL Pointer Dereference in utilRequest.cgi (CVSS 5.3, QNAP Systems File Station)
- [CVE-2026-24722](https://cve.now/CVE-2026-24722.md): Null Pointer Dereference in File Station 5 (CVSS 5.3, QNAP Systems File Station)
- [CVE-2026-24721](https://cve.now/CVE-2026-24721.md): Null Pointer Dereference in File Station 5 (CVSS 5.3, QNAP Systems File Station)
- [CVE-2026-24718](https://cve.now/CVE-2026-24718.md): Path Traversal Vulnerability in Qsync Central's qsyncsrv.cgi (CVSS 5.3, QNAP Systems Qsync Central)
- [CVE-2026-101303](https://cve.now/CVE-2026-101303.md): IPv6 UDP sendto(2) bypasses jail loopback restriction (CVSS 7.5, FreeBSD)
- [CVE-2026-24715](https://cve.now/CVE-2026-24715.md): Lack of Reproducible Vulnerability Evidence in QNAP Report (CVSS 5.3, QNAP Systems QuRouter)
- [CVE-2026-22896](https://cve.now/CVE-2026-22896.md): Stored XSS via Interface Name in Network & Virtual Switch App (CVSS 6.2, QNAP Systems Network & Virtual Switch)
- [CVE-2025-68404](https://cve.now/CVE-2025-68404.md): vcs\_pentest Race Condition Authentication Bypass Vulnerability in QuRouter management interface (CVSS 7.5, QNAP Systems QuRouter)
- [CVE-2025-68403](https://cve.now/CVE-2025-68403.md): Inadequate Steps to Confirm Vulnerability in QuRouter (CVSS 4.6, QNAP Systems QuRouter)
- [CVE-2025-66275](https://cve.now/CVE-2025-66275.md): Remote code execution via command injection (CVSS 7.7, QNAP Systems Video Station)
- [CVE-2025-66272](https://cve.now/CVE-2025-66272.md): Arbitrary file deletion and remote code execution (CVSS 7.7, QNAP Systems Video Station)
- [CVE-2025-29897](https://cve.now/CVE-2025-29897.md): Stack-based Buffer Overflow in qsyncsrv.cgi (CVSS 2.3, QNAP Systems Qsync Central)
- [CVE-2025-29896](https://cve.now/CVE-2025-29896.md): NULL Pointer Dereference in qsyncsrv.cgi (CVSS 2.3, QNAP Systems Qsync Central)
- [CVE-2025-29895](https://cve.now/CVE-2025-29895.md): NULL Pointer Dereference in qsyncsrv.cgi (CVSS 2.3, QNAP Systems Qsync Central)
- [CVE-2026-79822](https://cve.now/CVE-2026-79822.md): HPE NonStop TNS/X Native Inspect - Execution flow vulnerability (CVSS 7.1, Hewlett Packard Enterprise HPE NonStop TNS/X Native Inspect)
- [CVE-2026-101302](https://cve.now/CVE-2026-101302.md): Remote DoS via receive-side kernel TLS (CVSS 6.5, FreeBSD)
- [CVE-2026-110934](https://cve.now/CVE-2026-110934.md): Improper validation of array index vulnerability in Samsung Open Source Vyond allows Input Data Manipulation. (CVSS 4.4, Samsung Open Source Vyond)
- [CVE-2026-110933](https://cve.now/CVE-2026-110933.md): Uncaught exception vulnerability in Samsung Open Source Vyond allows Input Data Manipulation. (CVSS 4.4, Samsung Open Source Vyond)
- [CVE-2026-101306](https://cve.now/CVE-2026-101306.md): Multiple jail filesystem root escapes (CVSS 9.8, FreeBSD)
- [CVE-2026-101305](https://cve.now/CVE-2026-101305.md): Multiple jail filesystem root escapes (CVSS 8.8, FreeBSD)
- [CVE-2026-101304](https://cve.now/CVE-2026-101304.md): Multiple jail filesystem root escapes (CVSS 7.1, FreeBSD)
- [CVE-2026-81534](https://cve.now/CVE-2026-81534.md): Email Customizer for WooCommerce (Pro) \<= 3.9.5 - Authenticated (Subscriber+) Remote Code Execution via 'template' Parameter (CVSS 8.8, ThemeHigh Email Customizer for WooCommerce)
- [CVE-2026-11905](https://cve.now/CVE-2026-11905.md): Elementor Website Builder \<= 4.2.3 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'is\_public' and 'keys\_conversion\_map' Parameters (CVSS 4.3, elemntor Elementor Website Builder – more than just a page…)
- [CVE-2026-92429](https://cve.now/CVE-2026-92429.md): Rede Itaú for WooCommerce 3.7.1 - 5.5.2 - Unauthenticated Order Status Manipulation via maxiPago Debit Webhook (CVSS 5.3, Rede Itaú for WooCommerce)
- [CVE-2026-92428](https://cve.now/CVE-2026-92428.md): Rede Itaú for WooCommerce \< 5.5.3 - Unauthenticated Order Status Manipulation via 3DS Failure Webhook (CVSS 5.3, Rede Itaú for WooCommerce)
- [CVE-2026-103324](https://cve.now/CVE-2026-103324.md): Cardinity Payment Gateway for WooCommerce 3.2.6 - 3.4.1 - Unauthenticated Arbitrary Order Payment Forgery via Empty-Default Project Secret (CVSS 5.3, Cardinity Payment Gateway for WooCommerce)
- [CVE-2026-79821](https://cve.now/CVE-2026-79821.md): HPE NonStop SOAP 4.0 - Memory corruption (CVSS 8.2, Hewlett Packard Enterprise HPE NonStop SOAP)
- [CVE-2026-76668](https://cve.now/CVE-2026-76668.md): HPE NonStop Kernel - Access to unmapped or privileged data (CVSS 6.3, Hewlett Packard Enterprise HPE NonStop Kernel)
- [CVE-2026-58100](https://cve.now/CVE-2026-58100.md): Memory safety bugs in kqueue copy-on-fork implementation (CVSS 7.0, FreeBSD)
- [CVE-2026-58099](https://cve.now/CVE-2026-58099.md): Memory safety bugs in kqueue copy-on-fork implementation (CVSS 7.0, FreeBSD)
- [CVE-2026-58098](https://cve.now/CVE-2026-58098.md): Heap out-of-bounds access in semop(2) (CVSS 8.4, FreeBSD)
- [CVE-2026-96537](https://cve.now/CVE-2026-96537.md): Tutor LMS \< 4.1.1 - Unauthenticated Tutor Page Force-Publish and Content Overwrite (CVSS 7.5, Tutor LMS)
- [CVE-2026-74920](https://cve.now/CVE-2026-74920.md): Document Gallery \<= 5.1.1 - Reflected XSS via data-shortcode Attribute (CVSS 7.1, Document Gallery)
- [CVE-2026-109145](https://cve.now/CVE-2026-109145.md): User Rights Access Manager \<= 1.1.3 - Unauthenticated Privilege Escalation via AJAX Registration Handler (CVSS 9.8, User Rights Access Manager)
- [CVE-2026-106031](https://cve.now/CVE-2026-106031.md): Spin Wheel \< 2.2.1 - Unauthenticated Coupon Code Disclosure via Forged Spin Result (CVSS 6.5, Spin Wheel)
- [CVE-2026-104643](https://cve.now/CVE-2026-104643.md): Easy HTTPS Redirection (SSL) \< 2.0.2 - Subscriber+ Scan Result Disclosure and Site-Wide URL Rewrite (CVSS 4.2, Easy HTTPS Redirection)
- [CVE-2026-103304](https://cve.now/CVE-2026-103304.md): eaSYNC \< 1.3.31 - Unauthenticated Cancellation Request Creation and Email Template Update (CVSS 5.3, eaSYNC Booking)
- [CVE-2026-78087](https://cve.now/CVE-2026-78087.md): VK Blocks \<= 1.126.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Group Block 'linkToPost' Feature (CVSS 6.4, vektor-inc VK Blocks)
- [CVE-2026-15090](https://cve.now/CVE-2026-15090.md): Link Library \<= 7.9.2 - Unauthenticated SQL Injection via 'link\_url' Parameter (CVSS 7.5, jackdewey Link Library)
- [CVE-2026-15180](https://cve.now/CVE-2026-15180.md): Tracking Code Manager \<= 2.6.0 - Reflected Cross-Site Scripting via 'TCM\_ErrorMessages' (CVSS 6.1, data443 Tracking Code Manager)
- [CVE-2026-88043](https://cve.now/CVE-2026-88043.md): Mang Board WP \<= 2.4.0 - Unauthenticated Stored Cross-Site Scripting via 'data\_type' Parameter (CVSS 7.2, kitae-park Mang Board)
- [CVE-2026-18557](https://cve.now/CVE-2026-18557.md): Photo Gallery by 10Web \<= 1.8.42 - Reflected Cross-Site Scripting via 'title' Parameter (CVSS 6.1, Photo Gallery by 10Web – Mobile-Friendly Image Gallery)
- [CVE-2026-18548](https://cve.now/CVE-2026-18548.md): Groundhogg \<= 4.5.14 - Unauthenticated Stored Cross-Site Scripting via 'ref' Parameter (CVSS 7.2, trainingbusinesspros Groundhogg — CRM, Newsletters, and Mar…)
- [CVE-2026-18586](https://cve.now/CVE-2026-18586.md): Premium Packages \<= 7.0.5 - Unauthenticated Stored Cross-Site Scripting via 'order\_email' (CVSS 7.2, codename065 Premium Packages – Sell Digital Products Secure…)
- [CVE-2026-17031](https://cve.now/CVE-2026-17031.md): Checkout Field Manager (Checkout Manager) for WooCommerce \<= 7.9.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Media Deletion via Checkout File Field Attachment ID (CVSS 8.1, quadlayers Checkout Field Manager (Checkout Manager) for Wo…)
- [CVE-2026-17001](https://cve.now/CVE-2026-17001.md): Import and export users and customers \<= 2.4.5 - Authenticated (Custom+) Stored Cross-Site Scripting via User Meta Profile Fields (CVSS 6.4, carazo Import and export users and customers)
- [CVE-2026-86803](https://cve.now/CVE-2026-86803.md): Ocean Extra \<= 2.6.0 - Unauthenticated Arbitrary Shortcode Execution via 'oceanwp\_library' Shortcode Template (CVSS 6.5, oceanwp Ocean Extra)
- [CVE-2026-78001](https://cve.now/CVE-2026-78001.md): Post and Page Builder by BoldGrid \<= 1.27.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-label' Attribute (CVSS 6.4, Post and Page Builder by BoldGrid – Visual Drag and Drop Ed…)
- [CVE-2026-76667](https://cve.now/CVE-2026-76667.md): HPE NonStop EXPAND - Out-of-Bounds memory read vulnerability (CVSS 5.7, Hewlett Packard Enterprise HPE NonStop EXPAND)
- [CVE-2026-76666](https://cve.now/CVE-2026-76666.md): HPE NonStop EXPAND - Out-of-Bounds memory read (CVSS 4.7, Hewlett Packard Enterprise HPE NonStop EXPAND)
- [CVE-2026-76665](https://cve.now/CVE-2026-76665.md): HPE NonStop EXPAND - Buffer Overflow vulnerability (CVSS 7.1, Hewlett Packard Enterprise HPE NonStop EXPAND)
- [CVE-2026-14572](https://cve.now/CVE-2026-14572.md): Kirki \<= 6.2.0 - Authenticated (Custom+) Stored Cross-Site Scripting via Page Builder Text Content (CVSS 6.4, themeum Kirki – Freeform Page Builder, Website Builder & Cu…)
- [CVE-2026-108587](https://cve.now/CVE-2026-108587.md): 10Web Booster \<= 2.34.10 - Unauthenticated Arbitrary File Upload via 'page\_id' Parameter (CVSS 9.8, 10Web Booster – Website speed optimization, Cache & Page Sp…)
- [CVE-2026-3712](https://cve.now/CVE-2026-3712.md): PhastPress \<= 3.10 - Unauthenticated Server-Side Request Forgery via 'src' Parameter (CVSS 7.3, kiboit PhastPress)
- [CVE-2026-76664](https://cve.now/CVE-2026-76664.md): HPE NonStop EXPAND - Out-of-Bounds memory read/write (CVSS 6.4, Hewlett Packard Enterprise HPE NonStop EXPAND)
- [CVE-2026-93484](https://cve.now/CVE-2026-93484.md): Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement. (CVSS 8.6, Znuny)
- [CVE-2026-93483](https://cve.now/CVE-2026-93483.md): In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functions (CVSS 9.5, Znuny)
- [CVE-2026-110912](https://cve.now/CVE-2026-110912.md): In DragonFly BSD through 6.4.2 before 4bb22ff, the ARP input handlers arpintr() and in\_arpinput() (sys/netinet/if\_ether.c) do not validate t (CVSS 7.1, DragonFlyBSD)
- [CVE-2026-110911](https://cve.now/CVE-2026-110911.md): Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again as SQL by dynamic finders (such as findO (CVSS 9.8, Wheels)
- [CVE-2026-110909](https://cve.now/CVE-2026-110909.md): Wheels CLI through 4.1.0 does not verify that the local development server answering its HTTP requests belongs to the current project. (CVSS 5.0, Wheels CLI)
- [CVE-2026-110908](https://cve.now/CVE-2026-110908.md): Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2\_1 and source revision 2.1.2\_1 contain an OS command injection vulnerability in the FRR s (CVSS 8.8, Netgate pfSense-pkg-frr)
- [CVE-2026-76663](https://cve.now/CVE-2026-76663.md): HPE NonStop TELSERV - Memory corruption vulnerability (CVSS 7.5, Hewlett Packard Enterprise HPE NonStop TELSERV)
- [CVE-2026-76662](https://cve.now/CVE-2026-76662.md): HPE NonStop TELSERV - Memory corruption vulnerability (CVSS 5.9, Hewlett Packard Enterprise HPE NonStop TELSERV)
- [CVE-2026-110907](https://cve.now/CVE-2026-110907.md): Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishandles tokens. (CVSS 7.5, BackdropCMS Backdrop)
- [CVE-2026-76661](https://cve.now/CVE-2026-76661.md): HPE NonStop QIOMON - Memory corruption vulnerability (CVSS 7.6, Hewlett Packard Enterprise HPE NonStop QIOMON)
- [CVE-2026-76660](https://cve.now/CVE-2026-76660.md): HPE NonStop CIPSAM - Memory corruption vulnerability (CVSS 8.7, Hewlett Packard Enterprise HPE NonStop CIPSAM)
- [CVE-2026-76066](https://cve.now/CVE-2026-76066.md): IntentKit 2.6.3 Executor Tool Authorization Bypass via ToolNode (CVSS 8.7, crestalnetwork intentkit)
- [CVE-2026-76659](https://cve.now/CVE-2026-76659.md): HPE NonStop TCP/IP UTILITIES - Denial of Service vulnerability (CVSS 7.5, Hewlett Packard Enterprise HPE NonStop TCP/IP UTILITIES)
- [CVE-2026-109430](https://cve.now/CVE-2026-109430.md): Ellucian WebAdvisor 3.2 Unauthenticated XXE Injection (CVSS 8.7, Ellucian WebAdvisor)
- [CVE-2026-76656](https://cve.now/CVE-2026-76656.md): HPE NonStop TCP/IP UTILITIES - Denial of Service vulnerability (CVSS 5.3, Hewlett Packard Enterprise HPE NonStop TCP/IP UTILITIES)
- [CVE-2026-77931](https://cve.now/CVE-2026-77931.md): MoviePilot 3.1.5 Command Injection via ExecuteCommandTool (CVSS 8.7, jxxghp MoviePilot)
- [CVE-2026-73799](https://cve.now/CVE-2026-73799.md): HPE NonStop SNMP Trap Multiplexer - Memory Corruption vulnerability (CVSS 7.5, Hewlett Packard Enterprise HPE NonStop SNMP Trap Multiplexer)
- [CVE-2026-110904](https://cve.now/CVE-2026-110904.md): ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostrophecms/page?all=1 c (CVSS 5.3, ApostropheCMS · apostrophe)
- [CVE-2026-0993](https://cve.now/CVE-2026-0993.md): SODOLA SL902-SWTGW124AS Buffer Overflow DoS via Multipart Boundary Parser (CVSS 8.7, SODOLA SL902-SWTGW124AS)
- [CVE-2026-110810](https://cve.now/CVE-2026-110810.md): ggml-org whisper.cpp Model Loader whisper\_model\_load out-of-bounds (CVSS 2.4, ggml-org whisper.cpp)
- [CVE-2026-104586](https://cve.now/CVE-2026-104586.md): AUTOM8N (WHM/cPanel plugin) through commit 82821f7 contains an OS Command Injection in borg\_restore.cgi. (CVSS 9.8)
- [CVE-2026-106700](https://cve.now/CVE-2026-106700.md): ELADMIN v2.7 and earlier contains an improper access control vulnerability in the user-management endpoint PUT /api/users/resetPwd of me.zhe (CVSS 8.8)
- [CVE-2026-106701](https://cve.now/CVE-2026-106701.md): ELADMIN v2.7 and before is vulnerable to Cross Site Scripting (XSS) via the component WebSocketServer, SpringSecurityConfig, deploy.vue. (CVSS 6.1)
- [CVE-2026-106706](https://cve.now/CVE-2026-106706.md): XXL-JOB through 3.5.0-SNAPSHOT is vulnerable to stored cross-site scripting (XSS) in the GLUE code editor. (CVSS 5.4)
- [CVE-2026-106707](https://cve.now/CVE-2026-106707.md): XXL-JOB \<=3.5.0-SNAPSHOT contains a stored Cross-Site Scripting (XSS) vulnerability in the job log list page (/joblog). (CVSS 5.4)
- [CVE-2026-106708](https://cve.now/CVE-2026-106708.md): XXL-JOB 3.5.0-SNAPSHOT and earlier contains a Cross-Site Request Forgery (CSRF) vulnerability in the user management controller (JobUserCont (CVSS 8.8)
- [CVE-2026-36436](https://cve.now/CVE-2026-36436.md): An issue in Trisolutions BRPerfX version 1.4.4.0 exposes LDAP credentials in plaintext within the administrative configuration interface. (CVSS 7.5)
- [CVE-2026-52167](https://cve.now/CVE-2026-52167.md): A stack overflow in the gensub\_ParsePsb() function of AOC LC32D1320 v2.05 allows attackers to cause a Denial of Service (DoS) via supplying (CVSS 6.2)
- [CVE-2026-78850](https://cve.now/CVE-2026-78850.md): An issue in Matomo v.5.11.2 allows a remote attacker to obtain sensitive information via the SiteContentDetector / SitesManager component. (CVSS 5.0)
- [CVE-2026-78851](https://cve.now/CVE-2026-78851.md): Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the GravExten (CVSS 6.5)
- [CVE-2026-88753](https://cve.now/CVE-2026-88753.md): A Regular-Expression Denial of Service (ReDoS) in the Markdown2. (CVSS 7.5)
- [CVE-2026-95155](https://cve.now/CVE-2026-95155.md): FasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.9.13, allows attackers to cause a denial (CVSS 7.5)
- [CVE-2026-95179](https://cve.now/CVE-2026-95179.md): An issue in lottie-android 6.7.1 and earlier (and master) allows a remote attacker to cause a denial of service via a crafted Lottie animati (CVSS 7.5)
- [CVE-2026-95180](https://cve.now/CVE-2026-95180.md): An issue in Justson agentweb-core v5.1.6-androidx and earlier allows a local attacker to obtain sensitive information and launch non-exporte (CVSS 5.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-10-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.