# CVEs published 2026-10-29

544 CVEs were published on October 29, 2026: 67 critical, 189 high. Days are UTC.

- [CVE-2026-92744](https://cve.now/CVE-2026-92744.md): Delinea Privilege Manager agent unauthenticated remote code execution vulnerability (CVSS 8.7, Delinea Privilege Manager)
- [CVE-2026-107238](https://cve.now/CVE-2026-107238.md): A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account on servers running… (CVSS 8.7, Veeam Management Pack for Microsoft System Center)
- [CVE-2026-107239](https://cve.now/CVE-2026-107239.md): A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution (RCE) on servers… (CVSS 8.8, Veeam Management Pack for Microsoft System Center)
- [CVE-2023-22793](https://cve.now/CVE-2023-22793.md): A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization… (CVSS 9.3, Veeam Management Pack for Microsoft System Center)
- [CVE-2026-119286](https://cve.now/CVE-2026-119286.md): GraphQL-core: Denial of service via memory leak in aborted validations (CVSS 7.5, graphql-python graphql-core · graphql-core)
- [CVE-2026-115943](https://cve.now/CVE-2026-115943.md): Spreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of number format conditions in ExcelFmt (no CVSS, Spreadsheet-XLSX)
- [CVE-2026-119285](https://cve.now/CVE-2026-119285.md): Fiber: CORS wildcard origins matched without a dot boundary, allowing credentialed cross-origin reads (CVSS 5.9, gofiber fiber · github.com/gofiber/fiber/v2)
- [CVE-2026-119284](https://cve.now/CVE-2026-119284.md): joserfc: Compact JWS size guard allocates attacker-controlled segments before rejection (CVSS 6.9, authlib joserfc · joserfc)
- [CVE-2026-61719](https://cve.now/CVE-2026-61719.md): WeGIA: Stored Cross-Site Scripting (XSS) in "historico\_prontuarios.php" via "textoProntuario" Field (CVSS 8.9, LabRedesCefetRJ WeGIA)
- [CVE-2026-61707](https://cve.now/CVE-2026-61707.md): SOCFortress CoPilot: Stored case-report template injection permits backend code execution (CVSS 9.0, socfortress CoPilot)
- [CVE-2026-61673](https://cve.now/CVE-2026-61673.md): WeGIA: Stored DOM XSS in listar\_despachos.php Allows Account Takeover (CVSS 6.3, LabRedesCefetRJ WeGIA)
- [CVE-2026-61671](https://cve.now/CVE-2026-61671.md): WeGIA: Systemic IDOR + Missing CSRF — extract($\_REQUEST) in All Controle Classes (CVSS 8.1, LabRedesCefetRJ WeGIA)
- [CVE-2026-61654](https://cve.now/CVE-2026-61654.md): Lightdash: Unauthenticated dbt Cloud webhook with path injection leaks API key (CVSS 8.3, lightdash)
- [CVE-2026-61645](https://cve.now/CVE-2026-61645.md): Docat has Arbitrary File Upload exists in Upload API (CVSS 9.1, docat-org docat)
- [CVE-2026-45049](https://cve.now/CVE-2026-45049.md): OpenAM Session Hijacking via CDSSO (CVSS 8.3, OpenIdentityPlatform OpenAM · org.openidentityplatform.open…)
- [CVE-2026-119317](https://cve.now/CVE-2026-119317.md): Incorrect Authorization (CVSS 6.5, Tenable Plugin Feed)
- [CVE-2026-119283](https://cve.now/CVE-2026-119283.md): joserfc: Unbounded JWE General JSON \`recipients\` Array Leads to CPU Exhaustion (DoS) via Repeated RSA Private-Key Decryption (CVSS 7.5, authlib joserfc · joserfc)
- [CVE-2026-119282](https://cve.now/CVE-2026-119282.md): Nx: OS command injection via nx.json plugin options in @nx/maven and @nx/gradle (CVSS 7.3, nrwl nx · @nx maven +3)
- [CVE-2026-13303](https://cve.now/CVE-2026-13303.md): Boundary vulnerable to server-side request forgery in Vault credential store (CVSS 8.7, HashiCorp Boundary)
- [CVE-2026-61576](https://cve.now/CVE-2026-61576.md): Lightdash: Unauthenticated dbt Cloud webhook with path injection leaks API key (CVSS 8.3, lightdash)
- [CVE-2026-119281](https://cve.now/CVE-2026-119281.md): MariaDB Connector/J: Server could switch character\_set\_results away from UTF-8 without the client noticing (CVSS 5.9, mariadb-corporation mariadb-connector-j · org.mariadb.jdbc:…)
- [CVE-2026-119280](https://cve.now/CVE-2026-119280.md): MariaDB Connector/J : XA recover() trusted server-supplied gtrid and bqual lengths (CVSS 3.7, mariadb-corporation mariadb-connector-j · org.mariadb.jdbc:…)
- [CVE-2026-119279](https://cve.now/CVE-2026-119279.md): MariaDB Connector/J: Length-encoded integers larger than Integer.MAX\_VALUE were truncated before being used as lengths (CVSS 5.9, mariadb-corporation mariadb-connector-j · org.mariadb.jdbc:…)
- [CVE-2026-119278](https://cve.now/CVE-2026-119278.md): MariaDB Connector/J: Rogue server can crash the client during caching\_sha2\_password authentication (CVSS 5.9, mariadb-corporation mariadb-connector-j)
- [CVE-2026-119277](https://cve.now/CVE-2026-119277.md): MariaDB Connector/J: Rogue server can make the client read past the packet through server-declared lengths (CVSS 5.9, mariadb-corporation mariadb-connector-j)
- [CVE-2026-119276](https://cve.now/CVE-2026-119276.md): MariaDB Connector/J: Rogue server can drive large heap allocations from server-declared lengths in OK packets (CVSS 5.9, mariadb-corporation mariadb-connector-j · org.mariadb.jdbc:…)
- [CVE-2026-119210](https://cve.now/CVE-2026-119210.md): MariaDB Connector/J: LOAD DATA LOCAL INFILE file check could be satisfied by text inside quoted identifiers, letting a malicious server… (CVSS 5.9, mariadb-corporation mariadb-connector-j · org.mariadb.jdbc:…)
- [CVE-2026-119209](https://cve.now/CVE-2026-119209.md): pypdf: Possible large memory usage when parsing cross-reference streams (CVSS 7.1, py-pdf pypdf · pypdf)
- [CVE-2026-119208](https://cve.now/CVE-2026-119208.md): pypdf: Possible long runtimes/large memory usage for encrypted PDF files (CVSS 7.1, py-pdf pypdf · pypdf)
- [CVE-2026-119207](https://cve.now/CVE-2026-119207.md): pypdf: Possible large memory usage for exceptions in strict mode (CVSS 7.1, py-pdf pypdf · pypdf)
- [CVE-2026-119206](https://cve.now/CVE-2026-119206.md): pypdf: Possible long runtimes when retrieving page labels (CVSS 7.1, py-pdf pypdf · pypdf)
- [CVE-2026-119205](https://cve.now/CVE-2026-119205.md): pypdf: Possible infinite loop when cloning dictionaries (CVSS 7.1, py-pdf pypdf · pypdf)
- [CVE-2026-119325](https://cve.now/CVE-2026-119325.md): Bricks Theme Broken Access Control via load\_popup\_content (CVSS 7.5, Bricks Theme)
- [CVE-2026-119204](https://cve.now/CVE-2026-119204.md): pypdf: Possible large memory usage when parsing page tree (CVSS 7.1, py-pdf pypdf · pypdf)
- [CVE-2026-119203](https://cve.now/CVE-2026-119203.md): pypdf: Possible infinite loop when hitting EOF in standard xref table during trailer search (CVSS 7.1, py-pdf pypdf · pypdf)
- [CVE-2026-119202](https://cve.now/CVE-2026-119202.md): @hapi/content: quadratic-time parsing of Content-Disposition parameters allows denial of service (CVSS 7.5, hapijs content · @hapi/content +1)
- [CVE-2026-119201](https://cve.now/CVE-2026-119201.md): Nuxt dev server exposes generated appSecret through Vite file serving (CVSS 4.8, nuxt · @nuxt/vite-builder)
- [CVE-2026-119200](https://cve.now/CVE-2026-119200.md): Nuxt: Dot segments in the request path bypass \`server/middleware\` path checks and server route rules on page routes (CVSS 6.5, nuxt · @nuxt nitro-server +1)
- [CVE-2026-119199](https://cve.now/CVE-2026-119199.md): Nuxt dev server exposes private runtime config through the Nitro dev bundle (CVSS 5.9, nuxt · @nuxt/vite-builder)
- [CVE-2026-119198](https://cve.now/CVE-2026-119198.md): Nuxt dev server arbitrary file read through client error reports (CVSS 5.9, nuxt · @nuxt/vite-builder)
- [CVE-2026-92092](https://cve.now/CVE-2026-92092.md): Openshift-ansible: openshift-ansible: installer container downloads and executes remote inventory script without integrity verification (CVSS 7.4, Red Hat OpenShift Container Platform)
- [CVE-2026-119197](https://cve.now/CVE-2026-119197.md): pyasn1: Quadratic-complexity denial of service in binary REAL decoding (CVSS 7.5, pyasn1)
- [CVE-2026-119196](https://cve.now/CVE-2026-119196.md): pyasn1: Quadratic CPU consumption in constructed BIT STRING decoding (CVSS 7.5, pyasn1)
- [CVE-2026-119195](https://cve.now/CVE-2026-119195.md): pyasn1: Quadratic-time denial of service in constructed string and indefinite-length ANY decoding (CVSS 7.5, pyasn1)
- [CVE-2026-119194](https://cve.now/CVE-2026-119194.md): pyasn1: Quadratic CPU use in schemaless BER/CER/DER container decoding (CVSS 7.5, pyasn1)
- [CVE-2026-119193](https://cve.now/CVE-2026-119193.md): PHPUnit vulnerable to code execution by other local users via shared temporary directory in PHPT code coverage handling (CVSS 5.4, sebastianbergmann phpunit · phpunit/phpunit)
- [CVE-2026-119191](https://cve.now/CVE-2026-119191.md): Forge: ASN.1 resource exhaustion via BIT STRING decoding in asn1.fromDer (CVSS 7.5, digitalbazaar forge)
- [CVE-2026-119190](https://cve.now/CVE-2026-119190.md): Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13 (CVSS 7.4, digitalbazaar forge · node-forge)
- [CVE-2026-119189](https://cve.now/CVE-2026-119189.md): Forge: X.509 pathLenConstraint not enforced by verifyCertificateChain() for CA certificates without keyUsage (CVSS 5.9, digitalbazaar forge)
- [CVE-2026-119188](https://cve.now/CVE-2026-119188.md): Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message (CVSS 7.5, digitalbazaar forge · node-forge)
- [CVE-2026-119187](https://cve.now/CVE-2026-119187.md): Forge: Denial of service in TLS record processing via call stack exhaustion (CVSS 7.5, digitalbazaar forge · node-forge)
- [CVE-2026-119186](https://cve.now/CVE-2026-119186.md): Forge: AES-GCM authentication bypass via unvalidated tagLength option (CVSS 5.9, digitalbazaar forge · node-forge)
- [CVE-2026-103093](https://cve.now/CVE-2026-103093.md): Sandbox Escape via Table Rotation in ServiceNow AI Platform (CVSS 9.4, ServiceNow AI Platform)
- [CVE-2026-118782](https://cve.now/CVE-2026-118782.md): Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count (CVSS 7.5, digitalbazaar forge · node-forge)
- [CVE-2026-6877](https://cve.now/CVE-2026-6877.md): Domain Separation Bypass in ServiceNow AI Platform (CVSS 5.3, ServiceNow AI Platform)
- [CVE-2026-118781](https://cve.now/CVE-2026-118781.md): Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891) (CVSS 2.9, digitalbazaar forge · node-forge)
- [CVE-2026-118780](https://cve.now/CVE-2026-118780.md): Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store (CVSS 3.7, digitalbazaar forge · node-forge)
- [CVE-2026-118779](https://cve.now/CVE-2026-118779.md): Forge: Regular expression denial of service in PEM decoding (pem.decode) (CVSS 7.5, digitalbazaar forge · node-forge)
- [CVE-2026-118778](https://cve.now/CVE-2026-118778.md): Forge: TLS client crash when the server sends no certificate (CVSS 5.9, digitalbazaar forge · node-forge)
- [CVE-2026-118777](https://cve.now/CVE-2026-118777.md): Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie (CVSS 4.8, digitalbazaar forge · node-forge)
- [CVE-2026-103094](https://cve.now/CVE-2026-103094.md): Cleartext Storage of OAuth Credentials in ServiceNow AI Platform (CVSS 7.1, ServiceNow AI Platform)
- [CVE-2026-118776](https://cve.now/CVE-2026-118776.md): Forge: Incomplete PKCS#7 padding validation in AES/DES CBC and ECB decryption (CVSS 3.7, digitalbazaar forge)
- [CVE-2026-118775](https://cve.now/CVE-2026-118775.md): Forge: ASN.1 OID first arc truncation in asn1.oidToDer (CVSS 3.7, digitalbazaar forge · node-forge)
- [CVE-2026-118774](https://cve.now/CVE-2026-118774.md): Forge: Certificate signature verified with the issuer's RSA signature scheme (CVSS 3.7, digitalbazaar forge)
- [CVE-2026-119251](https://cve.now/CVE-2026-119251.md): A malicious actor with local access and high privileges could exploit an Improper Access Control vulnerability found in WiFiman Desktop… (CVSS 6.7, Ubiquiti WiFiman Desktop for macOS)
- [CVE-2026-118773](https://cve.now/CVE-2026-118773.md): Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal (CVSS 6.3, isaacs node-glob · glob)
- [CVE-2026-119250](https://cve.now/CVE-2026-119250.md): A malicious actor with local access and low privileges could exploit an External Control of File Name or Path vulnerability found in… (CVSS 7.8, Ubiquiti WiFiman Desktop)
- [CVE-2026-119249](https://cve.now/CVE-2026-119249.md): A malicious actor with access to the network could exploit a Binding to an Unrestricted IP Address vulnerability found in WiFiman Desktop… (CVSS 7.5, Ubiquiti WiFiman Desktop)
- [CVE-2026-41216](https://cve.now/CVE-2026-41216.md): An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of vtk 9.6. (CVSS 7.5, vtk)
- [CVE-2026-42057](https://cve.now/CVE-2026-42057.md): An invalid pointer dereference vulnerability exists in the vtkPNGReader::vtkPNGReaderUpdate2 functionality of vtk 9.6. (CVSS 7.5, vtk)
- [CVE-2026-8822](https://cve.now/CVE-2026-8822.md): A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of vtk (version(s): 9.6.1). (CVSS 7.5, vtk)
- [CVE-2026-8824](https://cve.now/CVE-2026-8824.md): A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionality of vtk (version(s): 9.6.1). (CVSS 7.5, vtk)
- [CVE-2026-9535](https://cve.now/CVE-2026-9535.md): A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk (version(s): 9.6.1). (CVSS 8.2, vtk)
- [CVE-2026-9536](https://cve.now/CVE-2026-9536.md): A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk (version(s): 9.6.1). (CVSS 7.5, vtk)
- [CVE-2026-118772](https://cve.now/CVE-2026-118772.md): joi: quadratic-time split in \`string().email({ multiple: true })\` allows denial of service (CVSS 7.5, hapijs joi · @hapi joi +2)
- [CVE-2026-119168](https://cve.now/CVE-2026-119168.md): Nomad allocation data migration may allow host directory permission modification via symlink following (CVSS 8.8, HashiCorp Nomad)
- [CVE-2026-107347](https://cve.now/CVE-2026-107347.md): Nomad dispatch payload writes can escape the allocation directory through symlinks (CVSS 8.4, HashiCorp Nomad)
- [CVE-2026-102260](https://cve.now/CVE-2026-102260.md): Nomad vulnerable to cross-namespace information disclosure in multiple endpoints (CVSS 4.3, HashiCorp Nomad)
- [CVE-2026-116566](https://cve.now/CVE-2026-116566.md): socket.getaddrinfo() accepts embedded null bytes in host and port (CVSS 5.3, Python Software Foundation CPython)
- [CVE-2026-118769](https://cve.now/CVE-2026-118769.md): Botan: Integer overflow when reporting block size in FFI can cause memory corruption (CVSS 9.2, randombit botan)
- [CVE-2026-118768](https://cve.now/CVE-2026-118768.md): Botan: CLI utility \`ocsp\_check\` accepts unauthenticated responses (CVSS 5.9, randombit botan)
- [CVE-2026-118767](https://cve.now/CVE-2026-118767.md): Botan: Python binding bcrypt APIs truncate passwords containing embedded NULs (CVSS 4.8, randombit botan)
- [CVE-2026-118766](https://cve.now/CVE-2026-118766.md): Botan: Online OCSP redirects enable blind requests to internal HTTP services (CVSS 6.1, randombit botan)
- [CVE-2026-118765](https://cve.now/CVE-2026-118765.md): Botan: AutoSeeded\_RNG can become reinitialized from predictable data after clearing state (CVSS 7.3, randombit botan)
- [CVE-2026-118764](https://cve.now/CVE-2026-118764.md): minimatch: potential denial of service via globparts amplification (CVSS 6.9, isaacs minimatch · minimatch)
- [CVE-2026-118763](https://cve.now/CVE-2026-118763.md): @sigstore/oci sends the registry Authorization header to a cross-host blob-upload Location (CVSS 7.4, sigstore-js · @sigstore/oci)
- [CVE-2026-118762](https://cve.now/CVE-2026-118762.md): Monkeytype: fork PR can execute code with elevated GITHUB\_TOKEN (CVSS 9.3, monkeytypegame monkeytype)
- [CVE-2026-115805](https://cve.now/CVE-2026-115805.md): Rapid7 Insight Agent Local Privilege Escalation via Shell Injection in mcp.json Configuration Path (CVSS 7.8, Rapid7 Insight Agent)
- [GHSA-VPP8-G58W-M8MP](https://cve.now/GHSA-VPP8-G58W-M8MP.md): Twisted: Unauthenticated Remote Denial of Service in the Twisted HTTP/2 Server via Rapid Stream Reset (high (no CVSS), twisted)
- [CVE-2026-11587](https://cve.now/CVE-2026-11587.md): Authenticated SQL Injection via PHP Array Key in ACL Management (Resources & Actions) — Centreon 26.03.0 (CVSS 7.2, Centreon)
- [CVE-2023-7357](https://cve.now/CVE-2023-7357.md): FlexNet Publisher lmadmin Rogue Vendor Daemon Vulnerability (CVSS 8.6, Revera FlexNet Publisher)
- [CVE-2026-118761](https://cve.now/CVE-2026-118761.md): Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory (CVSS 7.5, kubeflow pipelines · github.com/kubeflow/pipelines)
- [CVE-2026-119115](https://cve.now/CVE-2026-119115.md): Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes (CVSS 8.5, aws-privateca-issuer)
- [GHSA-W9X9-J56R-H98R](https://cve.now/GHSA-W9X9-J56R-H98R.md): @eeacms/volto-chatbot has Unauthenticated Danswer API Confused Deputy Proxy (high (no CVSS), @eeacms/volto-chatbot)
- [CVE-2026-118760](https://cve.now/CVE-2026-118760.md): Kubeflow Pipelines: Missing namespace authorization permits cross-tenant artifact reads (CVSS 6.5, kubeflow pipelines)
- [GHSA-C33X-VCV4-VG3G](https://cve.now/GHSA-C33X-VCV4-VG3G.md): Cedar: JSON template is in scope missing slot-id validation allows link panic and decision divergence (low (no CVSS), cedar-policy · @cedar-policy/cedar-wasm)
- [CVE-2026-118759](https://cve.now/CVE-2026-118759.md): Kubeflow Pipelines: Run log streaming endpoint bypasses namespace authorization, exposing pod execution logs cross-tenant (CVSS 7.5, kubeflow pipelines · github.com/kubeflow/pipelines)
- [CVE-2025-12523](https://cve.now/CVE-2025-12523.md): Broken Object Level Authorization in Users Configuration Endpoint (/centreon/api/latest/configuration/users) – Sensitive Information… (CVSS 6.5, Centreon)
- [CVE-2026-62374](https://cve.now/CVE-2026-62374.md): SD JWT JS: Tampered disclosures silently dropped instead of rejected (CVSS 7.1, openwallet-foundation @sd-jwt/core · openwallet-foundation…)
- [CVE-2026-118758](https://cve.now/CVE-2026-118758.md): Kubeflow: Unauthenticated path traversal to arbitrary file read on ml-pipeline-ui via the volume artifact source (CVSS 7.5, kubeflow pipelines)
- [CVE-2026-118673](https://cve.now/CVE-2026-118673.md): KeePassXC: Out-of-bounds write in browser integration response encryption with oversized database responses (CVSS 4.1, keepassxreboot keepassxc)
- [CVE-2025-13050](https://cve.now/CVE-2025-13050.md): Broken Function Level Authorization — \`postcommand.php\` allows execution of poller post-restart commands by non-admin users (CVSS 5.4, Centreon)
- [CVE-2026-119145](https://cve.now/CVE-2026-119145.md): Frappe before 15.121.0 and 16.x before 16.34.0 Path Traversal RCE via File Upload (CVSS 9.4, frappe)
- [CVE-2026-119144](https://cve.now/CVE-2026-119144.md): Frappe Framework before 15.111.0 and 16.x before 16.21.0 Server-Side Template Injection via Message Fields (CVSS 8.7, frappe)
- [CVE-2026-119143](https://cve.now/CVE-2026-119143.md): Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Panic via Zero-Length Stream Writes (CVSS 5.9, bytecodealliance wasmtime · wasmtime)
- [CVE-2026-119142](https://cve.now/CVE-2026-119142.md): Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via call\_async Drop (CVSS 5.9, bytecodealliance wasmtime · wasmtime)
- [CVE-2026-119141](https://cve.now/CVE-2026-119141.md): Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via realloc (CVSS 6.9, bytecodealliance wasmtime)
- [CVE-2026-119140](https://cve.now/CVE-2026-119140.md): Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via thread.yield (CVSS 5.9, bytecodealliance wasmtime)
- [CVE-2026-119139](https://cve.now/CVE-2026-119139.md): Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via Func::call (CVSS 5.9, bytecodealliance wasmtime)
- [CVE-2026-119138](https://cve.now/CVE-2026-119138.md): Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Panic After Trap (CVSS 5.9, bytecodealliance wasmtime · wasmtime)
- [CVE-2026-119137](https://cve.now/CVE-2026-119137.md): Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Stack Overflow via Type Registry (CVSS 6.9, bytecodealliance wasmtime · wasmtime)
- [CVE-2026-119136](https://cve.now/CVE-2026-119136.md): Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Async-Entrypoint Enforcement Bypass (CVSS 5.9, bytecodealliance wasmtime · wasmtime)
- [CVE-2026-119135](https://cve.now/CVE-2026-119135.md): Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Panic via StreamReader Type Mismatch (CVSS 5.9, bytecodealliance wasmtime)
- [CVE-2026-119134](https://cve.now/CVE-2026-119134.md): Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 Unbounded Memory Growth via Component-Model Resource Handles (CVSS 6.9, bytecodealliance wasmtime)
- [CVE-2026-119133](https://cve.now/CVE-2026-119133.md): Wasmtime 47.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Misaligned VMContext via Exception Tags (CVSS 2.1, bytecodealliance wasmtime)
- [CVE-2026-119132](https://cve.now/CVE-2026-119132.md): Wasmtime 49.0.0 before 49.0.3 Host Panic via Overlapping String Transcode in Fused Adapter (CVSS 5.9, bytecodealliance wasmtime · wasmtime)
- [CVE-2026-119131](https://cve.now/CVE-2026-119131.md): Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via wasi-http (CVSS 6.9, bytecodealliance wasmtime · wasmtime-wasi-http)
- [CVE-2026-119130](https://cve.now/CVE-2026-119130.md): Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 HTTP Request Target Smuggling (CVSS 2.1, bytecodealliance wasmtime · wasmtime-wasi-http)
- [CVE-2026-119129](https://cve.now/CVE-2026-119129.md): ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.19.5 Account Takeover via Device Authorization Approval (CVSS 8.6, zitadel)
- [CVE-2026-119128](https://cve.now/CVE-2026-119128.md): ZITADEL 4.0.0 before 4.19.5 Login V2 Account Takeover via Forgeable verificationCheck Cookie (CVSS 9.1, zitadel)
- [CVE-2026-119127](https://cve.now/CVE-2026-119127.md): ZITADEL 4.0.0 before 4.19.5 Account Takeover via Login V2 Host Header Injection (CVSS 8.6, zitadel)
- [CVE-2026-119126](https://cve.now/CVE-2026-119126.md): Parse Server before 8.6.106 and 9.0.0 before 9.10.5-alpha.7 afterSave Trigger and LiveQuery Bypass via Dot Notation Keys (CVSS 2.3, parse-community parse-server)
- [CVE-2026-119125](https://cve.now/CVE-2026-119125.md): Parse Server before 8.6.107 and 9.0.0 before 9.10.5-alpha.8 Information Disclosure via beforeSave Reverted Fields (CVSS 2.3, parse-community parse-server)
- [CVE-2026-119124](https://cve.now/CVE-2026-119124.md): ImageMagick before 7.1.2-34 Heap Buffer Overflow via -morph Option (CVSS 4.8, ImageMagick)
- [CVE-2026-119123](https://cve.now/CVE-2026-119123.md): ImageMagick before 7.1.2-34 Stack Overflow in TIFF Decoder (CVSS 6.3, ImageMagick)
- [CVE-2026-119122](https://cve.now/CVE-2026-119122.md): Crawl4AI before 0.9.5 Blind SSRF via CacheValidator Freshness Check (CVSS 6.9, unclecode crawl4ai)
- [CVE-2026-119121](https://cve.now/CVE-2026-119121.md): Crawl4AI 0.9.0 before 0.9.5 JavaScript Injection via css\_selector and wait\_for (CVSS 5.3, unclecode crawl4ai)
- [CVE-2026-119120](https://cve.now/CVE-2026-119120.md): Crawl4AI 0.9.0 before 0.9.5 Untrusted Model Loading via CosineStrategy model\_name (CVSS 7.7, unclecode crawl4ai)
- [CVE-2026-119119](https://cve.now/CVE-2026-119119.md): Crawl4AI before 0.9.5 Denial of Service via Unbounded CrawlerRunConfig Delay Fields (CVSS 8.7, unclecode crawl4ai)
- [CVE-2026-119118](https://cve.now/CVE-2026-119118.md): Crawl4AI before 0.9.5 Improper Certificate Validation via Hard-coded Chromium Flags (CVSS 8.3, unclecode crawl4ai)
- [CVE-2026-90872](https://cve.now/CVE-2026-90872.md): Server-Side Script Injection in Manager Web UI in Progress WS\_FTP Server (CVSS 6.6, Progress Software WS\_FTP Server)
- [CVE-2026-90871](https://cve.now/CVE-2026-90871.md): Path Traversal Leading to File Deletion in Ad Hoc Transfer and Web Transfer in Progress WS\_FTP Server (CVSS 5.3, Progress Software WS\_FTP Server)
- [CVE-2026-90870](https://cve.now/CVE-2026-90870.md): Unauthenticated Ad Hoc Transfer Resource Exhaustion in Progress WS\_FTP Server (CVSS 5.3, Progress Software WS\_FTP Server)
- [CVE-2026-90869](https://cve.now/CVE-2026-90869.md): Pre-Authentication SSH Denial of Service via Malformed Public-Key Signature in Progress WS\_FTP Server (CVSS 7.5, Progress Software WS\_FTP Server)
- [CVE-2026-90868](https://cve.now/CVE-2026-90868.md): OS Command Injection in Progress WS\_FTP Server (CVSS 9.9, Progress Software WS\_FTP Server)
- [CVE-2026-90867](https://cve.now/CVE-2026-90867.md): Improper Access Control of Web Admin Console in Progress WS\_FTP Server (CVSS 8.1, Progress Software WS\_FTP Server)
- [CVE-2026-90866](https://cve.now/CVE-2026-90866.md): Virtual Folder Path Confinement Bypass in Progress WS\_FTP Server (CVSS 9.1, Progress Software WS\_FTP Server)
- [CVE-2026-90865](https://cve.now/CVE-2026-90865.md): Command Injection via FTP Notification Variables in Progress WS\_FTP Server (CVSS 9.0, Progress Software WS\_FTP Server)
- [CVE-2026-90864](https://cve.now/CVE-2026-90864.md): Host Administrator Path Containment Bypass in Progress WS\_FTP Server (CVSS 9.1, Progress Software WS\_FTP Server)
- [CVE-2026-90863](https://cve.now/CVE-2026-90863.md): Privilege Escalation via Missing Authorization in WS\_FTP Manager (CVSS 9.1, Progress Software WS\_FTP Server)
- [CVE-2026-90862](https://cve.now/CVE-2026-90862.md): Web Transfer Module Multi-Factor Authentication Bypass in Progress WS\_FTP Server (CVSS 4.3, Progress Software WS\_FTP Server)
- [CVE-2026-90861](https://cve.now/CVE-2026-90861.md): Password Disclosure via Activity Logs Enabling Administrator Privilege Escalation in WS\_FTP Server (CVSS 6.6, Progress Software WS\_FTP Server)
- [CVE-2026-84296](https://cve.now/CVE-2026-84296.md): SSH Multi-Factor Authentication Bypass in Progress WS\_FTP Server (CVSS 6.8, Progress Software WS\_FTP Server)
- [CVE-2026-84295](https://cve.now/CVE-2026-84295.md): Improper Authentication in Progress WS\_FTP Server (CVSS 10.0, Progress Software WS\_FTP Server)
- [CVE-2026-115793](https://cve.now/CVE-2026-115793.md): Resource exhaustion from RPC sessions kept for requests to unknown interface (CVSS 8.7, RT-Labs P-Net)
- [CVE-2026-115794](https://cve.now/CVE-2026-115794.md): Alarm data length not validated against received frame length (CVSS 2.3, RT-Labs P-Net)
- [CVE-2026-115795](https://cve.now/CVE-2026-115795.md): Out-of-bounds read of DCP block header in DCP Set and Identify request parsing (CVSS 5.3, RT-Labs P-Net)
- [CVE-2026-111736](https://cve.now/CVE-2026-111736.md): NULL pointer dereference on implicit read of user specific record index (CVSS 8.7, RT-Labs P-Net)
- [CVE-2026-112200](https://cve.now/CVE-2026-112200.md): Resource exhaustion from unreleased AR and RPC session on RPC requests with incorrect endianness (CVSS 8.7, RT-Labs P-Net)
- [CVE-2026-84294](https://cve.now/CVE-2026-84294.md): Information Disclosure in Ad Hoc Transfer in Progress WS\_FTP Server (CVSS 7.7, Progress Software WS\_FTP Server)
- [CVE-2026-111735](https://cve.now/CVE-2026-111735.md): Integer underflow leads to out-of-bounds read in pf\_cpm\_c\_data\_ind() (CVSS 7.1, RT-Labs P-Net)
- [CVE-2026-111734](https://cve.now/CVE-2026-111734.md): Missing length validation of EtherType, VLAN and FrameID fields in pf\_eth\_recv() (CVSS 7.1, RT-Labs P-Net)
- [CVE-2026-111733](https://cve.now/CVE-2026-111733.md): NULL pointer dereference on implicit read of AR specific record index (CVSS 8.7, RT-Labs P-Net)
- [CVE-2026-111732](https://cve.now/CVE-2026-111732.md): Out-of-bounds write when parsing AR Vendor Block requests (CVSS 9.3, RT-Labs P-Net)
- [CVE-2026-111731](https://cve.now/CVE-2026-111731.md): Infinite loop when reading PDPortDataCheck record of subslot 0 (CVSS 8.7, RT-Labs P-Net)
- [CVE-2026-111730](https://cve.now/CVE-2026-111730.md): Out-of-bounds write in CheckPeers block parser due to unvalidated peer station name length (CVSS 7.2, RT-Labs P-Net)
- [CVE-2026-112256](https://cve.now/CVE-2026-112256.md): Logon bypass (trust of attacker-controlled completed-methods list) (CVSS 9.2, OpenText Advanced Authentication Server)
- [CVE-2026-112255](https://cve.now/CVE-2026-112255.md): Endpoint credential minting (insecure default allow-list) (CVSS 2.9, OpenText Advanced Authentication Server)
- [CVE-2026-118084](https://cve.now/CVE-2026-118084.md): WordPress Hotel Booking plugin \<= 3.8 - Insecure Direct Object References (IDOR) vulnerability (CVSS 6.5, nicdark Hotel Booking)
- [CVE-2026-118083](https://cve.now/CVE-2026-118083.md): WordPress WP Crowdfunding plugin \<= 2.2.2 - Sensitive Data Exposure vulnerability (CVSS 7.5, Themeum WP Crowdfunding)
- [CVE-2026-118082](https://cve.now/CVE-2026-118082.md): WordPress Buddyboss Platform plugin \<= 3.5.0 - Privilege Escalation vulnerability (CVSS 8.8, Buddyboss Platform)
- [CVE-2026-118081](https://cve.now/CVE-2026-118081.md): WordPress 10Web Social Photo Feed plugin \<= 1.5.6 - PHP Object Injection vulnerability (CVSS 8.8, 10Web Social Photo Feed)
- [CVE-2026-118080](https://cve.now/CVE-2026-118080.md): WordPress Social Snap plugin \<= 1.5.4 - PHP Object Injection vulnerability (CVSS 8.8, Social Snap)
- [CVE-2026-118079](https://cve.now/CVE-2026-118079.md): WordPress FV Flowplayer Video Player plugin \<= 8.3.4 - PHP Object Injection vulnerability (CVSS 7.2, FolioVision FV Flowplayer Video Player)
- [CVE-2026-118078](https://cve.now/CVE-2026-118078.md): WordPress Product Catalog Feed by PixelYourSite plugin \<= 3.1.4 - PHP Object Injection vulnerability (CVSS 7.2, Product Catalog Feed by PixelYourSite)
- [CVE-2026-118077](https://cve.now/CVE-2026-118077.md): WordPress Sastra Essential Addons for Elementor plugin \<= 1.2.3 - PHP Object Injection vulnerability (CVSS 7.2, Fast Themes Sastra Essential Addons for Elementor)
- [CVE-2026-118076](https://cve.now/CVE-2026-118076.md): WordPress Frisbii Pay plugin \<= 1.8.19 - PHP Object Injection vulnerability (CVSS 8.8, Frisbii Pay)
- [CVE-2026-118075](https://cve.now/CVE-2026-118075.md): WordPress WP Media folders plugin \<= 1.1.10 - PHP Object Injection vulnerability (CVSS 8.8, dbarrere WP Media folders)
- [CVE-2026-118074](https://cve.now/CVE-2026-118074.md): WordPress Finale Lite plugin \<= 2.21.0 - PHP Object Injection vulnerability (CVSS 7.2, Daman Jeet Finale Lite)
- [CVE-2026-118073](https://cve.now/CVE-2026-118073.md): WordPress News Kit Elementor Addons plugin \<= 1.5.0 - PHP Object Injection vulnerability (CVSS 8.8, blazethemes News Kit Elementor Addons)
- [CVE-2026-116869](https://cve.now/CVE-2026-116869.md): WordPress myPOS Checkout plugin \<= 1.4.5 - PHP Object Injection vulnerability (CVSS 7.2, myPOS Payments myPOS Checkout)
- [CVE-2026-116868](https://cve.now/CVE-2026-116868.md): WordPress BuddyPress Xprofile Custom Field Types plugin \<= 1.3.1 - PHP Object Injection vulnerability (CVSS 8.8, BuddyDev BuddyPress Xprofile Custom Field Types)
- [CVE-2026-116867](https://cve.now/CVE-2026-116867.md): WordPress Dynamic QR Code – generator plugin \<= 1.0.1 - PHP Object Injection vulnerability (CVSS 8.8, sosidee Dynamic QR Code &#8211; generator)
- [CVE-2026-116866](https://cve.now/CVE-2026-116866.md): WordPress Extra Fees Plugin for WooCommerce plugin \<= 4.4.0 - PHP Object Injection vulnerability (CVSS 8.8, Dotstore Extra Fees Plugin for WooCommerce)
- [CVE-2026-116865](https://cve.now/CVE-2026-116865.md): WordPress Zippy plugin \<= 1.7.0 - PHP Object Injection vulnerability (CVSS 7.2, Gesundheit Bewegt Zippy)
- [CVE-2026-116864](https://cve.now/CVE-2026-116864.md): WordPress WPCargo Track & Trace plugin \<= 8.0.5 - PHP Object Injection vulnerability (CVSS 7.2, Arni Cinco WPCargo Track & Trace)
- [CVE-2026-108494](https://cve.now/CVE-2026-108494.md): WordPress Chained Quiz plugin \<= 1.4.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Bob Chained Quiz)
- [CVE-2026-62131](https://cve.now/CVE-2026-62131.md): WordPress Zoho Flow plugin \<= 2.14.5 - PHP Object Injection vulnerability (CVSS 9.8, Zoho Flow)
- [CVE-2026-62018](https://cve.now/CVE-2026-62018.md): WordPress Gunslinger theme \<= 1.11 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX Gunslinger)
- [CVE-2026-62017](https://cve.now/CVE-2026-62017.md): WordPress Good Homes theme \<= 1.3.13 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX Good Homes)
- [CVE-2026-62016](https://cve.now/CVE-2026-62016.md): WordPress Gamic theme \<= 1.19 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX Gamic)
- [CVE-2026-62015](https://cve.now/CVE-2026-62015.md): WordPress Gamezone theme \<= 1.1.11 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX Gamezone)
- [CVE-2026-62014](https://cve.now/CVE-2026-62014.md): WordPress EmojiNation theme \<= 1.0.12 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX EmojiNation)
- [CVE-2026-62013](https://cve.now/CVE-2026-62013.md): WordPress Edge Decor theme \<= 2.9 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX Edge Decor)
- [CVE-2026-62012](https://cve.now/CVE-2026-62012.md): WordPress Coinpress theme \<= 1.0.15 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX Coinpress)
- [CVE-2026-62011](https://cve.now/CVE-2026-62011.md): WordPress Bonbon theme \<= 1.11 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX Bonbon)
- [CVE-2026-62010](https://cve.now/CVE-2026-62010.md): WordPress Avventure theme \<= 1.1.12 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX Avventure)
- [CVE-2026-62009](https://cve.now/CVE-2026-62009.md): WordPress Filmax theme \<= 1.1.11 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX Filmax)
- [CVE-2026-62008](https://cve.now/CVE-2026-62008.md): WordPress Orpheus theme \<= 1.8 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX Orpheus)
- [CVE-2026-62006](https://cve.now/CVE-2026-62006.md): WordPress Nuts theme \<= 1.12 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX Nuts)
- [CVE-2026-62005](https://cve.now/CVE-2026-62005.md): WordPress Muzicon theme \<= 1.15 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX Muzicon)
- [CVE-2026-62004](https://cve.now/CVE-2026-62004.md): WordPress Motorix theme \<= 1.11 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX Motorix)
- [CVE-2026-62003](https://cve.now/CVE-2026-62003.md): WordPress Mission theme \<= 1.22 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX Mission)
- [CVE-2026-62002](https://cve.now/CVE-2026-62002.md): WordPress Meals & Wheels theme \<= 1.1.13 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX Meals & Wheels)
- [CVE-2026-62001](https://cve.now/CVE-2026-62001.md): WordPress Marcell theme \<= 1.2.14 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX Marcell)
- [CVE-2026-61998](https://cve.now/CVE-2026-61998.md): WordPress Le Truffe theme \<= 1.1.7 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX Le Truffe)
- [CVE-2026-61997](https://cve.now/CVE-2026-61997.md): WordPress Legal Stone theme \<= 1.2.11 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX Legal Stone)
- [CVE-2026-61996](https://cve.now/CVE-2026-61996.md): WordPress MLS On The Fly plugin \<= 1.8.1.5 - SQL Injection vulnerability (CVSS 8.5, favethemes MLS On The Fly)
- [CVE-2026-61995](https://cve.now/CVE-2026-61995.md): WordPress YouTube Showcase plugin \<= 4.1.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, emarket-design YouTube Showcase)
- [CVE-2026-61993](https://cve.now/CVE-2026-61993.md): WordPress Blockonomics plugin 3.11.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Blockonomics)
- [CVE-2026-61992](https://cve.now/CVE-2026-61992.md): WordPress GEO my WordPress plugin \<= 4.5.5.4 - PHP Object Injection vulnerability (CVSS 9.8, Von Eyal Fitoussi GEO my WordPress)
- [CVE-2026-61991](https://cve.now/CVE-2026-61991.md): WordPress AjaxLoadMore Cache plugin \<= 3.1.1 - Remote Code Execution (RCE) vulnerability (CVSS 10.0, Ajax Load More AjaxLoadMore Cache)
- [CVE-2026-61989](https://cve.now/CVE-2026-61989.md): WordPress Easy Property Listings plugin \<= 3.5.25 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Merv Barrett Easy Property Listings)
- [CVE-2026-61988](https://cve.now/CVE-2026-61988.md): WordPress Auction Nudge – Your eBay on Your Site plugin \<= 8.4.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, morehawes Auction Nudge – Your eBay on Your Site)
- [CVE-2026-54866](https://cve.now/CVE-2026-54866.md): WordPress Razorpay Payment Button Elementor Plugin plugin \<= 1.2.8 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Razorpay Payment Button Elementor Plugin)
- [CVE-2026-54865](https://cve.now/CVE-2026-54865.md): WordPress Podamibe Custom User Gravatar plugin \<= 1.0.8 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Podamibe Nepal Podamibe Custom User Gravatar)
- [CVE-2026-54864](https://cve.now/CVE-2026-54864.md): WordPress Post Video Players plugin \<= 1.165 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, nicashmu Post Video Players)
- [CVE-2026-54860](https://cve.now/CVE-2026-54860.md): WordPress Ozisti theme \<= 1.1.10 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX Ozisti)
- [CVE-2026-54859](https://cve.now/CVE-2026-54859.md): WordPress Preservation theme \<= 1.15 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX Preservation)
- [CVE-2026-54858](https://cve.now/CVE-2026-54858.md): WordPress Printy theme \<= 1.13.0 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX Printy)
- [CVE-2026-54857](https://cve.now/CVE-2026-54857.md): WordPress Quirky theme \<= 1.23 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX Quirky)
- [CVE-2026-54856](https://cve.now/CVE-2026-54856.md): WordPress RexCoin theme \<= 1.2.6 - PHP Object Injection vulnerability (CVSS 9.8, ThemeREX RexCoin)
- [CVE-2026-42701](https://cve.now/CVE-2026-42701.md): WordPress YayMail plugin \<= 4.4.6 - PHP Object Injection vulnerability (CVSS 7.2, YayCommerce YayMail)
- [CVE-2026-42692](https://cve.now/CVE-2026-42692.md): WordPress WP Crowdfunding plugin \<= 2.2.2 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Themeum WP Crowdfunding)
- [CVE-2026-42690](https://cve.now/CVE-2026-42690.md): WordPress LearnPress plugin \<= 4.4.10 - Broken Access Control vulnerability (CVSS 5.4, ThimPress LearnPress)
- [CVE-2026-27394](https://cve.now/CVE-2026-27394.md): WordPress Eventer plugin \<= 0.1.1 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Jyothis Joy Eventer)
- [CVE-2026-118085](https://cve.now/CVE-2026-118085.md): WordPress GlobalPayments WooCommerce plugin \<= 1.23.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Global Payments GlobalPayments WooCommerce)
- [CVE-2026-66912](https://cve.now/CVE-2026-66912.md): Stored Cross-Site Scripting in Zimbra (CVSS 5.3, Synacor Zimbra Collaboration)
- [CVE-2026-66911](https://cve.now/CVE-2026-66911.md): Stored Cross-Site Scripting in Zimbra (CVSS 5.3, Synacor Zimbra Collaboration)
- [CVE-2026-88078](https://cve.now/CVE-2026-88078.md): Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVSS 4.3, Microsoft Edge)
- [CVE-2026-88077](https://cve.now/CVE-2026-88077.md): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Edge)
- [CVE-2026-96196](https://cve.now/CVE-2026-96196.md): Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability (CVSS 8.8, Microsoft Edge)
- [CVE-2026-96187](https://cve.now/CVE-2026-96187.md): Microsoft Edge (Chromium-based) Information Disclosure Vulnerability (CVSS 7.4, Microsoft Edge)
- [CVE-2026-85899](https://cve.now/CVE-2026-85899.md): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CVSS 8.1, Microsoft Edge)
- [CVE-2026-85330](https://cve.now/CVE-2026-85330.md): Microsoft Edge for Android Security Feature Bypass Vulnerability (CVSS 4.3, Microsoft Edge)
- [CVE-2026-88090](https://cve.now/CVE-2026-88090.md): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CVSS 5.4, Microsoft Edge)
- [CVE-2026-114148](https://cve.now/CVE-2026-114148.md): ASP.NET Core Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft .NET 10.0 installed on Linux · Microsoft .NET… +12)
- [CVE-2026-20942](https://cve.now/CVE-2026-20942.md): Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVSS 4.3, Microsoft Edge)
- [CVE-2026-96203](https://cve.now/CVE-2026-96203.md): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Edge)
- [CVE-2026-96192](https://cve.now/CVE-2026-96192.md): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Edge)
- [CVE-2026-18894](https://cve.now/CVE-2026-18894.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 6.5, IBM Langflow OSS)
- [CVE-2026-77817](https://cve.now/CVE-2026-77817.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 6.5, IBM Langflow OSS)
- [CVE-2026-77819](https://cve.now/CVE-2026-77819.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 6.5, IBM Langflow OSS)
- [CVE-2026-90991](https://cve.now/CVE-2026-90991.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 6.5, IBM Langflow OSS)
- [CVE-2026-93680](https://cve.now/CVE-2026-93680.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 9.8, IBM Langflow OSS)
- [CVE-2026-102590](https://cve.now/CVE-2026-102590.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 5.0, IBM Langflow OSS)
- [CVE-2026-103092](https://cve.now/CVE-2026-103092.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 8.5, IBM Langflow OSS)
- [CVE-2026-101288](https://cve.now/CVE-2026-101288.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 8.8, IBM Langflow OSS)
- [CVE-2026-104308](https://cve.now/CVE-2026-104308.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 4.3, IBM Langflow OSS)
- [CVE-2026-104309](https://cve.now/CVE-2026-104309.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 6.5, IBM Langflow OSS)
- [CVE-2026-104310](https://cve.now/CVE-2026-104310.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 4.3, IBM Langflow OSS)
- [CVE-2026-104312](https://cve.now/CVE-2026-104312.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 3.5, IBM Langflow OSS)
- [CVE-2026-104314](https://cve.now/CVE-2026-104314.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 6.5, IBM Langflow OSS)
- [CVE-2026-104315](https://cve.now/CVE-2026-104315.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 4.3, IBM Langflow OSS)
- [CVE-2026-104316](https://cve.now/CVE-2026-104316.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 6.5, IBM Langflow OSS)
- [CVE-2026-104317](https://cve.now/CVE-2026-104317.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 8.1, IBM Langflow OSS)
- [CVE-2026-104324](https://cve.now/CVE-2026-104324.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 8.8, IBM Langflow OSS)
- [CVE-2026-113576](https://cve.now/CVE-2026-113576.md): Adobe Digital Editions | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) (CVSS 6.3, Adobe Digital Editions)
- [CVE-2026-104328](https://cve.now/CVE-2026-104328.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 8.8, IBM Langflow OSS)
- [CVE-2026-104331](https://cve.now/CVE-2026-104331.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 5.4, IBM Langflow OSS)
- [CVE-2026-104339](https://cve.now/CVE-2026-104339.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 9.8, IBM Langflow OSS)
- [CVE-2026-107326](https://cve.now/CVE-2026-107326.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 8.8, IBM Langflow OSS)
- [CVE-2026-107327](https://cve.now/CVE-2026-107327.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 9.9, IBM Langflow OSS)
- [CVE-2026-107328](https://cve.now/CVE-2026-107328.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 9.9, IBM Langflow OSS)
- [CVE-2026-107329](https://cve.now/CVE-2026-107329.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 9.9, IBM Langflow OSS)
- [CVE-2026-110186](https://cve.now/CVE-2026-110186.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 9.8, IBM Langflow OSS)
- [CVE-2026-110190](https://cve.now/CVE-2026-110190.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 6.5, IBM Langflow OSS)
- [CVE-2026-110192](https://cve.now/CVE-2026-110192.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 6.5, IBM Langflow OSS)
- [CVE-2026-110193](https://cve.now/CVE-2026-110193.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 8.8, IBM Langflow OSS)
- [CVE-2026-110196](https://cve.now/CVE-2026-110196.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 8.8, IBM Langflow OSS)
- [CVE-2026-110200](https://cve.now/CVE-2026-110200.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 6.5, IBM Langflow OSS)
- [CVE-2026-110244](https://cve.now/CVE-2026-110244.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 8.8, IBM Langflow OSS)
- [CVE-2026-110245](https://cve.now/CVE-2026-110245.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 7.5, IBM Langflow OSS)
- [CVE-2026-110309](https://cve.now/CVE-2026-110309.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 8.8, IBM Langflow OSS)
- [CVE-2026-96199](https://cve.now/CVE-2026-96199.md): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Edge)
- [CVE-2026-96198](https://cve.now/CVE-2026-96198.md): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Edge)
- [CVE-2026-85897](https://cve.now/CVE-2026-85897.md): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Edge)
- [CVE-2026-85890](https://cve.now/CVE-2026-85890.md): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Edge)
- [CVE-2026-106036](https://cve.now/CVE-2026-106036.md): Improper certificate validation in Szafir (CVSS 6.9, Krajowa Izba Rozliczeniowa Szafir)
- [CVE-2026-93571](https://cve.now/CVE-2026-93571.md): Path Traversal in Szafir (CVSS 2.3, Krajowa Izba Rozliczeniowa Szafir)
- [CVE-2026-93570](https://cve.now/CVE-2026-93570.md): XML External Entity injection in Szafir and Szafir Weryfikująca (CVSS 8.2, Krajowa Izba Rozliczeniowa Szafir)
- [CVE-2026-42694](https://cve.now/CVE-2026-42694.md): WordPress Kirki plugin \<= 6.4.0 - Content Injection vulnerability (CVSS 4.3, Themeum Kirki)
- [CVE-2026-48200](https://cve.now/CVE-2026-48200.md): WordPress Document Library Lite plugin \<= 1.3.0 - Sensitive Data Exposure vulnerability (CVSS 5.3, Barn2 Plugins Document Library Lite)
- [CVE-2026-116848](https://cve.now/CVE-2026-116848.md): WordPress The Plus Addons for Elementor Page Builder Lite plugin \<= 6.5.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, POSIMYTH Innovations The Plus Addons for Elementor Page Bui…)
- [CVE-2026-109891](https://cve.now/CVE-2026-109891.md): WordPress Happy Addons for Elementor plugin \<= 3.50.1 - Broken Access Control vulnerability (CVSS 6.4, weDevs Happy Addons for Elementor)
- [CVE-2026-25448](https://cve.now/CVE-2026-25448.md): WordPress WP ERP plugin \<= 1.17.10 - Broken Access Control vulnerability (CVSS 4.3, weDevs WP ERP)
- [CVE-2026-42691](https://cve.now/CVE-2026-42691.md): WordPress EventPrime plugin \<= 4.3.6.0 - Broken Access Control vulnerability (CVSS 5.4, EventPrime)
- [CVE-2026-54852](https://cve.now/CVE-2026-54852.md): WordPress Page Restriction WordPress (WP) plugin \<= 1.6.1 - Broken Access Control vulnerability (CVSS 5.3, miniOrange Page Restriction WordPress)
- [CVE-2026-97073](https://cve.now/CVE-2026-97073.md): WordPress myCred plugin \<= 4.0.2 - Broken Access Control vulnerability (CVSS 5.3, myCred)
- [CVE-2026-118097](https://cve.now/CVE-2026-118097.md): WordPress Flash & HTML5 Video plugin \<= 2.14.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, bPlugins Flash & HTML5 Video)
- [CVE-2026-27062](https://cve.now/CVE-2026-27062.md): WordPress WPFunnels plugin \<= 3.13.5 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, WPFunnels Team WPFunnels)
- [CVE-2026-54853](https://cve.now/CVE-2026-54853.md): WordPress Profile Builder plugin \<= 4.0.5 - Broken Access Control vulnerability (CVSS 5.3, Cozmoslabs Profile Builder)
- [CVE-2026-114706](https://cve.now/CVE-2026-114706.md): WordPress Strong Testimonials plugin \<= 3.3.15 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, WP Chill Strong Testimonials)
- [CVE-2026-27063](https://cve.now/CVE-2026-27063.md): WordPress Kit (formerly ConvertKit) plugin \<= 3.4.7 - Broken Access Control vulnerability (CVSS 5.3, Kit)
- [CVE-2026-115601](https://cve.now/CVE-2026-115601.md): WordPress Custom Price for WooCommerce plugin \<= 1.1.29 - Broken Access Control vulnerability (CVSS 5.3, WP Desk Custom Price for WooCommerce)
- [CVE-2026-115605](https://cve.now/CVE-2026-115605.md): WordPress SureDash plugin \<= 1.12.3 - Broken Access Control vulnerability (CVSS 4.3, Brainstorm Force SureDash)
- [CVE-2026-118095](https://cve.now/CVE-2026-118095.md): WordPress Media LIbrary Assistant plugin \<= 3.42 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, David Lingren Media LIbrary Assistant)
- [CVE-2026-54871](https://cve.now/CVE-2026-54871.md): WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin \<= 3.4.2 - Broken Access Control vulnerability (CVSS 5.3, Mamunur Rashid ShopBuilder – Elementor WooCommerce Builder…)
- [CVE-2026-25450](https://cve.now/CVE-2026-25450.md): WordPress User Registration plugin \<= 5.3.0 - Broken Access Control vulnerability (CVSS 5.3, ThemeGrill User Registration)
- [CVE-2026-116850](https://cve.now/CVE-2026-116850.md): WordPress Happy Addons for Elementor plugin \<= 3.50.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, weDevs Happy Addons for Elementor)
- [CVE-2026-114181](https://cve.now/CVE-2026-114181.md): WordPress Taxi Booking Manager for WooCommerce plugin \<= 2.1.6 - Broken Access Control vulnerability (CVSS 5.3, Magepeople Taxi Booking Manager for WooCommerce)
- [CVE-2026-118088](https://cve.now/CVE-2026-118088.md): WordPress WPFunnels plugin \<= 3.13.5 - Broken Access Control vulnerability (CVSS 5.3, WPFunnels Team WPFunnels)
- [CVE-2026-116849](https://cve.now/CVE-2026-116849.md): WordPress StreamCast plugin \<= 2.4.6 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, bPlugins StreamCast)
- [CVE-2026-110881](https://cve.now/CVE-2026-110881.md): WordPress SureDash plugin \<= 1.12.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Brainstorm Force SureDash)
- [CVE-2026-116856](https://cve.now/CVE-2026-116856.md): WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin \<= 2.3.24 - Broken Access Control vulnerability (CVSS 5.3, WP Desk Flexible Quantity – Measurement Price Calculator fo…)
- [CVE-2026-39737](https://cve.now/CVE-2026-39737.md): WordPress JetElements For Elementor plugin \<= 2.9.2.6 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Crocoblock JetElements For Elementor)
- [CVE-2026-118091](https://cve.now/CVE-2026-118091.md): WordPress WPFunnels plugin \<= 3.13.5 - Broken Access Control vulnerability (CVSS 5.3, WPFunnels Team WPFunnels)
- [CVE-2026-116387](https://cve.now/CVE-2026-116387.md): WordPress SureForms plugin \<= 2.12.9 - Broken Access Control vulnerability (CVSS 5.3, Brainstorm Force SureForms)
- [CVE-2026-39742](https://cve.now/CVE-2026-39742.md): WordPress Gutenberg Blocks by Kadence Blocks plugin \<= 3.8.0.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Liquid Web / StellarWP Gutenberg Blocks by Kadence Blocks)
- [CVE-2026-115610](https://cve.now/CVE-2026-115610.md): WordPress PublishPress Authors plugin \<= 4.17.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, PublishPress Authors)
- [CVE-2026-118092](https://cve.now/CVE-2026-118092.md): WordPress MasterStudy LMS plugin \<= 3.7.55 - Broken Access Control vulnerability (CVSS 4.3, StylemixThemes MasterStudy LMS)
- [CVE-2026-116406](https://cve.now/CVE-2026-116406.md): WordPress Webba Booking plugin \<= 6.5.4 - Broken Access Control vulnerability (CVSS 4.3, Webba Plugins Webba Booking)
- [CVE-2026-52708](https://cve.now/CVE-2026-52708.md): WordPress WP User Frontend plugin \<= 4.3.13 - Broken Access Control vulnerability (CVSS 4.3, weDevs WP User Frontend)
- [CVE-2026-116846](https://cve.now/CVE-2026-116846.md): WordPress WP User Manager plugin \<= 2.9.26 - Broken Access Control vulnerability (CVSS 5.3, WP User Manager)
- [CVE-2026-48884](https://cve.now/CVE-2026-48884.md): WordPress WP User Frontend plugin \<= 4.3.13 - Broken Access Control vulnerability (CVSS 5.3, weDevs WP User Frontend)
- [CVE-2026-80069](https://cve.now/CVE-2026-80069.md): MasterStudy LMS WordPress Plugin \< 3.7.50 Missing Authorization via stm\_lms\_send\_test\_email\_ajax (CVSS 5.3, Stylemix MasterStudy LMS WordPress Plugin)
- [CVE-2026-80067](https://cve.now/CVE-2026-80067.md): MasterStudy LMS WordPress Plugin \< 3.7.50 Path Traversal via stm\_lms\_step Parameter (CVSS 5.3, Stylemix MasterStudy LMS WordPress Plugin)
- [CVE-2026-115713](https://cve.now/CVE-2026-115713.md): Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and… (CVSS 7.5, Elastic Cloud Enterprise)
- [CVE-2026-115712](https://cve.now/CVE-2026-115712.md): Incorrect Authorization in Elastic Cloud Enterprise (ECE) Leading to Unauthorized Modification of Platform Settings (CVSS 4.3, Elastic Cloud Enterprise)
- [CVE-2026-115711](https://cve.now/CVE-2026-115711.md): Insertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Credential… (CVSS 6.4, Elastic Cloud Enterprise)
- [CVE-2026-115709](https://cve.now/CVE-2026-115709.md): Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and… (CVSS 8.2, Elastic Cloud Enterprise)
- [CVE-2026-115708](https://cve.now/CVE-2026-115708.md): Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Authentication Bypass (CVSS 7.2, Elastic Cloud Enterprise)
- [CVE-2026-115707](https://cve.now/CVE-2026-115707.md): Insertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Privilege… (CVSS 6.4, Elastic Cloud Enterprise)
- [CVE-2026-115706](https://cve.now/CVE-2026-115706.md): Authorization Bypass Through User-Controlled Key in Elastic Cloud Enterprise (ECE) Leading to Privilege Escalation (CVSS 6.8, Elastic Cloud Enterprise)
- [CVE-2026-39736](https://cve.now/CVE-2026-39736.md): WordPress JetEngine plugin \<= 3.9.0.1 - SQL Injection vulnerability (CVSS 8.5, Crocoblock JetEngine)
- [CVE-2026-116402](https://cve.now/CVE-2026-116402.md): WordPress SureForms plugin \<= 2.12.9 - Content Injection vulnerability (CVSS 5.3, Brainstorm Force SureForms)
- [CVE-2026-118425](https://cve.now/CVE-2026-118425.md): Keycloak-services: keycloak-services: redirect uri domain allowlist bypass via dns resolution to loopback (CVSS 6.8, Red Hat Build of Keycloak · Red Hat Single Sign-On)
- [CVE-2026-48202](https://cve.now/CVE-2026-48202.md): WordPress Brave plugin \<= 0.8.8 - Content Injection vulnerability (CVSS 5.3, Brave)
- [CVE-2026-39782](https://cve.now/CVE-2026-39782.md): WordPress Kali Forms plugin \<= 2.4.27 - Broken Access Control vulnerability (CVSS 5.3, Kaliforms Kali Forms)
- [CVE-2026-25467](https://cve.now/CVE-2026-25467.md): WordPress User Registration plugin \<= 5.3.0 - Content Injection vulnerability (CVSS 5.3, ThemeGrill User Registration)
- [CVE-2026-116399](https://cve.now/CVE-2026-116399.md): WordPress InstaWP Connect plugin \<= 0.1.4.2 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8, InstaWP Connect)
- [CVE-2026-116857](https://cve.now/CVE-2026-116857.md): WordPress JetSmartFilters plugin \<= 3.8.6.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Crocoblock JetSmartFilters)
- [CVE-2026-113697](https://cve.now/CVE-2026-113697.md): Reflected Cross-Site Scripting in BMC Helix Operations Management (CVSS 4.8, BMC Helix Operations Management)
- [CVE-2026-113696](https://cve.now/CVE-2026-113696.md): Improper Authorization in BMC ITSM SmartIT Change Approvals (CVSS 5.3, BMC IT Service Management Suite)
- [CVE-2026-113695](https://cve.now/CVE-2026-113695.md): Reflected Cross-Site Scripting in BMC ITSM SmartIT (CVSS 4.8, BMC IT Service Management Suite)
- [CVE-2026-93009](https://cve.now/CVE-2026-93009.md): Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder (CVSS 4.3, Red Hat Ceph Storage · Red Hat Enterprise Linux +2)
- [CVE-2026-93010](https://cve.now/CVE-2026-93010.md): Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check (CVSS 4.3, Red Hat Ceph Storage · Red Hat Enterprise Linux +2)
- [CVE-2026-113694](https://cve.now/CVE-2026-113694.md): Improper Authorization in BMC ITSM SmartIT Attachments (CVSS 5.3, BMC IT Service Management Suite)
- [CVE-2026-113693](https://cve.now/CVE-2026-113693.md): System Account Credential Disclosure in BMC ITSM (CVSS 5.3, BMC IT Service Management Suite)
- [CVE-2026-54862](https://cve.now/CVE-2026-54862.md): WordPress Import and export users and customers plugin \<= 2.5.9 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Codection Import and export users and customers)
- [CVE-2026-113692](https://cve.now/CVE-2026-113692.md): Path Traversal in BMC ITSM (CVSS 6.9, BMC IT Service Management Suite)
- [CVE-2026-119054](https://cve.now/CVE-2026-119054.md): Multiple Pages Generator by Themeisle before 4.2.5 Stored XSS via Shortcode base-url (CVSS 5.1, Multiple Pages Generator by Themeisle)
- [CVE-2026-119053](https://cve.now/CVE-2026-119053.md): lwIP 2.0.0 through 2.2.1 SNMP Agent Out-of-Bounds Read via snmp\_pbuf\_stream\_writeto() (CVSS 6.9, lwIP)
- [CVE-2026-119052](https://cve.now/CVE-2026-119052.md): llama.cpp b2877 before b11935 ggml-rpc Server DoS via Oversized recv\_msg Length (CVSS 8.7, ggml-org llama.cpp)
- [CVE-2026-119051](https://cve.now/CVE-2026-119051.md): flat through 6.0.1 Denial of Service via unflatten() Numeric Array Index Keys (CVSS 8.2, hughsk flat)
- [CVE-2026-119050](https://cve.now/CVE-2026-119050.md): Agno through 3.1.11 Code Execution via PandasTools Unsafe Reflection (CVSS 9.2, agno-agi agno)
- [CVE-2026-119049](https://cve.now/CVE-2026-119049.md): FreeMail before 5.3.2 Authorization Bypass via /api/create Mailbox Claiming (CVSS 7.2, idinging FreeMail)
- [CVE-2026-119048](https://cve.now/CVE-2026-119048.md): JeeSite 5.11.0 through 5.19.1 IDOR in AI CMS Chat Module (CVSS 2.3, thinkgem JeeSite)
- [CVE-2019-25781](https://cve.now/CVE-2019-25781.md): Python-Markdown 3.0 through 3.11.2 Denial of Service via Link Bracket Parsing (CVSS 8.7, Python-Markdown Markdown)
- [CVE-2026-42707](https://cve.now/CVE-2026-42707.md): WordPress HivePress Claim Listings plugin \<= 1.1.4 - Broken Access Control vulnerability (CVSS 4.3, HivePress Claim Listings)
- [CVE-2026-48195](https://cve.now/CVE-2026-48195.md): WordPress PDF Poster plugin \<= 2.6.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, bPlugins PDF Poster)
- [CVE-2026-113691](https://cve.now/CVE-2026-113691.md): Stored Cross-Site Scripting in BMC ITSM Knowledge Articles (CVSS 5.1, BMC IT Service Management Suite)
- [CVE-2026-39741](https://cve.now/CVE-2026-39741.md): WordPress Simple Cloudflare Turnstile plugin \<= 1.44.0 - Broken Access Control vulnerability (CVSS 5.3, RelyWP Simple Cloudflare Turnstile)
- [CVE-2026-48196](https://cve.now/CVE-2026-48196.md): WordPress Kali Forms plugin \<= 2.4.27 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Kaliforms Kali Forms)
- [CVE-2026-22386](https://cve.now/CVE-2026-22386.md): WordPress WP Job Portal plugin \<= 2.7.1 - Broken Access Control vulnerability (CVSS 4.3, Ahmad WP Job Portal)
- [CVE-2026-52709](https://cve.now/CVE-2026-52709.md): WordPress Video Gallery Block plugin \<= 1.6.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, bPlugins Video Gallery Block)
- [CVE-2026-113690](https://cve.now/CVE-2026-113690.md): Stored Cross-Site Scripting in BMC ITSM Attachments (CVSS 4.8, BMC IT Service Management Suite)
- [CVE-2026-113689](https://cve.now/CVE-2026-113689.md): Stored Cross-Site Scripting in BMC ITSM Work Notes (CVSS 5.1, BMC IT Service Management Suite)
- [CVE-2026-24533](https://cve.now/CVE-2026-24533.md): WordPress Cozy Blocks plugin \<= 2.2.27 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, CozyThemes Cozy Blocks)
- [CVE-2026-42703](https://cve.now/CVE-2026-42703.md): WordPress Kali Forms plugin \<= 2.4.27 - Broken Access Control vulnerability (CVSS 6.5, Kaliforms Kali Forms)
- [CVE-2026-113688](https://cve.now/CVE-2026-113688.md): Server-Side Request Forgery in BMC ITSM SmartIT (CVSS 5.3, BMC IT Service Management Suite)
- [CVE-2026-118087](https://cve.now/CVE-2026-118087.md): WordPress Site Reviews plugin \<= 8.3.5 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Gemini Labs Site Reviews)
- [CVE-2026-118094](https://cve.now/CVE-2026-118094.md): WordPress Ad Inserter plugin \<= 2.8.18 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Igor Funa Ad Inserter)
- [CVE-2026-39735](https://cve.now/CVE-2026-39735.md): WordPress JetEngine plugin \<= 3.9.0.1 - Broken Access Control vulnerability (CVSS 6.5, Crocoblock JetEngine)
- [CVE-2026-56056](https://cve.now/CVE-2026-56056.md): WordPress The Post Grid plugin \<= 7.9.7 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Mamunur Rashid The Post Grid)
- [CVE-2026-118093](https://cve.now/CVE-2026-118093.md): WordPress Product Feed Manager plugin \<= 7.14.1 - Broken Access Control vulnerability (CVSS 5.3, WPFunnels Team Product Feed Manager)
- [CVE-2026-93006](https://cve.now/CVE-2026-93006.md): Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content (CVSS 6.8, Red Hat Ceph Storage · Red Hat Enterprise Linux +2)
- [CVE-2026-93007](https://cve.now/CVE-2026-93007.md): Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation (CVSS 5.3, Red Hat Ceph Storage · Red Hat Enterprise Linux +2)
- [CVE-2026-93011](https://cve.now/CVE-2026-93011.md): Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to\_wire/from\_wire transforms (CVSS 5.3, Red Hat Ceph Storage · Red Hat Enterprise Linux +2)
- [CVE-2026-49142](https://cve.now/CVE-2026-49142.md): OpenEMR Before 8.5.0 SQL Injection via form\_icd\_codes\[\] (CVSS 8.7, openemr)
- [CVE-2026-93008](https://cve.now/CVE-2026-93008.md): Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations (CVSS 6.8, Red Hat Ceph Storage · Red Hat Enterprise Linux +2)
- [RUSTSEC-2026-0419](https://cve.now/RUSTSEC-2026-0419.md): Unbounded memory use on large request bodies (no CVSS, juniper\_warp)
- [RUSTSEC-2026-0420](https://cve.now/RUSTSEC-2026-0420.md): wasip3 UDP \`send\` can deliver a datagram to an address only allowed for receiving (no CVSS, wasmtime-wasi)
- [RUSTSEC-2026-0421](https://cve.now/RUSTSEC-2026-0421.md): wasi-http p2: outgoing content-length can be invalid or not match body (no CVSS, wasmtime-wasi-http)
- [RUSTSEC-2026-0422](https://cve.now/RUSTSEC-2026-0422.md): Typed functions with \`i31\` or \`nullref\` arguments may panic due to insufficient type-check (no CVSS, wasmtime)
- [RUSTSEC-2026-0423](https://cve.now/RUSTSEC-2026-0423.md): Cross-engine type confusion with host-created struct-types-with-supertypes (no CVSS, wasmtime)
- [RUSTSEC-2026-0424](https://cve.now/RUSTSEC-2026-0424.md): Unchecked memory usage in transferring borrowed resources between components (no CVSS, wasmtime)
- [RUSTSEC-2026-0427](https://cve.now/RUSTSEC-2026-0427.md): \`sn-releases\`: \`extract\_release\_archive\` writes archive entries without a path-traversal check (zip-slip) (no CVSS, sn-releases)
- [CVE-2026-119028](https://cve.now/CVE-2026-119028.md): oapi-codegen 2.0.0 before 2.8.1 Code Injection via Non-String Enum Values (CVSS 8.7, oapi-codegen)
- [CVE-2026-119027](https://cve.now/CVE-2026-119027.md): oapi-codegen 2.5.0 before 2.8.1 Code Injection via servers\[\].x-go-name Extension (CVSS 7.7, oapi-codegen)
- [CVE-2026-109822](https://cve.now/CVE-2026-109822.md): Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an issue with insecure storage of sensitive information. (CVSS 6.5, Yamaha NWR100)
- [CVE-2026-97854](https://cve.now/CVE-2026-97854.md): Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability. (CVSS 9.8, Yamaha NWR100)
- [CVE-2026-103665](https://cve.now/CVE-2026-103665.md): The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Libraries (DLLs). (CVSS 7.8, Yamaha LAN Monitor for Windows)
- [CVE-2026-97860](https://cve.now/CVE-2026-97860.md): YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. (CVSS 6.7, Yamaha YMS-VPN8 · Yamaha YMS-VPN8-CP)
- [CVE-2026-27401](https://cve.now/CVE-2026-27401.md): WordPress YITH PayPal Express Checkout for WooCommerce plugin \<= 1.62.0 - Broken Access Control vulnerability (CVSS 5.3, YITH PayPal Express Checkout for WooCommerce)
- [CVE-2026-115821](https://cve.now/CVE-2026-115821.md): NewsmanApp \<= 3.7.29 - Unauthenticated Stored Cross-Site Scripting via 'billing\_first\_name' and 'billing\_last\_name' Parameters (CVSS 7.2, NewsmanApp)
- [CVE-2026-110184](https://cve.now/CVE-2026-110184.md): Newsmatic \<= 1.5.0 - Unauthenticated SQL Injection via 'slug' Parameter (CVSS 7.5, blazethemes Newsmatic)
- [CVE-2026-92086](https://cve.now/CVE-2026-92086.md): MW WP Form \<= 5.1.7 - Unauthenticated Sensitive Information Exposure in 'post\_id' Parameter (CVSS 5.3, websoudan MW WP Form)
- [CVE-2026-109216](https://cve.now/CVE-2026-109216.md): Meta Box \<= 5.15.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Background Field Array Keys (CVSS 4.9, metabox Meta Box – A Framework for Dynamic Websites)
- [CVE-2026-96767](https://cve.now/CVE-2026-96767.md): NEX-Forms \<= 9.3.2 - Unauthenticated Stored Cross-Site Scripting via Content-Type Header (CVSS 7.2, webaways NEX-Forms – Ultimate Forms Plugin for WordPress)
- [CVE-2026-119025](https://cve.now/CVE-2026-119025.md): open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows (CVSS 7.7, sindresorhus open · modelcontextprotocol inspector +1)
- [CVE-2026-5702](https://cve.now/CVE-2026-5702.md): Cross-Site Request Forgery (CSRF) vulnerability in SABBATIC application (CVSS 4.8, SABBATIC app)
- [CVE-2026-5700](https://cve.now/CVE-2026-5700.md): Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application (CVSS 4.8, SABBATIC app)
- [CVE-2026-5699](https://cve.now/CVE-2026-5699.md): Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application (CVSS 4.8, SABBATIC app)
- [CVE-2026-5698](https://cve.now/CVE-2026-5698.md): Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application (CVSS 4.8, SABBATIC app)
- [CVE-2026-5697](https://cve.now/CVE-2026-5697.md): Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application (CVSS 4.8, SABBATIC app)
- [CVE-2026-115611](https://cve.now/CVE-2026-115611.md): WordPress TableOn plugin \<= 1.0.7 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, PluginUs.Net TableOn)
- [CVE-2026-115964](https://cve.now/CVE-2026-115964.md): WordPress Motors plugin \<= 1.4.126 - SQL Injection vulnerability (CVSS 9.3, StylemixThemes Motors)
- [CVE-2026-115962](https://cve.now/CVE-2026-115962.md): WordPress myCred plugin \<= 4.0.1 - Bypass Vulnerability vulnerability (CVSS 4.3, myCred)
- [CVE-2026-115592](https://cve.now/CVE-2026-115592.md): WordPress OceanWP theme \<= 4.2.7 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, OceanWP)
- [CVE-2026-116409](https://cve.now/CVE-2026-116409.md): WordPress Upsell Order Bump Offer for WooCommerce plugin \<= 3.1.6 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, WP Swings Upsell Order Bump Offer for WooCommerce)
- [CVE-2026-112827](https://cve.now/CVE-2026-112827.md): WordPress HANDMADE – Dropshipping for Etsy and WooCommerce plugin \<= 1.0.10 - Broken Access Control vulnerability (CVSS 7.1, VillaTheme HANDMADE – Dropshipping for Etsy and WooCommerce)
- [CVE-2026-114193](https://cve.now/CVE-2026-114193.md): WordPress GEO my WordPress plugin \<= 4.5.5.5 - Broken Access Control vulnerability (CVSS 7.5, Eyal Fitoussi GEO my WordPress)
- [CVE-2026-115599](https://cve.now/CVE-2026-115599.md): WordPress LearnPress plugin \<= 4.4.11 - Broken Access Control vulnerability (CVSS 7.5, ThimPress LearnPress)
- [CVE-2026-115965](https://cve.now/CVE-2026-115965.md): WordPress BuddyPress plugin \<= 14.5.2 - SQL Injection vulnerability (CVSS 8.5, BuddyPress)
- [CVE-2026-115967](https://cve.now/CVE-2026-115967.md): WordPress Login with phone number plugin \<= 1.8.78 - Broken Authentication vulnerability (CVSS 8.8, Hamid Alinia Login with phone number)
- [CVE-2026-115963](https://cve.now/CVE-2026-115963.md): WordPress Broadcast Live Video plugin \<= 7.3.9 - Broken Access Control vulnerability (CVSS 7.1, VideoWhisper.com Broadcast Live Video)
- [CVE-2026-118989](https://cve.now/CVE-2026-118989.md): WebToffee Product Import Export for WooCommerce 2.5.1 before 2.6.8 SSRF via Redirects (CVSS 5.1, WebToffee Product Import Export for WooCommerce)
- [CVE-2026-33924](https://cve.now/CVE-2026-33924.md): Authenticated RCE in update functionality in Guardian/CMC before 26.4.0 (CVSS 7.5, Nozomi Networks Guardian · Nozomi Networks CMC)
- [CVE-2026-33923](https://cve.now/CVE-2026-33923.md): Update bundle signature bypass in Guardian/CMC before 26.4.0 (CVSS 7.5, Nozomi Networks Guardian · Nozomi Networks CMC)
- [CVE-2026-118984](https://cve.now/CVE-2026-118984.md): OmniRoute 3.8.0 before 3.8.52 Unverified Password Change via /api/settings/require-login (CVSS 7.0, cheaper-inference OmniRoute)
- [CVE-2026-71569](https://cve.now/CVE-2026-71569.md): Apache Camel: Camel-A2A Push Notification Webhook Guard Accepts IPv6 Unique Local Addresses Reached Through a Host Name (CVSS 4.8, Apache Software Foundation Apache Camel)
- [CVE-2026-115942](https://cve.now/CVE-2026-115942.md): Apache Qpid Proton C: Verifying non compliant TLS wildcard cert can cause stack buffer overflow read (low (no CVSS), Apache Software Foundation Apache Qpid Proton C)
- [CVE-2026-114230](https://cve.now/CVE-2026-114230.md): Apache Qpid Proton C: Potential authentication bypass: regular AMQP frames can be sent as SASL frames (no CVSS, Apache Software Foundation Apache Qpid Proton C)
- [CVE-2026-105042](https://cve.now/CVE-2026-105042.md): Apache Qpid Proton C: Unbounded recursion in parsing AMQP message bodies can lead to crash (no CVSS, Apache Software Foundation Apache Qpid Proton C)
- [CVE-2026-105031](https://cve.now/CVE-2026-105031.md): Apache Qpid Proton C: The OpenSSL TLS implementation adds a locally trusted certificate authority to the existing trusted system trust anchors. (no CVSS, Apache Software Foundation Apache Qpid Proton C)
- [CVE-2026-111417](https://cve.now/CVE-2026-111417.md): Cross-user Document Access on Foxit Official Website's HTML-to-PDF Service (CVSS 7.5, Foxit Software foxit.com)
- [CVE-2026-111418](https://cve.now/CVE-2026-111418.md): SSRF and JavaScript Execution in the Foxit Official Website's HTML-to-PDF Service (CVSS 7.5, Foxit Software foxit.com)
- [CVE-2026-111419](https://cve.now/CVE-2026-111419.md): Hardcoded API Token in Foxit Official Website (CVSS 8.6, Foxit Software foxit.com)
- [CVE-2026-117611](https://cve.now/CVE-2026-117611.md): Trust of compromised eMudhra root CA in bundled CA stores (CVSS 7.1, Checkmk)
- [CVE-2026-111318](https://cve.now/CVE-2026-111318.md): HT Mega Addons for Elementor \<= 3.2.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Tabs Widget href DOM Sink (CVSS 5.4, devitemsllc HT Mega Addons for Elementor – Elementor Widget…)
- [CVE-2026-107743](https://cve.now/CVE-2026-107743.md): Mapster WP Maps \<= 2.0.5 - Unauthenticated Stored Cross-Site Scripting via 'config.loading.background' Parameter (CVSS 7.2, Mapster WP Maps)
- [CVE-2026-91153](https://cve.now/CVE-2026-91153.md): Everest Forms \<= 3.6.2 - Unauthenticated Sensitive Information Exposure via Smart-Tag Injection in Smart-Tag Injection in Form Field Values ({post\_meta key=...}) (CVSS 5.3, wpeverest Everest Forms – Contact Form, Payment Form, Quiz,…)
- [CVE-2026-116763](https://cve.now/CVE-2026-116763.md): LiteSpeed Cache \<= 7.9.1 - Unauthenticated Stored Cross-Site Scripting via HTML Minifier Predictable Placeholder (md5(REQUEST\_TIME) + two-pass str\_replace) (CVSS 5.4, litespeedtech LiteSpeed Cache)
- [CVE-2026-104727](https://cve.now/CVE-2026-104727.md): Sequential Order Numbers for WooCommerce \<= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'condition' Post Meta Array Keys (CVSS 6.4, berocket Sequential Order Numbers for WooCommerce)
- [CVE-2026-109215](https://cve.now/CVE-2026-109215.md): LiteSpeed Cache \<= 7.9.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via VPI Image Attribute Re-Serialization (CVSS 6.4, litespeedtech LiteSpeed Cache)
- [CVE-2026-91152](https://cve.now/CVE-2026-91152.md): Everest Forms \<= 3.6.2 - Reflected Cross-Site Scripting via 'evf\_toast\_type' Parameter (CVSS 6.1, wpeverest Everest Forms – Contact Form, Payment Form, Quiz,…)
- [CVE-2026-107627](https://cve.now/CVE-2026-107627.md): Greenshift \<= 13.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Nested Latest Comments Block (CVSS 5.4, wpsoul Greenshift – animation and page builder blocks)
- [CVE-2026-107629](https://cve.now/CVE-2026-107629.md): Greenshift \<= 13.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Split Text innerText (CVSS 5.4, wpsoul Greenshift – animation and page builder blocks)
- [CVE-2026-110707](https://cve.now/CVE-2026-110707.md): RSS Aggregator by Feedzy \<= 5.2.12 - Unauthenticated Stored Cross-Site Scripting via YouTube media:description Feed Element (CVSS 4.7, themeisle RSS Aggregator by Feedzy – Feed to Post, Autoblog…)
- [CVE-2026-103875](https://cve.now/CVE-2026-103875.md): Media Library Assistant \<= 3.42 - Reflected Cross-Site Scripting via 'search-string' Parameter via {+request:...+} in Pagination Links (CVSS 4.7, dglingren Media Library Assistant)
- [CVE-2026-118192](https://cve.now/CVE-2026-118192.md): JoomSport \<= 5.7.11 - Authenticated (Contributor+) SQL Injection via 'team\_id' Shortcode Attribute (CVSS 6.5, beardev JoomSport – for Sports: Team & League, Football, Ho…)
- [CVE-2026-103485](https://cve.now/CVE-2026-103485.md): Extensions for Leaflet Map \<= 5.4 - Unauthenticated Stored DOM-Based Cross-Site Scripting via External GeoJSON Property (CVSS 5.4, hupe13 Extensions for Leaflet Map)
- [CVE-2026-88941](https://cve.now/CVE-2026-88941.md): Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center. (CVSS 6.2, Kaspersky Network Agent · Kaspersky Administration Server)
- [CVE-2026-85498](https://cve.now/CVE-2026-85498.md): Polkit: regression in cve-2026-4897 fix (polkit read\_cookie()) - stack buffer underflow (CVSS 3.5, Red Hat Hardened Images · Red Hat Enterprise Linux +1)
- [CVE-2026-7190](https://cve.now/CVE-2026-7190.md): Reflected Cross-Site Scripting in ICT Innovations’ PHP-CGI/PHP-FPM configuration (CVSS 5.1, ICT Innovations’ PHP-CGI/PHP-FPM configuration)
- [CVE-2026-114358](https://cve.now/CVE-2026-114358.md): SQL Injection Vulnerability in Radius Xenia M2M Platform (CVSS 9.3, Radius Synergies Radius Xenia M2M Platform)
- [CVE-2026-115303](https://cve.now/CVE-2026-115303.md): Contact Form by Supsystic \< 1.11.1 - Unauthenticated CRLF / Email Header Injection via Reply-To Field Mapping (CVSS 3.7, Contact Form by Supsystic)
- [CVE-2025-62841](https://cve.now/CVE-2025-62841.md): Hard-coded Cryptographic Key #2 (CVSS 8.7, QNAP Systems HBS 3 Hybrid Backup Sync · QNAP Systems Hybrid…)
- [CVE-2025-62839](https://cve.now/CVE-2025-62839.md): Hard-coded Cryptographic Key #1 (CVSS 8.7, QNAP Systems HBS 3 Hybrid Backup Sync · QNAP Systems Hybrid…)
- [CVE-2026-118030](https://cve.now/CVE-2026-118030.md): Keycloak-services: keycloak-services: hotp race condition allows single otp code reuse across concurrent logins (CVSS 4.2, Red Hat Build of Keycloak · Red Hat Single Sign-On)
- [CVE-2026-117859](https://cve.now/CVE-2026-117859.md): Keycloak-services: keycloak-services: par single-use bypass via flow restart (CVSS 5.4, Red Hat Build of Keycloak · Red Hat Single Sign-On)
- [CVE-2026-117688](https://cve.now/CVE-2026-117688.md): Keycloak-services: keycloak-services: vault secret disclosure via client registration installation configuration (CVSS 5.3, Red Hat Build of Keycloak · Red Hat Single Sign-On)
- [CVE-2026-117548](https://cve.now/CVE-2026-117548.md): 389-ds-base: 389-ds-base: null pointer dereference via modifydn using an attribute's schema alias name causes denial of service (CVSS 6.5, Red Hat Directory Server · Red Hat Enterprise Linux)
- [CVE-2026-117627](https://cve.now/CVE-2026-117627.md): Keycloak-services: keycloak-services: jwt authorization grant bypasses identity provider login restrictions (CVSS 5.4, Red Hat Build of Keycloak · Red Hat Single Sign-On)
- [CVE-2026-114488](https://cve.now/CVE-2026-114488.md): Wildfly: wildfly-iiop: wildfly-ejb3: wildfly: authentication bypass on iiop ejb invocations as csiv2 ittprincipalname accepted without transport binding (CVSS 7.4, Red Hat Fuse · Red Hat JBoss Enterprise Application Plat… +1)
- [CVE-2026-19610](https://cve.now/CVE-2026-19610.md): Wildfly-platform-mbean: wildfly-platform-mbean: rbac sensitive attribute read bypass for platform runtimemxbean (CVSS 6.5, Red Hat JBoss Enterprise Application Platform · Red Hat Sin…)
- [CVE-2026-15564](https://cve.now/CVE-2026-15564.md): Wildfly-ejb: wildfly-iiop-openjdk: eap iiop listeners may permit unauthed deserialization (CVSS 7.4, Red Hat JBoss Enterprise Application Platform)
- [CVE-2026-86794](https://cve.now/CVE-2026-86794.md): Community Events 1.4.9 - 1.5.9 - Unauthenticated Stored XSS via Event Submission Form (CVSS 8.8, Community Events)
- [CVE-2026-85007](https://cve.now/CVE-2026-85007.md): YT Player \< 2.1.4 - Contributor+ Missing Authorization via ytp\_ajax (CVSS 3.8, Video Player for YouTube)
- [CVE-2026-115259](https://cve.now/CVE-2026-115259.md): Photo Engine \< 6.6.0 - Author+ Arbitrary Content Modification via IDOR (CVSS 4.9, Photo Engine)
- [CVE-2026-115245](https://cve.now/CVE-2026-115245.md): Chat AI with Dispatcher \< 2.4 - Unauthenticated Arbitrary File Upload (CVSS 9.8, Chat AI with Dispatcher)
- [CVE-2026-114270](https://cve.now/CVE-2026-114270.md): GeoDirectory \< 2.8.197 - Unauthenticated Password-Protected Listing Content Disclosure (CVSS 5.3, GeoDirectory)
- [CVE-2026-113617](https://cve.now/CVE-2026-113617.md): Automated Import Products to Cart \< 1.0.4 - Subscriber+ Arbitrary File Read and Deletion via Path Traversal (CVSS 9.9, Automated Import Products to Cart)
- [CVE-2026-113616](https://cve.now/CVE-2026-113616.md): LogixFast Auth \< 1.0.4 - Unauthenticated Account Takeover via Password Reset (CVSS 9.8, LogixFast Auth)
- [CVE-2026-111739](https://cve.now/CVE-2026-111739.md): Two Factor Authentication \< 1.17.0 and All-In-One Security (AIOS) \< 5.5.0 - Subscriber+ 2FA Bypass via 'creds\_user\_id' Parameter (CVSS 7.5, Two Factor Authentication · All-In-One Security)
- [CVE-2026-110983](https://cve.now/CVE-2026-110983.md): WP Photo Album Plus \< 9.3.04.004 - Photo Comment Deletion via CSRF (CVSS 4.3, WP Photo Album Plus)
- [CVE-2026-110505](https://cve.now/CVE-2026-110505.md): Enable SVG, WebP, and ICO Upload \< 1.1.6 - Author+ Stored XSS via SMIL Animation Bypass (CVSS 6.8, Enable SVG, WebP, and ICO Upload)
- [CVE-2026-110504](https://cve.now/CVE-2026-110504.md): Enable SVG, WebP, and ICO Upload 1.1.3 - 1.1.5 - Author+ Stored XSS via SVG Sanitization Bypass (CVSS 6.8, Enable SVG, WebP, and ICO Upload)
- [CVE-2026-110030](https://cve.now/CVE-2026-110030.md): Hide Price Until Login \< 1.1.2 - Unauthenticated Account Creation via Guest Registration (CVSS 5.3, Hide Price Until Login)
- [CVE-2026-108763](https://cve.now/CVE-2026-108763.md): Wallet System for WooCommerce \< 2.8.2 - Subscriber+ KYC Document Overwrite via IDOR (CVSS 4.3, Wallet System for WooCommerce)
- [CVE-2026-108686](https://cve.now/CVE-2026-108686.md): WP Post Author \< 4.2.0 - Unauthenticated reCAPTCHA Secret Key Disclosure (CVSS 3.7, WP Post Author)
- [CVE-2026-108685](https://cve.now/CVE-2026-108685.md): WP Post Author \< 4.2.0 - Unauthenticated Modification of the First User Account's Profile Fields (CVSS 3.7, WP Post Author)
- [CVE-2026-105258](https://cve.now/CVE-2026-105258.md): LatePoint \< 5.7.6 - Admin+ Stored XSS via Booking Form Step Settings (CVSS 3.5, Appointment Booking Plugin)
- [CVE-2026-103693](https://cve.now/CVE-2026-103693.md): Frontend Dashboard \< 3.0.5 and ProfileGrid \< 6.0.0.5 - Unauthenticated PHP Object Injection (CVSS 9.0, Frontend Dashboard · ProfileGrid)
- [CVE-2024-3586](https://cve.now/CVE-2024-3586.md): LetterPress \< 2.4.0 - Admin+ Stored XSS (CVSS 3.5, LetterPress)
- [CVE-2026-89216](https://cve.now/CVE-2026-89216.md): vTables \< 0.3 - Unauthenticated SQL Injection via orderby Parameter (CVSS 8.6, vTables)
- [CVE-2026-88928](https://cve.now/CVE-2026-88928.md): PAYCOMET for WooCommerce 5.36 - 5.45 - Unauthenticated Stored Payment Token Overwrite via Signature Verification Bypass (CVSS 6.5, PAYCOMET for WooCommerce)
- [CVE-2026-78396](https://cve.now/CVE-2026-78396.md): Link Library \< 7.10.0 - Unauthenticated Link Contact and Submitter Information Disclosure (CVSS 5.3, Link Library)
- [CVE-2026-78395](https://cve.now/CVE-2026-78395.md): Link Library \< 7.10.0 - Unauthenticated Link Submission Login Requirement Bypass (CVSS 5.3, Link Library)
- [CVE-2026-115302](https://cve.now/CVE-2026-115302.md): Contact Form by Supsystic \< 1.11.1 - Unauthenticated Arbitrary Statistics Deletion (CVSS 5.3, Contact Form by Supsystic)
- [CVE-2026-115301](https://cve.now/CVE-2026-115301.md): Contact Form by Supsystic \< 1.11.1 - Admin+ SSTI via Form Text Block (CVSS 7.2, Contact Form by Supsystic)
- [CVE-2026-115300](https://cve.now/CVE-2026-115300.md): Contact Form by Supsystic \< 1.11.1 - Contact Submission and Statistics Deletion via CSRF (CVSS 4.3, Contact Form by Supsystic)
- [CVE-2026-115299](https://cve.now/CVE-2026-115299.md): Contact Form by Supsystic \< 1.11.1 - Arbitrary Plugin Settings Update via CSRF (CVSS 5.4, Contact Form by Supsystic)
- [CVE-2026-115282](https://cve.now/CVE-2026-115282.md): Recipe Card Blocks Lite 2.6.4 - 3.6.3 - Unauthenticated Unpublished Post Content Disclosure (CVSS 5.3, Recipe Card Blocks Lite)
- [CVE-2026-93293](https://cve.now/CVE-2026-93293.md): Password Protected \<= 2.8.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Freemius purchase\_completed Handler (CVSS 6.4, saadiqbal Password Protected – Protect Your Site Content Wi…)
- [CVE-2026-118905](https://cve.now/CVE-2026-118905.md): nvm\_ls lets an untrusted version string inject sed commands, executing arbitrary commands with GNU sed (CVSS 7.1, nvm-sh nvm)
- [CVE-2026-93757](https://cve.now/CVE-2026-93757.md): Wild Apricot Login \<= 1.0.18 - Authentication Bypass via SSO Email-Collision Account Binding on Multisite (CVSS 7.5, wild-apricot Wild Apricot Login)
- [CVE-2026-96228](https://cve.now/CVE-2026-96228.md): SSL Wireless SMS Notification \<= 3.8.1 - Unauthenticated Authentication Bypass to Account Takeover (CVSS 8.1, sslplugins SSL Wireless SMS Notification)
- [CVE-2026-96666](https://cve.now/CVE-2026-96666.md): Schema App Structured Data \<= 2.3.2 - Unauthenticated Stored Cross-Site Scripting via Comment Content via 'Remove Microdata' Output Filter (CVSS 7.2, vberkel Schema App Structured Data)
- [CVE-2026-93904](https://cve.now/CVE-2026-93904.md): Social Web Suite \<= 4.1.12 - Unauthenticated SQL Injection via 'exclude\_posts' Parameter (CVSS 7.5, dejanmarkovic Social Web Suite – Social Media Auto Post, So…)
- [CVE-2026-93855](https://cve.now/CVE-2026-93855.md): SendPress Newsletters \<= 1.26.1.20 - Unauthenticated SQL Injection via 'subscriberid' Parameter (CVSS 7.5, brewlabs SendPress Newsletters)
- [CVE-2026-96669](https://cve.now/CVE-2026-96669.md): Food Store \<= 1.5.5 - Unauthenticated Stored Cross-Site Scripting via 'service\_type' Cookie (CVSS 7.2, wpscripts Food Store – Online Food Delivery & Pickup)
- [CVE-2026-96741](https://cve.now/CVE-2026-96741.md): DSGVO All in one for WP \<= 5.0 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Output Buffer Regex Corruption (CVSS 7.2, mlfactory DSGVO All in one for WP)
- [CVE-2026-109516](https://cve.now/CVE-2026-109516.md): Bot for Telegram on WooCommerce \<= 1.3.0 - Unauthenticated Authentication Bypass to Account Takeover via Fake Telegram Webhook + Brute-Forced Login Token (CVSS 9.8, guruteam Bot for Telegram on WooCommerce)
- [CVE-2026-42949](https://cve.now/CVE-2026-42949.md): A authorization bypass vulnerability exists in the /api/runscript functionality of FUXA (version(s): 1.3.2-2809). (CVSS 5.6, Frangoteam)
- [CVE-2026-40063](https://cve.now/CVE-2026-40063.md): A information disclosure vulnerability exists in the /nodered/fuxa/scripts functionality of FUXA (version(s): 1.3.2-2809). (CVSS 5.3, Frangoteam)
- [CVE-2026-42922](https://cve.now/CVE-2026-42922.md): A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2-2809). (CVSS 9.8, Frangoteam)
- [CVE-2026-118426](https://cve.now/CVE-2026-118426.md): In affected versions of Octopus Server with the LDAP authentication provider enabled, any authenticated user could call the LDAP user search (CVSS 5.3, Octopus Deploy Octopus Server)
- [CVE-2026-113409](https://cve.now/CVE-2026-113409.md): The Ortto plugin for WordPress before 1.0.25 did not escape stored settings on its admin settings page, leading to stored cross-site scripti (CVSS 4.8, canva ortto)
- [CVE-2026-114173](https://cve.now/CVE-2026-114173.md): The Ortto plugin for WordPress before 1.0.25 did not filter the WooCommerce product data it embedded in public storefront pages. (CVSS 5.3, canva ortto)
- [CVE-2026-113387](https://cve.now/CVE-2026-113387.md): The Ortto plugin for WordPress before 1.0.25 did not authenticate configuration update requests, relying only on a secret exposed in public (CVSS 8.6, canva ortto)
- [CVE-2026-66092](https://cve.now/CVE-2026-66092.md): Stored XSS in pre-login notice via reachable legacy logon route (CVSS 4.8, Apereo Foundation openEQUELLA)
- [CVE-2026-66091](https://cve.now/CVE-2026-66091.md): Unauthenticated IDOR Enables Disclosure of Other Users’ last-known details (CVSS 6.9, Apereo Foundation openEQUELLA)
- [CVE-2026-66090](https://cve.now/CVE-2026-66090.md): XML External Entity (XXE) Injection in Metadata Field Allows Arbitrary File Read (CVSS 7.1, Apereo Foundation openEQUELLA)
- [CVE-2026-66089](https://cve.now/CVE-2026-66089.md): XML External Entity (XXE) Vulnerability in SOAP Interface Allows External Entity Expansion (CVSS 6.1, Apereo Foundation openEQUELLA)
- [CVE-2026-66088](https://cve.now/CVE-2026-66088.md): Unrestricted Command Execution via system.execute (CVSS 9.4, Apereo Foundation openEQUELLA)
- [CVE-2026-16889](https://cve.now/CVE-2026-16889.md): Stored XSS via Pre-Login Notice Image Upload Serves Attacker HTML from Application Origin (CVSS 4.8, Apereo Foundation openEQUELLA)
- [CVE-2026-21157](https://cve.now/CVE-2026-21157.md): Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to launch arbitrary activity. (CVSS 8.3, Samsung Mobile Bixby)
- [CVE-2026-113957](https://cve.now/CVE-2026-113957.md): An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image content in response to a pul (no CVSS, Apple container · Apple containerization)
- [CVE-2026-118590](https://cve.now/CVE-2026-118590.md): nipy nibabel Header volumeutils.py array\_from\_file memory allocation (CVSS 6.9, nipy nibabel)
- [CVE-2026-107014](https://cve.now/CVE-2026-107014.md): Insecure permissions in Bander Notepad (bander.notepad) versionCode 12 allow unauthorized attackers to write and read notes in another user' (no CVSS)
- [CVE-2026-107015](https://cve.now/CVE-2026-107015.md): Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in another user's' note dat (CVSS 9.1)
- [CVE-2026-107016](https://cve.now/CVE-2026-107016.md): Insecure permissions in Fossify v1.3.0 allows unauthorized attackers to access and read another user's stored contacts. (no CVSS)
- [CVE-2026-107017](https://cve.now/CVE-2026-107017.md): Insecure permissions in the ShortcutDispatchActivity component of canvoki versionCode 14 allows unauthorized attackers to arbitrarily… (CVSS 9.1)
- [CVE-2026-107018](https://cve.now/CVE-2026-107018.md): Insecure permissions in Ghost Commander File Manager versionCode 479 allows unauthorized attackers to arbitrarily read and write files insid (no CVSS)
- [CVE-2026-107019](https://cve.now/CVE-2026-107019.md): Insecure permissions in the feiertage.ImportActivity component of Arbeitszeiterfassung2 versionCode 159 allows unauthorized attackers to cre (no CVSS)
- [CVE-2026-107020](https://cve.now/CVE-2026-107020.md): An issue in the activity.LoadLinkLaterActivity component of FeedEx / Handy News Reader versionCode 116 allows attackers to force victim user (CVSS 7.5)
- [CVE-2026-107021](https://cve.now/CVE-2026-107021.md): Insecure permissions in the CardProvider content provider component of helloworld1 AnyMemo versionCode 20260730 allows unauthorized attacker (no CVSS)
- [CVE-2026-107023](https://cve.now/CVE-2026-107023.md): Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unauthorized attackers to arbitrarily read another… (CVSS 6.5)
- [CVE-2026-107024](https://cve.now/CVE-2026-107024.md): Insecure permissions in Share 2 Archive Today versionCode 61 allows unauthorized attackers to arbitrarily overwrite another user's clipboard (no CVSS)
- [CVE-2026-107025](https://cve.now/CVE-2026-107025.md): Insecure permissions in WikiAndPad alpha/beta v0.2alpha03 (versionCode 200300) allows unauthorized attackers to export the application's dat (no CVSS)
- [CVE-2026-107026](https://cve.now/CVE-2026-107026.md): Insecure permissions in Share to Clipboard v1.14.1 (versionCode 32) allows unauthorized attackers to arbitrarily overwrite another user's cl (CVSS 7.5)
- [CVE-2026-107027](https://cve.now/CVE-2026-107027.md): Insecure permissions in lz233 Tarnhelm v1.8.2 (versionCode 20250630) allows unauthorized attackers to invoke an exported component, leading (no CVSS)
- [CVE-2026-107028](https://cve.now/CVE-2026-107028.md): Insecure permissions in wbpxre150 Shopping List v11.0 (versionCode 11) allows unauthorized attackers to invoke an exported component… (CVSS 9.1)
- [CVE-2026-107029](https://cve.now/CVE-2026-107029.md): Insecure permissions in rubenalfon Pile v1.1.3 allows unauthorized attackers to invoke an exported component, leading to arbitrary data acce (no CVSS)
- [CVE-2026-107030](https://cve.now/CVE-2026-107030.md): Insecure permissions in craftxbox YubiClip XOR fork v1.0.1 (versionCode 10003) allows unauthorized attackers to trigger the OTP-clipboard (O (no CVSS)
- [CVE-2026-107032](https://cve.now/CVE-2026-107032.md): Insecure permissions in Bulk Share : Location Sender v2.1.0 (versionCode 5) allows unauthorized attackers to invoke an exported component, l (CVSS 9.1)
- [CVE-2026-107033](https://cve.now/CVE-2026-107033.md): Insecure permissions in the MirakelInternalContentProvider component of Mirakel v3.0 (versionCode 60) allows unauthorized attackers to arbit (no CVSS)
- [CVE-2026-107034](https://cve.now/CVE-2026-107034.md): Insecure permissions in LeafPad / Leaf Note v1.21 (versionCode 21) allows unauthorized attackers to arbitrarily read another user's note… (CVSS 9.1)
- [CVE-2026-107035](https://cve.now/CVE-2026-107035.md): Insecure permissions in the object/Page.java component of MBasov OMN Outline notes Markdown versionCode 3400 allows unauthorized attackers t (no CVSS)
- [CVE-2026-107036](https://cve.now/CVE-2026-107036.md): Insecure permissions in Mission Control / AIMSICD versionCode 2026080501 allows unauthorized attackers to invoke an exported component, impa (no CVSS)
- [CVE-2026-107037](https://cve.now/CVE-2026-107037.md): Insecure permissions in the NotificationHelper component of NoNonsense Notes versionCode 72600 allows unauthorized attackers to write in ano (CVSS 7.5)
- [CVE-2026-107038](https://cve.now/CVE-2026-107038.md): Insecure permissions in Yet Another UPnP Controller versionCode 50200 allows unauthorized attackers to invoke an exported component, leading (no CVSS)
- [CVE-2026-107039](https://cve.now/CVE-2026-107039.md): Insecure permissions in the ActivityMain component of M66B/Marcel Bokhorst NetGuard no-root firewall versionCode 2026080101/versionName… (CVSS 7.5)
- [CVE-2026-107040](https://cve.now/CVE-2026-107040.md): Insecure permissions in MBasov OMN-Go versionCode 26080824 allows unauthorized attackers to invoke an exported component, leading to arbitra (no CVSS)
- [CVE-2026-107041](https://cve.now/CVE-2026-107041.md): Insecure permissions in the FeatureActionActivity component of Oasis Feng Island versionCode 51801 allows unauthorized attackers to arbitrar (no CVSS)
- [CVE-2026-107042](https://cve.now/CVE-2026-107042.md): Insecure permissions in USP Ultimate Screenshot Painter versionCode 240213.009 allows unauthorized attackers to move or overwrite files in a (CVSS 7.5)
- [CVE-2026-107043](https://cve.now/CVE-2026-107043.md): Insecure permissions in Code Catcher versionCode 131 allow unauthorized attackers to arbitrarily manipulate the app's SMS-code-capture… (no CVSS)
- [CVE-2026-107044](https://cve.now/CVE-2026-107044.md): Insecure permissions in ProjectMAXS MAXS Main v0.5.19 (versionCode 19) allows unauthorized attackers to arbitrarily manipulate the app's… (CVSS 7.5)
- [CVE-2026-107045](https://cve.now/CVE-2026-107045.md): Insecure permissions in the CitrineContentProvider component of Citrine v3.1.0 (versionCode 62) allows unauthorized attackers to… (no CVSS)
- [CVE-2026-107046](https://cve.now/CVE-2026-107046.md): A Server-Side Request Forgery (SSRF) in the url/title/author/coverUrl component of FocusPodcast versionCode 70allows attackers to scan… (no CVSS)
- [CVE-2026-107047](https://cve.now/CVE-2026-107047.md): Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the app's logging… (CVSS 7.5)
- [CVE-2026-107048](https://cve.now/CVE-2026-107048.md): An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101 allows attackers to execute arbitrary code… (no CVSS)
- [CVE-2026-107049](https://cve.now/CVE-2026-107049.md): An issue in Forkyz versionCode 8500000 allows attackers to arbitrarily change another user's storage settings via supplying a crafted URI… (CVSS 7.5)
- [CVE-2026-107050](https://cve.now/CVE-2026-107050.md): An issue in libretro RetroArch v1.22.2 allows attackers to force another user into loading attacker-supplied code in their uid, leading to… (no CVSS)
- [CVE-2026-107051](https://cve.now/CVE-2026-107051.md): Insecure permissions in klassm AndFHEM v2.4.1 (versionCode 241, the verified build) allows unauthorized attackers to arbitrarily… (no CVSS)
- [CVE-2026-107052](https://cve.now/CVE-2026-107052.md): Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attackers to arbitrarily… (CVSS 7.5)
- [CVE-2026-107053](https://cve.now/CVE-2026-107053.md): Insecure permissions in foobnix Librera PDF Reader versionCode 7222 allows unauthorized attackers to arbitrarily write and truncate files… (no CVSS)
- [CVE-2026-107055](https://cve.now/CVE-2026-107055.md): Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387 allows unauthorized attackers to write arbitrary… (CVSS 7.5)
- [CVE-2026-107056](https://cve.now/CVE-2026-107056.md): Insecure permissions in the io.file.importer.ImportActivity component of OpenTracks versionCode 6751 allows unauthorized attackers to… (no CVSS)
- [CVE-2026-107057](https://cve.now/CVE-2026-107057.md): An issue in AndBible versionCode 1111 allows attackers to execute arbitrary code via uploading a crafted module zip. (no CVSS)
- [CVE-2026-107058](https://cve.now/CVE-2026-107058.md): An issue in Shelter versionCode 445 allows attackers to register their own auth\_key and execute a takeover of another user's binder… (CVSS 9.8)
- [CVE-2026-107059](https://cve.now/CVE-2026-107059.md): An issue in Nextcloud versionCode 30390190 allows attackers to force victim users to logout of their accounts and switch to an attacker… (no CVSS)
- [CVE-2026-107060](https://cve.now/CVE-2026-107060.md): Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to another user's VPN… (CVSS 9.1)
- [CVE-2026-51831](https://cve.now/CVE-2026-51831.md): An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a local attacker to… (no CVSS)
- [CVE-2026-51832](https://cve.now/CVE-2026-51832.md): An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a local attacker to… (no CVSS)
- [CVE-2026-51851](https://cve.now/CVE-2026-51851.md): modelscope agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in… (no CVSS)
- [CVE-2026-51863](https://cve.now/CVE-2026-51863.md): DB-GPT v0.7.5 and 0.8.0 contains directory traversal in use\_example\_file… (no CVSS)
- [CVE-2026-51902](https://cve.now/CVE-2026-51902.md): SuperAGI up to v0.0.14 contains an improper access control vulnerability. (no CVSS)
- [CVE-2026-51903](https://cve.now/CVE-2026-51903.md): SuperAGI v0.0.14 contains an improper access control vulnerability in get\_agent\_by\_latest\_execution in… (no CVSS)
- [CVE-2026-51905](https://cve.now/CVE-2026-51905.md): TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in get\_agent\_execution\_configuration in… (CVSS 8.8)
- [CVE-2026-51912](https://cve.now/CVE-2026-51912.md): OpenBMB XAgent v1.0.0 contains directory traversal vulnerability in main-upload\_file-the-preserved-live-upload-file-witness-directly-reache… (no CVSS)
- [CVE-2026-79589](https://cve.now/CVE-2026-79589.md): The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker to gain unauthentic (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-10-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.