CVEs published October 27, 2026
629 CVEs were published on October 27, 2026: 67 critical, 179 high.
- Published
- 629
- Critical
- 67
- High
- 179
- Medium
- 172
- Low
- 30
- Unrated
- 181
- Now in CISA KEV
- 0
- Fix available
- 340
Most affected products
- Mozilla Firefox · Mozilla Thunderbird
- 165
- Google Chrome
- 52
- SemanticMediaWiki
- 21
- WatchGuard Fireware OS
- 17
- asterisk · certified-asterisk
- 16
- redaxo core
- 13
- Dell PowerProtect Data Domain
- 10
- Adobe Campaign Classic
- 8
- Hitachi HiRDB Server
- 7
- Mozilla Thunderbird
- 7
Critical 67
- CVE-2026-118312Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside tGoogle Chrome
- CVE-2026-118309Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitGoogle Chrome
- CVE-2026-118308Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the saGoogle Chrome
- CVE-2026-118310Improper input validation in Views in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to potentially execute arGoogle Chrome
- CVE-2026-118342Out of bounds write in Editing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outsiGoogle Chrome
- CVE-2026-118316Improper input validation in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outsGoogle Chrome
- CVE-2026-118332Improper input validation in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary Google Chrome
- CVE-2026-118355Improper input validation in Command in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary codeGoogle Chrome
- CVE-2026-118321Improper input validation in Core in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbGoogle Chrome
- CVE-2026-118340Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside thGoogle Chrome
- CVE-2026-118305Memory corruption in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outsidGoogle Chrome
- CVE-2026-118306Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outsGoogle Chrome
- CVE-2026-58256GRR vulnerable to Remote Code Execution Via PHP Code InjectionJeromeDevome GRR
- CVE-2026-116692MLflow: Remote code execution on unauthenticated MLflow servers via third-party scorer deserialization importing caller-placed artifact modulesmlflow
- CVE-2026-112352Sunhillo SureLine Authentication Bypass via Session CookieSunhillo SureLine
- CVE-2026-104353Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)Adobe Campaign Classic
- CVE-2026-105780Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)Adobe Campaign Classic
- CVE-2026-105489Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe Campaign Classic
- CVE-2026-104350Adobe Campaign Classic (ACC) | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Campaign Classic
- CVE-2026-105781Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe Campaign Classic
- CVE-2026-104351Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)Adobe Campaign Classic
- CVE-2026-104354Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe Campaign Classic
- CVE-2026-105779Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe Campaign Classic
- CVE-2026-108015eMudhra Compromised Certificate vulnerability impacts HCL Notes ClientHCLSoftware Notes Client
- CVE-2026-114595Integer overflow or wraparound in EPICS BaseThe EPICS Community EPICS Base
- CVE-2026-48360Adobe Connect | Improper Control of Generation of Code ('Code Injection') (CWE-94)Adobe Connect Desktop App · Adobe Connect Android Mobile App
- CVE-2026-108014eMudhra Compromised Certificate vulnerability impacts HCL Domino ServerHCLSoftware Domino Server
- CVE-2026-108142A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.Veeam Backup and Replication
- CVE-2026-106076A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam BackuVeeam Backup for Microsoft
- CVE-2026-116863WordPress Newsletters plugin <= 4.18.2 - Cross Site Request Forgery (CSRF) vulnerabilityTribulant Software Newsletters
- CVE-2026-112709Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code ExecutionWatchGuard Fireware OS
- CVE-2026-103593Fireware OS Stack Buffer Overflow in Logging Service Allows Remote Code ExecutionWatchGuard Fireware OS
- CVE-2026-112710Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code ExecutionWatchGuard Fireware OS
- CVE-2026-93857Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code ExecutionWatchGuard Fireware OS
- CVE-2026-93866Fireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds WriteWatchGuard Fireware OS
- CVE-2026-103594Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code ExecutionWatchGuard Fireware OS
- CVE-2026-93865Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action InjectionWatchGuard Fireware OS
- CVE-2026-117603Electrum before 4.7.2 Nostr Wallet Connect Plugin Daily Spending Limit Bypassspesmilo electrum
- CVE-2026-117601Electrum before 4.8.3 Missing Signature Verification of Mempool Transactionsspesmilo electrum · electrum
- CVE-2026-117564nest-admin before 1.0.1 Authentication Bypass via Hardcoded JWT Secretbuqiyuan nest-admin
- CVE-2026-65145NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue.NVIDIA NeMo Agent Toolkit
- CVE-2026-115216Eclipse ioFog Operator disables TLS certificate verification when sending Controller and OIDC credentialsEclipse Foundation Eclipse ioFog
- CVE-2026-112362@fastify/express vulnerable to path-scoped middleware bypass via absolute-form request targets@fastify/express
- CVE-2026-117532REDAXO Core 5.3.0 before 5.21.4 Authentication Bypass via History Pluginredaxo core
- CVE-2026-82117Authentication Bypass by Spoofing Vulnerability in HiRDBHitachi HiRDB Server
- CVE-2026-82116Missing Authentication for Critical Function Vulnerability in HiRDBHitachi HiRDB Server
- CVE-2026-82118Stack-based Buffer Overflow Vulnerability in HiRDBHitachi HiRDB Server
- CVE-2026-82120Heap-based Buffer Overflow Vulnerability in HiRDBHitachi HiRDB Server
- CVE-2026-82119OS Command Injection Vulnerability in HiRDBHitachi HiRDB Server
- CVE-2026-82122Stack-based Buffer Overflow Vulnerability in HiRDBHitachi HiRDB Server
- CVE-2026-76939Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3Hitachi JP1/Automatic Job Management System 3 - Manager · H…
- CVE-2026-76936Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3Hitachi JP1/Automatic Job Management System 3 - Manager
- CVE-2026-76937Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3Hitachi JP1/Automatic Job Management System 3 - Manager
- CVE-2026-76938Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3Hitachi JP1/Automatic Job Management System 3 - Manager
- CVE-2026-76935Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3Hitachi JP1/Automatic Job Management System 3 - Manager
- CVE-2026-76934Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3Hitachi JP1/Automatic Job Management System 3 - Manager · H…
- CVE-2026-76932Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3Hitachi JP1/Automatic Job Management System 3 - Manager · H…
- CVE-2026-76933Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3Hitachi JP1/Automatic Job Management System 3 - Manager · H…
- CVE-2026-86577Out-of-bounds Write Vulnerability in JP1 ProductsHitachi JP1/Integrated Management 3 - Manager · Hitachi… +2
- CVE-2026-86576Heap-based Buffer Overflow Vulnerability in JP1 ProductsHitachi JP1/Integrated Management 3 - Manager · Hitachi… +2
- CVE-2026-86575Stack-based Buffer Overflow Vulnerability in JP1 ProductsHitachi JP1/Integrated Management 3 - Manager · Hitachi… +2
- CVE-2026-86574Heap-based Buffer Overflow Vulnerability in JP1/BaseHitachi JP1/Base
- CVE-2026-102788Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2balbooa.com Gridbox extension for Joomla
- CVE-2026-102789Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2balbooa.com Gridbox extension for Joomla
- CVE-2026-92885Qode Membership <= 2.0.6.2 - Authentication Bypass via Social LoginQode Themes Qode Membership
- CVE-2026-18450Supermicro BMC contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerabilitySMCI X12SPI
- CVE-2026-78845Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart Light Bulb 3.15.21, and Linkind Wi-Fi Smart Light Bulb 3.30.17 are…
High 179
- CVE-2026-104016jackson-dataformat-protobuf: signed integer overflow in string-length paths allows unbounded array allocation and OutOfMemoryErrorFasterXML jackson-dataformat-protobuf
- CVE-2026-118338Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside tGoogle Chrome
- CVE-2026-118356Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a cGoogle Chrome
- CVE-2026-118315Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code insGoogle Chrome
- CVE-2026-118330Use after free in Browser in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside tGoogle Chrome
- CVE-2026-118341Use after free in Modularization in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandGoogle Chrome
- CVE-2026-118347Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox Google Chrome
- CVE-2026-118314Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitGoogle Chrome
- CVE-2026-118335Improper input validation in Metrics in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbiGoogle Chrome
- CVE-2026-118346Use after free in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code insideGoogle Chrome
- CVE-2026-118304Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code insGoogle Chrome
- CVE-2026-118345Use after free in PDFium in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the Google Chrome
- CVE-2026-118313Use after free in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via aGoogle Chrome
- CVE-2026-118334Use after free in ImageCapture in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandboGoogle Chrome
- CVE-2026-118311Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside thGoogle Chrome
- CVE-2026-118343Improper input validation in ReadingList in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary Google Chrome
- CVE-2026-118359Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sGoogle Chrome
- CVE-2026-118327Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside thGoogle Chrome
- CVE-2026-118349Memory corruption in Payments in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandboxGoogle Chrome
- CVE-2026-118353Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via aGoogle Chrome
- CVE-2026-118358Memory corruption in WebAudio in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code insideGoogle Chrome
- CVE-2026-118336Improper input validation in Headless in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary codGoogle Chrome
- CVE-2026-118328Improper input validation in WebRTC in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code Google Chrome
- CVE-2026-118351Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox viaGoogle Chrome
- CVE-2026-118307Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sGoogle Chrome
- CVE-2026-118352Memory corruption in Cache in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside thGoogle Chrome
- CVE-2026-118354Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inGoogle Chrome
- CVE-2026-118329Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrGoogle Chrome
- CVE-2026-118320Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sGoogle Chrome
- CVE-2026-118317Memory corruption in HTML in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside theGoogle Chrome
- CVE-2026-118339Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox vGoogle Chrome
- CVE-2026-118350Use after free in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox viGoogle Chrome
- CVE-2026-118357Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside Google Chrome
- CVE-2026-118344Use after free in Layout in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via Google Chrome
- CVE-2026-118348Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inGoogle Chrome
- CVE-2026-118331Improper input validation in FileAPI in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary codeGoogle Chrome
- CVE-2026-59158Nuxt Ollama: public runtime configuration discloses the configured cloud API keythoda-dev nuxt-ollama · nuxt-ollama
- CVE-2026-58257GRR vulnerable to Arbitrary File Read and DeletionJeromeDevome GRR
- CVE-2026-58255Cronicle: Non-admin uid/gid injection in create_event/update_event → run-as-arbitrary-user (incl. root) — sibling of CVE-2026-39401jhuckaby Cronicle
- CVE-2026-58205GRR has a Reflected XSS issueJeromeDevome GRR
- CVE-2026-57190Asterisk: SQL Injection in cel_pgsql and cel_tds via CELGenUserEvent eventtype Fieldasterisk · certified-asterisk
- CVE-2026-62765Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityMicrosoft Edge
- CVE-2026-57191Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsingasterisk · certified-asterisk
- CVE-2026-57186Asterisk: CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parserasterisk · certified-asterisk
- CVE-2026-57200Asterisk: ARI REST-over-WebSocket read-only bypass allows arbitrary module path load and conditional RCEasterisk · certified-asterisk
- CVE-2026-57195Asterisk: NULL Pointer Dereference in HTTP AMI Digest Authenticationasterisk · certified-asterisk
- CVE-2026-85898Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityMicrosoft Edge
- CVE-2026-83831Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityMicrosoft Edge
- CVE-2026-116693dd-trace: ReDOS in URL query string obfuscationDataDog dd-trace-js · dd-trace
- CVE-2026-112351Sunhillo SureLine OS Command Injection via networkDiag.cgiSunhillo SureLine
- CVE-2026-112350Sunhillo SureLine Path Traversal via radarUpdater.cgiSunhillo SureLine
- CVE-2026-116690MLflow: Arbitrary file read on unauthenticated MLflow servers via prompt model version sourcemlflow
- CVE-2026-116688CKEditor: Cross-site scripting (XSS) in the engine packageckeditor5 · @ckeditor/ckeditor5-engine
- CVE-2026-112355MembershipWorks WordPress Plugin < 6.17 Information Disclosure via WordPress REST APIMembershipWorks
- GHSA-F897-62HF-6GXQMCP TypeScript SDK: HTTP server transports and handlers did not limit request body size or JSON-RPC batch length@modelcontextprotocol/sdk · @modelcontextprotocol/server +2
- CVE-2026-116683CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive valuesctfer-io terraform-provider-ctfd · github.com/ctfer-io/t… +1
- CVE-2026-115413AWS API MCP Server OAuth Token Audience Validation Bypassaws-api-mcp-server
- CVE-2026-57202Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writesasterisk · certified-asterisk
- CVE-2026-57188Asterisk: Stack buffer overflow in res_xmpp XMPP namespace prefix handlingasterisk · certified-asterisk
- CVE-2026-116682FileBrowser Quantum: Symlink following escapes user scope allowing arbitrary file read outside the served directorygtsteffaniak filebrowser · github.com/gtsteffaniak/filebrow…
- CVE-2026-88812X.Org Server XKB SetGeometry TextDoodad Double FreeX.org xorg-x11-server · x.org xwayland
- CVE-2026-102814Improper Authentication in TP-Link TDDP v2 Allows Root Command Execution in TP-Link RE305TP-Link Systems RE305
- CVE-2026-108303Tanium addressed an unauthorized code execution vulnerability in Certificate Manager.Tanium Certificate Manager
- CVE-2026-116656Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.Tanium Enforce
- CVE-2026-108306Tanium addressed a local privilege escalation vulnerability in End-User Notifications.Tanium Endpoint Configuration Toolset Solution · Tanium end…
- CVE-2026-108329Tanium addressed an unauthorized code execution vulnerability in Threat Response.Tanium Threat Response
- CVE-2026-108304Tanium addressed a local privilege escalation vulnerability in End-User Notifications.Tanium Endpoint Configuration Toolset Solution · Tanium end…
- CVE-2026-87086Tanium addressed a denial of service vulnerability in Provision.Tanium Provision
- CVE-2026-116649Tanium addressed an improper output sanitization vulnerability in Enforce.Tanium Enforce
- CVE-2026-116647Tanium addressed an improper output sanitization vulnerability in Comply.Tanium Comply
- CVE-2026-108307Tanium addressed a heap-based buffer overflow vulnerability in Index.Tanium Endpoint Configuration Toolset Solution · Tanium ind…
- CVE-2026-116662Tanium addressed a compression bomb vulnerability in Enforce.Tanium Enforce
- CVE-2026-108305Tanium addressed a local privilege escalation vulnerability in End-User Notifications.Tanium Endpoint Configuration Toolset Solution · Tanium end…
- CVE-2026-116676Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during planrunatlantis atlantis · github.com/runatlantis/atlantis
- GHSA-WF6J-7HVR-GR93Hydra legacy target blacklist permits unsafe PyYAML loadinghydra-core
- CVE-2026-57201Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Bufferasterisk · certified-asterisk
- CVE-2026-114598Access of resource using incompatible type ('type confusion') in EPICS BaseThe EPICS Community EPICS Base
- CVE-2026-114597Improper handling of length parameter inconsistency in EPICS BaseThe EPICS Community EPICS Base
- CVE-2026-114596Integer overflow or wraparound in EPICS BaseThe EPICS Community EPICS Base
- CVE-2026-116675TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serializationtinymce · tinymce/tinymce
- CVE-2026-57197Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex)asterisk · certified-asterisk
- CVE-2026-109090libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflowx.org libXi
- CVE-2026-116672Authlib RFC 7592 examples omit registration-access-token client bindingauthlib
- CVE-2026-48379Substance3D - Painter | Stack-based Buffer Overflow (CWE-121)Adobe Substance 3D Painter
- CVE-2026-104349Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427)Adobe Creative Cloud Desktop Application
- CVE-2026-107671A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally befVeeam ONE
- CVE-2026-106077A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server withVeeam Backup for Microsoft
- CVE-2026-105477A vulnerability in Veeam Agent for Linux allows for local privilege escalation.Veeam Agent for Linux
- CVE-2026-77167Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc_share_external database table.Nextcloud server
- CVE-2026-113775Dynamic Library Loading Process Control in Autodesk Fusion DesktopAutodesk Fusion
- CVE-2026-109089libXi XGetDeviceControl Control Type Mismatch Heap Buffer OverflowX.Org libXi
- CVE-2026-102638Electronic Library Description Stored Cross-Site Scripting (XSS) in Autodesk Fusion DesktopAutodesk Fusion
- CVE-2026-102637Fusion Protocol URL Reflected Cross-Site Scripting (XSS) in Autodesk Fusion DesktopAutodesk Fusion
- CVE-2026-102636Design Name Stored Cross-Site Scripting (XSS) in Autodesk Fusion DesktopAutodesk Fusion
- CVE-2026-107672Stack File Trusted Markdown Injection in Autodesk Fusion Post Processor UtilityAutodesk Fusion Post Processor Utility
- CVE-2026-90465Fireware OS Missing Authentication in FireCluster Sync Allows Privilege EscalationWatchGuard Fireware OS
- CVE-2026-93862Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of ServiceWatchGuard Fireware OS
- CVE-2026-90464Fireware OS Missing Command Validation allows Authenticated Arbitrary File Modification as RootWatchGuard Fireware OS
- CVE-2026-93434Fireware OS XPath Injection in SSH Authentication Allows Blind Extraction of Configuration SecretsWatchGuard Fireware OS
- CVE-2026-90442Fireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of ServiceWatchGuard Fireware OS
- CVE-2026-93864Fireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as RootWatchGuard Fireware OS
- CVE-2026-111107Fireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of ServiceWatchGuard Fireware OS
- GHSA-3W55-933P-8PV5Strands Agents: Local Privilege Escalation via Symlink Attack in Default Session File Storagestrands-agents
- GHSA-G5FF-637F-6Q2MLiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials`litellm
- CVE-2026-1041893Dviewer-Nextcloud: Share password not enforced when streaming 3D models from a public link sharemaz1987in 3Dviewer-Nextcloud
- CVE-2026-111585Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer OverflowTeamViewer Full Client · TeamViewer Portable +1
- CVE-2026-111584Local Privilege Escalation via Race Condition in TeamViewer Patch Management for WindowsTeamViewer Remote - Patch Management
- CVE-2026-111583Local Privilege Escalation during Advanced Asset Management Installation in TeamViewer Client for WindowsTeamViewer Full Client · TeamViewer Host
- CVE-2026-111582Local Privilege Escalation via DLL Hijacking in TeamViewer Monitoring for WindowsTeamViewer Remote Management - Monitoring
- CVE-2026-92377Local Privilege Escalation via DLL Sideloading in TeamViewer Patch Management for WindowsTeamViewer Full Client · TeamViewer Host
- CVE-2026-92376Local Privilege Escalation via IPC Broker Impersonation in TeamViewer Remote Management Monitoring for WindowsTeamViewer Remote Management - Monitoring
- CVE-2026-92375Local privilege escalation via improper IPC access control in TeamViewer Remote Management MonitoringTeamViewer Full Client · TeamViewer Host +1
- CVE-2026-92374Privilege Escalation via Insecure Package Handling in TeamViewer Full Client and Host for macOSTeamViewer Full Client · TeamViewer Host
- CVE-2026-92372Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code ExecutionTeamViewer Full Client
- CVE-2026-117604Grav from 1.7.53.3 before 1.7.53.6 Clockwork Profiler Authorization Bypass via Loopback Fallbackgetgrav grav
- CVE-2026-118008Privilege escalation in the DOM: Navigation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-94347PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70,Dell PowerProtect Data Domain Virtual Edition
- CVE-2026-94346PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70,Dell PowerProtect Data Domain Virtual Edition
- CVE-2026-117602Electrum before 4.7.2 External Plugin Authorization Bypass Local Code Executionspesmilo electrum
- CVE-2026-117573hagent through commit 761eec6 OS Command Injection via Arduino and ESP32 MCP Toolsmasc-ucsc hagent
- CVE-2026-117569Kali-GPT through commit a608c74 OS Command Injection via MCP Scanner Tool Parametersalishahid74 kali-gpt
- CVE-2026-117568mcp-ffmpeg through 1.0.5 OS Command Injection via videoPath and outputDirbitscorp-mcp mcp-ffmpeg
- CVE-2026-117567esp-mcp through commit 28afddf OS Command Injection via MCP Tool Parametershorw esp-mcp
- CVE-2026-117561sf-mcp through 1.3.2 OS Command Injection via Salesforce CLI Flag Valuescodefriar sf-mcp
- CVE-2026-117560ATXP Gemini CLI Extension through 1.0.0 OS Command Injection via MCP Toolsatxp gemini-cli-extension
- CVE-2026-117559DroidMind through 0.4.0 Command Injection via Shell Allowlist Bypasshyperb1iss droidmind
- CVE-2026-117558ai-sdlc MCP Server through 0.31.2 Command Injection via check_issue and check_pr_statusai-sdlc-framework ai-sdlc
- CVE-2026-117553Umbraco CMS before 17.7.2 and 18.2.2 Account Takeover via Host Header PoisoningUmbraco-CMS
- CVE-2026-92546Authentication Bypass with X-Agentic-Ally-Token in Keepnet Labs Agentic AI / Agentic AllyKeepnet Labs Cybersecurity Agentic AI / Agentic Ally
- CVE-2026-47486NVIDIA PhysX for all platforms contains a vulnerability where an attacker could cause an out-of-bounds write.NVIDIA PhysX
- CVE-2026-65151NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue.NVIDIA NeMo Agent Toolkit
- CVE-2026-65120NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery.NVIDIA TensorRT-LLM
- CVE-2026-24269NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery.NVIDIA TensorRT-LLM
- CVE-2026-65119NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker could cause inclusiNVIDIA TensorRT-LLM
- CVE-2026-100164User Enumeration in Rolantis Information Technologies' AgentisRolantis Information Technologies Tourism Industry and Trad…
- CVE-2026-106087TRO600 contains an arbitrary file read vulnerability.Hitachi Energy TRO600 Series Firmware
- CVE-2026-10756TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restrictions and access services intended to Hitachi Energy TRO600 Series Firmware
- CVE-2026-13162An OS command vulnerability exists in CoreTec product that allows authenticated users with certain roles to execute arbitrary system commandHitachi Energy CoreTec
- CVE-2026-109995Advanced Views <= 3.9.6 - Unauthenticated Stored Cross-Site Scripting via Comment Contentwplakeorg Advanced Views – Display Framework – Gutenberg/El…
- CVE-2026-41021Eaton easyE4 uses an insufficiently strong password policy.Eaton easyE4
- CVE-2026-102800Joomla Extension - dj-extensions.com - Unauthenticated Stored XSS in DJ-HelpfulArticles < 1.3.0dj-extensions.com DJ-HelpfulArticles extension for Joomla
- CVE-2026-41020Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacker with access to captured authenticationEaton easyE4
- CVE-2026-4337Unrestricted Upload of File in PuMuKIT applicationPuMuKIT
- CVE-2026-117540svg-sanitizer before 1.1.0 Quadratic CPU-Exhaustion DoS via PHP-Tag Stripping Loopdarylldoyle svg-sanitizer
- CVE-2026-117536REDAXO before 5.21.3 CSRF Token Bypass via users/users Privilege Escalationredaxo core
- CVE-2026-116899REDAXO before 5.21.4 Broken Access Control in Slice Operationsredaxo core
- CVE-2026-116898REDAXO before 5.21.4 Missing Authorization in Media Pool Bulk Moveredaxo core
- CVE-2026-116897REDAXO before 5.21.4 Missing Authorization in Version and History Previewsredaxo core
- CVE-2026-116896REDAXO before 5.21.5 Privilege Escalation via Backup Export of Authentication Tablesredaxo core
- CVE-2026-117466In affected versions of Octopus Server, a user holding the System Manager role could escalate their privileges to full system Administrator.Octopus Deploy Octopus Server
- CVE-2026-117341In affected versions of Octopus Server, creating a user invitation writes the invitation code to the audit event log.Octopus Deploy Octopus Server
- CVE-2026-116870In affected versions of Octopus Server, OIDC token issuer validation was performed inconsistently.Octopus Deploy Octopus Server
- CVE-2026-116880Semantic MediaWiki 3.0.0 before 7.3.1 CSRF via Special:SMWAdmin Maintenance ActionsSemanticMediaWiki
- CVE-2026-116878Semantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via Special:PropertyLabelSimilaritySemanticMediaWiki
- CVE-2026-116877Semantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via #set_recurring_eventSemanticMediaWiki
- CVE-2026-116876Semantic MediaWiki 2.5.0 before 7.3.1 Missing Authorization via Is edit protectedSemanticMediaWiki
- CVE-2026-116872Semantic MediaWiki 3.0.0 before 7.3.1 Denial of Service via Special:Search Compact FiltersSemanticMediaWiki
- CVE-2026-116871Semantic MediaWiki 3.0.0 before 7.3.1 Uncontrolled Recursion via Special:AskSemanticMediaWiki
- CVE-2026-82121Origin Validation Error Vulnerability in HiRDBHitachi HiRDB Server
- CVE-2026-117494Multiple vulnerabilities in Sisense’s Cloud BI PlatformSisense Cloud BI Platform
- CVE-2026-117493Multiple vulnerabilities in Sisense’s Cloud BI PlatformSisense Cloud BI Platform
- CVE-2026-85299Missing Authorization in Compute Engine allows Cross-Project Disk ExfiltrationGoogle Cloud Compute Engine
- CVE-2026-65211Supermicro BMC IPMI feature contains Critical Privilege Escalation and Arbitrary Access vulnerabilitySMCI MBD-X12SPI
- CVE-2026-65220Supermicro BMC IPMI feature contains a Privilege escalation vulnerabilitySMCI MBD-X12SPI
- CVE-2026-65219Supermicro BMC contains Unordered RAKP Message 3 Grants an IPMI Session vulnerabilitySMCI MBD-X12SPI
- CVE-2026-18449Supermicro BMC contains a SMCRAKP Fixed Key vulnerabilitySMCI X12SPI
- CVE-2026-16521Supermicro BMC's syslog feature contains a command injection vulnerabilitySMCI MBD-X12STW-F
- CVE-2026-111461SMS upgrade argument reaches system() unescaped in OnCell G3150A-LTE SeriesMoxa OnCell G3150A-LTE Series
- CVE-2026-111460Static HTTPS private key and CA private key in firmware in OnCell G3150A-LTE SeriesMoxa OnCell G3150A-LTE Series
- CVE-2026-111459Unauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client)Moxa Remote Connect Suite
- CVE-2026-75891Kirki <= 6.2.5 - Authenticated (Subscriber+) PHP Object Injection to Administrator Account Takeover via 'get-single-symbol' AJAX Endpointthemeum Kirki – Freeform Page Builder, Website Builder & Cu…
- CVE-2026-111820Analytics Insights <= 6.3.12 - Unauthenticated Stored Cross-Site Scripting via GA4 Realtime Page Titledeconf Analytics Insights – Google Analytics Dashboard for…
- CVE-2026-116839A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found Ubiquiti airMAX M
- CVE-2026-116838A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found Ubiquiti airMAX M
- CVE-2026-116837A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarUbiquiti airMAX M · Ubiquiti LTU PTMP +2
- CVE-2026-116843Mistral Vibe before 3.0.3 RCE via Git Filter Drivers in Worktree Modemistralai mistral-vibe
- CVE-2026-116816llama.cpp b5899 before b10261 Heap Out-of-Bounds Write via plamo2 Tokenizerggml-org llama.cpp
- CVE-2024-58400llama.cpp before b3701 Out-of-Bounds Read in llama_decode via Token IDsggml-org llama.cpp
- CVE-2026-116836A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting (XSS) vulneraUbiquiti airMAX M
Medium, low and unrated 383
- CVE-2026-118129jeremyckahn Chitchatter PostMessage Bootstrap.tsx isConfigMessageEvent improper authenticationjeremyckahn Chitchatter
- CVE-2026-118319Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially read memory inside the sandbox viGoogle Chrome
- CVE-2026-118333Missing authorization in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin policy via a crafted…Google Chrome
- CVE-2026-118337Improper access control in Forms in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin policy via a…Google Chrome
- CVE-2026-118322Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially read memory inside the sandbox vGoogle Chrome
- CVE-2026-118318Improper access control in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to read memory via a crafted HTML page.Google Chrome
- CVE-2026-50571WebSub: Reflected script execution through intent-verification challengesw3c websub
- CVE-2026-22063CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp ProductsNetApp ONTAP · NetApp StorageGRID +1
- CVE-2026-58496ThorVG: Out-of-bounds Read in SFNT/TTF Font Loader via Memory APIthorvg
- CVE-2026-118128a2aproject a2a-js Task Status Update result_manager.ts ResultManager.applyStatusUpdate race conditiona2aproject a2a-js
- CVE-2026-57199Asterisk: Asterisk app_sms.c copies externally controlled SMS lengths into fixed in-struct buffersasterisk · certified-asterisk
- CVE-2026-57203Asterisk: Local privilege escalation through ast_loggrabber's world-writable helper locationasterisk · certified-asterisk
- CVE-2026-97045Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/netgolang.org/x/net/html · golang.org/x/net
- CVE-2026-78661Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/netgolang.org/x/net/html · golang.org/x/net
- CVE-2026-57192Asterisk: Out-of-Bounds Write in Codec2 Decoder Due to Floor/Ceil Sample Count Mismatchasterisk · certified-asterisk
- CVE-2026-116775pageant: unbounded frame buffering on peer-controlled 4-byte length prefix (memory-exhaustion DoS)Eugeny russh · pageant
- CVE-2026-116774russh: peer-declared zero maximum packet size permanently stalls channel writes (silent AsyncWrite hang)Eugeny russh · russh
- CVE-2026-116773russh's SSH client is susceptible to unbounded allocations via EXT_INFO packetsEugeny russh · russh
- CVE-2026-116696russh's SSH agent server is susceptible to unbound allocations via repeated SSH_AGENT_CONSTRAIN_CONFIRM messagesEugeny russh · russh
- CVE-2026-116695Crass: Incorrect tokenization of bad URLs enables CSS sanitizer bypassrgrove crass · crass
- CVE-2026-116694OpenTelemetry Python: Unbounded memory allocation in Jaeger baggage propagationopen-telemetry opentelemetry-python · opentelemetry-propaga…
- CVE-2026-103995Lenient parsing of integers for response body and chunk framingPython Software Foundation CPython
- CVE-2026-116691MLflow CrewAI autologging records LLM provider API keys in logged trace spansmlflow
- CVE-2026-116689follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirectsfollow-redirects
- CVE-2026-116687CKEditor: Cross-site scripting (XSS) in the engine packageckeditor5 · @ckeditor/ckeditor5-engine
- CVE-2026-116686Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemasmodelcontextprotocol python-sdk · mcp
- CVE-2026-116685Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodiesmodelcontextprotocol python-sdk · mcp
- CVE-2026-116684Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource servermodelcontextprotocol python-sdk · mcp
- CVE-2026-118180Matrix homeserver could redirect the chat session to a local file or network shareMozilla Thunderbird
- CVE-2026-118179Request forgery via news: linksMozilla Thunderbird
- CVE-2026-118178RSS feed could redirect its subscription to a local file or network shareMozilla Thunderbird
- CVE-2026-118177Calendar discovery accepted local file and remote network share locationsMozilla Thunderbird
- CVE-2026-118176Bypass of remote UNC path restriction in mailbox: URLsMozilla Thunderbird
- CVE-2026-118175Content of other messages could be included when replying to a crafted messageMozilla Thunderbird
- CVE-2026-118174Displaying a message could load an attacker-chosen URL through an OpenPGP key attachmentMozilla Thunderbird
- CVE-2026-118173MISP Guard Incomplete Tag Validation Allows Non-Allowed Taxonomy Tags to Bypass Feed Policy Enforcementmisp-guard
- CVE-2026-118171CVE-2026-118171Strapi Open Source and Enterprise Headless CMS
- CVE-2026-118172CVE-2026-118172Strapi Open Source and Enterprise Headless CMS
- CVE-2026-118170CVE-2026-118170Strapi Open Source and Enterprise Headless CMS
- CVE-2026-117526reduxjs redux-devtools Remotedev Server evalAction code injectionreduxjs redux-devtools
- CVE-2026-116680Homebox generic notifier SSRF via HTTP redirect after URL validationsysadminsmedia homebox
- CVE-2026-102816Unauthenticated Wireless Regulatory Region Configuration in TP-Link RE305TP-Link Systems RE305
- CVE-2026-102815Command Injection in tmpServer Allows Local Privilege Escalation in TP-Link RE305TP-Link Systems RE305
- CVE-2026-102813Administrator Password Reset Through the Verification-Code Interface in TP-Link RE305TP-Link Systems RE305
- CVE-2026-102812Hardcoded AES-128 Key and Fixed IV in Configuration Backup Encryption in TP-Link RE305 and Archer C7TP-Link Systems RE305 · TP-Link Systems Archer C7
- CVE-2026-118132CVE-2026-118132NextChat
- CVE-2026-108311Tanium addressed an insufficient logging vulnerability in Tanium Server.Tanium Server
- CVE-2026-108316Tanium addressed an information disclosure vulnerability in Tanium Server.Tanium Server
- CVE-2026-108325Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.Tanium Reputation
- CVE-2026-116659Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.Tanium Enforce
- CVE-2026-108302Tanium addressed an improper access controls vulnerability in Comply.Tanium Comply
- CVE-2026-108332Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.Tanium Endpoint Configuration Toolset Solution · Tanium thr…
- CVE-2026-108301Tanium addressed an improper access controls vulnerability in Comply.Tanium Comply
- CVE-2026-108309Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.Tanium Endpoint Configuration Toolset Solution · Tanium per…
- CVE-2026-116658Tanium addressed a denial of service vulnerability in Enforce.Tanium Enforce
- CVE-2026-108313Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.Tanium Server
- CVE-2026-116660Tanium addressed an improper access controls vulnerability in Enforce.Tanium Enforce
- CVE-2026-108326Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.Tanium Endpoint Configuration Toolset Solution · Tanium cx-…
- CVE-2026-108330Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.Tanium Endpoint Configuration Toolset Solution · Tanium thr…
- CVE-2026-116657Tanium addressed a denial of service vulnerability in Enforce.Tanium Enforce
- CVE-2026-108333Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.Tanium Endpoint Configuration Toolset Solution · Tanium thr…
- CVE-2026-116679Neko: Authorization bypass in legacy WebRTC input handlingm1k1o neko · github.com/m1k1o/neko/server
- CVE-2026-108310Tanium addressed a denial of service vulnerability in Tanium Server.Tanium Server
- CVE-2026-108331Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.Tanium Endpoint Configuration Toolset Solution · Tanium thr…
- CVE-2026-87085Tanium addressed a SQL injection vulnerability in Provision.Tanium Provision
- CVE-2026-108308Tanium addressed a SQL injection vulnerability in Patch.Tanium Patch
- CVE-2026-117516oretnom23 php-travel-agency-system Contact Form contact_insert.php sql injectionoretnom23 php-travel-agency-system
- CVE-2026-108328Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response.Tanium Threat Response
- CVE-2026-116678Vaultwarden: Icon endpoint SSRF fix bypass via second-stage favicon IP literal URLsdani-garcia vaultwarden
- CVE-2026-118131CVE-2026-118131GnuPG
- CVE-2026-116677OpenWISP Controller CA CRL REST API does not scope requests to managed organizationsopenwisp-controller
- CVE-2026-16491CVE-2026-16491 CVE RecordGrafana Enterprise · Grafana OSS
- CVE-2026-117515oretnom23 php-travel-agency-system traceapplication.php sql injectionoretnom23 php-travel-agency-system
- CVE-2026-117514oretnom23 php-travel-agency-system Admin Record Pages customer_detail.php sql injectionoretnom23 php-travel-agency-system
- CVE-2026-57189Asterisk: Possible RED T.140 Generation Accumulation OOB Writeasterisk · certified-asterisk
- CVE-2026-57194Asterisk: chan_unistim DIALPAGE digit handling can overflow phone_number and crash Asteriskasterisk · certified-asterisk
- CVE-2026-57198Asterisk: Possible RED T.140 Heap Buffer Overflowasterisk · certified-asterisk
- CVE-2026-117513oretnom23 php-travel-agency-system Admin Search Pages customer_search.php sql injectionoretnom23 php-travel-agency-system
- CVE-2026-116674systeminformation: Prototype pollution in `networkStats()` via the interface namesebhildebrandt systeminformation · systeminformation
- CVE-2026-57185Asterisk: Buffer over-read in Asterisk PJSIP MWI body parserasterisk · certified-asterisk
- CVE-2026-116673systeminformation: Path traversal in Linux networkStats() allows symlink-based file disclosure outside /sys/class/netsebhildebrandt systeminformation · systeminformation
- CVE-2026-117512oretnom23 php-travel-agency-system employee_insert.php unrestricted uploadoretnom23 php-travel-agency-system
- CVE-2026-109088libXtst RECORD EnableContext Reply Endless LoopX.org libXtst
- CVE-2026-48380Substance3D - Painter | Out-of-bounds Read (CWE-125)Adobe Substance 3D Painter
- CVE-2025-64394A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam BackupVeeam Backup for Microsoft
- CVE-2026-108141A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to wVeeam Backup and Replication
- CVE-2026-106078A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token and receive responses Veeam Backup for Microsoft
- CVE-2026-108140A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to wVeeam Backup and Replication
- CVE-2026-82984When a team was configured as "visible to everyone", the web UI correctly blocked non-members from viewing the team ("You are not a member oNextcloud Server
- CVE-2026-77173A user could create a docx or odt file with a # in the filename with confidential information such as a credit card number and have it not bNextcloud Files Confidential
- CVE-2026-67400A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or guest token.Nextcloud Richdocuments
- CVE-2026-77171A public shared collective always allowed recipients of the link to create pages.Nextcloud Collectives
- CVE-2026-77172App passwords were allowed to bypass password confirmation on sensitive endpoints.Nextcloud Server
- CVE-2026-87897A SSRF vulnerability found that enables access to internal Chrome Devtools Protocol APIs that can leak the JWT authentication token for anotNextcloud whiteboard
- CVE-2026-82983The Tables app's share-listing endpoint (GET /apps/tables/share/table/{tableId}) did not verify that the requesting user has manage-level peNextcloud Tables
- CVE-2026-82986The user in a group can bypass the group restriction set by an administrator on link sharing, creating share links for a table even though tNextcloud Tables
- CVE-2026-54462knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustionknative pkg · knative.dev/pkg
- CVE-2026-112353GFI KerioConnect < 10.0.8p2 Stored XSS via SVG AttachmentGFI USA GFI KerioConnect
- GHSA-VP88-798V-H67Frustls: ECH rejection can expose buffered application data to authenticated outer server before `ech_required` alertrustls
- GHSA-W44R-93J7-QV28rustls: An unauthenticated ServerHello poisons the per-name key-exchange record, so later ClientHellos carry only a classical X25519 sharerustls
- GHSA-C8M5-C952-6CM4Rustls: Session Debug formatting exposes TLS master secrets and resumption PSKsrustls
- GHSA-H2V8-394M-P7VVRustls: Brotli certificate decompression can allocate an attacker-controlled amount of memory up to 1 GiB before authentication.rustls
- CVE-2026-117511desmondmorris node-tesseract Command Builder tesseract.js process os command injectiondesmondmorris node-tesseract
- CVE-2026-115495Mobile VPN with SSL Client for Windows: Cleartext Transmission of VPN Credentials over Local Management SocketWatchGuard Mobile VPN with SSL Client
- CVE-2026-113881Fireware OS Stack Buffer Overflow in VPN Network Access Enforcement Allows Unprivileged Code ExecutionWatchGuard Fireware OS
- CVE-2026-82332Fireware OS Improper Authentication in AuthPoint MFA Verification Allows Session HijackingWatchGuard Fireware OS
- CVE-2026-104381Fireware OS Missing Authentication in FireCluster State Sync Allows BOVPN Tunnel Denial of ServiceWatchGuard Fireware OS
- CVE-2026-109823Host filesystem path disclosure via DNS rebindingtidewave-ai tidewave · tidewave
- CVE-2026-117510Dexmal Dexbotic gr00tsonic Checkpoint Loader gr00tsonic_arch.py load_pretrained_gr00t path traversalDexmal Dexbotic
- GHSA-763V-5PJM-FX36Strands Agents: Default FileSessionManager storage is world-readable on shared systemsstrands-agents
- GHSA-HHWW-MRG2-969HLiteLLM vulnerable to reflected XSS in /sso/debug/callbacklitellm
- CVE-2026-117509crownpku Rasa_NLU_Chi Model Persistor persistor.py Persistor._decompress path traversalcrownpku Rasa_NLU_Chi
- CVE-2026-117507a2aproject a2a-java TaskManager.saveTaskEvent race conditiona2aproject a2a-java
- CVE-2026-117506a2aproject a2a-java Push Notification Config Store JpaDatabasePushNotificationConfigStore.java InMemoryPushNotificationConfigStore.setInfo resource consumptiona2aproject a2a-java
- CVE-2026-117505a2aproject a2a-java ChildQueue queue.offer resource consumptiona2aproject a2a-java
- CVE-2026-105987Stored XSS in KGS Software tia ViewerKGS Software tia Viewer
- CVE-2026-118027Frame poisoning in the Layout componentMozilla Firefox
- CVE-2026-118026Invalid pointer in the JavaScript: GC componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118025Other issue in the SVG componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118024Use-after-free in the Graphics: Text componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118023Sandbox escape due to use-after-free in the Graphics: WebRender componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118022Sandbox escape due to use-after-free in the Disability Access APIs componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118021Sandbox escape due to use-after-free in the XPCOM componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118020Use-after-free in the Layout componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118019Race condition, use-after-free in the DOM: File componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118018Spoofing issue in the Downloads component in Firefox for AndroidMozilla Firefox
- CVE-2026-118017Use-after-free in the SVG componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118016Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118015Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118014Use-after-free in the JavaScript Engine: JIT componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118013Use-after-free in the Layout: Images, Video, and HTML Frames componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118012Use-after-free in the DOM: Animation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118011Frame poisoning in the CSS Parsing and Computation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118010Use-after-free in the Disability Access APIs componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118009Integer overflow, use-after-free in the Graphics: Text componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118007Use-after-free in the JavaScript: GC componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118006Privilege escalation due to use-after-free in the WebRTC: Signaling componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118005Use-after-free in the WebRTC: Signaling componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118004Incorrect boundary conditions in the CSS Transitions and Animations componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118003Information disclosure in the Networking: DNS componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118002Information disclosure due to race condition in the Networking componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118000Information disclosure in the Networking: HTTP componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117999Race condition in the IPC componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117998Mitigation bypass in the DOM: Push Subscriptions componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117997Sandbox escape due to use-after-free in the Widget componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117996Incorrect boundary conditions in the WebRTC componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117995Privilege escalation in the DOM: UI Events & Focus Handling componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117994Use-after-free in the JavaScript: GC componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117993Integer overflow in the Graphics: Text componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117992Information disclosure in the CSS Parsing and Computation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117991Incorrect boundary conditions in the Layout: Text and Fonts componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117990Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117989Use-after-free in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117988Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117987Use-after-free in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117986Use-after-free in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117985Sandbox escape due to use-after-free in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117984Incorrect boundary conditions in the Layout: Scrolling and Overflow componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117983Use-after-free in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117982Invalid pointer in the JavaScript Engine: JIT componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117981Privilege escalation in the Toolkit componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117980Use-after-free in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117979Incorrect boundary conditions in the Graphics: WebRender componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117978Incorrect boundary conditions in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117977Other issue in the Console componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117976Site isolation issue in the DOM: Navigation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117975Sandbox escape due to invalid pointer in the Graphics: WebRender componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117974Use-after-free in the XML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117973Use-after-free in the Networking: DNS componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117972Use-after-free in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117971Sandbox escape due to use-after-free in the Print Preview componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117970Race condition in the Disability Access APIs componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117969Invalid pointer in the JavaScript Engine: JIT componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117968Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117967Mitigation bypass in the DOM: Security componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117966Site isolation issue in the Networking: HTTP componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117965Same-origin policy bypass in the Address Bar componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117964Use-after-free in the Panning and Zooming componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117963Incorrect boundary conditions in the DOM: Service Workers componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117962Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117961Incorrect boundary conditions in the Layout: Text and Fonts componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117960Spoofing issue in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117959Site isolation issue in the DOM: Service Workers componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117958Site isolation issue in the Networking: HTTP componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117957Cryptographic issue in the WebRTC: Networking componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117956Invalid pointer in the Nimbus Desktop Client componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117955JIT miscompilation in the JavaScript: WebAssembly componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117954Use-after-free in the Layout: Positioned componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117953Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117952Uninitialized memory in the Networking componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117951Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117950Incorrect boundary conditions in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117949Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117948Use-after-free in the SVG componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117947Use-after-free in the XML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117946Incorrect boundary conditions in the JavaScript Engine componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117945Incorrect boundary conditions in the XML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117944Use-after-free in the Layout componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117943Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117942Incorrect boundary conditions in the JavaScript Engine: JIT componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117941Use-after-free in the DOM: CSS Object Model componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117940Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117939Use-after-free in the XML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117938Use-after-free in the Layout componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117937Invalid pointer in the JavaScript Engine componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117936Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117935Use-after-free in the DOM: Bindings (WebIDL) componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117934Use-after-free in the Layout componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117933Frame poisoning in the CSS Parsing and Computation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117932Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117931Use-after-free in the DOM: Events componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117930Use-after-free in the DOM: Bindings (WebIDL) componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117929Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117928Same-origin policy bypass in the CSS Parsing and Computation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117927Use-after-free in the SVG componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117926Incorrect boundary conditions in the SVG componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117925Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117924Use-after-free in the XSLT componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117923Use-after-free in the Audio/Video componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117922Use-after-free in the Networking: WebSockets componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117921Use-after-free in the CSS Parsing and Computation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117920Use-after-free in the DOM: HTML Parser componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117919Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117918Use-after-free in the Graphics: Canvas2D componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117917Invalid pointer in the Graphics: WebRender componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117916Use-after-free in the XSLT componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117915Incorrect boundary conditions in the Layout: Block and Inline componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117914Use-after-free in the SVG componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117913Use-after-free in the SVG componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117912Same-origin policy bypass in the CSS Parsing and Computation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117911Use-after-free in the Audio/Video: Playback componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117910Invalid pointer in the JavaScript Engine componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117909Use-after-free in the JavaScript: GC componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117908Use-after-free in the Graphics: ImageLib componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117907Use-after-free in the Networking componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117906Use-after-free in the CSS Parsing and Computation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117905Use-after-free in the Audio/Video: Playback componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117904Use-after-free in the JavaScript: GC componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117903Use-after-free in the Audio/Video componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117902Use-after-free in the Layout: Text and Fonts componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117901Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117900Use-after-free in the DOM: Editor componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117899Use-after-free in the Networking: HTTP componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117898Use-after-free in the JavaScript Engine: JIT componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117897Incorrect boundary conditions in the Layout: Tables componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117896Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117895Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117894Incorrect boundary conditions in the WebRTC: Signaling componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117893Incorrect boundary conditions in the Security: PSM componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117892Privilege escalation due to use-after-free in the WebRTC: Networking componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117891Use-after-free in the JavaScript Engine: JIT componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117890JIT miscompilation in the JavaScript Engine: JIT componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117889Incorrect boundary conditions in the JavaScript Engine componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117888Uninitialized memory in the Graphics: Canvas2D componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117887Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117886Incorrect boundary conditions in the Graphics: Text componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117885Use-after-free in the Layout: Grid componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117884Use-after-free in the Networking componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117883Use-after-free in the DOM: HTML Parser componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117882Use-after-free in the Layout componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117881Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117880Use-after-free in the XML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117879Incorrect boundary conditions in the Layout: Tables componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117878Other issue, use-after-free in the Storage: IndexedDB componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117877Use-after-free in the Layout: Text and Fonts componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117876Use-after-free in the Layout: Text and Fonts componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117875Use-after-free in the Layout: Scrolling and Overflow componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117874Use-after-free in the Internationalization componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117873Incorrect boundary conditions in the Audio/Video: Playback componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117872Use-after-free in the JavaScript: Standard Library componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117871Invalid pointer in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117870Use-after-free in the JavaScript Engine componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117869Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117868Sandbox escape in the DOM: Networking componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117867Use-after-free in the Layout componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117866Privilege escalation due to use-after-free in the Graphics: Canvas2D componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117865Use-after-free in the JavaScript: GC componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117864Sandbox escape in the Form Manager componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117863Information disclosure due to uninitialized memory in the Audio/Video componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117862Privilege escalation due to incorrect boundary conditions in the Networking componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117861Sandbox escape in the DOM: Navigation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117860Same-origin policy bypass in the DOM: Navigation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117504a2aproject a2a-go Distributed Manager distributed_manager.go Cancel denial of servicea2aproject a2a-go
- CVE-2026-90725Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-117503a2aproject a2a-go REST SSE handler rest.go resource consumptiona2aproject a2a-go
- CVE-2026-68866PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 releaseDell PowerProtect Data Domain
- CVE-2026-90726Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-90727Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-10537Remote unauthenticated information disclosure and denial of service due to unauthenticated service accessBMC Control-M/Enterprise Manager · BMC Control-M/Server
- CVE-2026-16307IDOR in Netiket Information Technologies' EdoWEBNetiket Information Technologies EdoWEB
- CVE-2026-12887In affected versions of Octopus Server, a user with permission to upload a malicious nuget package is able to deploy a script step so the scOctopus Deploy Octopus Server
- CVE-2026-117570nmap-mcp through commit 3636afa Permissive NSE Script Allowlist in scan_vulnerabilitiesVorota-ai nmap-mcp
- CVE-2026-117566EasyImages2.0 through 2.8.6 Unauthenticated Path Traversal via down.php, thumb.php and info.phpicret EasyImages2.0
- CVE-2026-117565Artalk before 2.10.1 Unauthenticated SSRF via Comment Page Title FetchArtalkJS Artalk
- CVE-2026-117563MrDoc through 1.1.1 Broken Access Control via manage_doc_sharezmister2016 MrDoc
- CVE-2026-117562rssant 1.9.0 through 1.9.1 Information Disclosure via publish.story_get Endpointanyant rssant
- CVE-2026-117557SDL_image through 3.4.8 and 2.8.12 Stack Out-of-Bounds Read in ILBM Loaderlibsdl-org SDL_image
- CVE-2026-117556zchunk before 1.5.5 Heap Out-of-Bounds Read via read_preface()zchunk
- CVE-2026-117555GreycLab CImg through 4.0.6 Heap Out-of-Bounds Read via Integer Overflow in _load_bmp()GreycLab CImg
- CVE-2026-117554Admidio before 5.0.17 Event Guest Restriction Bypass via events_function.phpadmidio
- CVE-2026-116627Improper neutralization of input during web page generation ('Cross-site Scripting') in the notifications feature in Devolutions PowerShell Devolutions PowerShell Universal
- CVE-2026-15586OTP Brute-Force Account Takeover in Idvlabs Software's Ontimeİdvlabs Software and Consulting Services Ontime
- CVE-2026-114409Docker Desktop logs can expose stored third-party credentialsDocker Desktop
- CVE-2026-107590Out-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts QtQt
- CVE-2026-115408ML-KEM key-pair lookup can bind an unrelated or attacker-planted public key, exposing encapsulated shared secretsEclipse Foundation Eclipse KeyPont
- CVE-2026-113644iofogctl command injection via Controller provisioning responseEclipse Foundation Eclipse ioFog
- CVE-2026-90728Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-105323Reflected XSS in Kulga Software's Kulga News SoftwareKulga Software and Telecommunications Limited Company Kulga…
- CVE-2026-90729Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-41022Eaton easySoft improperly validates TLS certificates presented by easyE4 devices.Eaton easySoft
- CVE-2026-10752Advanced Custom Fields: Extended <= 0.9.2.6 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via Email Action Dynamic File Fieldhwk-fr Advanced Custom Fields: Extended
- CVE-2026-90730Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-90731Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-90732Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through LTS 2026, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS20Dell PowerProtect Data Domain
- CVE-2026-117499@fastify/session vulnerable to session revocation bypass via a logout race condition@fastify/session
- CVE-2026-56084Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-117541svg-sanitizer 0.11.0 before 1.1.0 Uncaught LogicException DoS via sanitize()darylldoyle svg-sanitizer
- CVE-2026-117539darylldoyle svg-sanitizer before 1.0.0 CSS Injection and Remote Reference Bypassdarylldoyle svg-sanitizer
- CVE-2026-117538REDAXO before 5.21.0 Reflected XSS via Packages API function Parameterredaxo core · redaxo/source
- CVE-2026-117537REDAXO before 5.21.0 Reflected XSS via Metainfo API type Parameterredaxo core · redaxo/source
- CVE-2026-117535REDAXO before 5.21.3 Reflected XSS via opener_link in Media Poolredaxo core
- CVE-2026-117534REDAXO before 5.21.3 CSRF in Article History Pluginredaxo core
- CVE-2026-117533REDAXO 5.18.0 before 5.21.4 Stored XSS via Unsanitized Mediapool SVG Uploadsredaxo core
- CVE-2026-116900REDAXO before 5.21.4 Stored XSS via Media and Link Input Widgetsredaxo core
- CVE-2026-116895REDAXO before 5.21.5 CSRF via Safe Mode Toggle Parameterredaxo core
- CVE-2026-116894REDAXO before 5.21.5 Insufficient Session Expiration on Password Changeredaxo core
- CVE-2026-116893REDAXO core before 5.21.5 Missing Authorization in rex_api_package APIredaxo core
- CVE-2026-110737Push Endpoint Returns Permissive CORS Headersvaadin
- CVE-2026-116892SemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via Special:Search smw ProfileSemanticMediaWiki
- CVE-2026-116891SemanticMediaWiki 4.2.0 before 7.2.1 Reflected XSS via Special:FacetedSearch cstateSemanticMediaWiki · mediawiki/semantic-media-wiki
- CVE-2026-116890Semantic MediaWiki 3.0.0 before 7.3.0 Missing Authorization via smwtask APISemanticMediaWiki
- CVE-2026-116889SemanticMediaWiki 2.5.0 before 7.3.1 Stored XSS via Special:Browse Code PropertySemanticMediaWiki
- CVE-2026-116888SemanticMediaWiki 3.2.0 before 7.3.1 Stored XSS via Special:Browse Group HeadingSemanticMediaWiki
- CVE-2026-116887Semantic MediaWiki 3.0.0 before 7.3.1 Stored XSS via Special:Browse Keyword PropertySemanticMediaWiki
- CVE-2026-116886Semantic MediaWiki before 7.3.1 Stored XSS via External Identifier in Special:BrowseSemanticMediaWiki
- CVE-2026-116885Semantic MediaWiki before 7.3.1 Reflected XSS via Special:SMWAdmin id ParameterSemanticMediaWiki
- CVE-2026-116884SemanticMediaWiki 5.0.0 before 7.3.1 Stored XSS via Tooltip Module data- AttributesSemanticMediaWiki
- CVE-2026-116883Semantic MediaWiki 3.1.0 before 7.3.1 Stored XSS via Schema DescriptionsSemanticMediaWiki
- CVE-2026-116882Semantic MediaWiki 4.2.0 before 7.3.1 Stored XSS via FacetedSearch Exploration LabelsSemanticMediaWiki
- CVE-2026-116881Semantic MediaWiki 3.0.0 before 7.3.1 XSS via Property-Value AutocompleteSemanticMediaWiki
- CVE-2026-116879Semantic MediaWiki 7.3.0 before 7.3.1 Missing Authorization via smwtask Update TaskSemanticMediaWiki
- CVE-2026-116875SemanticMediaWiki 3.0.0 before 7.3.1 Reflected XSS via Special:Ask Separator ParametersSemanticMediaWiki
- CVE-2026-116874SemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via JsonResultPrinter Default ParameterSemanticMediaWiki
- CVE-2026-116873Semantic MediaWiki 7.3.0 Missing Authorization via smwtask API run-joblist and updateSemanticMediaWiki
- CVE-2026-117530In JetBrains Junie CLI before 26.8.17 command execution was possible due to incomplete validation of allowlisted commandsJetBrains Junie CLI
- CVE-2026-111548A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers.Moxa NPort W2150A-W4/W2250A-W4 Series
- CVE-2026-107147Authentication bypass by spoofing in twofactor_gauthenticatoralexandregz twofactor_gauthenticator
- CVE-2026-107146Insufficient session expiration in twofactor_gauthenticatoralexandregz twofactor_gauthenticator
- CVE-2026-107145Lack of rate-limiting in 2fa code check mechanism in twofactor_gauthenticatoralexandregz twofactor_gauthenticator
- CVE-2026-102787Joomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.5phoca.cz Phoca Download extension for Joomla
- CVE-2026-65213Supermicro BMC IPMI feature contains a Arbitrary Command Execution with Superuser Privileges vulnerabilitySMCI MBD-X12SPI
- CVE-2026-65210Supermicro BMC IPMI feature contains Arbitrary File Access vulnerabilitySMCI MBD-X12SPI
- CVE-2026-18451Supermicro BMC's iKVM feature is vulnerable to KVM session hijacking due to a predictable time-seeded launch tokenSMCI MBD-X12SPI
- CVE-2026-10511Jupiter X Core <= 4.61.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'forget_password_link' Parameterartbees Jupiter X Core
- CVE-2026-107472Out-of-bounds read vulnerability in QTextCodec TSCII encoding impacts QtQt
- CVE-2026-101034Security Advisory for offline recovery of Symantec GSS 3.3 RU11 stored domain credentialsBroadcom Symantec Ghost Solution Suite
- CVE-2026-106174A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network aFortinet FortiOS
- CVE-2026-105946Out-of-bounds read vulnerability in NTLM authentication handling impacts Qtqt
- CVE-2026-103325TiendaCrypto para WooCommerce 1.0.1 - 1.2.1 - Unauthenticated Order Payment Forgery via Webhook HMAC BypassTiendaCrypto para WooCommerce
- CVE-2026-103359PayDunya WooCommerce Payment Gateway 1.1.6 - Unauthenticated Order Payment Completion via Webhook ForgeryPayDunya WooCommerce Payment Gateway
- CVE-2026-110910qs.stringify with allowEmptyArrays does not encode the keys of empty arrays, allowing query string parameter injectionljharb qs
- CVE-2026-103312Payment Integration Wompi <= 4.0.1 - Unauthenticated Payment Confirmation Forgery via IPN CallbackPayment Integration Wompi
- CVE-2026-103332Payex Payment Gateway for WooCommerce <= 1.2.10 - Unauthenticated Payment Confirmation Forgery via Empty-Default Secret KeyPayex Payment Gateway for Woocommerce
- CVE-2026-117472URL prefix handling permits API key read-scope bypass in Psono Serveresaqa Psono
- CVE-2026-117471User-controlled Duo host permits authenticated SSRF in Psono Serveresaqa Psono
- CVE-2026-117470WebAuthn assertion replay permits second-factor bypass in Psono Serveresaqa Psono
- CVE-2026-117469File-transfer type confusion permits unauthorized repository writes in Psono Serveresaqa Psono
- CVE-2026-117468Device-code claim permits restricted token escalation in Psono Serveresaqa Psono
- CVE-2026-88781Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory addASUS motherboards firmware
- CVE-2026-116640Saruf-Ratul HR-Payroll-Management-System chat.php cross site scriptingSaruf-Ratul HR-Payroll-Management-System
- CVE-2026-116639MD-MAFUJUL-HASAN Online-Payroll-Management-System chat.php cross site scriptingMD-MAFUJUL-HASAN Online-Payroll-Management-System
- CVE-2026-116623code-projects Simple Content Management System Admin welcome.php authorizationcode-projects Simple Content Management System
- CVE-2026-116844Fclairamb ftpserverlib through 0.32.4 Cleartext FTPES Data Transfer via PROT Pfclairamb ftpserverlib · Syncplify Server!
- CVE-2026-116842DevilutionX 1.4.0 through 1.5.5 Heap Buffer Overflow via libmpq__archive_dupdiasurgical DevilutionX
- CVE-2026-116841DevilutionX 1.4.0 through 1.5.5 Out-of-Bounds Read via libmpq Hash Table Lookupdiasurgical DevilutionX
- CVE-2026-116840llama.cpp b5854 before b11275 Integer Overflow in gguf_init_from_readerggml-org llama.cpp
- CVE-2026-116829llama.cpp b10398 before b11301 Integer Overflow in gguf_init_from_readerggml-org llama.cpp
- CVE-2025-71439llama.cpp before b5649 Heap Out-of-Bounds Read via llama_vocab::impl::print_infoggml-org llama.cpp
- CVE-2024-58399llama.cpp before b2731 Out-of-Bounds Read via GGUF Tensor Offsetsggml-org llama.cpp
- CVE-2026-116620Tencent RapidJSON Regex stream.h Take out-of-boundsTencent RapidJSON
- CVE-2026-116608DAMO Academy VideoLLaMA2 Model Loading __init__.py load_pretrained_model integrity checkDAMO Academy VideoLLaMA2
- CVE-2026-116605SourceCodester Online Food Ordering System order.php client-side enforcement of server-side securitySourceCodester Online Food Ordering System
- CVE-2026-107067An issue in Shirt Pocket's SuperDuper! 4.0.9 and earlier allow a local attacker to obtain sensitive information