CVEs published October 30, 2026
681 CVEs were published on October 30, 2026: 46 critical, 212 high. 5 early warnings were posted.
- Published
- 681
- Critical
- 46
- High
- 212
- Medium
- 271
- Low
- 31
- Unrated
- 121
- Now in CISA KEV
- 0
- Fix available
- 458
- Early warnings
- 5
Most affected products
- Google Chrome
- 21
- Dell OpenManage Enterprise
- 17
- pgadmin.org pgAdmin
- 15
- CallBackery
- 11
- SQLite
- 11
- Red Hat Enterprise Linux
- 10
- Drupal AI · drupal/ai
- 8
- Imagination Technologies Graphics DDK
- 8
- phpMyAdmin
- 7
- Scribus
- 7
Early warnings 5
- SZB-fb31b3d414Applebee's fixes hardcoded-key flaw that reportedly exposed customer dataApplebee's · Applebee's Android app
- SZB-fd5da6a441Researcher reports Applebee's app exposed customer data via hardcoded database passwordApplebee's · Applebee's mobile app
- SZB-de02ba8ec3Linux kernel MPTCP flaw reportedly allows remote root via exploit by Anthropic researchersLinux · Linux kernel (Multipath TCP)
- SZB-950a334ee6Anthropic researchers report exploit for critical Linux kernel MPTCP flawLinux kernel · Multipath TCP (MPTCP)
- SZB-06d1f3082aResolve says hackers stole customer payment card dataResolve
Critical 46
- CVE-2026-117656Unverified Sign in with Apple callback parameter can override verified ID token claimspow-auth assent
- GHSA-4XM8-RG9H-JHQ2Signal K resources API path traversal can disclose the JWT signing secret and enable remote code executionsignalk-server · @signalk/resources-provider
- GHSA-HFF9-5PQW-6W9Fimgproxy has integer overflow in imgproxy ICO loader that causes denial of service and may permit remote code executiongithub.com/imgproxy/imgproxy/v3 · github.com/imgproxy/im… +1
- CVE-2026-63377TAKO AI Agent for Okta: Unauthenticated first-run administrator takeoverfctr-id okta-ai-agent
- CVE-2026-62863MoLing: unauthenticated SSE and wildcard CORS expose tool sessionsgojue moling
- CVE-2026-62849ThingLinks TDengine TDS APIs vulnerable to unauthenticated SQL injectionmqttsnet thinglinks
- CVE-2026-62853ThingLinks vulnerable to authenticated remote code execution via Groovy script registration in ThingLinksmqttsnet thinglinks
- CVE-2026-117666ssl_verify_fun: partial-label wildcard certificate matches hostnames across a label boundarydeadtrickster ssl_verify_fun
- CVE-2026-61620HoneySQL unchecked entity names can lead to SQL injection resultsseancorfield honeysql
- CVE-2026-116241pgAdmin 4: Import/Export Data query export runs a command through a backslash in a double-quoted identifierpgadmin.org pgAdmin
- CVE-2026-61850Kargo: Privilege escalation via Project RBAC management in the Kargo APIakuity kargo
- CVE-2026-55598PinePods: Authenticated SSRF via podcast RSS enclosure URL (server-side fetch of attacker-controlled URL, no host validation)madeofpendletonwool PinePods
- CVE-2026-78403Unauthenticated Stack Buffer Overflow in Sentinel Keys ServerThalesgroup Sentinel Keys Server
- CVE-2026-116852WordPress Widget Options plugin <= 4.2.5 - Remote Code Execution (RCE) vulnerabilityMarketing Fire Widget Options
- CVE-2026-116386WordPress SMS Alert Order Notifications plugin <= 4.0.2 - Privilege Escalation vulnerabilityCozy Vision Technologies Pvt. SMS Alert Order Notifications
- CVE-2026-90888WordPress LeadSnap plugin <= 1.25 - PHP Object Injection vulnerabilityLeadSnap
- CVE-2026-39738WordPress FunnelKit Automations plugin <= 3.8.6.1 - PHP Object Injection vulnerabilityFunnelKit Automations
- CVE-2026-39732WordPress Transliterator plugin <= 2.5.13 - SQL Injection vulnerabilityIvijan-Stefan Stipic Transliterator
- CVE-2026-119526WordPress Royal Event theme <= 2.0 - PHP Object Injection vulnerabilityThemeREX Royal Event
- CVE-2026-118697In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA before 2026.3 and 2026.2.4, the jetbrainsd daemon trusted compromised…JetBrains Toolbox App · JetBrains IntelliJ IDEA
- CVE-2026-119978Flowise through 3.1.4 Custom Function Sandbox Escape RCE via LocalFileStoreFlowiseAI Flowise
- CVE-2026-61826Bazarr: Plex OAuth API namespace is entirely unauthenticated, allowing config tampering, integration takeover and server-side request…morpheus65535 bazarr
- CVE-2026-112816Improper certificate validation in the HTTPS listener in LXDCanonical LXD
- CVE-2026-119717pybars4 through 0.9.13 Code Injection via Bracketed Path Segmentsup9inc pybars4
- CVE-2026-119716pybars3 through 0.9.7 Code Injection via Bracketed Path Segmentswbond pybars3
- CVE-2026-119706LMDeploy 0.9.0 through 0.18.0 Unauthenticated RCE via /update_weights Pickle DeserializationInternLM lmdeploy
- CVE-2026-93327Unsafe Java Deserialization in Application Integration SubWorkflow tasks allows Remote Code ExecutionGoogle Cloud Application Integration
- CVE-2026-61738SOCFortress CoPilot: Arbitrary Host File Write as Root via Path Traversal in the ScoutSuite GCP Report Upload (RCE)socfortress CoPilot
- CVE-2026-61737ng-antd-admin: Hardcoded JWT Secret allows Authentication Bypass in ng-antd-adminhuajian123 ng-antd-admin
- CVE-2026-61730SOCFortress CoPilot: Unauthenticated Exposure of ScoutSuite Reports and Uploaded GCP Service-Account Key via Static Mountsocfortress CoPilot
- CVE-2026-61729SOCFortress CoPilot: Hardcoded Default Header Secret - Unauthenticated Active-Response Invocation and Alert Injectionsocfortress CoPilot
- CVE-2026-61728SOCFortress CoPilot: Stored comment and SOC-field XSS permits privileged account takeoversocfortress CoPilot
- CVE-2026-112905Vvveb: Authenticated IDOR on admin/auth-token Allows Admin Privilege Escalation via API Token Theftgivanz Vvveb
- CVE-2026-110799Vvveb: Authentication Bypass via PHP Array Injection leading to full Account Takeovergivanz Vvveb
- CVE-2026-119660MuseBot before 2.0.0 Authentication Bypass via Hard-Coded Session Keyyincongcyincong MuseBot
- CVE-2026-119597OpenDeepWiki through 2.0.6 Hard-coded JWT Signing Key Admin Token ForgeryAIDotNet OpenDeepWiki
- CVE-2026-119568vsftpd through 3.0.5 require_ssl_reuse Bypass via FTPS Data Channel Hijackingvsftpd
- CVE-2026-119419CakePHP through 5.4.3 SQL Injection via StringExpression and IdentifierExpression Collationcakephp
- CVE-2026-119418CakePHP through 5.4.3 SQL Injection via WindowExpression range() and frame()cakephp
- CVE-2026-116366Unauthenticated RCE vulnerability against ClickHouse ServerClickHouse
- CVE-2025-31704Dahua Intelligent Connection Center command injectionDahua Intelligent Connection Center
- CVE-2026-82104API permission bypass via logic bugTeltonika Networks RUT · Teltonika Networks RUTX +12
- CVE-2026-103039Gravity Forms <= 3.1.2 - Unauthenticated PHP Object Injection via Post Custom FieldGravity Forms
- CVE-2026-107249Block AJAX - Highly critical - PHP object injection - SA-CONTRIB-2026-192Drupal Block AJAX
- CVE-2026-119263Memory corruption in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary…Google Chrome
- CVE-2026-119261Improper input validation in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code…Google Chrome
High 212
- GHSA-494M-4556-WF5Pimgproxy has out-of-bounds heap read/write in ICO loader BMP header reconstruction that allows unauthenticated remote worker crashgithub.com/imgproxy/imgproxy/v3
- GHSA-MMQ5-XM89-9PFGimgproxy has unbounded memory allocation in ICO loader that allows unauthenticated memory-exhaustion DoS via crafted data_size fieldgithub.com/imgproxy/imgproxy/v3
- CVE-2026-63414Shopify App: Token exchange shop context confusion may allow cross-shop authorization bypass in affected appsshopify_app
- CVE-2026-63398Coop has SAML cross-tenant authentication bypassroostorg coop
- CVE-2026-63396Coop has a data leak via unauthenticated GraphQL Query.allOrgsroostorg coop
- CVE-2026-63339IXP Manager has authenticated non-administrator privilege escalationinex IXP-Manager
- CVE-2026-63338IXP Manager has Broken Object-Level Authorizationinex IXP-Manager
- CVE-2026-63393OpenSearch SQL plugin: Unsafe cursor deserialization permits server code executionopensearch-project sql
- CVE-2026-63378TAKO AI Agent for Okta: Authenticated Python execution through validator bypassfctr-id okta-ai-agent
- CVE-2026-63346Refitter: C# source injection through OpenAPI header parameter nameschristianhelle refitter
- CVE-2026-63344Refitter: C# source injection through OpenAPI content-type map keyschristianhelle refitter
- CVE-2026-63345Refitter: C# source injection through OpenAPI path keyschristianhelle refitter
- CVE-2026-63341Aedes has Uncaught Exception and Uncontrolled Resource Consumptionmoscajs aedes
- CVE-2026-63224OpenRemote has authenticated SQL injection in crosstab datapoint exportsopenremote · io.openremote:openremote-manager
- CVE-2026-63201netopeer2-server logging has format string vulnerability via subtree filterCESNET netopeer2
- CVE-2026-63184Refitter: Unrestricted OpenAPI references permit build-host SSRF and file inclusionchristianhelle refitter
- CVE-2026-63182LightSAML: Signature reference wrapping permits unsigned assertion claimslitesaml lightsaml
- CVE-2026-118938Fickling check_safety() bypass: dotted qualname in STACK_GLOBAL resolves a class-method attribute path that evades call analysistrailofbits fickling
- CVE-2026-111578PDF Invoices & Packing Slips for WooCommerce 5.16.2 - 5.16.4 - Unauthenticated Stored XSS via Order Address and Customer Note FieldsPDF Invoices & Packing Slips for WooCommerce
- CVE-2026-16760Fickling check_safety() bypass: likely_safe_imports grants module-origin trust to unvalidated standard library callablestrailofbits fickling
- CVE-2026-62990Shopper: same-origin SVG and HTML uploads enable stored XSS and persistent administrator creationshopperlabs shopper
- CVE-2026-62989Shopper: missing variant-delete authorization permits destructive single and bulk actionsshopperlabs shopper
- CVE-2026-62297ag-psd has uncontrolled memory allocation via declared PSD dimensions (DoS)Agamnentzar ag-psd
- CVE-2026-62979jack: upstream error responses expose backend and peer credentialsroziscoding jack
- CVE-2026-62967ZTNET privilege bypass: any user can deactivate arbitrary accounts via /api/auth/user/invalidateUsersinamics ztnet
- CVE-2026-62966ESPAsyncWebServer multipart parser has null-pointer writeESP32Async ESPAsyncWebServer
- CVE-2026-62965SABnzbd: Orphan-job path traversal permits arbitrary file deletionsabnzbd
- CVE-2026-62958libriscv: Out of bounds read vuln in the ELF parser (Denial of service)libriscv
- CVE-2026-62968Dream Displays has command-line argument injection in yt-dlp invocationarsmotorin dreamdisplays
- CVE-2026-62864Ring's nested-params middleware has inefficient regular expression complexityring-clojure ring
- CVE-2026-40573NovumOS: Nova Interpreter Privilege EscalationMinecAnton209 NovumOS
- CVE-2026-62847Metalama: Local code execution via DLL planting in world-writable temporary directories (Linux/macOS)Metalama
- CVE-2026-62848Metalama's Visual Studio inter-process named pipe allows unsafe deserialization that enables local code executionMetalama
- CVE-2026-58412Filecoin Pin: Fork bypass in the privileged GitHub Actions workflowfilecoin-project filecoin-pin
- CVE-2026-119337RAGFlow: OpenAI-compatible agent completion bypasses private canvas authorizationinfiniflow ragflow
- CVE-2026-62333OpenVM: MemoryMerkleAir allows below-leaf rows to alter memory rootsopenvm-org openvm
- CVE-2026-62334OpenVM's OpenVmHalo2Verifier self-call can bypass proof verificationopenvm-org openvm
- CVE-2026-119336Pi-hole: arbitrary root file clobber / chmod / disclosure via updatecheck.sh cron following /etc/pihole/versions symlinkpi-hole
- CVE-2026-119335Pi-hole: Local privilege escalation from `pihole` user to root via CVE-2026-41489 fix bypasspi-hole
- CVE-2026-119333draw.io Desktop allows Windows executable search-path hijackingjgraph drawio-desktop
- CVE-2026-119332Ladybird: FinalizationRegistry::cleanup() heap use-after-free via reentrant unregister()LadybirdBrowser ladybird
- CVE-2026-119331Ladybird: Missing origin-clean enforcement in CSSStyleSheet allows cross-origin CSS read and mutationLadybirdBrowser ladybird
- CVE-2026-116249pgAdmin 4: Connection file paths and parameter keys escape the user's storage directorypgadmin.org pgAdmin
- CVE-2026-116247pgAdmin 4: libpq uses the pgAdmin service account's own password file and client certificatepgadmin.org pgAdmin
- CVE-2026-116245pgAdmin 4: Connection services are not restricted in server modepgadmin.org pgAdmin
- CVE-2026-116244pgAdmin 4: libpq uses the pgAdmin service account's Kerberos credentialspgadmin.org pgAdmin
- CVE-2026-116243pgAdmin 4: Utility binary path can point at a shared storage directorypgadmin.org pgAdmin
- CVE-2026-116242pgAdmin 4: SSH tunnels use the pgAdmin service account's own SSH identitypgadmin.org pgAdmin
- CVE-2026-116239pgAdmin 4: An LDAP or Kerberos login is logged in to another account with the same usernamepgadmin.org pgAdmin
- CVE-2026-116238pgAdmin 4: The failed login limit can be bypassed, and Flask-Security's own views skip pgAdmin's login and password checkspgadmin.org pgAdmin
- CVE-2026-115829Secret Server partial login bypassDelinea Secret Server
- CVE-2026-115830Secret Server JWT issuance errorDelinea Secret Server
- CVE-2026-62302MyTube: Unauthenticated Media Access via Static Routes Bypassing Loginfranklioxygen MyTube
- CVE-2026-62301MyTube: Visitor Can Access Hidden Video Metadata and Contentfranklioxygen MyTube
- CVE-2026-62284OSAC operator: Kubeconfig credential-plugin execution and SSRF in console proxyosac-project osac-operator
- CVE-2026-78402Stack Buffer Overflow in Sentinel Keys ServerThalesgroup Sentinel Keys Server
- CVE-2026-62331praktor: Telegram upload traversal permits persistent agent instruction injectionmtzanidakis praktor
- CVE-2026-61586Copernik XML Factory: Improper restriction of XInclude resource resolution in Copernik XML Factory (stock JDK provider)copernik-eu copernik-xml-factory
- CVE-2026-59978AdminNeo: version-cache array injection causes persistent denial of serviceadminneo-org adminneo · adminneo-org/adminneo
- CVE-2026-61845Crass: Large numeric exponents cause CPU and memory denial of servicergrove crass
- CVE-2026-46560OpenAM Authentication Bypass via RADIUS SpoofingOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-62264PDF Reader MCP: HTTP transport accepts unauthenticated requests despite a configured MCP_API_KEYSylphxAI pdf-reader-mcp · @sylphx/pdf-reader-mcp
- CVE-2026-118090WordPress MasterStudy LMS plugin <= 3.7.55 - PHP Object Injection vulnerabilityStylemix MasterStudy LMS
- CVE-2026-118089WordPress Product Feed Manager plugin <= 7.14.1 - PHP Object Injection vulnerabilityRexTheme Product Feed Manager
- CVE-2026-118086WordPress WP BASE Booking plugin <= 6.5.2 - Privilege Escalation vulnerabilityHakan Ozevin WP BASE Booking
- CVE-2026-116862WordPress WP REST Cache plugin <= 2026.3.1 - Broken Access Control vulnerabilityAcato WP REST Cache
- CVE-2026-116861WordPress Flexible Chat plugin <= 1.1.0 - Sensitive Data Exposure vulnerabilitywpdesk Flexible Chat
- CVE-2026-116851WordPress eCommerce Product Catalog plugin <= 3.6.5 - Cross Site Scripting (XSS) vulnerabilityimpleCode eCommerce Product Catalog
- CVE-2026-116847WordPress Mang Board WP plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerabilityKitae Park Mang Board WP
- CVE-2026-116405WordPress VikRentCar plugin <= 1.4.9 - Cross Site Scripting (XSS) vulnerabilitye4jvikwp VikRentCar
- CVE-2026-116401WordPress HUSKY plugin <= 1.4.6 - Broken Access Control vulnerabilityRealMag777 HUSKY
- CVE-2026-105077WordPress Ad Inserter plugin <= 2.8.19 - Cross Site Scripting (XSS) vulnerabilitySpacetime Ad Inserter
- CVE-2026-94175WordPress All In One Login plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerabilitySaad Iqbal All In One Login
- CVE-2026-78527WordPress GS Testimonial Slider plugin <= 3.3.10 - PHP Object Injection vulnerabilityGS Plugins GS Testimonial Slider
- CVE-2026-73186WordPress Enable Media Replace plugin <= 4.2.2 - PHP Object Injection vulnerabilityShortPixel Enable Media Replace
- CVE-2026-54855WordPress Profile Builder plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerabilityCozmoslabs Profile Builder
- CVE-2026-48201WordPress Fast Velocity Minify plugin <= 3.5.7 - Cross Site Scripting (XSS) vulnerabilityRaul P. Fast Velocity Minify
- CVE-2026-39786WordPress BA Book Everything plugin <= 1.8.33 - Cross Site Scripting (XSS) vulnerabilitybookingalgorithms BA Book Everything
- CVE-2026-39734WordPress WP EasyPay plugin <= 4.5.4 - Path Traversal vulnerabilitySaad Iqbal WP EasyPay
- CVE-2026-28160WordPress VikRentCar plugin <= 1.4.10 - Cross Site Scripting (XSS) vulnerabilitye4jvikwp VikRentCar
- CVE-2026-62162Hydra: Deposit Claim omits Head state-token spending requirementcardano-scaling hydra
- CVE-2026-62160Daptin: ParseAcceptLanguage `_` separator bypass enables >250x CPU amplification via Accept-Language header in LanguageMiddlewaredaptin · github.com/daptin/daptin
- CVE-2026-61854VoiceSentinel: Race condition in report buffer cleanup can corrupt transcript data and cause unbounded disk growthjackh54 VoiceSentinel
- CVE-2026-119777Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: stack buffer overflow in h.266/vvc parserRed Hat Enterprise Linux
- CVE-2026-119979LM Studio before 0.4.22+1 Path Traversal via Model DownloaderElement Labs LM Studio
- CVE-2026-84243gettext: Directory traversal via the LANGUAGE environment variableThe GNU C Library glibc
- CVE-2026-118696In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before…JetBrains IntelliJ IDEA · JetBrains PyCharm +9
- CVE-2026-119764Mythic 3.2.16 through 3.4.0.61 Stored XSS via Agent-Downloaded File Previewits-a-feature Mythic
- CVE-2026-119762Axigen Mail Server before 10.5.69, 10.6.40, and 10.7.2 Unauthenticated DoS via Nested RequestsAxigen Mail Server
- CVE-2026-119760sniproxy through 0.7.0 NULL Pointer Dereference via resolv_cancel()dlundquist sniproxy
- CVE-2026-76012Photo Gallery, Sliders, Proofing and Themes <= 4.4.1 - Authenticated (Custom+) Local File Inclusion via Lightroom 'gallery_edit' Task…smub Photo Gallery, Sliders, Proofing and Themes – NextGEN…
- CVE-2026-105894Ak Framework <= 2.9.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Options Updateakbilisim Ak Framework
- CVE-2026-104744Independent Analytics Pro <= 2.15.5 - Unauthenticated Stored Cross-Site Scripting via 'utm_campaign' ParameterIndependent Analytics Pro
- CVE-2026-112365easy.jobs <= 2.8.4 - Unauthenticated Stored Cross-Site Scripting via 'cover_letter' Parameterwpdevteam easy.jobs – AI powered Job Listing, Job Board, Ca…
- CVE-2026-115346Avada | Website Builder For WordPress & WooCommerce <= 7.16.2 - Unauthenticated Arbitrary File Upload via Avada Form Upload FieldThemeFusion Avada | Website Builder For WordPress & WooComm…
- CVE-2026-118205Essential Addons for Elementor <= 6.8.7 - Unauthenticated Privilege Escalation to 'page_id' Parameter via Elementor Revisionwpdevteam Essential Addons for Elementor – Popular Elemento…
- CVE-2026-96894ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.10 - Unauthenticated Stored Cross-Site Scripting via Inbound Email…wedevs ERP: Complete HR, Accounting & CRM Suite Built for W…
- CVE-2026-97638Forminator Forms <= 1.57.3.1 - Insecure Direct Object Reference to Unauthenticated Arbitrary Draft Deletion and Takeover via…wpmudev Forminator Forms – Contact Form, Payment Form & Cus…
- CVE-2026-107630Email Templates Customizer and Designer for WordPress and WooCommerce <= 1.5.14 - Missing Authorization to Unauthenticated Order PII…saadiqbal Email Templates Customizer and Designer for WordP…
- CVE-2026-110305Advanced Custom Fields: Extended <= 0.9.2.7 - Unauthenticated Sensitive Information Exposure in 'acf[<mapped_field>]' Parameter via…hwk-fr Advanced Custom Fields: Extended
- CVE-2025-8574Database Cleaner <= 1.4.7 - Authenticated (Administrator+) Arbitrary Table Deletiontigroumeow Database Cleaner: Cleanup, Optimization & Repair
- CVE-2026-61804myTinyWMS has Stored Cross-Site Scripting (XSS) in Product and Category ManagementmyTinyWMS
- CVE-2026-115642In OpenStack keystonemiddleware before 13.0.2, by supplying a custom X-Service-Token header in a request, anyone in possession of an…OpenStack keystonemiddleware
- CVE-2026-65566WordPress AI Engine plugin <= 3.8.8 - Cross Site Request Forgery (CSRF) vulnerabilityMeow Apps AI Engine
- CVE-2026-119116Use-after-free in the SetClient command handler of kmstool-enclave in AWS aws-nitro-enclaves-sdk-cAWS kmstool-enclave
- CVE-2026-119290Zuke: Resolved secret() values are written to GITHUB_STEP_SUMMARY in the clear, disclosing them to anyone who can view the workflow runzuke-build zuke
- CVE-2026-104615Cluster identity takeover in Fleet cluster registration allows access to another cluster's Fleet namespaceSUSE Rancher
- CVE-2026-119289Zuke: githubWorkflow adopts any workflow run whose title matches its marker, so anyone who can dispatch the workflow can satisfy or block…zuke-build zuke
- CVE-2026-119288Zuke: Argument injection on Windows: batch shims are launched through cmd.exe, which re-parses the command linezuke-build zuke
- CVE-2026-119287Zuke: Command-form registry descriptors bypass the MCP launch policyzuke-build zuke
- CVE-2026-119722Blender before 4.5.15 and 5.x before 5.2.3 Heap Out-of-Bounds Access via read_struct()Blender Foundation Blender
- CVE-2026-119719Blender before 4.5.15 and 5.x before 5.2.3 Heap Buffer Overflow via Thumbnail ExtractionBlender Foundation Blender
- CVE-2026-119718Blender before 4.5.15 and 5.x before 5.2.3 Heap Buffer Overflow via Point CacheBlender Foundation Blender
- CVE-2026-119713Paperclip 2026.403.0 before 2026.416.0 RCE via Execution Workspace Cleanup Commands@paperclipai/server
- CVE-2026-119710PipesHub 0.3.0 before 0.10.0 Connector Deletion via Crawling-Manager Schedule Routepipeshub-ai
- CVE-2026-119708abp-next-admin 10.4.0 through 10.7.0 Cross-Tenant File Disclosure via Blob Download-By-Namecolinin abp-next-admin
- CVE-2026-119707SonicJS through 3.0.0 Missing Authorization in Content Write APISonicJs-Org sonicjs
- CVE-2026-104067Scribus before 1.6.7 Out-of-Bounds Memory Access via SVM Import PluginScribus
- CVE-2026-104066Scribus before 1.6.7 Heap Buffer Overflow via PICT 4-bit Pixel UnpackingScribus
- CVE-2026-104065Scribus before 1.6.7 Heap Out-of-Bounds Write via Micrografx Draw ImportScribus
- CVE-2026-104064Scribus before 1.6.7 Heap Overflow via TIFF Tile Buffer HandlingScribus
- CVE-2026-104062Scribus before 1.6.7 Heap Buffer Overflow via PICT Pixmap LoaderScribus
- CVE-2026-104061Scribus before 1.6.7 Heap Out-of-Bounds Write via PSD Image LoaderScribus
- CVE-2026-118238CVE-2026-118238Tenda W18E
- CVE-2026-61627libass: Out-of-bounds read and write in wrap_lines_measurelibass
- CVE-2026-61626libass: Out-of-bounds bit clears for negative Matroska ReadOrder valueslibass
- CVE-2026-61739SOCFortress CoPilot: Authentication Bypass and Missing Authorization on Velociraptor Sigma Exclusion Rules (Detection Suppression)socfortress CoPilot
- CVE-2026-45145Chamilo LMS: Database-backed PHP object injection in career deserializationchamilo-lms
- CVE-2026-45144Chamilo LMS: Stored XSS in public user-profile fieldschamilo-lms
- CVE-2010-20125DedeCMS < 5.7 File Inclusion via plus/carbuyaction.phpDedeCMS
- CVE-2026-119682Improper Access Control in Multi-Factor Authentication (MFA) Functionality in ManageEngine SharePoint Manager PlusManageEngine SharePoint Manager Plus
- CVE-2026-61708SOCFortress CoPilot: Cross-Tenant Arbitrary Object-Store Write via the Data-Store Upload Endpoint (customer_user)socfortress CoPilot
- CVE-2026-119662Songloft 2.9.0 before 2.13.6 Hardcoded Admin Credentials in Embedded Backendsongloft-org songloft
- CVE-2026-119656CoreShop through 1.5.5 SQL Injection via order Parameter in Agent/GetGoodsPageListCoreUnion CoreShop
- CVE-2026-119655CoreShop through 1.5.5 SQL Injection via order Parameter in GetGoodsPageListCoreUnion CoreShop
- CVE-2026-119654DataCap through 2025.1.1 Privilege Escalation via allocationRole Missing Authorizationdevlive-community DataCap
- CVE-2026-119649Orchard CMS 1.10.3 through 1.11 Improper Authorization via Media Library Folder Permission CheckOrchardCMS Orchard
- CVE-2026-119645ZenTao PMS through 22.6 Missing Authorization via doc.ajaxGetDoceasysoft zentaopms
- CVE-2026-119680Stored Cross-Site Scripting (XSS) in SharePoint Manager Plus Chart FeatureManageEngine SharePoint Manager Plus
- CVE-2026-112347Kirki WordPress Plugin < 6.4.1 Broken Object-Level Access Control via Page APIThemeum Kirki
- CVE-2026-91912Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Use of Hard-coded Cryptographic Key vulnerability.Dell OpenManage Enterprise
- CVE-2026-119528Gimp: gimp: stack buffer overflow in psd image resource header loaderRed Hat Enterprise Linux
- CVE-2026-91913Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS…Dell OpenManage Enterprise
- CVE-2026-86715Clear Text Storage of Password in Crypttech's Vatos DLPCrypttech Crypto and Informatics Technologies Industry and…
- CVE-2026-91914Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Authentication Bypass by Spoofing vulnerability.Dell OpenManage Enterprise
- CVE-2026-119578MONAI 1.6.0 before 1.6.1 Code Execution via Auto3DSeg algo_from_json()Project-MONAI MONAI
- CVE-2026-119577ArcadeDB before 26.10.2 Improper Session Revocation in Wire-Protocol ConnectionsArcadeData arcadedb
- CVE-2026-119575ArcadeDB 26.8.1 before 26.10.2 SSRF via ALTER DATABASE LOAD CSV Block ListArcadeData arcadedb
- CVE-2026-119574Traefik 3.2.0 before 3.7.15 FastProxy Data Race Denial of Servicetraefik
- CVE-2026-119572Traefik 3.7.0-ea.1 before 3.7.15 mTLS Bypass via Ingress NGINX Providertraefik
- CVE-2026-118992CallBackery versions before 0.62.0 for Perl allow OS command execution via sqlite3 shell commands in a restored configuration backupCallBackery
- CVE-2026-75882Improper access control vulnerability in ESET Encryption products for WindowsESET spol. s.r.o. ESET Endpoint Encryption · ESET spol. s.r…
- CVE-2026-91917Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Input Validation vulnerability.Dell OpenManage Enterprise
- CVE-2026-111503Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL…Dell OpenManage Enterprise
- CVE-2026-111504Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Command ('Argument…Dell OpenManage Enterprise
- CVE-2026-101210Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS…Dell OpenManage Enterprise
- CVE-2026-110972Use of Client-Side Authentication in PłatnikZakład Ubezpieczeń Społecznych Płatnik
- CVE-2026-110971Weak password encoding in PłatnikZakład Ubezpieczeń Społecznych Płatnik
- CVE-2026-101213Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Privilege Management vulnerability.Dell OpenManage Enterprise
- CVE-2026-101214Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS…Dell OpenManage Enterprise
- CVE-2026-111505Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS…Dell OpenManage Enterprise
- CVE-2025-68394SQL Injection in ProtectelARKETEAM PROTECTELMAJ · ARKETEAM BDF
- CVE-2025-68393SQL Injection in ProtectelARKETEAM PROTECTELMAJ · ARKETEAM BDF
- CVE-2026-119586SQLite CLI through 3.54.1 Command Injection via .recover OutputSQLite
- CVE-2026-119561phpMyAdmin through 5.2.3 WebAuthn Two-Factor Authentication Bypass via CustomServerphpMyAdmin
- CVE-2026-119559OpenLiteSpeed through 1.9.4 mTLS Bypass via HTTP/3 SNI and Host Mismatchlitespeedtech openlitespeed
- CVE-2026-119557n8n from 2.14.0 through 2.46.3 Path Traversal via Databricks Noden8n-io n8n
- CVE-2026-119553Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Blackboard Import Path TraversalMoodle Project moodle
- CVE-2026-119551Jellyfin through 12.4 Authorization Bypass via GET /Items/Suggestionsjellyfin
- CVE-2026-119549Jellyfin through 12.4 SSRF via Gzip-Compressed Data URI in SVG Profile Imagesjellyfin
- CVE-2026-119426phpMyAdmin through 5.2.3 CSRF Token Bypass via Non-AJAX POST to /sqlphpMyAdmin
- CVE-2026-119422Hyperswitch before 1.128.0 Webhook Authentication Bypass via Worldpayxml Connectorjuspay hyperswitch
- CVE-2026-119421Hyperswitch through 1.128.0 Missing Authorization in Payout Confirmationjuspay hyperswitch
- CVE-2026-119420Lago through 1.55.0 Authentication Bypass via acceptInvite GraphQL Mutationgetlago lago
- CVE-2026-119409OPNsense before 26.7.8 Root Command Injection via Firmware Mirror Settingopnsense core
- CVE-2026-119408n8n before 2.42.6, 2.43.3 and 3.0.1 Code Execution Outside Task Runner Isolation via Deprecated Function Nodesn8n-io n8n
- CVE-2026-119407Element Web and Element Desktop before 1.12.32 Forced Logout via Guest Credential URL Parameterselement-hq element-web · element-hq element-desktop
- CVE-2026-119379SQLite before 3.54.0 Heap Buffer Overflow via Session Extension sessionUpdateFind()SQLite
- CVE-2026-119374SQLite before 3.54.0 Heap Buffer Overflow via FTS5 fts5DoSecureDelete()SQLite
- CVE-2026-119373SQLite before 3.54.0 FTS5 Heap Buffer Overflow via fts5MergeRowidLists()SQLite
- CVE-2026-22110Missing authentication check on POST/PUT requestsDelta Electronics Delta UFC500
- CVE-2026-22105Use of default password based on serial numberDelta Electronics Delta UFC500
- CVE-2026-22109Default WebUI passwords stored in plaintextDelta Electronics Delta UFC500
- CVE-2026-85268Cross-Site Scripting (XSS) in Firebase Auth Handler via Malicious Bundle IDGoogle Cloud Identity Platform and Firebase Authentication
- CVE-2026-14467Display of information in the Forocoches comments editorForocoches comments editor
- CVE-2026-59387Broken access control restriction in Cloud Controller APICloud Foundry CAPI · Cloud Foundry cf-deployment
- CVE-2026-110732AI Engine – The Chatbot, AI Framework & MCP for WordPress <= 3.8.6 - Missing Authorization to Administrator Account Takeover via…tigroumeow AI Engine – MCP Server & AI Chatbot for WordPres…
- CVE-2026-116622Food Store <= 1.5.5 - Unauthenticated Stored Cross-Site Scripting via 'service_time' Cookiewpscripts Food Store – Online Food Delivery & Pickup
- CVE-2026-97645Gravity Forms <= 3.1.2 - Unauthenticated Stored Cross-Site Scripting via List FieldGravity Forms
- CVE-2026-89435Formidable Forms <= 6.35 - Authenticated (Subscriber+) Arbitrary Plugin Installation via 'file_url' Parameterstrategy11team Formidable Forms – Contact Form, Survey, Qui…
- CVE-2026-90437Gravity Forms <= 3.1.1 - Unauthenticated Stored Cross-Site Scripting via Post Excerpt / Post Custom Field / Rich-Text Paragraph Field ValuesGravity Forms
- CVE-2026-117571WP Visitor Statistics (Real Time Traffic) < 8.8 - Unauthenticated Stored XSS via Tracker Device ParametersWP Visitor Statistics
- CVE-2026-114443Security by CleanTalk < 2.191 - Unauthenticated Authentication Bypass via Authenticator App CodeSecurity Plugin, Firewall & Malware Scanner with Auto Remov…
- CVE-2026-114422Enable Media Replace 4.1.4 - 4.2.2 - Unauthenticated PHP Object Injection via Metadata ReplacerEnable Media Replace
- CVE-2026-104368Export and Import Users and Customers <= 2.7.5 - Authenticated (Subscriber+) Privilege Escalation via CSV Escape-Character Mismatch in…webtoffee Export and Import Users and Customers
- CVE-2026-103963Glib-networking: unbounded tls 1.3 session ticket queue growth in glib-networking allows remote denial of serviceRed Hat Enterprise Linux
- CVE-2026-119271Use after free in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via…Google Chrome
- CVE-2026-119270Improper input validation in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute…Google Chrome
- CVE-2026-119269Use after free in Blink in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via…Google Chrome
- CVE-2026-119268Integer overflow in Editing in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside…Google Chrome
- CVE-2026-119267Memory corruption in DOM in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside…Google Chrome
- CVE-2026-119266Use after free in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the…Google Chrome
- CVE-2026-119265Memory corruption in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside…Google Chrome
- CVE-2026-119264Memory corruption in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside…Google Chrome
- CVE-2026-119262Improper input validation in V8 in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code…Google Chrome
- CVE-2026-119260Use after free in Frames in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox…Google Chrome
- CVE-2026-76031Use after free in Input in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via…Google Chrome
- CVE-2026-76030Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code…Google Chrome
- CVE-2026-76029Memory corruption in Network in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code…Google Chrome
- CVE-2026-76028Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the…Google Chrome
- CVE-2026-76026Memory corruption in Autofill in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the…Google Chrome
- CVE-2026-76025Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the…Google Chrome
Medium, low and unrated 423
- CVE-2026-77152Field Collection for Drupal 7 access bypass via missing parent entity access checkField Collection for Drupal
- GHSA-2WRX-84QJ-4PCGanacrolix torrent has unbounded recursion in the bencode decoder that causes stack-overflow crash and CPU-exhaustion DoSgithub.com/anacrolix/torrent
- CVE-2026-63410secp256k1-native: Compiler-reconstructed secret-dependent branch in native scalar multiplicationsgbett secp256k1-native
- CVE-2026-63400Coop sessions are not invalidated on password resetroostorg coop
- CVE-2026-63401Coop has cross-org IDOR in addAccessibleQueuesForUser / removeAccessibleQueuesForUserroostorg coop
- CVE-2026-63399Coop: Unauthenticated org provisioning via GraphQL Mutation.createOrgroostorg coop
- CVE-2026-63402i18next: Shared built-in corruption through inherited-key deepExtend recursioni18next
- CVE-2026-61725sevenz-rust2: unchecked 7z entry paths permit traversal and absolute-path file overwriteshasenbanck sevenz-rust2
- CVE-2026-63121Kubewarden trusted-repos-policy: uppercase registry host bypasses registry/image deny ruleskubewarden policies
- CVE-2026-62277LubeLogger: IDOR in PrintRecordStickers Allows Unauthenticated Cross-User Vehicle Record Exfiltrationhargata lubelog
- CVE-2026-55614uhttpd vulnerable to HTTP request smuggling via case-sensitive Transfer-Encoding matchingopenwrt uhttpd
- CVE-2026-55612uhttpd vulnerable to HTTP request smuggling via invalid chunk-length state resetopenwrt uhttpd
- CVE-2026-55613uhttpd: HTTP request smuggling via ubus POST body parse-error desyncopenwrt uhttpd
- CVE-2026-62347Element Call exposes shared passwords in logselement-hq element-call
- CVE-2026-63115ActivityPub Undo handler can unfollow or remove reposts on behalf of other accountsTryGhost ActivityPub
- CVE-2026-55146LORIS has incorrect access checks in issue_trackeraces Loris
- CVE-2026-55147LORIS has incorrect access checks in API for Imaging Browseraces Loris
- CVE-2026-62991Shopper: customer detail IDOR exposes administrator and staff recordsshopperlabs shopper
- CVE-2026-59993Picotls has NULL pointer dereference during handshake, when running as a clienth2o picotls
- CVE-2026-62860Picsou vulnerable to login timing attackZoeille picsou-finance
- CVE-2026-54610LibreDWG: const-input mutation and crash in bit_TV_to_utf8 error handlinglibredwg
- CVE-2026-62250LibreDWG: unbounded allocation in pre-R13 DWG entity decodinglibredwg
- CVE-2026-62254LibreDWG: excessive class-decoding reallocation in R13-R2000 DWG parsinglibredwg
- CVE-2026-119343Stirling-PDF: AI create-pdf-from-html-agent skips HTML sanitization enabling WeasyPrint SSRF and local file readStirling-Tools Stirling-PDF
- CVE-2026-119342Stirling-PDF: SVG→PDF local file read (LFI) via SVG-sanitizer and Batik same-origin bypassStirling-Tools Stirling-PDF
- CVE-2026-117645Phoenix.HTML vulnerable to attribute injection via unvalidated attribute names in attributes_escape/1phoenixframework phoenix_html
- CVE-2026-119341Tesseract: File-controlled pointers still reach `delete` in ADAPT_CLASS_STRUCT destructortesseract-ocr tesseract
- CVE-2026-119340Tesseract: GENERIC_2D_ARRAY DeSerializeSize signed integer comparison bypass allows negative dimensionstesseract-ocr tesseract
- CVE-2026-62300Filecoin Pin: Unbounded DAG pinning can exhaust filecoin-pin server resourcesfilecoin-project filecoin-pin
- CVE-2026-119339Tesseract: Crafted LSTM model (`WeightMatrix` mode byte) triggers `ASSERT_HOST` abort in `WeightMatrix::DeSerializeOld` under `FAST_FLOAT`…tesseract-ocr tesseract
- CVE-2026-119338Tesseract: Double free and use after free in the PAGE XML renderer on right-to-left pagestesseract-ocr tesseract
- CVE-2026-55098Arc: DuckDB I/O aliases bypass database RBAC after CVE-2026-47735Basekick-Labs arc
- CVE-2026-62335OpenVM's OpenVmHalo2Verifier accepts non-canonical app commitmentsopenvm-org openvm
- CVE-2026-119334Pi-hole: file:// adlist read check and curl can resolve different filespi-hole
- CVE-2026-62337SNARK Verifier: Halo 2 aggregation mishandles point-at-infinity proof elementsaxiom-crypto snark-verifier
- CVE-2026-61618SNARK Verifier: noncanonical accumulator limb decodingaxiom-crypto snark-verifier
- CVE-2026-116252pgAdmin 4: Materialized view refresh redirects its connection through a crafted database namepgadmin.org pgAdmin
- CVE-2026-116251pgAdmin 4: A user's other sessions survive a change of their passwordpgadmin.org pgAdmin
- CVE-2026-116250pgAdmin 4: Files opened in a storage directory follow a symbolic link, hard link or FIFO planted after the containment checkpgadmin.org pgAdmin
- CVE-2026-116248pgAdmin 4: Non-administrators can share a server with every userpgadmin.org pgAdmin
- CVE-2026-116246pgAdmin 4: Server passwords are left in pgAdmin's process environmentpgadmin.org pgAdmin
- CVE-2026-116240pgAdmin 4: File Manager and storage-path tools act on a different path from the one checkedpgadmin.org pgAdmin
- CVE-2026-61694go-xrpl: ParseMPTAmountBinary: positive MPT amount silently decoded as negative (int64 wrap)LeJamon go-xrpl
- CVE-2026-119330Immich: A regular user can create SharedLink for album/asset belonging to another user through CreateSharedLink APIimmich-app immich
- CVE-2026-119329Immich: Partner "view-only" sharing leaks GPS coordinates of the sharer's archived assets via GET /api/map/markersimmich-app immich
- CVE-2026-119328Immich: Unauthenticated filesystem path injection (arbitrary directory write + recursive delete) in the machine-learning serviceimmich-app immich
- CVE-2026-115828Secret Server device validation errorDelinea Secret Server
- CVE-2026-55493HotCRP: comment-author search exposes anonymous commenter identitieskohler hotcrp
- CVE-2026-119730Maxthon Browser for Android < 7.5.8.103 Fullscreen Address Bar SpoofingMaxthon Technology Limited Maxthon Browser for Android
- CVE-2026-7005WIT SynApps Runtime 1.4.11 Browser-Mediated SSRF via Controller OnboardingWIT SynApps Runtime
- CVE-2026-7004WIT SynApps Runtime 1.4.11 Reflected XSS via LINK ParameterWIT SynApps Runtime
- CVE-2026-7003WIT SynApps Runtime 1.4.11 Hardcoded OAuth Credentials DisclosureWIT SynApps Runtime
- CVE-2026-62303Pistache: DoS via stack exhaustion in REST router path normalization (regex_replace on long slash runs)pistacheio pistache
- CVE-2026-62298asn1c: ASAN crash with decode of open typesmouse07410 asn1c
- CVE-2026-120046Nezha 2.0.0 before 2.4.0 Startup NULL Pointer Dereference via Orphaned Service Historynezhahq nezha
- CVE-2026-120007NodeBB 1.18.0 through 4.16.5 Authorization Bypass via /register/complete uidNodeBB
- CVE-2026-119842Gst-plugins-base: gst-plugins-base: null-pointer dereference in mdvdsub subtitle parser via missing closing-brace checkRed Hat Enterprise Linux
- CVE-2026-119727Gst-plugins-bad: gst-plugins-bad: h.265 sps scc palette predictor array overflow via integer underflow in bounds computationRed Hat Enterprise Linux
- CVE-2026-61848Crass: Non-ASCII characters cause superlinear CPU consumptionrgrove crass · crass
- CVE-2026-61847Crass: A large number of adjacent CSS comments can trigger a SystemStackErrorrgrove crass · crass
- CVE-2026-61846Crass: Deeply nested CSS blocks and functions can trigger a SystemStackError or excessive memory usagergrove crass · crass
- CVE-2026-119729Gst-plugins-base: gst-plugins-bad: gst-plugins-base/gst-plugins-bad: integer overflow in av1 leb128 parser allows denial of serviceRed Hat Enterprise Linux
- CVE-2026-119728Gst-plugins-bad: gst-plugins-bad: null pointer dereference in h.264 mvc sps cleanup during parse failureRed Hat Enterprise Linux
- CVE-2026-116854WordPress WP Customer Area plugin <= 8.4.0 - Cross Site Scripting (XSS) vulnerabilityAguila Technologies WP Customer Area
- CVE-2026-116853WordPress GiveWP plugin <= 4.19.0.1 - Broken Access Control vulnerabilityNexcess GiveWP
- CVE-2026-116410WordPress Masteriyo - LMS plugin <= 3.4.3 - Arbitrary Content Deletion vulnerabilityMasteriyo - LMS
- CVE-2026-115947WordPress HUSKY plugin <= 1.4.6 - Sensitive Data Exposure vulnerabilityRealMag777 HUSKY
- CVE-2026-115604WordPress SureDash plugin <= 1.12.3 - Arbitrary File Deletion vulnerabilityBrainstorm Force SureDash
- CVE-2026-114711WordPress MultiVendorX plugin <= 5.0.20 - Cross Site Scripting (XSS) vulnerabilityMultiVendorX
- CVE-2026-107868WordPress YITH WooCommerce Product Add-Ons plugin <= 4.34.0 - Bypass Vulnerability vulnerabilityYITHEMES YITH WooCommerce Product Add-Ons
- CVE-2026-54854WordPress Profile Builder plugin <= 4.0.5 - Privilege Escalation vulnerabilityCozmoslabs Profile Builder
- CVE-2026-54850WordPress Booking and Rental Manager plugin <= 2.8.2 - Broken Access Control vulnerabilitymagepeopleteam Booking and Rental Manager
- CVE-2026-27061WordPress User Registration plugin <= 5.3.0 - Cross Site Scripting (XSS) vulnerabilitywpeverest User Registration
- CVE-2026-61840Quest Bot: Server Side Request Forgery in the Image to GIF Feature Lets Any Server Member Reach Internal Servicesvantern-org questbot
- CVE-2026-62056WordPress Fluent CRM plugin <= 3.2.6 - Broken Access Control vulnerabilityWP ManageNinja Fluent CRM
- CVE-2026-62023WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.26 - Broken Access Control vulnerabilityUnlimited Elements For Elementor
- CVE-2026-62019WordPress BookIt plugin <= 2.6.0.6 - Broken Access Control vulnerabilityLiquid Web / StellarWP BookIt
- CVE-2026-104674WordPress Booktics plugin <= 1.0.31 - Broken Access Control vulnerabilityArraytics Booktics
- CVE-2026-62047WordPress Event Tickets plugin <= 5.30.2 - Broken Access Control vulnerabilityLiquid Web / StellarWP Event Tickets
- CVE-2026-39739WordPress Ultimate Addons for Elementor - Lite plugin <= 2.9.5 - Cross Site Scripting (XSS) vulnerabilityBrainstorm Force Ultimate Addons for Elementor - Lite
- CVE-2026-73322Apache Pinot: Incorrect authorization in the single-stage query engine allows reading unauthorized dimension tables via lookup()Apache Software Foundation Apache Pinot
- CVE-2026-52710WordPress GIFTiT – Free Gifts for WooCommerce plugin <= 4.5 - Content Injection vulnerabilityithemelandco GIFTiT – Free Gifts for WooCommerce
- CVE-2026-62057WordPress Divi Contact Form 7 plugin <= 4.1.0 - Content Injection vulnerabilityFahim Reza Divi Contact Form
- CVE-2026-62121WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.26 - Local File Inclusion vulnerabilityUnlimited Elements For Elementor
- CVE-2026-62122WordPress Booktics plugin <= 1.0.31 - Broken Access Control vulnerabilityArraytics Booktics
- CVE-2026-119117Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for JavaAWS amazon-kinesis-producer
- CVE-2026-11962037954679 cak-filemanagement-system add_logs.php move_uploaded_file unrestricted upload37954679 cak-filemanagement-system
- CVE-2026-119086Missing type validation in xQueueSelectFromSet in FreeRTOS-KernelFreeRTOS-Kernel
- CVE-2026-69446Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityMicrosoft Edge
- CVE-2026-119763changelog.com before commit 7b35e829 Missing Authorization via Preview Routesthechangelog changelog.com
- CVE-2026-119761Axigen Mail Server before 10.6.39 and 10.7.1 Stored XSS via Sender Display NameAxigen Mail Server
- CVE-2026-119113GeoDirectory <= 2.8.199 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'post_content' Parameterpaoltaia GeoDirectory – WP Business Directory Plugin and Cl…
- CVE-2026-115869Themify Builder <= 7.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'variations' Repeater Fieldthemifyme Themify Builder
- CVE-2026-109984FV Flowplayer Video Player <= 7.5.55.7212 - Unauthenticated Stored Cross-Site Scripting via 'ad' Shortcode Attribute in Commentsfoliovision FV Flowplayer Video Player
- CVE-2026-115820Majestic Support <= 1.2.2 - Authenticated (Subscriber+) SQL Injection via 'columns' Parameterahmadmj Majestic Support – The Leading-Edge Help Desk & Cus…
- CVE-2026-109592OpenStation: Desktop Windows, Dock & Virtual Desktops for WP Admin <= 1.1.16 - Missing Authorization to Authenticated (Subscriber+)…wordpressdotorg OpenStation – Admin Dashboard Notes, Custom…
- CVE-2026-102918Redux Framework <= 4.5.15 - Authenticated (Subscriber+) Stored Cross-Site Scripting via multi_media Field and Client-Supplied checkuser_iddavidanderson Redux Framework
- CVE-2026-102905Ad Inserter <= 2.8.19 - Unauthenticated Arbitrary Shortcode Execution via 's' Search Parameterspacetime Ad Inserter – Ad Manager & AdSense Ads
- CVE-2026-110533FV Flowplayer Video Player <= 7.5.55.7212 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Shortcode Attributesfoliovision FV Flowplayer Video Player
- CVE-2026-104739JS Help Desk <= 5.0.1 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'support_custom_img' Parameterrabilal JS Help Desk – AI-Powered Support & Ticketing System
- CVE-2026-118635GeoDirectory <= 2.8.198 - Unauthenticated Shortcode Injection via 'pagination_info' Parameterpaoltaia GeoDirectory – WP Business Directory Plugin and Cl…
- CVE-2026-9239Meow Gallery <= 5.5.1 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Alt Text (aria-label attribute)tigroumeow Meow Gallery
- CVE-2026-116552Like Button Rating ♥ LikeBtn <= 2.6.64 - Unauthenticated Stored Cross-Site Scripting via 'Client-IP' HeaderLike Button Rating ♥ LikeBtn
- CVE-2026-110001FV Flowplayer Video Player <= 7.5.55.7212 - Unauthenticated Stored Cross-Site Scripting via 'align' Shortcode Attributefoliovision FV Flowplayer Video Player
- CVE-2026-13747Meow Gallery <= 5.5.4 - Missing Authorization to Authenticated (Author+) Information Disclosure via fetch_posts REST Endpointtigroumeow Meow Gallery
- CVE-2026-119176CP Multi View Events Calendar <= 1.4.43 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'Subject' Parametercodepeople CP Multi View Events Calendar
- CVE-2026-11961937954679 cak-filemanagement-system save_student.php mysqli_query sql injection37954679 cak-filemanagement-system
- CVE-2026-50000SecureDrop: API session token reuse against the Journalist Interface web UIfreedomofpress securedrop
- CVE-2026-61806Frappe LMS allows unpublished certificate accessfrappe lms
- CVE-2026-61805Frappe LMS: Quiz result manipulation and cross-user submission forgeryfrappe lms
- CVE-2026-61803Frappe LMS: Client-controlled price allows paid-course / certificate purchase for an arbitrary amountfrappe lms
- CVE-2026-55551ZAC: Missing per-zaaktype authorization on by-ID decision and process readsinfonl dimpact-zaakafhandelcomponent
- CVE-2026-39375Frappe LMS has Stored XSS in Course Metafrappe lms
- CVE-2026-119300Wekan: ReDoS via Unescaped User Input in RegExpwekan
- CVE-2026-119299gopacket: SCTP chunk sub-decoder out-of-bounds panics on crafted segmentsgopacket
- CVE-2026-119466WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Cross Site Request Forgery (CSRF) vulnerabilityWPExperts APIExperts Square for WooCommerce
- CVE-2026-119298croc: Overwrite-confirmation bypass via a crafted "croc-stdin-" filename on receiveschollz croc
- CVE-2026-119148Unvalidated parent-supplied AWS Region in AWS aws-nitro-enclaves-sdk-c allows impersonation of the enclave's AWS KMS endpointaws-nitro-enclaves-sdk-c
- CVE-2026-104623Authorization bypass on the local cluster shell endpoint allows an unauthorized Rancher user to obtain a shell pod on the management clusterSUSE Rancher
- CVE-2026-62055WordPress Event Tickets plugin <= 5.30.2 - Broken Access Control vulnerabilityLiquid Web / StellarWP Event Tickets
- CVE-2026-119365WordPress Media Player Addons for Elementor – Media Player widget for WP plugin <= 1.1.10 - Cross Site Scripting (XSS) vulnerabilitybPlugins Media Player Addons for Elementor – Media Player w…
- CVE-2026-119367WordPress The Events Calendar plugin <= 6.18.2 - Broken Access Control vulnerabilityLiquid Web / StellarWP The Events Calendar
- CVE-2026-61789DBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validationbytebase dbhub
- CVE-2026-119291zuke setup and zuke import follow symbolic links planted at scaffold names, allowing writes outside the target directoryzuke-build zuke
- CVE-2026-105454Stored XSS via crafted URLs in HTML ticket content in Request TrackerBest Practical Solutions Request Tracker
- CVE-2026-105455Stored XSS via related ticket subject on RTIR Split and Create Incident formsBest Practical Solutions RT for Incident Response
- CVE-2026-62141WordPress Fluent CRM plugin <= 3.2.6 - Broken Access Control vulnerabilityWP ManageNinja Fluent CRM
- CVE-2026-105456Stored XSS via HTML scrubber rule in RTIRBest Practical Solutions RT for Incident Response
- CVE-2026-119721Blender before 4.5.15 and 5.x before 5.2.3 Out-of-Bounds Read via blo_bhead_id AccessorsBlender Foundation Blender
- CVE-2026-119720Blender before 4.5.15 and 5.x before 5.2.3 Out-of-Bounds Read via GLOB BlockBlender Foundation Blender
- CVE-2026-119715NocoDB before 2026.08.0 Clickjacking via Missing Frame-Control Headersnocodb
- CVE-2026-119714My Calendar 3.8.8 before 3.8.11 Unauthenticated Shortcode Injection via mcs Parameterjoedolson My Calendar - Accessible Event Manager
- CVE-2026-119712PipesHub before 0.10.0 SSRF via Image URLs in Indexed Documentspipeshub-ai
- CVE-2026-119711PipesHub before 0.10.0 Rate Limit Bypass via Spoofed X-Forwarded-For Headerpipeshub-ai
- CVE-2026-119709Grimoire before 1.0.0 Unauthenticated SSRF via /api/fetch-metadatagoniszewski grimoire
- CVE-2026-119705SerpBear before 3.1.1 Missing Authentication via POST /api/notifytowfiqi serpbear
- CVE-2026-119704Bastille through 1.4.4 Jail Escape via Symlink Following in cp, rcp, jcpBastilleBSD bastille
- CVE-2026-119703xiaozhi-esp32-server through 0.9.8 Authentication Bypass via Spoofed Device-ID Headerxinnan-tech xiaozhi-esp32-server
- CVE-2026-119702WPGraphQL before 2.24.1 Missing Authorization via createComment MutationWPGraphQL
- CVE-2026-119701WPGraphQL before 2.24.1 Email Flooding via Aliased sendPasswordResetEmail MutationsWPGraphQL
- CVE-2026-119700WPGraphQL before 2.24.2 Object Existence Disclosure via Media and Comment MutationsWPGraphQL
- CVE-2026-119699WPGraphQL Smart Cache before 2.3.3 Unbounded Persisted Query Storage DoSWPGraphQL Smart Cache
- CVE-2026-104063Scribus before 1.6.7 Out-of-Bounds Read via PICT Planar Image DataScribus
- CVE-2026-119369WordPress The Events Calendar plugin <= 6.18.2 - Cross Site Scripting (XSS) vulnerabilityLiquid Web / StellarWP The Events Calendar
- CVE-2026-119479WordPress JetFormBuilder plugin <= 3.6.7.1 - Content Injection vulnerabilityCrocoblock JetFormBuilder
- CVE-2026-116407WordPress Webba Booking plugin <= 6.5.4 - Broken Access Control vulnerabilityWebba Plugins Webba Booking
- CVE-2026-119368WordPress The Events Calendar plugin <= 6.18.2 - Broken Access Control vulnerabilityLiquid Web / StellarWP The Events Calendar
- CVE-2026-119482WordPress JetFormBuilder plugin <= 3.6.7.1 - Broken Access Control vulnerabilityCrocoblock JetFormBuilder
- CVE-2026-46499Collabora Online: Read-only session authorization bypass permits live document editsCollaboraOnline online
- CVE-2026-48164Collabora Online: Reflected HTML injection through host_session_idCollaboraOnline online
- GHSA-F3FJ-9625-RV3Mcharmbracelet/soft-serve: Race in `SetPrivate` leaves a private repository readable by unauthenticated usersgithub.com/charmbracelet/soft-serve
- GHSA-FGXM-5HVV-X4VHcharmbracelet/soft-serve HTTP responses disclose the existence and names of private repositoriesgithub.com/charmbracelet/soft-serve
- CVE-2026-116860WordPress Timetics plugin <= 1.0.65 - Broken Access Control vulnerabilityArraytics Timetics
- CVE-2026-119370WordPress The Events Calendar plugin <= 6.18.2 - Cross Site Scripting (XSS) vulnerabilityLiquid Web / StellarWP The Events Calendar
- CVE-2026-65444WordPress Blocksy Companion plugin <= 2.1.60 - Cross Site Scripting (XSS) vulnerabilityCreative Themes Blocksy Companion
- CVE-2026-44344Chamilo LMS: Conditional PHP execution through vendored QuickForm evalchamilo-lms
- CVE-2026-45141Chamilo LMS: CSRF in destructive skill-management AJAX actionschamilo-lms
- CVE-2015-20130Netsweeper < 4.0.11 / 4.1.5 Reflected XSS via view_server_log.phpNetsweeper
- CVE-2026-111487Out-of-bounds write vulnerability in the assimp scene import plugin of Qt3D impacts Qt FrameworkQt Framework
- CVE-2026-119665WHartTest 2.2.0 through 2.8.1 Missing Authorization via task_center Scheduled-Task APIsMGdaasLab WHartTest
- CVE-2026-119664Tamery (Conar) 0.26.1 before 0.99.0 Authorization Bypass via chatsMessages.updatewannabespace tamery
- CVE-2026-119663Tamery (Conar) 0.32.0 before 0.99.0 Broken Authorization via connectionsResources.createwannabespace tamery
- CVE-2026-119661ShowDoc through 3.9.5 Authorization Bypass via paramDescLib deleteEntriesstar7th ShowDoc
- CVE-2026-119659Blossom through 1.17.1 Authorization Bypass via Folder Endpointsblossom-editor Blossom
- CVE-2026-119658PowerDNS-Admin through 2026.08.1 Authorization Bypass via /domain/<domain_name>/updatePowerDNS-Admin
- CVE-2026-119657FilePress through 3.0.1 Missing Authorization in PicHome Library Folder Operationszyx0814 FilePress
- CVE-2026-119653Nging through 5.3.5 Directory Listing Disclosure via /user/autocomplete_pathadmpub nging
- CVE-2026-119652HuLa-Server through 3.0.7 IDOR via /user/friend/page Friend List DisclosureHuLaSpark HuLa-Server
- CVE-2026-119651HuLa-Server through 3.0.7 IDOR via /feed/del Moment DeletionHuLaSpark HuLa-Server
- CVE-2026-119650HuLa-Server through 3.0.7 IDOR via /privacy Endpoint in PrivacyControllerHuLaSpark HuLa-Server
- CVE-2026-119648BlueKing CMDB through 3.14.6 Missing Authorization via /api/v3/hosts/search/asstdetailTencentBlueKing bk-cmdb
- CVE-2026-119647RuoYi-Vue-Plus through 6.0.0 Data-Scope Bypass via /system/user/list/dept/{deptId}dromara RuoYi-Vue-Plus
- CVE-2026-119646Open Web Analytics before 1.14.1 Cross-Site Data Disclosure via REST Report APIOpen Web Analytics
- CVE-2026-119644Blossom through 1.17.1 Authorization Bypass via Picture Delete and Star Endpointsblossom-editor Blossom
- CVE-2026-100355Campfire vulnerable to SSRF via incomplete private-network denylist in the link-unfurl guardbasecamp once-campfire
- CVE-2026-112348Kirki WordPress Plugin < 6.2.5 reCAPTCHA Bypass via Missing TokenThemeum Kirki
- CVE-2026-119542Org.infinispan/infinispan-query: infinispan: deeply nested ickle queries can trigger a stackoverflowerrorRed Hat build of Apache Camel 4 for Quarkus · Red Hat Da… +2
- CVE-2026-111498OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Resource Locking vulnerability.Dell OpenManage Enterprise
- CVE-2026-111499Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability.Dell OpenManage Enterprise
- CVE-2026-111500Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Missing Authentication for Critical Function vulnerability.Dell OpenManage Enterprise
- CVE-2026-115683epiphany: TLS certificate warning bypass via race in tlsErrorPage message handlerGNOME Epiphany
- CVE-2026-91915Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements in Output Used by a…Dell OpenManage Enterprise
- CVE-2026-119602libmspack through 0.11alpha Uninitialized Memory Disclosure via MS-ZIP Decompressor Windowkyz libmspack
- CVE-2026-119601AFFLIB through 3.7.22 Heap Out-of-Bounds Write in af_get_pagesshock AFFLIB
- CVE-2026-119600tcpflow through 1.6.1 Out-of-Bounds Read via TCP Demultiplexer Payload Lengthsimsong tcpflow
- CVE-2026-119599AxonHub through 1.0.0-beta11 Privilege Escalation via Service Account API Key Scopeslooplj AxonHub
- CVE-2026-119598Miaomiaowu before 0.9.3 Cross-User Proxy Provider Config Disclosure via external_subscription_idiluobei miaomiaowu
- CVE-2026-119596UNIT3D through 9.2.0 Private Playlist Disclosure via Playlist Zip DownloadHDInnovations UNIT3D
- CVE-2026-119576ArcadeDB from 21.12.1 before 26.10.2 GraphQL Schema Replacement via Read-Only Query EndpointArcadeData arcadedb
- CVE-2026-119573Traefik 3.7.11 before 3.7.15 Cross-Namespace Authorization Bypass via auth-tls-secrettraefik
- CVE-2026-119571Parse Server 9.7.0 before 9.10.5-alpha.10 Installation Update Misdirection via Installation IDparse-community parse-server
- CVE-2026-119570Parse Server 9.7.0 before 9.10.5-alpha.7 Protected Field Exposure in Save Responsesparse-community parse-server
- CVE-2026-119569Parse Server 9.0.0 before 9.10.5-alpha.9 Prototype Pollution Denial of Serviceparse-community parse-server
- CVE-2026-118986CallBackery versions before 0.62.0 for Perl allow session cookie forgery via a signing secret generated with rand()CallBackery
- CVE-2026-118987CallBackery versions before 0.62.0 for Perl accept session cookies of any age sent in the X-Session-Cookie headerCallBackery
- CVE-2026-118990CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when taking a configuration…CallBackery
- CVE-2026-118991CallBackery versions before 0.62.0 for Perl encrypt configuration backups with the padded password as the AES keyCallBackery
- CVE-2026-118993CallBackery versions before 0.62.0 for Perl allow denial of service via the request path interpolated as a regular expression under CGI…CallBackery
- CVE-2026-118994CallBackery versions before 0.62.0 for Perl allow log injection via newlines in the login nameCallBackery
- CVE-2026-118995CallBackery versions before 0.62.0 for Perl accept unintended values in form fields checked by createRxValidatorCallBackery
- CVE-2026-118996CallBackery versions before 0.62.0 for Perl send users their own password hash and the admin-only user note via getUserConfigCallBackery
- CVE-2026-13576CallBackery versions before 0.62.0 for Perl store user passwords as unsalted HMAC-SHA1 hashesCallBackery
- CVE-2026-119038Business::GoCardless versions before 1.01 for Perl complete redirect flows without checking the session token, letting a leaked redirect…Business-GoCardless
- CVE-2026-119037Business::GoCardless versions before 1.01 for Perl accept forged webhooks when a configured webhook secret is undef or emptyBusiness-GoCardless
- CVE-2026-119036Business::GoCardless versions before 1.01 for Perl allow memory exhaustion by flattening legacy webhook payloads before checking their…Business-GoCardless
- CVE-2026-116128Starlet versions from 0.20 before 0.33 for Perl allow memory exhaustion via unbounded buffering when decoding chunked request bodiesStarlet
- CVE-2026-116127Starlet versions before 0.33 for Perl send a body in responses to HEAD requests, corrupting the next response on a persistent or pipelined…Starlet
- CVE-2026-115866Starlet versions from 0.20 before 0.33 for Perl allow CPU exhaustion via regular expression backtracking when decoding chunked request…Starlet
- CVE-2026-115865Starlet versions before 0.33 for Perl allow a request declaring a large Content-Length to kill a worker by exhausting memoryStarlet
- CVE-2026-116130HTTP::Parser::XS versions before 0.18 for Perl truncate PATH_INFO at an encoded NUL byte in parse_http_requestHTTP-Parser-XS
- CVE-2026-118988CallBackery versions before 0.60.1 for Perl let unauthenticated clients read the POD of any file via path traversal in the /doc routeCallBackery
- CVE-2026-87768DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding secondsDateTime-Lite
- CVE-2026-111501Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Restriction of Excessive Authentication Attempts vulnerability.Dell OpenManage Enterprise
- CVE-2026-111502Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Insufficiently Protected Credentials vulnerability.Dell OpenManage Enterprise
- CVE-2026-112374FOSSBilling before 0.8.9 Login CSRF via Staff Guest Login APIFOSSBilling
- CVE-2026-101209Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Server-Side Request Forgery (SSRF) vulnerability.Dell OpenManage Enterprise
- CVE-2026-105924NULL pointer dereference vulnerability in QCborValue to JSON conversion impacts QtQt
- RUSTSEC-2026-0425`nix-nar`: `Decoder::unpack` writes archive entries outside the destination directory (path traversal)nix-nar
- RUSTSEC-2026-0426LLVM introduces timing-vulnerable optimizations into ML-KEM and ML-DSA operations intended to be constant-timeorion
- RUSTSEC-2026-0428BLAKE2b produces wrong tag when using `reset()` with a different-length keyorion
- CVE-2026-110970Lack of traffic encryption in PłatnikZakład Ubezpieczeń Społecznych Płatnik
- CVE-2025-68395Stored XSS in ProtectelARKETEAM PROTECTELMAJ · ARKETEAM BDF
- CVE-2025-68392Incorrect authorization in ProtectelARKETEAM PROTECTELMAJ · ARKETEAM BDF
- CVE-2025-68391Arbitrary File Upload in ProtectelARKETEAM PROTECTELMAJ · ARKETEAM BDF
- CVE-2026-119591SQLite before 3.54.0 Stack Exhaustion via countOfViewOptimization() in VALUES ClauseSQLite
- CVE-2026-119567vsftpd through 3.0.5 cmds_denied Bypass via RFC 775 Command Aliasesvsftpd
- CVE-2026-119566Prometheus through 3.15.1 Credential Leak via remote_write Cross-Host Redirectsprometheus
- CVE-2026-119565Plausible Analytics through 3.2.1 Mass Assignment via Traffic Change Notification UpdatePlausible Analytics
- CVE-2026-119564Plausible Analytics through 3.2.1 Site Takeover via Exposed Invitation IDsPlausible Analytics
- CVE-2026-119563phpMyAdmin through 5.2.3 Stored XSS via Designer Query History Table NamephpMyAdmin
- CVE-2026-119562phpMyAdmin through 5.2.3 SQL Injection via Central Columns col_extra and col_attributephpMyAdmin
- CVE-2026-119560OPNsense core through 26.7.8 NTP Configuration Injection via GPS and PPS Fudge Fieldsopnsense core
- CVE-2026-119558OpenCart through 4.1.0.4 Payment Bypass via Free Checkout Reward PointsOpenCart
- CVE-2026-119556Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Missing Authorization via core_grades_get_gradeitemsMoodle Project moodle
- CVE-2026-119555Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Information Disclosure via core_grades_get_feedbackMoodle Project moodle
- CVE-2026-119554Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 SQL Injection via enrol_database Course idnumberMoodle Project moodle
- CVE-2026-119552Uptime Kuma through 2.5.8 Race Condition Admin Creation via Setup Handlerlouislam uptime-kuma
- CVE-2026-119550Jellyfin through 12.4 Information Disclosure via GET /Playlists/{playlistId}jellyfin
- CVE-2026-119548Lago through 1.55.0 Cross-Organization Invoice Payment Manipulation via Stripe Webhookgetlago lago
- CVE-2026-119547Forgejo through 15.0.11, 16.0.7, and 17.0.1 Information Disclosure via /api/v1/user/keys/{id}forgejo
- CVE-2026-119546Forgejo through 15.0.11, 16.0.7, and 17.0.1 Path Traversal via restore-repoforgejo
- CVE-2026-119545Forgejo through 15.0.11, 16.0.7, and 17.0.1 SSRF via OpenID Discoveryforgejo
- CVE-2026-119429phpMyAdmin through 5.2.3 Two-Factor Authentication Removal via /config/setphpMyAdmin
- CVE-2026-119428phpMyAdmin through 5.2.3 SSRF via setup/validate.php After Setup DisabledphpMyAdmin
- CVE-2026-119427phpMyAdmin through 5.2.3 SQL Injection via Designer saveSettingphpMyAdmin
- CVE-2026-119425OPNsense 26.1.6 through 26.7.7 Captive Portal Session Takeover via Forged ARPopnsense core
- CVE-2026-119424OPNsense before 26.7.8 Wireless WPA Configuration Line Injection via Identityopnsense core
- CVE-2026-119423OPNsense core before 26.7.8 Lockout IP Planting via WebGUI Login Usernameopnsense core
- CVE-2026-119417CakePHP through 5.4.3 Email Header Injection via Bare CR/LF in SmtpTransport and MailTransportcakephp · cakephp/cakephp
- CVE-2026-119416CakePHP through 5.4.3 Cookie Leakage via HTTP Client CookieCollection Domain Matchingcakephp
- CVE-2026-119415CakePHP through 5.4.3 MIME Header Injection via FormDataPart Content-Typecakephp
- CVE-2026-119414Bitwarden Server before 2026.10.1 Authorization Bypass via POST /api/ciphers/createbitwarden server
- CVE-2026-119378SQLite before 3.54.0 Use-After-Free in R-Tree nodeWrite()SQLite
- CVE-2026-119377SQLite before 3.54.0 Authorizer Bypass via RIGHT or FULL JOIN USINGSQLite
- CVE-2026-119376SQLite before 3.54.0 Stack Exhaustion via COLLATE Operator ChainSQLite
- CVE-2026-119375SQLite before 3.54.0 Information Disclosure via WAL Page Size MismatchSQLite
- CVE-2026-119372SQLite before 3.54.0 Use-After-Free in FTS3 fts3BestSnippet() via snippet()SQLite
- CVE-2026-119371SQLite before 3.54.0 Stack Exhaustion via CTE Chain in selectExpander()SQLite
- CVE-2026-119364ProFTPD through 1.3.9e and 1.3.10rc4 mod_copy Symlink Following Write BypassProFTPD Project ProFTPD
- CVE-2026-119147ProFTPD before 1.3.9e and 1.3.10rc5 mod_sftp Copy-File Authorization BypassProFTPD Project ProFTPD
- CVE-2026-119146ProFTPD before 1.3.9e and 1.3.10rc5 Buffer Overflow via mod_rewrite utf8trans RewriteMapProFTPD Project ProFTPD
- CVE-2026-22114Missing brute-force protection for web interfaceDelta Electronics Delta UFC500
- CVE-2026-97209Insecure temporary file in mix deps.partition lets a local user execute code in another user's dependency buildelixir-lang elixir
- CVE-2026-115274Unbounded integer parsing in JSON.decode/1 enables CPU and memory exhaustion denial of service in Elixirelixir-lang elixir
- CVE-2026-109821Unbounded port parsing in URI.parse/1 enables CPU exhaustion denial of service in Elixirelixir-lang elixir
- CVE-2026-59385Space Developer can extract space-scoped broker credentialsCAPI · Cloud Foundry CF Deployment
- CVE-2026-59388Cloud Controller exposes secrets in audit logCloud Foundry Foundation CAPI · Cloud Foundry Foundation cf…
- CVE-2026-59386Credential exposure to space supporterCloud Foundry Controller · Cloud Foundry cf-deployment
- CVE-2026-64618Apache Fineract: SQL injection vulnerability in Search APIApache Software Foundation Apache Fineract
- CVE-2026-59396DoS Vulnerability in UAA Related to JWKS URI HandlingCloud Foundry UAA · Cloud Foundry cf-deployment
- CVE-2026-115456Gcc: out-of-bounds read in std::from_charsRed Hat Enterprise Linux · Red Hat Hardened Images +1
- CVE-2026-65874Apache Fineract: SQL injection via ORDER BY parameters in the Center and datatables endpointsApache Software Foundation Apache Fineract
- CVE-2026-115455Gcc: stack overflow in std::bitset on libstdc++Red Hat Enterprise Linux · Red Hat Hardened Images +1
- CVE-2026-114691Gcc: integer wrap in `stdRed Hat Enterprise Linux · Red Hat Hardened Images +1
- CVE-2026-114690Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `stdRed Hat Enterprise Linux · Red Hat Hardened Images +1
- CVE-2026-118593Kernel: local_bh imbalance in seg6_input_core() drop path (incomplete fix for cve-2026-46099)Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-118952Kroxylicious-authorizer-acl: kroxylicious: acl prefix matching can bypass authorization rulesRed Hat streams for Apache Kafka
- CVE-2026-118165Firelight Lightbox < 2.3.23 - Contributor+ Stored XSS via Lightbox Link 'href' AttributeFirelight Lightbox
- CVE-2026-118101BuddyForms < 2.10.1 - Subscriber+ Arbitrary Post ModificationBuddyForms
- CVE-2026-118100BuddyForms < 2.10.3 - Unauthenticated Form Configuration DisclosureBuddyForms
- CVE-2026-118072Fraud Prevention For WooCommerce and EDD < 2.3.6 - Subscriber+ Arbitrary Customer BlacklistingFraud Prevention For WooCommerce and EDD
- CVE-2026-118071Joinchat 6.3.2 - 6.4.1 - Author+ Stored XSS via Button Block Message AttributeJoinchat
- CVE-2026-117572WP Visitor Statistics (Real Time Traffic) < 8.8 - Admin+ SQLi via 'order' ParameterWP Visitor Statistics
- CVE-2026-115277WP User Frontend < 4.3.14 - Reflected XSS via 'field_attr' ParameterUser Frontend
- CVE-2026-114444Security by CleanTalk < 2.191 - Admin+ Sensitive Data Disclosure via FSWatcher File ViewerSecurity Plugin, Firewall & Malware Scanner with Auto Remov…
- CVE-2026-119087Content Egg <= 12.0.0 - Missing Authorization to Authenticated (Author+) Administrator-Authored Post Creation via 'preset_id' Parameterkeywordrush Content Egg – Affiliate Product Importer & Pric…
- CVE-2026-119059Content Egg <= 12.0.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Meta Modification via 'post_id' Parameter via…keywordrush Content Egg – Affiliate Product Importer & Pric…
- CVE-2026-118634Events Made Easy <= 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width' Shortcode Attributeliedekef Events Made Easy
- CVE-2026-118500Cool FormKit Lite <= 2.7.9 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Form Field custom_id Parametercoolplugins Cool FormKit Lite – Advanced Form Builder for E…
- CVE-2026-118698JoomSport <= 5.7.14 - Authenticated (Contributor+) SQL Injection via 'pgroup' Shortcode Attributebeardev JoomSport – for Sports: Team & League, Football, Ho…
- CVE-2026-118194Page and Post Restriction <= 1.6.1 - Unauthenticated Authentication Bypass via REST API Nonce Bypass via Cookie Re-Authenticationcyberlord92 Page and Post Restriction
- CVE-2026-5461Forminator Forms <= 1.55.0.2 - Unauthenticated Limited File Deletion via Draft Upload Metadatawpmudev Forminator Forms – Contact Form, Payment Form & Cus…
- CVE-2026-107250ECA Helper - Critical - Unsupported - SA-CONTRIB-2026-193Drupal ECA Helper
- CVE-2026-107251Entity Reference Manager (Merge entities) - Critical - Access bypass - SA-CONTRIB-2026-194Drupal Entity Reference Manager
- CVE-2026-107252MathJax: LaTeX for Drupal - Critical - Cross site scripting - SA-CONTRIB-2026-195MathJax: LaTeX for Drupal
- CVE-2026-107253Orphans Media - Critical - Unsupported - SA-CONTRIB-2026-196Drupal Orphans Media
- CVE-2026-107254Authenticator Login Plus (2FA) - Critical - Improper authentication - SA-CONTRIB-2026-197Drupal Authenticator Login Plus
- CVE-2026-107257Actstream - Critical - Access bypass - SA-CONTRIB-2026-198Drupal Actstream
- CVE-2026-107258Inline Entity Form Dialog - Moderately critical - Access bypass - SA-CONTRIB-2026-199Drupal Inline Entity Form Dialog
- CVE-2026-107259Linked Field - Moderately critical - Server-side template injection - SA-CONTRIB-2026-200Drupal Linked Field
- CVE-2026-107261Authenticator Login Plus (2FA) - Moderately critical - Improper authentication - SA-CONTRIB-2026-201Drupal Authenticator Login Plus
- CVE-2026-107263Gutenberg - Moderately critical - Access bypass - SA-CONTRIB-2026-202Drupal Gutenberg
- CVE-2026-107264Inline Formatter Field - Moderately critical - Server-side template injection - SA-CONTRIB-2026-203Drupal Inline Formatter Field
- CVE-2026-107265Leaflet - Moderately critical - Cross site scripting - SA-CONTRIB-2026-204Drupal Leaflet
- CVE-2026-107266Views Share - Moderately critical - Access bypass - SA-CONTRIB-2026-205Drupal Views Share
- CVE-2026-96389Xray Audit - Moderately critical - Access bypass - SA-CONTRIB-2026-206Drupal Xray Audit
- CVE-2026-107268Two Factor Authentication - TFA / Passwordless Login - Moderately critical - Information disclosure - SA-CONTRIB-2026-207Drupal Two Factor Authentication - TFA / Passwordless Login
- CVE-2026-107267DKAN - Moderately critical - Access bypass - SA-CONTRIB-2026-208Drupal DKAN
- CVE-2026-107306Menu Link Attributes - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-209Drupal Menu Link Attributes
- CVE-2026-107307SmartLinker AI - Moderately critical - Information disclosure - SA-CONTRIB-2026-210Drupal SmartLinker AI
- CVE-2026-107308Country - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-211Drupal Country
- CVE-2026-107309Easy Breadcrumb - Moderately critical - Information disclosure - SA-CONTRIB-2026-212Drupal Easy Breadcrumb
- CVE-2026-107310Freelinking - Moderately critical - Information Disclosure - SA-CONTRIB-2026-213Drupal Freelinking
- CVE-2026-107311Permissions by Term - Moderately critical - Information disclosure - SA-CONTRIB-2026-214Drupal Permissions by Term
- CVE-2026-107312Examples for Developers - Less critical - Allocation of resources without limits or throttling - SA-CONTRIB-2026-215Drupal Examples for Developers
- CVE-2026-107255Restrict route by IP - Critical - Access bypass - SA-CONTRIB-2026-216Drupal Restrict route by IP
- CVE-2026-107262Advanced Filesystem - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2026-217Drupal Advanced Filesystem
- CVE-2026-108097Drupal core - Critical - Remote code execution - SA-CORE-2026-014Drupal core
- CVE-2026-110738Gin Admin Theme - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-219Drupal Gin Admin Theme
- CVE-2026-108515Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-015Drupal core
- CVE-2026-108514Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-016Drupal core
- CVE-2026-108099Entity List - Critical - Remote code execution - SA-CONTRIB-2026-218Drupal Entity List
- CVE-2026-114523Ffmpeg Image Toolkit - Highly critical - Remote Code Execution - SA-CONTRIB-2026-220Drupal Ffmpeg Image Toolkit
- CVE-2026-114527UI Icons - Critical - Cross site scripting - SA-CONTRIB-2026-221Drupal UI Icons
- CVE-2026-114528Zero Point - Critical - Cross-site scripting - SA-CONTRIB-2026-222Drupal Zero Point
- CVE-2026-114526Black Hole - Critical - Cross-site scripting - SA-CONTRIB-2026-223Drupal Black Hole
- CVE-2026-114525ABC - Critical - Cross-site scripting - SA-CONTRIB-2026-224Drupal ABC
- CVE-2026-114524Custom Formatters - Critical - Remote code execution - SA-CONTRIB-2026-225Drupal Custom Formatters
- CVE-2026-114529CSV Field - Moderately critical - Cross site Scripting - SA-CONTRIB-2026-226Drupal CSV Field
- CVE-2026-114530Dopup - Critical - Information disclosure - SA-CONTRIB-2026-227Drupal Dopup
- CVE-2026-114531Swiper formatter - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-228Drupal Swiper formatter
- CVE-2026-107260Sector Distribution - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-229Drupal Sector Distribution
- CVE-2026-114532UI Icons - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-230Drupal UI Icons
- CVE-2026-114533Ágora Transparency Theme - Moderately critical - Information disclosure - SA-CONTRIB-2026-231Drupal Ágora Transparency Theme
- CVE-2026-114534Block Attributes - Moderately critical - Cross site Scripting - SA-CONTRIB-2026-232Drupal Block Attributes
- CVE-2026-114535Swiper formatter - Moderately critical - Information disclosure - SA-CONTRIB-2026-233Drupal Swiper formatter
- CVE-2026-114536USWDS Paragraph Components - Moderately critical - Cross site scripting - SA-CONTRIB-2026-234Drupal USWDS Paragraph Components
- CVE-2026-114537View Unpublished - Moderately critical - Access bypass - SA-CONTRIB-2026-235Drupal View Unpublished
- CVE-2026-114538Bootstrap - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-236Drupal Bootstrap
- CVE-2026-114539DocCheck Basic - Moderately critical - Access bypass - SA-CONTRIB-2026-237Drupal DocCheck Basic
- CVE-2026-114540Domain - Moderately critical - Access bypass - SA-CONTRIB-2026-238Drupal Domain
- CVE-2026-114543Simple User Management - Moderately critical - Access bypass - SA-CONTRIB-2026-239Drupal Simple User Management
- CVE-2026-114541Frontend Editing - Moderately critical - Cross-Site Request Forgery (CSRF) - SA-CONTRIB-2026-240Drupal Frontend Editing
- CVE-2026-114553Frontend Editing - Less critical - Access bypass - SA-CONTRIB-2026-241Drupal Frontend Editing
- CVE-2026-114542Simple OAuth (OAuth2) & OpenID Connect - Moderately critical - Access bypass - SA-CONTRIB-2026-242Drupal Simple OAuth (OAuth2) & OpenID Connect · drupal/simp…
- CVE-2026-114544Media Bulk Upload - Moderately critical - Access bypass - SA-CONTRIB-2026-243Drupal Media Bulk Upload
- CVE-2026-114545Fullcalendar View - Moderately critical - Access bypass - SA-CONTRIB-2026-244Drupal Fullcalendar View
- CVE-2026-114546Media Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-245Drupal Media Alias Display
- CVE-2026-114547TinyPNG - Moderately critical - Information disclosure - SA-CONTRIB-2026-246Drupal TinyPNG · drupal/tinypng
- CVE-2026-114548ImageAPI Optimize WebP - Moderately critical - Information disclosure - SA-CONTRIB-2026-247Drupal ImageAPI Optimize WebP
- CVE-2026-107256Shield - Moderately critical - Access bypass - SA-CONTRIB-2026-248Drupal Shield
- CVE-2026-114572Domain Login Restrict - Moderately critical - Access bypass - SA-CONTRIB-2026-249Drupal Domain Login Restrict
- CVE-2026-114555Data field - Moderately critical - Cross site scripting - SA-CONTRIB-2026-250Drupal Data field
- CVE-2026-114554AI File to Text - Moderately critical - Access bypass - SA-CONTRIB-2026-251Drupal AI File to Text
- CVE-2026-114571Rabbit Hole - Moderately critical - Access Bypass - SA-CONTRIB-2026-252Drupal Rabbit Hole
- CVE-2026-114573Monster Menus - Critical - PHP object injection - SA-CONTRIB-2026-253Drupal Monster Menus
- CVE-2026-118539Commerce Core - Highly critical - Access bypass - SA-CONTRIB-2026-254Drupal Commerce Core · drupal/commerce
- CVE-2026-118540Commerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-255Drupal Commerce Core · drupal/commerce
- CVE-2026-118541Commerce Core - Less critical - Access bypass - SA-CONTRIB-2026-256Drupal Commerce Core · drupal/commerce
- CVE-2026-118542Commerce Core - Moderately critical - Access bypass - SA-CONTRIB-2026-257Drupal Commerce Core · drupal/commerce
- CVE-2026-118543Commerce Core - Moderately critical - Cross-site request forgery - SA-CONTRIB-2026-258Drupal Commerce Core · drupal/commerce
- CVE-2026-118544Commerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-259Drupal Commerce Core · drupal/commerce
- CVE-2026-118555Commerce License - Moderately critical - Access bypass - SA-CONTRIB-2026-260Drupal Commerce License · drupal/commerce_license
- CVE-2026-118556Commerce Shipping - Moderately critical - Access bypass - SA-CONTRIB-2026-261Drupal Commerce Shipping · drupal/commerce_shipping
- CVE-2026-118557Commerce Shipping - Less critical - Access bypass - SA-CONTRIB-2026-262Drupal Commerce Shipping · drupal/commerce_shipping
- CVE-2026-118558Commerce Stripe - Critical - Cross-site request forgery - SA-CONTRIB-2026-263Drupal Commerce Stripe · drupal/commerce_stripe
- CVE-2026-118559Commerce Stripe - Moderately critical - Improper verification of cryptographic signature - SA-CONTRIB-2026-264Drupal Commerce Stripe · drupal/commerce_stripe
- CVE-2026-118560Commerce Stripe - Moderately critical - Cross site scripting - SA-CONTRIB-2026-265Drupal Commerce Stripe · drupal/commerce_stripe
- CVE-2026-118545AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-266Drupal AI · drupal/ai
- CVE-2026-118546AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-267Drupal AI · drupal/ai
- CVE-2026-118548AI (Artificial Intelligence) - Moderately critical - Information disclosure - SA-CONTRIB-2026-268Drupal AI · drupal/ai
- CVE-2026-118549AI (Artificial Intelligence) - Critical - Cross-site scripting - SA-CONTRIB-2026-269Drupal AI · drupal/ai
- CVE-2026-118550AI (Artificial Intelligence) - Moderately critical - Access bypass - SA-CONTRIB-2026-270Drupal AI · drupal/ai
- CVE-2026-118551AI (Artificial Intelligence) - Less critical - Information Disclosure - SA-CONTRIB-2026-271Drupal AI · drupal/ai
- CVE-2026-118552AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-272Drupal AI · drupal/ai
- CVE-2026-118553AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-273Drupal AI · drupal/ai
- CVE-2026-118561Single Content Sync - Critical - External control of file name or path - SA-CONTRIB-2026-274Drupal Single Content Sync · drupal/single_content_sync
- CVE-2026-118562Single Content Sync - Critical - Remote code execution - SA-CONTRIB-2026-275Drupal Single Content Sync · drupal/single_content_sync
- CVE-2026-118563CacheFlush - Critical - Unsupported - SA-CONTRIB-2026-276Drupal CacheFlush · drupal/cacheflush
- CVE-2026-118564PayUmoney for Drupal Commerce - Critical - Unsupported - SA-CONTRIB-2026-277PayUmoney for Drupal Commerce · drupal/commerce_payumoney
- CVE-2026-118565GroupEx PRO ( Daxko ) integration - Critical - Unsupported - SA-CONTRIB-2026-278Drupal GroupEx PRO ( Daxko ) integration · drupal/groupexp…
- CVE-2026-118582CAPTCHA - Moderately critical - Session Replay (CAPTCHA bypass) - SA-CONTRIB-2026-281Drupal CAPTCHA · drupal/captcha
- CVE-2026-118569Fasttoggle - Moderately critical - Access bypass - SA-CONTRIB-2026-282Drupal Fasttoggle · drupal/fasttoggle
- CVE-2026-118570Fasttoggle - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2026-283Drupal Fasttoggle · drupal/fasttoggle
- CVE-2026-118574S3 File System - Moderately critical - Access bypass - SA-CONTRIB-2026-279Drupal S3 File System · drupal/s3fs
- CVE-2026-118567Bulk Update User Roles - Moderately critical - Incorrect authorization - SA-CONTRIB-2026-280Drupal Bulk Update User Roles · drupal/bulk_update_user_rol…
- CVE-2026-118572OAuth Login - OAuth OIDC SSO - Critical - Authentication bypass - SA-CONTRIB-2026-284Drupal OAuth Login - OAuth OIDC SSO · drupal/oauth_login_oa…
- CVE-2026-118575Signature pad widget - Critical - Cross-site scripting - SA-CONTRIB-2026-285Drupal Signature pad widget · drupal/sign_widget
- CVE-2026-118576Stage File Proxy - Critical - Cross-site scripting - SA-CONTRIB-2026-286Drupal Stage File Proxy · drupal/stage_file_proxy
- CVE-2026-118554OpenID Connect Client - Moderately critical - Improper authentication - SA-CONTRIB-2026-287Drupal OpenID Connect Client · drupal/oidc
- CVE-2026-118583Field Permissions - Moderately critical - Access bypass - SA-CONTRIB-2026-288Drupal Field Permissions · drupal/field_permissions
- CVE-2026-118584Field Permissions - Moderately critical - Access bypass - SA-CONTRIB-2026-289Drupal Field Permissions · drupal/field_permissions
- CVE-2026-118573OAuth2 Token Manager - Critical - Access bypass - SA-CONTRIB-2026-290Drupal OAuth2 Token Manager · drupal/oauth2_token_manager
- CVE-2026-118568Content Sync (content-sync.io) - Moderately critical - Information disclosure - SA-CONTRIB-2026-291Drupal Content Sync · drupal/cms_content_sync
- CVE-2026-118571Media Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-292Drupal Media Alias Display · drupal/media_alias_display
- CVE-2026-74915GPU DDK - OOB write in UntwiddlePOTSquare64bppImagination Technologies Graphics DDK
- CVE-2026-74912GPU DDK - Fix for CVE-2026-49746 prevents the mapping of graphics buffers > 4GBImagination Technologies Graphics DDK
- CVE-2026-19199GPU DDK - OOB write due to freelist size integer overflow in RGXCreateHWRTDataSetImagination Technologies Graphics DDK
- CVE-2026-18629GPU DDK - libusc.so NPD due to integer overflow at ConvertSwitchToArrayLookup during WebGPU shader compilationImagination Technologies Graphics DDK
- CVE-2026-65587GPU DDK - OOB write in CalculateNPOTTwiddleSparsePageMap via TEXTURE_BASE_LEVEL changeImagination Technologies Graphics DDK
- CVE-2026-65586GPU DDK - Write UAF due to missing cleanup reference for abort command submitted via PVRSRVRGXKickTA3DKMImagination Technologies Graphics DDK
- CVE-2026-65584GPU DDK - Stack Buffer Overflow via undersized UFO address array in DumpStalledContextInfoImagination Technologies Graphics DDK
- CVE-2026-118475Eog: eye of gnome: buffer overrun when parsing malicious png files with non-standard iccp chunkRed Hat Enterprise Linux
- CVE-2026-112922Ghostscript: out-of-bounds read in ghostscript shade_next_color via integer overflow of indexed color index in mesh shadingRed Hat Enterprise Linux
- CVE-2026-15466GPU DDK - Write UAF due to a race condition caused by insufficient locking in PVRSRVRGXCloseHWPerfClientStreamKM()Imagination Technologies Graphics DDK
- CVE-2026-91920Undertow: undertow: chunkreader message length permits chunk-size overflowRed Hat build of Apache Camel for Spring Boot · Red Hat… +3
- CVE-2026-112605This issue was addressed with improved handling of symlinks.Apple Xcode
- CVE-2026-112602An authorization issue was addressed with improved state management.Apple Xcode
- CVE-2026-110133Ghostscript: heap buffer overflow in ghostscript truetype outliner due to npointstotal integer underflow during retry rollbackRed Hat Enterprise Linux
- CVE-2026-118959Keycloak-services: keycloak-services: required actions bypassed via kc_action parameterRed Hat Build of Keycloak · Red Hat Single Sign-On
- CVE-2026-118947Keycloak-services: keycloak-services: authorization bypass via uma resource registration idorRed Hat Build of Keycloak · Red Hat Single Sign-On
- CVE-2026-119272Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to read memory inside the sandbox via a…Google Chrome
- CVE-2026-76027Memory corruption in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to read memory via a crafted HTML page.Google Chrome
- CVE-2026-76024Memory corruption in MediaStream in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially read memory inside the…Google Chrome
- CVE-2025-49602An issue was discovered in Keyfactor EJBCA 9.
- CVE-2026-117028Skuul School Management System through version 2.6.5 is vulnerable to incorrect access control in the ResultChecker::checkResult method.
- CVE-2026-117182An authenticated cross-site scripting (XSS) vulnerability in the /spina/embeddable.rb component of Spina CMS v2.21.0 allows attackers to…
- CVE-2026-117183A path traversal vulnerability in the FeaturedImage component of astro-notion-blog 0.13.0 allows attackers to escape the intended…
- CVE-2026-117184An issue in the GraphQL endpoint of traggo server v0.8.3 allows attackers to cause a Denial of Service (DoS) via a crafted POST request to…
- CVE-2026-117346Bitcoin Core through 31.1 is vulnerable to Denial of Service via undo files having no size limit
- CVE-2026-117349Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.
- CVE-2026-117350Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.
- CVE-2026-37468Cross Site Scripting vulnerability in BeeHome MyBeeHome before 2025-11-01 allows a remote attacker to execute arbitrary code via the…