CVEs published October 28, 2026
634 CVEs were published on October 28, 2026: 35 critical, 216 high. 1 is now in CISA KEV.
- Published
- 634
- Critical
- 35
- High
- 216
- Medium
- 222
- Low
- 24
- Unrated
- 137
- Now in CISA KEV
- 1
- Fix available
- 386
Most affected products
- Linux
- 117
- Dell PowerProtect Data Domain
- 23
- Jenkins Project Jenkins
- 15
- n8n-io n8n
- 15
- Apache Software Foundation Apache Kafka
- 12
- DALIBO PostgreSQL Anonymizer
- 12
- Alpine iLX-F511
- 11
- Dell PowerProtect Data Domain Management Center
- 11
- Acronis Cyber Protect
- 10
- labstack echo · github.com/labstack/echo/v5 +1
- 10
Critical 35
- CVE-2026-118579D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoorD-Link DIR-505
- CVE-2026-61567AVideo-Encoder: unauthenticated command execution through streamer login trustWWBN AVideo-Encoder
- CVE-2026-61564AVideo-Encoder: unauthenticated installer PHP code injectionWWBN AVideo-Encoder
- CVE-2026-118690Signal K Server before 2.33.0 Missing Authentication via /skServer/ziplogssignalk-server
- CVE-2026-117574Ai-gateway-payload-processing: ai-gateway-payload-processing: tenant/credential selection from client-controlled url path with no in-process authorizationRed Hat OpenShift AI
- CVE-2026-63190FearlessCMS: Unauthenticated debug scripts expose filesystem operations and XSSfearlessgeekmedia FearlessCMS
- CVE-2026-118264Echo: Rejected WebSocket upgrades can bypass Echo route-level access controlslabstack echo · github.com/labstack/echo/v4 +1
- CVE-2026-103409Session Smart Router: An attacker obtains administrative privileges when an unauthenticated internal endpoint is accessedJuniper Networks Session Smart Router
- CVE-2026-103406Session Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management.Juniper Networks Session Smart Conductor
- CVE-2026-44179XWiki Pro Macros: excerpt-include title and content injection executes codexwikisas xwiki-pro-macros · com.xwiki.pro:xwiki-pro-macros
- CVE-2026-115968WordPress Ultimate Member plugin <= 2.13.1 - PHP Object Injection vulnerabilityUltimate Member
- CVE-2026-105420Path Traversal in Wing WFTP Server leading to Remote Code ExecutionWing Soft Technology Wing FTP Server
- CVE-2026-111411WordPress FunnelKit Automations plugin <= 3.8.5.2 - SQL Injection vulnerabilityAman FunnelKit Automations
- CVE-2026-115607WordPress DXP ToolKit plugin <= 2.0.1 - SQL Injection vulnerabilityCrowd Favorite DXP ToolKit
- CVE-2026-115904Topluyo Desktop for Linux has an OS Command Injection issuetopluyo App
- CVE-2026-67074HCL BigFix AEX is affected by multiple security vulnerabilities.HCL Software BigFix AEX
- CVE-2026-114278Unauthenticated Command Injection via kubeconfig Username in che-machine-execEclipse Foundation Eclipse Che
- CVE-2026-99154scsi: libiscsi: Reject a negative task index from parse_pdu_ittLinux
- CVE-2026-99153scsi: libiscsi: Validate the ITT reflected in a Reject PDULinux
- CVE-2026-103792Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1Dell PowerProtect Data Domain Management Center
- CVE-2026-103799Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1Dell PowerProtect Data Domain Management Center
- CVE-2026-112197Missing Authentication for Critical Function in Tactis' NoviGest Desktop AppTactis NoviGest Desktop App
- CVE-2026-103780Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-86384Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-14571SQL injection (SQLi) in the user authentication module of Futurum SoftwareFuturum Software User Authentication Module
- CVE-2026-86397Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…Dell PowerProtect Data Domain
- CVE-2026-86400Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…Dell PowerProtect Data Domain
- CVE-2026-90717Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1Dell PowerProtect Data Domain Management Center
- CVE-2026-109218Contact Manager <= 9.1.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename Blacklist Bypasskleor Contact Manager
- CVE-2026-103688Checkout Files Upload for WooCommerce < 2.4.0 - Unauthenticated Arbitrary File UploadCheckout Files Upload for WooCommerce
- CVE-2026-104383Code injection in EagleCloud Aquila on-premises versionEagleCloud Aquila
- CVE-2026-84999Pie Register Premium <= 3.8.4.0 - Unauthenticated Arbitrary File Upload via piereg_file_upload AJAX HandlerPie Register Premium
- CVE-2026-118375llama.cpp b8841 before b11865 Stack-based Buffer Overflow via ggml-rpc RDMA rdma_recv()ggml-org llama.cpp
- CVE-2026-106013Jupiter X Core <= 4.61.0 - Unauthenticated Authentication Bypass via Twitter/X Social Login oauth_verifier Parameterartbees Jupiter X Core
- CVE-2026-110879jackson-databind: PolymorphicTypeValidator bypass via generic type arguments and array element types allows arbitrary class instantiation (incomplete fix for CVE-2026-54512)FasterXML jackson-databind
High 216
- CVE-2026-85749MailWatch: IDOR lets any authenticated user release or delete another tenant's quarantined mailMailWatch
- CVE-2026-61569AVideo-Encoder: pre-authentication streamer-login SQL injectionWWBN AVideo-Encoder
- CVE-2026-54453OpenCATS: Authenticated Remote Code Execution via SettingsUI (manageProfessional)OpenCATS
- CVE-2026-61571AVideo-Encoder: missing authentication on control and status endpointsWWBN AVideo-Encoder
- CVE-2026-116641The DB Tools trust certificates issued by recoverable eMudhra intermediate CAsMongoDB Database Tools
- CVE-2026-61572AVideo-Encoder: unauthenticated full-response server-side request forgeryWWBN AVideo-Encoder
- CVE-2026-54455OpenCATS: Authenticated SQL injection in activity DataGrid date filtersOpenCATS
- CVE-2026-93851Path traversal in Mattermost Agents plugin mention reminder allows plugin replacement via crafted postMattermost
- CVE-2026-61546AnkiMCP: DNS rebinding reaches unauthenticated local AnkiMCP HTTP toolsankimcp anki-mcp-server-addon
- CVE-2026-118804Bricks Broken Access Control via query_result EndpointBricks Builder
- CVE-2026-118803Bricks Theme Unauthenticated Dynamic Data Tag Injection via query_resultBricks Theme
- CVE-2026-118755Volmarg Personal Management System through 2.1.0 OS Command Injection via Storage Folder PathVolmarg personal-management-system
- CVE-2026-118753FreeImage (danoli3 fork) before 3.19.25 Heap Buffer Overflow via GIF_PLAYBACK Compositingdanoli3 FreeImage · FreeImage
- CVE-2026-118752FreeImage before 3.19.22 Heap Buffer Overflow via IFF/LBM PBM RLE Decoderdanoli3 FreeImage · FreeImage
- CVE-2026-118694python-markdown2 through 2.5.5 Denial of Service via Unclosed Inline Link Destinationstrentm python-markdown2
- CVE-2026-118692CherryTree through 1.7.2 OS Command Injection via Custom Web Link Actiongiuspen cherrytree
- CVE-2026-118689OvenMediaEngine through 0.21.0 OVT Relay DoS via Oversized payload_lengthOvenMediaLabs OvenMediaEngine
- CVE-2026-118682ClashMi through 1.0.32.1801 Disabled TLS Certificate Validation Enables Update MITMKaringX clashmi
- CVE-2026-118669OAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different clientoauthlib
- CVE-2026-118668LangGraph JavaScript custom authentication may permit cross-user Store accesslangchain-ai langgraph-api · langgraph-api
- CVE-2026-118665GraphQL Tools: Per-request connection parameters persist into later users' WebSocket authenticationsardatan graphql-tools · @graphql-tools executor-legacy-ws +1
- CVE-2026-118664decode-uri-component: Denial of service via quadratic replacement of percent-encoded runsSamVerschueren decode-uri-component · decode-uri-component
- CVE-2026-118660Happy DOM: SSRF via iframe and link stylesheet when parsing untrusted HTMLcapricorn86 happy-dom · happy-dom
- CVE-2026-118659@happy-dom/server-renderer: ServerRendererServer Target-Origin Bypass SSRF / Open Proxycapricorn86 happy-dom
- CVE-2026-76418Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of…Cisco Secure Firewall Adaptive Security Appliance (ASA) Sof…
- CVE-2026-13451Kserve: kserve: server-side request forgery via malicious storageuriRed Hat OpenShift AI
- GHSA-4MFG-R38W-W8FGmcp-sanitizer: URL sanitizer allows localhost/IPv6 loopback SSRF bypass via explicit port or bracketed IPv6mcp-sanitizer
- GHSA-7W82-6F9J-V9JPmcp-sanitizer: File Path Sanitizer Permits Arbitrary User-Home Absolute Pathsmcp-sanitizer
- CVE-2026-61542Gearboy advisory / Gearsystem body: Unauthenticated network exposure of MCP HTTP toolsdrhelius Gearboy
- CVE-2026-118650Echo: middleware.Static: `%2F`-encoded path bypasses route/group middleware guarding a statically-served pathlabstack echo · github.com/labstack/echo/v5 +1
- CVE-2026-78674Remote Code Execution via BPMN System REST APIs in Multiple WSO2 Products Permits Arbitrary Command ExecutionWSO2 Enterprise Integrator · WSO2 Business Process Server
- CVE-2026-6647Incomplete OAuth Token Revocation via Case Mismatch in WSO2 Identity Server Allows Continued Access After Lifecycle EventsWSO2 Identity Server · WSO2 Carbon OAuth
- CVE-2025-14260Server Side Request Forgery in Multiple WSO2 Products Allows Access to Internal and External ResourcesWSO2 API Manager · WSO2 Identity Server as Key Manager +5
- CVE-2026-109411Samba: access control bypass via vfs_ceph_rgw case-insensitive openSamba · Red Hat Enterprise Linux +1
- CVE-2026-118262Echo: WebSocket proxy can retain connections and handlers after client disconnectlabstack echo · github.com/labstack/echo/v4 +1
- CVE-2026-118688Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 Sandbox Escape via Symlink Renamebytecodealliance wasmtime
- CVE-2026-118687Coder before 2.29.21, 2.34.12, 2.35.9, 2.36.7, and 2.37.4 Missing Audience Validation in GCP Instance-Identity Authenticationcoder
- CVE-2026-118686EspoCRM before 9.3.11 and 10.0.8 Unauthenticated Denial of Service via Password-Redaction Regexespocrm
- CVE-2026-118684MONAI before 1.6.1 Missing Integrity Verification via check_hash in DownloadsProject-MONAI MONAI
- CVE-2026-118683MONAI 1.2.0 before 1.6.1 Code Execution via bundle configs/logging.confProject-MONAI MONAI
- CVE-2026-118678n8n before 2.41.4 and 2.42.1 Prototype Pollution DoS via Workflow History Compactionn8n-io n8n
- CVE-2026-118649n8n before 2.43.5 and 2.44.1 Authorization Bypass via Crafted Workflow ID in Data Tablesn8n-io n8n
- CVE-2026-118648n8n before 1.123.85, 2.43.5, and 2.44.1 Stored XSS via Webhook Responses Missing Sandbox Policyn8n-io n8n
- CVE-2026-118646n8n before 1.123.85, 2.43.5, and 2.44.1 ReDoS via Read/Write Files Noden8n-io n8n
- CVE-2026-118645n8n before 1.123.85, 2.43.5, and 2.44.1 Filter Injection via Quick Base Node Where Parametern8n-io n8n
- CVE-2026-118261Echo: Decompress permits unbounded gzip expansion in v4labstack echo · github.com/labstack/echo/v4
- CVE-2026-118260Echo: BodyDump captures request and response bodies without size limits in v4labstack echo · github.com/labstack/echo/v4
- CVE-2026-118633A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as root in Sophos UTM (all versions) afterSophos SG UTM
- CVE-2026-118257Vue I18n: escapeParameter does not prevent XSS through srcdoc in translation messagesintlify vue-i18n · vue-i18n +5
- CVE-2026-118255Highcharts Grid: javascript: URL in credits.href runs script on clickhighcharts · @highcharts dashboards +3
- CVE-2026-118254Highcharts Grid: pagination language options are parsed as HTMLhighcharts · @highcharts grid-lite +3
- CVE-2026-118253Highcharts Dashboards: fullscreen labels are parsed as HTMLhighcharts · @highcharts dashboards +1
- CVE-2026-118252Highcharts Dashboards: sidebar component labels are parsed as HTMLhighcharts · @highcharts dashboards +1
- CVE-2026-118251Highcharts: javascript: URL in credits.href runs script on clickhighcharts
- CVE-2026-118250Highcharts: dotted series.keys paths write to Object.prototypehighcharts
- CVE-2026-118249Highcharts: series column construction writes to Object.prototypehighcharts
- CVE-2026-118246Highcharts Core: `breadcrumbs.style` keys become SVG event-handler attributeshighcharts
- CVE-2026-118245Highcharts Dashboards: `chartConstructor` is an unchecked lookup into the Highcharts namespacehighcharts · @highcharts dashboards +1
- CVE-2026-118244Highcharts Core: AST `DOMParser` fallback assigns unsanitized markup to `innerHTML` during printhighcharts
- CVE-2026-118242Highcharts Grid: custom icon definition objects written with raw `setAttribute` on `<path>`highcharts · @highcharts grid-lite +3
- CVE-2026-84725Openjdk-orb: incomplete fix for cve-2026-15560,unauthed class loading via iiop in eapRed Hat JBoss Enterprise Application Platform
- CVE-2026-116797Highcharts Grid Pro: cell-renderer `attributes` map written with raw `setAttribute`highcharts · @highcharts grid-pro +3
- CVE-2026-116796Highcharts Core: `javascript:` URL in an `xlink:href` attribute survives text filtering and reaches exported chartshighcharts
- CVE-2026-116795RE2JS: Quadratic-time denial of service in re2js lookbehind matchingle0pard re2js · re2js
- CVE-2026-116794russh: Agent server never calls `Agent::confirm`, so keys added with the confirm constraint (`ssh-add -c`) sign without confirmationEugeny russh · russh
- CVE-2026-82961Unvalidated pin index in GPIO syscall handlers allows out-of-bounds kernel writes from user modezephyrproject zephyr
- CVE-2026-118619Ultralytics Google Drive Download Path Traversal Remote Code Execution VulnerabilityUltralytics
- CVE-2026-118618Ultralytics parse_model Code Injection Remote Code Execution VulnerabilityUltralytics
- CVE-2026-118617Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution VulnerabilityUltralytics
- CVE-2026-118616Ultralytics parse_model Code Injection Remote Code Execution VulnerabilityUltralytics
- CVE-2026-118615Ultralytics torch_safe_load Command Injection Remote Code Execution VulnerabilityUltralytics
- CVE-2026-118614Ultralytics check_det_dataset Code Injection Remote Code Execution VulnerabilityUltralytics
- CVE-2026-118613Ultralytics torch_load Deserialization of Untrusted Data Remote Code Execution VulnerabilityUltralytics
- CVE-2026-118610Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution VulnerabilityAlpine iLX-F511
- CVE-2026-103506SSO settings authorization bypassGrafana Enterprise · Grafana OSS
- CVE-2026-118606Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution VulnerabilityAlpine iLX-F511
- CVE-2026-118605Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Execution VulnerabilityAlpine iLX-F511
- CVE-2026-118603Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityAlpine iLX-F511
- CVE-2026-118602Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation VulnerabilityAlpine iLX-F511
- CVE-2026-88967Azure Monitor access token disclosure via SSRFGrafana Enterprise · Grafana OSS
- CVE-2026-100105Alerting contact point authorization bypass via schema downgradeGrafana Enterprise · Grafana OSS
- CVE-2026-106079Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configurationJuniper Networks Session Smart Router · Juniper Networks Se…
- CVE-2026-103411Session Smart Router: A malicious DHCP server causes information disclosure and a service crash during DHCP option parsingJuniper Networks Session Smart Router
- CVE-2026-103410Session Smart Router: Integer overflow causes denial of service during TLS certificate inspectionJuniper Networks Session Smart Router
- CVE-2026-103408Session Smart Router: An attacker-controlled input causes remote code execution when parsing DHCP optionsJuniper Networks Session Smart Router
- CVE-2026-103407Session Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI managementJuniper Networks Session Smart Router · Juniper Networks Se…
- CVE-2026-103403Session Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rulesJuniper Networks Session Smart Router · Juniper Networks Se…
- CVE-2026-103402Session Smart Router and Session Smart Conductor: Lack of integrity verification in cache files causes arbitrary code execution and privilege escalationJuniper Networks Session Smart Router · Juniper Networks Se…
- CVE-2026-103401Session Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as rootJuniper Networks Session Smart Router · Juniper Networks Se…
- CVE-2026-93523X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Writex.org xorg-x11-server · x.org xwayland
- CVE-2026-118510Laravel MongoDB `whereDoesntHave` misses deny records for numeric string IDsLaravel MongoDB
- CVE-2026-93522X.Org Server Glamor CopyArea Heap Buffer Overflowx.org xorg-x11-server · x.org xwayland
- CVE-2026-116778FOG: Authenticated low-privileged API user can modify Storage Nodes and reach root command executionfogproject
- CVE-2026-116776USB Test: Heap-based Buffer Overflow in getSectorSize via untrusted DISK_GEOMETRY.BytesPerSector leads to RCE/DoSn-romanovich usb-test
- CVE-2026-56828Shopper: read-only team permissions allow administrator creation and permission escalationshopperlabs shopper
- CVE-2026-47235SimulationCraft: Heap-Based Buffer Overflow / Out-of-Bounds Write in SimulationCraft's gem_id Arraysimulationcraft simc
- CVE-2026-93521X.Org Server RandR ChangeProviderProperty Heap Buffer Overflowx.org xorg-x11-server · x.org xwayland
- CVE-2026-59979YosemiteCrew: Missing organization authorization on service and PMS library/template routesYosemiteCrew Yosemite-Crew
- CVE-2026-112357GFI KerioConnect KOFF < 10.0.9p2 Privilege EscalationGFI USA GFI KerioConnect
- CVE-2026-93520X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Writex.org xorg-x11-server · x.org xwayland
- CVE-2026-93519X.Org Server XFixes Pointer Barrier Event List Buffer Overflowx.org xorg-x11-server · x.orgg xwayland
- CVE-2026-93518X.Org Server XKB ResizeKeyType Numeric Truncationx.org xorg-x11-server · x.org xwayland
- CVE-2026-115603WordPress Advanced Ads – Tracking plugin < 4.0.0 - SQL Injection vulnerabilityAdvanced Ads – Tracking
- CVE-2026-116390WordPress Filter Everything — WordPress & WooCommerce Filters plugin <= 1.9.7 - PHP Object Injection vulnerabilitystepasyuk Filter Everything — WordPress & WooComme…
- CVE-2026-116389WordPress Phoenix Media Rename plugin <= 3.13.5 - PHP Object Injection vulnerabilitycrossi72 Phoenix Media Rename
- CVE-2026-115590WordPress Dokan plugin <= 5.3.1 - PHP Object Injection vulnerabilityweDevs Dokan
- CVE-2026-116078HTTP/2 request bodies made of 1-byte DATA frames amplify memory use in Banditmtrudel bandit
- CVE-2026-52729Xibo: IDOR (Broken Object-Level Authorization) on PUT/DELETE /action/{id} Allows Arbitrary Layout Action Modification and Deletionxibosignage xibo-cms
- CVE-2026-93517X.Org Server GLX RenderLarge Heap Buffer Overflowx.orgg xorg-x11-server · x.org xwayland
- CVE-2026-59185identrail: Cross-tenant GitHub installation binding without ownership verificationidentrail
- CVE-2026-59179OpenHop: Path Traversal in Flow ID File Operationsnaorsabag openhop · @openhop/server
- CVE-2026-59177ESPHome Device Builder allows unauthenticated dashboard access via the HA add-on ingress site bound to all interfacesesphome device-builder
- CVE-2026-59176Functype: MCP set_functype_version Package Alias RCE via Unsanitized pnpm install + Dynamic Importjordanburke functype
- CVE-2026-59172Joker linter executed project-local .jokerd/linter.* files during lintingcandid82 joker
- CVE-2026-59164NORA missing cross-user token-management authorizationgetnora-io nora
- CVE-2026-116391WordPress GS Logo Slider plugin <= 3.8.9 - PHP Object Injection vulnerabilityGS Plugins GS Logo Slider
- CVE-2026-116392WordPress Accordion plugin <= 2.3.25 - PHP Object Injection vulnerabilityPickPlugins Accordion
- CVE-2026-116393WordPress Optima Express + MarketBoost IDX Plugin plugin <= 8.7.8 - Broken Access Control vulnerabilityiHomefinder Optima Express
- CVE-2026-111850WordPress BuddyPress plugin <= 14.5.2 - SQL Injection vulnerabilityBuddyPress
- CVE-2026-115612WordPress SliceWP plugin <= 1.2.13 - Cross Site Scripting (XSS) vulnerabilityiova.mihai SliceWP
- CVE-2026-115591WordPress Contact Form by Supsystic plugin <= 1.10.5 - Sensitive Data Exposure vulnerabilityContact Form by Supsystic
- CVE-2026-115593WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.24 - Cross Site Scripting (XSS) vulnerabilityUnlimited Elements For Elementor
- CVE-2026-115596WordPress eCommerce Product Catalog plugin <= 3.6.4 - Cross Site Scripting (XSS) vulnerabilityimpleCode eCommerce Product Catalog
- CVE-2026-115606WordPress DXP ToolKit plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerabilityCrowd Favorite DXP ToolKit
- CVE-2026-115609WordPress GetPaid plugin <= 2.8.62 - Cross Site Scripting (XSS) vulnerabilityStiofan GetPaid
- CVE-2026-118037Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadSpreadProcessing and RadSpreadStreamProcessingProgress Software Telerik Document Processing Libraries
- CVE-2026-118036Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadPdfProcessing and AI Document Summarization and Question AnsweringProgress Software Telerik Document Processing Libraries
- CVE-2026-118035Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadWordsProcessingProgress Software Telerik Document Processing Libraries
- CVE-2026-118040Improper Signature and Certificate Validation in Telerik Document Processing Libraries RadPdfProcessingProgress Software Telerik Document Processing Libraries
- CVE-2026-118039XML External Entity Reference in Telerik Document Processing Libraries SVG Image ProcessingProgress Software Telerik Document Processing Libraries
- CVE-2026-118038Path Traversal in Telerik Document Processing Libraries AI Agent ToolsProgress Software Telerik Document Processing Libraries
- CVE-2026-67073HCL BigFix AEX is affected by multiple security vulnerabilities.HCL Software BigFix AEX
- CVE-2026-102790Joomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12icagenda.com iCagenda extension for Joomla
- CVE-2026-118485Axel Download Accelerator Path Traversal via URL Filename DecodingAxel Download Accelerator Axel
- CVE-2026-118477KaliFast Project Management Platform ei_git_repo_url OS Command InjectionEISGE Kalifast
- CVE-2026-6064Norton, Avast, and AVG local privilege escalation via link following in Data ShredderGen Digital Norton Antivirus · Gen Digital Avast Antivir… +1
- CVE-2026-99216Drivers: hv: Don't reset VMBus connection state on error/exit pathsLinux
- CVE-2026-99213vsock: treat TCP_CLOSING as once-establishedLinux
- CVE-2026-99212net/rds: don't let the rdma_cm destroy an id RDS still owns on route failureLinux
- CVE-2026-99203pipe: preserve existing fasync readers on writer setup failureLinux
- CVE-2026-99185firewire: core: fix race condition in split transaction handlingLinux
- CVE-2026-99180unicode: free the map after a grace periodLinux
- CVE-2026-99177KVM: SEV: Fix page dirtying in sev_gmem_post_populate()Linux
- CVE-2026-99173eventfs: Free the eventfs_inode after an rcu grace period tooLinux
- CVE-2026-99170namespace: a mount that copy_tree() leaves out can't take over a lockLinux
- CVE-2026-99167net/sched: fix use-after-free in __tcf_action_put()Linux
- CVE-2026-99164spi: imx: fix slab corruption from undersized DMA bounce buffersLinux
- CVE-2026-99163tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fieldsLinux
- CVE-2026-99156scsi: st: Fix use-after-free race between st_remove() and st_open()Linux
- CVE-2026-99152scsi: libiscsi: Validate the task named by a management responseLinux
- CVE-2026-99148drm/amdgpu: keep the eviction fence until the last handle is closedLinux
- CVE-2026-99143tracing: Keep the predicate limit separate from program capacityLinux
- CVE-2026-99142tracing: Check operator stack capacity before pushingLinux
- CVE-2026-99136dm-crypt: fix a tiny race condition in crypt_dec_pendingLinux
- CVE-2026-99131xfs: fix capability check in xfsLinux
- CVE-2026-99123vsock/virtio: validate packet source for connected socketsLinux
- CVE-2026-99122vsock/vmci: validate packet source for connected socketsLinux
- CVE-2026-99117net: bridge: mcast: don't truncate the port group walk on teardownLinux
- CVE-2026-99116net: psp: do not inherit the Rx association on cloneLinux
- CVE-2026-99112net/sched: cls_flower: validate mask pointer after nla_next()Linux
- CVE-2026-99110smb: client: fix heap overflow in cifs_do_set_acl()Linux
- CVE-2026-99109smb: client: reject SetEA requests that do not fit the request bufferLinux
- CVE-2026-99107ntfs: fix incorrect MFT record pointer passed to ntfs_attr_record_resizeLinux
- CVE-2026-110541Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-110540Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1Dell PowerProtect Data Domain Management Center
- CVE-2026-103779Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-112198Improper Restriction of XML External Entity Reference in Tactis' NoviGest Desktop AppTactis NoviGest Desktop App
- CVE-2026-87102Sensitive information disclosure and manipulation due to improper token validation.Acronis Cyber Protect
- CVE-2025-30414Local privilege escalation due to improper authentication.Acronis Cyber Protect Cloud Agent · Acronis Cyber Protect
- CVE-2026-87103Sensitive information disclosure and manipulation due to improper token validation.Acronis Cyber Protect
- CVE-2026-86377Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-86378Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-86379Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1Dell PowerProtect Data Domain Management Center
- CVE-2026-86380Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-86385Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, contain an Improper Check for Dropped Privileges vulnerability.Dell PowerProtect Data Domain
- CVE-2026-86389Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-86393Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-86394Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…Dell PowerProtect Data Domain
- CVE-2026-86395Dell PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.Dell PowerProtect Data Domain Virtual Edition
- CVE-2026-86396Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…Dell PowerProtect Data Domain
- CVE-2026-86398Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…Dell PowerProtect Data Domain
- CVE-2026-86399Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…Dell PowerProtect Data Domain
- CVE-2026-92797Memberpress <= 1.14.1 - Cross-Site Request Forgery via 'user_email' ParameterMemberpress
- CVE-2026-63286Database backups are vulnerable to offline attacks.Axis Communications AB AXIS Camera Station Pro · Axis Commu…
- CVE-2026-111111Prime Slider <= 4.7.2 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Content_Guard Regex Quote-Escapebdthemes Prime Slider – Hero Slider, Carousel, WooCommerce…
- CVE-2026-109384The Innovative Form Builder <= 1.5.1 - Authenticated (Custom+) Arbitrary File Upload via 'allowedFileExtensions' Configuration + Public…melograno The Innovative Form Builder – IvyForms
- CVE-2026-111120VikRentCar Car Rental Management System <= 1.4.8 - Cross-Site Request Forgery to Remote Code Execution via 'condtext_update_tmpl' AJAX Taske4jvikwp VikRentCar Car Rental Management System
- CVE-2026-110662MxChat <= 3.2.25 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'feedback' Parameter via mxchat_save_ratingMxChat – AI Chatbot & Content Generation for WordPress
- CVE-2026-109381Event Booking Manager for WooCommerce <= 5.7.8 - Authenticated (Shop Manager+) Privilege Escalation to 'page' Parametermagepeopleteam Event Booking Manager for WooCommerce – Sell…
- CVE-2026-111577GoSMTP < 1.2.5 - Plugin Activator+ Privilege Escalation via SMTP SettingsGoSMTP
- CVE-2026-111021Persian WooCommerce SMS 7.2.0 - 7.3.1 - Reflected XSS via 'pwsms_mobiles' Parameterافزونه پیامک ووکامرس | Persian WooCommerce SMS
- CVE-2026-105972WooCommerce Menu Cart < 3.2.1 - Unauthenticated Stored XSS via Cart Item Variation AttributeMenu Cart for WooCommerce
- CVE-2026-15323Product Designer for WooCommerce WordPress | Lumise <= 2.1.2 - Unauthenticated Arbitrary File Read via 'design.stages[*].image' Parameter in Cart JSON UploadKing-Theme Product Designer for WooCommerce WordPress | Lum…
- CVE-2026-104384Insufficiently protected credentials in EagleCloud Aquila on-premises versionEagleCloud Aquila
- CVE-2026-1928Rank Math SEO <= 1.0.276 - Authenticated (Contributor+) PHP Object Injection to Remote Code Executionrankmath Rank Math SEO – AI SEO Tools to Dominate SEO Ranki…
- CVE-2026-116613Animated Text Block <= 1.2.6 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'id' Shortcode Attributebplugins Animated Text Block – Add Typing and Looping Text…
- CVE-2026-111255affiliate-toolkit <= 3.9.2 - Authenticated (Contributor+) Arbitrary File Upload via 'atkp_product_largeimageurl' Parametercservit affiliate-toolkit – Multi-Network Affiliate & Amazo…
- CVE-2026-111314affiliate-toolkit <= 3.9.2 - Unauthenticated Stored Cross-Site Scripting via 'atkp_product_producturl' Parametercservit affiliate-toolkit – Multi-Network Affiliate & Amazo…
- CVE-2026-97019AMP for WP <= 1.1.17 - Unauthenticated Stored Cross-Site Scripting via 'headline-*' Shortcode Attributemohammed_kaludi AMP for WP – Accelerated Mobile Pages
- CVE-2026-109999AI Marketing Expert <= 1.2.8 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'name' Parameternalam-1 AI Marketing Expert — AI Email Marketing, AI Conten…
- CVE-2026-118378Tabularis before 0.28.0 SQL Injection via MCP describe_table table_nameTabularisDB tabularis
- CVE-2026-118377mews/pos through 2.0.0 Missing Hash Verification in 3D Pay and 3D Host Callbacksmewebstudio pos
- CVE-2026-118374LibreSSL ocspcheck through 4.4.0 Memory Exhaustion via Unbounded OCSP HTTP ResponseOpenBSD LibreSSL
- CVE-2026-118370libexpat through 2.9.0 Integer Overflow in storeAtts via attIndex and nPrefixeslibexpat
- CVE-2026-117610libexpat through 2.9.0 NULL Pointer Dereference via External Entity Subparserlibexpat
- CVE-2026-117609rtl_433 through 25.12 Stack-Based Buffer Overflow via Proflame 2 Decodermerbanan rtl_433
- CVE-2026-117607Xerte Online Toolkits through 3.15.5 RCE via Language Pack Importthexerteproject xerteonlinetoolkits
- CVE-2015-20129CrushFTP before 7.3.0 Cross-Site Request Forgery via /WebInterface/function/CrushFTP
- CVE-2014-125138C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, Cart Engine through 3.0.0 Unrestricted File Upload via Image FieldsC97net qEngine CMS · C97net Kemana Directory +1
- CVE-2014-125137C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, Cart Engine through 3.0.0 Local File Inclusion via admin/task.phpC97net qEngine CMS · C97net Kemana Directory +1
- CVE-2014-125136C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, Cart Engine through 3.0.0 Database Backup Exposure via /admin/backupC97net qEngine CMS · C97net Kemana Directory +1
- CVE-2013-20008Linksys WAG200G through 1.01.06 Admin Password Change Without Current PasswordLinksys WAG200G
- CVE-2013-20007Linksys WAG200G through 1.01.06 OS Command Injection via timer_interval in setup.cgiLinksys WAG200G
- CVE-2026-110747jackson-dataformat-protobuf: integer overflow in ProtobufParser._readStringKey() allows OutOfMemoryError from an 8-byte payloadFasterXML jackson-dataformat-protobuf
- CVE-2026-104895jackson-dataformat-smile: unbounded eager byte[] allocation for raw binary in the async parser allows OutOfMemoryError denial of serviceFasterXML jackson-dataformat-smile
- CVE-2026-106972Uncontrolled recursion in MessagePack\BufferUnpacker::unpack() in rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a…
Medium, low and unrated 383
- CVE-2026-118589nschloe meshio VTK Reader _vtk_42.py memory allocationnschloe meshio
- CVE-2026-118586dfm feedfinder2 feedfinder2.py find_feeds server-side request forgerydfm feedfinder2
- CVE-2026-118585configuroweb inventariobasico Add Product addlist.php cross site scriptingconfiguroweb inventariobasico
- CVE-2026-86983A remote attacker may be able to terminate a process that passes attacker-controlled input to the P-384 VOPRF API without bounding its lengtApple swift-crypto
- CVE-2026-118578maotoumao MusicFreeDesktop Request Forwarder information disclosuremaotoumao MusicFreeDesktop
- CVE-2026-82411Objects API: Cross-object-type authorization bypass on the object history-detail endpointmaykinmedia open-object
- CVE-2026-55561InvoicePlane: Guest user IDOR in quote approval and rejectionInvoicePlane
- CVE-2026-75520Domoticz: Missing authorization and path traversal in the udevices Lua parser handlerdomoticz
- CVE-2026-118577maotoumao MusicFreeDesktop Request Forwarder server-side request forgerymaotoumao MusicFreeDesktop
- CVE-2026-118538a2ui-project a2ui Renderer root.js Root.renderComponentTree dynamically-determined object attributesa2ui-project a2ui
- CVE-2026-61575AVideo-Encoder vulnerable to stored DOM cross-site scripting through queue titlesWWBN AVideo-Encoder
- CVE-2026-61573AVideo-Encoder: reflected cross-site scripting in the login interfaceWWBN AVideo-Encoder
- CVE-2026-118537a2ui Image Player/Video Player/Audio Player Image.js input validationa2ui
- CVE-2026-57448Blombooru: administrator image-proxy server-side request forgerymrblomblo blombooru
- CVE-2026-118757PiWeb Disable payment method / Partial payment for WooCommerce before 1.1.10.9 Missing Authorization via update_feesPI Websolution PiWeb Disable payment method / Partial payme…
- CVE-2026-118756gopass before 1.17.0 Path Traversal via fs Storage Prune and IsDirgopasspw gopass
- CVE-2026-118754Dolibarr ERP CRM before 24.0.2 Missing Authorization via public recruitment view.phpDolibarr ERP/CRM
- CVE-2026-118693CherryTree through 1.7.2 Local File Disclosure via Embedded-File Filename Pathgiuspen cherrytree
- CVE-2026-118691xianyu-auto-reply-fix through 2.0.7 Unauthenticated Message Sending via /send-messageGuDong2003 xianyu-auto-reply-fix
- CVE-2026-118667LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requestslangchain-ai langgraph · langchain-ai langgraph-sdk +2
- CVE-2026-118666GraphQL Tools: Shared legacy executor routes one subscription's results to a different callerardatan graphql-tools · @graphql-tools executor-legacy-ws +1
- CVE-2026-118663@hono/node-server: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static pathshonojs node-server · @hono/node-server
- CVE-2026-118662Vite: `server.fs.deny` bypassed with queriesvitejs vite · vite
- CVE-2026-118661Happy DOM: Cookie scope forgery: no DNS-label boundary on Domain= matching , attacker origin sets victim cookiescapricorn86 happy-dom · happy-dom
- CVE-2026-118658Echo: Arbitrary Scheme Injection in WWWRedirect/NonWWWRedirect Middlewares via X-Forwarded-Protolabstack echo · github.com/labstack/echo/v5 +1
- CVE-2026-118657Echo: HTTPS Redirect and HSTS Bypass via Unconditional Trust of Forwarded Scheme Headerslabstack echo · github.com/labstack/echo/v5 +1
- CVE-2026-118656Echo: Open Redirect via Control-Character Prefix Defeating sanitizeURIlabstack echo · github.com/labstack/echo/v5 +1
- CVE-2026-118655Echo: Static Middleware Double-Unescape Path Traversallabstack echo · github.com/labstack/echo/v5 +1
- CVE-2026-118654Echo static file middleware route protection bypass via encoded dot-dot traversallabstack echo · github.com/labstack/echo/v5 +1
- GHSA-473Q-M89C-GHF8MySqlConnector: Account password disclosed to a man-in-the-middle in zero-configuration TLS mode (clear-text password sent before certificatMySqlConnector
- CVE-2026-54162Ember: Unneutralised terminal escape/control sequences from Caddy logs injected into the operator's TUIalexandre-daubois ember · github.com/alexandre-daubois/ember
- CVE-2026-61529Endatix: Blind second-order SSRF via anonymous form-submission file URLs (`SubmissionFileExtractor`)endatix
- CVE-2026-118653Echo: Rate Limiter Bypass via Spoofed X-Forwarded-For Header in Default Configurationlabstack echo · github.com/labstack/echo/v5 +1
- CVE-2026-118652Echo: Reflected Cross-Site Scripting (XSS) via unsanitized JSONP callback in Context.JSONP / Context.JSONPBloblabstack echo · github.com/labstack/echo/v5 +1
- CVE-2026-115415Secret masking bypass in the environment tool in Strands Agents Toolsamazon strands-agents-tools
- CVE-2026-118651Echo: Reverse Proxy Forwards Attacker-Supplied X-Real-IP to Upstream by Defaultlabstack echo · github.com/labstack/echo/v5 +1
- CVE-2026-118266Echo: CSRF Protection Bypass via MethodOverride Rewriting POST to Safe Methodlabstack echo · github.com/labstack/echo/v5 +1
- CVE-2026-3583Improper Token Revocation via OAuth2 Scope Enforcement in Multiple WSO2 Products [Disrupted Authentication Flows]WSO2 API Manager · WSO2 Traffic Manager +6
- CVE-2026-11854Cross-Site Scripting via Authentication Endpoint Error Message in Multiple WSO2 ProductsWSO2 API Manager · WSO2 API Control Plane +1
- CVE-2026-118265Echo: X-Real-IP extractor trusts the header value instead of the sending peerlabstack echo · github.com/labstack/echo/v5
- CVE-2026-118263Echo: BodyDump can discard BodyLimit overflow errors for unknown-length requestslabstack echo · github.com/labstack/echo/v5
- CVE-2026-118685ToolJet 3.20.2-lts before 3.20.242-lts Signup Bypass via SignupDisableGuardToolJet
- CVE-2026-118681go-chi chi before 5.5.0 Authentication Bypass via SupressNotFound Middlewarego-chi chi
- CVE-2026-118680SiYuan 3.8.7 through 3.8.8 Path Traversal via GLOBALROOT Aliassiyuan-note siyuan
- CVE-2026-118679n8n before 1.123.83, 2.41.4, and 2.42.1 Slack Token Exfiltration via Slack Triggern8n-io n8n
- CVE-2026-118677n8n before 2.41.4 and 2.42.1 Local Gateway Deep-Link Silent Re-pairing to Attacker Instancen8n-io n8n
- CVE-2026-118676n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypassn8n-io n8n
- CVE-2026-118675n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Guard Bypass via Execute Sub-workflown8n-io n8n
- CVE-2026-118647n8n before 1.123.85, 2.43.5, and 2.44.1 SeaTable Trigger API Token Exposure via Execution Datan8n-io n8n
- CVE-2026-118644n8n before 2.41.5 and 2.42.2 Credential Theft via Error-Workflow Context Inheritancen8n-io n8n
- CVE-2026-118643n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Exposure via Node Execution Error Datan8n-io n8n
- CVE-2026-118642n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass via Inline Sub-Workflowsn8n-io n8n
- CVE-2026-118641n8n before 1.123.85, 2.43.5, and 2.44.1 OData $filter Injection via Outlook and SharePoint Nodesn8n-io n8n
- CVE-2026-118640n8n before 1.123.85, 2.43.5, and 2.44.1 Chat Hub Authorization Bypassn8n-io n8n
- CVE-2026-118259opentelemetry-java: Quadratic CPU consumption in W3C tracestate parsingopen-telemetry opentelemetry-java · io.opentelemetry:opente…
- CVE-2026-118258i18next-http-backend: Query-parameter injection through & and = in lng when loadPath/addPath puts {{lng}} in the query stringi18next-http-backend
- CVE-2026-118256Vue I18n: `escapeParameter` does not escape named values when the same call also passes a listintlify vue-i18n · vue-i18n +4
- CVE-2026-106484Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0 allowed a local attacker to perform arbitrarGoogle chrome-devtools-mcp
- CVE-2026-118248Highcharts Dashboards: editableOptions.propertyPath writes to Object.prototypehighcharts · @highcharts dashboards
- CVE-2026-118247Highcharts Dashboards / Grid Pro: `DataTable.setCell` and column writers treat `__proto__` as an existing column.highcharts · @highcharts dashboards +3
- CVE-2026-116273MIME::Parser versions before 5.521 for Perl set no limit on the number of message parts by default, allowing memory exhaustionMIME-tools
- CVE-2026-116272MIME::Field::ParamVal versions before 5.521 for Perl do not flag a duplicate boundary parameter whose name contains a nested commentMIME-tools
- CVE-2026-116271MIME::Parser::FileUnder versions before 5.521 for Perl reuse a pre-created output directory and follow symlinks in it, letting local users redirect attachment writesMIME-tools
- CVE-2026-116270MIME::Words versions before 5.521 for Perl allow memory exhaustion via repeated "=?" sequences in decode_mimewordsMIME-tools
- CVE-2026-118243Highcharts Dashboards: `__proto__` data table id writes sync listeners to `Object.prototype`highcharts · @highcharts/dashboards
- CVE-2026-116269MIME::Field::ParamVal versions before 5.521 for Perl turn an RFC 2231 filename with a hyphenated language tag into an empty recommended filenameMIME-tools
- CVE-2026-116268MIME::Field::ParamVal versions before 5.521 for Perl allow CPU exhaustion via unclosed comments in header parametersMIME-tools
- CVE-2026-116267MIME::Parser versions before 5.521 for Perl allow memory exhaustion via indented error messages from a truncated, deeply nested messageMIME-tools
- CVE-2026-116266MIME::Head versions from 5.518 before 5.521 for Perl decode a partly encoded multipart boundary without flagging the parse as ambiguousMIME-tools
- CVE-2026-116265MIME::Field::ParamVal versions before 5.521 for Perl do not flag an ambiguous multipart boundary written as RFC 2231 continuationsMIME-tools
- CVE-2026-110183PostgreSQL Anonymizer: statistics can expose some of the original data after statistic maskingDALIBO PostgreSQL Anonymizer
- CVE-2026-110182PostgreSQL Anonymizer: anon.partial() and anon.partial_email() can reveal the whole dataDALIBO PostgreSQL Anonymizer
- CVE-2026-110181PostgreSQL Anonymizer: Function declared with SQL-standard syntax leak anonymized dataDALIBO PostgreSQL Anonymizer
- CVE-2026-116264MIME::Field::ParamVal versions before 5.521 for Perl allow one invalid Content-Type parameter to hide the parameters after it, including the multipart boundaryMIME-tools
- CVE-2026-105620PostgreSQL Anonymizer: A masked role reads the authentic data of masked tables through a masking rule with a sub-queryDALIBO PostgreSQL Anonymizer
- CVE-2026-105619PostgreSQL Anonymizer: Masking rules of the tables are not applied through security_invoker viewsDALIBO PostgreSQL Anonymizer
- CVE-2026-105618PostgreSQL Anonymizer: Masked partitions and child tables are not masked when they are queried through their parentDALIBO PostgreSQL Anonymizer
- CVE-2026-105617PostgreSQL Anonymizer: Cached plans bypass transparent dynamic masking after a role change or a new masking ruleDALIBO PostgreSQL Anonymizer
- CVE-2026-105616PostgreSQL Anonymizer: The secret salt and shift of anon are readable by any role in pg_roles or pg_db_role_settingDALIBO PostgreSQL Anonymizer
- CVE-2026-105615PostgreSQL Anonymizer: Masked roles can read the statistics of masked columns in pg_statsDALIBO PostgreSQL Anonymizer
- CVE-2026-105614PostgreSQL Anonymizer: Unbounded image-decode memory allocation (DoS) in anon.image_blur()DALIBO PostgreSQL Anonymizer
- CVE-2026-105613PostgreSQL Anonymizer: Unbounded memory allocation (DoS) in range-based dummy functionsDALIBO PostgreSQL Anonymizer
- CVE-2026-105612PostgreSQL Anonymizer: Data-modifying CTEs bypass the read-only restriction of masked rolesDALIBO PostgreSQL Anonymizer
- CVE-2026-79656OAuth and OIDC tokens written unredacted to server logs by the Generic OAuth, Google and GitLab connectorsGrafana OSS · Grafana Enterprise
- CVE-2026-58458Don't Starve Together Memory Corruption via world_gen_dataKlei Entertainment Don't Starve Together
- CVE-2026-117501HTTP::Body versions before 1.24_01 for Perl allow memory exhaustion via unbounded buffering of chunked request bodiesHTTP-Body
- CVE-2026-117500HTTP::Body versions before 1.24_01 for Perl allow CPU exhaustion via regex backtracking on the filename of a multipart uploadHTTP-Body
- CVE-2026-116531HTTP::Body versions before 1.23_01 for Perl lose track of chunk boundaries in chunked request bodies when a read ends inside a chunkHTTP-Body
- CVE-2026-116285HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodiesHTTP-Body
- CVE-2026-116135HTTP::Body versions before 1.23_01 for Perl drop mixed-case percent escapes from urlencoded form fields instead of decoding themHTTP-Body
- CVE-2026-116134HTTP::Body versions before 1.23_01 for Perl allow memory exhaustion via an unbounded multipart part header blockHTTP-Body
- CVE-2026-116133HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic rescanning of a multipart body with a missing or malformed boundaryHTTP-Body
- CVE-2026-116132HTTP::Body versions before 1.23_01 for Perl leave the temporary file of an incomplete multipart upload on diskHTTP-Body
- CVE-2026-116131HTTP::Body versions before 1.23_01 for Perl allow memory and temporary file exhaustion via an unlimited number of form fields and multipart partsHTTP-Body
- CVE-2026-82962Out-of-bounds write in Zephyr Ethernet L2 when adding the link-layer header to a forwarded packetzephyrproject zephyr
- CVE-2026-118581NoSQL injection via mismatched BSON size prefix in raw document splice to the wire protocolMongoDB Java Driver
- CVE-2026-118611Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution VulnerabilityAlpine iLX-F511
- CVE-2026-118609Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution VulnerabilityAlpine iLX-F511
- CVE-2026-118608Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process_test Out-Of-Bounds Read Information Disclosure VulnerabilityAlpine iLX-F511
- CVE-2026-118607Alpine iLX-F511 diagapp Command Injection VulnerabilityAlpine iLX-F511
- CVE-2026-88858Server-side expression parser denial of serviceGrafana OSS · Grafana Enterprise
- CVE-2026-118604Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution VulnerabilityAlpine iLX-F511
- CVE-2026-118601Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution VulnerabilityAlpine iLX-F511
- CVE-2026-117626Jenkins 2.587 and earlier, LTS 2.580.1 and earlier improperly identifies file paths attempting path traversal in the file browser for workspJenkins Project Jenkins
- CVE-2026-117625A missing permission check in Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers with Overall/Read permission to obtain theJenkins Project Jenkins
- CVE-2026-117624Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not consistently enforce the restriction on deserializing objects of types marked asJenkins Project Jenkins
- CVE-2026-117623Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not escape the text shown in the tooltips of breadcrumb bar overflow menu entries, rJenkins Project Jenkins
- CVE-2026-117622Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows agents to send exceptions implementing the Stapler HttpResponse interface to the cJenkins Project Jenkins
- CVE-2026-117621Jenkins 2.587 and earlier, LTS 2.580.1 and earlier computes on the agent the URL of the link shown in the workspace browser for each file anJenkins Project Jenkins
- CVE-2026-117620Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers with Overall/Read permission to trigger warnings in the "Manage Old DataJenkins Project Jenkins
- CVE-2026-117619Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows requests authenticated using HTTP Basic authentication, including with an API tokeJenkins Project Jenkins
- CVE-2026-117618In Jenkins 2.587 and earlier, LTS 2.580.1 and earlier, the HTTP endpoint for creating the first user account does not check whether the setuJenkins Project Jenkins
- CVE-2026-117617Jenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic links in the path of an extracted file only before creating its parenJenkins Project Jenkins
- CVE-2026-117616Jenkins 2.587 and earlier, LTS 2.580.1 and earlier provides an HTTP endpoint that loads agents by name without validating the name, allowingJenkins Project Jenkins
- CVE-2026-117615Jenkins 2.587 and earlier, LTS 2.580.1 and earlier follows symbolic links when copying the directory of an item being renamed, allowing attaJenkins Project Jenkins
- CVE-2026-117614Jenkins 2.587 and earlier, LTS 2.580.1 and earlier converts the launch commands in older agent configurations into launchers provided by theJenkins Project Jenkins
- CVE-2026-117613Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not restrict item types in collections after deserialization, allowing attackers witJenkins Project Jenkins
- CVE-2026-117612Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not apply its deserialization filter to classes referenced by the `resolves-to` attrJenkins Project Jenkins
- CVE-2026-114349Apache Kafka: Denial of service via unbounded memory allocation when decoding compressed record batchesApache Software Foundation Apache Kafka
- CVE-2026-112375Apache Kafka: Unauthorized principal can read arbitrary broker files via IncrementalAlterConfigsApache Software Foundation Apache Kafka
- CVE-2026-116593Apache Kafka: Kafka Connect configuration provider values exposed via validation REST API endpointApache Software Foundation Apache Kafka
- CVE-2026-115644Apache Kafka: Connect Admin REST API Authentication Bypass via Unapplied REST ExtensionsApache Software Foundation Apache Kafka
- CVE-2026-111551Apache Kafka: Denial of service in Kafka Streams and client deserializers via unbounded memory allocationApache Software Foundation Apache Kafka
- CVE-2026-111496Apache Kafka: Kafka Streams StreamThread hang from integer overflow in stream-time punctuationApache Software Foundation Apache Kafka
- CVE-2026-111115Apache Kafka: Broker OutOfMemoryError via tagged-field allocation amplification in flexible protocol request parsingApache Software Foundation Apache Kafka
- CVE-2026-111108Apache Kafka: Broker OutOfMemoryError via array allocation amplification in code-generated protocol readersApache Software Foundation Apache Kafka
- CVE-2026-111073Apache Kafka: PushTelemetry (KIP-714) metrics payloads are decompressed without a size limit, allowing a broker out-of-memory denial of serviceApache Software Foundation Apache Kafka
- CVE-2026-110985Apache Kafka: Broker silently skips JWT signature verification for SASL/OAUTHBEARER when the JWKS endpoint URL is not configuredApache Software Foundation Apache Kafka
- CVE-2026-110952Apache Kafka: Broker does not enforce JWT issuer and audience validation for SASL/OAUTHBEARER by defaultApache Software Foundation Apache Kafka
- CVE-2026-83525Apache Kafka: Incorrect boolean operator in FetchSnapshot RPC handler allows authenticated network clients to crash the KRaft controller via a malformed request.Apache Software Foundation Apache Kafka
- CVE-2026-103405Session Smart Router and Session Smart Conductor: Unsanitized input causes HTTP response splittingJuniper Networks Session Smart Router · Juniper Networks Se…
- CVE-2026-103404Session Smart Conductor: Insecure file permissions cause unauthorized access to sensitive routing credentialsJuniper Networks Session Smart Conductor
- CVE-2026-103400Session Smart Router and Session Smart Conductor: Crafted directory names cause arbitrary filesystem unmounting during service cleanupJuniper Networks Session Smart Router · Juniper Networks Se…
- CVE-2026-103394Session Smart Router: An incomplete operator causes the use of incorrect encryption keys during security policy updates.Juniper Networks Session Smart Router
- CVE-2026-103393Session Smart Router: An attacker can cause an out-of-bounds read during VRRP packet processingJuniper Networks Session Smart Router
- CVE-2026-103392Session Smart Router: A SACK option causes out-of-bounds memory access and TCP payload corruption when TCP sequence stitching is enabledJuniper Networks Session Smart Router
- CVE-2026-93536X.Org Server GestureBuildSprite Use-After-Freex.org xorg-x11-server · x.org xwayland
- CVE-2026-103391Session Smart Router: An attacker-controlled TCP option causes an out-of-bounds write when using the TCP proxy featureJuniper Networks Session Smart Router
- CVE-2026-103390Session Smart Router and Session Smart Conductor: A malformed HTTP URI causes a service crash during HTTP application identificationJuniper Networks Session Smart Router · Juniper Networks Se…
- CVE-2026-93524X.Org Server XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Readx.org xorg-x11-server · x.org xwayland
- CVE-2026-50542Xibo: IDOR (Broken Object-Level Authorization) on GET /layout/status/{id} Allows Arbitrary Layout Metadata Disclosurexibosignage xibo-cms
- CVE-2026-118029Unverified ownership of the default Athena query result location in AWS SDK for pandasaws-sdk-pandas
- CVE-2026-50543Xibo: Missing Authorization on POST /displaygroup/criteria/{displayGroupId} Allows Arbitrary Scheduling Criteria Injection to Player Devicesxibosignage xibo-cms
- CVE-2026-50539Xibo: Missing Object-Level Authorization on /notification/export/{id} Allows Authenticated Users to Download Arbitrary Attachmentsxibosignage xibo-cms
- CVE-2026-112356GFI KerioConnect < 10.0.9p2 XSS via Link Auto-FormatterGFI USA GFI KerioConnect
- CVE-2026-67187Ninja Forms WordPress Plugin < 3.15.4 Server-Side Validation Bypass via List FieldsSaturday Drive Ninja Forms
- CVE-2026-115402OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local users to cause a denial of service (system crash) via a race condition iOpenVPN ovpn-dco-win
- CVE-2026-50541Xibo: IDOR (Broken Object-Level Authorization) on GET /dataset/export/csv/{id} Allows Arbitrary Dataset Exportxibosignage xibo-cms
- CVE-2026-59959SAIL: WebP decoder division by zero through malformed animated canvas metadataHappySeaFox sail
- CVE-2026-93516.Org Server XInput Passive Grab Use-After-Freex.org xorg-x11-server · x.org xwayland
- CVE-2026-116404WordPress Redux Framework plugin <= 4.5.16 - Broken Access Control vulnerabilityDavid Anderson Redux Framework
- CVE-2026-115957WordPress WP Discussion Board plugin <= 2.6.0 - Cross Site Scripting (XSS) vulnerabilityWP Discussion Board
- CVE-2026-55369Waline login accepts a non-string email as a match-all MongoDB querywalinejs waline · @waline/vercel
- CVE-2026-93515.Org Server Present Extension Use-After-FreeX.org xorg-x11-server · x.org xwayland
- CVE-2026-21830HCL BigFix AEX is affected by multiple security vulnerabilities.HCL Software BigFix AEX
- CVE-2026-67077HCL BigFix AEX is affected by multiple security vulnerabilities.HCL Software BigFix AEX
- CVE-2026-67079HCL BigFix AEX is affected by multiple security vulnerabilities.HCL Software BigFix AEX
- CVE-2026-67080HCL BigFix AEX is affected by multiple security vulnerabilities.HCL Software BigFix AEX
- RUSTSEC-2026-0415Unbounded memory use on large request bodiesjuniper_hyper
- RUSTSEC-2026-0416Stack overflow on deeply nested GraphQL documentsjuniper
- RUSTSEC-2026-0417Excessive CPU and memory use on crafted GraphQL documentsjuniper
- RUSTSEC-2026-0418libz-sys build script leaks environment variables in the build directorylibz-sys
- CVE-2026-81472Dell iDRAC Service Module (iSM) for Windows, Dell iDRAC Service Module (iSM) for Linux, and Dell iDRAC Service Module (iSM) for ESXi, versioDell iDRAC Service Module for Windows · Dell iDRAC Servi… +1
- CVE-2026-102799Joomla Extension - icagenda.com - CSV formula injection in the registrations export in iCagenda 3.5.0 to 4.0.16icagenda.com iCagenda extension for Joomla
- CVE-2026-116855WordPress My auctions allegro plugin <= 4.0.3 - Broken Access Control vulnerabilitywphocus My auctions allegro
- CVE-2026-115223Smart Popup by Supsystic < 2.0.2 - Admin+ SSTI via Popup Text BlockSmart Popup by Supsystic
- CVE-2026-110508Essential Addons for Elementor 6.7.3 - 6.8.6 - Unauthenticated Registration Approval Bypass via OTP VerificationEssential Addons for Elementor
- CVE-2026-106648Royal Elementor Addons < 1.7.1070 - Unauthenticated Arbitrary Email Recipient Injection via Form Field ID ShortcodesRoyal Elementor Addons
- CVE-2026-103330Sadad QA Payment 1.28 - Unauthenticated Arbitrary Order Payment Confirmation via Signature BypassSadad QA Payment
- CVE-2026-103313BitPay Gateway for WooCommerce <= 4.1.3 - Unauthenticated Payment Bypass via Payment Return HandlerBitPay Gateway for WooCommerce
- CVE-2026-99215power: supply: core: prevent unregistering a power supply while a callback runsLinux
- CVE-2026-99214drm/vc4: hdmi: Move packet RAM enable to PM runtimeLinux
- CVE-2026-99211netlink: reset skb headers before unicast and multicast filteringLinux
- CVE-2026-99210accel/rocket: clear rdev on device init failureLinux
- CVE-2026-99209drm/xe: skip eviction of a BO with no resourceLinux
- CVE-2026-99208drm/xe/oa: Zero OA buffer at allocationLinux
- CVE-2026-99207scsi: target: Disable interrupts while holding delayed_cmd_lockLinux
- CVE-2026-99206scsi: target: iscsi: Fix race in discovery auth updatesLinux
- CVE-2026-99205sched/core: Call wakeup_preempt() for queued tasks during class changeLinux
- CVE-2026-99204ocfs2/dlm: Protect the recovery list during debugfs readsLinux
- CVE-2026-99202scsi: libsas: Fix SMP IO deadlock during HA resumeLinux
- CVE-2026-99201netlink: avoid hashing the network namespace pointerLinux
- CVE-2026-99200net: hisilicon: hisi_femac: Move setting of netops to fix crashLinux
- CVE-2026-99199net: hisilicon: hip04_eth: Move setting of netops to fix crashLinux
- CVE-2026-99198net: ethernet: actions: Move setting of netops to fix crashLinux
- CVE-2026-99197net: mv643xx: move setting of netops to fix crashLinux
- CVE-2026-99196net: au1000: move setting of netops to fix crashLinux
- CVE-2026-99195net: ethoc: move setting of netops to fix crashLinux
- CVE-2026-99194net: ethernet: aeroflex: move setting of netops to fix crashLinux
- CVE-2026-99193net: ti: icssm-prueth: Move setting of netops to fix crashLinux
- CVE-2026-99192net: bcmgenet: unshare the skb before writing the control blockLinux
- CVE-2026-99191calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()Linux
- CVE-2026-99190gpiolib: fix memory leak in gpiod_set_array_value_complex() on error pathsLinux
- CVE-2026-99189gpio: mxc: fix race between chained IRQ handler install and probe completionLinux
- CVE-2026-99188net: stmmac: dwmac1000: clear the RGMII status interruptLinux
- CVE-2026-99187perf: Fix perf_pmu_migrate_context() leaving events behindLinux
- CVE-2026-99186x86/insn-eval: Fix shadowed segment index in get_seg_reg_override_idx()Linux
- CVE-2026-99184accel/rocket: search every core slot when a core is removedLinux
- CVE-2026-99183accel/rocket: search every core slot when looking up a schedulerLinux
- CVE-2026-99182ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH captureLinux
- CVE-2026-99181autofs: ignore notification errors from a replaced pipeLinux
- CVE-2026-99179watch_queue: Fix note pool publication race in watch_queue_set_size()Linux
- CVE-2026-99178x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI contextLinux
- CVE-2026-99176KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-EntryLinux
- CVE-2026-99175fsnotify: prevent mark additions during connector teardownLinux
- CVE-2026-99174ext4: free the sbi after a grace periodLinux
- CVE-2026-99172ipc: drop the mqueue mount with kern_unmount() on setup failureLinux
- CVE-2026-99171ntfs3: free the sbi after a grace periodLinux
- CVE-2026-99169futex: Fix mm reuse handling for FUT_OFF_MMSHAREDLinux
- CVE-2026-99168mshv_vtl: Check per-CPU register page before mmapLinux
- CVE-2026-99166net: rds: fix uninitialized trans dereference in CM event handlerLinux
- CVE-2026-99165sctp: revalidate output stream after association connect waitLinux
- CVE-2026-99162gpio: shared: fix use-after-free bug when adding shared proxiesLinux
- CVE-2026-99161i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()Linux
- CVE-2026-99160ring-buffer: Do not show buffer_meta for CPUs without a bufferLinux
- CVE-2026-99159ring-buffer: Fix the sub-buffer array base in rb_meta_subbuf_idx()Linux
- CVE-2026-99158ring-buffer: Fix false warning in ring_buffer_map_get_reader()Linux
- CVE-2026-99157scsi: bsg: Pass reply_len to bsg_setup_queue() to fit UFS ARPMB repliesLinux
- CVE-2026-99155scsi: xen/scsifront: Check for a NULL shadow entry on a backend responseLinux
- CVE-2026-99151drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functionsLinux
- CVE-2026-99150drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gprLinux
- CVE-2026-99149drm/amdgpu: fix GEM object leak on ENOMEM in userptr ioctlLinux
- CVE-2026-99147drm/exec: don't immediately add prelocked obj to array of locked objsLinux
- CVE-2026-99146drm/i915/dmc: Add sanity check for DMC load addressLinux
- CVE-2026-99145drm/xe: Don't transfer shrinker pages for pinned bos on purgeable state changeLinux
- CVE-2026-99144sched_ext: Fix use-after-free of a destroyed user DSQ by a deferred reenqueueLinux
- CVE-2026-99141tracing: Fix crash in print_graph_function_event()Linux
- CVE-2026-99140tracing: Fix hist trigger timestamps for buffered eventsLinux
- CVE-2026-99139tcp: fix use-after-free in do_tcp_getsockopt(TCP_CONGESTION)Linux
- CVE-2026-99138tcp: fix use-after-free in do_tcp_getsockopt(TCP_CC_INFO)Linux
- CVE-2026-99137cifs: don't update i_size in cifs_do_truncate without a cached handleLinux
- CVE-2026-99135dm-integrity: fix infinite loop on discard with large tag sizeLinux
- CVE-2026-99134mac802154: fix data race and NULL deref on local->assoc_devLinux
- CVE-2026-99133net/iucv: fix the recvmsg window updateLinux
- CVE-2026-99132xfs: don't hold buffer locks across sync transaction commit in xfs_sync_sb_bufLinux
- CVE-2026-99130io_uring/cancel: don't spin on local work the task can't runLinux
- CVE-2026-99129selinux: fix BPF token permission checksLinux
- CVE-2026-99128sctp: validate chunk length in the inqueue parserLinux
- CVE-2026-99127page_pool: keep frag_offset aligned for odd-sized requestsLinux
- CVE-2026-99126s390/ctcm: Prevent XID null dereferenceLinux
- CVE-2026-99125s390/pai: Handle multiple PMU stop callback invocationsLinux
- CVE-2026-99124s390/pci: Fix leak of uninitialized kernel data in SCLP reportLinux
- CVE-2026-99121ipv4: avoid divide by zero in fib_rebalanceLinux
- CVE-2026-99120KVM: x86/mmu: Cope with the SS bit being set in #NPF exit codesLinux
- CVE-2026-99119drm/amdgpu/userq: actually validate userq BOsLinux
- CVE-2026-99118drm/i915/dmc: Harden DMC firmware payload parsingLinux
- CVE-2026-99115ksmbd: fill in FileSysIdentifier in FS_POSIX_INFORMATIONLinux
- CVE-2026-99114ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATIONLinux
- CVE-2026-99113ksmbd: zero the FS_OBJECT_ID_INFORMATION buffer before filling it inLinux
- CVE-2026-99111smb: client: fix data corruption with concurrent writes and O_TRUNCLinux
- CVE-2026-99108ntfs: fix FITRIM range alignmentLinux
- CVE-2026-99106drm/amdgpu: free the userptr ranges when a CS fails after parser_bosLinux
- CVE-2026-99105sched_ext: Fix stall when a task enqueued with SCX_ENQ_LAST lands back on its CPU's local DSQLinux
- CVE-2026-99104sched_ext: Fix the bypass dispatch claim for schedulers bypassed by an ancestorLinux
- CVE-2026-99103workqueue: Fix unbound pool lifetime for pending pwqsLinux
- CVE-2026-99102ntfs: take invalidate_lock in ntfs_setattr_size()Linux
- CVE-2026-99101ntfs: move attribute payload before shrinking its recordLinux
- CVE-2026-101272Incorrect session validation for API-created shredder exportspretix
- CVE-2026-101274When pretix is used as the identity provider in a Single-Sign-On (SSO) setup for customer accounts, the system did not properly validate thepretix
- CVE-2026-101273Giftcard enumerationpretix
- CVE-2026-87879Sensitive information disclosure due to improper token validation.Acronis Cyber Protect
- CVE-2026-87878Linux binaries have executable stack attribute enabled.Acronis Cyber Protect
- CVE-2026-87100Protection mechanism failure due to missing binary hardening in Linux executables.Acronis Cyber Protect
- CVE-2026-87099Cross-site scripting (XSS) vulnerability due to improper input validation.Acronis Cyber Protect
- CVE-2026-87098Sensitive information disclosure due to improper authorization.Acronis Cyber Protect
- CVE-2026-87880Sensitive information disclosure due to missing SSL certificate verification affecting one component.Acronis Cyber Protect
- CVE-2026-87101Sensitive information disclosure due to improper token validation.Acronis Cyber Protect
- CVE-2026-87097Sensitive information disclosure due to insufficiently protected credentials.Acronis Cyber Protect
- CVE-2026-86383Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 releDell PowerProtect Data Domain
- CVE-2026-86386Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1Dell PowerProtect Data Domain Management Center
- CVE-2026-86388Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-92665Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-105457Authenticated Arbitrary Local File Read via Path Traversal in HAVELSAN's Liman MYSHAVELSAN Liman MYS
- CVE-2026-86390Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-86391Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1Dell PowerProtect Data Domain Management Center
- CVE-2026-86392Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-86401Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1Dell PowerProtect Data Domain Management Center
- CVE-2026-16020Stored XSS Fazile BACAK's DefterAsist Financial Advisor PlatformFazile BACAK DefterAsist Financial Advisor Platform
- CVE-2026-90719Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1Dell PowerProtect Data Domain Management Center
- CVE-2026-90720Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-90721Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-90723Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1Dell PowerProtect Data Domain Management Center
- CVE-2026-90724Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1Dell PowerProtect Data Domain Management Center
- CVE-2026-118435Out-of-bounds write vulnerability in Samsung Open Source escargot allows Buffer Manipulation.Samsung Open Source escargot
- CVE-2026-85655Enable Media Replace <= 4.2.2 - Missing Authorization to Authenticated (Author+) Post Content Modification via Media Replacement Workflowshortpixel Enable Media Replace
- CVE-2026-101935Echo Knowledge Base <= 17.214.0 - Reflected Cross-Site Scripting via 'new_kb_config' Parameterechoplugins Echo Knowledge Base – Documentation, FAQs, Chat…
- CVE-2026-109975Cozy Blocks <= 2.2.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon.view' Block Attributecozythemes Cozy Blocks – Website Builder & Business Growth…
- CVE-2026-76005WP Inventory Manager <= 2.5.5 - Authenticated (Contributor+) SQL Injection via 'sort_order' Shortcode Attributechuck1982 WP Inventory Manager
- CVE-2026-118169Hustle <= 7.8.14.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'cta_label' Parameterwpmudev Hustle – Email Marketing, Lead Generation, Optins,…
- CVE-2026-104743Tainacan <= 1.3.0 - Authenticated (Editor+) Path Traversal to Arbitrary File Read via 'tmp_file' Parameter via Mass AssignmentTainacan
- CVE-2026-76780BeyondSEO <= 1.3.6 - Missing Authorization to Authenticated (Contributor+) Limited Privilege Escalationrankingcoach BeyondSEO – AI SEO to Improve Rankings, Listin…
- CVE-2026-110185Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More <= 1.31.0 - Unauthenticated Local File Inclusion via 'webhook' and 'body' Parametersbitpressadmin Bit Flows: AI Agent Automation & Integrations…
- CVE-2026-116750VikRentCar Car Rental Management System <= 1.4.10 - Authenticated (Contributor+) SQL Injection via 'catid' Block Attributee4jvikwp VikRentCar Car Rental Management System
- CVE-2026-109370Document Embedder <= 2.4.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via 'documentSource.doc' Block Attributebplugins Document Embedder – let visitors read files withou…
- CVE-2026-77871Post Snippets <= 4.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributessaadiqbal Post Snippets – Custom WordPress Code Snippets Cu…
- CVE-2026-107710Hustle <= 7.8.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Module Content Titlewpmudev Hustle – Email Marketing, Lead Generation, Optins,…
- CVE-2026-109988Product Addons for Woocommerce <= 3.1.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'type' Field Parameteracowebs Product Addons for Woocommerce – Product Options wi…
- CVE-2026-2839Advanced Custom Fields: Extended <= 0.9.2.7 - Missing Authorization to Unauthenticated Data Exposure via Multiple AJAX Endpointshwk-fr Advanced Custom Fields: Extended
- CVE-2026-116761CMB2 <= 2.13.4 - Unauthenticated Stored Cross-Site Scripting via Grouped WYSIWYG Field via Front-End Formjtsternberg CMB2
- CVE-2026-108366easy.jobs <= 2.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon' Block Attributewpdevteam easy.jobs – AI powered Job Listing, Job Board, Ca…
- CVE-2026-110071Mang Board <= 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' Shortcode Attributekitae-park Mang Board
- CVE-2026-111213Travelly <= 2.3.6 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Duplication via 'post' Parametermagepeopleteam Travelly – Tour & Travel Booking Manager for…
- CVE-2026-116610Clean Login <= 1.20.1 - Missing Authorization to Authenticated (Contributor+) Arbitrary Clean-Login Option Update via 'save_post' Hookhornero Clean Login
- CVE-2026-116749VikRentCar Car Rental Management System <= 1.4.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'className' Block Attributee4jvikwp VikRentCar Car Rental Management System
- CVE-2026-92098Webheadcoder Multi-Step Forms for Contact Form 7 <= 4.7 - Reflected Cross-Site Scripting via 'l10n_print_after' Parameterwebheadllc Webheadcoder Multi-Step Forms for Contact Form
- CVE-2026-109980Related Posts for WordPress <= 3.0.0 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'rp4wp_view' Parameterbarrykooij Related Posts for WordPress
- CVE-2026-104729Avada (Fusion) Builder <= 3.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tab_index' and 'empty_notice' Shortcode Attributesthemefusion Avada (Fusion) Builder
- CVE-2026-118164If-So Dynamic Content <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'repeater' Parameterifso If-So Dynamic Content – Elementor & All Page Builders…
- CVE-2026-100175Postie <= 1.9.87 - Unauthenticated Stored Cross-Site Scripting via Email Body URL Autolinkwayneallen-1 Postie
- CVE-2026-77188Waitlist Woocommerce ( Back in stock notifier ) <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'type' Shortcode Attributexootix Waitlist Woocommerce
- CVE-2026-110020Rich Showcase for Google Reviews <= 7.1.6 - Missing Authorization to Authenticated (Contributor+) Site Secret Disclosure via 'grw_auth_code' Site Secret Disclosure via grw-builder Admin Pagewidgetpack Rich Showcase for Google Reviews
- CVE-2026-109979Related Posts for WordPress <= 3.0.0 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'rp4wp_create_link' Parameterbarrykooij Related Posts for WordPress
- CVE-2026-104740If-So Dynamic Content <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'conversion' Shortcode Attributeifso If-So Dynamic Content – Elementor & All Page Builders…
- CVE-2026-111372AI ChatBot for WooCommerce <= 5.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via qcld_rag_manual_sync AJAX Actionquantumcloud AI ChatBot for WooCommerce – WoowBot
- CVE-2026-109978Cozy Blocks <= 2.2.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'productRating.iconColor' Block Attributecozythemes Cozy Blocks – Website Builder & Business Growth…
- CVE-2026-76058PayPal Brasil para WooCommerce <= 1.7.8 - Missing Authorization to Unauthenticated Payment Gateway Modification via 'bcdc_activation_update' Actionodefranca PayPal Brasil para WooCommerce
- CVE-2026-109972s2Member <= 261011 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'date_format' Shortcode Attributeclavaque s2Member – Excellent for All Kinds of Memberships,…
- CVE-2026-111068DesignSetGo <= 2.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tagName' Block Attributejustinnealey DesignSetGo
- CVE-2026-109590Travelly <= 2.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width', 'height', and 'zoom' Shortcode Attributesmagepeopleteam Travelly – Tour & Travel Booking Manager for…
- CVE-2026-109385UiChemy <= 5.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slot Link URLposimyththemes UiChemy – Convert Figma, Prompts and AI Buil…
- CVE-2026-103996If-So Dynamic Content <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via ifso-redirect Shortcode 'url' Attributeifso If-So Dynamic Content – Elementor & All Page Builders…
- CVE-2026-103370Awesome Support <= 6.4.1 - Authenticated (Custom+) Stored Cross-Site Scripting via Ticket Attachment MIME Confusionawesomesupport Awesome Support – WordPress HelpDesk & Suppo…
- CVE-2026-116609WP Visitor Statistics (Real Time Traffic) <= 8.8 - Authenticated (Contributor+) SQL Injection via 'from' Shortcode Attributeosamaesh WP Visitor Statistics
- CVE-2026-115281Recipe Card Blocks 3.5.0 - 3.6.3 - Contributor+ SQLi via 'recipeId' AttributeRecipe Card Blocks Lite
- CVE-2026-115255WP Roster < 2.35 - Unauthenticated Roster Member DeletionWP Roster
- CVE-2026-115225Smart Popup by Supsystic < 2.0.2 - Unauthenticated SSRF via MailChimp Groups LookupCustomer Engagement System
- CVE-2026-115224Smart Popup by Supsystic < 2.0.2 - Admin+ SQLi via Popup Page/Category BindingCustomer Engagement System
- CVE-2026-113813PayPlug for WooCommerce 2.8.0 - 3.1.0 - Unauthenticated Arbitrary Order Deletion, Modification and DisclosurePayPlug for WooCommerce
- CVE-2026-113494GeoDirectory < 2.8.195 - Contributor+ Non-Public Listing Disclosure via gd_post_content ShortcodeGeoDirectory
- CVE-2026-113488GeoDirectory < 2.8.196 - Contributor+ Stored XSS via gd_post_badge 'cta' AttributeGeoDirectory
- CVE-2026-113487GeoDirectory < 2.8.196 - Contributor+ Stored XSS via gd_post_badge 'link' AttributeGeoDirectory
- CVE-2026-113486Media Library Assistant < 3.42 - Trashed Attachment Deletion via CSRFMedia Library Assistant
- CVE-2026-113485Media Library Assistant < 3.42 - Bulk Attachment Deletion via CSRFMedia Library Assistant
- CVE-2026-111967MP3 Audio Player by Sonaar 5.9 - 5.15 - Contributor+ Stored XSS via Shortcode AttributeMP3 Audio Player
- CVE-2026-111961Royal MCP < 1.5.10 - Contributor+ Private and Draft Content Disclosure and publish_posts Bypass via elementor_clone_pageRoyal MCP
- CVE-2026-111960Royal MCP 1.4.38 - 1.5.9 - Subscriber+ Non-Public Post Disclosure via wp_search AbilityRoyal MCP
- CVE-2026-111032Welcart e-Commerce < 2.12.6 - Author+ Arbitrary Product SKU Update and Disclosure via item_sku_ajaxWelcart e-Commerce
- CVE-2026-111031Welcart e-Commerce < 2.12.6 - Unauthenticated Open Redirect via 'usces_referer' ParameterWelcart e-Commerce
- CVE-2026-111027Welcart e-Commerce < 2.12.6 - Editor+ SQLi via 'log_id' ParameterWelcart e-Commerce
- CVE-2026-110691WPOrLogin < 3.1.0 - Unauthenticated Hide Login Slug UpdateWPOrLogin
- CVE-2026-110524Copy Anything to Clipboard < 5.5.5 - Contributor+ Stored XSS via 'success-text' Shortcode AttributeCopy Anything to Clipboard for WordPress
- CVE-2026-110509Essential Addons for Elementor < 6.8.7 - Unauthenticated Private Post Meta Disclosure via load_more AJAX HandlerEssential Addons for Elementor
- CVE-2026-110507Page Builder by SiteOrigin < 2.38.0 - Contributor+ Sensitive Data Disclosure via Post Loop Widget Query ArgumentsPage Builder by SiteOrigin
- CVE-2026-110506Page Builder by SiteOrigin < 2.38.0 - Contributor+ Stored XSS via panels_info.classPage Builder by SiteOrigin
- CVE-2026-110292PayPlug for WooCommerce 2.9.0 - 3.1.0 - Unauthenticated Order Key Disclosure and Order Cancellation via payplug_create_intentPayPlug for WooCommerce
- CVE-2026-107100Royal Elementor Addons 1.3.81 - 1.7.1069 - Unauthenticated Non-Public Post Content Disclosure via wpr_get_page_contentRoyal Addons for Elementor
- CVE-2026-107098Royal Elementor Addons 1.7.1037 - 1.7.1069 - Contributor+ Stored XSS via Google Maps Widget Height SettingRoyal Addons for Elementor
- CVE-2026-107097Royal Elementor Addons 1.3.71 - 1.7.1069 - Unauthenticated Mailchimp Audience Injection via mailchimp_subscribeRoyal Addons for Elementor
- CVE-2026-106647Royal Elementor Addons 1.3.68 - 1.7.1069 - Author+ Form Submission Interception via Widget ID CollisionRoyal Addons for Elementor
- CVE-2026-106003Court Reservation < 1.12.4 - Unauthenticated Reservation Type Addition and DeletionCourt Reservation
- CVE-2026-106002Court Reservation < 1.12.4 - Unauthenticated Arbitrary Challenge DeletionCourt Reservation
- CVE-2026-105997Booking Package < 1.7.33 - Unauthenticated Verification Email Sending to Arbitrary RecipientBooking Package
- CVE-2026-104694Thrive Automator < 11.2 - Editor+ Blind SQLi via 'additional' ParameterThrive Automator
- CVE-2026-103382Casso Auto-confirm Bank Transfer < 4.2.0 - Unauthenticated WooCommerce Order Payment ConfirmationCasso Flow
- CVE-2026-103372Payconiq for WooCommerce <= 1.0.4 - Unauthenticated Order Key DisclosurePayconiq
- CVE-2026-103331UniPAY Payment Gateway For WooCommerce <= 2.3 - Unauthenticated Order Payment Forgery via Empty IPN SecretUniPAY Payment Gateway For WooCommerce
- CVE-2026-109236Customer Email Verification for WooCommerce <= 2.8.2 - Unauthenticated Authentication Bypass via Predictable Email-Verification Token to 'cusomer_email_verify' Parameterzorem Customer Email Verification for WooCommerce
- CVE-2026-115522Cross-Application Artifact Namespace Isolation in Google Agent Development Kit (ADK) for PythonGoogle Agent Development Kit (ADK) for Python
- CVE-2026-99100wifi: p54: validate firmware record lengthsLinux
- CVE-2026-118276a2ui-project a2ui Parser expression_parser.ts formatString resource consumptiona2ui-project a2ui
- CVE-2026-111727Appointment Booking Calendar <= 1.4.05 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'vs_text_submitbtn' Parametercodepeople Appointment Booking Calendar
- CVE-2026-118275a2ui-project a2ui Resolver data-context.ts DataContext.resolveSignal resource consumptiona2ui-project a2ui
- CVE-2026-118384GNU mtools before 4.0.50 has an out-of-bounds write in parse_vses in vfat.c.GNU mtools
- CVE-2026-118274a2ui-project a2ui Binder generic-binder.ts resource consumptiona2ui-project a2ui
- CVE-2026-118273a2ui-project a2ui data-model.ts DataModel.set resource consumptiona2ui-project a2ui
- CVE-2026-107745AI Engine <= 3.8.4 - Authenticated (Subscriber+) Limited Media File Deletion via 'metadata' Parametertigroumeow AI Engine – MCP Server & AI Chatbot for WordPres…
- CVE-2026-109209All-in-One Video Gallery <= 4.9.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'embedcode' Post Meta via XML-RPCplugins360 All-in-One Video Gallery – Video Player & Galler…
- CVE-2026-109974All-in-One Video Gallery <= 4.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'more_link' Shortcode Attributeplugins360 All-in-One Video Gallery – Video Player & Galler…
- CVE-2026-107625Ultimate Member <= 2.14.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'user_url' Profile Fieldultimatemember Ultimate Member – User Profile, Registration…
- CVE-2026-115624GROWI contains a missing authorization check vulnerability in its collaborative editing feature.GROWI
- CVE-2026-109848GROWI contains an authorization bypass vulnerability in its tag update API and the page update API due to improper use of a user-controlled GROWI
- CVE-2026-105272GROWI contains an authorization bypass vulnerability in its page viewing and commenting functionality due to improper use of a user-controllGROWI
- CVE-2026-118376WeKnora before 0.8.2 SSRF Guard Bypass via NAT64 IPv6 AddressesTencent WeKnora
- CVE-2026-118373LibreSSL ocspcheck through 4.4.0 Cleartext Transmission of OCSP Requests via url2host()OpenBSD LibreSSL
- CVE-2026-118372LibreSSL ocspcheck through 4.4.0 CRLF Injection via AIA OCSP URL PathOpenBSD LibreSSL
- CVE-2026-118371LibreSSL through 4.4.0 CRLF Injection via OCSP_sendreq_new() Request LineOpenBSD LibreSSL
- CVE-2026-117608Assimp through 6.0.5 Heap Out-of-Bounds Read via MD2 Importer Integer Overflowassimp
- CVE-2026-117606NexoPOS through 6.3.0 Missing Authorization via Cash Register Session ActionsBlair2004 NexoPOS
- CVE-2026-117605nopCommerce before 5.00.0 Missing Authorization via Admin ProductController Add Popup HandlersnopSolutions nopCommerce
- CVE-2013-20009Linksys WAG200G through 1.01.06 Stored XSS via policy_name ParameterLinksys WAG200G
- CVE-2026-118272a2ui-project a2ui Error data-context.ts DataContext.dispatchExpressionError information exposurea2ui-project a2ui
- CVE-2026-118271a2ui-project a2ui data-context Resolver data-context.ts resource consumptiona2ui-project a2ui
- CVE-2026-106971An integer overflow in the MessagePack\BufferUnpacker component of rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a deni