CVEs published October 21, 2026
550 CVEs were published on October 21, 2026: 54 critical, 216 high. 2 are now in CISA KEV.
- Published
- 550
- Critical
- 54
- High
- 216
- Medium
- 249
- Low
- 28
- Unrated
- 3
- Now in CISA KEV
- 2
- Fix available
- 364
Most affected products
- Apache Software Foundation Apache bRPC
- 35
- triggerdotdev trigger.dev
- 21
- Apache Software Foundation Apache Traffic Server
- 15
- Splunk SOAR
- 15
- Apache Software Foundation Apache Pulsar
- 14
- Splunk Enterprise
- 14
- Progressive Robot hMailServer
- 12
- GitLab
- 11
- polonel trudesk
- 11
- python-pillow Pillow · pillow
- 11
Critical 54
- CVE-2026-76531Files or Directories Accessible to External Parties in Splunk SOARSplunk SOAR
- CVE-2026-76529Improper Protection of Alternate Path in Splunk SOARSplunk SOAR
- CVE-2026-76527Improper Check or Handling of Exceptional Conditions in Splunk SOARSplunk SOAR
- CVE-2026-76408Improper Control of a Resource Through its Lifetime in Splunk SOARSplunk SOAR
- CVE-2026-76302Security Hardening in Splunk Enterprise - October 2026Splunk Enterprise
- CVE-2026-76301Security Hardening in Splunk Enterprise - October 2026Splunk Enterprise
- CVE-2026-76299Security Hardening in Splunk Enterprise - October 2026Splunk Enterprise
- CVE-2026-114509Laravel TokenGuard authentication bypass through non-string API credentialslaravel framework · laravel/framework
- CVE-2026-114383TOTOLINK EX200 wireless.so cstecgi.cgi setWiFiAclAddConfig stack-based overflowTOTOLINK EX200
- CVE-2026-114382TOTOLINK EX200 lan.so cstecgi.cgi setStaticDhcpConfig stack-based overflowTOTOLINK EX200
- CVE-2026-91403Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).Oracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-94423Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host key against…Net-LibSSH
- CVE-2026-94140Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes…Rex
- CVE-2026-96639Pillow multi-frame loaders can reuse stale native image storage after mode transitionspython-pillow Pillow · pillow
- CVE-2026-114139Sentry-Javascript: Middleware Bypass when using Tunnel routegetsentry sentry-javascript · @sentry/nextjs
- CVE-2026-111812Apache Traffic Server: origin_server_auth signs client-controlled AWS headers under the proxy's IAM credentialsApache Software Foundation Apache Traffic Server
- CVE-2026-111811Apache Traffic Server: tsmemcache plugin exposes the shared proxy cache over the network with no authenticationApache Software Foundation Apache Traffic Server
- CVE-2026-111809Apache Traffic Server: HEAD requests carrying Content-Length or Transfer-Encoding enable request smugglingApache Software Foundation Apache Traffic Server
- CVE-2026-111815Apache Traffic Server: TLS session ticket resumption bypasses per-SNI verify_client STRICT enforcementApache Software Foundation Apache Traffic Server
- CVE-2026-111814Apache Traffic Server: Default server_session_sharing.match omits MASK_CERT, allowing pooled mTLS identity confusion at the originApache Software Foundation Apache Traffic Server
- CVE-2026-114268Tenda BE3L Pro WifiBasicSet formWifiBasicSet buffer overflowTenda BE3L Pro
- CVE-2026-111816Apache Traffic Server: A malformed 302 response bypasses parse-error rejection through the Transfer-Encoding: chunked carve-outApache Software Foundation Apache Traffic Server
- CVE-2026-111813Apache Traffic Server: magick plugin passes client query strings unfiltered to ImageMagick convert in the default configurationApache Software Foundation Apache Traffic Server
- CVE-2026-105944Apache Pulsar Manager: Missing authentication and authorization and disclosure of the Pulsar admin credential; end of lifeApache Software Foundation Apache Pulsar Manager
- CVE-2026-105869Apache Pulsar: MultiRolesTokenAuthorizationProvider uses roles from unverified tokens for HTTP requests that fall back to the anonymous…Apache Software Foundation Apache Pulsar
- CVE-2026-114493LocalAI v4.6.0 through v4.11.0 SSRF Guard Bypass via HTTP RedirectsLocalAI
- CVE-2026-89035MikroTik RouterOS 7.24.5 WebFig Session Token Replay Authentication BypassMikroTik RouterOS
- CVE-2026-111183GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution VulnerabilityGStreamer
- CVE-2026-76475Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting VulnerabilitiesCisco Emergency Responder · Cisco Unified Communications… +1
- CVE-2026-76474Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication VulnerabilitiesCisco Emergency Responder · Cisco Unified Communications… +1
- CVE-2026-76473Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime.Cisco Emergency Responder · Cisco Unified Communications… +1
- CVE-2026-76466Cisco Expressway Series Remote Code Execution VulnerabilityCisco TelePresence Video Communication Server (VCS) Express…
- CVE-2026-20043Multiple Cisco Products Snort 3 Software Hardening Release: October 2026Cisco Cyber Vision · Cisco Open Source Snort3 +2
- CVE-2026-113788Lagoon core ssh service vulnerable to remote code executionuselagoon lagoon
- CVE-2026-111832WordPress WP Mailster plugin <= 1.9.1.0 - Arbitrary File Upload vulnerabilityWP Mailster
- CVE-2026-111834WordPress Mang Board WP plugin <= 2.4.4 - Arbitrary File Upload vulnerabilityKitae Park Mang Board WP
- CVE-2026-111852WordPress Ajax Search Lite plugin <= 4.14.6 - SQL Injection vulnerabilityWPdreams Ajax Search Lite
- CVE-2026-109619RCE via stale global statePHP Group PHP
- CVE-2026-109618RCE via OOM corruptionPHP Group PHP
- CVE-2026-114403PHPOffice PHPPresentation through 1.2.0 Deserialization via Reader\Serialized::loadPHPOffice PHPPresentation
- CVE-2026-86249Apache bRPC: Authentication bypass when a server sets ServerOptions.internal_port and ServerOptions.authApache Software Foundation Apache bRPC
- CVE-2026-78334Apache bRPC: Missing Authentication for Streaming RPC FramesApache Software Foundation Apache bRPC
- CVE-2026-56388Apache bRPC: Out-of-Bounds Write in Redis Command ParserApache Software Foundation Apache bRPC
- CVE-2026-48830Apache bRPC: HTTP builtin request can mark a connection authenticated and bypass auth for later requestsApache Software Foundation Apache bRPC
- CVE-2026-59562Apache IoTDB: Remote code execution and Unauthenticated path traversal in legacy pipe sendFile RPCApache Software Foundation Apache IoTDB
- CVE-2026-58663Apache IoTDB: Auth Bypass in pipeTransfer() interfaceApache Software Foundation Apache IoTDB
- CVE-2026-87095Sensitive information disclosure and manipulation due to improper authorization checks.Acronis Cyber Infrastructure
- CVE-2026-71195In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller owns the share.OpenStack Manila
- CVE-2026-113744Tenda AC19 httpd Web Management Service SetFirewallCfg formSetFirewallCfg stack-based overflowTenda AC19
- CVE-2026-114119Best Practice Software Bp Premier before 1.14.1.1128 Hardcoded SQL Server Administrative CredentialBest Practice Software Bp Premier
- CVE-2026-114108HKUDS Vibe-Trading before 0.1.7 Missing Authentication in FastAPI Server Enabling RCEHKUDS Vibe-Trading · vibe-trading-ai
- CVE-2026-114087Trigger.dev before 4.5.6 Authentication Bypass via Hardcoded Default Secretstriggerdotdev trigger.dev · trigger.dev
- CVE-2026-114053vLLM 0.7.3 before 0.31.0 RCE via mm_processor_kwargs.code_revisionvllm-project vllm · vllm
- CVE-2026-113736D-Link DHP-W610AV HNAP Login defaultvalue.xml login_prepare_hnap empty passwordD-Link DHP-W610AV
High 216
- CVE-2026-15723Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in GitLabGitLab
- CVE-2026-112212Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in GitLabGitLab
- CVE-2026-76530Use of Non-Canonical URL Paths for Authorization Decisions in Splunk SOARSplunk SOAR
- CVE-2026-76526Improper Neutralization in Splunk SOARSplunk SOAR
- CVE-2026-76307Sensitive Information Disclosure through REST API Query Filters in Splunk SOARSplunk SOAR
- CVE-2026-76306Information Disclosure through REST API Query Filters in Splunk SOARSplunk SOAR
- CVE-2026-76300Security Hardening in Splunk Enterprise - October 2026Splunk Enterprise
- CVE-2026-76298Use of Hard-coded Cryptographic Key in the PostgreSQL Sidecar Service in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76293Remote Code Execution (RCE) through Splunk Web Manager Extensible Markup Language (XML) in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76291Improper Access Control through Scheduled Search Safeguards in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76290Denial of Service (DoS) through Unauthenticated Package Downloads over the REST API in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76288Denial of Service (DoS) through Splunk Web Content-Type Header Parsing in Splunk EnterpriseSplunk Enterprise
- CVE-2026-103090Unauthenticated Biscuit Credential Disclosure via GET /enroll/status in Google OSS Agent Mesh (SAM)Google SAM
- CVE-2026-112921Robots::Validate versions from 0.4.3 before 0.4.10 for Perl report clients as imposter robots when User-Agent matcher state carries over…Robots-Validate
- CVE-2026-29001TastyIgniter 4.4.5 PHP Object Injection via Settings DeserializationTastyIgniter
- CVE-2026-96640Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustionpython-pillow Pillow · pillow
- CVE-2026-96637Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoSpython-pillow Pillow · pillow
- CVE-2026-113811Algorithm::UrataniTakeda versions from 0.1.5 before 0.1.7 for Perl allow memory exhaustion via a never-cleared failure shift cache in searchAlgorithm-UrataniTakeda
- CVE-2026-96778Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills bufferpython-pillow Pillow · pillow
- CVE-2026-96643Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic timepython-pillow Pillow · pillow
- CVE-2026-96644Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds)python-pillow Pillow · pillow
- CVE-2026-96642Pillow: TarIO negative size field causes infinite CPU-spin looppython-pillow Pillow · pillow
- CVE-2026-82987CVE-2026-82987Viewsonic vCast
- CVE-2026-114145GitPython validates a submodule's ".git" path only after cloning into it (RCE)gitpython-developers GitPython · gitpython
- CVE-2026-114144toml-node: Uncontrolled resource consumption (CPU DoS) via unbounded-length integer literals in toml.parse()BinaryMuse toml-node · toml
- CVE-2026-114143toml-node: Quadratic-complexity DoS via long dotted keys or table paths in toml.parse()BinaryMuse toml-node · toml
- CVE-2026-114142toml-node: Prototype pollution: parsing a TOML document can write to Object.prototypeBinaryMuse toml-node · toml
- CVE-2026-114141toml-node: Quadratic-complexity DoS via many array-of-tables headers in toml.parse()BinaryMuse toml-node · toml
- CVE-2026-114140nbconvert: File write via path traversal in cell output filenamesjupyter nbconvert · nbconvert
- CVE-2026-114138Django REST framework: Accept header with many large quoted parameters burns ~19s of CPU per request in content negotiationencode django-rest-framework · djangorestframework
- CVE-2026-114137Django REST framework: TokenProxy.delete() reports success and revokes nothingencode django-rest-framework · djangorestframework
- CVE-2026-114136Django REST framework: JSONParser applies an attacker-named codec to the request streamencode django-rest-framework · djangorestframework
- CVE-2026-114135Jupyter Server: Gateway WebSocket handler bypasses kernel execute authorizationjupyter-server jupyter_server · jupyter-server
- CVE-2026-112408Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()AWS Amazon SageMaker Python SDK
- CVE-2026-111810Apache Traffic Server: Unthrottled per-header diagnostic logging enables a log-flood denial of serviceApache Software Foundation Apache Traffic Server
- CVE-2026-111808Apache Traffic Server: HTTP/2 DATA frame padding underflow lets a client trigger backend worker-pool exhaustionApache Software Foundation Apache Traffic Server
- CVE-2026-111805Apache Traffic Server: HTTP/2 Content-Length truncation lets a client trigger backend worker-pool exhaustionApache Software Foundation Apache Traffic Server
- CVE-2025-55702Apache Traffic Server: An unread Expect: 100-continue request body is framed as a new requestApache Software Foundation Apache Traffic Server
- CVE-2026-110803Session Lock Leak on an Invalid UI Id Allows Denial of Service in Vaadin Framework 8vaadin framework
- CVE-2026-107588Multiple Vulnerabilities in the Highcharts Library Bundled with Vaadin Chartsvaadin · vaadin-charts-flow +2
- CVE-2025-31699Apache Traffic Server: Origin connection still owed a request body is reused, enabling request smugglingApache Software Foundation Apache Traffic Server
- CVE-2026-111804Apache Traffic Server: wasm plugin has a use-after-free and forwards unvalidated guest metric IDsApache Software Foundation Apache Traffic Server
- CVE-2026-79976NULL pointer dereference in the MCTP I2C+GPIO target binding triggerable by a peer I2C controllerzephyrproject zephyr
- CVE-2026-78118Race condition on kernel wait queues: unlocked z_waitq_head() read in the timer expiration handler can yield a stale or sentinel thread pointer on SMPzephyrproject zephyr
- CVE-2026-19676PECI transfer syscall verifier does not validate embedded user buffer pointers, allowing arbitrary kernel memory read/write from user modezephyrproject zephyr
- CVE-2026-105945Apache Pulsar: Improper Validation of Package Name Components Allows Cross-Tenant Package Access in Filesystem Package StorageApache Software Foundation Apache Pulsar
- CVE-2026-105942Apache Pulsar: Original principal of proxied requests authorized with the proxy's authentication data, allowing privilege escalationApache Software Foundation Apache Pulsar
- CVE-2026-105937Apache Pulsar: Missing authorization of the shadow topic source allows cross-tenant message disclosure and deletion of source topic dataApache Software Foundation Apache Pulsar
- CVE-2026-105934Apache Pulsar: Missing tenant admin authorization check when truncating a partitioned topicApache Software Foundation Apache Pulsar
- CVE-2026-113870Improper Encoding of Server-Supplied JavaScript Values in MongoDB Compass BSON ParsingMongoDB Compass
- CVE-2026-114492gin-vue-admin through 2.9.2 Path Traversal via removePlugin Endpointflipped-aurora gin-vue-admin
- CVE-2026-110744Multicluster-global-hub-operator-bundle: operator serviceaccount granted unrestricted impersonation of users, groups and serviceaccounts cluster-wideRed Hat Multicluster Global Hub
- CVE-2026-114126Storybook dev server: devices on the same network can obtain the WebSocket token and write code into story filesstorybookjs storybook · storybook +5
- CVE-2026-92202Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution VulnerabilityLuxion KeyShot
- CVE-2026-92183GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityGIMP
- CVE-2026-92207MindsDB OpenBBtable Code Injection Remote Code Execution VulnerabilityMindsDB
- CVE-2026-92206CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution VulnerabilityCrewAI
- CVE-2026-92204Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure VulnerabilityAirbyte
- CVE-2026-92203Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure VulnerabilityAirbyte
- CVE-2026-92210NoMachine nxhtd Server-Side Request Forgery Information Disclosure VulnerabilityNoMachine
- CVE-2026-92209NoMachine Redis Improper Authentication Local Privilege Escalation VulnerabilityNoMachine
- CVE-2026-92208NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution VulnerabilityNoMachine
- CVE-2026-111184NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation VulnerabilityNoMachine
- CVE-2026-114125Storybook: Missing origin validation in Storybook preview allows code injection from malicious websitesstorybookjs storybook · storybook +5
- CVE-2026-114123D365 F&O MCP Server: Official Azure one-click deployment ships with authentication disabled by default, exposing proprietary X++ source…dynamics365ninja d365fo-mcp-server
- CVE-2026-76505Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service VulnerabilityCisco IOS XR Software
- CVE-2026-76524Open Source Snort 3 Control Channel Socket Aribitrary Command Execution VulnerabilityCisco Open Source Snort3
- CVE-2026-76496Cisco Expressway Series Software Hardening Release: October 2026 - Improper Link Resolution VulnerabilitiesCisco TelePresence Video Communication Server (VCS) Express…
- CVE-2026-76495Cisco Expressway Series Software Hardening Release: October 2026 - Incorrect Permission Assignment VulnerabilitiesCisco TelePresence Video Communication Server (VCS) Express…
- CVE-2026-76494Cisco Expressway Series Software Hardening Release: October 2026 - Code Injection VulnerabilitiesCisco TelePresence Video Communication Server (VCS) Express…
- CVE-2026-76493Cisco Expressway Series Software Hardening Release: October 2026 - Uncaught Exception VulnerabilitiesCisco TelePresence Video Communication Server (VCS) Express…
- CVE-2026-76490Cisco Expressway Series Software Hardening Release: October 2026 - Out-of-bounds Write VulnerabilitiesCisco TelePresence Video Communication Server (VCS) Express…
- CVE-2026-76492Cisco Expressway Series Software Hardening Release: October 2026 - NULL Pointer VulnerabilitiesCisco TelePresence Video Communication Server (VCS) Express…
- CVE-2026-76491Cisco Expressway Series Software Hardening Release: October 2026 - Denial of Service VulnerabilitiesCisco TelePresence Video Communication Server (VCS) Express…
- CVE-2026-76481Cisco Unified Communications Products Hardening Release: October 2026 - Improper Check or Handling of Exceptional Conditions VulnerabilitiesCisco Emergency Responder · Cisco Unified Communications… +1
- CVE-2026-76479Cisco Unified Communications Products Hardening Release: October 2026 - Path Traversal VulnerabilitiesCisco Emergency Responder · Cisco Unified Communications… +1
- CVE-2026-76478Cisco Unified Communications Products Hardening Release: October 2026 - Improper Access Control VulnerabilitiesCisco Emergency Responder · Cisco Unified Communications… +1
- CVE-2026-76476Cisco Unified Communications Products Hardening Release: October 2026 - Improper Input Validation VulnerabilitiesCisco Emergency Responder · Cisco Unified Communications… +1
- CVE-2026-76477Cisco Unified Communications Products Hardening Release: October 2026 - Injection VulnerabilitiesCisco Emergency Responder · Cisco Unified Communications… +1
- CVE-2026-20356Multiple Cisco Products Snort 3 Software Hardening Release: October 2026Cisco Cyber Vision · Cisco Open Source Snort3 +2
- CVE-2026-20236Multiple Cisco Products Snort 3 Software Hardening Release: October 2026Cisco Cyber Vision · Cisco Open Source Snort3 +2
- CVE-2026-20291Multiple Cisco Products Snort 3 Software Hardening Release: October 2026Cisco Cyber Vision · Cisco Open Source Snort3 +2
- CVE-2026-114490Incorrect Authorization in hMailServerProgressive Robot hMailServer
- CVE-2026-114489Missing Authorization in hMailServerProgressive Robot hMailServer
- CVE-2026-114476Incorrect Authorization in hMailServerProgressive Robot hMailServer
- CVE-2026-102486Out-of-bounds Read in ntpsecntpsec
- CVE-2026-102483Reachable Assertion in ntpsecntpsec
- CVE-2026-114463CVE-2026-114463Nous Research Hermes Agent
- CVE-2023-7356Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUIDLinux
- CVE-2026-98869bpf: Infer zext_dst based on static register liveness analysisLinux
- CVE-2026-113779pfSense REST API package Vulnerable to Privilege Escalation via Scoped HA Settings Sync Permissionpfrest pfSense-pkg-RESTAPI
- CVE-2026-111848WordPress Geo Mashup plugin <= 1.13.22 - Cross Site Scripting (XSS) vulnerabilityDylan Kuhn Geo Mashup
- CVE-2026-112221WordPress SureCart plugin <= 4.9.5 - Cross Site Scripting (XSS) vulnerabilityBrainstorm Force SureCart
- CVE-2026-111833WordPress weForms plugin <= 1.6.28 - Arbitrary File Deletion vulnerabilityBold Grid weForms
- CVE-2026-111838WordPress ThemeHunk Customizer plugin <= 2.8.7 - Cross Site Scripting (XSS) vulnerabilityThemeHunk Customizer
- CVE-2026-111840WordPress Paid Videochat Turnkey Site plugin <= 7.5.14 - Cross Site Scripting (XSS) vulnerabilityVideoWhisper.com Paid Videochat Turnkey Site
- CVE-2026-104948WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (CWE-862) in the…EnterpriseDB WarehousePG
- CVE-2025-0326Improper Token Revocation in WSO2 Identity Server Allows Unauthorized AccessWSO2 Identity Server · WSO2 Carbon OAuth
- CVE-2026-97313Specific RPZ configurations and query patterns may result in an unexpected exitISC BIND
- CVE-2026-96888Named may terminate unexpectedly when a redirect zone is used with strict QNAME minimizationISC BIND
- CVE-2026-94300Concurrent GSS-TSIG messages corrupt memoryISC BIND
- CVE-2026-19630Amplified resource exhaustion in inbound message processingISC BIND
- CVE-2026-114400Trudesk through 1.2.11 Missing Authentication for Ticket Attachments via /uploadspolonel trudesk
- CVE-2026-114399Trudesk through 1.2.11 Path Traversal via Backup Delete and Restore APIpolonel trudesk
- CVE-2026-114397Trudesk through 1.2.11 Missing Authentication on Debug Routespolonel trudesk
- CVE-2026-114396Trudesk through 1.2.11 MongoDB $where Injection via tickets search APIpolonel trudesk
- CVE-2026-114391ZenTao PMS before 22.3 Authorization Bypass via Ajax Controller Methodseasysoft zentaopms
- CVE-2026-114387Shopper 2.0.0 before 2.6.0 Privilege Escalation via Unguarded Livewire Componentsshopperlabs shopper
- CVE-2026-114405Denial of Service via Malformed VATP Packet in Velneo vServerVelneo vServer
- CVE-2026-86147Apache bRPC: Arbitrary file creation/truncation via /flags and unbounded profiling duration via /pprofApache Software Foundation Apache bRPC
- CVE-2026-86146Apache bRPC: HTTP Request Smuggling and Header Injection via Lenient HTTP/1.1 Header ParsingApache Software Foundation Apache bRPC
- CVE-2026-84748Apache bRPC: Builtin services reachable from the public port via protobuf protocols despite ServerOptions.internal_port configurationApache Software Foundation Apache bRPC
- CVE-2026-84747Apache bRPC: Access Control Bypass via HTTP Request Paths Containing Empty Path SegmentsApache Software Foundation Apache bRPC
- CVE-2026-82942Apache bRPC: Race Condition on the Shared Socket Input Buffer in the RDMA Transport Causes Remote Denial of ServiceApache Software Foundation Apache bRPC
- CVE-2026-82425Apache bRPC: Reachable Assertion in Socket::OnInputEvent Allows Remote Denial of ServiceApache Software Foundation Apache bRPC
- CVE-2026-82231Apache bRPC: Malformed Thrift T_EXCEPTION reply causes process termination in Thrift clientApache Software Foundation Apache bRPC
- CVE-2026-82230Apache bRPC: Stack Exhaustion via Unbounded Recursion in mcpack2pb ParserApache Software Foundation Apache bRPC
- CVE-2026-82210Apache bRPC: Remote denial of service (crash) via malformed stream feedback framesApache Software Foundation Apache bRPC
- CVE-2026-81755Apache bRPC: Uncontrolled Resource Consumption via Excessive Streams in a Single RPC RequestApache Software Foundation Apache bRPC
- CVE-2026-80463Apache bRPC: Unbounded Memory Accumulation in Stream Message ReassemblyApache Software Foundation Apache bRPC
- CVE-2026-79704Apache bRPC: Out-of-bounds Read in Multi-stream RPC Response HandlingApache Software Foundation Apache bRPC
- CVE-2026-78066Apache bRPC: Resource Exhaustion via Unbounded Decompression and Unvalidated Wire-Declared SizesApache Software Foundation Apache bRPC
- CVE-2026-78058Apache bRPC: Unbounded Resource Consumption and Crash in the HTTP/2 Receive PathApache Software Foundation Apache bRPC
- CVE-2026-78048Apache bRPC: Remote Denial of Service via Out-of-Bounds Dynamic Table Sizing in HPACK DecoderApache Software Foundation Apache bRPC
- CVE-2026-74758Apache bRPC: Heap Use-After-Free in RTMP Abort Message HandlingApache Software Foundation Apache bRPC
- CVE-2026-74757Apache bRPC: Uncontrolled Memory Allocation via Malicious mcpack Array Item CountApache Software Foundation Apache bRPC
- CVE-2026-74755Apache bRPC: Integer Underflow in mcpack2pb Parser Leading to Denial of ServiceApache Software Foundation Apache bRPC
- CVE-2026-61916Apache bRPC: Out-of-bounds Read in URL and Header Lookup Tables on Unsigned-char PlatformsApache Software Foundation Apache bRPC
- CVE-2026-61902Apache bRPC: Memory Exhaustion Through Inconsistent Message Body LimitsApache Software Foundation Apache bRPC
- CVE-2026-58064Apache bRPC: Denial of Service via Unbounded Redis Inline Command AllocationApache Software Foundation Apache bRPC
- CVE-2026-56387Apache bRPC: Remote Memory Exhaustion in RTMP AMF ParserApache Software Foundation Apache bRPC
- CVE-2026-56386Apache bRPC: Integer Underflow and Out-of-Bounds Read in HTTP/2 DATA Frame ParserApache Software Foundation Apache bRPC
- CVE-2026-54427Apache bRPC: Stack Exhaustion via Unbounded Recursion in AMF ParserApache Software Foundation Apache bRPC
- CVE-2026-54426Apache bRPC: Stack Exhaustion via Unbounded Recursion in Redis Reply ParserApache Software Foundation Apache bRPC
- CVE-2026-54425Apache bRPC: Stack Exhaustion via Recursive HPACK Dynamic Table Size Update DecodingApache Software Foundation Apache bRPC
- CVE-2026-59229Apache IoTDB: Legacy Pipe Privilege EscalationApache Software Foundation Apache IoTDB
- CVE-2026-41114Apache IoTDB JDBC driver: Large-scale Memory Exhaustion via BigDecimal toPlainString in JDBC DriverApache Software Foundation Apache IoTDB JDBC driver
- CVE-2026-110369WordPress WordPress Team Members – GS Plugins plugin <= 2.8.2 - PHP Object Injection vulnerabilityWordPress Team Members – GS Plugins
- CVE-2026-110370WordPress GS Pins for Pinterest plugin <= 1.9.2 - PHP Object Injection vulnerabilityGS Plugins GS Pins for Pinterest
- CVE-2026-110884WordPress Live Summary for Gravity Forms plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerabilitygeekontheroad Live Summary for Gravity Forms
- CVE-2026-70387OnePlus OxygenOS exposed dangerous method vulnerabilityOnePlus OxygenOS
- CVE-2026-97206DNS-over-QUIC (DoQ) path-migration can lead to use-after-free on multi-threaded deployments.NLnet Labs Unbound
- CVE-2026-70386OnePlus OxygenOS improper neutralization of special elements vulnerabilityOnePlus OxygenOS
- CVE-2026-85683Jane Menu < 1.5.1 - Unauthenticated Stored XSS via Store Config Proxy URLJane Menu
- CVE-2026-110938JITServer: Multiple Denial of Service vulnerabilities via out-of-bounds heap reads during message and reply parsingEclipse Foundation Eclipse OpenJ9
- CVE-2026-111075JITServer: Pre-authentication remote crash via integer underflow and out-of-bounds heap read in DataDescriptor deserializationEclipse Foundation Eclipse OpenJ9
- CVE-2026-110899WordPress Ninja Forms plugin <= 3.15.5 - Cross Site Scripting (XSS) vulnerabilityKevin Stover Ninja Forms
- CVE-2026-107435WordPress Strong Testimonials plugin <= 3.3.12 - Cross Site Scripting (XSS) vulnerabilityWP Chill Strong Testimonials
- CVE-2026-111074JITServer: Pre-authentication remote Denial of Service via integer overflow infinite loop in MessageBuffer::computeRequiredCapacity()Eclipse Foundation Eclipse OpenJ9
- CVE-2026-92998Click n Chat 1.0.4 - 1.1.2 - Unauthenticated SQLi via 'sort_by'/'sort_order' ParametersClick n Chat
- CVE-2026-92997Click n Chat < 1.1.3 - Unauthenticated SQLi via 'datacolumn' ParameterClick n Chat
- CVE-2026-88784Weglot < 6.4.3 - Unauthenticated Stored XSS via Translated Page Link RewritingTranslate WordPress with Weglot
- CVE-2026-85642Formidable Forms 6.5 - 6.35 - Unauthenticated Payment Gateway Connect Verification DoSFormidable Forms
- CVE-2026-79627Advanced File Manager 5.4.13 - 5.4.14 - Authenticated Stored XSS via SVG Sanitiser Content-Sniff BypassAdvanced File Manager
- CVE-2026-111949miniOrange 2FA 6.2.9 - 6.3.0 - 2FA Bypass via Passkey Second-Factor RebindingminiOrange 2FA
- CVE-2026-111948Profile Builder < 4.0.1 - Reflected XSS via Unconfirmed Emails Row ActionsUser Profile Builder
- CVE-2026-111574Redirection for Contact Form 7 2.2.7 - 3.2.11 - Unauthenticated Stored XSS via Lead Debug MetaboxRedirection for Contact Form
- CVE-2026-110523WP User Manager 2.9.21 - 2.9.25 - Unauthenticated Privilege Escalation via Paid Registration Role After Stripe DisconnectWP User Manager
- CVE-2026-109147WP Booking System < 2.1.0.3 - Reflected XSS via 'booking_id' ParameterWP Booking System
- CVE-2026-107506Simple Banner < 3.3.3 - Authenticated Privilege Escalation via User Permissions SettingSimple Banner
- CVE-2026-107237Backup and Staging by WP Time Capsule < 1.22.28 - Subscriber+ Staging-to-Live Deployment via wptc_copy_stage_to_liveBackup and Staging by WP Time Capsule
- CVE-2026-107127Uncanny Toolkit for LearnDash < 3.8.2 - Account Takeover via Password Reset CSRFUncanny Toolkit for LearnDash
- CVE-2026-105262Falang multilanguage for WordPress < 1.4.6 - Subscriber+ Stored XSS via Term TranslationFalang multilanguage for WordPress
- CVE-2026-102499Modern Events Calendar (Lite & Pro) < 7.37.0 - Subscriber+ SQLi via mec_attendees AJAX ActionModern Events Calendar Lite · Modern Event Calendar Pro
- CVE-2026-82819Universal Naming Convention (UNC) Path Injection in Cerberus FTP ServerCerberus FTP Server
- CVE-2026-82814Duplicator <= 1.5.17 and Duplicator Pro <= 4.6.10 - Unauthenticated PHP Object Injectionsmub Duplicator – Backups & Migration Plugin – Cloud Backup…
- CVE-2026-105044OS Command Injection in Qingteng Host Adaptive Security Platform Security ToolboxQingteng Host Adaptive Security Platform
- CVE-2026-114198Deserialization of untrusted data in flossMandiant FLARE floss
- CVE-2026-114197Deserialization of untrusted data in capaMandiant FLARE capa
- CVE-2026-114117Vyper 0.3.8 through 0.5.0b1 Optimizer Miscompilation of msg.value | K in Ternary Branchesvyperlang vyper
- CVE-2026-114113Sharp before 0.35.0 Multiple Vulnerabilities via Bundled libvips Image Decoderslovell sharp · sharp
- CVE-2026-114112Sharp before 0.35.4 RCE via bundled libheif AVIF decodinglovell sharp · sharp
- CVE-2026-114111Sharp before 0.35.5 RCE via librsvg Dependency Memory Vulnerabilitylovell sharp · sharp
- CVE-2026-114110Astral uv before 0.11.6 Arbitrary File Deletion via Wheel RECORD Entriesastral-sh uv · uv
- CVE-2026-114109uv before 0.11.15 Arbitrary File Write via Entry Point Namesastral-sh uv · uv
- CVE-2026-114107HKUDS Vibe-Trading 0.1.0 before 0.1.7 Indirect Prompt Injection RCE via BashTool and BackgroundRunToolHKUDS Vibe-Trading · vibe-trading-ai
- CVE-2026-114106HKUDS Vibe-Trading 0.1.0 before 0.1.7 Path Traversal via read_document and safe_user_pathHKUDS Vibe-Trading · vibe-trading-ai
- CVE-2026-114104adm-zip before 0.6.1 Duplicate ZIP Entry Name Validation Bypasscthackers adm-zip · adm-zip
- CVE-2026-114102adm-zip before 0.6.1 Denial of Service via inflateAsync Unhandled Error Eventcthackers adm-zip · adm-zip
- CVE-2026-114098Dulwich 0.22.5 before 1.2.8 Path Traversal via Stash Pop Symlinksjelmer dulwich · dulwich
- CVE-2026-114097Dulwich 0.23.1 before 1.2.8 Symlink Path Traversal via filter_branch Index Filterjelmer dulwich · dulwich
- CVE-2026-114096Dulwich 0.24.0 before 1.2.8 Symlink Write-Through via porcelain.checkout pathsjelmer dulwich · dulwich
- CVE-2026-114095Dulwich before 1.2.9 Infinite Loop DoS via Pack.resolve_objectjelmer dulwich · dulwich
- CVE-2026-114094Dulwich before 1.2.9 Arbitrary File Write via DOS drive letter pathsjelmer dulwich · dulwich
- CVE-2026-114092Trigger.dev before 4.5.0 Missing Authentication in Dashboard Run Replay Actiontriggerdotdev trigger.dev
- CVE-2026-114090Trigger.dev CLI 3.0.0 before 4.5.4 Missing Authentication in MCP Servertrigger.dev cli-v3
- CVE-2026-114089Trigger.dev before 4.5.2 CLI Auth-Code Phishing Leading to PAT Takeovertriggerdotdev trigger.dev
- CVE-2026-114088Trigger.dev before 4.5.4 Hardcoded Coordinator Secret Authentication Bypass via Socket.IOtriggerdotdev trigger.dev · trigger.dev
- CVE-2026-114085Trigger.dev through 4.7.6 Missing Authentication in Supervisor Workload APItriggerdotdev trigger.dev
- CVE-2026-114084Trigger.dev before 4.5.6 SQL Injection via tags in Realtime Runs APItriggerdotdev trigger.dev
- CVE-2026-114083Trigger.dev before 4.5.0-rc.3 Path Traversal via Packets Presigned URL Endpointstriggerdotdev trigger.dev
- CVE-2026-114082Trigger.dev before 4.6.2 Overly Broad Realtime Session Stream Credentialstriggerdotdev trigger.dev
- CVE-2026-114081Trigger.dev before 4.5.6 Cross-Tenant SQL Injection via TSQL Window-Function Nametriggerdotdev trigger.dev · trigger.dev
- CVE-2026-114078Trigger.dev before 4.5.6 Cross-Organization Schedule Deletion via Unscoped friendlyId Lookuptriggerdotdev trigger.dev
- CVE-2026-114069Trigger.dev before 4.6.0 Root Secret Disclosure via envvars API Endpointtriggerdotdev trigger.dev
- CVE-2026-114068Trigger.dev before 4.6.0 Missing Authorization via Waitpoint Token Wait Endpointtriggerdotdev trigger.dev
- CVE-2026-114067Trigger.dev 4.5.0 before 4.6.2 Improper Authorization via snapshot-url Session Routetriggerdotdev trigger.dev
- CVE-2026-114066Trigger.dev before 4.7.0 Missing Authorization via Batch parentRunId Waitpointstriggerdotdev trigger.dev
- CVE-2026-114065Trigger.dev before 4.7.3 Tenant Filtering Bypass via Query Table Placeholderstriggerdotdev trigger.dev
- CVE-2026-114063SvelteKit 2.10.0 before 3.0.0 Path Traversal via vite preview on Windowssveltejs kit
- CVE-2026-114059ArcadeDB before 26.10.1 RCE via Gremlin Groovy Engine Missing AuthorizationArcadeData arcadedb
- CVE-2026-114055vLLM 0.7.3 before 0.31.0 DoS via Unvalidated mm_processor_kwargsvllm-project vllm · vllm
- CVE-2026-114054vLLM before 0.31.0 Cross-Request Cache Aliasing via EXIF ImageID and Prefix-Cache Keysvllm-project vllm
- CVE-2026-114052vLLM 0.25.0 before 0.31.0 MOSS-Audio Memory Exhaustion via /tokenize mm_processor_kwargsvllm-project vllm
- CVE-2026-114051vLLM before 0.31.0 Denial of Service via min_tokens in /inference/v1/generatevllm-project vllm
- CVE-2026-114050vLLM before 0.31.0 Remote Engine Crash via Forged Multimodal UUIDvllm-project vllm · vllm
- CVE-2026-114047FreeRDP 2.0.0 before 3.32.0 Proxy Improper TLS Certificate ValidationFreeRDP
- CVE-2026-114046FreeRDP 3.0.0 before 3.32.0 null-pointer dereference via emulated smartcardFreeRDP
- CVE-2026-114045FreeRDP before 3.32.1 Heap Buffer Overflow via rdpsnd_server_select_formatFreeRDP
- CVE-2026-114043Vulnerability in FreeRDPFreeRDP
- CVE-2026-114042FreeRDP 3.32.0 Use-After-Free via drdynvc Virtual Channel PDUFreeRDP
- CVE-2025-71437Astral uv through 0.8.21 Path Traversal via Symlinks in Sdist Tar Extractionastral-sh uv
- CVE-2021-48020Vyper before 0.3.0 Memory Corruption via Internal Function Calls in Arraysvyperlang vyper · vyper
- CVE-2021-48018Vyper 0.2.13 before 0.2.15 Storage Corruption via @nonreentrant Decoratorvyperlang vyper · vyper
- CVE-2020-37287Vyper before 0.2.6 Call Stack Corruption via Complex Type Function Argumentsvyperlang vyper · vyper
- CVE-2020-37286Vyper 0.1.0b4 before 0.3.0 Memory Corruption via Nested Internal Function Callsvyperlang vyper · vyper
Medium, low and unrated 280
- CVE-2026-114574massCodeIO massCode Local HTTP Service index.ts information disclosuremassCodeIO massCode
- CVE-2026-12664Incorrect Authorization in GitLabGitLab
- CVE-2026-13319Authorization Bypass Through User-Controlled Key in GitLabGitLab
- CVE-2026-14288Use of Incorrectly-Resolved Name or Reference in GitLabGitLab
- CVE-2026-16255Incorrect Authorization in GitLabGitLab
- CVE-2026-103515Incorrect Authorization in GitLabGitLab
- CVE-2026-105711Use of Cache Containing Sensitive Information in GitLabGitLab
- CVE-2026-105777Insertion of Sensitive Information Into Sent Data in GitLabGitLab
- CVE-2026-112378Use of Less Trusted Source in GitLabGitLab
- CVE-2026-112326Improper Cleanup on Thrown Exception in GitLabGitLab
- CVE-2026-100420Information disclosure vulnerability in the cloud-client daemon of Deco BE63TP-Link Systems Deco BE63
- CVE-2026-76528Protection Mechanism Failure in Splunk SOARSplunk SOAR
- CVE-2026-76407Improper Access Control in Splunk SOARSplunk SOAR
- CVE-2026-76406Information Disclosure through REST API Authentication in Splunk SOARSplunk SOAR
- CVE-2026-76308Missing Authorization through the REST API in Splunk SOARSplunk SOAR
- CVE-2026-76305Improper Access Control during App Downloads in Splunk SOARSplunk SOAR
- CVE-2026-76304Sensitive Information Disclosure through Automation Broker Configuration in Splunk SOARSplunk SOAR
- CVE-2026-76303Stored Cross-Site Scripting (XSS) through App Documentation in Splunk SOARSplunk SOAR
- CVE-2026-76297Federated Search Provider State Change through Cross-Site Request Forgery (CSRF) in Splunk Web for Splunk EnterpriseSplunk Enterprise
- CVE-2026-76296Missing Authorization through Sourcetype Renaming in Splunk Web for Splunk EnterpriseSplunk Enterprise
- CVE-2026-76295SPL Injection through the REST API in Splunk Secure GatewaySplunk Enterprise · Splunk Secure Gateway
- CVE-2026-76294Improper Access Control in Field Extraction Management in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76292Missing Authorization through REST API Endpoints in Splunk Secure GatewaySplunk Enterprise · Splunk Secure Gateway
- CVE-2026-76289Denial of Service (DoS) through the REST API in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76287Authorization Bypass in the Data Management REST API in Splunk EnterpriseSplunk Enterprise
- CVE-2026-114441oretnom23 php-travel-agency-system update.php sql injectionoretnom23 php-travel-agency-system
- CVE-2026-89052Hardcoded AES encryption key in Archer C6TP-Link Systems Archer C6
- CVE-2026-114440oretnom23 php-travel-agency-system delete.php sql injectionoretnom23 php-travel-agency-system
- CVE-2026-114439oretnom23 php-travel-agency-system Session session.php missing authenticationoretnom23 php-travel-agency-system
- CVE-2026-114384itsourcecode Online Cake Ordering System transactionsave.php sql injectionitsourcecode Online Cake Ordering System
- CVE-2026-114508Laravel relationship inclusion can trigger unauthorized data destructionlaravel framework · laravel/framework
- CVE-2026-114501Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1python-pillow Pillow · pillow
- CVE-2026-114381itsourcecode Online Cake Ordering System orderdetail.php sql injectionitsourcecode Online Cake Ordering System
- CVE-2026-96636Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)python-pillow Pillow · pillow
- CVE-2026-114380itsourcecode Online Cake Ordering System inserttrans.php sql injectionitsourcecode Online Cake Ordering System
- CVE-2026-114406Ca-certificates: distrust emudhra intermediate ca certificates due to security concernsRed Hat Enterprise Linux · Red Hat OpenShift Container… +12
- CVE-2026-96641Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromisepython-pillow Pillow · pillow
- CVE-2026-96638Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute modepython-pillow Pillow · pillow
- CVE-2026-114379EKKOLearnAI ekko-studio Media Generation API media.ts saveGeneratedImages file inclusionEKKOLearnAI ekko-studio
- CVE-2026-114378itsourcecode Online Cake Ordering System deleteproduct.php sql injectionitsourcecode Online Cake Ordering System
- CVE-2026-114377leomoon-studios wiki-go Comment Deletion comments.go DeleteComment path traversalleomoon-studios wiki-go
- CVE-2026-114376leomoon-studios wiki-go API editor.go SourceHandler path traversalleomoon-studios wiki-go
- CVE-2026-114375leomoon-studios wiki-go Files Rename API files.go RenameFileHandler path traversalleomoon-studios wiki-go
- CVE-2026-85518Openscap: openscap: arbitrary file write via path traversal in source datastream decompositionRed Hat Hardened Images · Red Hat Enterprise Linux
- CVE-2026-114438Keycloak-services: keycloak-services: required otp enrollment bypassed via update user locale required action orderingRed Hat Build of Keycloak · Red Hat Single Sign-On
- CVE-2026-114374leomoon-studios wiki-go fetch-metadata Endpoint metadata_api.go server-side request forgeryleomoon-studios wiki-go
- CVE-2026-112381Apache Traffic Server: Nullptr dereference in net_write_io on a POST half-close with chunked responseApache Software Foundation Apache Traffic Server
- CVE-2026-111817Apache Traffic Server: Dropping chunked trailers stalls a passthrough transfer until timeoutApache Software Foundation Apache Traffic Server
- CVE-2026-114362HarnessRouter Targets Test Endpoint app.py server-side request forgeryHarnessRouter
- CVE-2026-114361HarnessRouter Identity Mode app.py improper authorizationHarnessRouter
- CVE-2026-114267SourceCodester Food Order Management System Admin Endpoint authorizationSourceCodester Food Order Management System
- CVE-2026-19947Missing kernel object permission check in devmux syscalls allows unprivileged user threads to retarget a device multiplexerzephyrproject zephyr
- CVE-2026-78119Out-of-bounds write in the Nuvoton NPCX eSPI Target-Attached-Flash receive path from an unvalidated host-supplied packet lengthzephyrproject zephyr
- CVE-2026-78117Race condition on shared HCI TX descriptor in the Infineon PSOC 6 BLESS Bluetooth driver can leak adjacent memory over the airzephyrproject zephyr
- CVE-2026-18748Out-of-bounds read in Bluetooth Classic A2DP codec information element handlingzephyrproject zephyr
- CVE-2026-78116Double free of an RTIO submission in the Broadcom AFBR-S50 sensor driver data-evaluation error pathzephyrproject zephyr
- CVE-2026-114266ProjectWorlds Advanced Library Management System profile.php mysqli_query sql injectionProjectWorlds Advanced Library Management System
- CVE-2026-105938Apache Pulsar: Subscription authorization policies not enforced by namespace-level backlog and unsubscribe operations and by topic expire-allApache Software Foundation Apache Pulsar
- CVE-2026-113461mk-oracle: Local privilege escalation via insecure Oracle Home library loadingCheckmk
- CVE-2026-105936Apache Pulsar: Functions connectors list endpoint does not apply the super-user check of the worker connectors endpointApache Software Foundation Apache Pulsar
- CVE-2026-105935Apache Pulsar: Function trigger publishes to the input topic without checking the caller's produce permissionApache Software Foundation Apache Pulsar
- CVE-2026-105933Apache Pulsar: Namespace encryption requirement not enforced after a failure during topic initializationApache Software Foundation Apache Pulsar
- CVE-2026-105932Apache Pulsar: Missing topic policy authorization on non-persistent topic entry filter endpointsApache Software Foundation Apache Pulsar
- CVE-2026-111401WordPress Tailored Tools plugin <= 3.0.3 - Cross Site Request Forgery (CSRF) vulnerabilityTailored Media Tailored Tools
- CVE-2026-105931Apache Pulsar: Missing authorization on transaction admin endpoints exposes transaction coordinator and transaction statistics of other…Apache Software Foundation Apache Pulsar
- CVE-2026-105930Apache Pulsar: Improper Authorization of Function, Source and Sink Package URLs Allows Cross-Tenant Package DownloadApache Software Foundation Apache Pulsar
- CVE-2026-112868WordPress H5P plugin <= 1.17.9 - Insecure Direct Object References (IDOR) vulnerabilityH5P
- CVE-2026-105927Apache Pulsar: Improper authorization of WebSocket consumer dead letter topic allows writes without PRODUCE permissionApache Software Foundation Apache Pulsar
- CVE-2026-114265ProjectWorlds Advanced Library Management System Search Form returned_book_search.php mysqli_query sql injectionProjectWorlds Advanced Library Management System
- CVE-2026-114176WordPress eRoom plugin <= 1.7.1 - Broken Access Control vulnerabilityDigitalME eRoom
- CVE-2026-105926Apache Pulsar: Missing Topic Authorization on Binary Protocol GetSchema and GetOrCreateSchema CommandsApache Software Foundation Apache Pulsar
- CVE-2026-114491pdfmake 0.3.8 before 0.3.12 Local File Policy Bypass via SVG Imagesbpampuch pdfmake
- CVE-2026-114133Nuxt server islands render `useHeadSafe` input without sanitisationnuxt
- DRUPAL-CONTRIB-2026-238This module enables you to share users, content and configuration across a group of domains from a single Drupal installation.drupal/domain
- CVE-2026-114132Nuxt: Server-side route rules (`redirect`, `headers`, `proxy`, `ssr`) are skipped for case-variant paths when routing is case-insensitivenuxt · @nuxt/nitro-server
- CVE-2026-114264ProjectWorlds Advanced Library Management System edit_member.php sql injectionProjectWorlds Advanced Library Management System
- CVE-2026-114131Nuxt: Route rules are matched against the raw request path, so a percent-encoded segment can bypass `appMiddleware` on dynamic and…nuxt
- CVE-2026-114130Nuxt: Incomplete fix for GHSA-934w-87qh-qr26: a `javascript:` URL prefixed with an ASCII control character executes from `<NuxtLink>` when `pages` is disablednuxt
- CVE-2026-114129stream-json: FlexAssembler string/RegExp path filters join the full key stack per container start, giving O(depth^2) CPU denial of serviceuhop stream-json · stream-json
- CVE-2026-114128Astro: Reflected/Stored XSS via unescaped <script>/<style> tag content in JSX/MDX renderingwithastro astro · astro
- CVE-2026-114263ProjectWorlds Advanced Library Management System individual_report_search.php mysqli_query sql injectionProjectWorlds Advanced Library Management System
- CVE-2026-114127Astro: Arbitrary CSS injection in Astro View Transitionswithastro astro · astro
- CVE-2026-92205BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation VulnerabilityBusyBox
- CVE-2026-114262file-management-system FileController.php store unrestricted uploadfile-management-system
- CVE-2026-114124Electron: Off-screen rendering on macOS trusts GPU-supplied frame geometryelectron
- CVE-2026-114261MomoTommy file-management-system Files API FileController.php destroy missing authenticationMomoTommy file-management-system
- CVE-2026-53986Girafit Camera App 1.9.1 Hardcoded TURN Credentials DisclosureGirafit camera app
- CVE-2026-114260oretnom23 file-management-system-php AJAX ajax.php delete_folder missing authenticationoretnom23 file-management-system-php
- CVE-2026-114259oretnom23 file-management-system-php admin_class.php save_files unrestricted uploadoretnom23 file-management-system-php
- CVE-2026-114122Electron: Frame subscription trusts GPU-supplied frame geometryelectron
- CVE-2026-114121Electron: openExternal permission requests can be attributed to the wrong originelectron
- CVE-2026-76497Cisco Expressway Series Software Hardening Release: October 2026 - Insecure Temporary File VulnerabilitiesCisco TelePresence Video Communication Server (VCS) Express…
- CVE-2026-76489Multiple Cisco Products Snort 3 Generic File Processing Memory Exhaustion Denial of Service VulnerabilityCisco Open Source Snort3 · Cisco Secure Firewall Threat Def…
- CVE-2026-76487Cisco Unified Communications Manager Improper Access Control VulnerabilityCisco Unified Communications Manager
- CVE-2026-113800Electron: HID and USB permission checks can be attributed to the wrong originelectron
- CVE-2026-114258oretnom23 file-management-system-php File Management files.php sql injectionoretnom23 file-management-system-php
- CVE-2026-113799Slack Morphism verifier errors disclose valid HMACs in the logsabdolence slack-morphism-rust · slack-morphism
- CVE-2026-76445Multiple Cisco Products Snort 3 Denial of Service VulnerabilityCisco Open Source Snort3 · Cisco Secure Firewall Threat… +1
- CVE-2026-76435Cisco Expressway Series Information Disclosure VulnerabilityCisco TelePresence Video Communication Server (VCS) Express…
- CVE-2026-76462Cisco Secure Client Privilege Escalation VulnerabilityCisco Secure Client
- CVE-2026-20221Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service VulnerabilitiesCisco Cyber Vision · Cisco Open Source Snort3 +3
- CVE-2026-20197Multiple Cisco Products Snort 3 Teredo Protocol Denial of Service VulnerabilityCisco Open Source Snort3 · Cisco Secure Firewall Threat… +1
- CVE-2026-20218Cisco Secure Firewall Threat Defense Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service VulnerabilityCisco Open Source Snort3 · Cisco Secure Firewall Threat… +1
- CVE-2026-113798Electron: Pointer lock permission requests can be attributed to the wrong frameelectron
- CVE-2026-20179Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service VulnerabilitiesCisco Open Source Snort3 · Cisco Secure Firewall Threat… +1
- CVE-2026-20019Multiple Cisco Products Snort 3 Netflow Denial of Service VulnerabilitiesCisco Open Source Snort3 · Cisco Secure Firewall Threat… +1
- CVE-2026-20011Multiple Cisco Products Snort 3 SMTP MIME Denial of Service VulnerabilityCisco Open Source Snort3 · Cisco Secure Firewall Threat… +1
- CVE-2026-113797Electron: Extension tabs.query returns tab URLs and titles without the tabs permissionelectron
- CVE-2026-113796Electron: SameSite cookie restrictions are not applied to windows opened from linkselectron
- CVE-2026-113795pypdf: Possible large memory usage for streams with multiple filterspy-pdf pypdf · pypdf
- CVE-2026-114257oretnom23 file-management-system-php File Download download.php readfile sql injectionoretnom23 file-management-system-php
- CVE-2026-113794pypdf: Possible infinite loop when hitting EOF in standard xref tablepy-pdf pypdf · pypdf
- CVE-2026-113793pypdf: Possible infinite loop when removing tree itemspy-pdf pypdf · pypdf
- CVE-2026-113792pypdf: Possible infinite loop in PdfWriter.find_outline_itempy-pdf pypdf · pypdf
- CVE-2026-114256oretnom23 file-management-system-php Folder Management admin_class.php save_files sql injectionoretnom23 file-management-system-php
- CVE-2026-113791pypdf: Possible large memory usage when parsing content streamspy-pdf pypdf · pypdf
- CVE-2026-113790pypdf: Possible large memory usage when parsing arrays and dictionariespy-pdf pypdf · pypdf
- CVE-2026-113789pypdf: Possible long runtimes/large memory usage when retrieving form fieldspy-pdf pypdf · pypdf
- CVE-2026-114255oretnom23 file-management-system-php User Account Management admin_class.php save_user sql injectionoretnom23 file-management-system-php
- CVE-2026-113787odf-kit: HTML injection leading to XSS in odtToHtml() via unescaped style attribute valuesGitHubNewbie0 odf-kit
- CVE-2026-114254oretnom23 file-management-system-php admin_class.php login sql injectionoretnom23 file-management-system-php
- CVE-2026-114479Not Failing Securely ('Failing Open') in hMailServerProgressive Robot hMailServer
- CVE-2026-114478Unintended Proxy or Intermediary ('Confused Deputy') in hMailServerProgressive Robot hMailServer
- CVE-2026-114477Missing Authorization in hMailServerProgressive Robot hMailServer
- CVE-2026-114475Missing Authorization in hMailServerProgressive Robot hMailServer
- CVE-2026-114474Use of Less Trusted Source in hMailServerProgressive Robot hMailServer
- CVE-2026-114473Incorrect Authorization in hMailServerProgressive Robot hMailServer
- CVE-2026-114472Insufficient Resource Pool in hMailServerProgressive Robot hMailServer
- CVE-2026-114471Insertion of Sensitive Information into Log File in hMailServerProgressive Robot hMailServer
- CVE-2026-114470Cross-Site Request Forgery (CSRF) in hMailServerProgressive Robot hMailServer
- CVE-2026-102485Out-of-bounds Read in ntpsecntpsec
- CVE-2026-102484Heap-based Buffer Overflow in ntpsecntpsec
- CVE-2026-114462Arbitrary File Read via Symlink in Velneo vServer HTTP ServerVelneo vServer
- CVE-2026-114370Undertow: undertow: pathresourcemanager safepaths check allows sibling-directory symlink traversalRed Hat build of Apache Camel for Spring Boot · Red Hat… +3
- CVE-2026-114253oretnom23 file-management-system-php index.php include file inclusionoretnom23 file-management-system-php
- CVE-2026-114252itsourcecode Sales-and-Inventory-System cust_searchfrm.php sql injectionitsourcecode Sales-and-Inventory-System
- CVE-2026-113786pypdf: Unvalidated JPEG image data loadingpy-pdf pypdf · pypdf
- CVE-2026-114251itsourcecode Sales-and-Inventory-System cust_del.php sql injectionitsourcecode Sales-and-Inventory-System
- CVE-2026-114250itsourcecode Sales-and-Inventory-System cust_edit.php sql injectionitsourcecode Sales-and-Inventory-System
- CVE-2026-111835WordPress BjornTech Swish for WooCommerce plugin <= 3.7.8 - Broken Access Control vulnerabilityBjornTech Swish for WooCommerce
- CVE-2026-111837WordPress Contest Gallery plugin <= 34.0.1 - Cross Site Scripting (XSS) vulnerabilityWasiliy Strecker Contest Gallery
- CVE-2024-6423Sensitive Data Exposure via URL Parameters in Multiple WSO2 Products Allows Confidential Information LeakageWSO2 API Manager · WSO2 Open Banking AM +5
- CVE-2026-104949WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (CWE-862) in…EnterpriseDB WarehousePG
- CVE-2026-104947WarehousePG (WHPG) 7.2.1 through 7.6.0 is affected by a missing authorization vulnerability (CWE-862) in the built-in function…EnterpriseDB WarehousePG
- CVE-2026-114437Chi Client IP Spoofing in ClientIPFromXFF via X-Forwarded-Forgo-chi chi · github.com/go-chi/chi/v5
- CVE-2024-7478Username Enumeration via External User Stores in Multiple WSO2 Products Allows User Account DiscoveryWSO2 API Manager · WSO2 Identity Server as Key Manager +4
- CVE-2024-5563Incomplete reCaptcha Implementation in Authentication Flows in WSO2 Identity Server Allows Brute Force AttacksWSO2 Identity Server
- CVE-2024-4989Open Redirection via Callback URL in WSO2 API Manager Allows Phishing AttacksWSO2 API Manager
- CVE-2024-5139Cross-Site Scripting via Authentication Endpoint in Multiple WSO2 Products Enables UI Manipulation and RedirectionWSO2 Enterprise Integrator · WSO2 Identity Server +4
- CVE-2026-114249dhikshitha29 Insurance-Management-System Policy Holder Update Form UpdatePolicyHolder-inc.php improper authorizationdhikshitha29 Insurance-Management-System
- CVE-2026-111849WordPress WpTravelly plugin <= 2.3.5 - Broken Access Control vulnerabilityMagepeople WpTravelly
- CVE-2026-114248dhikshitha29 Insurance-Management-System Plan Management Form AddNewPlan-inc.php missing authenticationdhikshitha29 Insurance-Management-System
- CVE-2026-114245dhikshitha29 Insurance-Management-System Add New Admin Form Admin-Register-inc.php improper authorizationdhikshitha29 Insurance-Management-System
- CVE-2026-114404PHPPresentation 1.2.0 XSS via Writer\HTML Text Runs, Hyperlinks and DescriptionsPHPOffice PHPPresentation
- CVE-2026-114402Trudesk through 1.2.11 Path Traversal and Authorization Bypass via Profile Image Uploadpolonel trudesk
- CVE-2026-114401Trudesk through 1.2.11 Username Enumeration via Regex Injection in /api/v1/loginpolonel trudesk
- CVE-2026-114398Trudesk through 1.2.11 Unrestricted File Upload via /settings/general/uploadlogopolonel trudesk
- CVE-2026-114395Trudesk through 1.2.11 Authorization Bypass via /api/v1/messages/sendpolonel trudesk
- CVE-2026-114394Trudesk through 1.2.11 Authorization Bypass via Ticket Comment and Create APIspolonel trudesk
- CVE-2026-114393Trudesk through 1.2.11 Authorization Bypass via Ticket Update API Endpointspolonel trudesk
- CVE-2026-114392Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/tickets/:uidpolonel trudesk
- CVE-2026-114390Chamilo LMS 2.0.0-alpha.1 before 2.0.0-RC.3 Missing Authorization in AJAX Handlerschamilo-lms
- CVE-2026-114389Chamilo LMS 2.0.0-alpha.4 before 2.0.0-RC.3 Missing Authorization via openAnswerGradechamilo-lms
- CVE-2026-114388Chamilo LMS 2.0.0-alpha.1 before 2.0.0-RC.3 Missing Authorization via GradebookControllerchamilo-lms
- CVE-2026-114386Pydantic AI Harness before 0.59.0 CodeMode Tool Call Limit Bypass via run_codepydantic-ai-harness
- CVE-2026-114120SchedulePress before 5.3.5 Missing Authorization via wpsp_el_editor_form AJAX ActionWPDeveloper SchedulePress
- CVE-2026-90484Apache bRPC: Null pointer dereference in MySQL reply parser leading to client crashApache Software Foundation Apache bRPC
- CVE-2026-87849Apache bRPC: Out-of-bounds read via non-object fields in Discovery naming-service reply parsingApache Software Foundation Apache bRPC
- CVE-2026-114243dhikshitha29 Insurance-Management-System EditPolicyHolder.php mysqli_query sql injectiondhikshitha29 Insurance-Management-System
- CVE-2026-84727Apache bRPC: Use-After-Free in RTMP Chunk Stream Handling via Abort MessageApache Software Foundation Apache bRPC
- CVE-2026-82953Apache bRPC: NULL Pointer Dereference in RTMP createStream Error Path Leading to Remote Denial of ServiceApache Software Foundation Apache bRPC
- CVE-2026-114407e107 CMS before 2.3.13 Reflected XSS via search.php author Parametere107inc e107
- CVE-2026-114242dhikshitha29 Insurance-Management-System editPlan.php mysqli_query sql injectiondhikshitha29 Insurance-Management-System
- CVE-2026-66392Apache bRPC: TLS Client Accepts Certificates for Mismatched Peer NamesApache Software Foundation Apache bRPC
- CVE-2026-87096Sensitive information disclosure and manipulation due to improper authorization checks.Acronis Cyber Infrastructure
- CVE-2026-105923Null-pointer dereference in QTriangulator reachable through VectorImageQt
- CVE-2026-96405Aggregate DNS name chained pointer decompression work leads to degradation of service.NLnet Labs Unbound
- CVE-2026-50106Possible insecure NXDOMAIN for non-existing records under a configured island trust anchor underneath an insecure parent.NLnet Labs Unbound
- CVE-2026-35501Bypass of a configured island trust anchor underneath an insecure parent from an atacker-controlled NSEC record.NLnet Labs Unbound
- CVE-2026-109125Possible cache poisoning vulnerability via a cache side-channel exposed by 'unwanted-reply-threshold'NLnet Labs Unbound
- CVE-2026-14556HappyForms < 1.26.15 - Unauthenticated HTML Injection in Admin Notification Email via client_refererHappyForms
- CVE-2026-107447Contest Gallery < 34.0.1 - Unauthenticated Vote Restriction Bypass via Spoofable Client-IP and Forgeable Voter IdentityContest Gallery
- CVE-2026-105256LatePoint < 5.7.5 - Unauthenticated Payment Bypass via 'payment_portion' ParameterLatePoint
- CVE-2026-104642Simple Shopping Cart 5.1.3 - 5.3.2 - Contributor+ Price Manipulation via Price Verification BypassSimple Shopping Cart
- CVE-2026-104641Simple Shopping Cart < 5.3.3 - Unauthenticated Payment Bypass via Unverified PayPal IPN RecipientSimple Shopping Cart
- CVE-2026-103301Payment Gateway for Telcell < 2.0.5 - Unauthenticated Payment Confirmation Forgery via Empty-Default Merchant SecretPayment Gateway for Telcell
- CVE-2026-101138CMP - Coming Soon & Maintenance 4.1.19 - 4.1.20 - Unauthenticated Maintenance Mode Bypass via Custom URL WhitelistCMP – Coming Soon & Maintenance
- CVE-2026-114236Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layersRed Hat Confidential Compute Attestation · Red Hat DPU… +17
- CVE-2026-17557Lm-evaluation-harness: lm-evaluation-harness: ssrf via job-spec model.url with bearer credential forwardingRed Hat OpenShift AI
- CVE-2026-96901Cart Abandonment Recovery for WooCommerce < 2.2.0 - Unauthenticated Authentication Bypass via Unsigned Recovery TokenCart Abandonment Recovery for WooCommerce
- CVE-2026-92999Click n Chat 1.0.4 - 1.1.2 - Unauthenticated Lead Data Disclosure via click_n_chat_update_lead_list_export_actionClick n Chat
- CVE-2026-87838Wava Payment 0.3.1 - 0.3.9 - Unauthenticated Merchant Credential Overwrite via Install WebhookWava Payment Plugin
- CVE-2026-87837Wava Payment 0.3.1 - 0.3.9 - Unauthenticated Order Status Change via Payment WebhookWava Payment Plugin
- CVE-2026-86611Download Manager (Free & Pro) - Privacy Settings Update via CSRFDownload Manager
- CVE-2026-81813Elementor < 4.3.5 - Contributor+ Stored XSS via SVG CDATA Sanitizer BypassElementor Website Builder
- CVE-2026-81812Elementor < 4.3.5 - Author+ Stored XSS via SVG UploadElementor Website Builder
- CVE-2026-15261TI WooCommerce Wishlist < 2.13.0 - Unauthenticated Private Wishlist Disclosure via share_keyTI WooCommerce Wishlist
- CVE-2026-111957SUMIT Payment Gateway for WooCommerce < 4.0.0 - Unauthenticated Payment Confirmation Forgery via Redirect CallbackSUMIT Payment Gateway for WooCommerce
- CVE-2026-111956WholesaleX < 3.0.9 - Unauthenticated Imported User CSV DisclosureWholesaleX
- CVE-2026-111955WholesaleX < 3.0.9 - Unauthenticated Account Activation and Administrator Approval BypassWholesaleX
- CVE-2026-111947Easy Pricing Tables < 4.1.3 - Contributor+ Arbitrary Post Clone and Publish via Legacy Table DuplicationPricing Table WordPress Plugin
- CVE-2026-111596Kliken: Ads + Pixel for Meta < 1.2.3 - Unauthenticated Order Data Disclosure via IDORKliken: Ads + Pixel for Meta
- CVE-2026-110982AI Engine < 3.8.6 - Editor+ Arbitrary Post Title and Excerpt Update via update_post_title and update_post_excerptAI Engine
- CVE-2026-110651Swift Performance Lite < 2.3.7.4 - Author+ SQLi via Image OptimizerSwift Performance Lite
- CVE-2026-110514WPZOOM Portfolio < 1.4.34 - Contributor+ Arbitrary Post/Page Type Overwrite via IDORWPZOOM Portfolio Lite
- CVE-2026-109926Productive Commerce < 1.1.49 - Subscriber+ Arbitrary Plugin ActivationProductive Commerce
- CVE-2026-108073SureCart < 4.9.5 - Unauthenticated Private Catalog Data Disclosure via 'expand' ParameterSureCart
- CVE-2026-107790WP Job Openings < 4.1.1 - Author+ Stored XSS via Job TitleHireZoot
- CVE-2026-107789SmartyParcel < 1.23.4 - Unauthenticated Shipping Label Disclosure via IDORSmartyParcel
- CVE-2026-107788SmartyParcel (WC Ukr Shipping) < 1.23.4 - Subscriber+ Arbitrary Shipping Label DeletionSmartyParcel
- CVE-2026-107128Uncanny Toolkit for LearnDash < 3.8.2 - Admin+ Cross-Site Account Lockout via Missing AuthorizationUncanny Toolkit for LearnDash
- CVE-2026-106932Moloni < 5.0.14 - Subscriber+ Arbitrary Order Invoice Generation via genInvoiceMoloni
- CVE-2026-105999Booking Package < 1.7.31 - Unauthenticated Calendar Account Information DisclosureBooking Package
- CVE-2026-105998Booking Package < 1.7.31 - Unauthenticated Subscription Deactivation via Missing AuthorizationBooking Package
- CVE-2026-105996Booking Package < 1.7.31 - Unauthenticated Booking PII Disclosure and Cancellation via Predictable TokenBooking Package
- CVE-2026-105992Ettrick Escape Room Booking < 1.3.1 - Unauthenticated Payment Confirmation BypassEttrick Escape Room Booking
- CVE-2026-105257LatePoint < 5.7.5 - Agent+ Customer PII Disclosure via IDORAppointment Booking Plugin
- CVE-2026-103302Payment Gateway for Idram < 2.1.6 - Unauthenticated Payment Confirmation Forgery via Empty-Default Merchant SecretPayment Gateway for Idram
- CVE-2026-100145Synchrony Financing 1.0.5 - 1.1.1 - Unauthenticated Order Takeover via admin_order_callback REST RouteSynchrony Financing
- CVE-2026-93856In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages API.OpenStack Cinder
- CVE-2026-114040DT42 BerryNet Model Package Metadata dlmodelmgr.py DLModelManager.get_model_meta path traversalDT42 BerryNet
- CVE-2026-114039projectworlds Advanced Library Management System report_search.php mysqli_query sql injectionprojectworlds Advanced Library Management System
- CVE-2026-92824Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifactsRed Hat Enterprise Linux · Red Hat Hardened Images +1
- CVE-2026-92822Libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yamlRed Hat Enterprise Linux · Red Hat Hardened Images +1
- CVE-2026-92823Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yamlRed Hat Enterprise Linux · Red Hat Hardened Images +1
- CVE-2026-113743Tenstorrent tt-metal load_checkpoints.py load_hf_state_dict_filtered path traversalTenstorrent tt-metal
- CVE-2026-113741itsourcecode Online Cake Ordering System 404.php cross site scriptingitsourcecode Online Cake Ordering System
- CVE-2026-111943Distrust compromised intermediate certificates in crypto/x509Go standard library crypto/x509 · stdlib +3
- CVE-2026-113740itsourcecode Online Cake Ordering System deletecustomer.php sql injectionitsourcecode Online Cake Ordering System
- CVE-2026-114118Vyper 0.3.4 through 0.5.0b1 create_from_blueprint Offset Validation Bypass via Unsigned Wraparoundvyperlang vyper
- CVE-2026-114116Vyper through 0.5.0b1 Literal Value Manipulation via Line Separatorsvyperlang vyper
- CVE-2026-114115Vyper 0.3.8 through 0.5.0b1 Memory Misread via Ternary Nested Array Selectionvyperlang vyper
- CVE-2026-114114Vyper through 0.5.0b1 Literal Value Substitution via Multi-byte Charactersvyperlang vyper
- CVE-2026-114105Adm-zip before 0.6.1 Privilege Escalation via keepOriginalPermission Setuid Bitscthackers adm-zip
- CVE-2026-114103adm-zip 0.6.0 Decompression Bomb Guard Bypass via getDataAsync()cthackers adm-zip · adm-zip
- CVE-2026-114101Coraza before 3.8.1 Multipart filename* Charset Handling FILES Rule Bypasscorazawaf coraza · github.com/corazawaf/coraza/v3 +2
- CVE-2026-114100Coraza from 3.0.4 before 3.8.1 Request Body Inspection Bypass via Content-Typecorazawaf coraza · github.com/corazawaf/coraza/v3 +2
- CVE-2026-114099Coraza 3.0.0 before 3.8.1 WAF Bypass via JSON Key Collisioncorazawaf coraza · github.com/corazawaf/coraza/v3 +2
- CVE-2026-114093Trigger.dev before 4.5.6 Cross-Site Request Forgery via /logout Endpointtriggerdotdev trigger.dev
- CVE-2026-114091Trigger.dev before 4.5.0 Cross-Tenant Run Payload Disclosure via API Replay Routetriggerdotdev trigger.dev
- CVE-2026-114086Trigger.dev before 4.5.5 Unauthenticated Realtime Stream Data Injection via Streams Endpointtriggerdotdev trigger.dev · trigger.dev
- CVE-2026-114080Trigger.dev before 4.5.2 Blind SSRF via Alert-Channel Webhook URLtriggerdotdev trigger.dev
- CVE-2026-114079Trigger.dev before 4.5.6 Cross-Environment Deployment Cancel via Cancel Endpointtriggerdotdev trigger.dev · trigger.dev
- CVE-2026-114077Trigger.dev before 4.5.6 Cross-Tenant Deployment Hijack via createDeploymentBackgroundWorkerV4triggerdotdev trigger.dev
- CVE-2026-114076Trigger.dev before 4.5.2 Blind SSRF via Alert Channel Webhook URLtriggerdotdev trigger.dev · trigger.dev
- CVE-2026-114075Trigger.dev before 4.5.12 Authorization Bypass via Alert Channels APItriggerdotdev trigger.dev
- CVE-2026-114074Trigger.dev before 4.5.10 Webhook SSRF Protection Bypass via 198.18.0.0/15 Rangetriggerdotdev trigger.dev
- CVE-2026-114073Trigger.dev CLI before 4.5.9 Secret Exposure via Debug Deployment Logstriggerdotdev trigger.dev · trigger.dev
- CVE-2026-114072Trigger.dev before 4.5.12 CSRF via Slack OAuth Callback Statetriggerdotdev trigger.dev
- CVE-2026-114071Trigger.dev before 4.5.12 Authorization Bypass via Waitpoint Complete Routetriggerdotdev trigger.dev
- CVE-2026-114070Trigger.dev 4.5.0 before 4.6.0 Dashboard Agent User Token Disclosure via Session Recordstriggerdotdev trigger.dev
- CVE-2026-114064Snipe-IT before 8.7.0 SSRF Port Scanning via Webhook Testing Endpointgrokability snipe-it
- CVE-2026-114062SvelteKit before 3.0.0 SSRF via Redirects in Server-Side Self-Fetch Fallbackssveltejs kit
- CVE-2026-114061SvelteKit before 3.0.0 XSS via Cache-Control Header in Prerendered Pagessveltejs kit · @sveltejs/kit
- CVE-2026-114060SvelteKit before 3.0.0 Open Redirect via Enhanced Form Actionssveltejs kit · @sveltejs/kit
- CVE-2026-114058ArcadeDB from 26.2.1 before 26.10.1 Missing Authorization via Bolt ProtocolArcadeData arcadedb
- CVE-2026-114057ArcadeDB 26.2.1 before 26.10.1 Bolt SHOW DATABASES Information DisclosureArcadeData arcadedb
- CVE-2026-114056ArcadeDB from 26.8.1 before 26.10.1 Authorization Bypass via ALTER TYPE WITHArcadeData arcadedb
- CVE-2026-114049vLLM before 0.31.0 Stale allowed_token_ids Mask via InputBatch.condensevllm-project vllm
- CVE-2026-114048WWBN AVideo before 24.0 CSRF via Legacy Playlist and Video EndpointsWWBN AVideo
- CVE-2026-114044FreeRDP before 3.32.1 Android Client Heap OOB Read via Graphics PipelineFreeRDP
- CVE-2026-114041FreeRDP before 3.32.1 Heap Out-of-Bounds Read via RD Gateway Consent MessageFreeRDP
- CVE-2021-48019Vyper before 0.2.9 Incorrect RETURNDATASIZE in create_forwarder_to Proxiesvyperlang vyper · vyper
- CVE-2020-37289Vyper before 0.3.1 Improper Input Validation of uint8 Interface Return Valuesvyperlang vyper · vyper
- CVE-2020-37288Vyper 0.1.0b10 before 0.2.3 Invalid Jump Destination via Return in Nested Loopsvyperlang vyper · vyper
- CVE-2026-113738R6410418 Jackrong-llm-finetuning-guide MTP weight_map qwen_mtp_gguf_pipeline.py extract_mtp_heads path traversalR6410418 Jackrong-llm-finetuning-guide
- CVE-2026-114038Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed format stringRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-113737R6410418 Jackrong-llm-finetuning-guide qwen_mtp_gguf_pipeline.py validate_indexed_tensors path traversalR6410418 Jackrong-llm-finetuning-guide
- CVE-2025-60469A NULL pointer dereference in the gf_ac4_presentation_ch_mode function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2.5 allows
- CVE-2025-60476A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box before 2.5 allows attackers to c
- CVE-2025-60478A use-after-free in the gf_filter_packet_destroy function (/filter_core/filter_pck.c) of GPAC Project/MP4Box before 2.5 allows attackers to
- CVE-2025-60479A NULL pointer dereference in the StatSFVec2f function (/scene_manager/scene_stats.c) of GPAC Project/MP4Box before 2.5 allows attackers to
- CVE-2025-60487A segmentation violation in the gf_isom_get_esd function (/isomedia/isom_read.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause
- CVE-2025-60489A NULL pointer dereference in the dasher_insert_timeline_entry function (/filters/dasher.c) of GPAC Project/MP4Box before 2.5 allows attacke
- CVE-2025-60490A heap use-after-free in the gf_filter_pid_send_event_downstream function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 2.5 allo
- CVE-2025-60491A heap use-after-free in the dasher_flush_segment function (/filters/dasher.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a
- CVE-2025-60492A stack overflow in the gf_bifs_dec_node function (/bifs/field_decode.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denia
- CVE-2025-60493A segmentation violation in the check_media_profile function (/mp4box/mp4box.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause
- CVE-2025-60497A segmentation violation in the GetESD function (/isomedia/track.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of
- CVE-2025-71438An out-of-bounds read in gf_odf_ac4_cfg_dsi_v1 (/odf/descriptors.c) in GPAC Project/MP4Box before v26.07.0 allows attackers to cause a Denia