CVEs published October 29, 2026
544 CVEs were published on October 29, 2026: 67 critical, 189 high.
- Published
- 544
- Critical
- 67
- High
- 189
- Medium
- 218
- Low
- 24
- Unrated
- 46
- Now in CISA KEV
- 0
- Fix available
- 267
Most affected products
- IBM Langflow OSS
- 33
- Progress Software WS_FTP Server
- 15
- Microsoft Edge
- 14
- digitalbazaar forge · node-forge
- 11
- RT-Labs P-Net
- 11
- BMC IT Service Management Suite
- 9
- Elastic Cloud Enterprise
- 7
- py-pdf pypdf · pypdf
- 7
- Apereo Foundation openEQUELLA
- 6
- bytecodealliance wasmtime
- 6
Critical 67
- CVE-2023-22793A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization…Veeam Management Pack for Microsoft System Center
- CVE-2026-61707SOCFortress CoPilot: Stored case-report template injection permits backend code executionsocfortress CoPilot
- CVE-2026-61645Docat has Arbitrary File Upload exists in Upload APIdocat-org docat
- CVE-2026-103093Sandbox Escape via Table Rotation in ServiceNow AI PlatformServiceNow AI Platform
- CVE-2026-118769Botan: Integer overflow when reporting block size in FFI can cause memory corruptionrandombit botan
- CVE-2026-118762Monkeytype: fork PR can execute code with elevated GITHUB_TOKENmonkeytypegame monkeytype
- CVE-2026-119145Frappe before 15.121.0 and 16.x before 16.34.0 Path Traversal RCE via File Uploadfrappe
- CVE-2026-119128ZITADEL 4.0.0 before 4.19.5 Login V2 Account Takeover via Forgeable verificationCheck Cookiezitadel
- CVE-2026-90868OS Command Injection in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-90866Virtual Folder Path Confinement Bypass in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-90865Command Injection via FTP Notification Variables in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-90864Host Administrator Path Containment Bypass in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-90863Privilege Escalation via Missing Authorization in WS_FTP ManagerProgress Software WS_FTP Server
- CVE-2026-84295Improper Authentication in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-111732Out-of-bounds write when parsing AR Vendor Block requestsRT-Labs P-Net
- CVE-2026-112256Logon bypass (trust of attacker-controlled completed-methods list)OpenText Advanced Authentication Server
- CVE-2026-62131WordPress Zoho Flow plugin <= 2.14.5 - PHP Object Injection vulnerabilityZoho Flow
- CVE-2026-62018WordPress Gunslinger theme <= 1.11 - PHP Object Injection vulnerabilityThemeREX Gunslinger
- CVE-2026-62017WordPress Good Homes theme <= 1.3.13 - PHP Object Injection vulnerabilityThemeREX Good Homes
- CVE-2026-62016WordPress Gamic theme <= 1.19 - PHP Object Injection vulnerabilityThemeREX Gamic
- CVE-2026-62015WordPress Gamezone theme <= 1.1.11 - PHP Object Injection vulnerabilityThemeREX Gamezone
- CVE-2026-62014WordPress EmojiNation theme <= 1.0.12 - PHP Object Injection vulnerabilityThemeREX EmojiNation
- CVE-2026-62013WordPress Edge Decor theme <= 2.9 - PHP Object Injection vulnerabilityThemeREX Edge Decor
- CVE-2026-62012WordPress Coinpress theme <= 1.0.15 - PHP Object Injection vulnerabilityThemeREX Coinpress
- CVE-2026-62011WordPress Bonbon theme <= 1.11 - PHP Object Injection vulnerabilityThemeREX Bonbon
- CVE-2026-62010WordPress Avventure theme <= 1.1.12 - PHP Object Injection vulnerabilityThemeREX Avventure
- CVE-2026-62009WordPress Filmax theme <= 1.1.11 - PHP Object Injection vulnerabilityThemeREX Filmax
- CVE-2026-62008WordPress Orpheus theme <= 1.8 - PHP Object Injection vulnerabilityThemeREX Orpheus
- CVE-2026-62006WordPress Nuts theme <= 1.12 - PHP Object Injection vulnerabilityThemeREX Nuts
- CVE-2026-62005WordPress Muzicon theme <= 1.15 - PHP Object Injection vulnerabilityThemeREX Muzicon
- CVE-2026-62004WordPress Motorix theme <= 1.11 - PHP Object Injection vulnerabilityThemeREX Motorix
- CVE-2026-62003WordPress Mission theme <= 1.22 - PHP Object Injection vulnerabilityThemeREX Mission
- CVE-2026-62002WordPress Meals & Wheels theme <= 1.1.13 - PHP Object Injection vulnerabilityThemeREX Meals & Wheels
- CVE-2026-62001WordPress Marcell theme <= 1.2.14 - PHP Object Injection vulnerabilityThemeREX Marcell
- CVE-2026-61998WordPress Le Truffe theme <= 1.1.7 - PHP Object Injection vulnerabilityThemeREX Le Truffe
- CVE-2026-61997WordPress Legal Stone theme <= 1.2.11 - PHP Object Injection vulnerabilityThemeREX Legal Stone
- CVE-2026-61992WordPress GEO my WordPress plugin <= 4.5.5.4 - PHP Object Injection vulnerabilityVon Eyal Fitoussi GEO my WordPress
- CVE-2026-61991WordPress AjaxLoadMore Cache plugin <= 3.1.1 - Remote Code Execution (RCE) vulnerabilityAjax Load More AjaxLoadMore Cache
- CVE-2026-54860WordPress Ozisti theme <= 1.1.10 - PHP Object Injection vulnerabilityThemeREX Ozisti
- CVE-2026-54859WordPress Preservation theme <= 1.15 - PHP Object Injection vulnerabilityThemeREX Preservation
- CVE-2026-54858WordPress Printy theme <= 1.13.0 - PHP Object Injection vulnerabilityThemeREX Printy
- CVE-2026-54857WordPress Quirky theme <= 1.23 - PHP Object Injection vulnerabilityThemeREX Quirky
- CVE-2026-54856WordPress RexCoin theme <= 1.2.6 - PHP Object Injection vulnerabilityThemeREX RexCoin
- CVE-2026-93680Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-104339Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-107327Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-107328Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-107329Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-110186Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-119050Agno through 3.1.11 Code Execution via PandasTools Unsafe Reflectionagno-agi agno
- CVE-2026-97854Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability.Yamaha NWR100
- CVE-2026-115964WordPress Motors plugin <= 1.4.126 - SQL Injection vulnerabilityStylemixThemes Motors
- CVE-2026-114358SQL Injection Vulnerability in Radius Xenia M2M PlatformRadius Synergies Radius Xenia M2M Platform
- CVE-2026-115245Chat AI with Dispatcher < 2.4 - Unauthenticated Arbitrary File UploadChat AI with Dispatcher
- CVE-2026-113617Automated Import Products to Cart < 1.0.4 - Subscriber+ Arbitrary File Read and Deletion via Path TraversalAutomated Import Products to Cart
- CVE-2026-113616LogixFast Auth < 1.0.4 - Unauthenticated Account Takeover via Password ResetLogixFast Auth
- CVE-2026-103693Frontend Dashboard < 3.0.5 and ProfileGrid < 6.0.0.5 - Unauthenticated PHP Object InjectionFrontend Dashboard · ProfileGrid
- CVE-2026-109516Bot for Telegram on WooCommerce <= 1.3.0 - Unauthenticated Authentication Bypass to Account Takeover via Fake Telegram Webhook + Brute-Forced Login Tokenguruteam Bot for Telegram on WooCommerce
- CVE-2026-42922A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2-2809).Frangoteam
- CVE-2026-66088Unrestricted Command Execution via system.executeApereo Foundation openEQUELLA
- CVE-2026-107015Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in another user's' note dat
- CVE-2026-107017Insecure permissions in the ShortcutDispatchActivity component of canvoki versionCode 14 allows unauthorized attackers to arbitrarily…
- CVE-2026-107028Insecure permissions in wbpxre150 Shopping List v11.0 (versionCode 11) allows unauthorized attackers to invoke an exported component…
- CVE-2026-107032Insecure permissions in Bulk Share : Location Sender v2.1.0 (versionCode 5) allows unauthorized attackers to invoke an exported component, l
- CVE-2026-107034Insecure permissions in LeafPad / Leaf Note v1.21 (versionCode 21) allows unauthorized attackers to arbitrarily read another user's note…
- CVE-2026-107058An issue in Shelter versionCode 445 allows attackers to register their own auth_key and execute a takeover of another user's binder…
- CVE-2026-107060Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to another user's VPN…
High 189
- CVE-2026-92744Delinea Privilege Manager agent unauthenticated remote code execution vulnerabilityDelinea Privilege Manager
- CVE-2026-107238A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account on servers running…Veeam Management Pack for Microsoft System Center
- CVE-2026-107239A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution (RCE) on servers…Veeam Management Pack for Microsoft System Center
- CVE-2026-119286GraphQL-core: Denial of service via memory leak in aborted validationsgraphql-python graphql-core · graphql-core
- CVE-2026-61719WeGIA: Stored Cross-Site Scripting (XSS) in "historico_prontuarios.php" via "textoProntuario" FieldLabRedesCefetRJ WeGIA
- CVE-2026-61671WeGIA: Systemic IDOR + Missing CSRF — extract($_REQUEST) in All Controle ClassesLabRedesCefetRJ WeGIA
- CVE-2026-61654Lightdash: Unauthenticated dbt Cloud webhook with path injection leaks API keylightdash
- CVE-2026-45049OpenAM Session Hijacking via CDSSOOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-119283joserfc: Unbounded JWE General JSON `recipients` Array Leads to CPU Exhaustion (DoS) via Repeated RSA Private-Key Decryptionauthlib joserfc · joserfc
- CVE-2026-119282Nx: OS command injection via nx.json plugin options in @nx/maven and @nx/gradlenrwl nx · @nx maven +3
- CVE-2026-13303Boundary vulnerable to server-side request forgery in Vault credential storeHashiCorp Boundary
- CVE-2026-61576Lightdash: Unauthenticated dbt Cloud webhook with path injection leaks API keylightdash
- CVE-2026-119209pypdf: Possible large memory usage when parsing cross-reference streamspy-pdf pypdf · pypdf
- CVE-2026-119208pypdf: Possible long runtimes/large memory usage for encrypted PDF filespy-pdf pypdf · pypdf
- CVE-2026-119207pypdf: Possible large memory usage for exceptions in strict modepy-pdf pypdf · pypdf
- CVE-2026-119206pypdf: Possible long runtimes when retrieving page labelspy-pdf pypdf · pypdf
- CVE-2026-119205pypdf: Possible infinite loop when cloning dictionariespy-pdf pypdf · pypdf
- CVE-2026-119325Bricks Theme Broken Access Control via load_popup_contentBricks Theme
- CVE-2026-119204pypdf: Possible large memory usage when parsing page treepy-pdf pypdf · pypdf
- CVE-2026-119203pypdf: Possible infinite loop when hitting EOF in standard xref table during trailer searchpy-pdf pypdf · pypdf
- CVE-2026-119202@hapi/content: quadratic-time parsing of Content-Disposition parameters allows denial of servicehapijs content · @hapi/content +1
- CVE-2026-92092Openshift-ansible: openshift-ansible: installer container downloads and executes remote inventory script without integrity verificationRed Hat OpenShift Container Platform
- CVE-2026-119197pyasn1: Quadratic-complexity denial of service in binary REAL decodingpyasn1
- CVE-2026-119196pyasn1: Quadratic CPU consumption in constructed BIT STRING decodingpyasn1
- CVE-2026-119195pyasn1: Quadratic-time denial of service in constructed string and indefinite-length ANY decodingpyasn1
- CVE-2026-119194pyasn1: Quadratic CPU use in schemaless BER/CER/DER container decodingpyasn1
- CVE-2026-119191Forge: ASN.1 resource exhaustion via BIT STRING decoding in asn1.fromDerdigitalbazaar forge
- CVE-2026-119190Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13digitalbazaar forge · node-forge
- CVE-2026-119188Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake messagedigitalbazaar forge · node-forge
- CVE-2026-119187Forge: Denial of service in TLS record processing via call stack exhaustiondigitalbazaar forge · node-forge
- CVE-2026-118782Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration countdigitalbazaar forge · node-forge
- CVE-2026-118779Forge: Regular expression denial of service in PEM decoding (pem.decode)digitalbazaar forge · node-forge
- CVE-2026-103094Cleartext Storage of OAuth Credentials in ServiceNow AI PlatformServiceNow AI Platform
- CVE-2026-119250A malicious actor with local access and low privileges could exploit an External Control of File Name or Path vulnerability found in…Ubiquiti WiFiman Desktop
- CVE-2026-119249A malicious actor with access to the network could exploit a Binding to an Unrestricted IP Address vulnerability found in WiFiman Desktop…Ubiquiti WiFiman Desktop
- CVE-2026-41216An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of vtk 9.6.vtk
- CVE-2026-42057An invalid pointer dereference vulnerability exists in the vtkPNGReader::vtkPNGReaderUpdate2 functionality of vtk 9.6.vtk
- CVE-2026-8822A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of vtk (version(s): 9.6.1).vtk
- CVE-2026-8824A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionality of vtk (version(s): 9.6.1).vtk
- CVE-2026-9535A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk (version(s): 9.6.1).vtk
- CVE-2026-9536A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk (version(s): 9.6.1).vtk
- CVE-2026-118772joi: quadratic-time split in `string().email({ multiple: true })` allows denial of servicehapijs joi · @hapi joi +2
- CVE-2026-119168Nomad allocation data migration may allow host directory permission modification via symlink followingHashiCorp Nomad
- CVE-2026-107347Nomad dispatch payload writes can escape the allocation directory through symlinksHashiCorp Nomad
- CVE-2026-118765Botan: AutoSeeded_RNG can become reinitialized from predictable data after clearing staterandombit botan
- CVE-2026-118763@sigstore/oci sends the registry Authorization header to a cross-host blob-upload Locationsigstore-js · @sigstore/oci
- CVE-2026-115805Rapid7 Insight Agent Local Privilege Escalation via Shell Injection in mcp.json Configuration PathRapid7 Insight Agent
- GHSA-VPP8-G58W-M8MPTwisted: Unauthenticated Remote Denial of Service in the Twisted HTTP/2 Server via Rapid Stream Resettwisted
- CVE-2026-11587Authenticated SQL Injection via PHP Array Key in ACL Management (Resources & Actions) — Centreon 26.03.0Centreon
- CVE-2023-7357FlexNet Publisher lmadmin Rogue Vendor Daemon VulnerabilityRevera FlexNet Publisher
- CVE-2026-118761Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memorykubeflow pipelines · github.com/kubeflow/pipelines
- CVE-2026-119115Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetesaws-privateca-issuer
- GHSA-W9X9-J56R-H98R@eeacms/volto-chatbot has Unauthenticated Danswer API Confused Deputy Proxy@eeacms/volto-chatbot
- CVE-2026-118759Kubeflow Pipelines: Run log streaming endpoint bypasses namespace authorization, exposing pod execution logs cross-tenantkubeflow pipelines · github.com/kubeflow/pipelines
- CVE-2026-62374SD JWT JS: Tampered disclosures silently dropped instead of rejectedopenwallet-foundation @sd-jwt/core · openwallet-foundation…
- CVE-2026-118758Kubeflow: Unauthenticated path traversal to arbitrary file read on ml-pipeline-ui via the volume artifact sourcekubeflow pipelines
- CVE-2026-119144Frappe Framework before 15.111.0 and 16.x before 16.21.0 Server-Side Template Injection via Message Fieldsfrappe
- CVE-2026-119129ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.19.5 Account Takeover via Device Authorization Approvalzitadel
- CVE-2026-119127ZITADEL 4.0.0 before 4.19.5 Account Takeover via Login V2 Host Header Injectionzitadel
- CVE-2026-119120Crawl4AI 0.9.0 before 0.9.5 Untrusted Model Loading via CosineStrategy model_nameunclecode crawl4ai
- CVE-2026-119119Crawl4AI before 0.9.5 Denial of Service via Unbounded CrawlerRunConfig Delay Fieldsunclecode crawl4ai
- CVE-2026-119118Crawl4AI before 0.9.5 Improper Certificate Validation via Hard-coded Chromium Flagsunclecode crawl4ai
- CVE-2026-90869Pre-Authentication SSH Denial of Service via Malformed Public-Key Signature in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-90867Improper Access Control of Web Admin Console in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-115793Resource exhaustion from RPC sessions kept for requests to unknown interfaceRT-Labs P-Net
- CVE-2026-111736NULL pointer dereference on implicit read of user specific record indexRT-Labs P-Net
- CVE-2026-112200Resource exhaustion from unreleased AR and RPC session on RPC requests with incorrect endiannessRT-Labs P-Net
- CVE-2026-84294Information Disclosure in Ad Hoc Transfer in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-111735Integer underflow leads to out-of-bounds read in pf_cpm_c_data_ind()RT-Labs P-Net
- CVE-2026-111734Missing length validation of EtherType, VLAN and FrameID fields in pf_eth_recv()RT-Labs P-Net
- CVE-2026-111733NULL pointer dereference on implicit read of AR specific record indexRT-Labs P-Net
- CVE-2026-111731Infinite loop when reading PDPortDataCheck record of subslot 0RT-Labs P-Net
- CVE-2026-111730Out-of-bounds write in CheckPeers block parser due to unvalidated peer station name lengthRT-Labs P-Net
- CVE-2026-118083WordPress WP Crowdfunding plugin <= 2.2.2 - Sensitive Data Exposure vulnerabilityThemeum WP Crowdfunding
- CVE-2026-118082WordPress Buddyboss Platform plugin <= 3.5.0 - Privilege Escalation vulnerabilityBuddyboss Platform
- CVE-2026-118081WordPress 10Web Social Photo Feed plugin <= 1.5.6 - PHP Object Injection vulnerability10Web Social Photo Feed
- CVE-2026-118080WordPress Social Snap plugin <= 1.5.4 - PHP Object Injection vulnerabilitySocial Snap
- CVE-2026-118079WordPress FV Flowplayer Video Player plugin <= 8.3.4 - PHP Object Injection vulnerabilityFolioVision FV Flowplayer Video Player
- CVE-2026-118078WordPress Product Catalog Feed by PixelYourSite plugin <= 3.1.4 - PHP Object Injection vulnerabilityProduct Catalog Feed by PixelYourSite
- CVE-2026-118077WordPress Sastra Essential Addons for Elementor plugin <= 1.2.3 - PHP Object Injection vulnerabilityFast Themes Sastra Essential Addons for Elementor
- CVE-2026-118076WordPress Frisbii Pay plugin <= 1.8.19 - PHP Object Injection vulnerabilityFrisbii Pay
- CVE-2026-118075WordPress WP Media folders plugin <= 1.1.10 - PHP Object Injection vulnerabilitydbarrere WP Media folders
- CVE-2026-118074WordPress Finale Lite plugin <= 2.21.0 - PHP Object Injection vulnerabilityDaman Jeet Finale Lite
- CVE-2026-118073WordPress News Kit Elementor Addons plugin <= 1.5.0 - PHP Object Injection vulnerabilityblazethemes News Kit Elementor Addons
- CVE-2026-116869WordPress myPOS Checkout plugin <= 1.4.5 - PHP Object Injection vulnerabilitymyPOS Payments myPOS Checkout
- CVE-2026-116868WordPress BuddyPress Xprofile Custom Field Types plugin <= 1.3.1 - PHP Object Injection vulnerabilityBuddyDev BuddyPress Xprofile Custom Field Types
- CVE-2026-116867WordPress Dynamic QR Code – generator plugin <= 1.0.1 - PHP Object Injection vulnerabilitysosidee Dynamic QR Code – generator
- CVE-2026-116866WordPress Extra Fees Plugin for WooCommerce plugin <= 4.4.0 - PHP Object Injection vulnerabilityDotstore Extra Fees Plugin for WooCommerce
- CVE-2026-116865WordPress Zippy plugin <= 1.7.0 - PHP Object Injection vulnerabilityGesundheit Bewegt Zippy
- CVE-2026-116864WordPress WPCargo Track & Trace plugin <= 8.0.5 - PHP Object Injection vulnerabilityArni Cinco WPCargo Track & Trace
- CVE-2026-108494WordPress Chained Quiz plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerabilityBob Chained Quiz
- CVE-2026-61996WordPress MLS On The Fly plugin <= 1.8.1.5 - SQL Injection vulnerabilityfavethemes MLS On The Fly
- CVE-2026-61995WordPress YouTube Showcase plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerabilityemarket-design YouTube Showcase
- CVE-2026-61993WordPress Blockonomics plugin 3.11.0 - Cross Site Scripting (XSS) vulnerabilityBlockonomics
- CVE-2026-61989WordPress Easy Property Listings plugin <= 3.5.25 - Cross Site Scripting (XSS) vulnerabilityMerv Barrett Easy Property Listings
- CVE-2026-61988WordPress Auction Nudge – Your eBay on Your Site plugin <= 8.4.0 - Cross Site Scripting (XSS) vulnerabilitymorehawes Auction Nudge – Your eBay on Your Site
- CVE-2026-54866WordPress Razorpay Payment Button Elementor Plugin plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerabilityRazorpay Payment Button Elementor Plugin
- CVE-2026-54864WordPress Post Video Players plugin <= 1.165 - Cross Site Scripting (XSS) vulnerabilitynicashmu Post Video Players
- CVE-2026-42701WordPress YayMail plugin <= 4.4.6 - PHP Object Injection vulnerabilityYayCommerce YayMail
- CVE-2026-42692WordPress WP Crowdfunding plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerabilityThemeum WP Crowdfunding
- CVE-2026-27394WordPress Eventer plugin <= 0.1.1 - Reflected Cross Site Scripting (XSS) vulnerabilityJyothis Joy Eventer
- CVE-2026-118085WordPress GlobalPayments WooCommerce plugin <= 1.23.3 - Cross Site Scripting (XSS) vulnerabilityGlobal Payments GlobalPayments WooCommerce
- CVE-2026-88077Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityMicrosoft Edge
- CVE-2026-96196Microsoft Edge (Chromium-based) Security Feature Bypass VulnerabilityMicrosoft Edge
- CVE-2026-96187Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityMicrosoft Edge
- CVE-2026-85899Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityMicrosoft Edge
- CVE-2026-114148ASP.NET Core Elevation of Privilege VulnerabilityMicrosoft .NET 10.0 installed on Linux · Microsoft .NET… +12
- CVE-2026-96203Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityMicrosoft Edge
- CVE-2026-96192Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityMicrosoft Edge
- CVE-2026-103092Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-101288Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-104317Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-104324Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-104328Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-107326Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-110193Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-110196Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-110244Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-110245Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-110309Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-96199Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityMicrosoft Edge
- CVE-2026-96198Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityMicrosoft Edge
- CVE-2026-85897Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityMicrosoft Edge
- CVE-2026-85890Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityMicrosoft Edge
- CVE-2026-93570XML External Entity injection in Szafir and Szafir WeryfikującaKrajowa Izba Rozliczeniowa Szafir
- CVE-2026-115713Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and…Elastic Cloud Enterprise
- CVE-2026-115709Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and…Elastic Cloud Enterprise
- CVE-2026-115708Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Authentication BypassElastic Cloud Enterprise
- CVE-2026-39736WordPress JetEngine plugin <= 3.9.0.1 - SQL Injection vulnerabilityCrocoblock JetEngine
- CVE-2026-116399WordPress InstaWP Connect plugin <= 0.1.4.2 - Cross Site Request Forgery (CSRF) vulnerabilityInstaWP Connect
- CVE-2026-119052llama.cpp b2877 before b11935 ggml-rpc Server DoS via Oversized recv_msg Lengthggml-org llama.cpp
- CVE-2026-119051flat through 6.0.1 Denial of Service via unflatten() Numeric Array Index Keyshughsk flat
- CVE-2026-119049FreeMail before 5.3.2 Authorization Bypass via /api/create Mailbox Claimingidinging FreeMail
- CVE-2019-25781Python-Markdown 3.0 through 3.11.2 Denial of Service via Link Bracket ParsingPython-Markdown Markdown
- CVE-2026-49142OpenEMR Before 8.5.0 SQL Injection via form_icd_codes[]openemr
- CVE-2026-119028oapi-codegen 2.0.0 before 2.8.1 Code Injection via Non-String Enum Valuesoapi-codegen
- CVE-2026-119027oapi-codegen 2.5.0 before 2.8.1 Code Injection via servers[].x-go-name Extensionoapi-codegen
- CVE-2026-103665The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Libraries (DLLs).Yamaha LAN Monitor for Windows
- CVE-2026-115821NewsmanApp <= 3.7.29 - Unauthenticated Stored Cross-Site Scripting via 'billing_first_name' and 'billing_last_name' ParametersNewsmanApp
- CVE-2026-110184Newsmatic <= 1.5.0 - Unauthenticated SQL Injection via 'slug' Parameterblazethemes Newsmatic
- CVE-2026-96767NEX-Forms <= 9.3.2 - Unauthenticated Stored Cross-Site Scripting via Content-Type Headerwebaways NEX-Forms – Ultimate Forms Plugin for WordPress
- CVE-2026-119025open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windowssindresorhus open · modelcontextprotocol inspector +1
- CVE-2026-115611WordPress TableOn plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerabilityPluginUs.Net TableOn
- CVE-2026-115592WordPress OceanWP theme <= 4.2.7 - Cross Site Scripting (XSS) vulnerabilityOceanWP
- CVE-2026-116409WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.6 - Cross Site Scripting (XSS) vulnerabilityWP Swings Upsell Order Bump Offer for WooCommerce
- CVE-2026-112827WordPress HANDMADE – Dropshipping for Etsy and WooCommerce plugin <= 1.0.10 - Broken Access Control vulnerabilityVillaTheme HANDMADE – Dropshipping for Etsy and WooCommerce
- CVE-2026-114193WordPress GEO my WordPress plugin <= 4.5.5.5 - Broken Access Control vulnerabilityEyal Fitoussi GEO my WordPress
- CVE-2026-115599WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerabilityThimPress LearnPress
- CVE-2026-115965WordPress BuddyPress plugin <= 14.5.2 - SQL Injection vulnerabilityBuddyPress
- CVE-2026-115967WordPress Login with phone number plugin <= 1.8.78 - Broken Authentication vulnerabilityHamid Alinia Login with phone number
- CVE-2026-115963WordPress Broadcast Live Video plugin <= 7.3.9 - Broken Access Control vulnerabilityVideoWhisper.com Broadcast Live Video
- CVE-2026-33924Authenticated RCE in update functionality in Guardian/CMC before 26.4.0Nozomi Networks Guardian · Nozomi Networks CMC
- CVE-2026-33923Update bundle signature bypass in Guardian/CMC before 26.4.0Nozomi Networks Guardian · Nozomi Networks CMC
- CVE-2026-118984OmniRoute 3.8.0 before 3.8.52 Unverified Password Change via /api/settings/require-logincheaper-inference OmniRoute
- CVE-2026-111417Cross-user Document Access on Foxit Official Website's HTML-to-PDF ServiceFoxit Software foxit.com
- CVE-2026-111418SSRF and JavaScript Execution in the Foxit Official Website's HTML-to-PDF ServiceFoxit Software foxit.com
- CVE-2026-111419Hardcoded API Token in Foxit Official WebsiteFoxit Software foxit.com
- CVE-2026-117611Trust of compromised eMudhra root CA in bundled CA storesCheckmk
- CVE-2026-107743Mapster WP Maps <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting via 'config.loading.background' ParameterMapster WP Maps
- CVE-2025-62841Hard-coded Cryptographic Key #2QNAP Systems HBS 3 Hybrid Backup Sync · QNAP Systems Hybrid…
- CVE-2025-62839Hard-coded Cryptographic Key #1QNAP Systems HBS 3 Hybrid Backup Sync · QNAP Systems Hybrid…
- CVE-2026-114488Wildfly: wildfly-iiop: wildfly-ejb3: wildfly: authentication bypass on iiop ejb invocations as csiv2 ittprincipalname accepted without transport bindingRed Hat Fuse · Red Hat JBoss Enterprise Application Plat… +1
- CVE-2026-15564Wildfly-ejb: wildfly-iiop-openjdk: eap iiop listeners may permit unauthed deserializationRed Hat JBoss Enterprise Application Platform
- CVE-2026-86794Community Events 1.4.9 - 1.5.9 - Unauthenticated Stored XSS via Event Submission FormCommunity Events
- CVE-2026-111739Two Factor Authentication < 1.17.0 and All-In-One Security (AIOS) < 5.5.0 - Subscriber+ 2FA Bypass via 'creds_user_id' ParameterTwo Factor Authentication · All-In-One Security
- CVE-2026-89216vTables < 0.3 - Unauthenticated SQL Injection via orderby ParametervTables
- CVE-2026-115301Contact Form by Supsystic < 1.11.1 - Admin+ SSTI via Form Text BlockContact Form by Supsystic
- CVE-2026-118905nvm_ls lets an untrusted version string inject sed commands, executing arbitrary commands with GNU sednvm-sh nvm
- CVE-2026-93757Wild Apricot Login <= 1.0.18 - Authentication Bypass via SSO Email-Collision Account Binding on Multisitewild-apricot Wild Apricot Login
- CVE-2026-96228SSL Wireless SMS Notification <= 3.8.1 - Unauthenticated Authentication Bypass to Account Takeoversslplugins SSL Wireless SMS Notification
- CVE-2026-96666Schema App Structured Data <= 2.3.2 - Unauthenticated Stored Cross-Site Scripting via Comment Content via 'Remove Microdata' Output Filtervberkel Schema App Structured Data
- CVE-2026-93904Social Web Suite <= 4.1.12 - Unauthenticated SQL Injection via 'exclude_posts' Parameterdejanmarkovic Social Web Suite – Social Media Auto Post, So…
- CVE-2026-93855SendPress Newsletters <= 1.26.1.20 - Unauthenticated SQL Injection via 'subscriberid' Parameterbrewlabs SendPress Newsletters
- CVE-2026-96669Food Store <= 1.5.5 - Unauthenticated Stored Cross-Site Scripting via 'service_type' Cookiewpscripts Food Store – Online Food Delivery & Pickup
- CVE-2026-96741DSGVO All in one for WP <= 5.0 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Output Buffer Regex Corruptionmlfactory DSGVO All in one for WP
- CVE-2026-113387The Ortto plugin for WordPress before 1.0.25 did not authenticate configuration update requests, relying only on a secret exposed in public canva ortto
- CVE-2026-66090XML External Entity (XXE) Injection in Metadata Field Allows Arbitrary File ReadApereo Foundation openEQUELLA
- CVE-2026-21157Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to launch arbitrary activity.Samsung Mobile Bixby
- CVE-2026-107020An issue in the activity.LoadLinkLaterActivity component of FeedEx / Handy News Reader versionCode 116 allows attackers to force victim user
- CVE-2026-107026Insecure permissions in Share to Clipboard v1.14.1 (versionCode 32) allows unauthorized attackers to arbitrarily overwrite another user's cl
- CVE-2026-107037Insecure permissions in the NotificationHelper component of NoNonsense Notes versionCode 72600 allows unauthorized attackers to write in ano
- CVE-2026-107039Insecure permissions in the ActivityMain component of M66B/Marcel Bokhorst NetGuard no-root firewall versionCode 2026080101/versionName…
- CVE-2026-107042Insecure permissions in USP Ultimate Screenshot Painter versionCode 240213.009 allows unauthorized attackers to move or overwrite files in a
- CVE-2026-107044Insecure permissions in ProjectMAXS MAXS Main v0.5.19 (versionCode 19) allows unauthorized attackers to arbitrarily manipulate the app's…
- CVE-2026-107047Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the app's logging…
- CVE-2026-107049An issue in Forkyz versionCode 8500000 allows attackers to arbitrarily change another user's storage settings via supplying a crafted URI…
- CVE-2026-107052Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attackers to arbitrarily…
- CVE-2026-107055Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387 allows unauthorized attackers to write arbitrary…
- CVE-2026-51905TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in get_agent_execution_configuration in…
Medium, low and unrated 288
- CVE-2026-115943Spreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of number format conditions in ExcelFmtSpreadsheet-XLSX
- CVE-2026-119285Fiber: CORS wildcard origins matched without a dot boundary, allowing credentialed cross-origin readsgofiber fiber · github.com/gofiber/fiber/v2
- CVE-2026-119284joserfc: Compact JWS size guard allocates attacker-controlled segments before rejectionauthlib joserfc · joserfc
- CVE-2026-61673WeGIA: Stored DOM XSS in listar_despachos.php Allows Account TakeoverLabRedesCefetRJ WeGIA
- CVE-2026-119317Incorrect AuthorizationTenable Plugin Feed
- CVE-2026-119281MariaDB Connector/J: Server could switch character_set_results away from UTF-8 without the client noticingmariadb-corporation mariadb-connector-j · org.mariadb.jdbc:…
- CVE-2026-119280MariaDB Connector/J : XA recover() trusted server-supplied gtrid and bqual lengthsmariadb-corporation mariadb-connector-j · org.mariadb.jdbc:…
- CVE-2026-119279MariaDB Connector/J: Length-encoded integers larger than Integer.MAX_VALUE were truncated before being used as lengthsmariadb-corporation mariadb-connector-j · org.mariadb.jdbc:…
- CVE-2026-119278MariaDB Connector/J: Rogue server can crash the client during caching_sha2_password authenticationmariadb-corporation mariadb-connector-j
- CVE-2026-119277MariaDB Connector/J: Rogue server can make the client read past the packet through server-declared lengthsmariadb-corporation mariadb-connector-j
- CVE-2026-119276MariaDB Connector/J: Rogue server can drive large heap allocations from server-declared lengths in OK packetsmariadb-corporation mariadb-connector-j · org.mariadb.jdbc:…
- CVE-2026-119210MariaDB Connector/J: LOAD DATA LOCAL INFILE file check could be satisfied by text inside quoted identifiers, letting a malicious server…mariadb-corporation mariadb-connector-j · org.mariadb.jdbc:…
- CVE-2026-119201Nuxt dev server exposes generated appSecret through Vite file servingnuxt · @nuxt/vite-builder
- CVE-2026-119200Nuxt: Dot segments in the request path bypass `server/middleware` path checks and server route rules on page routesnuxt · @nuxt nitro-server +1
- CVE-2026-119199Nuxt dev server exposes private runtime config through the Nitro dev bundlenuxt · @nuxt/vite-builder
- CVE-2026-119198Nuxt dev server arbitrary file read through client error reportsnuxt · @nuxt/vite-builder
- CVE-2026-119193PHPUnit vulnerable to code execution by other local users via shared temporary directory in PHPT code coverage handlingsebastianbergmann phpunit · phpunit/phpunit
- CVE-2026-119189Forge: X.509 pathLenConstraint not enforced by verifyCertificateChain() for CA certificates without keyUsagedigitalbazaar forge
- CVE-2026-119186Forge: AES-GCM authentication bypass via unvalidated tagLength optiondigitalbazaar forge · node-forge
- CVE-2026-6877Domain Separation Bypass in ServiceNow AI PlatformServiceNow AI Platform
- CVE-2026-118781Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891)digitalbazaar forge · node-forge
- CVE-2026-118780Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA storedigitalbazaar forge · node-forge
- CVE-2026-118778Forge: TLS client crash when the server sends no certificatedigitalbazaar forge · node-forge
- CVE-2026-118777Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookiedigitalbazaar forge · node-forge
- CVE-2026-118776Forge: Incomplete PKCS#7 padding validation in AES/DES CBC and ECB decryptiondigitalbazaar forge
- CVE-2026-118775Forge: ASN.1 OID first arc truncation in asn1.oidToDerdigitalbazaar forge · node-forge
- CVE-2026-118774Forge: Certificate signature verified with the issuer's RSA signature schemedigitalbazaar forge
- CVE-2026-119251A malicious actor with local access and high privileges could exploit an Improper Access Control vulnerability found in WiFiman Desktop…Ubiquiti WiFiman Desktop for macOS
- CVE-2026-118773Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversalisaacs node-glob · glob
- CVE-2026-102260Nomad vulnerable to cross-namespace information disclosure in multiple endpointsHashiCorp Nomad
- CVE-2026-116566socket.getaddrinfo() accepts embedded null bytes in host and portPython Software Foundation CPython
- CVE-2026-118768Botan: CLI utility `ocsp_check` accepts unauthenticated responsesrandombit botan
- CVE-2026-118767Botan: Python binding bcrypt APIs truncate passwords containing embedded NULsrandombit botan
- CVE-2026-118766Botan: Online OCSP redirects enable blind requests to internal HTTP servicesrandombit botan
- CVE-2026-118764minimatch: potential denial of service via globparts amplificationisaacs minimatch · minimatch
- CVE-2026-118760Kubeflow Pipelines: Missing namespace authorization permits cross-tenant artifact readskubeflow pipelines
- GHSA-C33X-VCV4-VG3GCedar: JSON template is in scope missing slot-id validation allows link panic and decision divergencecedar-policy · @cedar-policy/cedar-wasm
- CVE-2025-12523Broken Object Level Authorization in Users Configuration Endpoint (/centreon/api/latest/configuration/users) – Sensitive Information…Centreon
- CVE-2026-118673KeePassXC: Out-of-bounds write in browser integration response encryption with oversized database responseskeepassxreboot keepassxc
- CVE-2025-13050Broken Function Level Authorization — `postcommand.php` allows execution of poller post-restart commands by non-admin usersCentreon
- CVE-2026-119143Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Panic via Zero-Length Stream Writesbytecodealliance wasmtime · wasmtime
- CVE-2026-119142Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via call_async Dropbytecodealliance wasmtime · wasmtime
- CVE-2026-119141Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via reallocbytecodealliance wasmtime
- CVE-2026-119140Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via thread.yieldbytecodealliance wasmtime
- CVE-2026-119139Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via Func::callbytecodealliance wasmtime
- CVE-2026-119138Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Panic After Trapbytecodealliance wasmtime · wasmtime
- CVE-2026-119137Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Stack Overflow via Type Registrybytecodealliance wasmtime · wasmtime
- CVE-2026-119136Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Async-Entrypoint Enforcement Bypassbytecodealliance wasmtime · wasmtime
- CVE-2026-119135Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Panic via StreamReader Type Mismatchbytecodealliance wasmtime
- CVE-2026-119134Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 Unbounded Memory Growth via Component-Model Resource Handlesbytecodealliance wasmtime
- CVE-2026-119133Wasmtime 47.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Misaligned VMContext via Exception Tagsbytecodealliance wasmtime
- CVE-2026-119132Wasmtime 49.0.0 before 49.0.3 Host Panic via Overlapping String Transcode in Fused Adapterbytecodealliance wasmtime · wasmtime
- CVE-2026-119131Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via wasi-httpbytecodealliance wasmtime · wasmtime-wasi-http
- CVE-2026-119130Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 HTTP Request Target Smugglingbytecodealliance wasmtime · wasmtime-wasi-http
- CVE-2026-119126Parse Server before 8.6.106 and 9.0.0 before 9.10.5-alpha.7 afterSave Trigger and LiveQuery Bypass via Dot Notation Keysparse-community parse-server
- CVE-2026-119125Parse Server before 8.6.107 and 9.0.0 before 9.10.5-alpha.8 Information Disclosure via beforeSave Reverted Fieldsparse-community parse-server
- CVE-2026-119124ImageMagick before 7.1.2-34 Heap Buffer Overflow via -morph OptionImageMagick
- CVE-2026-119123ImageMagick before 7.1.2-34 Stack Overflow in TIFF DecoderImageMagick
- CVE-2026-119122Crawl4AI before 0.9.5 Blind SSRF via CacheValidator Freshness Checkunclecode crawl4ai
- CVE-2026-119121Crawl4AI 0.9.0 before 0.9.5 JavaScript Injection via css_selector and wait_forunclecode crawl4ai
- CVE-2026-90872Server-Side Script Injection in Manager Web UI in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-90871Path Traversal Leading to File Deletion in Ad Hoc Transfer and Web Transfer in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-90870Unauthenticated Ad Hoc Transfer Resource Exhaustion in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-90862Web Transfer Module Multi-Factor Authentication Bypass in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-90861Password Disclosure via Activity Logs Enabling Administrator Privilege Escalation in WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-84296SSH Multi-Factor Authentication Bypass in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-115794Alarm data length not validated against received frame lengthRT-Labs P-Net
- CVE-2026-115795Out-of-bounds read of DCP block header in DCP Set and Identify request parsingRT-Labs P-Net
- CVE-2026-112255Endpoint credential minting (insecure default allow-list)OpenText Advanced Authentication Server
- CVE-2026-118084WordPress Hotel Booking plugin <= 3.8 - Insecure Direct Object References (IDOR) vulnerabilitynicdark Hotel Booking
- CVE-2026-54865WordPress Podamibe Custom User Gravatar plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerabilityPodamibe Nepal Podamibe Custom User Gravatar
- CVE-2026-42690WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerabilityThimPress LearnPress
- CVE-2026-66912Stored Cross-Site Scripting in ZimbraSynacor Zimbra Collaboration
- CVE-2026-66911Stored Cross-Site Scripting in ZimbraSynacor Zimbra Collaboration
- CVE-2026-88078Microsoft Edge (Chromium-based) Spoofing VulnerabilityMicrosoft Edge
- CVE-2026-85330Microsoft Edge for Android Security Feature Bypass VulnerabilityMicrosoft Edge
- CVE-2026-88090Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityMicrosoft Edge
- CVE-2026-20942Microsoft Edge (Chromium-based) Spoofing VulnerabilityMicrosoft Edge
- CVE-2026-18894Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-77817Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-77819Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-90991Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-102590Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-104308Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-104309Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-104310Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-104312Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-104314Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-104315Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-104316Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-113576Adobe Digital Editions | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe Digital Editions
- CVE-2026-104331Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-110190Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-110192Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-110200Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-106036Improper certificate validation in SzafirKrajowa Izba Rozliczeniowa Szafir
- CVE-2026-93571Path Traversal in SzafirKrajowa Izba Rozliczeniowa Szafir
- CVE-2026-42694WordPress Kirki plugin <= 6.4.0 - Content Injection vulnerabilityThemeum Kirki
- CVE-2026-48200WordPress Document Library Lite plugin <= 1.3.0 - Sensitive Data Exposure vulnerabilityBarn2 Plugins Document Library Lite
- CVE-2026-116848WordPress The Plus Addons for Elementor Page Builder Lite plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerabilityPOSIMYTH Innovations The Plus Addons for Elementor Page Bui…
- CVE-2026-109891WordPress Happy Addons for Elementor plugin <= 3.50.1 - Broken Access Control vulnerabilityweDevs Happy Addons for Elementor
- CVE-2026-25448WordPress WP ERP plugin <= 1.17.10 - Broken Access Control vulnerabilityweDevs WP ERP
- CVE-2026-42691WordPress EventPrime plugin <= 4.3.6.0 - Broken Access Control vulnerabilityEventPrime
- CVE-2026-54852WordPress Page Restriction WordPress (WP) plugin <= 1.6.1 - Broken Access Control vulnerabilityminiOrange Page Restriction WordPress
- CVE-2026-97073WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerabilitymyCred
- CVE-2026-118097WordPress Flash & HTML5 Video plugin <= 2.14.0 - Cross Site Scripting (XSS) vulnerabilitybPlugins Flash & HTML5 Video
- CVE-2026-27062WordPress WPFunnels plugin <= 3.13.5 - Cross Site Request Forgery (CSRF) vulnerabilityWPFunnels Team WPFunnels
- CVE-2026-54853WordPress Profile Builder plugin <= 4.0.5 - Broken Access Control vulnerabilityCozmoslabs Profile Builder
- CVE-2026-114706WordPress Strong Testimonials plugin <= 3.3.15 - Cross Site Scripting (XSS) vulnerabilityWP Chill Strong Testimonials
- CVE-2026-27063WordPress Kit (formerly ConvertKit) plugin <= 3.4.7 - Broken Access Control vulnerabilityKit
- CVE-2026-115601WordPress Custom Price for WooCommerce plugin <= 1.1.29 - Broken Access Control vulnerabilityWP Desk Custom Price for WooCommerce
- CVE-2026-115605WordPress SureDash plugin <= 1.12.3 - Broken Access Control vulnerabilityBrainstorm Force SureDash
- CVE-2026-118095WordPress Media LIbrary Assistant plugin <= 3.42 - Cross Site Scripting (XSS) vulnerabilityDavid Lingren Media LIbrary Assistant
- CVE-2026-54871WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 3.4.2 - Broken Access Control vulnerabilityMamunur Rashid ShopBuilder – Elementor WooCommerce Builder…
- CVE-2026-25450WordPress User Registration plugin <= 5.3.0 - Broken Access Control vulnerabilityThemeGrill User Registration
- CVE-2026-116850WordPress Happy Addons for Elementor plugin <= 3.50.1 - Cross Site Scripting (XSS) vulnerabilityweDevs Happy Addons for Elementor
- CVE-2026-114181WordPress Taxi Booking Manager for WooCommerce plugin <= 2.1.6 - Broken Access Control vulnerabilityMagepeople Taxi Booking Manager for WooCommerce
- CVE-2026-118088WordPress WPFunnels plugin <= 3.13.5 - Broken Access Control vulnerabilityWPFunnels Team WPFunnels
- CVE-2026-116849WordPress StreamCast plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerabilitybPlugins StreamCast
- CVE-2026-110881WordPress SureDash plugin <= 1.12.3 - Cross Site Scripting (XSS) vulnerabilityBrainstorm Force SureDash
- CVE-2026-116856WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin <= 2.3.24 - Broken Access Control vulnerabilityWP Desk Flexible Quantity – Measurement Price Calculator fo…
- CVE-2026-39737WordPress JetElements For Elementor plugin <= 2.9.2.6 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetElements For Elementor
- CVE-2026-118091WordPress WPFunnels plugin <= 3.13.5 - Broken Access Control vulnerabilityWPFunnels Team WPFunnels
- CVE-2026-116387WordPress SureForms plugin <= 2.12.9 - Broken Access Control vulnerabilityBrainstorm Force SureForms
- CVE-2026-39742WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.8.0.2 - Cross Site Scripting (XSS) vulnerabilityLiquid Web / StellarWP Gutenberg Blocks by Kadence Blocks
- CVE-2026-115610WordPress PublishPress Authors plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerabilityPublishPress Authors
- CVE-2026-118092WordPress MasterStudy LMS plugin <= 3.7.55 - Broken Access Control vulnerabilityStylemixThemes MasterStudy LMS
- CVE-2026-116406WordPress Webba Booking plugin <= 6.5.4 - Broken Access Control vulnerabilityWebba Plugins Webba Booking
- CVE-2026-52708WordPress WP User Frontend plugin <= 4.3.13 - Broken Access Control vulnerabilityweDevs WP User Frontend
- CVE-2026-116846WordPress WP User Manager plugin <= 2.9.26 - Broken Access Control vulnerabilityWP User Manager
- CVE-2026-48884WordPress WP User Frontend plugin <= 4.3.13 - Broken Access Control vulnerabilityweDevs WP User Frontend
- CVE-2026-80069MasterStudy LMS WordPress Plugin < 3.7.50 Missing Authorization via stm_lms_send_test_email_ajaxStylemix MasterStudy LMS WordPress Plugin
- CVE-2026-80067MasterStudy LMS WordPress Plugin < 3.7.50 Path Traversal via stm_lms_step ParameterStylemix MasterStudy LMS WordPress Plugin
- CVE-2026-115712Incorrect Authorization in Elastic Cloud Enterprise (ECE) Leading to Unauthorized Modification of Platform SettingsElastic Cloud Enterprise
- CVE-2026-115711Insertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Credential…Elastic Cloud Enterprise
- CVE-2026-115707Insertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Privilege…Elastic Cloud Enterprise
- CVE-2026-115706Authorization Bypass Through User-Controlled Key in Elastic Cloud Enterprise (ECE) Leading to Privilege EscalationElastic Cloud Enterprise
- CVE-2026-116402WordPress SureForms plugin <= 2.12.9 - Content Injection vulnerabilityBrainstorm Force SureForms
- CVE-2026-118425Keycloak-services: keycloak-services: redirect uri domain allowlist bypass via dns resolution to loopbackRed Hat Build of Keycloak · Red Hat Single Sign-On
- CVE-2026-48202WordPress Brave plugin <= 0.8.8 - Content Injection vulnerabilityBrave
- CVE-2026-39782WordPress Kali Forms plugin <= 2.4.27 - Broken Access Control vulnerabilityKaliforms Kali Forms
- CVE-2026-25467WordPress User Registration plugin <= 5.3.0 - Content Injection vulnerabilityThemeGrill User Registration
- CVE-2026-116857WordPress JetSmartFilters plugin <= 3.8.6.2 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetSmartFilters
- CVE-2026-113697Reflected Cross-Site Scripting in BMC Helix Operations ManagementBMC Helix Operations Management
- CVE-2026-113696Improper Authorization in BMC ITSM SmartIT Change ApprovalsBMC IT Service Management Suite
- CVE-2026-113695Reflected Cross-Site Scripting in BMC ITSM SmartITBMC IT Service Management Suite
- CVE-2026-93009Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoderRed Hat Ceph Storage · Red Hat Enterprise Linux +2
- CVE-2026-93010Dnsmasq: dnsmasq: --leasequery without address argument applies no source address checkRed Hat Ceph Storage · Red Hat Enterprise Linux +2
- CVE-2026-113694Improper Authorization in BMC ITSM SmartIT AttachmentsBMC IT Service Management Suite
- CVE-2026-113693System Account Credential Disclosure in BMC ITSMBMC IT Service Management Suite
- CVE-2026-54862WordPress Import and export users and customers plugin <= 2.5.9 - Cross Site Scripting (XSS) vulnerabilityCodection Import and export users and customers
- CVE-2026-113692Path Traversal in BMC ITSMBMC IT Service Management Suite
- CVE-2026-119054Multiple Pages Generator by Themeisle before 4.2.5 Stored XSS via Shortcode base-urlMultiple Pages Generator by Themeisle
- CVE-2026-119053lwIP 2.0.0 through 2.2.1 SNMP Agent Out-of-Bounds Read via snmp_pbuf_stream_writeto()lwIP
- CVE-2026-119048JeeSite 5.11.0 through 5.19.1 IDOR in AI CMS Chat Modulethinkgem JeeSite
- CVE-2026-42707WordPress HivePress Claim Listings plugin <= 1.1.4 - Broken Access Control vulnerabilityHivePress Claim Listings
- CVE-2026-48195WordPress PDF Poster plugin <= 2.6.1 - Cross Site Scripting (XSS) vulnerabilitybPlugins PDF Poster
- CVE-2026-113691Stored Cross-Site Scripting in BMC ITSM Knowledge ArticlesBMC IT Service Management Suite
- CVE-2026-39741WordPress Simple Cloudflare Turnstile plugin <= 1.44.0 - Broken Access Control vulnerabilityRelyWP Simple Cloudflare Turnstile
- CVE-2026-48196WordPress Kali Forms plugin <= 2.4.27 - Cross Site Scripting (XSS) vulnerabilityKaliforms Kali Forms
- CVE-2026-22386WordPress WP Job Portal plugin <= 2.7.1 - Broken Access Control vulnerabilityAhmad WP Job Portal
- CVE-2026-52709WordPress Video Gallery Block plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerabilitybPlugins Video Gallery Block
- CVE-2026-113690Stored Cross-Site Scripting in BMC ITSM AttachmentsBMC IT Service Management Suite
- CVE-2026-113689Stored Cross-Site Scripting in BMC ITSM Work NotesBMC IT Service Management Suite
- CVE-2026-24533WordPress Cozy Blocks plugin <= 2.2.27 - Cross Site Scripting (XSS) vulnerabilityCozyThemes Cozy Blocks
- CVE-2026-42703WordPress Kali Forms plugin <= 2.4.27 - Broken Access Control vulnerabilityKaliforms Kali Forms
- CVE-2026-113688Server-Side Request Forgery in BMC ITSM SmartITBMC IT Service Management Suite
- CVE-2026-118087WordPress Site Reviews plugin <= 8.3.5 - Cross Site Scripting (XSS) vulnerabilityGemini Labs Site Reviews
- CVE-2026-118094WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerabilityIgor Funa Ad Inserter
- CVE-2026-39735WordPress JetEngine plugin <= 3.9.0.1 - Broken Access Control vulnerabilityCrocoblock JetEngine
- CVE-2026-56056WordPress The Post Grid plugin <= 7.9.7 - Cross Site Scripting (XSS) vulnerabilityMamunur Rashid The Post Grid
- CVE-2026-118093WordPress Product Feed Manager plugin <= 7.14.1 - Broken Access Control vulnerabilityWPFunnels Team Product Feed Manager
- CVE-2026-93006Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file contentRed Hat Ceph Storage · Red Hat Enterprise Linux +2
- CVE-2026-93007Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validationRed Hat Ceph Storage · Red Hat Enterprise Linux +2
- CVE-2026-93011Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transformsRed Hat Ceph Storage · Red Hat Enterprise Linux +2
- CVE-2026-93008Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurationsRed Hat Ceph Storage · Red Hat Enterprise Linux +2
- RUSTSEC-2026-0419Unbounded memory use on large request bodiesjuniper_warp
- RUSTSEC-2026-0420wasip3 UDP `send` can deliver a datagram to an address only allowed for receivingwasmtime-wasi
- RUSTSEC-2026-0421wasi-http p2: outgoing content-length can be invalid or not match bodywasmtime-wasi-http
- RUSTSEC-2026-0422Typed functions with `i31` or `nullref` arguments may panic due to insufficient type-checkwasmtime
- RUSTSEC-2026-0423Cross-engine type confusion with host-created struct-types-with-supertypeswasmtime
- RUSTSEC-2026-0424Unchecked memory usage in transferring borrowed resources between componentswasmtime
- RUSTSEC-2026-0427`sn-releases`: `extract_release_archive` writes archive entries without a path-traversal check (zip-slip)sn-releases
- CVE-2026-109822Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an issue with insecure storage of sensitive information.Yamaha NWR100
- CVE-2026-97860YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths.Yamaha YMS-VPN8 · Yamaha YMS-VPN8-CP
- CVE-2026-27401WordPress YITH PayPal Express Checkout for WooCommerce plugin <= 1.62.0 - Broken Access Control vulnerabilityYITH PayPal Express Checkout for WooCommerce
- CVE-2026-92086MW WP Form <= 5.1.7 - Unauthenticated Sensitive Information Exposure in 'post_id' Parameterwebsoudan MW WP Form
- CVE-2026-109216Meta Box <= 5.15.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Background Field Array Keysmetabox Meta Box – A Framework for Dynamic Websites
- CVE-2026-5702Cross-Site Request Forgery (CSRF) vulnerability in SABBATIC applicationSABBATIC app
- CVE-2026-5700Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC applicationSABBATIC app
- CVE-2026-5699Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC applicationSABBATIC app
- CVE-2026-5698Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC applicationSABBATIC app
- CVE-2026-5697Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC applicationSABBATIC app
- CVE-2026-115962WordPress myCred plugin <= 4.0.1 - Bypass Vulnerability vulnerabilitymyCred
- CVE-2026-118989WebToffee Product Import Export for WooCommerce 2.5.1 before 2.6.8 SSRF via RedirectsWebToffee Product Import Export for WooCommerce
- CVE-2026-71569Apache Camel: Camel-A2A Push Notification Webhook Guard Accepts IPv6 Unique Local Addresses Reached Through a Host NameApache Software Foundation Apache Camel
- CVE-2026-115942Apache Qpid Proton C: Verifying non compliant TLS wildcard cert can cause stack buffer overflow readApache Software Foundation Apache Qpid Proton C
- CVE-2026-114230Apache Qpid Proton C: Potential authentication bypass: regular AMQP frames can be sent as SASL framesApache Software Foundation Apache Qpid Proton C
- CVE-2026-105042Apache Qpid Proton C: Unbounded recursion in parsing AMQP message bodies can lead to crashApache Software Foundation Apache Qpid Proton C
- CVE-2026-105031Apache Qpid Proton C: The OpenSSL TLS implementation adds a locally trusted certificate authority to the existing trusted system trust anchors.Apache Software Foundation Apache Qpid Proton C
- CVE-2026-111318HT Mega Addons for Elementor <= 3.2.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Tabs Widget href DOM Sinkdevitemsllc HT Mega Addons for Elementor – Elementor Widget…
- CVE-2026-91153Everest Forms <= 3.6.2 - Unauthenticated Sensitive Information Exposure via Smart-Tag Injection in Smart-Tag Injection in Form Field Values ({post_meta key=...})wpeverest Everest Forms – Contact Form, Payment Form, Quiz,…
- CVE-2026-116763LiteSpeed Cache <= 7.9.1 - Unauthenticated Stored Cross-Site Scripting via HTML Minifier Predictable Placeholder (md5(REQUEST_TIME) + two-pass str_replace)litespeedtech LiteSpeed Cache
- CVE-2026-104727Sequential Order Numbers for WooCommerce <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'condition' Post Meta Array Keysberocket Sequential Order Numbers for WooCommerce
- CVE-2026-109215LiteSpeed Cache <= 7.9.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via VPI Image Attribute Re-Serializationlitespeedtech LiteSpeed Cache
- CVE-2026-91152Everest Forms <= 3.6.2 - Reflected Cross-Site Scripting via 'evf_toast_type' Parameterwpeverest Everest Forms – Contact Form, Payment Form, Quiz,…
- CVE-2026-107627Greenshift <= 13.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Nested Latest Comments Blockwpsoul Greenshift – animation and page builder blocks
- CVE-2026-107629Greenshift <= 13.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Split Text innerTextwpsoul Greenshift – animation and page builder blocks
- CVE-2026-110707RSS Aggregator by Feedzy <= 5.2.12 - Unauthenticated Stored Cross-Site Scripting via YouTube media:description Feed Elementthemeisle RSS Aggregator by Feedzy – Feed to Post, Autoblog…
- CVE-2026-103875Media Library Assistant <= 3.42 - Reflected Cross-Site Scripting via 'search-string' Parameter via {+request:...+} in Pagination Linksdglingren Media Library Assistant
- CVE-2026-118192JoomSport <= 5.7.11 - Authenticated (Contributor+) SQL Injection via 'team_id' Shortcode Attributebeardev JoomSport – for Sports: Team & League, Football, Ho…
- CVE-2026-103485Extensions for Leaflet Map <= 5.4 - Unauthenticated Stored DOM-Based Cross-Site Scripting via External GeoJSON Propertyhupe13 Extensions for Leaflet Map
- CVE-2026-88941Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center.Kaspersky Network Agent · Kaspersky Administration Server
- CVE-2026-85498Polkit: regression in cve-2026-4897 fix (polkit read_cookie()) - stack buffer underflowRed Hat Hardened Images · Red Hat Enterprise Linux +1
- CVE-2026-7190Reflected Cross-Site Scripting in ICT Innovations’ PHP-CGI/PHP-FPM configurationICT Innovations’ PHP-CGI/PHP-FPM configuration
- CVE-2026-115303Contact Form by Supsystic < 1.11.1 - Unauthenticated CRLF / Email Header Injection via Reply-To Field MappingContact Form by Supsystic
- CVE-2026-118030Keycloak-services: keycloak-services: hotp race condition allows single otp code reuse across concurrent loginsRed Hat Build of Keycloak · Red Hat Single Sign-On
- CVE-2026-117859Keycloak-services: keycloak-services: par single-use bypass via flow restartRed Hat Build of Keycloak · Red Hat Single Sign-On
- CVE-2026-117688Keycloak-services: keycloak-services: vault secret disclosure via client registration installation configurationRed Hat Build of Keycloak · Red Hat Single Sign-On
- CVE-2026-117548389-ds-base: 389-ds-base: null pointer dereference via modifydn using an attribute's schema alias name causes denial of serviceRed Hat Directory Server · Red Hat Enterprise Linux
- CVE-2026-117627Keycloak-services: keycloak-services: jwt authorization grant bypasses identity provider login restrictionsRed Hat Build of Keycloak · Red Hat Single Sign-On
- CVE-2026-19610Wildfly-platform-mbean: wildfly-platform-mbean: rbac sensitive attribute read bypass for platform runtimemxbeanRed Hat JBoss Enterprise Application Platform · Red Hat Sin…
- CVE-2026-85007YT Player < 2.1.4 - Contributor+ Missing Authorization via ytp_ajaxVideo Player for YouTube
- CVE-2026-115259Photo Engine < 6.6.0 - Author+ Arbitrary Content Modification via IDORPhoto Engine
- CVE-2026-114270GeoDirectory < 2.8.197 - Unauthenticated Password-Protected Listing Content DisclosureGeoDirectory
- CVE-2026-110983WP Photo Album Plus < 9.3.04.004 - Photo Comment Deletion via CSRFWP Photo Album Plus
- CVE-2026-110505Enable SVG, WebP, and ICO Upload < 1.1.6 - Author+ Stored XSS via SMIL Animation BypassEnable SVG, WebP, and ICO Upload
- CVE-2026-110504Enable SVG, WebP, and ICO Upload 1.1.3 - 1.1.5 - Author+ Stored XSS via SVG Sanitization BypassEnable SVG, WebP, and ICO Upload
- CVE-2026-110030Hide Price Until Login < 1.1.2 - Unauthenticated Account Creation via Guest RegistrationHide Price Until Login
- CVE-2026-108763Wallet System for WooCommerce < 2.8.2 - Subscriber+ KYC Document Overwrite via IDORWallet System for WooCommerce
- CVE-2026-108686WP Post Author < 4.2.0 - Unauthenticated reCAPTCHA Secret Key DisclosureWP Post Author
- CVE-2026-108685WP Post Author < 4.2.0 - Unauthenticated Modification of the First User Account's Profile FieldsWP Post Author
- CVE-2026-105258LatePoint < 5.7.6 - Admin+ Stored XSS via Booking Form Step SettingsAppointment Booking Plugin
- CVE-2024-3586LetterPress < 2.4.0 - Admin+ Stored XSSLetterPress
- CVE-2026-88928PAYCOMET for WooCommerce 5.36 - 5.45 - Unauthenticated Stored Payment Token Overwrite via Signature Verification BypassPAYCOMET for WooCommerce
- CVE-2026-78396Link Library < 7.10.0 - Unauthenticated Link Contact and Submitter Information DisclosureLink Library
- CVE-2026-78395Link Library < 7.10.0 - Unauthenticated Link Submission Login Requirement BypassLink Library
- CVE-2026-115302Contact Form by Supsystic < 1.11.1 - Unauthenticated Arbitrary Statistics DeletionContact Form by Supsystic
- CVE-2026-115300Contact Form by Supsystic < 1.11.1 - Contact Submission and Statistics Deletion via CSRFContact Form by Supsystic
- CVE-2026-115299Contact Form by Supsystic < 1.11.1 - Arbitrary Plugin Settings Update via CSRFContact Form by Supsystic
- CVE-2026-115282Recipe Card Blocks Lite 2.6.4 - 3.6.3 - Unauthenticated Unpublished Post Content DisclosureRecipe Card Blocks Lite
- CVE-2026-93293Password Protected <= 2.8.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Freemius purchase_completed Handlersaadiqbal Password Protected – Protect Your Site Content Wi…
- CVE-2026-42949A authorization bypass vulnerability exists in the /api/runscript functionality of FUXA (version(s): 1.3.2-2809).Frangoteam
- CVE-2026-40063A information disclosure vulnerability exists in the /nodered/fuxa/scripts functionality of FUXA (version(s): 1.3.2-2809).Frangoteam
- CVE-2026-118426In affected versions of Octopus Server with the LDAP authentication provider enabled, any authenticated user could call the LDAP user searchOctopus Deploy Octopus Server
- CVE-2026-113409The Ortto plugin for WordPress before 1.0.25 did not escape stored settings on its admin settings page, leading to stored cross-site scripticanva ortto
- CVE-2026-114173The Ortto plugin for WordPress before 1.0.25 did not filter the WooCommerce product data it embedded in public storefront pages.canva ortto
- CVE-2026-66092Stored XSS in pre-login notice via reachable legacy logon routeApereo Foundation openEQUELLA
- CVE-2026-66091Unauthenticated IDOR Enables Disclosure of Other Users’ last-known detailsApereo Foundation openEQUELLA
- CVE-2026-66089XML External Entity (XXE) Vulnerability in SOAP Interface Allows External Entity ExpansionApereo Foundation openEQUELLA
- CVE-2026-16889Stored XSS via Pre-Login Notice Image Upload Serves Attacker HTML from Application OriginApereo Foundation openEQUELLA
- CVE-2026-113957An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image content in response to a pulApple container · Apple containerization
- CVE-2026-118590nipy nibabel Header volumeutils.py array_from_file memory allocationnipy nibabel
- CVE-2026-107014Insecure permissions in Bander Notepad (bander.notepad) versionCode 12 allow unauthorized attackers to write and read notes in another user'
- CVE-2026-107016Insecure permissions in Fossify v1.3.0 allows unauthorized attackers to access and read another user's stored contacts.
- CVE-2026-107018Insecure permissions in Ghost Commander File Manager versionCode 479 allows unauthorized attackers to arbitrarily read and write files insid
- CVE-2026-107019Insecure permissions in the feiertage.ImportActivity component of Arbeitszeiterfassung2 versionCode 159 allows unauthorized attackers to cre
- CVE-2026-107021Insecure permissions in the CardProvider content provider component of helloworld1 AnyMemo versionCode 20260730 allows unauthorized attacker
- CVE-2026-107023Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unauthorized attackers to arbitrarily read another…
- CVE-2026-107024Insecure permissions in Share 2 Archive Today versionCode 61 allows unauthorized attackers to arbitrarily overwrite another user's clipboard
- CVE-2026-107025Insecure permissions in WikiAndPad alpha/beta v0.2alpha03 (versionCode 200300) allows unauthorized attackers to export the application's dat
- CVE-2026-107027Insecure permissions in lz233 Tarnhelm v1.8.2 (versionCode 20250630) allows unauthorized attackers to invoke an exported component, leading
- CVE-2026-107029Insecure permissions in rubenalfon Pile v1.1.3 allows unauthorized attackers to invoke an exported component, leading to arbitrary data acce
- CVE-2026-107030Insecure permissions in craftxbox YubiClip XOR fork v1.0.1 (versionCode 10003) allows unauthorized attackers to trigger the OTP-clipboard (O
- CVE-2026-107033Insecure permissions in the MirakelInternalContentProvider component of Mirakel v3.0 (versionCode 60) allows unauthorized attackers to arbit
- CVE-2026-107035Insecure permissions in the object/Page.java component of MBasov OMN Outline notes Markdown versionCode 3400 allows unauthorized attackers t
- CVE-2026-107036Insecure permissions in Mission Control / AIMSICD versionCode 2026080501 allows unauthorized attackers to invoke an exported component, impa
- CVE-2026-107038Insecure permissions in Yet Another UPnP Controller versionCode 50200 allows unauthorized attackers to invoke an exported component, leading
- CVE-2026-107040Insecure permissions in MBasov OMN-Go versionCode 26080824 allows unauthorized attackers to invoke an exported component, leading to arbitra
- CVE-2026-107041Insecure permissions in the FeatureActionActivity component of Oasis Feng Island versionCode 51801 allows unauthorized attackers to arbitrar
- CVE-2026-107043Insecure permissions in Code Catcher versionCode 131 allow unauthorized attackers to arbitrarily manipulate the app's SMS-code-capture…
- CVE-2026-107045Insecure permissions in the CitrineContentProvider component of Citrine v3.1.0 (versionCode 62) allows unauthorized attackers to…
- CVE-2026-107046A Server-Side Request Forgery (SSRF) in the url/title/author/coverUrl component of FocusPodcast versionCode 70allows attackers to scan…
- CVE-2026-107048An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101 allows attackers to execute arbitrary code…
- CVE-2026-107050An issue in libretro RetroArch v1.22.2 allows attackers to force another user into loading attacker-supplied code in their uid, leading to…
- CVE-2026-107051Insecure permissions in klassm AndFHEM v2.4.1 (versionCode 241, the verified build) allows unauthorized attackers to arbitrarily…
- CVE-2026-107053Insecure permissions in foobnix Librera PDF Reader versionCode 7222 allows unauthorized attackers to arbitrarily write and truncate files…
- CVE-2026-107056Insecure permissions in the io.file.importer.ImportActivity component of OpenTracks versionCode 6751 allows unauthorized attackers to…
- CVE-2026-107057An issue in AndBible versionCode 1111 allows attackers to execute arbitrary code via uploading a crafted module zip.
- CVE-2026-107059An issue in Nextcloud versionCode 30390190 allows attackers to force victim users to logout of their accounts and switch to an attacker…
- CVE-2026-51831An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a local attacker to…
- CVE-2026-51832An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a local attacker to…
- CVE-2026-51851modelscope agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in…
- CVE-2026-51863DB-GPT v0.7.5 and 0.8.0 contains directory traversal in use_example_file…
- CVE-2026-51902SuperAGI up to v0.0.14 contains an improper access control vulnerability.
- CVE-2026-51903SuperAGI v0.0.14 contains an improper access control vulnerability in get_agent_by_latest_execution in…
- CVE-2026-51912OpenBMB XAgent v1.0.0 contains directory traversal vulnerability in main-upload_file-the-preserved-live-upload-file-witness-directly-reache…
- CVE-2026-79589The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker to gain unauthentic