# CVEs published 2026-10-22

483 CVEs were published on October 22, 2026: 66 critical, 161 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2026-115534](https://cve.now/CVE-2026-115534.md): gedelumbung HospitalManagement Contact Form contact.php kirim cross site scripting (CVSS 5.3, gedelumbung HospitalManagement)
- [CVE-2026-110825](https://cve.now/CVE-2026-110825.md): Kiloview E3 NDI Encoder Missing Authentication for Critical Function (CVSS 7.5, Kiloview E3 Firmware)
- [CVE-2026-92450](https://cve.now/CVE-2026-92450.md): Kiloview E3 NDI Encoder Use of Hard-coded Credentials (CVSS 7.5, Kiloview E3 Firmware)
- [CVE-2026-110243](https://cve.now/CVE-2026-110243.md): Kiloview E3 NDI Encoder OS Command Injection (CVSS 9.9, Kiloview E3 Firmware)
- [CVE-2026-107861](https://cve.now/CVE-2026-107861.md): Kiloview E3 NDI Encoder OS Command Injection (CVSS 9.9, Kiloview E3 Firmware)
- [CVE-2026-110491](https://cve.now/CVE-2026-110491.md): Kiloview E3 NDI Encoder NULL Pointer Dereference (CVSS 7.5, Kiloview E3 Firmware)
- [CVE-2026-105265](https://cve.now/CVE-2026-105265.md): Kiloview E3 NDI Encoder Path Traversal (CVSS 5.3, Kiloview E3 Firmware)
- [CVE-2026-96616](https://cve.now/CVE-2026-96616.md): Kiloview E3 NDI Encoder Insufficient Session Expiration (CVSS 6.5, Kiloview E3 Firmware)
- [CVE-2026-111100](https://cve.now/CVE-2026-111100.md): Kiloview E3 NDI Encoder Missing Authentication for Critical Function (CVSS 5.3, Kiloview E3 Firmware)
- [CVE-2026-109122](https://cve.now/CVE-2026-109122.md): Kiloview E3 NDI Encoder OS Command Injection (CVSS 9.1, Kiloview E3 Firmware)
- [CVE-2026-110063](https://cve.now/CVE-2026-110063.md): VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability (CVSS 10.0, Microsoft VM Inspector for Azure Virtual Machines)
- [CVE-2026-83938](https://cve.now/CVE-2026-83938.md): Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability (CVSS 10.0, Microsoft Azure Kubernetes Configuration Service)
- [CVE-2026-96185](https://cve.now/CVE-2026-96185.md): Microsoft Exchange Online Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Exchange Online)
- [CVE-2026-97785](https://cve.now/CVE-2026-97785.md): AAD App Proxy Elevation of Privilege Vulnerability (CVSS 10.0, Microsoft Entra application proxy)
- [CVE-2026-108456](https://cve.now/CVE-2026-108456.md): Azure AI Foundry Elevation of Privilege Vulnerability (CVSS 7.7, Microsoft Azure AI Foundry)
- [CVE-2026-105014](https://cve.now/CVE-2026-105014.md): Azure Pipelines Remote Code Execution Vulnerability (CVSS 9.1, Microsoft Azure Pipelines)
- [CVE-2026-111594](https://cve.now/CVE-2026-111594.md): InterSystems Corporation InterSystems IRIS for Health Cleartext Transmission of Sensitive Information (CVSS 8.1, InterSystems IRIS for Health)
- [CVE-2026-114620](https://cve.now/CVE-2026-114620.md): Authlib: Unvalidated request\_uri fetch in JWT-secured authorization request (JAR) leading to SSRF (CVSS 5.4, authlib)
- [CVE-2026-114619](https://cve.now/CVE-2026-114619.md): Authlib: OpenID implicit grant checks raw scope instead of allowed scope before issuing ID tokens (CVSS 4.6, authlib)
- [CVE-2026-114618](https://cve.now/CVE-2026-114618.md): Authlib: Default JWT bearer grant accepts assertions for the wrong audience (CVSS 6.8, authlib)
- [CVE-2026-114617](https://cve.now/CVE-2026-114617.md): Authlib: ID token can disable its own nonce validation via the nonce\_supported claim (CVSS 4.2, authlib)
- [CVE-2026-115449](https://cve.now/CVE-2026-115449.md): Libslirp: libslirp: icmp echo reply length desynchronization leaks host ip to guest (CVSS 3.5, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-114616](https://cve.now/CVE-2026-114616.md): Authlib accepts an empty HMAC key, allowing JWS/JWT signature forgery (HS256/HS384/HS512) (CVSS 7.4, authlib)
- [CVE-2026-115221](https://cve.now/CVE-2026-115221.md): Ipa: freeipa: freeipa uses subject cn as proof of certificate ownership (CVSS 5.4, Red Hat Enterprise Linux)
- [CVE-2026-115424](https://cve.now/CVE-2026-115424.md): Oc: oc: symlink/hardlink target validation bypass in oc image extract allows file write outside destination (CVSS 5.5, Red Hat OpenShift Container Platform)
- [CVE-2026-114615](https://cve.now/CVE-2026-114615.md): Authlib incomplete algorithm-confusion fix permits HMAC forgery with prefixed public keys (CVSS 7.4, authlib)
- [CVE-2026-114614](https://cve.now/CVE-2026-114614.md): Authlib: is\_secure\_transport() loopback exemption can be bypassed with a userinfo component, allowing cleartext-HTTP URLs to non-loopback hosts (CVSS 2.6, authlib)
- [CVE-2026-114583](https://cve.now/CVE-2026-114583.md): tar filter allows writing outside destination via empty-named symlink (CVSS 6.9, Python Software Foundation CPython)
- [CVE-2026-114625](https://cve.now/CVE-2026-114625.md): Security Advisory 0199 (CVSS 9.9, KEV, Arista Networks VeloCloud Orchestrator)
- [CVE-2026-115417](https://cve.now/CVE-2026-115417.md): Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in aws-c-mqtt (CVSS 7.5, aws-c-mqtt)
- [CVE-2026-115419](https://cve.now/CVE-2026-115419.md): Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server (CVSS 8.1, AWS strands-agents · AWS strands-agents/sdk +2)
- [CVE-2026-112332](https://cve.now/CVE-2026-112332.md): Motor.NET \< 0.19.0 Denial of Service via JsonNet Deserialization (CVSS 8.7, GDATASoftwareAG motornet)
- [CVE-2026-112331](https://cve.now/CVE-2026-112331.md): Motor.NET \< 0.19.0 Kafka Denial of Service via Structured CloudEvent Mapping (CVSS 8.7, GDATASoftwareAG motornet)
- [CVE-2026-112330](https://cve.now/CVE-2026-112330.md): Motor.NET \< 0.19.0 RabbitMQ Denial of Service via CloudEvents Headers (CVSS 8.7, GDATASoftwareAG motornet)
- [CVE-2026-115509](https://cve.now/CVE-2026-115509.md): Jitsu Console before 2.14.0-beta.41 Cross-Workspace Authorization Bypass via sources/state API (CVSS 2.3, jitsucom jitsu)
- [CVE-2026-115508](https://cve.now/CVE-2026-115508.md): Crawl4AI 0.7.0 before 0.9.5 ReDoS via /crawl Regex Fields (CVSS 7.1, unclecode crawl4ai)
- [CVE-2026-115507](https://cve.now/CVE-2026-115507.md): Vikunja 2.2.0 before 2.7.1 HTML Injection via Notification Email Header (CVSS 5.1, go-vikunja vikunja)
- [CVE-2026-115506](https://cve.now/CVE-2026-115506.md): libexpat through 2.9.0 Denial of Service via Billion Laughs Detection Delay (CVSS 8.7, libexpat)
- [CVE-2026-115505](https://cve.now/CVE-2026-115505.md): libsmb2 before 6.3 Integer Overflow in DCE/RPC NDR Decoder via NetrShareEnum (CVSS 7.2, sahlberg libsmb2)
- [CVE-2026-115504](https://cve.now/CVE-2026-115504.md): CFITSIO through 4.7.0 Out-of-Bounds Write via ffgcls2 in getcols.c (CVSS 8.5, HEASARC cfitsio)
- [CVE-2026-115503](https://cve.now/CVE-2026-115503.md): Ghidra before 12.2 Denial of Service via Compressed Extension Archive (CVSS 6.8, NationalSecurityAgency ghidra)
- [CVE-2026-115398](https://cve.now/CVE-2026-115398.md): Ghidra before 12.2 Denial of Service via TAR and ZIP File System Mount (CVSS 6.8, NationalSecurityAgency ghidra)
- [CVE-2026-115397](https://cve.now/CVE-2026-115397.md): Ghidra before 12.2 Denial of Service via Extension Archive Install (CVSS 6.8, NationalSecurityAgency ghidra)
- [CVE-2026-115396](https://cve.now/CVE-2026-115396.md): Ghidra 10.3 before 12.2 Denial of Service via Compressed Theme Archive (CVSS 6.8, NationalSecurityAgency ghidra)
- [CVE-2026-115395](https://cve.now/CVE-2026-115395.md): Ghidra 10.3 before 12.2 Denial of Service via ThemeReader.readZipTheme() (CVSS 6.8, NationalSecurityAgency ghidra)
- [CVE-2026-114655](https://cve.now/CVE-2026-114655.md): KMS request injection via unsanitized key vault and provider values in libmongocrypt (CVSS 6.0, MongoDB libmongocrypt)
- [CVE-2026-115394](https://cve.now/CVE-2026-115394.md): Ghidra through 12.2 Denial of Service via BinaryField Memory Allocation (CVSS 6.8, NationalSecurityAgency ghidra)
- [CVE-2026-114654](https://cve.now/CVE-2026-114654.md): BSON output corruption via out-of-range binary subtype bypassing UUID and OldBinary guards (CVSS 6.9, MongoDB C# Driver)
- [CVE-2026-115393](https://cve.now/CVE-2026-115393.md): Wasmtime before 24.0.12, 25.0.0 before 36.0.13, 37.0.0 before 46.0.2, and 47.0.0 before 47.0.3 Cross-Engine Type Confusion (CVSS 1.0, bytecodealliance wasmtime · wasmtime)
- [CVE-2026-115392](https://cve.now/CVE-2026-115392.md): Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 Sandbox Escape via Trailing Slashes (CVSS 8.8, bytecodealliance wasmtime · wasmtime)
- [CVE-2026-114653](https://cve.now/CVE-2026-114653.md): Silent client-side encryption bypass via unescaped field-name regex in CSFLE schema builder (CVSS 7.1, MongoDB C# Driver)
- [CVE-2026-115391](https://cve.now/CVE-2026-115391.md): Wasmtime 46.0.0 before 46.0.3 and 47.0.0 before 47.0.4 Unbounded Heap Allocation via WASIp3 Streams (CVSS 6.9, bytecodealliance wasmtime · wasmtime)
- [CVE-2026-114652](https://cve.now/CVE-2026-114652.md): Update operator injection via single-element list rewriting in the update builder (CVSS 7.1, MongoDB C# Driver)
- [CVE-2026-114651](https://cve.now/CVE-2026-114651.md): Cross-document data leak via malformed BSON array parsing in reused thread buffer (CVSS 6.3, MongoDB C# Driver)
- [CVE-2026-115390](https://cve.now/CVE-2026-115390.md): Wasmtime 47.0.0 before 48.0.3 and 49.0.0 before 49.0.1 Fuel Accounting Bypass DoS (CVSS 6.9, bytecodealliance wasmtime · wasmtime)
- [CVE-2026-115389](https://cve.now/CVE-2026-115389.md): Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 Denial of Service via Val API (CVSS 1.0, bytecodealliance wasmtime · wasmtime)
- [CVE-2026-114650](https://cve.now/CVE-2026-114650.md): Plaintext exposure of encrypted fields via ANSI code-page corruption of database name (CVSS 6.9, MongoDB C# Driver · MongoDB.Libmongocrypt NuGet package)
- [CVE-2026-115388](https://cve.now/CVE-2026-115388.md): Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 Memory Exhaustion DoS via wasmtime-wasi-http Outgoing Body Write (CVSS 6.9, bytecodealliance wasmtime · wasmtime-wasi-http)
- [CVE-2026-114649](https://cve.now/CVE-2026-114649.md): Authentication bypass via issuer-and-serial-only certificate equality in shared cluster cache (CVSS 7.6, MongoDB C# Driver)
- [CVE-2026-115387](https://cve.now/CVE-2026-115387.md): Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 Host Panic via WASI Filesystem Timestamp Overflow (CVSS 6.9, bytecodealliance wasmtime · wasmtime-wasi)
- [CVE-2026-114648](https://cve.now/CVE-2026-114648.md): NoSQL injection via dot and dollar characters in LINQ filter field names and dictionary keys (CVSS 7.2, MongoDB C# Driver)
- [CVE-2026-115386](https://cve.now/CVE-2026-115386.md): Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 Memory Disclosure via fd\_readdir (CVSS 2.1, bytecodealliance wasmtime · wasmtime-wasi)
- [CVE-2026-115385](https://cve.now/CVE-2026-115385.md): Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 Host Panic via WASIp3 Timestamps (CVSS 6.9, bytecodealliance wasmtime · wasmtime-wasi)
- [CVE-2026-114647](https://cve.now/CVE-2026-114647.md): NoSQL operator injection via unvalidated replacement document in findOneAndReplace (CVSS 5.3, MongoDB C# Driver)
- [CVE-2026-115384](https://cve.now/CVE-2026-115384.md): Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 Stack Buffer Overflow (CVSS 9.4, bytecodealliance wasmtime · wasmtime)
- [CVE-2026-114646](https://cve.now/CVE-2026-114646.md): NoSQL command injection via mismatched raw BSON length prefix written verbatim to the wire (CVSS 6.9, MongoDB C# Driver)
- [CVE-2026-115383](https://cve.now/CVE-2026-115383.md): Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 GC Heap Corruption via Tag Imports (CVSS 5.9, bytecodealliance wasmtime · wasmtime)
- [CVE-2026-115382](https://cve.now/CVE-2026-115382.md): Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 wasi:http Zero Timeout Panic DoS (CVSS 5.9, bytecodealliance wasmtime · wasmtime-wasi-http)
- [CVE-2026-114645](https://cve.now/CVE-2026-114645.md): Heap overflow via 32-bit length wrap of the URI username in Windows Kerberos auth message wrapping (CVSS 5.7, MongoDB C Driver)
- [CVE-2026-115381](https://cve.now/CVE-2026-115381.md): Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 Unbounded Host Memory Allocation via SinkOutputStream write-zeroes (CVSS 5.9, bytecodealliance wasmtime · wasmtime-wasi)
- [CVE-2026-114644](https://cve.now/CVE-2026-114644.md): Memory-exhaustion denial of service via unbounded symbol interning during BSON/JSON deserialization (CVSS 8.2, MongoDB C# Driver)
- [CVE-2026-115380](https://cve.now/CVE-2026-115380.md): Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 Fuel Limit Bypass DoS via WASI Preview 0 poll\_oneoff (CVSS 5.1, bytecodealliance wasmtime · wasmtime-wasi)
- [CVE-2026-114643](https://cve.now/CVE-2026-114643.md): Duplicate geometry fields via unvalidated GeoJSON extra members (CVSS 5.3, MongoDB C# Driver)
- [CVE-2026-115379](https://cve.now/CVE-2026-115379.md): Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 GC Heap Corruption via try\_call (CVSS 6.9, bytecodealliance wasmtime · wasmtime)
- [CVE-2026-115378](https://cve.now/CVE-2026-115378.md): Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Recursive File Pull (CVSS 6.9, lxc incus)
- [CVE-2026-115377](https://cve.now/CVE-2026-115377.md): Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Symlink in Migration Stream (CVSS 9.4, lxc incus)
- [CVE-2026-115376](https://cve.now/CVE-2026-115376.md): Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 Project Restriction Bypass via Custom Volume Copy (CVSS 8.3, lxc incus)
- [CVE-2026-115375](https://cve.now/CVE-2026-115375.md): Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Path Traversal via Instance Backup Dependent Volumes (CVSS 9.4, lxc incus)
- [CVE-2026-115374](https://cve.now/CVE-2026-115374.md): Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Unsigned Header Bypass in Presigned S3 Upload URLs (CVSS 7.1, lxc incus)
- [CVE-2026-115373](https://cve.now/CVE-2026-115373.md): Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Authorization Bypass via GET /1.0/operations/{uuid} (CVSS 7.0, lxc incus)
- [CVE-2026-115372](https://cve.now/CVE-2026-115372.md): Incus 7.3.0 before 7.5.0 Project Restriction Bypass via block.create\_options (CVSS 9.0, lxc incus)
- [CVE-2026-115371](https://cve.now/CVE-2026-115371.md): LXC Incus 6.0.3 before 6.0.7, 6.6.0 before 7.0.2, and 7.1.0 before 7.5.0 Bucket Credential Disclosure via Storage Bucket Keys Endpoints (CVSS 7.1, lxc incus)
- [CVE-2026-115370](https://cve.now/CVE-2026-115370.md): Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1.0 before 7.5.0 Restricted Project Bypass via Clustered Migration Refresh (CVSS 5.3, lxc incus)
- [CVE-2026-115369](https://cve.now/CVE-2026-115369.md): OpenBao 2.5.0 before 2.6.2 PKI allowed\_ip\_sans\_cidr Bypass via CSR IP SANs (CVSS 2.1, openbao)
- [CVE-2026-115366](https://cve.now/CVE-2026-115366.md): OpenBao 2.3.0 before 2.6.3 Missing Root Namespace Enforcement in Plugin Catalog APIs (CVSS 2.0, openbao)
- [CVE-2026-115365](https://cve.now/CVE-2026-115365.md): OpenBao 2.3.0 before 2.6.3 Incorrect Authorization via Policy Cache Namespace Traversal (CVSS 7.5, openbao)
- [CVE-2026-115364](https://cve.now/CVE-2026-115364.md): OpenBao before 2.6.3 Missing Header Check on Agent/Proxy Quit Endpoints (CVSS 2.1, openbao)
- [CVE-2026-115363](https://cve.now/CVE-2026-115363.md): OpenBao 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 ACME EAB MAC Key Disclosure via Sanitized Configuration (CVSS 2.1, openbao)
- [CVE-2026-115362](https://cve.now/CVE-2026-115362.md): OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Expired AppRole SecretID Authentication Bypass (CVSS 2.1, openbao)
- [CVE-2026-115361](https://cve.now/CVE-2026-115361.md): OpenBao before 2.6.3 ACL Bypass via Dropped Templated Policy Denial (CVSS 2.1, openbao)
- [CVE-2026-115360](https://cve.now/CVE-2026-115360.md): OpenBao before 2.6.3 Open Redirect via OIDC Identity Provider UI (CVSS 5.3, openbao)
- [CVE-2026-115359](https://cve.now/CVE-2026-115359.md): OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Role-Based Rate Limit Quota Bypass via Request Parsing (CVSS 6.3, openbao)
- [CVE-2026-115358](https://cve.now/CVE-2026-115358.md): OpenBao before 2.6.3 Sensitive Data Leak in Audit Log via Malformed Parameters (CVSS 2.0, openbao)
- [CVE-2026-115357](https://cve.now/CVE-2026-115357.md): OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Improper Audit Logging of Root Generation and Rekey Responses (CVSS 2.1, openbao)
- [CVE-2026-115356](https://cve.now/CVE-2026-115356.md): OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Kubernetes Auth Method Token Renewal After Revocation (CVSS 5.3, openbao)
- [CVE-2026-115355](https://cve.now/CVE-2026-115355.md): Mistune before 3.3.0 Path Traversal and XSS via Include Directive (CVSS 8.7, lepture mistune · mistune)
- [CVE-2026-114519](https://cve.now/CVE-2026-114519.md): Missing authorization in the Prospero Flow CRM user API allows a basic role user to read and delete other accounts (CVSS 8.6, Roskus Prospero Flow CRM)
- [CVE-2026-115354](https://cve.now/CVE-2026-115354.md): Mistune before 3.3.0 Arbitrary Local File Read via Include Directive (CVSS 7.1, lepture mistune)
- [CVE-2026-115353](https://cve.now/CVE-2026-115353.md): Mistune before 3.3.0 Path Traversal via include Directive (CVSS 9.2, lepture mistune)
- [CVE-2026-115352](https://cve.now/CVE-2026-115352.md): Mistune before 3.3.0 Quadratic-Time DoS via Unmatched Brackets in Inline Parser (CVSS 8.7, lepture mistune)
- [CVE-2026-115351](https://cve.now/CVE-2026-115351.md): Mistune 3.2.1 before 3.3.0 CSS Injection via Figure Directive figwidth Option (CVSS 5.3, lepture mistune)
- [CVE-2026-115350](https://cve.now/CVE-2026-115350.md): Mistune before 3.3.0 Stored XSS via Include Directive HTML Files (CVSS 5.3, lepture mistune)
- [CVE-2026-115349](https://cve.now/CVE-2026-115349.md): Mistune 3.0.0 before 3.3.0 Denial of Service via Nested Bracket Parsing (CVSS 8.7, lepture mistune)
- [CVE-2026-115348](https://cve.now/CVE-2026-115348.md): Mistune before 3.3.0 Quadratic-Time DoS via parse\_link\_text (CVSS 8.7, lepture mistune)
- [CVE-2026-115347](https://cve.now/CVE-2026-115347.md): Mistune before 3.3.0 Quadratic Denial of Service via parse\_link\_text (CVSS 8.7, lepture mistune)
- [CVE-2022-51026](https://cve.now/CVE-2022-51026.md): Bytebase 0.12.0 before 1.0.1 Authentication Bypass via GitLab Self-Hosted Login (CVSS 9.3, bytebase · github.com/bytebase/bytebase)
- [CVE-2026-95721](https://cve.now/CVE-2026-95721.md): Authenticated Local Memory Corruption Vulnerability in AOS-8 Web-Based Management Interface (CVSS 3.3, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-95720](https://cve.now/CVE-2026-95720.md): Authenticated Local Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8 (CVSS 4.4, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-95719](https://cve.now/CVE-2026-95719.md): Authenticated Arbitrary File Deletion Vulnerability leads to Denial-of-Service in AOS-10 (CVSS 4.9, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-95718](https://cve.now/CVE-2026-95718.md): Authentication Bypass Vulnerability in the PAPI Protocol of AOS-8 (CVSS 5.3, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-95717](https://cve.now/CVE-2026-95717.md): Authenticated Stored Cross-Site Scripting (XSS) Vulnerability in AOS Web-Based Management Interface (CVSS 5.5, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-95716](https://cve.now/CVE-2026-95716.md): Authentication Bypass in the PAPI Protocol of AOS-10 allows Unauthorized Configuration Changes (CVSS 6.5, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-95715](https://cve.now/CVE-2026-95715.md): Unauthenticated Local Command Injection Vulnerability in AOS-10 Command Line Interface (CVSS 6.8, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-95714](https://cve.now/CVE-2026-95714.md): Authenticated Adjacent Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10 (CVSS 6.8, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-95713](https://cve.now/CVE-2026-95713.md): Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8 Command Line Interface (CVSS 7.0, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-95712](https://cve.now/CVE-2026-95712.md): Unauthenticated Adjacent Sensitive Information Disclosure and Denial-of-Service in AOS-8 via the PAPI Protocol (CVSS 7.1, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-95711](https://cve.now/CVE-2026-95711.md): Authentication Bypass Leading to Remote Code Execution in AOS-10 Web-Based Management Interface (CVSS 7.1, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-95710](https://cve.now/CVE-2026-95710.md): Unauthenticated Adjacent Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-10 or AOS-8 (CVSS 7.1, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-95709](https://cve.now/CVE-2026-95709.md): Authenticated Command Injection Vulnerabilities in AOS-10 (CVSS 7.2, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-95708](https://cve.now/CVE-2026-95708.md): Authenticated File Write leads to Command Injection Vulnerabilities in AOS-10 (CVSS 7.2, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-95707](https://cve.now/CVE-2026-95707.md): Authenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8 (CVSS 7.2, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-95706](https://cve.now/CVE-2026-95706.md): Authenticated Command Injection Vulnerabilities in AOS-8 (CVSS 7.2, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-95705](https://cve.now/CVE-2026-95705.md): Authenticated Command Injection Vulnerabilities in AOS-8 (CVSS 7.2, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-95704](https://cve.now/CVE-2026-95704.md): Authenticated Remote Code Execution allows Unauthorized System Control in Wireless Network Management Interface (CVSS 7.2, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79956](https://cve.now/CVE-2026-79956.md): Improper Sanitization leads to Command Injection in AOS-8 Web Interface (CVSS 7.2, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79955](https://cve.now/CVE-2026-79955.md): Unauthenticated Memory Corruption Vulnerability leads to Denial-of-Service in AOS-8 (CVSS 7.5, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79895](https://cve.now/CVE-2026-79895.md): Unauthenticated Remote Denial-of-Service (DoS) Vulnerabilities in AOS-10 (CVSS 7.5, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79894](https://cve.now/CVE-2026-79894.md): Unauthenticated Denial-of-Service (DoS) Vulnerability in the PAPI Protocol of AOS-8 (CVSS 7.5, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79893](https://cve.now/CVE-2026-79893.md): Unauthenticated Memory Corruption Vulnerabilities lead to Denial-of-Service in AOS-10 (CVSS 7.5, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79892](https://cve.now/CVE-2026-79892.md): Authenticated Local Memory Corruption Vulnerability leads to Arbitrary Code Execution in AOS-8 (CVSS 7.8, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79891](https://cve.now/CVE-2026-79891.md): Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8 (CVSS 8.1, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79890](https://cve.now/CVE-2026-79890.md): Unauthenticated Command Injection Vulnerabilities in AOS-8 Accessed by the PAPI Protocol (CVSS 8.1, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79889](https://cve.now/CVE-2026-79889.md): Multiple Unauthenticated Buffer Overflow vulnerabilities in AOS-8 Web Interface result in Remote Code Execution (CVSS 8.1, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79888](https://cve.now/CVE-2026-79888.md): Unauthenticated Buffer Overflow allows Remote Code Execution in web interface (CVSS 8.1, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79887](https://cve.now/CVE-2026-79887.md): Authentication Bypass in Web Interface of AOS-8 allows Remote Command Execution (RCE) (CVSS 8.1, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79886](https://cve.now/CVE-2026-79886.md): Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8 (CVSS 8.2, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79885](https://cve.now/CVE-2026-79885.md): Unauthenticated File Write Vulnerability leads to Denial-of-Service in AOS-8 (CVSS 8.2, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79884](https://cve.now/CVE-2026-79884.md): Authentication Bypass leads to Sensitive Information Disclosure in AOS-8 (CVSS 8.2, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79883](https://cve.now/CVE-2026-79883.md): Unauthenticated Adjacent Buffer Overflow Vulnerability in the PAPI Protocol leads to Sensitive Information Disclosure in AOS-10 (CVSS 8.3, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79882](https://cve.now/CVE-2026-79882.md): Unauthenticated Adjacent Command Injection Vulnerability in the PAPI Protocol of AOS-10 (CVSS 8.3, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79881](https://cve.now/CVE-2026-79881.md): Authentication Bypass Leading to Remote Code Execution in AOS-8 (CVSS 8.5, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79880](https://cve.now/CVE-2026-79880.md): Authenticated Server-Side Request Forgery leads to Remote Code Execution in AOS-8 (CVSS 8.7, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79879](https://cve.now/CVE-2026-79879.md): Unauthenticated Adjacent Memory Corruption Vulnerabilities lead to Remote Code Execution in AOS-10 (CVSS 8.8, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79878](https://cve.now/CVE-2026-79878.md): Unauthenticated Adjacent Command Injection Vulnerability in the AOS-8 Command Line Interface Accessed by the PAPI Protocol (CVSS 8.8, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79877](https://cve.now/CVE-2026-79877.md): Unauthenticated Adjacent Remote Code Execution Vulnerability in AOS-10 (CVSS 8.8, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79876](https://cve.now/CVE-2026-79876.md): Unauthenticated Adjacent Sensitive Information Disclosure in AOS-10 Wi-Fi Frame Processing (CVSS 9.3, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79875](https://cve.now/CVE-2026-79875.md): Authentication Bypass in the PAPI Protocol of AOS-8 Allows Unauthorized Administrative Access (CVSS 9.3, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79874](https://cve.now/CVE-2026-79874.md): Authentication Bypass in the API allows Administrative Access of AOS-10 (CVSS 9.3, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79873](https://cve.now/CVE-2026-79873.md): Unauthenticated Adjacent Authentication Bypasses in the PAPI Protocol of AOS-10 Leads to Unauthorized Administrative Access (CVSS 9.3, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79872](https://cve.now/CVE-2026-79872.md): Unauthenticated Buffer Overflow Vulnerability allows Remote Code Execution in AOS-10 and AOS-8 (CVSS 9.4, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79871](https://cve.now/CVE-2026-79871.md): Unauthenticated Sensitive Information Disclosure in the Command Line Interface of AOS-10 (CVSS 9.6, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79870](https://cve.now/CVE-2026-79870.md): Authentication Bypass leads to Unauthorized Access in AOS-8 (CVSS 9.6, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79869](https://cve.now/CVE-2026-79869.md): Authentication Bypass Leading to Remote Code Execution in AOS-10 (CVSS 9.6, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79868](https://cve.now/CVE-2026-79868.md): Authentication Bypass Vulnerabilities lead to Complete System Compromise in AOS-8 (CVSS 9.6, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79867](https://cve.now/CVE-2026-79867.md): Authentication Bypass Leading to Remote Code Execution in AOS-8 (CVSS 9.6, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79866](https://cve.now/CVE-2026-79866.md): Unauthenticated Adjacent Path Traversal Vulnerability leads to Filesystem Compromise in AOS-8 (CVSS 9.6, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79865](https://cve.now/CVE-2026-79865.md): Unauthenticated Adjacent Memory Corruption Vulnerability leads to Remote Code Execution in AOS-10 (CVSS 9.6, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79864](https://cve.now/CVE-2026-79864.md): Unauthenticated Adjacent Command Injection Vulnerability in AOS-10 (CVSS 9.6, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79863](https://cve.now/CVE-2026-79863.md): Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution (CVSS 9.6, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79862](https://cve.now/CVE-2026-79862.md): Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution (CVSS 9.6, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79861](https://cve.now/CVE-2026-79861.md): Unauthenticated Command Injection Vulnerability in the PAPI Protocol of AOS-10 (CVSS 9.8, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79860](https://cve.now/CVE-2026-79860.md): Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8 (CVSS 9.8, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79859](https://cve.now/CVE-2026-79859.md): Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8 (CVSS 9.8, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79858](https://cve.now/CVE-2026-79858.md): Unauthenticated SQL Injection Vulnerability in the PAPI Protocol of AOS-8 (CVSS 9.8, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79857](https://cve.now/CVE-2026-79857.md): Unauthenticated Command Injection Vulnerability in AOS-8 PAPI Protocol (CVSS 9.8, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79856](https://cve.now/CVE-2026-79856.md): Unauthenticated Buffer Overflow Vulnerability leads to Authentication Bypass in AOS-8 (CVSS 9.8, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79855](https://cve.now/CVE-2026-79855.md): Authentication Bypass in the SSH Daemon of AOS-8 leads to Complete System Compromise (CVSS 9.8, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79854](https://cve.now/CVE-2026-79854.md): Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in AOS-10 (CVSS 9.8, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79853](https://cve.now/CVE-2026-79853.md): Unauthenticated Sensitive Information Disclosure leads to Remote Code Execution in AOS-10 (CVSS 9.8, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79852](https://cve.now/CVE-2026-79852.md): Unauthenticated SQL Injection allows Remote Code Execution in AOS Web-Based Management Interface (CVSS 9.8, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79851](https://cve.now/CVE-2026-79851.md): Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10 (CVSS 10.0, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79850](https://cve.now/CVE-2026-79850.md): Authentication Bypass Leading to Remote Code Execution in AOS-8 (CVSS 10.0, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79849](https://cve.now/CVE-2026-79849.md): Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8 (CVSS 10.0, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79848](https://cve.now/CVE-2026-79848.md): Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8 (CVSS 10.0, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79847](https://cve.now/CVE-2026-79847.md): Unauthenticated Buffer Overflow Vulnerabilities leads to Remote Code Execution in AOS-10 (CVSS 10.0, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79846](https://cve.now/CVE-2026-79846.md): Unauthenticated Command Injection Vulnerabilities in AOS-8 (CVSS 10.0, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-79844](https://cve.now/CVE-2026-79844.md): Authentication Bypass Leading to Remote Code Execution in AOS-10 (CVSS 10.0, Hewlett Packard Enterprise (HPE) ArubaOS)
- [CVE-2026-115414](https://cve.now/CVE-2026-115414.md): OS command injection in the Terraform hook in AWS SAM CLI (CVSS 7.8, aws-sam-cli)
- [CVE-2026-114613](https://cve.now/CVE-2026-114613.md): MessagePack: Unbounded memory leak in msgpack C extension on strict\_map\_key validation failure (CVSS 7.5, msgpack-python · msgpack)
- [CVE-2026-115519](https://cve.now/CVE-2026-115519.md): Sensitive cookies without 'Secure' and 'HttpOnly' attributes in KNIME Business Hub (CVSS 2.1, KNIME Business Hub)
- [CVE-2026-115517](https://cve.now/CVE-2026-115517.md): Unrestricted network access between execution contexts in KNIME Business Hub (CVSS 6.4, KNIME Business Hub)
- [CVE-2026-114612](https://cve.now/CVE-2026-114612.md): LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key (CVSS 9.9, BerriAI litellm · litellm)
- [CVE-2026-113876](https://cve.now/CVE-2026-113876.md): SmileCDR HAPI FHIR unauthorized read (CVSS 5.3, SmileCDR HAPI FHIR)
- [CVE-2026-113875](https://cve.now/CVE-2026-113875.md): SmileCDR HAPI FHIR unauthorized read via subscription (CVSS 3.1, SmileCDR HAPI FHIR)
- [CVE-2026-113874](https://cve.now/CVE-2026-113874.md): SmileCDR HAPI FHIR trusted tenant partition override (CVSS 8.1, SmileCDR HAPI FHIR)
- [CVE-2026-113873](https://cve.now/CVE-2026-113873.md): SmileCDR HAPI FHIR improper data decompression (CVSS 7.5, SmileCDR HAPI FHIR)
- [CVE-2026-97635](https://cve.now/CVE-2026-97635.md): Agent Zero Web UI XSS (CVSS 8.1, Agent Zero)
- [CVE-2026-77157](https://cve.now/CVE-2026-77157.md): ast-cli: Auto-update downloads are not verified against a checksum before execution (CVSS 6.4, github.com/checkmarx/ast-cli)
- [CVE-2026-77156](https://cve.now/CVE-2026-77156.md): ast-cli: Path traversal in tar extraction on Linux/macOS allows writes outside the install directory (CVSS 6.4, github.com/checkmarx/ast-cli)
- [CVE-2026-108357](https://cve.now/CVE-2026-108357.md): PhpSpreadsheet: XmlScanner Bypass via Double-Encoded unentity() TOCTOU Allows XXE and Denial of Service (CVSS 8.8, PHPOffice PhpSpreadsheet · phpoffice/phpspreadsheet)
- [CVE-2026-13599](https://cve.now/CVE-2026-13599.md): ABB Ability Edgenius | Missing Authentication in Edgenius AuthDB (CVSS 7.8, ABB Ability Edgenius)
- [CVE-2026-114611](https://cve.now/CVE-2026-114611.md): OCO-Server: MDM /profile endpoint accepts self-signed PKCS#7 signatures (PKCS7\_NOVERIFY): device MDM identity (certificate + private key) disclosure and device-record hijack (CVSS 9.1, schorschii OCO-Server)
- [CVE-2026-108359](https://cve.now/CVE-2026-108359.md): PhpSpreadsheet ODS Reader: Unbounded number-rows-repeated → CPU & Memory Exhaustion (DoS) (CVSS 8.7, PHPOffice PhpSpreadsheet · phpoffice/phpspreadsheet)
- [CVE-2026-93336](https://cve.now/CVE-2026-93336.md): Missing authorization in the unit resources download route in Juju controllers (CVSS 7.1, Canonical Juju)
- [CVE-2026-108358](https://cve.now/CVE-2026-108358.md): PhpSpreadsheet: XmlScanner Bypass via ISO-2022 Escape Sequences Allows XXE and Denial of Service (CVSS 8.8, PHPOffice PhpSpreadsheet · phpoffice/phpspreadsheet)
- [CVE-2026-108360](https://cve.now/CVE-2026-108360.md): PhpSpreadsheet: SSRF whitelist bypass via unre-validated HTTP redirect in Drawing::setPath external image loading (CVSS 6.4, PHPOffice PhpSpreadsheet · phpoffice/phpspreadsheet)
- [CVE-2026-54238](https://cve.now/CVE-2026-54238.md): Supabase Realtime: Expired JWTs with string exp are accepted by REST broadcast authorization (CVSS 3.1, supabase realtime)
- [CVE-2026-114610](https://cve.now/CVE-2026-114610.md): fpdf2: Exponential SVG '\<use\>' expansion causes CPU and memory exhaustion in 'FPDF.image()' (CVSS 6.5, py-pdf fpdf2 · fpdf2)
- [CVE-2026-114609](https://cve.now/CVE-2026-114609.md): fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content (CVSS 5.8, py-pdf fpdf2 · fpdf2)
- [CVE-2026-54532](https://cve.now/CVE-2026-54532.md): CloudPirates Open Source Helm Charts: pull\_request\_target workflow vulnerable to cache poisoning and OIDC token theft (CVSS 6.9, CloudPirates-io helm-charts)
- [CVE-2026-115513](https://cve.now/CVE-2026-115513.md): OpenCATS before 0.12.0 Stored XSS via MRU Navigation Panel (CVSS 6.3, OpenCATS)
- [CVE-2026-115416](https://cve.now/CVE-2026-115416.md): Incorrect authorization checks in Amazon Athena engine version 3 query processing (CVSS 7.7, AWS Amazon Athena)
- [CVE-2026-114608](https://cve.now/CVE-2026-114608.md): Pylint: Arbitrary code execution via pickle deserialization of the stats cache in PYLINT\_HOME (CVSS 5.4, pylint-dev pylint · pylint)
- [CVE-2026-114607](https://cve.now/CVE-2026-114607.md): better-auth: OAuth state can be used as a Magic Link to sign in as another user (CVSS 9.1, better-auth)
- [CVE-2026-114606](https://cve.now/CVE-2026-114606.md): draw.io Desktop: Arbitrary local-file read via read-side IPC (no blessed-path gate) (CVSS 5.6, jgraph drawio-desktop)
- [CVE-2026-97631](https://cve.now/CVE-2026-97631.md): Pre-boot RCE in EDK II PXE driver (CVSS 9.5, TianoCore EDK2)
- [CVE-2026-115502](https://cve.now/CVE-2026-115502.md): DataApp links without login expose job information to other user in KNIME Business Hub (CVSS 6.3, KNIME Business Hub)
- [CVE-2026-104068](https://cve.now/CVE-2026-104068.md): JetBackup WordPress Plugin \< 3.1.24.10 Symlink Arbitrary File Write via Backup Restore (CVSS 8.6, JetBackup)
- [CVE-2026-114605](https://cve.now/CVE-2026-114605.md): dnspython dns.name.from\_wire\_parser() excessive CPU use (CVSS 7.5, rthalley dnspython · dnspython)
- [CVE-2026-75507](https://cve.now/CVE-2026-75507.md): GraphQL-core: Denial of service via quadratic complexity in the OverlappingFieldsCanBeMerged validation rule (CVSS 7.5, graphql-python graphql-core · graphql-core)
- [CVE-2026-75508](https://cve.now/CVE-2026-75508.md): GraphQL-core: Denial of service via comment tokens bypassing the parser's max\_tokens limit (CVSS 7.5, graphql-python graphql-core · graphql-core)
- [CVE-2026-115496](https://cve.now/CVE-2026-115496.md): Workflow names may be leaked to unauthenticated users in KNIME Business Hub (CVSS 6.9, KNIME Business Hub)
- [CVE-2026-114487](https://cve.now/CVE-2026-114487.md): Missing authorization in the PAM AD computer import endpoint in Devolutions Server 2026.3.5.0 through 2026.3.10.0 and 2026.2.20.0 and… (CVSS 4.3, Devolutions Server)
- [CVE-2026-115494](https://cve.now/CVE-2026-115494.md): CSRF protection could be tricked by forged X-Forwarded-Host header in KNIME Business Hub (CVSS 5.3, KNIME Business Hub)
- [CVE-2026-114486](https://cve.now/CVE-2026-114486.md): Incorrect authorization in the Devolutions Gateway token generation in Devolutions Server 2026.3.10.0 and earlier allows an authenticated… (CVSS 4.3, Devolutions Server)
- [CVE-2026-114485](https://cve.now/CVE-2026-114485.md): Insufficient protection of sensitive information in the user list endpoint in Devolutions Server 2026.3.10.0 and earlier allows an… (CVSS 4.3, Devolutions Server)
- [CVE-2026-114603](https://cve.now/CVE-2026-114603.md): OpenTelemetry Python: Unbounded tracestate parsing in opentelemetry-api (CVSS 5.3, open-telemetry opentelemetry-python · opentelemetry-api)
- [CVE-2026-115454](https://cve.now/CVE-2026-115454.md): Large tables in data apps can bring down execution services in KNIME Hub (CVSS 5.3, KNIME Business Hub)
- [CVE-2026-94482](https://cve.now/CVE-2026-94482.md): Next.js: Denial of Service in App Router using Server Actions (CVSS 8.2, vercel next.js · next)
- [CVE-2026-115453](https://cve.now/CVE-2026-115453.md): Cross user deletion and modification of cart and wishlist rows in Ecommerce Template through unscoped primary key queries (CVSS 7.1, MarcosCamara01 Ecommerce Template)
- [CVE-2026-115450](https://cve.now/CVE-2026-115450.md): Price manipulation in the Ecommerce Template checkout flow through a client supplied Stripe price identifier (CVSS 7.1, MarcosCamara01 Ecommerce Template)
- [CVE-2026-115482](https://cve.now/CVE-2026-115482.md): In lsquic before 4.9.0, the HTTP/3 implementation can use an excessive amount of memory because the number of buffered header sets is not li (CVSS 7.5, litespeedtech lsquic)
- [CVE-2026-114515](https://cve.now/CVE-2026-114515.md): OCO-Server: Self-Service Portal uninstall-job authorization bypass (CVSS 6.5, schorschii OCO-Server)
- [CVE-2026-61791](https://cve.now/CVE-2026-61791.md): OCO-Server: Stored XSS through agent hostnames in command buttons (CVSS 7.4, schorschii OCO-Server)
- [CVE-2026-16477](https://cve.now/CVE-2026-16477.md): Insecure Deserialization of .cleanshot Files in CleanShot X (CVSS 8.4, MTW CleanShot X)
- [CVE-2026-114510](https://cve.now/CVE-2026-114510.md): Flexible GraphRAG: Cypher/Graph Injection via broken string-escaping in FalkorDB adapter (\_escape()) - full graph wipe from… (CVSS 7.1, stevereiner flexible-graphrag · flexible-graphrag)
- [CVE-2026-111181](https://cve.now/CVE-2026-111181.md): body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body (CVSS 7.5, body-parser)
- [CVE-2026-113872](https://cve.now/CVE-2026-113872.md): multer vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardown (CVSS 7.5, multer)
- [CVE-2026-89410](https://cve.now/CVE-2026-89410.md): Out-of-bounds read in Z-Wave NCP SPI Handler (CVSS 5.1, Silicon Labs Z-Wave SDK)
- [CVE-2026-89409](https://cve.now/CVE-2026-89409.md): Unvalidated ZWAVE\_CMD\_NODES\_EXIST May Cause Deletion of End Nodes​ (CVSS 5.3, Silicon Labs Z-Wave SDK)
- [CVE-2026-85079](https://cve.now/CVE-2026-85079.md): Out-of-bounds write in Zigbee Simple\_Desc\_req handling (CVSS 7.5, Silicon Labs EmberZNet)
- [CVE-2026-94502](https://cve.now/CVE-2026-94502.md): Out-of-bounds write in Zigbee Publish Price Matrix handling (CVSS 7.5, Silicon Labs EmberZNet)
- [CVE-2026-115249](https://cve.now/CVE-2026-115249.md): subhajitkhan online-clinic-management-system Appointment Booking patappointtime.php input validation (CVSS 5.1, subhajitkhan online-clinic-management-system)
- [CVE-2026-66282](https://cve.now/CVE-2026-66282.md): Authenticated Denial-of-Service in Zigbee Publish Billing Period (CVSS 6.0, Silicon Labs EmberZNet)
- [CVE-2026-66281](https://cve.now/CVE-2026-66281.md): Authenticated Denial-of-Service in Zigbee Discover Attributes Handling (CVSS 6.0, Silicon Labs EmberZNet)
- [CVE-2026-85080](https://cve.now/CVE-2026-85080.md): Authenticated Denial-of-Service in Zigbee GetGroupMembership Handling (CVSS 6.0, Silicon Labs EmberZNet)
- [CVE-2026-66279](https://cve.now/CVE-2026-66279.md): Dis-connect vulnerability in Connect Stack (CVSS 7.2, Silicon Labs Connect SDK)
- [CVE-2026-111497](https://cve.now/CVE-2026-111497.md): Out-of-Bounds Write in Google Brotli Decoder (CVSS 9.2, KEV, Google Brotli · node +6)
- [CVE-2026-92709](https://cve.now/CVE-2026-92709.md): Rsyslog: DynFile Path Traversal → Arbitrary File Write as Root → RCE (CVSS 8.1, rsyslog)
- [CVE-2026-115248](https://cve.now/CVE-2026-115248.md): subhajitkhan online-clinic-management-system Booking patappointtime.php behavioral workflow (CVSS 5.3, subhajitkhan online-clinic-management-system)
- [CVE-2026-113582](https://cve.now/CVE-2026-113582.md): Apache Abdera: XML external entity expansion in Atom document parsing (CVSS 8.7, Apache Software Foundation Apache Abdera)
- [CVE-2026-115400](https://cve.now/CVE-2026-115400.md): crawlseo before 0.2.5 Cleartext Storage of Google OAuth Tokens (CVSS 6.7, crawlseo)
- [CVE-2026-115411](https://cve.now/CVE-2026-115411.md): crawlseo before 0.2.4 Server-Side Request Forgery via Crawler (CVSS 5.3, crawlseo)
- [CVE-2026-115247](https://cve.now/CVE-2026-115247.md): subhajitkhan online-clinic-management-system patientregistration.php missing encryption (CVSS 5.3, subhajitkhan online-clinic-management-system)
- [CVE-2026-115246](https://cve.now/CVE-2026-115246.md): subhajitkhan online-clinic-management-system patdocmsg.php cross site scripting (CVSS 5.1, subhajitkhan online-clinic-management-system)
- [CVE-2026-102785](https://cve.now/CVE-2026-102785.md): Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52 (CVSS 10.0, yootheme.com YOOtheme Pro extension for Joomla)
- [RUSTSEC-2026-0407](https://cve.now/RUSTSEC-2026-0407.md): SSRF and local file disclosure via unvalidated URLs (no CVSS, webpage)
- [RUSTSEC-2026-0411](https://cve.now/RUSTSEC-2026-0411.md): Out-of-bounds read in \`Log2Cache::nlog2n()\`, \`nlog2n\_difference()\` and \`plog2p()\` (no CVSS, dahl-salso)
- [CVE-2026-112832](https://cve.now/CVE-2026-112832.md): WordPress Rootblox plugin \<= 1.0.6 - Local File Inclusion vulnerability (CVSS 9.8, CozyThemes Rootblox)
- [CVE-2026-112842](https://cve.now/CVE-2026-112842.md): WordPress Paid Member Subscriptions plugin \<= 3.1.2 - Broken Access Control vulnerability (CVSS 6.5, Cozmoslabs Paid Member Subscriptions)
- [CVE-2026-112822](https://cve.now/CVE-2026-112822.md): WordPress Workreap Core plugin \< 3.4.4 - SQL Injection vulnerability (CVSS 8.5, AmentoTech Workreap Core)
- [CVE-2026-115334](https://cve.now/CVE-2026-115334.md): Lotus through 0.10.2 Authorization Bypass via switch\_organization Endpoint (CVSS 7.6, uselotus lotus)
- [CVE-2026-115333](https://cve.now/CVE-2026-115333.md): Lotus through 0.10.2 Improper Authentication via Event Ingestion API Key Prefix (CVSS 8.2, uselotus lotus)
- [CVE-2026-115332](https://cve.now/CVE-2026-115332.md): Lotus through 0.10.2 SQL Injection via Subscription Filter Keys (CVSS 8.7, uselotus lotus)
- [CVE-2026-115331](https://cve.now/CVE-2026-115331.md): Lotus through 0.10.2 SQL Injection via Metric Property Names and Filters (CVSS 8.7, uselotus lotus)
- [CVE-2026-115330](https://cve.now/CVE-2026-115330.md): Lotus through 0.10.2 SQL Injection via Custom SQL Billable Metrics (CVSS 8.7, uselotus lotus)
- [CVE-2026-115329](https://cve.now/CVE-2026-115329.md): Lotus through 0.10.2 Cross-Organization IDOR via SubscriptionViewSet (CVSS 6.0, uselotus lotus)
- [CVE-2026-115328](https://cve.now/CVE-2026-115328.md): JSON-SCADA before 0.65-alpha SQL Injection via OPC HistoryRead API (CVSS 8.7, riclolsen json-scada)
- [CVE-2026-115327](https://cve.now/CVE-2026-115327.md): libyang through 6.4.13 Uninitialized Pointer Free in NETCONF RPC Parser (CVSS 6.0, CESNET libyang)
- [CVE-2026-115326](https://cve.now/CVE-2026-115326.md): QloApps through 1.7.0 IDOR via OrderDetailController Refund Request (CVSS 5.3, Webkul QloApps)
- [CVE-2026-115325](https://cve.now/CVE-2026-115325.md): Netmaker through 1.7.0 Authorization Bypass via updateExtClient Unscoped Lookup (CVSS 8.7, gravitl netmaker)
- [CVE-2026-115324](https://cve.now/CVE-2026-115324.md): mem0 0.1.117 before 1.0.8 SQL Injection via Databricks Vector Store (CVSS 9.2, mem0ai mem0 · mem0ai)
- [CVE-2026-115323](https://cve.now/CVE-2026-115323.md): EverShop 1.2.2 before 2.2.1 Missing Authorization via Customer Address API (CVSS 6.9, evershopcommerce evershop)
- [CVE-2026-115322](https://cve.now/CVE-2026-115322.md): Bytebase before 3.16.0 Authorization Bypass via Rollout Service Task Run Handlers (CVSS 5.3, bytebase)
- [CVE-2026-115321](https://cve.now/CVE-2026-115321.md): Bytebase before 3.16.0 Authorization Bypass via UpdateIssueComment (CVSS 5.3, bytebase)
- [CVE-2026-115319](https://cve.now/CVE-2026-115319.md): fzf 0.36.0 through 0.74.5 Denial of Service via maskActionContents (CVSS 2.0, junegunn fzf)
- [CVE-2026-114665](https://cve.now/CVE-2026-114665.md): Goploy 1.18.0 before 1.18.1 Symlink Following Arbitrary File Read via /deploy/fileDiff and /deploy/fileCompare (CVSS 7.1, zhenorzz goploy · github.com/zhenorzz/goploy)
- [CVE-2025-71434](https://cve.now/CVE-2025-71434.md): Weaver E-cology \< 10.76 Unauthenticated SQL Injection via doc/out/more/list (CVSS 8.8, Weaver Network Co. E-cology)
- [CVE-2024-58396](https://cve.now/CVE-2024-58396.md): YouDataSum CPAS Audit Management System V4 Path Traversal via downPlugs fileId (CVSS 8.7, YouDataSum CPAS Audit Management System)
- [CVE-2024-58394](https://cve.now/CVE-2024-58394.md): Retool \< 3.88.0 XSS via /api/imageProxy SVG Proxying (CVSS 5.1, Retool)
- [CVE-2024-58393](https://cve.now/CVE-2024-58393.md): i-Netsolution Readymade Unilevel Ecommerce MLM SQL Injection via product-details.php (CVSS 8.8, i-Netsolution Readymade Unilevel Ecommerce MLM)
- [CVE-2023-54413](https://cve.now/CVE-2023-54413.md): WPML Multilingual CMS WordPress Plugin \< 4.6.1 Reflected XSS via wp-login.php wp\_lang (CVSS 5.1, OnTheGoSystems WPML Multilingual CMS)
- [CVE-2022-51025](https://cve.now/CVE-2022-51025.md): Penta Security WAPPLES 4.0.54.1 / 5.0 / 6.0 Path Traversal via /webapi/file/transfer (CVSS 7.1, Penta Security Systems WAPPLES)
- [CVE-2022-51024](https://cve.now/CVE-2022-51024.md): Kavita \< 0.5.4.1 Unauthenticated Path Traversal via cover-upload Endpoint (CVSS 8.7, Kareadita Kavita)
- [CVE-2022-51023](https://cve.now/CVE-2022-51023.md): PHPOK \< 5.4.081 SQL Injection via api.php sort Parameter (CVSS 8.8, PHPOK)
- [CVE-2022-51022](https://cve.now/CVE-2022-51022.md): YiShaAdmin 3.1 Unauthenticated Path Traversal via DownloadFile endpoint (CVSS 8.8, liukuo362573 YiShaAdmin)
- [CVE-2022-51021](https://cve.now/CVE-2022-51021.md): NotificationX WordPress Plugin \< 2.3.12 Unauthenticated SQL Injection via notification REST endpoint (CVSS 8.8, WPDeveloper NotificationX)
- [CVE-2021-48017](https://cve.now/CVE-2021-48017.md): OrbiTeam BSCW Server \< 5.2.5 / 7.4.4 Path Traversal via bscw.cgi (CVSS 8.7, OrbiTeam BSCW Server)
- [CVE-2021-48016](https://cve.now/CVE-2021-48016.md): DedeCMS 5.8.1-beta Unauthenticated RCE via plus/flink.php (CVSS 9.3, DedeCMS)
- [CVE-2021-48015](https://cve.now/CVE-2021-48015.md): JeeWMS Path Traversal via showOrDownByurl.do (CVSS 8.7, erzhongxmu JeeWMS)
- [CVE-2021-48014](https://cve.now/CVE-2021-48014.md): FineReport 9.0 Unauthenticated Path Traversal File Write via ReportServer (CVSS 9.3, FanRuan FineReport)
- [CVE-2021-48013](https://cve.now/CVE-2021-48013.md): Weaver E-cology 8.0 Unauthenticated Path Traversal via ln.FileDownload (CVSS 8.7, Weaver Network Co. E-cology)
- [CVE-2020-37284](https://cve.now/CVE-2020-37284.md): Sickbeard build-507 Reflected XSS via testNaming pattern Parameter (CVSS 5.1, midgetspy Sickbeard)
- [CVE-2019-25779](https://cve.now/CVE-2019-25779.md): WooThemes Diarise 1.5.9 Local File Disclosure via download.php (CVSS 8.7, WooThemes Diarise)
- [CVE-2019-25778](https://cve.now/CVE-2019-25778.md): SeaCMS 8.7 SQL Injection via comment/api/index.php rlist Parameter (CVSS 8.8, SeaCMS)
- [CVE-2018-25439](https://cve.now/CVE-2018-25439.md): MetInfo CMS \< 6.1.1 Unauthenticated Path Traversal via thumb.php dir Parameter (CVSS 8.7, MetInfo)
- [CVE-2018-25438](https://cve.now/CVE-2018-25438.md): Intermesh Group-Office \< 3.5.5 Path Traversal via compress.php (CVSS 8.7, Intermesh Group-Office)
- [CVE-2017-20290](https://cve.now/CVE-2017-20290.md): Discourse \< 1.9.0.beta13 Reflected XSS via /email/unsubscribed (CVSS 5.1, Discourse)
- [CVE-2017-20289](https://cve.now/CVE-2017-20289.md): Broadstreet Ad Widget WordPress Plugin \< 2.12.0 Local File Inclusion via step parameter (CVSS 7.7, Broadstreet Ad Widget)
- [CVE-2017-20288](https://cve.now/CVE-2017-20288.md): QCubed 3.1.1 Reflected XSS via installer step\_2.php (CVSS 5.1, QCubed)
- [CVE-2017-20287](https://cve.now/CVE-2017-20287.md): Javo Spot WordPress Theme \< 3.0.0 Path Traversal via admin-ajax.php fn Parameter (CVSS 8.7, Javo Themes Javo Spot)
- [CVE-2026-13411](https://cve.now/CVE-2026-13411.md): Null condition in Playbooks import crashes the plugin (CVSS 4.3, Mattermost)
- [CVE-2026-111079](https://cve.now/CVE-2026-111079.md): Goose: goose: shell history and environment leak via terminal integration (CVSS 7.4, Red Hat Enterprise Linux)
- [CVE-2026-115207](https://cve.now/CVE-2026-115207.md): Patch: filename validation bypass in reversal fallback allows file creation outside the working directory (CVSS 5.5, Red Hat Enterprise Linux · Red Hat Hardened Images)
- [CVE-2026-112313](https://cve.now/CVE-2026-112313.md): WordPress ACF Extended plugin \<= 0.9.2.7 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, ACF Extended)
- [CVE-2026-112820](https://cve.now/CVE-2026-112820.md): WordPress Academist Core plugin \<= 1.4.1 - Local File Inclusion vulnerability (CVSS 8.1, Elated-Themes Academist Core)
- [CVE-2026-114348](https://cve.now/CVE-2026-114348.md): webpack-dev-server vulnerable to information disclosure via Host validation bypass in the open-editor endpoint (CVSS 5.3, webpack-dev-server)
- [CVE-2026-112085](https://cve.now/CVE-2026-112085.md): webpack-dev-server vulnerable to cross-origin WebSocket access via proxied upgrades (CVSS 8.2, webpack-dev-server)
- [CVE-2026-106017](https://cve.now/CVE-2026-106017.md): Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage r (CVSS 6.3, OpenVPN 3 Core Library)
- [CVE-2026-21812](https://cve.now/CVE-2026-21812.md): Multiple security vulnerabilities affect HCL AppScan Azure Boards Plugin (CVE-2026-12143 and CVE-2026-13149) (CVSS 2.2, HCL Software AppScan Integration with Azure Boards for ASoC…)
- [CVE-2026-21811](https://cve.now/CVE-2026-21811.md): Multiple security vulnerabilities affect HCL AppScan Azure Boards Plugin (CVE-2026-12143 and CVE-2026-13149) (CVSS 3.8, HCL Software AppScan Integration with Azure Boards for ASoC…)
- [CVE-2026-114703](https://cve.now/CVE-2026-114703.md): WordPress Extensions for Leaflet Map plugin \<= 6.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, hupe13 Extensions for Leaflet Map)
- [CVE-2026-114702](https://cve.now/CVE-2026-114702.md): WordPress ND Shortcodes For Visual Composer plugin \<= 7.8 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, nicdark ND Shortcodes For Visual Composer)
- [CVE-2026-114701](https://cve.now/CVE-2026-114701.md): WordPress Waitlist Woocommerce ( Back in stock notifier ) plugin \<= 2.9.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, xootix Waitlist Woocommerce)
- [CVE-2026-114700](https://cve.now/CVE-2026-114700.md): WordPress Restaurant Menu – Food Ordering System – Table Reservation plugin \<= 2.4.4 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Gloriafood Restaurant Menu – Food Ordering System – Table R…)
- [CVE-2026-114699](https://cve.now/CVE-2026-114699.md): WordPress ЮKassa для WooCommerce plugin \<= 2.17.3 - Broken Access Control vulnerability (CVSS 5.3, yoomoney ЮKassa для WooCommerce)
- [CVE-2026-110974](https://cve.now/CVE-2026-110974.md): Uncontrolled Recursion on Nested JSON Allows Denial of Service in android-json (CVSS 6.3, vaadin android-json)
- [CVE-2026-114195](https://cve.now/CVE-2026-114195.md): WordPress ShopMagic plugin \<= 4.9.1 - Sensitive Data Exposure vulnerability (CVSS 5.3, WP Desk ShopMagic)
- [CVE-2026-112218](https://cve.now/CVE-2026-112218.md): WordPress Majestic Support plugin \<= 1.2.1 - Broken Access Control vulnerability (CVSS 5.3, Ahmad Majestic Support)
- [CVE-2026-114696](https://cve.now/CVE-2026-114696.md): WordPress Page Restriction WordPress (WP) plugin \<= 1.6.0 - Broken Access Control vulnerability (CVSS 5.3, miniOrange Page Restriction WordPress)
- [CVE-2026-111842](https://cve.now/CVE-2026-111842.md): WordPress Sunshine Photo Cart plugin \<= 3.7.5 - Broken Access Control vulnerability (CVSS 5.3, WP Sunshine Sunshine Photo Cart)
- [CVE-2026-115253](https://cve.now/CVE-2026-115253.md): WatchGuard Agent Incorrect Permission Assignment in Log Directory Allows Local Log Tampering (CVSS 7.3, WatchGuard Agent)
- [CVE-2026-96293](https://cve.now/CVE-2026-96293.md): Endpoint Security Cleartext Storage of FileVault Recovery Key in Log File (CVSS 6.9, WatchGuard Agent)
- [CVE-2026-112311](https://cve.now/CVE-2026-112311.md): WordPress ACF Extended plugin \<= 0.9.2.7 - Arbitrary File Deletion vulnerability (CVSS 6.5, ACF Extended)
- [CVE-2026-111851](https://cve.now/CVE-2026-111851.md): WordPress Royal Elementor Addons plugin \<= 1.7.1068 - Arbitrary Code Execution vulnerability (CVSS 7.6, WProyal Royal Elementor Addons)
- [CVE-2026-112312](https://cve.now/CVE-2026-112312.md): WordPress ACF Extended plugin \<= 0.9.2.7 - Broken Access Control vulnerability (CVSS 7.5, ACF Extended)
- [CVE-2026-111830](https://cve.now/CVE-2026-111830.md): WordPress WP Mailster plugin \<= 1.9.1.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, WP Mailster)
- [CVE-2026-112241](https://cve.now/CVE-2026-112241.md): WordPress SureCart plugin \<= 4.9.5 - Broken Authentication vulnerability (CVSS 9.8, Brainstorm Force SureCart)
- [CVE-2026-112242](https://cve.now/CVE-2026-112242.md): WordPress Profile Builder plugin \<= 4.0.4 - Privilege Escalation vulnerability (CVSS 8.8, Cozmoslabs Profile Builder)
- [CVE-2026-112845](https://cve.now/CVE-2026-112845.md): WordPress Off-Canvas Sidebars & Menus (Slidebars) plugin \<= 0.5.9 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Jory Hogeveen Off-Canvas Sidebars & Menus)
- [CVE-2026-110893](https://cve.now/CVE-2026-110893.md): WordPress SureDash plugin \<= 1.12.2 - Broken Access Control vulnerability (CVSS 5.3, Brainstorm Force SureDash)
- [CVE-2026-110894](https://cve.now/CVE-2026-110894.md): WordPress SureDash plugin \<= 1.12.2 - Broken Access Control vulnerability (CVSS 5.3, Brainstorm Force SureDash)
- [CVE-2026-114698](https://cve.now/CVE-2026-114698.md): WordPress myCred plugin \<= 4.0.0-beta.1 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.4, myCred)
- [CVE-2026-112327](https://cve.now/CVE-2026-112327.md): WordPress Amelia plugin \<= 2.4.11 - SQL Injection vulnerability (CVSS 9.3, TMS Amelia)
- [CVE-2026-112379](https://cve.now/CVE-2026-112379.md): WordPress Contact Form Email plugin \<= 1.3.68 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Codepeople Contact Form Email)
- [CVE-2026-93471](https://cve.now/CVE-2026-93471.md): Unbounded SAML message decompression in esaml allows memory exhaustion (CVSS 8.7, handnot2 esaml · arekinath esaml +2)
- [CVE-2026-86696](https://cve.now/CVE-2026-86696.md): Unbounded atom creation from unsigned LogoutResponse status codes in esaml allows atom table exhaustion (CVSS 8.2, handnot2 esaml · arekinath esaml +2)
- [CVE-2026-105270](https://cve.now/CVE-2026-105270.md): Unbounded atom creation while parsing SAML messages in esaml allows atom table exhaustion (CVSS 8.7, arekinath esaml · handnot2 esaml +2)
- [CVE-2026-114182](https://cve.now/CVE-2026-114182.md): WordPress PowerPack Addons for Elementor plugin \<= 3.1.0 - Broken Access Control vulnerability (CVSS 4.3, IdeaBox Creations PowerPack Addons for Elementor)
- [CVE-2026-112843](https://cve.now/CVE-2026-112843.md): WordPress Strong Testimonials plugin \<= 3.3.14 - Broken Access Control vulnerability (CVSS 4.3, WP Chill Strong Testimonials)
- [CVE-2026-112826](https://cve.now/CVE-2026-112826.md): WordPress Falcon – WordPress Optimizations & Tweaks plugin \<= 2.12.0 - Broken Access Control vulnerability (CVSS 5.3, eLightUp Falcon – WordPress Optimizations & Tweaks)
- [CVE-2026-114180](https://cve.now/CVE-2026-114180.md): WordPress Metform plugin \<= 4.3.2 - Broken Access Control vulnerability (CVSS 5.3, Wpmet Metform)
- [CVE-2026-111847](https://cve.now/CVE-2026-111847.md): WordPress MarketKing plugin \<= 2.1.72 - Broken Access Control vulnerability (CVSS 5.4, Kings Plugins MarketKing)
- [CVE-2026-114177](https://cve.now/CVE-2026-114177.md): WordPress Xpro Elementor Addons plugin \<= 1.7.10 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8, Xpro Elementor Addons)
- [CVE-2026-114175](https://cve.now/CVE-2026-114175.md): WordPress eRoom plugin \<= 1.7.1 - Settings Change vulnerability (CVSS 5.4, DigitalME eRoom)
- [CVE-2026-112867](https://cve.now/CVE-2026-112867.md): WordPress H5P plugin \<= 1.17.9 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, H5P)
- [CVE-2026-114184](https://cve.now/CVE-2026-114184.md): WordPress Elementor Addon Elements plugin \<= 1.14.4 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, WPVibes Elementor Addon Elements)
- [CVE-2026-103634](https://cve.now/CVE-2026-103634.md): Apache DataSketches: datasketches-cpp: Out-of-bounds read and write in Count-Min sketch deserialization allows memory corruption via a crafted sketch (CVSS 5.3, Apache Software Foundation Apache DataSketches)
- [CVE-2026-114460](https://cve.now/CVE-2026-114460.md): Mod\_qos: query truncation during json body merging permits security-rule bypass (CVSS 5.3, pbuchbinder mod\_qos)
- [CVE-2026-114459](https://cve.now/CVE-2026-114459.md): Mod\_qos: out-of-bounds reads in response-body substring matching (CVSS 3.7, pbuchbinder mod\_qos)
- [CVE-2026-114458](https://cve.now/CVE-2026-114458.md): Mod\_qos: undersized connection-monitor scratch array permits heap buffer overflow (CVSS 5.9, pbuchbinder mod\_qos)
- [CVE-2026-114457](https://cve.now/CVE-2026-114457.md): Mod\_qos: missing nul termination in json value escaping permits out-of-bounds reads (CVSS 3.7, pbuchbinder mod\_qos)
- [CVE-2026-97328](https://cve.now/CVE-2026-97328.md): WebP Express \< 0.25.16 - Unauthenticated Stored XSS via Alter HTML Parser (CVSS 7.5, WebP Express)
- [CVE-2026-88849](https://cve.now/CVE-2026-88849.md): MasterStudy LMS 3.7.13 - 3.7.54 - Instructor+ Arbitrary User Display Name Update via Student Enrollment (CVSS 2.7, MasterStudy LMS WordPress Plugin)
- [CVE-2026-78392](https://cve.now/CVE-2026-78392.md): Link Library \< 7.9.6 - Contributor+ Stored XSS via 'link\_target' Parameter (CVSS 6.8, Link Library)
- [CVE-2026-111972](https://cve.now/CVE-2026-111972.md): Photo Engine \< 6.5.8 - Author+ Arbitrary Attachment Deletion via IDOR (CVSS 4.9, Photo Engine)
- [CVE-2026-111971](https://cve.now/CVE-2026-111971.md): Photo Engine \< 6.5.8 - Author+ Stored XSS via Collection Name (CVSS 6.8, Photo Engine)
- [CVE-2026-111958](https://cve.now/CVE-2026-111958.md): Royal MCP \< 1.5.7 - Authentication Bypass via Preview Link Token (CVSS 7.5, Royal MCP)
- [CVE-2026-110011](https://cve.now/CVE-2026-110011.md): MB Custom Post Types & Custom Taxonomies 2.4.0 - 2.12.2 - Contributor+ Post Type Definition and Non-Public Post Metadata Disclosure via Export (CVSS 2.7, MB Custom Post Types & Custom Taxonomies)
- [CVE-2026-110010](https://cve.now/CVE-2026-110010.md): MB Custom Post Types & Custom Taxonomies 2.0.2 - 2.12.2 - Unauthenticated Settings Reset via 'mbcpt-force' Parameter (CVSS 4.8, MB Custom Post Types & Custom Taxonomies)
- [CVE-2026-109987](https://cve.now/CVE-2026-109987.md): PixelYourSite (Free & Pro) - Unauthenticated Stored XSS via Cookie (CVSS 7.2, PixelYourSite)
- [CVE-2026-109931](https://cve.now/CVE-2026-109931.md): Infility Global \< 2.16.25 - Unauthenticated Google Translate API Key Update (CVSS 3.7, Infility Global)
- [CVE-2026-109927](https://cve.now/CVE-2026-109927.md): CM HIPAA Forms \< 3.3.2 - hipaa\_forms+ Privilege Escalation via cm\_hipaa\_update\_user\_role (CVSS 7.2, HIPAA Forms)
- [CVE-2026-103234](https://cve.now/CVE-2026-103234.md): WP Ultimate Review \< 2.4.5 - Unauthenticated Arbitrary Shortcode Execution via Reviewer Email (CVSS 4.8, WP Ultimate Review)
- [CVE-2026-100142](https://cve.now/CVE-2026-100142.md): FluentCart \< 2.2.0 - Unauthenticated Customer Address Disclosure via IDOR (CVSS 5.3, FluentCart A New Era of eCommerce)
- [CVE-2026-114570](https://cve.now/CVE-2026-114570.md): WordPress Core \<= 7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Quick Edit (CVSS 4.9, WordPress Foundation WordPress)
- [CVE-2026-114223](https://cve.now/CVE-2026-114223.md): NewType Infortech｜NT OneAPP - Exposure of Sensitive Information (CVSS 6.7, NewType Infortech NT OneAPP)
- [CVE-2026-114222](https://cve.now/CVE-2026-114222.md): NewType Infortech｜NT OneAPP - Authentication Bypass (CVSS 6.9, NewType Infortech NT OneAPP)
- [CVE-2026-114221](https://cve.now/CVE-2026-114221.md): NewType Infortech｜NT OneAPP - Credential Disclosure (CVSS 5.9, NewType Infortech NT OneAPP)
- [CVE-2026-114220](https://cve.now/CVE-2026-114220.md): NewType Infortech｜NT OneAPP - Improper Certificate Validation (CVSS 9.3, NewType Infortech NT OneAPP)
- [CVE-2026-114219](https://cve.now/CVE-2026-114219.md): NewType Infortech｜NT OneAPP - Hard-coded Credentials (CVSS 9.1, NewType Infortech NT OneAPP)
- [CVE-2026-110353](https://cve.now/CVE-2026-110353.md): HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (worker-thread CPU exhaustion) via a truncate (CVSS 7.5, HAProxy)
- [CVE-2026-110354](https://cve.now/CVE-2026-110354.md): HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (persistent worker-thread CPU exhaustion) via a (CVSS 7.5, HAProxy)
- [CVE-2026-114732](https://cve.now/CVE-2026-114732.md): Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an improper authentication vulnerability in multi-host installations. (CVSS 6.8, Roundcube Webmail)
- [CVE-2026-114731](https://cve.now/CVE-2026-114731.md): Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an uncontrolled resource consumption vulnerability in the CSS proxy (t (CVSS 5.3, Roundcube Webmail)
- [CVE-2026-114730](https://cve.now/CVE-2026-114730.md): Roundcube Webmail 1.6.14 before 1.6.20 and 1.7.0 before 1.7.5 is affected by a server-side request forgery filter bypass. (CVSS 7.2, Roundcube Webmail)
- [CVE-2026-114729](https://cve.now/CVE-2026-114729.md): Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass. (CVSS 5.3, Roundcube Webmail)
- [CVE-2026-114728](https://cve.now/CVE-2026-114728.md): Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass in the handling of FuncIRI attributes (CVSS 5.3, Roundcube Webmail)
- [CVE-2026-114577](https://cve.now/CVE-2026-114577.md): oretnom23 php-travel-agency-system Insertion insert.php sql injection (CVSS 6.9, oretnom23 php-travel-agency-system)
- [CVE-2026-114727](https://cve.now/CVE-2026-114727.md): Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 passes potentially unsafe content into ImageMagick when resizing images. (CVSS 8.3, Roundcube Webmail)
- [CVE-2026-114726](https://cve.now/CVE-2026-114726.md): Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability in the Bounce (resend) action. (CVSS 5.8, Roundcube Webmail)
- [CVE-2026-114725](https://cve.now/CVE-2026-114725.md): Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. (CVSS 5.0, Roundcube Webmail)
- [CVE-2026-114724](https://cve.now/CVE-2026-114724.md): Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection primitive in rcube\_session::unserialize(). (CVSS 7.4, Roundcube Webmail)
- [CVE-2026-114723](https://cve.now/CVE-2026-114723.md): Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be bypassed during thumbnail generation. (CVSS 3.7, Roundcube Webmail)
- [CVE-2026-114664](https://cve.now/CVE-2026-114664.md): Frappe before 16.33.0 Blind SQL Injection via get\_events (CVSS 7.1, frappe)
- [CVE-2026-114663](https://cve.now/CVE-2026-114663.md): Vyper 0.4.0b1 through 0.5.0b1 Name Shadowing of Imported Constants and Default Arguments (CVSS 8.6, vyperlang vyper)
- [CVE-2026-114662](https://cve.now/CVE-2026-114662.md): Obot before 0.26.0 API Key Theft via CLI Login Token Request (CVSS 8.6, obot-platform obot)
- [CVE-2026-114661](https://cve.now/CVE-2026-114661.md): OpenRemote 1.2.0 before 1.31.0 Missing Authorization in Gateway Tunnel Endpoints (CVSS 9.0, openremote)
- [CVE-2026-114660](https://cve.now/CVE-2026-114660.md): Grav 2.0.0 before 2.2.5 Unauthorized Page Deletion via Flex Form Directives (CVSS 7.0, getgrav grav)
- [CVE-2026-114659](https://cve.now/CVE-2026-114659.md): Grav Flex Objects 1.4.0 before 1.4.17 Authorization Bypass via Pages API Routes (CVSS 7.1, getgrav grav-plugin-flex-objects)
- [CVE-2026-114658](https://cve.now/CVE-2026-114658.md): Grav Login plugin 3.6.0 before 3.9.13 Privilege Escalation via login.invite (CVSS 8.7, getgrav grav-plugin-login)
- [CVE-2026-114657](https://cve.now/CVE-2026-114657.md): Grav 2.0.0 before 2.2.5 HTTP Basic Credential Disclosure via Twig Uri (CVSS 6.9, getgrav grav)
- [CVE-2026-114656](https://cve.now/CVE-2026-114656.md): Traefik before 2.11.58 and 3.7.13 mTLS Bypass via Negated Host Matcher (CVSS 6.9, traefik)
- [CVE-2026-114642](https://cve.now/CVE-2026-114642.md): Traefik before 2.11.58 and 3.7.14 TLS Config Bypass via NTLM/Kerberos Round Tripper (CVSS 7.0, traefik)
- [CVE-2026-114641](https://cve.now/CVE-2026-114641.md): Traefik before 2.11.58 and 3.7.14 Race Condition in NTLM/Kerberos Round Tripper (CVSS 6.3, traefik)
- [CVE-2026-114640](https://cve.now/CVE-2026-114640.md): Traefik v3.7.0 before v3.7.14 mTLS Header Spoofing via Ingress-NGINX HTTP Router (CVSS 7.0, traefik)
- [CVE-2026-114639](https://cve.now/CVE-2026-114639.md): Traefik before 2.11.58 and 3.7.14 Authentication Bypass via Negotiate Connection Pool (CVSS 7.0, traefik)
- [CVE-2026-114638](https://cve.now/CVE-2026-114638.md): Traefik v3.7.0 before v3.7.14 Client CA Mix-up via auth-tls-secret Name Collision (CVSS 7.0, traefik)
- [CVE-2026-114637](https://cve.now/CVE-2026-114637.md): Traefik v3.2.0 before v3.7.14 FastProxy NTLM/Negotiate Connection Pool Identity Leak (CVSS 7.0, traefik)
- [CVE-2026-114636](https://cve.now/CVE-2026-114636.md): Traefik v3.7.13 Authentication Bypass via ssl-passthrough Ingress HTTP Router (CVSS 7.0, traefik)
- [CVE-2026-114635](https://cve.now/CVE-2026-114635.md): Traefik before v2.11.58 and v3.7.14 SNI Check Bypass via HTTP/2 Scheme (CVSS 7.0, traefik)
- [CVE-2026-114634](https://cve.now/CVE-2026-114634.md): WWBN AVideo before 29.4.0 Blind SSRF via getHeaderContentTypeFromURL Redirect (CVSS 5.3, WWBN AVideo)
- [CVE-2026-114633](https://cve.now/CVE-2026-114633.md): WWBN AVideo before 29.4.0 Incorrect Authorization via confirmDeleteUser.json.php (CVSS 7.0, WWBN AVideo)
- [CVE-2026-114722](https://cve.now/CVE-2026-114722.md): Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSS scoping bypass in HTML messages. (CVSS 6.5, Roundcube Webmail)
- [CVE-2026-114721](https://cve.now/CVE-2026-114721.md): Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the disabled\_actions configuration setting to be bypassed. (CVSS 3.1, Roundcube Webmail)
- [CVE-2026-114720](https://cve.now/CVE-2026-114720.md): Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an IMAP command injection vulnerability. (CVSS 7.1, Roundcube Webmail)
- [CVE-2026-114576](https://cve.now/CVE-2026-114576.md): Linksys RE6250 Web Management strcmp random values (CVSS 6.3, Linksys RE6250)
- [CVE-2026-114719](https://cve.now/CVE-2026-114719.md): Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSRF validation bypass in the mark-as-junk action of the… (CVSS 3.7, Roundcube Webmail)
- [CVE-2026-114718](https://cve.now/CVE-2026-114718.md): Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a cross-site scripting vulnerability in the password plugin. (CVSS 4.7, Roundcube Webmail)
- [CVE-2026-84910](https://cve.now/CVE-2026-84910.md): Advanced Search - Moderately critical - Access bypass - SA-CONTRIB-2026-118 (CVSS 4.2, Drupal Advanced Search · drupal/advanced\_search)
- [CVE-2026-84911](https://cve.now/CVE-2026-84911.md): AI (Artificial Intelligence) - Moderately critical - Cross site scripting - SA-CONTRIB-2026-119 (CVSS 3.1, Drupal AI · drupal/ai)
- [CVE-2026-84912](https://cve.now/CVE-2026-84912.md): AI (Artificial Intelligence) - Moderately critical - Access Bypass - SA-CONTRIB-2026-120 (CVSS 4.6, Drupal AI · drupal/ai)
- [CVE-2026-84913](https://cve.now/CVE-2026-84913.md): AI translate - Moderately critical - Access Bypass - SA-CONTRIB-2026-121 (CVSS 4.6, Drupal AI Translate · drupal/ai\_translate)
- [CVE-2026-84914](https://cve.now/CVE-2026-84914.md): Calculate Working Days - Critical - Access bypass - SA-CONTRIB-2026-122 (CVSS 5.3, Drupal Calculate Working Days · drupal/calculate\_working\_da…)
- [CVE-2026-84915](https://cve.now/CVE-2026-84915.md): Component blocks - Moderately critical - Cross site scripting - SA-CONTRIB-2026-123 (CVSS 4.6, Drupal Component blocks · drupal/component\_blocks)
- [CVE-2026-84923](https://cve.now/CVE-2026-84923.md): Email Verification / SMS Verification / OTP Verification - Critical - Access Bypass - SA-CONTRIB-2026-124 (CVSS 6.5, Drupal Email Verification / SMS Verification / OTP Verifica…)
- [CVE-2026-84924](https://cve.now/CVE-2026-84924.md): Email Verification / SMS Verification / OTP Verification - Critical - Cross Site Scripting - SA-CONTRIB-2026-125 (CVSS 5.4, Drupal Email Verification / SMS Verification / OTP Verifica…)
- [CVE-2026-84916](https://cve.now/CVE-2026-84916.md): Islandora - Moderately critical - Access bypass - SA-CONTRIB-2026-126 (CVSS 3.7, Drupal Islandora · drupal/islandora)
- [CVE-2026-84917](https://cve.now/CVE-2026-84917.md): Jsonapi Role Access - Critical - Access bypass - SA-CONTRIB-2026-127 (CVSS 6.5, Drupal Jsonapi Role Access · drupal/jsonapi\_role\_access)
- [CVE-2026-16648](https://cve.now/CVE-2026-16648.md): Mailer Plus Log - Moderately critical - Access bypass - SA-CONTRIB-2026-128 (CVSS 3.8, Drupal Mailer Plus Log · drupal/symfony\_mailer\_log)
- [CVE-2026-81163](https://cve.now/CVE-2026-81163.md): Media Library Importer - Moderately critical - Access bypass - SA-CONTRIB-2026-129 (CVSS 5.4, Drupal Media Library Importer · drupal/media\_library\_import…)
- [CVE-2026-84918](https://cve.now/CVE-2026-84918.md): Monobank payment API - Moderately critical - Access bypass - SA-CONTRIB-2026-130 (CVSS 3.7, Drupal Monobank payment API · drupal/monobank)
- [CVE-2026-84919](https://cve.now/CVE-2026-84919.md): PhotoSwipe - Responsive JavaScript Modal Image Gallery - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-131 (CVSS 4.6, Drupal PhotoSwipe - Responsive JavaScript Modal Image Galle…)
- [CVE-2026-84920](https://cve.now/CVE-2026-84920.md): Unpublished Node Permissions - Critical - Access bypass - SA-CONTRIB-2026-132 (CVSS 5.3, Drupal Unpublished Node Permissions)
- [CVE-2026-84921](https://cve.now/CVE-2026-84921.md): Webform Submissions Delete - Moderately critical - Access bypass - SA-CONTRIB-2026-133 (CVSS 5.3, Drupal Webform Submissions Delete)
- [CVE-2026-87936](https://cve.now/CVE-2026-87936.md): amazee.ai Private AI Provider - Critical - SQL injection - SA-CONTRIB-2026-134 (CVSS 6.5, Drupal amazee.ai Private AI Provider · drupal/ai\_provider\_a…)
- [CVE-2026-87937](https://cve.now/CVE-2026-87937.md): Central Authentication System (CAS) Server - Moderately critical - Open redirect - SA-CONTRIB-2026-135 (CVSS 6.5, Drupal Central Authentication System (CAS) Server · drupal/…)
- [CVE-2026-87938](https://cve.now/CVE-2026-87938.md): CSP log - Critical - SQL Injection - SA-CONTRIB-2026-136 (CVSS 6.5, Drupal CSP log · drupal/csp\_log)
- [CVE-2026-87939](https://cve.now/CVE-2026-87939.md): Feed Block - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-137 (CVSS 4.2, Drupal Feed Block · drupal/feed\_block)
- [CVE-2026-87940](https://cve.now/CVE-2026-87940.md): Key auth - Moderately critical - Access bypass - SA-CONTRIB-2026-138 (CVSS 5.4, Drupal Key auth · drupal/key\_auth)
- [CVE-2026-87941](https://cve.now/CVE-2026-87941.md): Patreon - Critical - Unsupported - SA-CONTRIB-2026-139 (CVSS 5.9, Drupal Patreon)
- [CVE-2026-87942](https://cve.now/CVE-2026-87942.md): SafeDelete - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-140 (CVSS 4.6, Drupal SafeDelete · drupal/safedelete)
- [CVE-2026-87943](https://cve.now/CVE-2026-87943.md): SAML SSO - Service Provider - Critical - Improper access control - SA-CONTRIB-2026-141 (CVSS 6.5, Drupal SAML SSO - Service Provider · drupal/miniorange\_saml)
- [CVE-2026-87944](https://cve.now/CVE-2026-87944.md): SAML SSO - Service Provider - Critical - Improper certificate validation - SA-CONTRIB-2026-142 (CVSS 4.8, Drupal SAML SSO - Service Provider · drupal/miniorange\_saml)
- [CVE-2026-87945](https://cve.now/CVE-2026-87945.md): SAML SSO - Service Provider - Critical - Open redirect - SA-CONTRIB-2026-143 (CVSS 5.4, Drupal SAML SSO - Service Provider · drupal/miniorange\_saml)
- [CVE-2026-87946](https://cve.now/CVE-2026-87946.md): SAML SSO - Service Provider - Critical - Weak cryptographic practices - SA-CONTRIB-2026-144 (CVSS 4.8, Drupal SAML SSO - Service Provider · drupal/miniorange\_saml)
- [CVE-2026-87947](https://cve.now/CVE-2026-87947.md): SAML SSO - Service Provider - Moderately critical - Authentication bypass - SA-CONTRIB-2026-145 (CVSS 4.8, Drupal SAML SSO - Service Provider · drupal/miniorange\_saml)
- [CVE-2026-87948](https://cve.now/CVE-2026-87948.md): SAML SSO - Service Provider - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-146 (CVSS 3.5, Drupal SAML SSO - Service Provider · drupal/miniorange\_saml)
- [CVE-2026-87949](https://cve.now/CVE-2026-87949.md): SAML SSO - Service Provider - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-147 (CVSS 3.3, Drupal SAML SSO - Service Provider · drupal/miniorange\_saml)
- [CVE-2026-87950](https://cve.now/CVE-2026-87950.md): SAML SSO - Service Provider - Moderately critical - Embedded credentials - SA-CONTRIB-2026-148 (CVSS 5.3, Drupal SAML SSO - Service Provider · drupal/miniorange\_saml)
- [CVE-2026-87951](https://cve.now/CVE-2026-87951.md): SAML SSO - Service Provider - Moderately critical - Information disclosure - SA-CONTRIB-2026-149 (CVSS 3.8, Drupal SAML SSO - Service Provider · drupal/miniorange\_saml)
- [CVE-2026-87952](https://cve.now/CVE-2026-87952.md): SAML SSO - Service Provider - Moderately critical - Insufficient replay protection - SA-CONTRIB-2026-150 (CVSS 3.1, Drupal SAML SSO - Service Provider · drupal/miniorange\_saml)
- [CVE-2026-87953](https://cve.now/CVE-2026-87953.md): SAML SSO - Service Provider - Moderately critical - Server Side Request Forgery - SA-CONTRIB-2026-151 (CVSS 3.3, Drupal SAML SSO - Service Provider · drupal/miniorange\_saml)
- [CVE-2026-87954](https://cve.now/CVE-2026-87954.md): Taxonomy Term Glossary - Critical - Access bypass - SA-CONTRIB-2026-152 (CVSS 4.3, Drupal Taxonomy Term Glossary · drupal/term\_glossary)
- [CVE-2026-87955](https://cve.now/CVE-2026-87955.md): Ultimate Table Field - Critical - Access bypass - SA-CONTRIB-2026-153 (CVSS 4.3, Drupal Ultimate Table Field · drupal/ultimate\_table\_field)
- [CVE-2026-96360](https://cve.now/CVE-2026-96360.md): Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-154 (CVSS 3.5, Drupal Webform · drupal/webform)
- [CVE-2026-96361](https://cve.now/CVE-2026-96361.md): Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-155 (CVSS 4.6, Drupal Webform · drupal/webform)
- [CVE-2026-96358](https://cve.now/CVE-2026-96358.md): Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-158 (CVSS 4.6, Drupal Webform · drupal/webform)
- [CVE-2026-96359](https://cve.now/CVE-2026-96359.md): Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-159 (CVSS 4.6, Drupal Webform · drupal/webform)
- [CVE-2026-96362](https://cve.now/CVE-2026-96362.md): Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-160 (CVSS 4.2, Drupal Webform · drupal/webform)
- [CVE-2026-96363](https://cve.now/CVE-2026-96363.md): Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-161 (CVSS 3.1, Drupal Webform · drupal/webform)
- [CVE-2026-96367](https://cve.now/CVE-2026-96367.md): Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-162 (CVSS 4.6, Drupal Webform · drupal/webform)
- [CVE-2026-96368](https://cve.now/CVE-2026-96368.md): Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-163 (CVSS 4.6, Drupal Webform · drupal/webform)
- [CVE-2026-96370](https://cve.now/CVE-2026-96370.md): Webform - Moderately critical - Access bypass, Server-side request forgery - SA-CONTRIB-2026-164 (CVSS 5.4, Drupal Webform · drupal/webform)
- [CVE-2026-96369](https://cve.now/CVE-2026-96369.md): Webform - Less critical - Access bypass - SA-CONTRIB-2026-165 (CVSS 3.1, Drupal Webform · drupal/webform)
- [CVE-2026-96371](https://cve.now/CVE-2026-96371.md): Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-166 (CVSS 5.4, Drupal Webform · drupal/webform)
- [CVE-2026-96372](https://cve.now/CVE-2026-96372.md): Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-167 (CVSS 5.4, Drupal Webform · drupal/webform)
- [CVE-2026-96373](https://cve.now/CVE-2026-96373.md): Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-168 (CVSS 3.3, Drupal Webform · drupal/webform)
- [CVE-2026-96366](https://cve.now/CVE-2026-96366.md): Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-169 (CVSS 5.3, Drupal Webform · drupal/webform)
- [CVE-2026-96365](https://cve.now/CVE-2026-96365.md): Webform - Less critical - Denial of service - SA-CONTRIB-2026-170 (CVSS 7.5, Drupal Webform · drupal/webform)
- [CVE-2026-96364](https://cve.now/CVE-2026-96364.md): Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-171 (CVSS 5.3, Drupal Webform · drupal/webform)
- [CVE-2026-96357](https://cve.now/CVE-2026-96357.md): Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-172 (CVSS 4.6, Drupal Webform · drupal/webform)
- [CVE-2026-96398](https://cve.now/CVE-2026-96398.md): Webform - Less critical - Access bypass - SA-CONTRIB-2026-173 (CVSS 4.3, Drupal Webform · drupal/webform)
- [CVE-2026-96356](https://cve.now/CVE-2026-96356.md): Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-174 (CVSS 5.3, Drupal Webform · drupal/webform)
- [CVE-2026-96355](https://cve.now/CVE-2026-96355.md): Webform - Critical - Remote Code Execution - SA-CONTRIB-2026-175 (CVSS 9.1, Drupal Webform · drupal/webform)
- [CVE-2026-96375](https://cve.now/CVE-2026-96375.md): Cloud - Critical - Remote code execution - SA-CONTRIB-2026-176 (CVSS 4.8, Drupal Cloud · drupal/cloud)
- [CVE-2026-96376](https://cve.now/CVE-2026-96376.md): Cloud - Critical - Remote code execution - SA-CONTRIB-2026-177 (CVSS 6.4, Drupal Cloud · drupal/cloud)
- [CVE-2026-96374](https://cve.now/CVE-2026-96374.md): Project Browser - Critical - Cross-site request forgery - SA-CONTRIB-2026-178 (CVSS 4.2, Drupal Project Browser · drupal/project\_browser)
- [CVE-2026-96378](https://cve.now/CVE-2026-96378.md): Commerce Decoupled Checkout - Moderately critical - Access bypass - SA-CONTRIB-2026-179 (CVSS 4.3, Drupal Commerce Decoupled Checkout)
- [CVE-2026-96384](https://cve.now/CVE-2026-96384.md): Mermaid Diagram Field - Moderately critical - Access bypass - SA-CONTRIB-2026-180 (CVSS 3.5, Drupal Mermaid Diagram Field · drupal/mermaid\_diagram\_field)
- [CVE-2026-96379](https://cve.now/CVE-2026-96379.md): CookieCuttr - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-181 (CVSS 3.5, Drupal CookieCuttr · drupal/cookiecuttr)
- [CVE-2026-96385](https://cve.now/CVE-2026-96385.md): REST & JSON API Authentication for Drupal - Moderately critical - Access bypass - SA-CONTRIB-2026-182 (CVSS 6.5, REST & JSON API Authentication for Drupal · drupal/rest\_api…)
- [CVE-2026-96387](https://cve.now/CVE-2026-96387.md): Stop administrator login - Moderately critical - Access bypass - SA-CONTRIB-2026-183 (CVSS 3.8, Drupal Stop administrator login)
- [CVE-2026-96388](https://cve.now/CVE-2026-96388.md): Tawk.to - Live chat application - Critical - Cross Site Request Forgery - SA-CONTRIB-2026-184 (CVSS 5.4, Drupal Tawk.to - Live chat application · drupal/tawk\_to)
- [CVE-2026-96390](https://cve.now/CVE-2026-96390.md): Editoria11y Accessibility Checker - Moderately critical - Access bypass - SA-CONTRIB-2026-185 (CVSS 4.3, Drupal Editoria11y Accessibility Checker · drupal/editoria1…)
- [CVE-2026-96391](https://cve.now/CVE-2026-96391.md): Webform REST - Less critical - Access bypass - SA-CONTRIB-2026-186 (CVSS 4.3, Drupal Webform REST · drupal/webform\_rest)
- [CVE-2026-96392](https://cve.now/CVE-2026-96392.md): AI CKEditor - Moderately critical - Code execution via Twig templates - SA-CONTRIB-2026-187 (CVSS 3.5, Drupal AI CKEditor · drupal/ai\_ckeditor)
- [CVE-2026-96377](https://cve.now/CVE-2026-96377.md): Combined image style - Moderately critical - Improper access control - SA-CONTRIB-2026-188 (CVSS 5.3, Drupal Combined image style · drupal/combined\_image\_style)
- [CVE-2026-96380](https://cve.now/CVE-2026-96380.md): CSS Usage Analyzer - Moderately critical - Improper access control - SA-CONTRIB-2026-189 (CVSS 6.5, Drupal CSS Usage Analyzer · drupal/css\_usage\_analyzer)
- [CVE-2026-96386](https://cve.now/CVE-2026-96386.md): Smart Content - Moderately critical - Access bypass - SA-CONTRIB-2026-190 (CVSS 6.5, Drupal Smart Content · drupal/smart\_content)
- [CVE-2026-96382](https://cve.now/CVE-2026-96382.md): Diba carousel slider - Moderately critical - Cross Site Scripting (XSS) - SA-CONTRIB-2026-191 (CVSS 4.6, Drupal Diba carousel slider · drupal/diba\_carousel)
- [CVE-2026-114717](https://cve.now/CVE-2026-114717.md): Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability when a message is forwarded as… (CVSS 4.0, Roundcube Webmail)
- [CVE-2026-114716](https://cve.now/CVE-2026-114716.md): Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. (CVSS 8.5, Roundcube Webmail)
- [CVE-2026-114715](https://cve.now/CVE-2026-114715.md): Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an incorrect authorization vulnerability in the Modoboa driver of… (CVSS 6.8, Roundcube Webmail)
- [CVE-2026-114714](https://cve.now/CVE-2026-114714.md): Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a path traversal vulnerability in the squirrelmail\_usercopy plugin. (CVSS 5.3, Roundcube Webmail)
- [CVE-2026-114575](https://cve.now/CVE-2026-114575.md): TOTOLINK A950RG product.so UploadCustomModule command injection (CVSS 10.0, TOTOLINK A950RG)
- [CVE-2026-110264](https://cve.now/CVE-2026-110264.md): Integer Overflow or Wraparound in GitLab (CVSS 10.0, GitLab)
- [CVE-2025-65200](https://cve.now/CVE-2025-65200.md): An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content hosted on a web-accessable URL (CVSS 9.6)
- [CVE-2025-69723](https://cve.now/CVE-2025-69723.md): A reflected cross-site scripting (XSS) vulnerability in localstack v4.9.2 allows attackers to execute arbitrary Javascript in the context of (CVSS 6.1)
- [CVE-2026-107079](https://cve.now/CVE-2026-107079.md): An issue in Systrome Validation & Certification 1.0 allows an attacker to cause a denial of service via the t URL parameter in the qrcode\_au (no CVSS)
- [CVE-2026-51954](https://cve.now/CVE-2026-51954.md): An issue in Webasyst Framework 4.0.3 and before allows a remote attacker to execute arbitrary code via a crafted OAuth authorization URL wit (no CVSS)
- [CVE-2026-78801](https://cve.now/CVE-2026-78801.md): An issue in SKYWORTH DIGITAL CO., LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3 allows a remote attacker to obtain sensitiv (CVSS 4.3)
- [CVE-2026-78846](https://cve.now/CVE-2026-78846.md): Multiple AiDot devices are vulnerable to a heap-based buffer overflow via SSDP location header parsing. (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-10-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.